W. Damm, M. Fränzle, W. Hagemann, P. Kröger, und A. Rakow, "Justification Based Reasoning in Dynamic Conflict Resolution" CoRR abs/1905.11764.
@ARTICLE{,
author = {Damm, Werner and Fr{\"{a}}nzle, Martin and Hagemann, Willem and Kr{\"{o}}ger, Paul and Rakow, Astrid},
title = {Justification Based Reasoning in Dynamic Conflict Resolution},
journal = {CoRR abs/1905.11764},
year = {2019}
}
E. Böde, W. Damm, G. Ehmen, M. Fränzle, K. Grüttner, P. Ittershagen, B. Josko, B. Koopmann, F. Poppen, M. Siegel, und I. Stierand, "MULTIC Tooling." FAT-Schriftenreihe 316.
@INBOOK{,
author = {B{\"{o}}de, Eckard and Damm, Werner and Ehmen, G{\"{u}}nter and Fr{\"{a}}nzle, Martin and Gr{\"{u}}ttner, Kim and Ittershagen, Philipp and Josko, Bernhard and Koopmann, B. and Poppen, F. and Siegel, M. and Stierand, Ingo},
month = jun, title = {MULTIC Tooling},
year = {2019},
publisher = {FAT-Schriftenreihe 316}
}
W. Damm, G. Ehmen, K. Grüttner, P. Ittershagen, B. Koopmann, F. Poppen, und I. Stierand, "Multi-layer time coherency in the development of ADAS/AD systems: design approach and tooling." 2019.
@INPROCEEDINGS{,
author = {Damm, Werner and Ehmen, G{\"{u}}nter and Gr{\"{u}}ttner, Kim and Ittershagen, Philipp and Koopmann, B. and Poppen, F. and Stierand, I.},
month = apr, title = {Multi-layer time coherency in the development of ADAS/AD systems: design approach and tooling},
journal = {Proceedings of the Workshop on Design Automation for CPS and IoT (DESTION'19)},
year = {2019},
pages = {20-30},
organization = {ACM New York, NY, USA}
}
W. Damm, M. Fränzle, A. Lüdtke, J. W. Rieger, A. Trende, und A. Unni, "Integrating Neurophysiological Sensors and Driver Models for Safe and Performant Automated Vehicle Control in Mixed Traffic" , Paris, 2019.
@INPROCEEDINGS{,
author = {Damm, Werner and Fr{\"{a}}nzle, Martin and L{\"{u}}dtke, Andreas and Rieger, Jochem W. and Trende, Alexander and Unni, Anirudh},
title = {Integrating Neurophysiological Sensors and Driver Models for Safe and Performant Automated Vehicle Control in Mixed Traffic},
journal = {Intelligent Vehicles Symposium (IV 2019)},
year = {2019},
pages = {82-89},
organization = {IEEE},
address = {Paris}
}
W. D. Eckard Böde Matthias Büker, M. Fränzle, B. Kramer, C. Neurohr, und S. V. Maelen, "Identifikation und Quantifizierung von Automationsrisiken für hochautomatisierte Fahrfunktionen" , techreport , 2019.
@TECHREPORT{Eck2019,
author = {Eckard B{\"{o}}de, Matthias B{\"{u}}ker, Werner Damm and Fr{\"{a}}nzle, Martin and Kramer, Birte and Neurohr, Christian and Maelen, Sebastian Vander},
month = jul, title = {Identifikation und Quantifizierung von Automationsrisiken f{\"{u}}r hochautomatisierte Fahrfunktionen},
type = {techreport},
year = {2019},
url = {https://www.pegasusprojekt.de/files/tmpl/pdf/PEGASUS_TechnicalReport_Automationsrisiken_17.07.2019.pdf}
}
Werner Damm Eike Möhlmann und A. Rakow, A Scenario Discovery Process Based on Traffic Sequence ChartsSpringer International Publishing.
doi: 10.1007/978-3-030-14628-3_7
@INCOLLECTION{Wer2019,
author = {Werner Damm, Eike M{\"{o}}hlmann, and Rakow, Astrid},
month = {12},
title = {A Scenario Discovery Process Based on Traffic Sequence Charts},
type = {incollection},
booktitle = {Validation and Verification of Automated Systems},
chapter = {7},
year = {2019},
pages = {61--73},
publisher = {Springer International Publishing},
url = {https://doi.org/10.1007/978-3-030-14628-3_7},
doi = {10.1007/978-3-030-14628-3_7}
}
Werner Damm Eike Möhlmann und A. Rakow, Traffic Sequence Charts for the ENABLE-S 3 Test ArchitectureSpringer International Publishing.
doi: 10.1007/978-3-030-14628-3
@INCOLLECTION{Wer2019,
author = {Werner Damm, Eike M{\"{o}}hlmann, and Rakow, Astrid},
month = {12},
title = {Traffic Sequence Charts for the ENABLE-S 3 Test Architecture},
type = {incollection},
booktitle = {Validation and Verification of Automated Systems},
chapter = {6},
year = {2019},
pages = {45--60},
publisher = {Springer International Publishing},
url = {https://doi.org/10.1007/978-3-030-14628-3},
doi = {10.1007/978-3-030-14628-3}
W. Damm, M. Fränzle, W. Hagemann, P. Kröger, und A. Rakow, "Dynamic Conflict Resolution Using Justification Based Reasoning" in Proc. Proceedings of the 4th Workshop on Formal Reasoning about Causation, Responsibility, and Explanations in Science and Technology, CREST@ETAPS 2019, Prague, Czech Republic, 7th April 2019, 2019.
doi: 10.4204/eptcs.308.4
@INPROCEEDINGS{DBLP:journals/corr/abs-1911-07290,
author = {Damm, Werner and Fr{\"{a}}nzle, Martin and Hagemann, Willem and Kr{\"{o}}ger, Paul and Rakow, Astrid},
editor = {Caltais, Georgiana and Krivine, Jean},
month = apr, title = {Dynamic Conflict Resolution Using Justification Based Reasoning},
booktitle = {Proceedings of the 4th Workshop on Formal Reasoning about Causation, Responsibility, and Explanations in Science and Technology, CREST@ETAPS 2019, Prague, Czech Republic, 7th April 2019},
series = {{EPTCS}},
volume = {308},
year = {2019},
pages = {47--65},
url = {https://doi.org/10.4204/EPTCS.308.4},
doi = {10.4204/eptcs.308.4},
timestamp={Thu, 19 Dec 2019 15:19:10 +0100},
biburl={https://dblp.org/rec/journals/corr/abs-1911-07290.bib},
bibsource={dblp computer science bibliography, https://dblp.org},
}
A. Benveniste, B. Caillaud, D. Nickovic, R. Passerone, J. Raclet, P. Reinkemeier, A. Sangiovanni-Vincentelli, W. Damm, T. A. Heinzinger, und K. G. Larsen, "Contracts for System Design" Foundations and Trends in Electronic Design Automation, vol. 12, iss. 2-3.
doi: 10.1561/1000000053
@ARTICLE{,
author = {Benveniste, Albert and Caillaud, Benoit and Nickovic, Dejan and Passerone, Roberto and Raclet, Jean-Baptiste and Reinkemeier, Philipp and Sangiovanni-Vincentelli, Alberto and Damm, Werner and Heinzinger, Thomas A. and Larsen, Kim G.},
title = {Contracts for System Design},
journal = {Foundations and Trends in Electronic Design Automation},
volume = {12},
number = {2-3},
year = {2018},
pages = {124-400},
issn = {1551-3939},
url = {http://dx.doi.org/10.1561/1000000053},
doi = {10.1561/1000000053}
}
W. Damm, E. Möhlmann, T. Peikenkamp, und A. Rakow, "A Formal Semantics for Traffic Sequence Charts" in Proc. Principles of Modelling Essays dedicated to Edmund A. Lee on the Occasion of his 60th Birthday, 2018.
@INPROCEEDINGS{,
author = {Damm, Werner and M{\"{o}}hlmann, Eike and Peikenkamp, Thomas and Rakow, Astrid},
month = oct, title = {A Formal Semantics for Traffic Sequence Charts},
booktitle = {Principles of Modelling Essays dedicated to Edmund A. Lee on the Occasion of his 60th Birthday},
series = {LNCS},
year = {2018},
publisher = {Springer}
}
W. Damm, S. Kemper, E. Möhlmann, T. Peikenkamp, und A. Rakow, "Using Traffic Sequence Charts for the Development of HAVs" in Proc. ERTS 2018, 2018.
@INPROCEEDINGS{,
author = {Damm, W. and Kemper, Stephanie and M{\"{o}}hlmann, Eike and Peikenkamp, Thomas and Rakow, Astrid},
month = feb, title = {Using Traffic Sequence Charts for the Development of HAVs},
booktitle = {ERTS 2018},
series = {9th European Congress on Embedded Real Time Software and Systems (ERTS 2018)},
year = {2018},
location = {Toulouse, France},
url = {https://hal.archives-ouvertes.fr/hal-01714060}
}
W. Damm, M. Fränzle, S. Gerwinn, und P. Kröger, "Perspectives on the Validation and Verification of Machine Learning Systems in the Context of Highly Automated Vehicles" in Proc. 2018 AAAI Spring Symposia, Stanford University, Palo Alto, California, USA, March 26-28, 2018, 2018.
@INPROCEEDINGS{damm:vv4ml:2018,
author = {Damm, Werner and Fr{\"{a}}nzle, Martin and Gerwinn, Sebastian and Kr{\"{o}}ger, Paul},
title = {Perspectives on the Validation and Verification of Machine Learning Systems in the Context of Highly Automated Vehicles},
type = {techreport},
booktitle = {2018 AAAI Spring Symposia, Stanford University, Palo Alto, California, USA, March 26-28, 2018},
series = {AAAI Spring Symposium Series},
year = {2018},
pages = {512-515},
publisher = {AAAI Press},
url = {https://aaai.org/ocs/index.php/SSS/SSS18/paper/view/17526},
abstract = {Algorithms incorporating learned functionality play an increasingly important role for highly automated vehicles. Their impressive performance within environmental perception and other tasks central to automated driving comes at the price of a hitherto unsolved functional verification problem within safety analysis. We propose to combine statistical guarantee statements about the generalisation ability of learning algorithms with the functional architecture as well as constraints about the dynamics and ontology of the physical world, yielding an integrated formulation of the safety verification problem of functional architectures comprising artificial intelligence components. Its formulation as a probabilistic constraint system enables calculation of low risk manoeuvres. We illustrate the proposed scheme on a simple automotive scenario featuring unreliable environmental perception.}
}
W. Damm und R. Galbas, "Exploiting Learning and Scenario-Based Specification Languages for the Verification and Validation of Highly Automated Driving" in Proc. 1st IEEE/ACM International Workshop on Software Engineering for AI in Autonomous Systems, SEFAIAS@ICSE 2018, Gothenburg, Sweden, May 28, 2018, 2018.
@INPROCEEDINGS{DBLP:conf/icse/DammG18,
author = {Damm, Werner and Galbas, Roland},
title = {Exploiting Learning and Scenario-Based Specification Languages for the Verification and Validation of Highly Automated Driving},
booktitle = {1st {IEEE/ACM} International Workshop on Software Engineering for {AI} in Autonomous Systems, SEFAIAS@ICSE 2018, Gothenburg, Sweden, May 28, 2018},
year = {2018},
pages = {39--46},
publisher = {{ACM}},
url = {http://ieeexplore.ieee.org/document/8452729},
timestamp={Thu, 06 Sep 2018 13:25:22 +0200},
biburl={https://dblp.org/rec/bib/conf/icse/DammG18},
bibsource={dblp computer science bibliography, https://dblp.org},
W. Damm und R. Kalmar, "Autonome Systeme - Fähigkeiten und Anforderungen" Informatik-Spektrum, iss. Vol. 40, No. 5. Berlin Heidelberg: Springer-Verlag.
doi: 10.1007/s00287-017-1063-0
@ARTICLE{,
author = {Damm, W. and Kalmar, Ralf},
title = {Autonome Systeme - F{\"{a}}higkeiten und Anforderungen},
journal = {Informatik-Spektrum},
number = {Vol. 40, No. 5. Berlin Heidelberg: Springer-Verlag},
year = {2017},
pages = {400-408},
issn = {1432-122X},
doi = {10.1007/s00287-017-1063-0}
}
W. Damm und P. Heidl, "SafeTRANS Working Group: Highly automated Systems:Test, Safety, and Development Processes" Recommendations on Actions and Research Challenges.
@ARTICLE{,
author = {Damm, Werner and Heidl, Peter},
title = {SafeTRANS Working Group: Highly automated Systems:Test, Safety, and Development Processes},
journal = {Recommendations on Actions and Research Challenges},
year = {2017},
abstract = {The Management Summary summarizes regulatory and research challenges to be addressed for cost-effective safe deployment of highly automated systems with excellent quality. The focus is on the overall development process, including architecture and security aspects, as well as verification and validation (V & V).}
}
E. Böde, M. Büker, W. Damm, G. Ehmen, M. Franzle, S. Gerwinn, T. Goodfellow, K. Grüttner, B. Josko, B. Koopmann, T. Peikenkamp, F. Poppen, P. Reinkemeier, M. Siegel, und I. Stierand, "Design Paradigms for Multi-Layer Time Coherency in ADAS and Automated Driving (MULTIC)" in Proc. FAT Series, 2017.
