Model Checking Software

This volume contains the proceedings of the 16th International SPIN Workshop on Model Checking of Software (SPIN 2009), that was held at the Grenoble World Trade Center, in Grenoble, France, June 26-28, 2009. The workshop was co-located with the 21st International Conference on Computer-Aided Veri?- tion (CAV 2009). The SPIN workshopis a forum for practitioners and researchersinterested in themodelchecking-basedanalysisofsoftwaresystems.Thefocusoftheworkshop is on theoretical advances and empirical evaluations related to state-space and path exploration techniques, as implemented in the SPIN model checker and other software veri?cation tools. The workshop aims to encourage interactions and exchanges of ideas with all related areasin software engineering. SPIN 2009 was the 16th event in the workshop series, which started in 1995. This year,wereceived41 submissions (34technical papersand 7 toolpapers) out of which 18 papers were accepted (15 technical papers and 3 tool papers). Each submission was reviewed by three Program Committee members.In addition to the refereed papers, the workshop featured four invited talks given by Patrice Godefroid, from Microsoft Research, USA, on "Software Model CheckingImprovingSecurityofaBillionComputers,"MartaKwiatkowska,from Oxford University, UK, "On Quantitative Software Veri?cation," Joseph Sifakis (recipient of the Turing Award 2007), from VERIMAG, France, on "The Quest for Correctness - Beyond a posteriori Veri?cation," and Willem Visser, from the University of Stellenbosch, South Africa, on "Who Really Cares if the Program Crashes?" We would like to thank the authors of submitted papers, the invited spe- ers, the Program Committee members, the external reviewers, and the Steering