Model Checking Java Programs David Park, Ulrich Stern, Jens Skakkebaek, and David L. Dill Stanford University.
Run-Time Guarantees for Real-Time Systems Reinhard Wilhelm Saarbrücken.
Cheng/Dillon-Software Engineering: Formal Methods Model Checking.