@INPROCEEDINGS{multic_final_report,
author = {B{\"{o}}de, E. and B{\"{u}}ker, M. and Damm, W. and Ehmen, G. and Franzle, M. and Gerwinn, S. and Goodfellow, T. and Gr{\"{u}}ttner, K. and Josko, B. and Koopmann, B. and Peikenkamp, T. and Poppen, F. and Reinkemeier, P. and Siegel, M. and Stierand, I.},
month = {October},
title = {{Design Paradigms for Multi-Layer Time Coherency in ADAS and Automated Driving (MULTIC)}},
booktitle = {FAT Series},
number = {302},
year = {2017},
note = {Available online at \url{https://www.vda.de/en/services/Publications/fat-schriftenreihe-302.html} [Accessed on October 16, 2017]},
issn = {2192-7863}
}
W. Damm, S. Kemper, E. Möhlmann, T. Peikenkamp, und A. Rakow, "Traffic Sequence Charts - From Visualization to Semantics" SFB/TR 14 AVACS, Reports of SFB/TR 14 AVACS 117, 2017.
@techreport{report/OTR/DKMPR2017,
author = {Werner Damm and Stephanie Kemper and Eike M{\"o}hlmann and Thomas Peikenkamp and Astrid Rakow},
title = {{Traffic Sequence Charts - From Visualization to Semantics}},
institution= {SFB/TR 14 AVACS},
month = {10},
year = {2017},
type = {Reports of SFB/TR 14 AVACS},
note = {http://www.avacs.org},
number = {117},
}
W. Damm, E. Möhlmann, T. Peikenkamp, und A. Rakow, "A Formal Semantics for Traffic Sequence Charts." Festschrift in honor of Edmund A. Lee.
@INBOOK{,
author = {Damm, Werner and M{\"{o}}hlmann, Eike and Peikenkamp, Thomas and Rakow, Astrid},
month = oct, title = {A Formal Semantics for Traffic Sequence Charts},
year = {2017},
publisher = {Festschrift in honor of Edmund A. Lee}
}
E. Althaus, B. Beber, W. Damm, S. Disch, W. Hagemann, A. Rakow, C. Scholl, U. Waldmann, und B. Wirtz, "Verification of linear hybrid systems with large discrete state spaces using counterexample-guided abstraction refinement" Science of Computer Programming.
doi: 10.1016/j.scico.2017.04.010
@ARTICLE{althaus2017,
author = {Althaus, Ernst and Beber, Bjoern and Damm, Werner and Disch, Stefan and Hagemann, Willem and Rakow, Astrid and Scholl, Christoph and Waldmann, Uwe and Wirtz, Boris},
keywords = {interpolation},
title = {Verification of linear hybrid systems with large discrete state spaces using counterexample-guided abstraction refinement},
journal = {Science of Computer Programming},
volume = {},
number = {},
year = {2017},
pages = {-},
issn = {0167-6423},
url = {http://www.sciencedirect.com/science/article/pii/S0167642317300850},
doi = {https://doi.org/10.1016/j.scico.2017.04.010},
abstract = {We present a counterexample-guided abstraction refinement (CEGAR) approach for the verification of safety properties of linear hybrid automata with large discrete state spaces, such as naturally arising when incorporating health state monitoring and degradation levels into the controller design. Such models can, in contrast to purely functional controller models, not be analyzed with hybrid verification engines relying on explicit representations of modes, but require fully symbolic representations for both the continuous and discrete part of the state space. The presented abstraction methods directly work on a symbolic representation of arbitrary non-convex combinations of linear constraints and boolean variables using LinAIGs. Several interpolation methods allow us to compute abstractions consisting of fewer linear constraints, and hence reduce the complexity of the reachable state set computation. In combination with methods that guarantee the preciseness of abstractions, this leads to a significant reduction of the runtimes of the verification process compared with exact verification.},
access={restricted},
subproject={H3},
bibtex={althaus.scp2017.bib},
pdf={althaus.scp2017.pdf},
journal-long={Science of Computer Programming},
journal-short={SCP},
category={Formal Methods},
cross-site={FB,OL,SB},
E. Althaus, B. Beber, W. Damm, S. Disch, W. Hagemann, A. Rakow, C. Scholl, U. Waldmann, und B. Wirtz, "Verification of Linear Hybrid Systems with Large Discrete State Spaces: Exploring the Design Space for Optimization" SFB/TR 14 AVACS, Reports of SFB/TR 14 AVACS 103, 2016.
@TECHREPORT{atr103,
author = {Althaus, Ernst and Beber, Björn and Damm, Werner and Disch, Stefan and Hagemann, Willem and Rakow, Astrid and Scholl, Christoph and Waldmann, Uwe and Wirtz, Boris},
editor = {Becker, Bernd and Damm, Werner and Finkbeiner, Bernd and Fränzle, Martin and Olderog, Ernst-Rüdiger and Podelski, Andreas},
month = {April},
title = {Verification of Linear Hybrid Systems with Large Discrete State Spaces: Exploring the Design Space for Optimization},
type = {Reports of SFB/TR 14 AVACS},
series = {ATR},
number = {103},
year = {2016},
institution = {SFB/TR 14 AVACS},
note = {ISSN: 1860-9821, http://www.avacs.org},
abstract = {This paper provides a suite of optimization techniques for the verification of safety properties of linear hybrid automata with large discrete state spaces, such as naturally arising when incorporating health state monitoring and degradation levels into the controller design. Such models can -- in contrast to purely functional controller models -- not analyzed with hybrid verification engines relying on explicit representations of modes, but require fully symbolic representations for both the continuous and discrete part of the state space. The optimization techniques shown yield consistently a speedup of about 20 against previously published results for a similar benchmark suite, and complement these with new results on counterexample guided abstraction refinement. In combination with the methods guaranteeing preciseness of abstractions, this allows to significantly extend the class of models for which safety can be established, covering in particular models with 23 continuous variables and 2 to the 71 discrete states, 20 continuous variables and 2 to the 199 discrete states, and 9 continuous variables and 2 to the 271 discrete states.},
access={open},
bibtex={atr103.bib},
pdf={avacs_technical_report_103.pdf},
subproject={H3},
}
W. Damm, E. Möhlmann, und A. Rakow, "A Design Framework for Concurrent Hybrid Controllers with Safety and Stability Annotations" SFB/TR 14 AVACS, Reports of SFB/TR 14 AVACS 105, 2016.
@TECHREPORT{atr105,
author = {Damm, Werner and Möhlmann, Eike and Rakow, Astrid},
editor = {Becker, Bernd and Damm, Werner and Finkbeiner, Bernd and Fränzle, Martin and Olderog, Ernst-Rüdiger and Podelski, Andreas},
month = {April},
title = {A Design Framework for Concurrent Hybrid Controllers with Safety and Stability Annotations},
type = {Reports of SFB/TR 14 AVACS},
series = {ATR},
number = {105},
year = {2016},
institution = {SFB/TR 14 AVACS},
note = {http://www.avacs.org},
abstract = {We present an assume guarantee framework for hybrid sys- tems which implements design principles tailored for loosely coupled con- trollers of safety critical applications. To bridge the gap between design and implementation level, the framework takes into account signal laten- cies and potential loss of coordination messages between controllers on a common plant. Safety as well as stability properties of a controller can be derived compositionally from its subcomponents. Industrial applications usually require safety and stability properties.},
access={open},
bibtex={atr105.bib},
pdf={avacs_technical_report_105.pdf},
subproject={H3,H4},
}
W. Damm, B. Finkbeiner, und A. Rakow, "Contract-based compositional synthesis of distributed controllers" SFB/TR 14 AVACS, Reports of SFB/TR 14 AVACS 115, 2016.
@TECHREPORT{atr115,
author = {Damm, Werner and Finkbeiner, Bernd and Rakow, Astrid},
editor = {Becker, Bernd and Damm, Werner and Finkbeiner, Bernd and Fränzle, Martin and Olderog, Ernst-Rüdiger and Podelski, Andreas},
month = {June},
title = {Contract-based compositional synthesis of distributed controllers},
type = {Reports of SFB/TR 14 AVACS},
series = {ATR},
number = {115},
year = {2016},
institution = {SFB/TR 14 AVACS},
note = {http://www.avacs.org},
abstract = {We present methods build on recent foundational results on compositional synthesis automating three design steps in contract-based system design, and illustrate these for an Advanced Driver Assistance System combining Automatic Cruise Control and Automatic Lane keeping. The design steps we consider are (i) the characterization of library elements, (ii) incremental system design, and (iii) supporting the OEM/supplier interface by synthesizing contracts for subsystems to be developed independently by suppliers.},
access={open},
bibtex={atr115.bib},
pdf={avacs_technical_report_115.pdf},
subproject={S2},
}
W. Damm, B. Finkbeiner, und A. Rakow, What You Really Need To Know About Your Neighbor.
@MISC{DFR:2016,
author = {Damm, Werner and Finkbeiner, Bernd and Rakow, Astrid},
title = {What You Really Need To Know About Your Neighbor},
year = {2016},
location = {Toronto, Ontario, Canada},
note = {Preproceedings of SYNT2016, 5th Workshop on Synthesis},
url = {http://formal.epfl.ch/synt/2016/papers/paper06.pdf}
}
A. Stühring, G. Ehmen, und S. Fröschle, "Analyzing the Impact of Injected Sensor Data on an Advanced Driver Assistance System using the OP2TiMuS Prototyping Platform" in Proc. Proceedings of the Conference on Design, Automation and Test in Europe (DATE) 2016, 3001 Leuven, Belgium, 2016.
@INPROCEEDINGS{SEF-DATE2016,
author = {Stühring, Alexander and Ehmen, Günter and Fröschle, Sibylle},
title = {Analyzing the Impact of Injected Sensor Data on an Advanced Driver Assistance System using the OP2TiMuS Prototyping Platform},
booktitle = {Proceedings of the Conference on Design, Automation and Test in Europe (DATE) 2016},
series = {DATE '16},
year = {2016},
publisher = {European Design and Automation Association},
address = {3001 Leuven, Belgium},
note = {to appear},
abstract = {Modern vehicles are running complex and safety critical applications distributed over several Electronic Control Units (ECUs). Some ECUs are equipped with communication interfaces providing access to other devices, networks or remote services. Since the number of attack vectors is increasing, an early investigation of the impact of attacks becomes steadily more important. This paper gives an example how manipulated sensor data injected to the CAN bus affects an Advanced Driver Assistance System (ADAS). Within multiple experiments we illustrate the impact of different aspects like the sending rate.}
W. Hagemann, "Efficient Geometric Operations on Convex Polyhedra, with an Application to Reachability Analysis of Hybrid Systems" Mathematics in Computer Science, vol. 9, iss. 3.
doi: 10.1007/s11786-015-0238-9
@ARTICLE{,
author = {Hagemann, Willem},
title = {Efficient Geometric Operations on Convex Polyhedra, with an Application to Reachability Analysis of Hybrid Systems},
journal = {Mathematics in Computer Science},
volume = {9},
number = {3},
year = {2015},
pages = {283--325},
url = {http://dx.doi.org/10.1007/s11786-015-0238-9},
doi = {10.1007/s11786-015-0238-9}
}
E. Moehlmann, W. Hagemann, und O. Theel, "Hybrid Tools for Hybrid Systems - Proving Stability and Safety at Once" in Proc. Formal Modeling and Analysis of Timed Systems, 2015.
doi: 10.1007/978-3-319-22975-1_15
@INPROCEEDINGS{,
author = {Moehlmann, Eike and Hagemann, Willem and Theel, Oliver},
editor = {Sankaranarayanan, Sriram and Vicario, Enrico},
title = {Hybrid Tools for Hybrid Systems - Proving Stability and Safety at Once},
booktitle = {Formal Modeling and Analysis of Timed Systems},
series = {Lecture Notes in Computer Science},
volume = {9268},
year = {2015},
pages = {222--239},
isbn = {978-3-319-22974-4},
url = {http://dx.doi.org/10.1007/978-3-319-22975-1_15},
doi = {10.1007/978-3-319-22975-1_15}
}
W. Hagemann, E. Moehlmann, und O. Theel, "Hybrid Tools for Hybrid Systems: Proving Stability and Safety at Once -- Extended Version" SFB/TR 14 AVACS, Reports of SFB/TR 14 AVACS 108, 2015.
@TECHREPORT{atr108,
author = {Hagemann, Willem and Moehlmann, Eike and Theel, Oliver},
editor = {Becker, Bernd and Damm, Werner and Finkbeiner, Bernd and Fraenzle, Martin and Olderog, Ernst-Ruediger and Podelski, Andreas},
month = {July},
title = {Hybrid Tools for Hybrid Systems: Proving Stability and Safety at Once -- Extended Version},
type = {Reports of SFB/TR 14 AVACS},
series = {ATR},
number = {108},
year = {2015},
institution = {SFB/TR 14 AVACS},
note = {http://www.avacs.org},
abstract = {Industrial applications usually require safety and stability properties. The safety property guarantees that "something bad" never happens, and the stability property guarantees that "something good" eventually happens. The analyses of both properties are usually performed in isolation. In this work, we consider analyzing both properties by a single automatic approach for hybrid systems. We basically merge analyses of both properties to exploit the knowledge gained from the analysis of each of them in the analysis of the other. We show how both analyses can be divided into multiple steps and interlocked such that both benefit from each other. In fact, we compute single-mode Lyapunov functions, unroll the hybrid system's automaton via repeated reachability queries, and, finally, compute a global Lyapunov function. Each reachability query is simplified by exploiting the knowledge gained from the single-mode Lyapunov functions. The final computation of the global Lyapunov function is simplified by a precise characterization of the reachable states and reuses the single-mode Lyapunov functions. We provide automated tools necessary to link the analyses and report on promising experiments we performed using our new prototype tool.},
access={open},
bibtex={atr108.bib},
pdf={avacs_technical_report_108.pdf},
subproject={H3,H4},
}
W. Damm, M. Horbach, und V. Sofronie-Stokkermans, "Decidability of Verification of Safety Properties of Spatial Families of Linear Hybrid Automata" SFB/TR 14 AVACS, Reports of SFB/TR 14 AVACS 111, 2015.
