Model checking active networks with SPIN | Publicación