selected scholarly activity
-
books
- Preface 2020
- Preface 2020
- FM-RAIL-BOK organizers' message. Ed. 8368 LNCS. 2014
- Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics): Preface. Ed. 5256 LNCS. 2008
- Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics): Preface. Ed. 5014 LNCS. 2008
- FM 2008: Formal Methods, 15th International Symposium on Formal Methods, Turku, Finland, May 26-30, 2008, Proceedings. Ed. 5014. 2008
- Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics): Foreword. Ed. 4408 LNCS. 2007
- Formal Methods at the Crossroads. From Panacea to Foundational Support, 10th Anniversary Colloquium of UNU/IIST, the International Institute for Software Technology of The United Nations University, Lisbon, Portugal, March 18-20, 2002, Revised Papers. Ed. 2757. 2003
- Handbook of Logic in Computer Science: Volume 5. Algebraic and Logical Structures 2001
- Automated Software Engineering: Special Issue on Precise Semantics for Software Modeling Techniques. Ed. 7. 2000
- Fundamental Approaches to Software Engineering: Proceedings of FASE 2000 2000
- Handbook of Logic in Computer Science Logic and algebraic methods 2000
- Handbook of Logic in Computer Science: Volume 4. Semantic Modelling 1995
- Handbook of Logic in Computer Science: Volume 3. Semantic Structures 1995
- Handbook of Logic in Computer Science: Volume 2. Background: Computational Structures 1992
- Preface. Ed. 494 LNCS. 1991
- Preface. Ed. 493 LNCS. 1991
- TAPSOFT'91: Proceedings of the International Joint Conference on Theory and Practice of Software Development, Brighton, UK, April 8-12, 1991, Volume 2: Advances in Distributed Computing (ADC) and Colloquium on Combining Paradigms for Software Developmemnt (CCPSD). Ed. 494. 1991
- The Specification of Computer Programs 1987
-
chapters
- Towards Making Safety Case Arguments Explicit, Precise, and Well Founded. 227-258. 2021
- A General Method for Composing an Engineering HB. SpringerBriefs in Computer Science. 23-40. 2020
- Application of the General Method to the Railway Domain. SpringerBriefs in Computer Science. 41-53. 2020
- Conclusions and Prospects for Future Work. SpringerBriefs in Computer Science. 77-78. 2020
- Example HB Entry of a Formal Method for the Railway Domain — Step 6. SpringerBriefs in Computer Science. 57-75. 2020
- Introduction and Motivation. SpringerBriefs in Computer Science. 3-11. 2020
- Related Work. SpringerBriefs in Computer Science. 13-20. 2020
- New standards for trustworthy cyber-physical systems. 337-367. 2016
- Verifying trustworthy cyber-physical systems using closed-loop modeling. 199-235. 2016
- Category theory and model-driven engineering: From formal semantics to design patterns and beyond. 175-204. 2014
- End To End Development Engineering. 21-70. 2014
- Separating Safety and Control Systems to Reduce Complexity. 85-102. 2012
- Erratum to: Challenges in Software Certification. Lecture Notes in Computer Science. E1-E1. 2007
- Temporal Specifications of Component Based Systems with Polymorphic Dynamic Reconfiguration. 1-33. 2006
- In Memoriam Armando Martín Haeberer. Lecture Notes in Computer Science. 1-25. 2003
-
conferences
- On the Construction of Engineering Handbooks. SpringerBriefs in Computer Science. VII-VIII. 2020
- On the construction of engineering handbooks: With an illustration from the railway safety domain. SpringerBriefs in Computer Science. 2020
- Assurance via model transformations and their hierarchical refinement. Proceedings of the 21th ACM/IEEE International Conference on Model Driven Engineering Languages and Systems. 426-436. 2018
- Toward Product Lines of Mathematical Models for Software Model Management. Lecture Notes in Computer Science. 200-216. 2018
- A graph transformation approach to introducing aspects into software architectures. CEUR Workshop Proceedings. 54-63. 2017
- Safety Case Impact Assessment in Automotive Software Systems: An Improved Model-Based Approach. Lecture Notes in Computer Science. 69-85. 2017
- Use of Tabular Expressions for Refinement Automation. Lecture Notes in Computer Science. 167-182. 2017
- 2016 8th International Conference on Information and Knowledge Technology, IKT 2016. 2016 8th International Conference on Information and Knowledge Technology, IKT 2016. 2016
- A model management approach for assurance case reuse due to system evolution. Proceedings of the ACM/IEEE 19th International Conference on Model Driven Engineering Languages and Systems. 196-206. 2016
- Consistency checking of clinical practice guidelines with MITDL. 2016 Eighth International Conference on Information and Knowledge Technology (IKT). 281-287. 2016
- Hierarchical Multiset Theories of Cardinality-Based Feature Diagrams. 2016 10th International Symposium on Theoretical Aspects of Software Engineering (TASE). 136-143. 2016
- A (Proto) Logical Basis for the Notion of a Structured Argument in a Safety Case. Lecture Notes in Computer Science. 1-17. 2016
- Elementary model management patterns. CEUR Workshop Proceedings. 11-15. 2016
- Heterogeneous megamodel slicing for model evolution. CEUR Workshop Proceedings. 50-59. 2016
- Model Management for Regulatory Compliance: a position paper. 2016 IEEE/ACM 8TH INTERNATIONAL WORKSHOP ON MODELING IN SOFTWARE ENGINEERING (MISE). 74-80. 2016
- Towards a Body of Knowledge in Formal Methods for the Railway Domain: Identification of Settled Knowledge. Communications in Computer and Information Science. 87-102. 2016
- Stateflow to Tabular Expressions. Proceedings of the Sixth International Symposium on Information and Communication Technology. 312-319. 2015
- A Model Management Imperative: Being Graphical Is Not Sufficient, You Have to Be Categorical. Lecture Notes in Computer Science. 154-170. 2015
- A Propositional Tableaux Based Proof Calculus for Reasoning with Default Rules. Lecture Notes in Computer Science. 6-21. 2015
- Analysis of source-to-target model transformations in QueST. CEUR Workshop Proceedings. 46-55. 2015
- Formalizing the Cardiac Pacemaker Resynchronization Therapy. Lecture Notes in Computer Science. 374-386. 2015
- Is Current Incremental Safety Assurance Sound?. Lecture Notes in Computer Science. 397-408. 2015
- Modeling Product Lines with Kripke Structures and Modal Logic. Lecture Notes in Computer Science. 184-202. 2015
- Stepwise Formal Modelling and Reasoning of Insulin Infusion Pump Requirements. Lecture Notes in Computer Science. 387-398. 2015
