ProB: A Model Checker for B.

Michael Leuschel, Michael J. Butler

Browse the full FM paper archive.