@TECHREPORT{atr111,
author = {Damm, Werner and Horbach, Matthias and Sofronie-Stokkermans, Viorica},
editor = {Becker, Bernd and Damm, Werner and Finkbeiner, Bernd and Fraenzle, Martin and Olderog, Ernst-Ruediger and Podelski, Andreas},
month = {December},
title = {Decidability of Verification of Safety Properties of Spatial Families of Linear Hybrid Automata},
type = {Reports of SFB/TR 14 AVACS},
series = {ATR},
number = {111},
year = {2015},
institution = {SFB/TR 14 AVACS},
note = {http://www.avacs.org},
abstract = {We consider systems composed of an unbounded number of uniformly designed linear hybrid automata, whose dynamic behavior is determined by their relation to neighboring systems. We present a class of such systems and a class of safety properties whose verification can be reduced to the verification of (small) families of ``neighboring'' systems of bounded size, and identify situations in which such verification problems are decidable, resp.\ fixed parameter tractable. We illustrate the approach with an example from coordinated vehicle guidance, and describe an implementation which allows us to perform such verification tasks automatically.},
access={open},
bibtex={atr111.bib},
pdf={avacs_technical_report_111.pdf},
subproject={H3},
}
W. Hagemann und E. Moehlmann, "Inscribing H-Polyhedra in Quadrics using a Projective Generalization of Closed Convex Sets" in Proc. Proceedings of the 27th Canadian Conference on Computational Geometry (CCCG 2015), Kingston, Ontario, Canada, 2015, 2015.
@INPROCEEDINGS{conf/cccg/hagemannm2015a,
author = {Hagemann, Willem and Moehlmann, Eike},
title = {Inscribing H-Polyhedra in Quadrics using a Projective Generalization of Closed Convex Sets},
booktitle = {Proceedings of the 27th Canadian Conference on Computational Geometry (CCCG 2015), Kingston, Ontario, Canada, 2015},
year = {2015},
url = {http://research.cs.queensu.ca/cccg2015/CCCG.pdf},
abstract = {We present a projective generalization of closed sets, called complete projective embeddings, which allows us to inscribe H-polyhedra in quadrics efficiently. Essentially, the complete projective embedding of a closed convex set $P \subseteq K^d$ is a double cone in $K^{d+1}$. We show that complete projective embeddings of polyhedral sets are of particular interest and already occurred in the theory of linear fractional programming. Our approach works as follows: By projective principal axis transformation the quadric is converted to a hyperboloid and then approximated by an inner (right) spherical cylinder. Now, given an inscribed H-polytope of the spherical cross section, cylindrification of the polyhedron yields an inscribed H-polyhedron of the spherical cylinder and, hence, of the hyperboloid. After application of the inverse base transformation this approach finally yields an inscribed set of the quadric. The crucial task of this procedure is to find an appropriate generalization of closed sets, which is closed under the involved projective transformations and allows us to recover the non-projective equivalents to the inscribed sets obtained by our approach. It turns out that complete projective embeddings are the requested generalizations.},
access={open},
bibtex={hagemann.cccg2015.bib},
category={other},
conference-long={Canadian Conference on Computational Geometry},
conference-short={CCCG},
cross-site={""},
pdf={hagemann.cccg2015.pdf},
subproject={H3,H4},
}
W. Damm, M. Horbach, und V. Sofronie-Stokkermans, Decidability of Verification of Safety Properties of Spatial Families of Linear Hybrid AutomataSpringer International Publishing.
doi: 10.1007/978-3-319-24246-0_12
@INCOLLECTION{DammFrocos15,
author = {Damm, Werner and Horbach, Matthias and Sofronie-Stokkermans, Viorica},
editor = {Lutz, Carsten and Ranise, Silvio},
title = {Decidability of Verification of Safety Properties of Spatial Families of Linear Hybrid Automata},
booktitle = {Frontiers of Combining Systems},
series = {Lecture Notes in Computer Science},
volume = {9322},
year = {2015},
pages = {186-202},
publisher = {Springer International Publishing},
isbn = {978-3-319-24245-3},
doi = {10.1007/978-3-319-24246-0_12},
language={English},
}
W. Damm und A. Sangiovanni-Vincentelli, "A conceptual model of Systems of Systems" in Proc. Proceedings Second International Workshop on the Swarm at the Edge of the Cloud, CPS Week 2015, 2015.
@INPROCEEDINGS{DSV2015,
author = {Damm, Werner and Sangiovanni-Vincentelli, Alberto},
month = {April},
title = {A conceptual model of Systems of Systems},
booktitle = {Proceedings Second International Workshop on the Swarm at the Edge of the Cloud, CPS Week 2015},
year = {2015},
url = {http://terraswarm.org/pubs/556.html},
abstract = {We propose a meta - model for systems of systems which is rich enough to model realistic applications and at the same time can be used as a blue print for identifying typical trouble spots in SoS design(and consequently also for IoT, IoE, networked CPS and swarm systems) as well as guiding the development of distributed strategies for the coordination and orchestration of their constituent system.The talk highlights typical pitfalls in SoS design and explains countermeasures based on the underlying conceptual model.},
day={13},
}
P. Reinkemeier, A. Benveniste, W. Damm, und I. Stierand, Contracts for Schedulability AnalysisSpringer International Publishing.
doi: 10.1007/978-3-319-22975-1_18
@INCOLLECTION{RBDS+FORMATS2015,
author = {Reinkemeier, Philipp and Benveniste, Albert and Damm, Werner and Stierand, Ingo},
editor = {Sankaranarayanan, Sriram and Vicario, Enrico},
title = {Contracts for Schedulability Analysis},
booktitle = {Formal Modeling and Analysis of Timed Systems},
series = {Lecture Notes in Computer Science},
volume = {9268},
year = {2015},
pages = {270--287},
publisher = {Springer International Publishing},
isbn = {978-3-319-22974-4},
doi = {10.1007/978-3-319-22975-1_18},
abstract = {In this paper we propose a framework of Assume / Guarantee contracts for schedulability analysis. Unlike previous work addressing compositional scheduling analysis, our objective is to provide support for the OEM / supplier subcontracting relation. The adaptation of Assume / Guarantee contracts to schedulability analysis requires some care, due to the handling of conflicts caused by shared resources. We illustrate our framework in the context of AUTOSAR methodology now popular in the automotive industry sector.}
}
E. Boede, H. Daembkes, W. Damm, F. Griebel, F. Koester, K. Lemmer, A. Luedtke, J. Niehaus, und T. Peikenkamp, "SafeTRANS: Safety, Testen und Entwicklungsprozesse hochautomatisierter Systeme" Haus der Technik (Expert Verlag), vol. Fahrerassistenz und Aktive Sicherheit, iss. Volume 137.
@ARTICLE{STAF2015,
author = {Boede, Eckard and Daembkes, Heinrich and Damm, Werner and Griebel, Franziska and Koester, Frank and Lemmer, Karsten and Luedtke, Andreas and Niehaus, Juergen and Peikenkamp, Thomas},
title = {SafeTRANS: Safety, Testen und Entwicklungsprozesse hochautomatisierter Systeme},
journal = {Haus der Technik (Expert Verlag)},
volume = {Fahrerassistenz und Aktive Sicherheit},
number = {Volume 137},
year = {2015},
pages = {184-200},
abstract = {SafeTRANS ist ein gemeinnuetziger deutscher Verein, der sich insbesondere zum Ziel gesetzt hat, Prozesse, Methoden und Werkzeuge zu erforschen, die die Entwicklung sicherer Embedded Systems in der Verkehrstechnik zu verbessern. Im Januar 2015 wurde dazu ein Arbeitskreis Hochautomatisierte Systeme: Safety, Testen und Entwicklungsprozesse gegruendet. Hierin wollen Teilnehmer aus unterschiedlichen Bereichen der Verkehrstechnik zusammenarbeiten, um gemeinsame Ansaetze fuer die Entwicklung und den Test von hochautomatisierten sicherheitskritischen Systemen zu erarbeiten. Als ein erster gemeinsamer Arbeitspunkt wurde die Definition eines interperabelen Umweltmodels fuer die Umgebung der mobilen Plattform identifiziert. Dieses Ueberblickspaper stellt kurz den Verein SafeTRANS und dessen Arbeitskreis dar und gibt dann einen Ueberblick ueber die Resultate einschlaegiger durch SafeTRANS initiierter Projekte zu Methoden der Modellierung und Absicherung der Mensch-Assistenzsystem-Interaktion und er Sicherheit von Assistenzsystemen.},
ISBN = {978-3-8169-3310-6}
W. Hagemann, E. Möhlmann, und A. Rakow, "Verifying a PI Controller using SoapBox and Stabhyli: Experiences on Establishing Properties for a Steering Controller." 2014.
@INPROCEEDINGS{,
author = {Hagemann, Willem and Möhlmann, Eike and Rakow, Astrid},
month = {April},
title = {Verifying a PI Controller using SoapBox and Stabhyli: Experiences on Establishing Properties for a Steering Controller},
series = {ARCH 2014},
year = {2014},
abstract = {In the following we describe practical experiences on verifying a steering controller specification. The hybrid automaton implements a PI control rule and considers the vehicle's velocity as input from the environment. By combining the tools Stabhyli and SoapBox, we establish several safety and liveness properties for the steering controller, including convergence towards an equilibrium.}
}
W. Hagemann, Reachability Analysis of Hybrid Systems Using Symbolic Orthogonal ProjectionsSpringer International Publishing.
doi: 10.1007/978-3-319-08867-9_27
@INCOLLECTION{,
author = {Hagemann, Willem},
editor = {Biere, Armin and Bloem, Roderick},
title = {Reachability Analysis of Hybrid Systems Using Symbolic Orthogonal Projections},
booktitle = {Computer Aided Verification},
series = {Lecture Notes in Computer Science},
volume = {8559},
year = {2014},
pages = {407-423},
publisher = {Springer International Publishing},
isbn = {978-3-319-08866-2},
doi = {10.1007/978-3-319-08867-9_27},
language={English},
}
G. Baumgarten, M. Oertel, A. Rettberg, und M. Götz, "First results of automatic fault-injection in an AUTOSAR tool-chain" in Proc. Industrial Informatics (INDIN), 2014 12th IEEE International Conference on, 2014.
doi: 10.1109/INDIN.2014.6945503
@INPROCEEDINGS{,
author = {Baumgarten, Guilherme and Oertel, Markus and Rettberg, Achim and Götz, Marcelo},
keywords = {Analytical models, AUTOSAR, computer simulation, Embedded system, fault injection, fault port, functional automotive safety, Hardware, ISO 26262, Ports (Computers), Safety, Safety relevant systems, Software, Software architecture, Switches},
month = jul, title = {First results of automatic fault-injection in an AUTOSAR tool-chain},
booktitle = {Industrial Informatics (INDIN), 2014 12th IEEE International Conference on},
year = {2014},
pages = {170-175},
publisher = {IEEE},
location = {Porto Alegre RS, Brazil},
url = {http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=6945503&isnumber=6945470},
doi = {10.1109/INDIN.2014.6945503},
abstract = {Fault-injection is a commonly used method for testing safety-relevant embedded systems. Especially after the introduction of the ISO 26262 the importance of this technique has gained attention in the automotive domain to test the proper implementation of safety concepts. To enable meaningful tests, the possible random hardware faults need to be aligned in early stages of the development process between the hardware and software developers. Since it is difficult to reason that a system nominal behavior is not affected by the injected fault-code, we aim at an automatic injection of faults into the software units using an AUTOSAR tool-chain. An extension in the AUTOSAR design tool is proposed in order to capture fault definitions that shall be used to automatically create trigger-able defects in the behavioral models designed with SIMULINK/Targetlink. As first results, it is demonstrated how to integrate faults in Targetlink to be able to use AUTOSAR simulation environments without any further changes to perform fault-injection tests. Furthermore, automatically generated test-vectors from requirements are used to trigger the fault injection at runnable level.}
}
W. Damm, W. Hagemann, E. Möhlmann, und A. Rakow, "Component Based Design of Hybrid Systems: A Case Study on Concurrency and Coupling" SFB/TR 14 AVACS, Reports of SFB/TR 14 AVACS 95, 2014.