- The Semantics of Cardinality-Based Feature Models via Formal Languages. Lecture Notes in Computer Science. 453-469. 2015
- What Is a Derived Signature Morphism?. Lecture Notes in Computer Science. 90-109. 2015
- syntMaskFT: A Tool for Synthesizing Masking Fault-Tolerant Programs from Deontic Specifications. Lecture Notes in Computer Science. 188-193. 2015
- Argument Evaluation in the Context of Assurance Case Confidence Modeling. 2014 IEEE International Symposium on Software Reliability Engineering Workshops. 485-490. 2014
- The Definition and Assessment of a Safety Argument. 2014 IEEE International Symposium on Software Reliability Engineering Workshops. 180-185. 2014
- A Heterogeneous Characterisation of Component-Based System Design in a Categorical Setting. Lecture Notes in Computer Science. 314-332. 2014
- A query structured approach to model transformation. CEUR Workshop Proceedings. 54-63. 2014
- A separation principle for embedded system interfacing. Lecture Notes in Computer Science. 373-388. 2014
- Analyzing Clinical Practice Guidelines Using a Decidable Metric Interval-Based Temporal Logic. Lecture Notes in Computer Science. 611-626. 2014
- Combining Static and Dynamic Impact Analysis for Large-Scale Enterprise Systems. Lecture Notes in Computer Science. 224-238. 2014
- Formalizing the Glucose Homeostasis Mechanism. Lecture Notes in Computer Science. 460-471. 2014
- Impact Analysis via Reachability and Alias Analysis. Lecture Notes in Business Information Processing. 261-270. 2014
- What IS a BoK? Large – Extended Abstract –. Lecture Notes in Computer Science. 184-188. 2014
- Taking a page from the law books: Considering evidence weight in evaluating assurance case confidence. 2013 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW). 387-390. 2013
- Safety cases: A review of challenges. 2013 1st International Workshop on Assurance Cases for Software-Intensive Systems (ASSURE). 1-6. 2013
- Improving Test Generation under Rich Contracts by Tight Bounds and Incremental SAT Solving. 2013 IEEE Sixth International Conference on Software Testing, Verification and Validation. 21-30. 2013
- A Categorical Approach to Structuring and Promoting Z Specifications. Lecture Notes in Computer Science. 73-91. 2013
- Characterizing Fault-Tolerant Systems by Means of Simulation Relations. Lecture Notes in Computer Science. 428-442. 2013
- Large-Scale Enterprise Systems: Changes and Impacts. Lecture Notes in Business Information Processing. 274-290. 2013
- Mapping-Aware Megamodeling: Design Patterns and Laws. Lecture Notes in Computer Science. 322-343. 2013
- Satisfiability Calculus: The Semantic Counterpart of a Proof Calculus in General Logics. Lecture Notes in Computer Science. 195-211. 2013
- Synthesizing Masking Fault-Tolerant Systems from Deontic Specifications. Lecture Notes in Computer Science. 163-177. 2013
- Architecture Based Development with DYNACOMM: Incorporating Dynamic Reconfiguration and Hierarchical Design into CommUnity. Proceedings - Asia-Pacific Software Engineering Conference, APSEC. 493-498. 2012
- Change impact analysis for large-scale enterprise systems. ICEIS 2012 - Proceedings of the 14th International Conference on Enterprise Information Systems. 359-368. 2012
- An Event-B Approach to Timing Issues Applied to the Generic Insulin Infusion Pump. Lecture Notes in Computer Science. 160-176. 2012
- Intermodeling, Queries, and Kleisli Categories. Lecture Notes in Computer Science. 163-177. 2012
- Positioning verification in the context of software/system certification. Electronic Communications of the EASST. 2012
- Specifying and Verifying Declarative Fluent Temporal Logic Properties of Workflows. Lecture Notes in Computer Science. 147-162. 2012
- Towards a First-Order Deontic Action Logic. Lecture Notes in Computer Science. 61-75. 2012
- Software certification experience in the canadian nuclear industry. Proceedings of the ninth ACM international conference on Embedded software. 219-225. 2011
- 2nd Software Certification Consortium Workshop: Theoretical Basis for System and Software Engineering Practices and Certification.. CASCON. 375-376. 2011
- Software Certification: Is There a Case against Safety Cases?. Lecture Notes in Computer Science. 206-227. 2011
- Certification of Software-Driven Medical Devices. Lecture Notes in Computer Science. 293-295. 2010
- Characterizing Locality (Encapsulation) with Bisimulation. Lecture Notes in Computer Science. 322-336. 2010
- On Software Certification: We Need Product-Focused Approaches. Lecture Notes in Computer Science. 250-274. 2010
- Software certification consortium. Proceedings of the 2010 Conference of the Center for Advanced Studies on Collaborative Research - CASCON '10. 434-434. 2010
- Towards Managing Dynamic Reconfiguration of Software Systems in a Categorical Setting. Lecture Notes in Computer Science. 306-321. 2010
- Describing and Analyzing Behaviours over Tabular Specifications Using (Dyn)Alloy. Lecture Notes in Computer Science. 155-170. 2009
- Reasoning about System-Degradation and Fault-Recovery with Deontic Logic. Lecture Notes in Computer Science. 25-43. 2009
- Specifying and Verifying Business Processes Using PPML. Lecture Notes in Computer Science. 737-756. 2009
- A Formal Descriptive Semantics of UML.. ICFEM. 375-396. 2008
- A Formal Soundness Proof of Region-Based Memory Management for Object-Oriented Paradigm.. ICFEM. 126-146. 2008
- A Model Checking Language for Concurrent Value-Passing Systems.. FM. 148-164. 2008
- A Practical Approach to Partiality - A Proof Based Approach.. ICFEM. 238-257. 2008
- A Process Semantics for BPMN.. ICFEM. 355-374. 2008
- A Representative Function Approach to Symmetry Exploitation for CSP Refinement Checking.. ICFEM. 258-277. 2008
- A Rigorous Approach to Networking: TCP, from Implementation to Protocol to Service.. FM. 294-309. 2008
- A Schedulerless Semantics of TLM Models Written in SystemC Via Translation into LOTOS.. FM. 278-293. 2008
- A Tableaux System for Deontic Action Logic. Lecture Notes in Computer Science. 34-48. 2008
- A Unified Model Checking Approach with Projection Temporal Logic.. ICFEM. 167-186. 2008
- An Approach to Testing with Embedded Context Using Model Checker.. ICFEM. 66-85. 2008
- An Industrial Case: Pitfalls and Benefits of Applying Formal Methods to the Development of a Network-Centric RTOS.. FM. 411-418. 2008
