The model checker SPIN | IEEE Journals & Magazine | IEEE Xplore