File:Principles of Model Checking.jpg