@TECHREPORT{atr095,
author = {Damm, Werner and Hagemann, Willem and Möhlmann, Eike and Rakow, Astrid},
editor = {Becker, Bernd and Damm, Werner and Finkbeiner, Bernd and Fränzle, Martin and Olderog, Ernst-Rüdiger and Podelski, Andreas},
month = {February},
title = {Component Based Design of Hybrid Systems: A Case Study on Concurrency and Coupling},
type = {Reports of SFB/TR 14 AVACS},
series = {ATR},
number = {95},
year = {2014},
institution = {SFB/TR 14 AVACS},
note = {http://www.avacs.org},
pdf={avacs_technical_report_095.pdf},
subproject={H3,H4},
}
W. Damm, E. Möhlmann, und A. Rakow, "Component Based Design of Hybrid Systems: A Case Study on Concurrency and Coupling" in Proc. HSCC, 2014.
doi: 10.1145/2562059.2562120
@INPROCEEDINGS{DBLP:conf/hybrid/DammMR14,
author = {Damm, Werner and Möhlmann, Eike and Rakow, Astrid},
keywords = {Assume-Guarantee, automatic verification, Composition, Computer-Aided Design, hybrid systems, interface, Safety, Specifications, stability},
title = {Component Based Design of Hybrid Systems: A Case Study on Concurrency and Coupling},
booktitle = {HSCC},
year = {2014},
pages = {145-150},
doi = {10.1145/2562059.2562120},
crossref = {DBLP:conf/hybrid/2014},
abstract = {In the search of design principles that allow compositional reasoning about safety and stability properties of hybrid controllers we examine a case study on a simplified driver assistance system for lane keeping and velocity control. We thereby target loosely coupled systems: the composed system has to accomplish a task that may depend on several of its subcomponents while little coordination between them is necessary. Our assistance system has to accomplish a comfortable centrifugal force, lane keeping and velocity control. This leads to an architecture composed of a velocity controller and a steering controller, where each controller has its local objectives and together they maintain a global objective. The steering controller makes time bounded promises about its steering, which the velocity controller uses for optimization. For this system, we deductively prove from the components' properties that the objectives of the composed system are accomplished.}
}
S. Fröschle und A. Stühring, Idea: Security Engineering Principles for Day Two Car2X ApplicationsSpringer International Publishing.
doi: 10.1007/978-3-319-04897-0_14
@INCOLLECTION{ESSOS14,
author = {Fröschle, Sibylle and Stühring, Alexander},
title = {Idea: Security Engineering Principles for Day Two Car2X Applications},
booktitle = {Engineering Secure Software and Systems},
series = {Lecture Notes in Computer Science},
volume = {8364},
year = {2014},
pages = {213-221},
publisher = {Springer International Publishing},
url = {http://dx.doi.org/10.1007/978-3-319-04897-0_14},
doi = {10.1007/978-3-319-04897-0_14}
}
S. Henkler, T. Gezgin, I. Stierand, und A. Rettberg, "Evaluation of a State-based Real-Time Scheduling Analysis Technique" in Proc. International Conference on Industrial Informatics (INDIN2014), 2014.
@INPROCEEDINGS{GHSR14B,
author = {Henkler, Stefan and Gezgin, Tayfun and Stierand, Ingo and Rettberg, Achim},
keywords = {Abstraction Techniques, Model Checking, Real-time systems, Scheduling analysis},
month = jul, title = {Evaluation of a State-based Real-Time Scheduling Analysis Technique},
booktitle = {International Conference on Industrial Informatics (INDIN2014)},
year = {2014},
location = {Porto Alegre},
abstract = {The analysis of real-time properties is crucial in safety critical areas. Systems have to work in a timely manner to offer correct services. The analysis of timing properties is particularly difficult for distributed systems when complex interferences between individual tasks can occur. Considering only critical instances, as analytic approaches do, may deliver pessimistic results leading to higher production costs. In previous works we introduced a state-based approach to validate taskand end-to-end deadlines for distributed systems. To improve scalability and reduce the analysis time, the approach computes the state spaces of the individual resources in a compositional fashion. For this, abstraction and composition operations were defined to remove those parts of the inputs of resources which have no influence on the response times of the allocated tasks. In this work, a new abstraction technique is introduced for scenarios where event bursts occur. Further, we extend our approach for systems with cyclic dependencies among the resources. We evaluate our approach on a set of example scenarios and compare the results with the state-of-the-art tool Uppaal.}
}
T. Gezgin, S. Henkler, I. Stierand, und A. Rettberg, "Impact Analysis for Timing Requirements on Real-Time Systems" in Proc. The 20th IEEE International Conference on Embedded and Real-Time Computing Systems and Applications (RTCSA 2014), 2014.
@INPROCEEDINGS{GSHR14,
author = {Gezgin, Tayfun and Henkler, Stefan and Stierand, Ingo and Rettberg, Achim},
keywords = {Impact Analysis, State-based Timing Analysis},
month = aug, title = {Impact Analysis for Timing Requirements on Real-Time Systems},
booktitle = {The 20th IEEE International Conference on Embedded and Real-Time Computing Systems and Applications (RTCSA 2014)},
year = {2014},
publisher = {IEEE xplore},
location = {Chongqing},
abstract = {The analysis of real-time properties is crucial in safety critical areas, and is particularly difficult for distributed systems as complex interferences between tasks of different priorities can occur. In previous works we have introduced a state-based analysis approach to validate end-to-end deadlines for distributed systems, where the state spaces of all resources, such as processors and buses, are computed in a compositional fashion. For this, abstraction and composition operations were defined to adequately handle task and resource dependencies. During the design process of a system changes occur typically on both the specification and implementation level, such that already performed analyses of the system have to be repeated. In this work, we define a methodology to adequately handle such changes and to determine the minimal part of the affected architecture. For this, we define an appropriate refinement relation between state spaces of the resources.We use contracts to further reduce the re-validation effort. This check takes place at a higher design level, where only the specification is considered.}
}
I. Stierand, S. Malipatlolla, S. Fröschle, A. Stühring, und S. Henkler, "Integrating the Security Aspect into Design Space Exploration of Embedded Systems" in Proc. The 2nd IEEE International Workshop on Reliability and Security Data Analysis (RSDA 2014), 2014.
@INPROCEEDINGS{IS+14,
author = {Stierand, Ingo and Malipatlolla, Sunil and Fröschle, Sibylle and Stühring, Alexander and Henkler, Stefan},
keywords = {design space exploration, Embedded System Design, Formalization, Integration, Security},
month = nov, title = {Integrating the Security Aspect into Design Space Exploration of Embedded Systems},
booktitle = {The 2nd IEEE International Workshop on Reliability and Security Data Analysis (RSDA 2014)},
year = {2014},
abstract = {Conventionally, the process of design space exploration (DSE) in embedded system design considers performance, energy and cost as important objectives for optimization. However, in many domains such as in modern day cars the security aspect is becoming more and more significant. On the other hand, the inclusion of security aspect adds a new dimension to the existing complexity of large design spaces, thus an automated support for this is highly desired. The goal of this work is to integrate the security constraint in an automated DSE process to obtain an architecture which is both cost-optimized and secure. In specific, for a given system, our approach defines a formal notion of security, which along with other parameters is fed as an input to the DSE process to obtain an architecture satisfying the defined security and realtime requirements. An evaluation of the proposed approach is also performed using an example automotive embedded system.}
}
W. Damm und B. Finkbeiner, Automatic Compositional Synthesis of Distributed SystemsSpringer International Publishing.
doi: 10.1007/978-3-319-06410-9_13
@INCOLLECTION{raey,
author = {Damm, Werner and Finkbeiner, Bernd},
editor = {Jones, Cliff and Pihlajasaari, Pekka and Sun, Jun},
title = {Automatic Compositional Synthesis of Distributed Systems},
booktitle = {FM 2014: Formal Methods},
series = {Lecture Notes in Computer Science},
volume = {8442},
year = {2014},
pages = {179-193},
publisher = {Springer International Publishing},
isbn = {978-3-319-06409-3},
doi = {10.1007/978-3-319-06410-9_13},
language={English},
}
I. Stierand, P. Reinkemeier, und P. Bhaduri, "Virtual Integration of Real-Time Systems based on Resource Segregation Abstraction" in Proc. Proc. Formal Modelling and Analysis of Timed Systems (FORMATS'14), 2014.
@INPROCEEDINGS{StierandReinkemeierBhaduri2014,
author = {Stierand, Ingo and Reinkemeier, Philipp and Bhaduri, Purandar},
month = sep, title = {{Virtual Integration of Real-Time Systems based on Resource Segregation Abstraction}},
booktitle = {Proc. Formal Modelling and Analysis of Timed Systems (FORMATS'14)},
year = {2014},
pages = {1--15},
abstract = {Embedded safety-critical systems must not only be functionally correct but must also provide timely service. It is thus important to have rigorous analysis techniques for determining timing properties of such systems. We consider a layered design process, where timing analysis applies when the system is integrated on a target platform. More precisely, we focus on contract-based design, and ask whether a set of real-time components continues to comply to a given system specification when it is integrated on a common hardware. We present an approach for compositional timing analysis, and define conditions under which the system integration will preserve all the timing properties given by the system specification. Therefore, engineers can negotiate specifications of the individual components a priori, knowing that no integration issues will occur due to shared resource usage. The approach exploits $\omega$-languages, which enables analysis techniques based on model-checking. Such an analysis is shown by a case study.}
M. Büker, "An Automated Semantic-Based Approach for Creating Task Structures" PhD Thesis , 2013.
@PhdThesis{Bueker2013, Title = {An Automated Semantic-Based Approach for Creating Task Structures},
Author = {Büker, Matthias},
School = {Carl von Ossietzky Universität Oldenburg},
Year = {2013},
Abstract = {This work is settled in the area of safety-critical embedded systems and presents a formally funded approach for automatically creating an optimized task structure from a Simulink model. Based on an extended task network formalism, in a first step, a formal translation scheme on Simulink block level is defined. Because the resulting tasks are very fine-grained and unbalanced with respect to their required computation demand (denoted as task weight), in a second step, an optimized task structure is created by formally merging tasks with each other. Here, the optimization goal is to minimize inter-task communication and to balance the weights of tasks. Additionally, it is formally proven that both the translation and the merging of tasks preserves the formal execution semantics of Simulink. The whole approach was implemented as an automated tool-chain and evaluated with the help of a case study.},
Key = {bueker2013},
Keywords = {Embedded systems, Matlab Simulink, optimization, real-time, Task Networks},
Language = {English},
Location = {Oldenburg, Germany},
Owner = {matthias},
Pubstate = {published},
Timestamp = {2014.02.20},
Url = {http://oops.uni-oldenburg.de/1600/}
}
M. Büker, W. Damm, G. Ehmen, S. Henkler, D. Janssen, I. Stierand, und E. Thaden, From Specification Models to Distributed Embedded Applications: A Holistic User-Guided Approach.
doi: 10.4271/2013-01-0432
@Misc{BDE+13, Title = {From Specification Models to Distributed Embedded Applications: A Holistic User-Guided Approach},
Author = {Büker, Matthias and Damm, Werner and Ehmen, Günter and Henkler, Stefan and Janssen, Detlef and Stierand, Ingo and Thaden, Eike},
HowPublished = {Published at SAE 2013 World Congress},
Year = {2013},
Abstract = {We introduce a framework that aims at automating significant parts of the design flow in a typical scenario for embedded application development in the automotive domain. Given a specification model of a new automotive feature captured in Matlab-Simulink, the framework allocates new functions onto the devices of the hardware architecture such as ECUs and buses considering already deployed functions and the distributed nature of embedded systems used in the automotive industry. The framework is motivated by the iterative design process in industrial practice and subdivided into several steps. In the task creation process a balanced task structure is derived automatically from the specification model. Automatic code generation and execution time analysis for each task demands a semantics-preserving restructuring process of the Matlab-Simulink model. The task structure and the generated software tasks serve as input for the automated design space exploration process which has the goal to find a cost-optimized extension of the existing target hardware and an allocation of tasks on this modified target hardware. This allocation is sufficient to guarantee both system-level timing requirements and deadlines extracted from the Matlab-Simulink specification model. Engineers may guide the complete process by running it iteratively and tighten the constraints based on their expert knowledge. This semi-automatic user-driven and transparent optimization process helps to increase acceptance by engineers. For evaluation an industrial-motivated case study of a lane-change driver assistance system and an adaptive cruise control has been used.},
Doi = {10.4271/2013-01-0432},
Owner = {guenter},
Timestamp = {2014.02.20},
Url = {http://papers.sae.org/2013-01-0432/}
}
M. Büker, W. Damm, G. Ehmen, S. Henkler, D. Janssen, I. Stierand, und E. Thaden, "From Specification Models to Distributed Embedded Applications: A Holistic User-Guided Approach" SAE International Journal of Passenger Cars- Electronic and Electrical Systems, vol. 6.
doi: 10.4271/2013-01-0432
@Article{SAE2013Journal, Title = {From Specification Models to Distributed Embedded Applications: A Holistic User-Guided Approach},
Author = {Büker, Matthias and Damm, Werner and Ehmen, Günter and Henkler, Stefan and Janssen, Detlef and Stierand, Ingo and Thaden, Eike},
Journal = {SAE International Journal of Passenger Cars- Electronic and Electrical Systems},
Year = {2013},
Month = may, Note = {Originally published at SAE 2013 World Congress. Selected for Journal publication by the SAE.},
Pages = {194-212},
Volume = {6},
Abstract = {We introduce a framework that aims at automating significant parts of the design flow in a typical scenario for embedded application development in the automotive domain. Given a specification model of a new automotive feature captured in Matlab-Simulink, the framework allocates new functions onto the devices of the hardware architecture such as ECUs and buses considering already deployed functions and the distributed nature of embedded systems used in the automotive industry. The framework is motivated by the iterative design process in industrial practice and subdivided into several steps. In the task creation process a balanced task structure is derived automatically from the specification model. Automatic code generation and execution time analysis for each task demands a semantics-preserving restructuring process of the Matlab-Simulink model. The task structure and the generated software tasks serve as input for the automated design space exploration process which has the goal to find a cost-optimized extension of the existing target hardware and an allocation of tasks on this modified target hardware. This allocation is sufficient to guarantee both system-level timing requirements and deadlines extracted from the Matlab-Simulink specification model. Engineers may guide the complete process by running it iteratively and tighten the constraints based on their expert knowledge. This semi-automatic user-driven and transparent optimization process helps to increase acceptance by engineers. For evaluation an industrial-motivated case study of a lane-change driver assistance system and an adaptive cruise control has been used.},
Doi = {10.4271/2013-01-0432},
ISSN = {1946-4622},
Owner = {guenter},
Timestamp = {2014.02.20},
Url = {http://saepcelec.saejournals.org/}
}
W. Damm, H. Peter, J. Rakow, und B. Westphal, "Can we build it: formal synthesis of control strategies for cooperative driver assistance systems" Mathematical Structures in Computer Science, vol. 23, iss. 4.
