https://123dok.com/id/docs/the-mit-press-principles-of-model-checking.9604779