- Application of a Formal Specification Language in the Development of the "Mobile FeliCa" IC Chip Firmware for Embedding in Mobile Phone.. FM. 425-429. 2008
- Aspects and Formal Methods.. FM. 1-11. 2008
- Assume-Guarantee Verification for Interface Automata.. FM. 116-131. 2008
- Automated Verification of Dense-Time MTL Specifications Via Discrete-Time Approximation.. FM. 132-147. 2008
- Checking Well-Formedness of Pure-Method Specifications.. FM. 68-83. 2008
- CoVaC: Compiler Validation by Program Analysis of the Cross-Product.. FM. 35-51. 2008
- Conformance Testing Based on UML State Machines.. ICFEM. 45-65. 2008
- Constraint Prioritization for Efficient Analysis of Declarative Models.. FM. 310-325. 2008
- Contract-Based Reasoning for Verification and Certification of Secure Information Flow Policies in Industrial Workflows.. ICFEM. 3-4. 2008
- Correct Channel Passing by Construction.. ICFEM. 338-354. 2008
- Decomposition for Compositional Verification.. ICFEM. 105-125. 2008
- Finding minimal unsatisfiable cores of declarative specifications. Lecture Notes in Computer Science. 326-341. 2008
- Formal Analysis of the Bakery Protocol with Consideration of Nonatomic Reads and Writes.. ICFEM. 187-206. 2008
- Formal Methods and Software Engineering, 10th International Conference on Formal Engineering Methods, ICFEM 2008, Kitakyushu-City, Japan, October 27-31, 2008. Proceedings. ICFEM. 2008
- Formal Methods for Trustworthy Skies: Building Confidence in the Security of Aircraft Assets Distribution.. FM. 406-410. 2008
- Getting Formal Verification into Design Flow.. FM. 12-32. 2008
- How Can We Make Industry Adopt Formal Methods?. ICFEM. 1-1. 2008
- Incremental Development of a Distributed Real-Time Model of a Cardiac Pacing System Using VDM.. FM. 181-197. 2008
- Industrial Use of Formal Methods for a High-Level Security Evaluation.. FM. 198-213. 2008
- Introducing Objects through Refinement.. FM. 358-373. 2008
- JML Runtime Assertion Checking: Improved Error Reporting and Efficiency Using Strong Validity.. FM. 246-261. 2008
- Lazy Behavioral Subtyping.. FM. 52-67. 2008
- Lessons in the Weird and Unexpected: Some Experiences from Checking Large Real Systems.. FM. 33-33. 2008
- Masking Faults While Providing Bounded-Time Phased Recovery. Lecture Notes in Computer Science. 374-389. 2008
- Modelling and Proof of a Tree-Structured File System in Event-B and Rodin.. ICFEM. 25-44. 2008
- Partial Translation Verification for Untrusted Code-Generators.. ICFEM. 226-237. 2008
- Practical Automated Partial Verification of Multi-paradigm Real-Time Models.. ICFEM. 298-317. 2008
- Precise Interval Analysis vs. Parity Games.. FM. 342-357. 2008
- Probing the Depths of CSP-M: A New fdr-Compliant Validation Tool.. ICFEM. 278-297. 2008
- Program Models for Compositional Verification.. ICFEM. 147-166. 2008
- Programmers Ain't Mathematicians, and Neither Are Testers.. ICFEM. 2-2. 2008
- Proofs and refutations for probabilistic refinement. Lecture Notes in Computer Science. 100-+. 2008
- Provably Correct Runtime Monitoring.. FM. 262-277. 2008
- Requirements Coverage as an Adequacy Measure for Conformance Testing.. ICFEM. 86-104. 2008
- Safe and Reliable Metro Platform Screen Doors Control/Command Systems.. FM. 430-434. 2008
- Secret Ninja Formal Methods.. FM. 214-228. 2008
- Simulation, Orchestration and Logical Clocks.. FM. 34-34. 2008
- Software Engineering with Formal Methods: Experiences with the Development of a Storm Surge Barrier Control System.. FM. 419-424. 2008
- Specification and Checking of Software Contracts for Conditional Information Flow.. FM. 229-245. 2008
- Specifying and Verifying Event-Based Fairness Enhanced Systems.. ICFEM. 5-24. 2008
- Specifying and Verifying Sensor Networks: An Experiment of Formal Methods.. ICFEM. 318-337. 2008
- Towards Abstraction for DynAlloy Specifications.. ICFEM. 207-225. 2008
- Towards Consistent Specifications of Product Families.. FM. 390-405. 2008
- Verification of Mondex Electronic Purses with KIV: From a Security Protocol to Verified Code.. FM. 165-180. 2008
- Verifying Dynamic Pointer-Manipulating Threads.. FM. 84-99. 2008
- An Approach to Integration Testing of Object-Oriented Programs. Proceedings - International Conference on Quality Software. 268-273. 2007
- An ought-to-do deontic logic for reasoning about fault-tolerance: the diarrheic philosophers. Fifth IEEE International Conference on Software Engineering and Formal Methods (SEFM 2007). 151-160. 2007
- FDA: Between Process and Product Evaluation. 2007 Joint Workshop on High Confidence Medical Devices, Software, and Systems and Medical Device Plug-and-Play Interoperability (HCMDSS-MDPnP 2007). 181-186. 2007
- A Complete and Compact Propositional Deontic Logic. Lecture Notes in Computer Science. 109-123. 2007
- A test framework for integration testing of object-oriented programs. Proceedings of the 2007 conference of the center for advanced studies on Collaborative research - CASCON '07. 252-252. 2007
- An approach to integration testing of object-oriented programs. USIC 2007: PROCEEDINGS OF THE SEVENTH INTERNATIONAL CONFERENCE ON QUALITY SOFTWARE. 268-273. 2007
- Challenges in Software Certification. Lecture Notes in Computer Science. 4-18. 2007
- Contract by systems modelling: A case study on the FDA principles of software validation. Proceedings of the 11th IASTED International Conference on Software Engineering and Applications, SEA 2007. 210-215. 2007
- Design in CommUnity with Extension Morphisms. Lecture Notes in Computer Science. 435-466. 2007
- Hardness for Explicit State Software Model Checking Benchmarks. Fifth IEEE International Conference on Software Engineering and Formal Methods (SEFM 2007). 151-+. 2007
- Verifying Temporal Properties of CommUnity Designs. Lecture Notes in Computer Science. 1-20. 2007
- Evaluating the Effectiveness of a Goal-Oriented Requirements Engineering Method. Fourth International Workshop on Comparative Evaluation in Requirements Engineering (CERE'06 - RE'06 Workshop). 8-19. 2006
- Towards specification, modelling and analysis of fault tolerance in self managed systems. Proceedings of the 2006 international workshop on Self-adaptation and self-managing systems. 30-36. 2006
- Extension Morphisms for CommUnity. Lecture Notes in Computer Science. 173-193. 2006
- On specifying systems that connect to the physical world. Frontiers in Artificial Intelligence and Applications. 71-83. 2006
- The Epistemology of Validation and Verification Testing. Lecture Notes in Computer Science. 1-8. 2005