doi: 10.1017/s0960129512000230
@Article{DBLP:journals/mscs/DammPRW13, Title = {Can we build it: formal synthesis of control strategies for cooperative driver assistance systems},
Author = {Damm, Werner and Peter, Hans-Jörg and Rakow, Jan and Westphal, Bernd},
Journal = {Mathematical Structures in Computer Science},
Year = {2013},
Number = {4},
Pages = {676-725},
Volume = {23},
Bibsource = {DBLP, http://dblp.uni-trier.de},
Doi = {10.1017/s0960129512000230},
Owner = {guenter},
Timestamp = {2014.02.20}
}
T. Gezgin, S. Henkler, A. Rettberg, und I. Stierand, Contract-Based Compositional Scheduling Analysis for Evolving SystemsSpringer Berlin Heidelberg.
doi: 10.1007/978-3-642-38853-8_25
@InCollection{iessGHSR, Title = {Contract-Based Compositional Scheduling Analysis for Evolving Systems},
Author = {Gezgin, Tayfun and Henkler, Stefan and Rettberg, Achim and Stierand, Ingo},
Booktitle = {Embedded Systems: Design, Analysis and Verification},
Publisher = {Springer Berlin Heidelberg},
Year = {2013},
Editor = {Schirner, Gunar and Götz, Marcelo and Rettberg, Achim and Zanella, MauroC. and Rammig, FranzJ.},
Pages = {272-282},
Series = {IFIP Advances in Information and Communication Technology},
Volume = {403},
Doi = {10.1007/978-3-642-38853-8_25},
ISBN = {978-3-642-38852-1},
Keywords = {Abstraction Techniques, Compositional analysis, Model Checking, Real-time systems, Scheduling analysis},
Owner = {guenter},
Timestamp = {2014.02.20}
}
T. Gezgin, I. Stierand, S. Henkler, und A. Rettberg, "State-based scheduling analysis for distributed real-time systems" Design Automation for Embedded Systems.
doi: 10.1007/s10617-013-9112-7
@Article{deamGHSR, Title = {State-based scheduling analysis for distributed real-time systems},
Author = {Gezgin, Tayfun and Stierand, Ingo and Henkler, Stefan and Rettberg, Achim},
Journal = {Design Automation for Embedded Systems},
Year = {2013},
Pages = {1-18},
Doi = {10.1007/s10617-013-9112-7},
ISSN = {0929-5585},
Keywords = {Compositional analysis, distributed real-time systems , Scheduling analysis, timed automata, Timing analysis},
Language = {English},
Owner = {guenter},
Publisher = {Springer US},
Timestamp = {2014.02.20}
}
S. Malipatlolla und I. Stierand, "Evaluating the Impact of Integrating a Security Module on the Real-Time Properties of a System" in Proc. International Embedded Systems Symposium (IESS), 2013.
@InProceedings{MS+IESS13, Title = {Evaluating the Impact of Integrating a Security Module on the Real-Time Properties of a System},
Author = {Malipatlolla, Sunil and Stierand, Ingo},
Booktitle = {International Embedded Systems Symposium (IESS)},
Year = {2013},
Abstract = {With a rise in the deployment of electronics in today's systems especially in automobiles, the task of securing them against various attacks has become a major challenge. In particular, the most vulnerable points are: (i) communication paths between the Electronic Control Units (ECUs) and between sensors & actuators and the ECU, (ii) remote software updates from the manufacturer and the in-field system. However, when including additional mechanisms to secure such systems, especially real-time systems, there will be a major impact on the real-time properties and on the overall performance of the system. Therefore, the goal of this work is to deploy a minimal security module in a target real-time system and to analyze its impact on the aforementioned properties of the system, while achieving the goals of secure communication and authentic system update. From this analysis, it has been observed that, with the integration of such a security module into the ECU, the response time of the system is strictly dependent on the utilized communication interface between the ECU processor and the security module. The analysis is performed utilizing the security module operating at different frequencies and communicating over two different interfaces i.e., Low-Pin-Count (LPC) bus and Memory-Mapped I/O (MMIO) method.},
Owner = {guenter},
Timestamp = {2014.02.20}
}
P. Reinkemeier, P. Ittershagen, I. Stierand, P. A. Hartmann, S. Henkler, und K. Grüttner, "Seamless Segregation for Multi-Core Systems" OFFIS, Technical Report , 2013.
@TechReport{OFFIS-TR2013+SegMultiCore, Title = {Seamless Segregation for Multi-Core Systems},
Author = {Reinkemeier, Philipp and Ittershagen, Philipp and Stierand, Ingo and Hartmann, Philipp A. and Henkler, Stefan and Grüttner, Kim},
Institution = {OFFIS},
Year = {2013},
Month = aug, Type = {Technical Report},
Keywords = {interface, multi-core, scheduling , segregation},
Owner = {guenter},
Timestamp = {2014.02.20}
}
P. Reinkemeier und I. Stierand, Compositional Timing Analysis of Real-Time Systems based on Resource Segregation AbstractionSpringer Berlin Heidelberg.
doi: 10.1007/978-3-642-38853-8_17
@InCollection{RS+IESS13, Title = {Compositional Timing Analysis of Real-Time Systems based on Resource Segregation Abstraction},
Author = {Reinkemeier, Philipp and Stierand, Ingo},
Booktitle = {Embedded Systems: Design, Analysis and Verification},
Publisher = {Springer Berlin Heidelberg},
Year = {2013},
Editor = {Schirner, Gunar and Götz, Marcelo and Rettberg, Achim and Zanella, MauroC. and Rammig, FranzJ.},
Pages = {181-192},
Series = {IFIP Advances in Information and Communication Technology},
Volume = {403},
Abstract = {For most embedded safety-critical systems not only the functional correctness is of importance, but they must provide their services also in a timely manner. Therefore, it is important to have rigorous analysis techniques for determining timing properties of such systems. The ever increasing complexity of such real-time systems calls for compositional analysis techniques, where timing properties of local systems are composed to infer timing properties of the overall system. In analytical timing analysis approaches the dynamic timing behavior of a system is characterized by mathematical formulas abstracting from the state-dependent behavior of the system. While these approaches scale well and also support compositional reasoning, the results often exhibit large over-approximations. Our approach for compositional timing analysis is based on ω-regular languages, which can be employed in automata-based model-checking frameworks. To tackle the scalability problem due to state-space explosion, we present a technique to abstract an application by means of its resource demands. The technique allows to carry out an analysis independently for each application that shall be deployed on the same platform using its granted resource supply. Integration of the applications on the platform can then be analyzed based on the different resource supplies without considering details of the applications.},
Doi = {10.1007/978-3-642-38853-8_17},
ISBN = {978-3-642-38852-1},
Owner = {guenter},
Timestamp = {2014.02.20}
}
I. Stierand und S. Malipatlolla, "Exploiting Functional Models to Assess the Security Aspect in Embedded System Design" in Proc. International Symposium on Security in Computing and Communications (SSCC 2013), 2013.
@InProceedings{IS+2013, Title = {Exploiting Functional Models to Assess the Security Aspect in Embedded System Design},
Author = {Stierand, Ingo and Malipatlolla, Sunil},
Booktitle = {International Symposium on Security in Computing and Communications (SSCC 2013)},
Year = {2013},
Abstract = {Conventionally, automotive embedded systems are assessed for evaluating various different aspects such as safety, functionality, and real-time. However, the inclusion of security aspect, which indeed is becoming increasingly important in modern day cars, has a significant impact on the above aspects, especially on functionality and real-time. This impact would be clearly visible in the functional model of the embedded system because including security features modifies the data flow in the system. Thus, the goal of this contribution is to assess and evaluate the security aspect in such systems by exploiting their functional models. Such an assessment further results in establishing a possible relation between real-time formal analysis and the existing security theory. For this, a formal approach},
Keywords = {Embedded systems, Formalization, real-time, Security Protocols, Validation.},
Owner = {guenter},
Timestamp = {2014.02.20}
}
I. Stierand, P. Reinkemeier, T. Gezgin, und P. Bhaduri, "Real-Time Scheduling Interfaces and Contracts for the Design of Distributed Embedded Systems" in Proc. Industrial Embedded Systems (SIES), 2013 8th IEEE International Symposium on, 2013.
@InProceedings{SRG+SIES2013, Title = {Real-Time Scheduling Interfaces and Contracts for the Design of Distributed Embedded Systems},
Author = {Stierand, Ingo and Reinkemeier, Philipp and Gezgin, Tayfun and Bhaduri, Purandar},
Booktitle = {Industrial Embedded Systems (SIES), 2013 8th IEEE International Symposium on},
Year = {2013},
Owner = {guenter},
Timestamp = {2014.02.20}
}
E. M. Thaden, "Semi-Automatic Optimization of Hardware Architectures in Embedded Systems" PhD Thesis , 2013.
@PhdThesis{Thaden2013, Title = {Semi-Automatic Optimization of Hardware Architectures in Embedded Systems},
Author = {Thaden, Eike Martin},
School = {Carl von Ossietzky Universität Oldenburg},
Year = {2013},
Month = may, Note = {Submitted on 2013-02-04.},
Abstract = {The effort for the development of a safety-critical embedded system can be reduced tremendously if a similar existing system is used as basis which is then extended by additional functionality. However, this is a very challenging task because in general for both the already integrated and the new parts of such a system complex constraints have to be satisfied to guarantee their correct functionality. Furthermore, larger embedded systems are typically realized as distributed systems with multiple processors connected by a complex communication infrastructure. This leads to a huge number of design alternatives suitable for the extension of such a system thus complicating the manual search for cost-efficient solutions or even rendering it impossible. Searching entirely automatically is not too promising as well because usually lots of informal requirements have to be satisfied, some of which are concretized while already searching for possible solutions. In this work a semi-automatic approach for the optimization of hardware architectures of embedded systems is presented that supports developers in extending existing systems by adding additional functionality implemented as software tasks. The two-tier optimization process explores the design space defined by constraints for valid allocations of the software tasks to the hardware architecture. If necessary, existing processors can be replaced by more powerful ones or additional processors can be integrated while aiming for a cost-efficient hardware architecture. The optimization approach exploits that larger embedded systems typically use a hierarchical structure where the hardware architecture is composed from hardware subsystems: Firstly, a global (system-wide) optimization step computes pre-allocations of all additional software tasks onto subsystems based on an abstract characterization of the required and provided computation capacity. Separately for each subsystem, the pre-allocated tasks are then allocated to processors by local optimization steps under consideration of all subsystem-specific constraints. Software tasks that could not be allocated are handed back to the global tier for being allocated in later iterations. Exact optimization methods are presented for both the global and the local optimization steps. Finally, the results of an extensive evaluation based on three benchmarks are presented. In this evaluation both optimization methods have been compared with alternative approaches.},
Key = {thaden2013},
Keywords = {design space exploration, Embedded systems, optimization, real-time, scheduling },
Location = {Oldenburg, Lower Saxony, Germany},
Owner = {guenter},
Timestamp = {2014.02.20},
Url = {http://oops.uni-oldenburg.de/id/eprint/1491}
A. Benveniste, B. Caillaud, D. Nickovic, R. Passerone, J. Raclet, P. Reinkemeier, A. Sangiovanni-Vincentelli, W. Damm, T. Henzinger, und K. G. Larsen, "Contracts for System Design" INRIA, Rapport de recherche RR-8147, 2012.
@TECHREPORT{benveniste:hal-00757488,
author = {Benveniste, Albert and Caillaud, Benoit and Nickovic, Dejan and Passerone, Roberto and Raclet, Jean-Baptiste and Reinkemeier, Philipp and Sangiovanni-Vincentelli, Alberto and Damm, Werner and Henzinger, Thomas and Larsen, Kim G.},
title = {Contracts for System Design},
institution = {INRIA},
year = {2012},
type = {Rapport de recherche},
number = {RR-8147},
month = nov, abstract = {{Systems design has become a key challenge and differentiating factor over the last decades for system companies. Aircrafts, trains, cars, plants, distributed telecommunication military or health care systems, and more, involve systems design as a critical step. Complexity has caused system design times and costs to go severely over budget so as to threaten the health of entire industrial sectors. Heuristic methods and standard practices do not seem to scale with complexity so that novel design methods and tools based on a strong theoretical foundation are sorely needed. Model-based design as well as other methodologies such as layered and compositional design have been used recently but a unified intellectual framework with a complete design flow supported by formal tools is still lacking albeit some attempts at this framework such as Platform-based Design have been successfully deployed. Recently an "orthogonal" approach has been proposed that can be applied to all methodologies proposed thus far to provide a rigorous scaffolding for verification, analysis and abstraction/refinement: contractbased design. Several results have been obtained in this domain but a unified treatment of the topic that can help in putting contract-based design in perspective is still missing. This paper intends to provide such treatment where contracts are precisely defined and characterized so that they can be used in design methodologies such as the ones mentioned above with no ambiguity. In addition, the paper provides an important link between interfaces and contracts to show similarities and correspondences. Examples of the use of contracts in design are provided as well as in depth analysis of existing literature.}},
affiliation = {S4 - INRIA - IRISA , AIT Austrian Institute of Technology , Department of Information Engineering and Computer Science - DISI , Institut de recherche en informatique de Toulouse - IRIT , OFFIS [Oldenburg] , Electrical Engineering and Computer Science [Berkeley] - EECS , Institute of Science and Technology [Austria] - IST Austria , University of Aalborg},
hal_id = {hal-00757488},
keywords = {component based design, contract, interface, system design},
language = {Anglais},
owner = {guenter},
pages = {65},
timestamp = {2013.06.03},
url = {http://hal.inria.fr/hal-00757488 \nhttp://hal.inria.fr/hal-00757488/PDF/RR-8147.pdf}
}
M. Broy, W. Damm, S. Henkler, K. Pohl, A. Vogelsang, und T. Weyer, Introduction to the SPES Modeling FrameworkBerlin Heidelberg: Springer.
doi: 10.1007/978-3-642-34614-9_3
@INCOLLECTION{Broy.Damm.etal2012,
author = {Broy, Manfred and Damm, Werner and Henkler, Stefan and Pohl, Klaus and Vogelsang, Andreas and Weyer, Thorsten},
title = {Introduction to the SPES Modeling Framework},
booktitle = {Model-Based Engineering of Embedded Systems},
publisher = {Springer},
year = {2012},
chapter = {3},
pages = {31-49},
address = {Berlin Heidelberg},
abstract = {Today’s and, even more so, the future development of embedded systems faces a variety of challenges. Key success factors to meeting these challenges are suitable concepts for abstraction and structure at different levels of granularity. The result of these concepts is a seamless development approach that heavily facilitates reuse and automation. A basic requirement for such a seamless approach is a clear notion of a system that is formalized by a comprehensive modeling theory. According to this modeling theory, a modeling framework has to provide appropriate models and description techniques for modeling the different aspects and artifacts of system development. This section explains these conclusions and introduces the idea of system and the modeling framework. It also references the modeling theories used in SPES.},
doi = {10.1007/978-3-642-34614-9_3},
isbn = {978-3-642-34613-2},
owner = {guenter},
timestamp = {2013.06.03},
url = {http://link.springer.com/chapter/10.1007/978-3-642-34614-9_3}
}
M. Büker, K. Grüttner, P. A. Hartmann, und I. Stierand, "Mapping of Concurrent Object-Oriented Models to Extended Real--Time Task Networks." Springer.
