Comparison of SPIN and VIS for protocol verification