- Towards Dynamically Communicating Abstract Machines in the B Method. Lecture Notes in Computer Science. 141-155. 2005
- Implementing Dynamic Aggregations of Abstract Machines in the B Method. Lecture Notes in Computer Science. 403-417. 2004
- Requirements-Reuse Using GOPCSD: Component-Based Development of Process Control Systems. Lecture Notes in Computer Science. 318-328. 2004
- The GOPCSD Tool: An Integrated Development Environment for Process Control Requirements and Design. Lecture Notes in Computer Science. 261-266. 2004
- Towards a software engineered road for developing process control systems. International Conference on Electrical, Electronic and Computer Engineering, 2004. ICEEC '04.. 303-306. 2004
- On what exactly goes on when software is developed step-by-step, II: The sequel. Information Processing Letters. 45-51. 2003
- A Logical Basis for the Specification of Reconfigurable Component-Based Systems. Lecture Notes in Computer Science. 37-51. 2003
- Armando Martin Haeberer - 4 January 1947-11 February 2003 - In memoriam. Lecture Notes in Computer Science. 1-25. 2003
- Goal-oriented requirements analysis for process control systems design. First ACM and IEEE International Conference on Formal Methods and Models for Co-Design, 2003. MEMOCODE '03. Proceedings.. 45-46. 2003
- Some Institutional Requirements for Temporal Reasoning on Dynamic Reconfiguration of Component Based Systems. Lecture Notes in Computer Science. 407-435. 2003
- Taking Alloy to the Movies. Lecture Notes in Computer Science. 678-697. 2003
- Towards Dynamic Population Management of Abstract Machines in the B Method. Lecture Notes in Computer Science. 528-545. 2003
- Towards the verifying compiler. Lecture Notes in Computer Science. 151-160. 2003
- Where, exactly, is software development?. Lecture Notes in Computer Science. 115-131. 2003
- "What Is an Infrastructure?" Towards an Informatics Answer.. 10th Anniversary Colloquium of UNU/IIST. 173-190. 2002
- A Formal Basis for Some Dependability Notions.. 10th Anniversary Colloquium of UNU/IIST. 191-206. 2002
- A Grand Challenge Proposal for Formal Methods: A Verified Stack.. 10th Anniversary Colloquium of UNU/IIST. 161-172. 2002
- A Theory of Hints in Model Checking.. 10th Anniversary Colloquium of UNU/IIST. 423-438. 2002
- A Tool Architecture for the Next Generation of Uppaal.. 10th Anniversary Colloquium of UNU/IIST. 352-366. 2002
- A temporal logic approach to the specification of reconfigurable component-based systems. Proceedings 17th IEEE International Conference on Automated Software Engineering,. 271-274. 2002
- An Algebraic Approach to the VERILOG Programming.. 10th Anniversary Colloquium of UNU/IIST. 65-80. 2002
- An Executable Specification Language Based on Message Sequence Charts.. 10th Anniversary Colloquium of UNU/IIST. 226-241. 2002
- Combining Decision Procedures.. 10th Anniversary Colloquium of UNU/IIST. 381-422. 2002
- Contract-Based Testing.. 10th Anniversary Colloquium of UNU/IIST. 34-48. 2002
- Coordination Technologies for Just-in-Time Integration.. 10th Anniversary Colloquium of UNU/IIST. 308-321. 2002
- Evidence-based electronic contract performance Monitoring. Group Decision and Negotiation. 469-485. 2002
- Formal Methods within a Totally Functional Approach to Programming.. 10th Anniversary Colloquium of UNU/IIST. 287-307. 2002
- From Formal Techniques to Well-Founded Software Development Methods.. 10th Anniversary Colloquium of UNU/IIST. 132-150. 2002
- Graph-Based Models of Internetworking Systems.. 10th Anniversary Colloquium of UNU/IIST. 242-266. 2002
- How do I trust thee? Let me count the ways. Proceedings First IEEE International Conference on Cognitive Informatics. 23-23. 2002
- In Memoriam Armando Martín Haeberer: 4 January 1947 - 11 February 2003.. 10th Anniversary Colloquium of UNU/IIST. 1-25. 2002
- Interpretability of First—Order Dynamic Logic in a Relational Calculus. Lecture Notes in Computer Science. 66-80. 2002
- Making Timed Automata Communicate.. 10th Anniversary Colloquium of UNU/IIST. 337-351. 2002
- Multi-view Modeling of Software Systems.. 10th Anniversary Colloquium of UNU/IIST. 207-225. 2002
- Real-Time Process Algebra and Its Applications.. 10th Anniversary Colloquium of UNU/IIST. 322-336. 2002
- Real-Time Systems Development with Duration Calculi: An Overview.. 10th Anniversary Colloquium of UNU/IIST. 81-96. 2002
- Software Development by Refinement.. 10th Anniversary Colloquium of UNU/IIST. 267-286. 2002
- The Development of the RAISE Tools.. 10th Anniversary Colloquium of UNU/IIST. 49-64. 2002
- Type Systems for Concurrent Programs.. 10th Anniversary Colloquium of UNU/IIST. 439-453. 2002
- UNU and UNU/IIST.. 10th Anniversary Colloquium of UNU/IIST. 26-33. 2002
- Verification by Abstraction.. 10th Anniversary Colloquium of UNU/IIST. 367-380. 2002
- X2Rel: An XML Relation Language with Formal Semantics.. 10th Anniversary Colloquium of UNU/IIST. 97-114. 2002
- Scientific rigour, an answer to a pragmatic question: a linguistic framework for software engineering. Proceedings - International Conference on Software Engineering. 463-472. 2001
- Towards electronic contract performance. Proceedings - International Workshop on Database and Expert Systems Applications, DEXA. 771-777. 2001
- Mathematical foundations of software engineering. Proceedings of the Conference on The Future of Software Engineering. 161-172. 2000
- A Case Study on Using Automata in Control Synthesis.. FASE. 349-362. 2000
- A Formal Approach to Heterogeneous Software Modeling.. FASE. 178-192. 2000
- A Process Algebra for Real-Time Programs.. FASE. 66-81. 2000
- A model for describing object-oriented systems from multiple perspectives. Lecture Notes in Computer Science. 237-248. 2000
- An Overview of The Mensurae Language: Specifying Business Processes.. Rigorous Object-Oriented Methods. 2000
- Analysing UML Active Classes and Associated State Machines - A Lightweight Formal Approach.. FASE. 127-146. 2000
- Analyzing Non-functional Properties of Mobile Agents.. FASE. 319-333. 2000
- Applying RT-Z to Develop Safety-Critical Systems.. FASE. 51-65. 2000
- Compositional Structuring in the B-Method: A Logical Viewpoint of the Static Context. Lecture Notes in Computer Science. 107-126. 2000
- Essay on Software Engineering at the Turn of Century.. FASE. 1-20. 2000
- Formal Specification of Object-Oriented Meta-modelling.. FASE. 193-207. 2000
