Orpheus: A Self-Checking Translation Tool Arrangement for Flight Critical Hardware
Modeling and Validating Hybrid Systems using VDM and Mathematica
Formal Analysis of the Remote Agent Before and After Flight
Timing Analysis by Model Checking
Modeling the Fault Tolerant Capability of a Flight Control System: An Exercise in SCR Specification
Applying the SCR Requirements Method to a Simple Autopilot
Reuse of a Formal Model for Requirements Validation
Proving Properties of Accidents
Modeling and Validating SAFER in VDM-SL
Introduction to Penelope and Its Applications
Fundamental Hardware Design in PVS
Domain Checking Z Specifications
An Informal Introduction to Formal Methods
Formalization and Analysis of the Separation Minima for Aircraft in the North Atlantic Region