@INBOOK{BuekerGruettnerHartmannStierand2012, pages = {37--54},
title = {Mapping of Concurrent Object-Oriented Models to Extended Real--Time Task Networks},
publisher = {Springer},
year = {2012},
author = {Büker, Matthias and Grüttner, Kim and Hartmann, Philipp A. and Stierand, Ingo},
month = {01},
booktitle = {System Specification and Design Languages -- Selected Contributions from FDL 2010},
isbn = {978--1--4614--1426--1},
owner = {guenter},
timestamp = {2013.06.03},
url = {http://www.springer.com/978--1--4614--1426--1}
}
T. Gezgin, S. Henkler, A. Rettberg, und I. Stierand, "Abstraction Techniques for Compositional State-based Scheduling Analysis" in Proc. Brazilian Symposium on Computing System Engineering (SBESC), 2012.
@INPROCEEDINGS{GezginHenklerRettbergStierand2012,
author = {Gezgin, Tayfun and Henkler, Stefan and Rettberg, Achim and Stierand, Ingo},
title = {Abstraction Techniques for Compositional State-based Scheduling Analysis},
booktitle = {Brazilian Symposium on Computing System Engineering (SBESC)},
year = {2012},
month = {November},
owner = {guenter},
timestamp = {2013.06.03}
}
H. Jost, "Reasoning on Domain Knowledge and Technical Standards to Support the Development of Safety-Critical Automotive Systems" PhD Thesis , 2012.
@PHDTHESIS{Jost:PhDThesis12,
author = {Jost, Henning},
title = {Reasoning on Domain Knowledge and Technical Standards to Support the Development of Safety-Critical Automotive Systems},
school = {Carl von Ossietzky Universität Oldenburg, Germany},
year = {2012},
note = {ISBN: 978-3-8439-0570-1},
keywords = {uni-ol-2012-ses-damm},
owner = {guenter},
timestamp = {2013.06.03},
url = {http://www.dr.hut-verlag.de/9783843905701.html}
}
@INCOLLECTION{rakow12,
author = {Rakow, Astrid},
title = {Safety Slicing Petri Nets},
booktitle = {Application and Theory of Petri Nets},
publisher = {Springer Berlin Heidelberg},
year = {2012},
editor = {Haddad, Serge and Pomello, Lucia},
volume = {7347},
series = {Lecture Notes in Computer Science},
pages = {268-287},
doi = {10.1007/978-3-642-31131-4_15},
isbn = {978-3-642-31130-7},
owner = {guenter},
timestamp = {2013.06.03}
}
A. L. Sangiovanni-Vincentelli, W. Damm, und R. Passerone, "Taming Dr. Frankenstein: Contract-Based Design for Cyber-Physical Systems." Eur. J. Control, vol. 18, iss. 3.
doi: 10.3166/ejc.18.217-238
@ARTICLE{VincentelliDP12,
author = {Sangiovanni-Vincentelli, Alberto L. and Damm, Werner and Passerone, Roberto},
title = {Taming Dr. Frankenstein: Contract-Based Design for Cyber-Physical Systems.},
journal = {Eur. J. Control},
year = {2012},
volume = {18},
pages = {217-238},
number = {3},
added-at = {2012-11-06T00:00:00.000+0100},
biburl = {http://www.bibsonomy.org/bibtex/2b5bb1119a3761b3ded70b53cab31ac7c/dblp},
doi = {10.3166/ejc.18.217-238},
interhash = {bfdf1df55f32dd0a940d801cd946af14},
intrahash = {b5bb1119a3761b3ded70b53cab31ac7c},
keywords = {dblp},
owner = {guenter},
timestamp = {2012-11-06T00:00:00.000+0100},
url = {http://dblp.uni-trier.de/db/journals/ejcon/ejcon18.html#Sangiovanni-VincentelliDP12}
}
T. Toben und J. Rakow, "Safety and Precision of Spatial Context Models for Autonomous Systems" in Proc. Proceedings of the 1st ETAPS Workshop on "Hybrid Autonomous Systems" (HAS 2011), 2012.
@INPROCEEDINGS{toben12,
author = {Toben, Tobe and Rakow, Jan-Hendrik},
title = {Safety and Precision of Spatial Context Models for Autonomous Systems},
booktitle = {Proceedings of the 1st ETAPS Workshop on "Hybrid Autonomous Systems" (HAS 2011)},
year = {2012},
publisher = {ENTCS},
location = {Saarbrücken, Germany},
owner = {guenter},
timestamp = {2013.06.03}
M. Büker, W. Damm, G. Ehmen, A. Metzner, I. Stierand, und E. Thaden, "Automating the design flow for distributed embedded automotive applications: keeping your time promises, and optimizing costs, too" SFB/TR 14 AVACS, Reports of SFB/TR 14 AVACS 69, 2011.
@TECHREPORT{atr069,
author = {B\"{u}ker, Matthias and Damm, Werner and Ehmen, G\"{u}nter and Metzner, Alexander and Stierand, Ingo and Thaden, Eike},
title = {Automating the design flow for distributed embedded automotive applications: keeping your time promises, and optimizing costs, too},
institution = {SFB/TR 14 AVACS},
year = {2011},
type = {Reports of SFB/TR 14 AVACS},
number = {69},
note = {ISSN: 1860-9821, http://www.avacs.org.},
abstract = {We address the complete design flow from specification models of new automotive functions captured in Matlab-Simulink to their distributed execution on hierarchical bus-based electronic architectures hosting the release of already deployed automotive functions. We propose an automated design space exploration process resulting in a cost-optimized extension of the existing target hardware and an allocation of balanced task structures automatically derived from the specification model on this modified target hardware which is sufficient to guarantee both system-level timing requirements and deadlines extracted from the Matlab-Simulink specification model.},
access = {open},
bibtex = {atr069.bib},
editor = {Bernd Becker and Werner Damm and Bernd Finkbeiner and Martin Fr{\"a}nzle and Ernst-R{\"u}diger Olderog and Andreas Podelski},
keywords = {uni-ol-2011-ses-damm},
pdf = {avacs_technical_report_069.pdf},
series = {ATR},
subproject = {R2}
}
M. Büker, W. Damm, G. Ehmen, A. Metzner, I. Stierand, und E. Thaden, "Automating the Design Flow for Distributed Embedded Automotive Applications: Keeping Your Time Promises, and Optimizing Costs, too" in Proc. Proc. International Symposium on Industrial Embedded Systems (SIES'11), 2011.
@INPROCEEDINGS{buekeretal2011,
author = {B\"{u}ker, Matthias and Damm, Werner and Ehmen, G\"{u}nter and Metzner, Alexander and Stierand, Ingo and Thaden, Eike},
title = {Automating the Design Flow for Distributed Embedded Automotive Applications: Keeping Your Time Promises, and Optimizing Costs, too},
booktitle = {Proc. International Symposium on Industrial Embedded Systems (SIES'11)},
year = {2011},
abstract = {We address the complete design flow from specification models of new automotive functions captured in Matlab-Simulink to their distributed execution on hierarchical bus-based electronic architectures hosting the release of already deployed automotive functions. We propose an automated design space exploration process resulting in a cost-optimized extension of the existing target hardware and an allocation of balanced task structures automatically derived from the specification model on this modified target hardware which is sufficient to guarantee both system-level timing requirements and deadlines extracted from the Matlab-Simulink specification model.},
access = {restricted},
bibtex = {bueker.sies11.bib},
keywords = {uni-ol-2011-ses-damm},
pdf = {bueker.sies11.pdf},
subproject = {R2}
}
M. Büker, W. Damm, G. Ehmen, und I. Stierand, "An Automated Semantic-Based Approach for Creating Tasks from Matlab Simulink Models" in Proc. Proc. of 16th International Workshop on Formal Methods for Industrial Critical Systems (FMICS), 2011.
@INPROCEEDINGS{Buker2011a,
author = {B\"{u}ker, Matthias and Damm, Werner and Ehmen, G\"{u}nter and Stierand, Ingo},
title = {{An Automated Semantic-Based Approach for Creating Tasks from Matlab Simulink Models}},
booktitle = {Proc. of 16th International Workshop on Formal Methods for Industrial Critical Systems (FMICS)},
year = {2011},
keywords = {uni-ol-2011-ses-damm},
owner = {guenter},
timestamp = {2011.05.10}
}
A. Baumgart, E. Böde, M. Büker, W. Damm, G. Ehmen, T. Gezgin, S. Henkler, H. Hungar, B. Josko, M. Oertel, T. Peikenkamp, P. Reinkemeier, I. Stierand, und R. Weber, "Architecture Modeling" OFFIS, Technical Report , 2011.
@TECHREPORT{OFFIS-TR2011+AM,
author = {Baumgart, Andreas and Böde, Eckard and Büker, Matthias and Damm, Werner and Ehmen, Günter and Gezgin, Tayfun and Henkler, Stefan and Hungar, Hardi and Josko, Bernhard and Oertel, Markus and Peikenkamp, Thomas and Reinkemeier, Philipp and Stierand, Ingo and Weber, Raphael},
title = {Architecture Modeling},
institution = {OFFIS},
year = {2011},
type = {Technical Report},
month = mar, keywords = {architecture, component based design, contract based design, Meta-Model},
owner = {guenter},
timestamp = {2013.08.05},
url = {http://ses.informatik.uni-oldenburg.de/download/bib/paper/OFFIS-TR2011_ArchitectureModeling.pdf}
}
M. Büker, T. Gezgin, und I. Stierand, "On the Implementability of Complex Real-Time Systems" SFB/TR 14 AVACS, Reports of SFB/TR 14 AVACS 68, 2011.
@TECHREPORT{MBTGIS:Boundedness,
author = {Matthias B{\"u}ker and Tayfun Gezgin and Ingo Stierand},
title = {On the Implementability of Complex Real-Time Systems},
institution = {SFB/TR 14 AVACS},
year = {2011},
type = {Reports of SFB/TR 14 AVACS},
number = {68},
note = {ISSN: 1860-9821, http://www.avacs.org.},
abstract = {Real-time scheduling theory is a powerful technique for efficient analysis of system behaviour. Task Networks as common formalisms for scheduling analysis however often lack expressive power to model functional behaviour like for example different modes of operation. Research focuses on combining different formalisms to raise the expressiveness while maintaining efficient real-time analysis methods. There are rare approaches to extend task network formalisms itself. Though, this would allow a tight integration of scheduling analysis and other verification techniques. Real-time scheduling analysis however heavily relies on decidability of boundedness for executions, and this is not necessarily ensured for more complex formalisms. We discuss such an extended formalism able to model complex real-time systems, and we show that boundedness is still decidable here.},
access = {open},
bibtex = {atr068.bib},
editor = {Bernd Becker and Werner Damm and Bernd Finkbeiner and Martin Fr{\"a}nzle and Ernst-R{\"u}diger Olderog and Andreas Podelski},
keywords = {uni-ol-2011-ses-damm},
pdf = {avacs_technical_report_068.pdf},
series = {ATR},
subproject = {R2}
}
B. Clark, I. Stierand, und E. Thaden, "Cost-Minimal Pre-Allocation of Software Tasks Under Real-Time Constraints" in Proc. Research in Applied Computation Symposium (RACS 2011), 2011.
@INPROCEEDINGS{ClarkStierandThaden2011,
author = {Clark, Brian and Stierand, Ingo and Thaden, Eike},
title = {Cost-Minimal Pre-Allocation of Software Tasks Under Real-Time Constraints},
booktitle = {Research in Applied Computation Symposium (RACS 2011)},
year = {2011},
abstract = {In this paper we motivate, mathematically formulate, and evaluate a novel approach for finding good pre-allocations for software tasks together with their communication messages onto a hardware system. The hardware system is composed of subsystems connected via a global communication bus. Each subsystem contains one or more processors whose type can be chosen from a set of processor types with different properties, such as monetary cost, available memory, etc. The overall optimization objective is to minimize the sum of all processor costs. This is done using a Satisfiability Modulo Theories solver with an extension for performing binary search on input variables.},
keywords = {design space exploration, Embedded systems, real-time analysis, uni-ol-2011-ses-damm},
owner = {guenter},
timestamp = {2012.01.30}
}
W. Damm, H. Dierks, S. Disch, W. Hagemann, F. Pigorsch, C. Scholl, U. Waldmann, und B. Wirtz, "Exact and Fully Symbolic Verification of Linear Hybrid Automata with Large Discrete State Spaces" Science of Computer Programming, Special Issue on Automated Verification of Critical Systems.
