Stav dette: Verification of infinite-state systems with applications to security