This paper reports the results of specifying and verifying the steam boiler problem with Promela/SPIN. Several models of the system have been produced with different degrees of completeness. Each model represents an abstract level for capturing the origina ...
Springer-Verlag1996