@ARTICLE{DDD+:2011,
author = {Werner Damm and Henning Dierks and Stefan Disch and Willem Hagemann and Florian Pigorsch and Christoph Scholl and Uwe Waldmann and Boris Wirtz},
title = {Exact and Fully Symbolic Verification of Linear Hybrid Automata with Large Discrete State Spaces},
journal = {Science of Computer Programming, Special Issue on Automated Verification of Critical Systems},
year = {2011},
note = {Accepted for publication},
abstract = {We propose an improved symbolic algorithm for the verification of linear hybrid automata with large discrete state spaces (where an explicit representation of discrete states is difficult). Here both the discrete part and the continuous part of the hybrid state space are represented by one symbolic representation called LinAIGs. LinAIGs represent (possibly non-convex) polyhedra extended by boolean variables. Key components of our method for state space traversal are redundancy elimination and constraint minimization: Redundancy elimination eliminates so-called redundant linear constraints from LinAIG representations by a suitable exploitation of the capabilities of SMT (Satisfiability Modulo Theories) solvers. Constraint minimization optimizes polyhedra by exploiting the fact that states already reached in previous steps can be interpreted as 'don't cares' in the current step. Experimental results (including comparisons to the state-of-the-art model checkers PHAVer and RED) demonstrate the advantages of our approach.},
access = {restricted},
bibtex = {damm.scp11.bib},
keywords = {uni-ol-2011-ses-damm},
pdf = {damm.scp11.pdf},
publisher = {Elsevier},
subproject = {H3}
}
W. Damm, S. Disch, W. Hagemann, C. Scholl, U. Waldmann, und B. Wirtz, "Integrating Incremental Flow Pipes into a Symbolic Model Checker for Hybrid Systems" SFB/TR 14 AVACS, Reports of SFB/TR 14 AVACS 76, 2011.
@TECHREPORT{atr76,
author = {Werner Damm and Stefan Disch and Willem Hagemann and Christoph Scholl and Uwe Waldmann and Boris Wirtz},
title = {Integrating Incremental Flow Pipes into a Symbolic Model Checker for Hybrid Systems},
institution = {SFB/TR 14 AVACS},
year = {2011},
type = {Reports of SFB/TR 14 AVACS},
number = {76},
month = {July},
note = {ISSN: 1860-9821, http://www.avacs.org},
abstract = {We describe an approach to integrate incremental flow pipe computation into a fully symbolic backward model checker for hybrid systems. Our method combines the advantages of symbolic state set representation, such as the ability to deal with large numbers of boolean variables, with an efficient way to handle continuous flows defined by linear differential equations, possibly including bounded disturbances.},
access = {open},
bibtex = {atr076.bib},
editor = {Bernd Becker and Werner Damm and Bernd Finkbeiner and Martin Fr{\"a}nzle and Ernst-R{\"u}diger Olderog and Andreas Podelski},
keywords = {uni-ol-2011-ses-damm},
pdf = {avacs_technical_report_076.pdf},
series = {ATR},
subproject = {H3}
}
W. Damm und B. Finkbeiner, "Does It Pay to Extend the Perimeter of a World Model?" in Proc. Proceedings of the 17th International Symposium on Formal Methods, 2011.
@INPROCEEDINGS{damm-finkbeiner-fm2011,
author = {Werner Damm and Bernd Finkbeiner},
title = {Does It Pay to Extend the Perimeter of a World Model?},
booktitle = {Proceedings of the 17th International Symposium on Formal Methods},
year = {2011},
editor = {Michael Butler and Wolfram Schulte},
series = {Lecture Notes in Computer Science},
month = {June},
note = {to appear},
abstract = {Will the cost for observing additional real-world phenomena in a world model be recovered by the resulting increase in the quality of the implementations based on the model? We address the quest for optimal models in light of industrial practices in systems engineering, where the development of control strategies is based on combined models of a system and its environment. We introduce the notion of remorsefree dominance between strategies, where one strategy is preferred over another if it outperforms the other strategy in comparable situations, even if neither strategy is guaranteed to achieve all objectives. We call a world model optimal if it is sufficiently precise to allow for a remorsefree dominating strategy that is guaranteed to remain dominant even if the world model is refined. We present algorithms for the automatic verification and synthesis of dominant strategies, based on tree automata constructions from reactive synthesis.},
access = {restricted},
bibtex = {damm.FM2011.bib},
keywords = {uni-ol-2011-ses-damm},
pdf = {damm.FM2011.pdf},
subproject = {S2}
}
W. Damm, C. Ihlemann, und V. Sofronie-Stokkermans, "PTIME parametric verification of safety properties for reasonable linear hybrid automata" SFB/TR 14 AVACS, Reports of SFB/TR 14 AVACS 70, 2011.
@TECHREPORT{atr070,
author = {Werner Damm and Carsten Ihlemann and Viorica Sofronie-Stokkermans},
title = {{PTIME} parametric verification of safety properties for reasonable linear hybrid automata},
institution = {SFB/TR 14 AVACS},
year = {2011},
type = {Reports of SFB/TR 14 AVACS},
number = {70},
note = {ISSN: 1860-9821, http://www.avacs.org.},
abstract = {This paper identifies an industrially relevant class of linear hybrid automata (LHA) called reasonable LHA for which parametric verification of convex safety properties with exhaustive entry states can be verified in polynomial time and time-bounded reachability can be decided in nondeterministic polynomial time for non-parametric verification and in exponential time for parametric verification. Properties with exhaustive entry states are restricted to runs originating in a (specified) inner envelope of some mode-invariant. Deciding whether an LHA is reasonable is shown to be decidable in polynomial time.},
access = {open},
bibtex = {atr070.bib},
editor = {Bernd Becker and Werner Damm and Bernd Finkbeiner and Martin Fr{\"a}nzle and Ernst-R{\"u}diger Olderog and Andreas Podelski},
keywords = {uni-ol-2011-ses-damm},
pdf = {avacs_technical_report_070.pdf},
series = {ATR},
subproject = {H3}
}
W. Damm, C. Ihlemann, und V. Sofronie-Stokkermans, "Decidability and complexity for the verification of safety properties of reasonable linear hybrid automata" in Proc. Proceedings of the 14th ACM International Conference on Hybrid Systems: Computation and Control, HSCC 2011, Chicago, April 12-14, 2011, 2011.
@INPROCEEDINGS{damm-ihlemann-sofronie-hscc11,
author = {Damm, Werner and Ihlemann, Carsten and Sofronie-Stokkermans, Viorica},
title = {Decidability and complexity for the verification of safety properties of reasonable linear hybrid automata},
booktitle = {Proceedings of the 14th ACM International Conference on Hybrid Systems: Computation and Control, HSCC 2011, Chicago, April 12-14, 2011},
year = {2011},
editor = {Frazzoli, Emilio and Grosu, Radu},
publisher = {ACM},
note = {To appear},
abstract = {This paper identifies an industrially relevant class of linear hybrid automata (LHA) called reasonable LHA for which parametric verification of safety properties with exhaustive entry conditions can be verified in polynomial time and timebounded reachability with exhaustive entry conditions can be decided in nondeterministic polynomial time for nonparametric verification and in exponential time for parametric verification. Deciding whether an LHA is reasonable is shown to be decidable in polynomial time.},
access = {restricted},
bibtex = {damm.hscc11.bib},
keywords = {uni-ol-2011-ses-damm},
pdf = {damm.hscc11.pdf},
subproject = {H3}
}
W. Damm, C. Ihlemann, und V. Sofronie-Stokkermans, "PTIME parametric verification of safety properties for reasonable linear hybrid automata" Mathematics in Computer Science, Special Issue on Numerical Software Verification.
@ARTICLE{damm-et-all-mics11,
author = {Werner Damm and Carsten Ihlemann and Viorica Sofronie-Stokkermans},
title = {{PTIME} parametric verification of safety properties for reasonable linear hybrid automata},
journal = {Mathematics in Computer Science, Special Issue on Numerical Software Verification},
year = {2011},
note = {Accepted for publication},
abstract = {This paper identifies an industrially relevant class of linear hybrid automata (LHA) called 'reasonable LHA' for which parametric verification of convex safety properties with exhaustive entry states can be verified in polynomial time and time-bounded reachability can be decided in nondeterministic polynomial time for non-parametric verification and in exponential time for parametric verification. Properties with exhaustive entry states are restricted to runs originating in a (specified) inner envelope of some mode-invariant. Deciding whether an LHA is reasonable is shown to be decidable in polynomial time. },
access = {restricted},
bibtex = {damm.mics11.bib},
editor = {Stefan Ratschan and Georgios Fainekos and Eric Goubault and Sylvie Putot},
keywords = {uni-ol-2011-ses-damm},
pdf = {damm.mics11.pdf},
subproject = {H3}
}
W. Damm, H. Peter, J. Rakow, und B. Westphal, "Can we build it: Formal Synthesis of control strategies for cooperative driver assistance systems" Mathematical Structures in Computer Science, Special Issue on Practical and Lightweight Formal Methods for the Design, Modeling and Analysis of Software Systems.
@ARTICLE{damm+rakow+westphal-mscs,
author = {Werner Damm and Hans-J{\"{o}}rg Peter and Jan Rakow and Bernd Westphal},
title = {Can we build it: Formal Synthesis of control strategies for cooperative driver assistance systems},
journal = {Mathematical Structures in Computer Science, Special Issue on Practical and Lightweight Formal Methods for the Design, Modeling and Analysis of Software Systems},
year = {2011},
note = {Accepted for publication},
abstract = { We propose a design- and verification-methodology supporting the early phases of system design for cooperative driver assistance systems, focussing on realizability of new automotive functions. Specifically, we focus on applications where drivers are supported in complex driving tasks by safe strategies involving coordinated movements of multiple vehicles to successfully complete the driving task. We propose a divide and conquer approach for formally verifying timed probabilistic requirements on successful completion of the driving task and collision freedom, based on formal specifications of a set of given manoeuvring and communication capabilities of the car, allowing in particular to assess, whether these are sufficient to implement strategies for successful completion of the driving task. },
access = {restricted},
bibtex = {damm.mscs11.bib},
editor = {Assaf Kfoury and Azer Bestavros},
keywords = {uni-ol-2011-ses-damm},
pdf = {damm.mscs11.pdf},
subproject = {S2}
}
W. Damm, J. Rakow, und B. Westphal, "Can we build it: Formal Synthesis of control strategies for cooperative driver assistance systems" SFB/TR 14 AVACS, Reports of SFB/TR 14 AVACS 73, 2011.
@TECHREPORT{atr073,
author = {Werner Damm and Jan Rakow and Bernd Westphal},
title = {Can we build it: Formal Synthesis of control strategies for cooperative driver assistance systems},
institution = {SFB/TR 14 AVACS},
year = {2011},
type = {Reports of SFB/TR 14 AVACS},
number = {73},
note = {ISSN: 1860-9821, http://www.avacs.org},
abstract = { We propose a design- and verification-methodology supporting the early phases of system design for cooperative driver assistance systems, focussing on realizability of new automotive functions. Specifically, we focus on applications where drivers are supported in complex driving tasks by safe strategies involving coordinated movements of multiple vehicles to successfully complete the driving task. We propose a divide and conquer approach for formally verifying timed probabilistic requirements on successful completion of the driving task and collision freedom, based on formal specifications of a set of given manoeuvring and communication capabilities of the car, allowing in particular to assess, whether these are sufficient to implement strategies for successful completion of the driving task. },
access = {open},
bibtex = {atr073.bib},
editor = {Bernd Becker and Werner Damm and Bernd Finkbeiner and Martin Fr{\"a}nzle and Ernst-R{\"u}diger Olderog and Andreas Podelski},
keywords = {uni-ol-2011-ses-damm},
pdf = {avacs_technical_report_073.pdf},
series = {ATR},
subproject = {S2}
}
R. Ehlers, M. E. Hahn, M. Mehlmann, H. Peter, J. Rakow, T. Toben, und B. Westphal, "Dynamic Communicating Probabilistic Timed Automata Playing Games" SFB/TR 14 AVACS, Reports of SFB/TR 14 AVACS 75, 2011.
@TECHREPORT{atr75,
author = {R{\"u}diger Ehlers and E. Moritz Hahn and Martin Mehlmann and Hans-J{\"o}rg Peter and Jan Rakow and Tobe Toben and Bernd Westphal},
title = {Dynamic Communicating Probabilistic Timed Automata Playing Games},
institution = {SFB/TR 14 AVACS},
year = {2011},
type = {Reports of SFB/TR 14 AVACS},
number = {75},
month = {July},
note = {ISSN: 1860-9821, http://www.avacs.org},
abstract = { Systems of Systems (SoS) comprising a varying number of communicating processes (or agents) are getting ever more important. As of yet, formal modeling languages and specification logics address isolated features of SoS only. We propose the concise modeling language DCS++ and the property specification logic DPTATL that address all relevant SoS aspects in a unified game-theoretic framework. Language and logic turn out to be an orthogonal extension of well-known modeling formalisms and logics. Both modeling and specification languages are demonstrated on a non-trivial network routing example.},
access = {open},
bibtex = {atr075.bib},
editor = {Bernd Becker and Werner Damm and Bernd Finkbeiner and Martin Fr{\"a}nzle and Ernst-R{\"u}diger Olderog and Andreas Podelski},
keywords = {uni-ol-2011-ses-damm},
pdf = {avacs_technical_report_075.pdf},
series = {ATR},
subproject = {S2}
}
H. Jost, S. Köhler, und F. Köster, "Towards a Safer Development of Driver Assistance Systems by Applying Requirements-Based Methods" in Proc. Proceedings of the 14th International IEEE Conference on Intelligent Transportation Systems -- ITSC 2011, 2011.
