Principles of Model Checking | AMiner