- Formal System Development with KIV.. FASE. 363-366. 2000
- Foundations for Software Configuration Management Policies Using Graph Transformations.. FASE. 304-318. 2000
- From Play-In Scenarios to Code: An Achievable Dream.. FASE. 22-34. 2000
- Fundamental Approaches to Software Engineering, Third Internationsl Conference, FASE 2000, Held as Part of the European Joint Conferences on the Theory and Practice of Software, ETAPS 2000, Berlin, Germany, March 25 - April 2, 2000, Proceedings. FASE. 2000
- Java Program Verification via a Hoare Logic with Abrupt Termination.. FASE. 284-303. 2000
- Memex Is Not Enough.. FASE. 21-21. 2000
- More About TAS and IsaWin - Tools for Formal Program Development.. FASE. 367-370. 2000
- Parallel Refinement Mechanisms for Real-Time Systems.. FASE. 35-50. 2000
- Ready-Simulation Is Not Ready to Express a Modular Refinement Relation.. FASE. 266-283. 2000
- Software as Learning: Quality Factors and Life-Cycle Revised.. FASE. 147-162. 2000
- Specification of an Automatic Manufacturing System: A Case Study in Using Integrated Formal Methods.. FASE. 334-348. 2000
- Stepwise Introduction and Preservation of Safety Properties in Algebraic High-Level Net Systems.. FASE. 249-265. 2000
- Structuring and Design of Reactive Systems Using RSDS and B.. FASE. 97-111. 2000
- System Fault Tolerance Specification: Proposal of a Method Combining Semi-formal and Formal Approaches.. FASE. 82-96. 2000
- Towards a Verification Logic for Rewriting Logic. Lecture Notes in Computer Science. 438-458. 2000
- Using Domain-Specific Languages for the Realization of Component Composition.. FASE. 112-126. 2000
- Using Maude.. FASE. 371-374. 2000
- Verification of Object Oriented Programs Using Class Invariants.. FASE. 208-221. 2000
- Verification of Object-Z Specifications by Using Transition Systems: Application to the Radiomobile Network Design Problem.. FASE. 222-236. 2000
- What Is 'Mathematicalness' in Software Engineering?. FASE. 163-177. 2000
- A Framework for Describing Software Architectures for Reuse. IFIP Advances in Information and Communication Technology. 245-271. 1999
- A Logic for Real-Time Systems Specification Its Algebraic Semantics and Equational Calculus. Lecture Notes in Computer Science. 91-105. 1998
- Formalising Object-Oriented Models in the Object Calculus. Lecture Notes in Computer Science. 155-160. 1998
- Systematising Reactive System Design. Lecture Notes in Computer Science. 17-22. 1998
- The very idea of software development environments: a conceptual architecture for the arts' environment paradigm. Proceedings 13th IEEE International Conference on Automated Software Engineering (Cat. No.98EX239). 260-269. 1998
- Categorical semantics of parallel program design. Science of Computer Programming. 111-138. 1997
- Conservative extensions, interpretations between theories and all that!. Lecture Notes in Computer Science. 40-66. 1997
- Notes on refinement, interpolation and uniformity. Proceedings 12th IEEE International Conference Automated Software Engineering. 108-116. 1997
- Objects, associations and subsystems: A hierarchical approach to encapsulation. Lecture Notes in Computer Science. 324-343. 1997
- Software engineering - Old problems, new problems, and unsolved problems. Lecture Notes in Computer Science. 530-530. 1997
- Synthesising Interconnections. IFIP Advances in Information and Communication Technology. 240-264. 1997
- Towards a Compositional Interpretation of Object Diagrams. IFIP Advances in Information and Communication Technology. 187-211. 1997
- What we teach sofware engineers in the university: Do we take engineering seriously?. Lecture Notes in Computer Science. 40-50. 1997
- What we teach sofware engineers in the university: Do we take engineering seriously?. Lecture Notes in Computer Science. 40-50. 1997
- A mathematical toolbox for the software architect. Proceedings of the 8th International Workshop on Software Specification and Design. 46-55. 1996
- 18th International Conference on Software Engineering, Berlin, Germany, March 25-29, 1996, Proceedings.. ICSE. 1996
- A Case Study in Applying a Systematic Method for COTS Selection.. ICSE. 201-209. 1996
- A Demand-Driven Analyzer for Data Flow Testing at the Integration Level.. ICSE. 575-584. 1996
- A Flexible Architecture for Building Data Flow Analyzers.. ICSE. 554-564. 1996
- A Generic, Peer-to-Peer Repository for Distributed Configuration Management.. ICSE. 308-317. 1996
- A New Approach to Consistency Control in Software Engineering.. ICSE. 289-297. 1996
- A Reliability Model Combining Representative and Directed Testing.. ICSE. 506-514. 1996
- A Scalable, Automated Process for Year 2000 System Correction.. ICSE. 475-484. 1996
- A Software Engineering Experiment in Software Component Generation.. ICSE. 542-552. 1996
- A Specification-Based Adaptive Test Case Generation Strategy for Open Operating System Standards.. ICSE. 81-89. 1996
- A Standard Software Application Development: SAP R/3 (Abstract).. ICSE. 320-320. 1996
- A Systematic Survey of CMM Experience and Results.. ICSE. 323-330. 1996
- A Telecommunication Development: Siemens' Digital Switching System, EWSD (Abstract).. ICSE. 587-587. 1996
- An Analytic Framework for Specifying and Analyzing Imprecise Requirements.. ICSE. 60-69. 1996
- An Empirical Study of Static Call Graph Extractors.. ICSE. 90-99. 1996
- An Evaluation of Software Test Environment Architectures.. ICSE. 353-364. 1996
- An Exact Array Reference Analysis for Data Flow Testing.. ICSE. 565-574. 1996
- An Object-Oriented Implementation of B-ISDN Signalling - Part 2: Extendability Stands the Test.. ICSE. 125-132. 1996
- An Operating System Development: Windows 3 (Abstract).. ICSE. 101-101. 1996
- Analytical and Empirical Evaluation of Software Reuse Metrics.. ICSE. 189-199. 1996
- Assertion-Oriented Automated Test Data Generation.. ICSE. 71-80. 1996
- Assertional Reasoning about Pairwise Transient Interactions in Mobile Computing.. ICSE. 155-164. 1996
- Beyond Structured Programming.. ICSE. 268-277. 1996
- Checking Subsystem Safety Properties in Compositional Reachability Analysis.. ICSE. 144-154. 1996
- Configuration Management with Logical Structures.. ICSE. 298-307. 1996
- Cooperating Evolving Components: A Rigorous Approach to Evolving Large Software Systems.. ICSE. 428-437. 1996
- DYNAMITE: Dynamic Task Nets for Software Process Management.. ICSE. 331-341. 1996
