"On the fly" verification tools such as SPIN are useful but are limited by the "state space problem." The state space of a model consists of the number of global states the model may have. With a model of any complexity, the state space becomes so large that even the largest computer ...