A.  Gargantini, Riccobene, E., and Rinzivillo, S., ?Using Spin to Generate Tests from ASM Specifications?, in Abstract State Machines, 2003, pp. 263-277.