- Designing and Implementing COO: Design Process, Architectural Style, Lessons Learned.. ICSE. 342-352. 1996
- Domain-Oriented Design Environments (Extended Abstract).. ICSE. 517-520. 1996
- Effort Estimation Using Analogy.. ICSE. 170-178. 1996
- Engineering an "Open" Client/Server-Platform for a Distributed Austrian Alpine Road-Pricing System in 240 Days: Case Study and Experience Report.. ICSE. 115-124. 1996
- Executable Object Modeling with Statecharts.. ICSE. 246-257. 1996
- Experience Assessing an Architectural Approach to Large-Scale Systematic Reuse.. ICSE. 220-229. 1996
- Experiences of Software Quality Management Using Metrics through the Life-Cycle.. ICSE. 179-188. 1996
- Forcing Behavioral Subtyping through Specification Inheritance.. ICSE. 258-267. 1996
- GRIDS - GRaph-based, Integrated Development of Software: Integrating Different Perspectives of Software Engineering.. ICSE. 48-59. 1996
- How to Identify Binary Relations for Domain Models.. ICSE. 28-36. 1996
- Independent On-Line Monitoring of Evolving Systems.. ICSE. 134-143. 1996
- Industrial Experience with Design Patterns.. ICSE. 103-114. 1996
- Large, Multimedia Programming - Concepts and Challenges (Abstract).. ICSE. 439-440. 1996
- Linguistic Support for the Evolutionary Design of Software Architectures.. ICSE. 418-427. 1996
- Machine Support for Software Development (Abstract).. ICSE. 167-168. 1996
- Monitoring Compliance of a Software System with Its High-Level Design Models.. ICSE. 387-396. 1996
- Multilanguage Interoperability in Distributed Systems.. ICSE. 451-463. 1996
- OPSIS: A View Mechanism for Software Processes Which Supports Their Evolution and Reuse.. ICSE. 38-47. 1996
- Prototypes as Assets, not Toys: Why and How to Extract Knowledge from Prototypes.. ICSE. 522-531. 1996
- Reducing and Estimating the Cost of Test Coverage Criteria.. ICSE. 486-494. 1996
- Requirements for a Layered Software Architecture Supporting Cooperative Multi-User Interaction.. ICSE. 408-417. 1996
- Scene: Using Scenario Diagrams and Active Text for Illustrating Object-Oriented Programs.. ICSE. 366-375. 1996
- Simplifying Data Integration: The Design of the Desert Software Development Environment.. ICSE. 398-407. 1996
- Slicing Object-Oriented Software.. ICSE. 495-505. 1996
- Supporting the Construction and Evolution of Component Repositories.. ICSE. 279-288. 1996
- System Acquisition Based on Software Product Assessment.. ICSE. 210-219. 1996
- System Dynamics Modeling of an Inspection-Based Process.. ICSE. 376-386. 1996
- The Design of Whole-Program Analysis Tools.. ICSE. 16-27. 1996
- The Program Understanding Problem: Analysis and a Heuristic Approach.. ICSE. 6-15. 1996
- The Role of Experimentation in Software Engineering: Past, Current, and Future.. ICSE. 442-449. 1996
- The Role of Formal Techniques: Past, Current and Future or How Did Software Get so Reliable without Proof? (Extended Abstract).. ICSE. 233-234. 1996
- The Role of Software Development Methodologies: Past, Present, and Future.. ICSE. 2-4. 1996
- Understanding and Predicting the Process of Software Maintenance Release.. ICSE. 464-474. 1996
- User Interface Prototyping - Concepts, Tools, and Experience.. ICSE. 532-541. 1996
- Using KIDS as a Tool Support for VDM.. ICSE. 236-245. 1996
- Interconnecting formalisms. Proceedings of the 3rd ACM SIGSOFT symposium on Foundations of software engineering. 72-80. 1995
- Sometimes “Tomorrow” is “Sometime”. Lecture Notes in Computer Science. 48-66. 1994
- Verifying for Reuse: Foundations of Object-Oriented System Verification.. Theory and Formal Methods. 235-257. 1994
- Taking more of the soft out of software engineering. Proceedings of 1993 IEEE 7th International Workshop on Software Specification and Design. 2-7. 1993
- Formally specifying temporal constraints and error recovery. Proceedings of the IEEE International Conference on Requirements Engineering. 208-215. 1993
- Generalising Interpretations Between Theories in the Context of (π-)institutions. Theory and Formal Methods. 126-147. 1993
- A Calculus of Broadcasting Systems.. TAPSOFT, Vol.1. 338-358. 1991
- A Complete Proof System for Timed Observations.. TAPSOFT, Vol.1. 412-440. 1991
- A Fully Abstract Model for Concurrent Constraint Programming.. TAPSOFT, Vol.1. 296-319. 1991
- A New Technique for Strictness Analysis.. TAPSOFT, Vol.2. 235-258. 1991
- A Solved Form Algorithm for Ask and Tell Herbrand Constraints.. TAPSOFT, Vol.1. 320-337. 1991
- A Theory of Program Modifications.. TAPSOFT, Vol.2. 137-152. 1991
- Actor-Oriented System Specification with Dynamic Logic.. TAPSOFT, Vol.2. 337-357. 1991
- Algebraic Graph Rewriting Using a Single Pushout.. TAPSOFT, Vol.1. 90-102. 1991
- An Extended Expansion Theorem.. TAPSOFT, Vol.2. 29-48. 1991
- CCS for OO and LP.. TAPSOFT, Vol.2. 1-28. 1991
- Combining Interaction and Automation in Process Algebra Verification.. TAPSOFT, Vol.2. 283-296. 1991
- Comparative Semantics for a Real-Time Programming Language with Integration.. TAPSOFT, Vol.1. 397-411. 1991
- Compilation of Pattern Matching with Associative-Commutative Functions.. TAPSOFT, Vol.1. 57-73. 1991
- Concurrent Abstract Machines (Abstract).. TAPSOFT, Vol.2. 49-49. 1991
- Construction and Reuse of Formal Program Developments.. TAPSOFT, Vol.2. 120-136. 1991
- DESCRIBING, STRUCTURING AND IMPLEMENTING OBJECTS. FOUNDATIONS OF OBJECT-ORIENTED LANGUAGES. 274-310. 1991
- Domains in a Realizability Framework.. TAPSOFT, Vol.1. 241-263. 1991
- Efficient Code Motion and an Adaption to Strength Reduction.. TAPSOFT, Vol.2. 394-415. 1991
- Exploiting Non-Determinism through Laziness in Guarded Functional Languages.. TAPSOFT, Vol.2. 201-216. 1991
- Formal Specification of Object Systems.. TAPSOFT, Vol.2. 60-82. 1991
- From Reduction Machines To Narrowing Machines.. TAPSOFT, Vol.2. 438-457. 1991
- Full Abstraction for Series-Parallel Pomsets.. TAPSOFT, Vol.1. 1-25. 1991
- Interactive Internetworking for Interoperating Systems (Abstract).. TAPSOFT, Vol.2. 58-59. 1991
- Introducing a Calculus of Trees.. TAPSOFT, Vol.1. 215-240. 1991
- Iteration Algebras (Extended Abstract).. TAPSOFT, Vol.1. 264-274. 1991
- Knowledge and Probability in Distributed Systems (Abstract).. TAPSOFT, Vol.2. 50-54. 1991
- Linear Bounded Automata and Rewrite Systems: Influence of Initial Configurations on Decision Properties.. TAPSOFT, Vol.1. 74-89. 1991
- Logic Programming as Hypergraph Rewriting.. TAPSOFT, Vol.1. 275-295. 1991
