Related Links
The
Tropos
project.
The
NuSMV
symbolic model checker.
The
KAOS
project.
...