Formal Analysis of a Space-Craft Controller Using SPIN.Published in:IEEE Transactions on Software Engineering, 2001, v. 27, n. 8, p. 749, doi. 10.1109/32.940728By:Havelund, Klaus;Lowry, Mike;Penix, JohnPublication type:Article