- Non-Strict Don't Care Algebras and Specifications.. TAPSOFT, Vol.1. 121-142. 1991
- Non-standard Interpretations of LOTOS Specifications.. TAPSOFT, Vol.2. 217-234. 1991
- Object-Based Concurrency: A Process Calculus Analysis.. TAPSOFT, Vol.1. 359-380. 1991
- On Addition Schemes.. TAPSOFT, Vol.2. 379-393. 1991
- On Causality Observed Incrementally, Finally.. TAPSOFT, Vol.1. 26-41. 1991
- On Narrowing Strategies for Partial Non-Strict Functions.. TAPSOFT, Vol.2. 416-437. 1991
- On the Complexity of Equation Solving in Process Algebra.. TAPSOFT, Vol.1. 381-396. 1991
- On the Domain of Traces and Sequential Composition.. TAPSOFT, Vol.1. 42-56. 1991
- On the Relationship Between Algebraic Module Specifications and Program Modules.. TAPSOFT, Vol.2. 83-98. 1991
- Parametric Order-Sorted Types in Logic Programming.. TAPSOFT, Vol.2. 181-200. 1991
- Program Specification and Data Refinement in Type Theory.. TAPSOFT, Vol.1. 143-168. 1991
- Proving Termination of Logic Programs by Exploiting Term Properties.. TAPSOFT, Vol.2. 153-180. 1991
- Refining Interfaces of Communicating Systems.. TAPSOFT, Vol.2. 297-312. 1991
- SHARING ACTIONS AND ATTRIBUTES IN MODAL ACTION LOGIC. THEORETICAL ASPECTS OF COMPUTER SOFTWARE. 569-593. 1991
- Simple Solutions for Approximate Tree Matching Problems.. TAPSOFT, Vol.1. 193-201. 1991
- Static Analysis of Linear Congruence Equalities among Variables of a Program.. TAPSOFT, Vol.1. 169-192. 1991
- Structuring Specifications in-the-Large and in-the-Small: Higher-Order Functions, Dependent Types and Inheritance in SPECTRAL.. TAPSOFT, Vol.2. 313-336. 1991
- TAPSOFT 91 - PROCEEDINGS OF THE INTERNATIONAL JOINT CONFERENCE ON THEORY AND PRACTICE OF SOFTWARE-DEVELOPMENT BRIGHTON, UK, APRIL 8-12, 1991 - PREFACE. TAPSOFT 91, VOL 1. R3-R4. 1991
- TAPSOFT'91: Proceedings of the International Joint Conference on Theory and Practice of Software Development, Brighton, UK, April 8-12, 1991, Volume 1: Colloquium on Trees in Algebra and Programming (CAAP'91). TAPSOFT, Vol.1. 1991
- Testing Against Formal Specifications: A Theoretical View.. TAPSOFT, Vol.2. 99-119. 1991
- The Evaluation Transformer Model of Reduction and Its Correctness.. TAPSOFT, Vol.2. 458-482. 1991
- The Tree Inclusion Problem.. TAPSOFT, Vol.1. 202-214. 1991
- Towards a Formally Based Component Description Language.. TAPSOFT, Vol.2. 358-378. 1991
- Type Inference with Inequalities.. TAPSOFT, Vol.1. 441-455. 1991
- Unifying Initial and Loose Semantics of Parameterized Specifications in an Arbitrary Institution.. TAPSOFT, Vol.1. 103-120. 1991
- Using Higher Order Logic for Modelling Real-Time Protocols.. TAPSOFT, Vol.2. 259-282. 1991
- Verification for Finite Systems (Extended Abstract).. TAPSOFT, Vol.2. 55-57. 1991
- ENGINEERING-IN-THE-LARGE - SOFTWARE ENGINEERING AND INSTRUMENTATION. IEE Conference Publication. 1-7. 1990
- Proof-Theoretic Semantics of Object-Oriented Specification Constructs.. DS-4. 243-284. 1990
- A look through PRISMA: towards pluralistic knowledge-based environments for software specification acquisition. ACM SIGSOFT Software Engineering Notes. 128-136. 1989
- A look through PRISMA: towards pluralistic knowledge-based environments for software specification acquisition. Proceedings of the 5th international workshop on Software specification and design - IWSSD '89. 128-136. 1989
- The prescription and description of state based systems. Lecture Notes in Computer Science. 243-294. 1989
- A top-down step-wise refinement methodology for protocol specification. Lecture Notes in Computer Science. 197-221. 1988
- Configuration versus Use: Specification Languages versus Logics.. ADT. 1988
- Modular Construction of Logics for Specification.. ADT. 1986
- Role of Abstraction in Program Development (Invited Paper).. IFIP Congress. 135-142. 1986
- FORMAL REQUIREMENTS SPECIFICATION - THE FOREST PROJECT.. 186-191. 1985
- PROGRAMME DEVELOPMENT AND THEORY MANIPULATION.. 228-232. 1985
- Axiomatising Specification Theory. ADT. 171-177. 1985
- Database Specification.. DS-1. 141-158. 1985
- On What Exactly Is Going On When Software Is Developed Step-by-Step.. ICSE. 528-533. 1984
- MODAL SYSTEM OF ALGEBRAS FOR DATABASE SPECIFICATION AND QUERY/UPDATE LANGUAGE SUPPORT.. Very Large Data Bases, International Conference on Very Large Data Bases. 331-339. 1983
- Structuring of Specifications within a Logical Theory of Data Types.. ADT. 1983
- MESSAGE ORIENTED LANGUAGE FOR SYSTEM APPLICATIONS.. Distributed Computing Systems. 824-832. 1982
- Resource abstract data type + synchronization-A methodology for message oriented programming-. Proceedings - International Conference on Software Engineering. 263-272. 1981
- Equations Compared with Clauses for Specification of Abstract Data Types. Advances in Data Base Theory. 159-193. 1981
- SYNCHRONIZATION CALCULUS FOR MESSAGE ORIENTED PROGRAMMING.. Proceedings of International Wire and Cable Symposium. 433-445. 1981
- A Methodology for Message Oriented Programming.. Fachtagung über Programmiersprachen. 83-93. 1980
- A communication data type for message oriented programming. Lecture Notes in Computer Science. 79-91. 1980
- MATHEMATICAL SEMANTICS AND A MODEL FOR DATA BASES.. IFIP Congress. 133-138. 1977
- Parallel rewriting systems on terms. Lecture Notes in Computer Science. 495-510. 1974
- The characterisation of the derivation trees of context free sets of terms as regular sets. 13th Annual Symposium on Switching and Automata Theory (swat 1972). 224-230. 1972
-
journal articles
- A formal approach to rigorous development of critical systems. Journal of Software-Evolution and Process. 33. 2021
- Meningoencephalitis: Defining target groups more precisely. Deutsches Ärzteblatt international. 116:A2030. 2019
- Satisfiability Calculus: An Abstract Formulation of Semantic Proof Systems. Fundamenta Informaticae. 166:297-347. 2019
- A theoretical framework for cardinality-based feature models: The semantics and computational aspects. Journal of Logical and Algebraic Methods in Programming. 97:30-54. 2018
- Simulation relations for fault-tolerance. Formal Aspects of Computing. 29:1013-1050. 2017
- RESOURCE equals ABSTRACT DATA TYPE plus SYNCHRONIZATION - A METHODOLOGY FOR MESSAGE ORIENTED PROGRAMMING.. Proceedings - International Conference on Software Engineering. 263-272. 2017
- Multiset Theories of Cardinality-based Feature Diagrams. CoRR. abs/1601.06242. 2016
- Faithful Modeling of Product Lines with Kripke Structures and Modal Logic. Scientific Annals of Computer Science. 16:69-122. 2016
