Model Checking Software (Springer)