Joseph Sifakis

Unknown link: SymbolicModelChecking