- Categorical foundations for structured specifications in Z. Formal Aspects of Computing. 27:831-865. 2015
- Implementability of Requirements in the Four-Variable Model. Science of Computer Programming. 111:339-362. 2015
- Can Product-Specific Assurance Case Templates Be Used as Medical Device Standards?. IEEE Design and Test. 32:45-55. 2015
- Actions and Events in Concurrent Systems Design. Electronic Proceedings in Theoretical Computer Science. 139:31-45. 2014
- Automated Reasoning over Deontic Action Logics with Finite Vocabularies. Electronic Proceedings in Theoretical Computer Science. 139:16-30. 2014
- From System Requirements to Software Requirements in the Four-Variable Model. Electronic Communications of the EASST. 66. 2013
- Encapsulating deontic and branching time specifications. Theoretical Computer Science. 455:98-122. 2012
- Editorial. Formal Aspects of Computing. 24:161-162. 2012
- Category Theory and Model-Driven Engineering: From Formal Semantics to Design Patterns and Beyond. Electronic Proceedings in Theoretical Computer Science. 93:1-21. 2012
- Editorial. Formal Aspects of Computing. 22:215-216. 2010
- Deontic Logic, Contrary to Duty Reasoning and Fault Tolerance. Electronic Notes in Theoretical Computer Science. 258:17-34. 2009
- Deontic action logic, atomic boolean algebras and fault-tolerance. Journal of Applied Logic. 7:441-466. 2009
- A Software Certification Consortium and its Top 9 Hurdles. Electronic Notes in Theoretical Computer Science. 238:11-17. 2009
- Formal methods versus engineering. SIGCSE Bulletin (Association for Computing Machinery, Special Interest Group on Computer Science Education). 41:6-12. 2009
- A Product-Focused Approach to Software Certification. Computer. 41:91-93. 2008
- Preface. Journal of Nuclear Materials. 361:vii-ix. 2007
- Reasoning about static and dynamic properties in alloy. ACM Transactions on Software Engineering and Methodology. 14:478-526. 2005
- A Verification Logic for Rewriting Logic. Journal of Logic and Computation. 15:317-352. 2005
- Hierarchical Temporal Specifications of Dynamically Reconfigurable Component Based Systems. Electronic Notes in Theoretical Computer Science. 108:69-81. 2004
- A Branching Time Logical System for Open Distributed Systems Development. Electronic Notes in Theoretical Computer Science. 67:184-203. 2002
- Desert Island Column.. Automated Software Engineering. 9:123-126. 2002
- Interpolation in practical formal development. Logic Journal of the IGPL. 9:231-244. 2001
- A rely–guarantee discipline for open distributed systems design. Information Processing Letters. 74:55-63. 2000
- On a generalized modularization theorem. Information Processing Letters. 74:65-71. 2000
- What we teach software engineers in the university. ACM SIGSOFT Software Engineering Notes. 22:40-50. 1997
- Interconnecting formalisms. ACM SIGSOFT Software Engineering Notes. 20:72-80. 1995
- On the Modularization Theorem for logical specifications. Information Processing Letters. 53:287-293. 1995
- Process semantics of temporal logic specification. Lecture Notes in Computer Science. 655:236-253. 1993
- Temporal theories as modularisation units for concurrent system specification. Formal Aspects of Computing. 4:239-272. 1992
- A Constructive Presentation for the Modal Connective of Necessity (□). Journal of Logic and Computation. 2:31-50. 1992
- Editorial. Journal of Logic and Computation. 2:243-245. 1992
- Abstract Data Types and Type Theory: Theories as Types. Mathematical Logic Quarterly. 37:149-166. 1991
- Describing, structuring and implementing objects. Lecture Notes in Computer Science. 489:274-310. 1991
- Sharing actions and attributes in modal action logic. Lecture Notes in Computer Science. 526:569-593. 1991
- TAPSOFT 91 - PROCEEDINGS OF THE INTERNATIONAL JOINT CONFERENCE ON THEORY AND PRACTICE OF SOFTWARE-DEVELOPMENT BRIGHTON, UK, APRIL 8-12, 1991 - PREFACE. Lecture Notes in Computer Science. 493:R3-R4. 1991
- Temporal Reasoning over Deontic Specifications. Journal of Logic and Computation. 1:357-395. 1991
- Proof theory and computer programming. Mathematical Logic Quarterly. 36:389-414. 1990
- A pluralistic knowledge-based approach to software specification. Lecture Notes in Computer Science. 387:411-423. 1989
- THE PRESCRIPTION AND DESCRIPTION OF STATE BASED SYSTEMS. Lecture Notes in Computer Science. 398:243-294. 1989
- Formal Methods: A Commentary. Journal of Information Technology. 2:77-80. 1987
- Database Instances, Abstract Data Types and Database Specification. Computer Journal. 28:154-161. 1985
- A theory of abstract data types for program development: Bridging the gap?. Lecture Notes in Computer Science. 186:214-230. 1985
- An Informal Approach to Formal (Algebraic) Specifications. Computer Journal. 28:59-67. 1985
- Large database specifications from small views. Lecture Notes in Computer Science. 206:246-271. 1985
- Logical specification and implementation. Lecture Notes in Computer Science. 181:13-30. 1984
- Message oriented programming—A resource based methodology. Computer Languages. 8:95-111. 1983
- Continuous Data Types. SIAM journal on computing (Print). 11:201-216. 1982
- Conceptual modeling of data base operations. International Journal of Parallel Programming. 10:299-314. 1981
- On the design and specification of message oriented programs. International Journal of Parallel Programming. 9:161-191. 1980
- Higher order data types. International Journal of Parallel Programming. 9:31-53. 1980
- A uniform logical treatment of queries and updates, tech. rep. DB018001-1980. Information Systems. 5:239-239. 1980
- Pumping lemmas for term languages. Journal of Computer and System Sciences. 17:319-330. 1978
- Erratum. Journal of Computer and System Sciences. 14:369-369. 1977
- Erratum: A Generalized Approach to Formal Languages.. J. Comput. Syst. Sci.. 14:369-369. 1977
- A generalized approach to formal languages. Journal of Computer and System Sciences. 8:409-439. 1974
-
preprints
- A proof theoretic basis for relational semantics 2021
- On the construction of explosive relation algebras 2020
- Multiset Theories of Cardinality-based Feature Diagrams 2016
- Actions and Events in Concurrent Systems Design 2014
- Automated Reasoning over Deontic Action Logics with Finite Vocabularies 2014
- Category Theory and Model-Driven Engineering: From Formal Semantics to Design Patterns and Beyond 2012