PRISM (model checker)

Summary