Theoretical and Practical Aspects of SPIN Model Checking