Creating implementations from Promela models. - Siedfried Löffler; Ahmed Serhrouchni (The Spin Verification System, 1996)