@INPROCEEDINGS{Jost:ITSC2011,
author = {Henning Jost and Silke {K{\"{o}}hler} and Frank {K{\"{o}}ster}},
title = {{T}owards a {S}afer {D}evelopment of {D}river {A}ssistance {S}ystems by {A}pplying {R}equirements-{B}ased {M}ethods},
booktitle = {{P}roceedings of the 14th {I}nternational {IEEE} {C}onference on {I}ntelligent {T}ransportation {S}ystems -- {ITSC} 2011},
year = {2011},
month = {October},
keywords = {uni-ol-2011-ses-damm}
}
J. -D. Quesel, M. Fränzle, und W. Damm, "Crossing the bridge between similar games" in Proc. Formal Modeling and Analysis of Timed Systems - 9th International Conference (FORMATS), Aalborg, Denmark, 21-23 September, 2011. Proceedings, 2011.
@INPROCEEDINGS{avacs-h3-brg-11,
author = {J.-D. Quesel AND M. Fr\"{a}nzle AND W. Damm},
title = {Crossing the bridge between similar games},
booktitle = {Formal Modeling and Analysis of Timed Systems - 9th International Conference (FORMATS), Aalborg, Denmark, 21-23 September, 2011. Proceedings},
year = {2011},
editor = {Stavros Tripakis and Uli Fahrenberg},
series = {Lecture Notes in Computer Science (LNCS)},
month = {Sep.},
publisher = {Springer-Verlag},
note = {15 pp. Accepted for publication on 8 July 2011.},
abstract = { Specifications and implementations of complex physical systems tend to differ as low level effects such as sampling are often ignored when high level models are created. Thus, the low level models are often not exact refinements of the high level specification. However, they are similar to those. To bridge the gap between those models, we study robust simulation relations for hybrid systems. In this paper, we identify a family of robust simulation relations that allow for certain bounded deviations in the behavior of a system specification and its implementation in both values of the system variables and timings. We show that for this relaxed version of simulation a broad class of logical properties is preserved. The question whether two systems are in simulation relation can be reduced to a reach avoid problem for hybrid games. We provide a sufficient condition under which a winning strategy for these games exists.},
access = {restricted},
bibtex = {quesel.formats11.bib},
keywords = {uni-ol-2011-ses-damm, uni-ol-2011-hs-fränzle},
pdf = {quesel.formats11.pdf},
subproject = {H1/2,H3}
}
P. Reinkemeier, I. Stierand, P. Rehkop, und S. Henkler, "A pattern-based requirement specification language: Mapping automotive specific timing requirements" in Proc. Software Engineering 2011 - Workshopband, 2011.
@INPROCEEDINGS{RSLvsTADL2011,
author = {Philipp Reinkemeier and Ingo Stierand and Philip Rehkop and Stefan Henkler},
title = {A pattern-based requirement specification language: Mapping automotive specific timing requirements},
booktitle = {Software Engineering 2011 - Workshopband},
year = {2011},
series = {LNI},
publisher = {GI},
keywords = {uni-ol-2011-ses-damm},
owner = {guenter},
timestamp = {2011.05.13}
}
A. Sangiovanni-Vincentelli, W. Damm, und R. Passerone, "Taming Dr. Frankenstein: Contract-Based Design for Cyber-Physical Systems" in Proc. 50th IEEE Conference on Decision and Control, 2011.
@INPROCEEDINGS{Sangiovanni-Vincentelli2011,
author = {Alberto Sangiovanni-Vincentelli and Werner Damm and Roberto Passerone},
title = {Taming Dr. Frankenstein: Contract-Based Design for Cyber-Physical Systems},
booktitle = {50th IEEE Conference on Decision and Control},
year = {2011},
month = {December},
organization = {IEEE},
keywords = {uni-ol-2011-ses-damm},
owner = {guenter},
timestamp = {2012.02.01}
}
B. Westphal, I. Stierand, und T. Gezgin, "Observer-based Model-Checking of Real-Time Live Sequence Charts for Uppaal" SFB/TR 14 AVACS, Reports of SFB/TR 14 AVACS 71, 2011.
@TECHREPORT{atr071,
author = {Bernd Westphal and Ingo Stierand and Tayfun Gezgin},
title = {Observer-based Model-Checking of Real-Time Live Sequence Charts for Uppaal},
institution = {SFB/TR 14 AVACS},
year = {2011},
type = {Reports of SFB/TR 14 AVACS},
number = {71},
note = {ISSN: 1860-9821, http://www.avacs.org.},
abstract = {Formalisation and verification of requirements is an inevitable task in safety-critical system design. Requirements on networks of timed automata comprise statements about the existence, timeliness, and order of inter-automaton communication, possibly also referring to values of variables and clocks. A natural formalism to capture such requirements is the Live Sequence Charts (LSC) language, which in particular has means to refer to dense time. In this work, we provide an observer based model-checking procedure for the practically relevant fragment of the LSC language in terms of timed automaton semantics of the verification tool Uppaal. Our approach uses the standard LSC semantics defined in terms of the so-called unwinding structure. We show that LSC verification reduces to deadlock or leads-to verification as supported by Uppaal, thereby obtain observer based LSC verification for safety and liveness properties. },
access = {open},
bibtex = {atr071.bib},
editor = {Bernd Becker and Werner Damm and Bernd Finkbeiner and Martin Fr{\"a}nzle and Ernst-R{\"u}diger Olderog and Andreas Podelski},
keywords = {uni-ol-2011-ses-damm},
pdf = {avacs_technical_report_071.pdf},
series = {ATR},
subproject = {R2}
}
B. Westphal, I. Stierand, T. Gezgin, und H. Dierks, "The Power of Uppaal - A language-based characterisation of verification complexity" SFB/TR 14 AVACS, Reports of SFB/TR 14 AVACS 72, 2011.
@TECHREPORT{atr072,
author = {Bernd Westphal and Ingo Stierand and Tayfun Gezgin and Henning Dierks },
title = {The Power of Uppaal - A language-based characterisation of verification complexity},
institution = {SFB/TR 14 AVACS},
year = {2011},
type = {Reports of SFB/TR 14 AVACS},
number = {72},
note = {ISSN: 1860-9821, http://www.avacs.org.},
abstract = { Observer based verification is an appropriate technique for checking complex requirements for systems defined in terms of automata. Since Uppaal is known as an efficient tool for model checking of timed automata based systems, it has received much attention. Recently, the class of properties verifiable with Uppaal's reachability checking capabilities has been characterized by a specification logic. In this article we provide a timed language-based characterization of the same class. Moreover, we show that there is a proper superset of additional (liveness) properties that can be checked by using the features of Uppaal. We characterize also these properties as a class of timed languages. },
access = {open},
bibtex = {atr072.bib},
editor = {Bernd Becker and Werner Damm and Bernd Finkbeiner and Martin Fr{\"a}nzle and Ernst-R{\"u}diger Olderog and Andreas Podelski},
keywords = {uni-ol-2011-ses-damm},
pdf = {avacs_technical_report_072.pdf},
series = {ATR},
subproject = {R2}
}
B. Wirtz, T. Strazny, J. Rakow, und A. Rakow, "A Lane Change Assistence Systen: Cooperation and Hybrid Control" SFB/TR 14 AVACS, Reports of SFB/TR 14 AVACS 78, 2011.
@TECHREPORT{atr078,
author = {Boris Wirtz and Tim Strazny and Jan Rakow and Astrid Rakow},
title = {A Lane Change Assistence Systen: Cooperation and Hybrid Control},
institution = {SFB/TR 14 AVACS},
year = {2011},
type = {Reports of SFB/TR 14 AVACS},
number = {78},
month = {July},
note = {ISSN: 1860-9821, http://www.avacs.org},
abstract = { Automated Highway Systems (AHS's) are considered as a key technology that promises increased safety, reduced energy consumption and optimized traffic flow. Safe and dependable operation of AHS's is of paramount importance and requires the application of rigid formal methods at design time. In this report we present a model for a lane change assistance system which is meant to serve as a foundation for benchmarks boosting theoretic and algorithmic advances in formal verification of the challenging class of cyber-physical systems. The assistance system implements an autonomous lane change manoeuvre conducted in cooperation with other communicating agents. The model implements a layered design for traffic agents where aspects of communication and autonomous control are described as real-time and hybrid systems, respectively, which are intertwined by synchronous message passing. },
access = {open},
bibtex = {atr078.bib},
editor = {Bernd Becker and Werner Damm and Bernd Finkbeiner and Martin Fr{\"a}nzle and Ernst-R{\"u}diger Olderog and Andreas Podelski},
keywords = {uni-ol-2011-ses-damm},
pdf = {avacs_technical_report_078.pdf},
series = {ATR},
subproject = {H3}
M. Büker, K. Grüttner, P. A. Hartmann, und I. Stierand, "Mapping of Concurrent Object-Oriented Models to Extended Real-Time Task Networks" in Proc. Proc. Forum on specification & Design Languages (FDL), 2010.
@InProceedings{ buker2010,
author = {Büker, Matthias and Grüttner, Kim and Hartmann, Philipp A. and Stierand, Ingo},
title = {{Mapping of Concurrent Object-Oriented Models to Extended Real-Time Task Networks}},
booktitle = {Proc. Forum on specification \& Design Languages (FDL)},
year = {2010},
abstract = {For checking the temporal behaviour of embedded systems, real-time scheduling analysis based on abstract, formal models is a well-established method. A major difficulty for such analytical models in practical use-cases is the non-trivial representation of a real implementation model. To overcome this limitation we propose a formal mapping of a concurrent, objectoriented, executable implementation model with explicit shared resources to a real-time task network with functional extensions. The mapping starts from a C++ subset and maps the functional behaviour based on externally observable synchronisation events. The proposed mapping allows to check the implementation model against functional and temporal requirements, like local and end-to-end deadlines.},
owner = {guenter},
keywords = {uni-ol-2010-ses-damm},
timestamp = {2011.05.04}
}
A. Baumgart, P. Reinkemeier, A. Rettberg, I. Stierand, E. Thaden, und R. Weber, "A model-based design methodology with contracts to enhance the development process of safety-critical systems" in Proc. Proceedings of the 8th IFIP WG 10.2 international conference on Software technologies for embedded and ubiquitous systems, Berlin, Heidelberg, 2010.
@InProceedings{ baumgart2010,
author = {Baumgart, Andreas and Reinkemeier, Philipp and Rettberg, Achim and Stierand, Ingo and Thaden, Eike and Weber, Raphael},
title = {A model-based design methodology with contracts to enhance the development process of safety-critical systems},
booktitle = {Proceedings of the 8th IFIP WG 10.2 international conference on Software technologies for embedded and ubiquitous systems},
year = {2010},
series = {SEUS'10},
pages = {59--70},
address = {Berlin, Heidelberg},
publisher = {Springer-Verlag},
abstract = {In this paper a new methodology to support the development process of safety-critical systems with contracts is described. The meta-model of Heterogeneous Rich Component (HRC) is extended to a Common System Meta-Model (CSM) that benefits from the semantic foundation of HRC and provides analysis techniques such as compatibility checks or refinement analyses. The idea of viewpoints, perspectives, and abstraction levels is discussed in detail to point out how the CSM supports separation of concerns. An example is presented to detail the transition concepts between models. From the example we conclude that our approach proves valuable and supports the development process.},
acmid = {1927894},
isbn = {3-642-16255-X, 978-3-642-16255-8},
location = {Waidhofen/Ybbs, Austria},
numpages = {12},
owner = {guenter},
keywords = {uni-ol-2010-ses-damm},
timestamp = {2011.05.04}
}
P. Bhaduri und I. Stierand, "A Proposal for Real-time Interfaces in SPEEDS" in Proc. 13th Conference on Design, Automation and Test (DATE), 2010.
@InProceedings{ bhaduri2010,
author = {Bhaduri, Purandar and Stierand, Ingo},
title = {{A Proposal for Real-time Interfaces in SPEEDS}},
booktitle = {13th Conference on Design, Automation and Test (DATE)},
year = {2010},
month = mar, abstract = {The SPEEDS project is aimed at making rich components models (RCM) into a mature framework in all phases of the design of complex distributed embedded systems. The RCM model is required to be expressive enough to cover the entire development process from requirements to code through design, and also capture both functional and non-functional aspects. In this paper we propose a language-based framework for real-time component interfaces in SPEEDS that is suitable at the ECU layer when a target processor has been identified, and WCET analysis done. We assume a discrete time model.},
owner = {guenter},
keywords = {uni-ol-2010-ses-damm},
timestamp = {2011.05.04}
}
W. Damm, H. Dierks, J. Oehlerking, und A. Pnueli, "Towards Component Based Design of Hybrid Systems: Safety and Stability" in Proc. Time for Verification: Essays in Meory of Amir Pnueli, 2010.
@InProceedings{ dammpnueli10,
author = {Werner Damm and Henning Dierks and Jens Oehlerking and Amir Pnueli},
title = {Towards Component Based Design of Hybrid Systems: Safety and Stability},
booktitle = {Time for Verification: Essays in Meory of Amir Pnueli},
year = {2010},
editor = {Zohar Manna and Doron Peled},
volume = {6200},
series = {Lecture Notes in Computer Science (LNCS)},
pages = {96-143},
abstract = {We propose a library based incremental design methodology for constructing hybrid controllers from a component library of models of hybrid controllers, such that global safety and stability properties are preserved. To this end, we propose hybrid interface specifications of components characterizing plant regions for which safety and stability properties are guaranteed, as well as exception mechanisms allowing safe and stability-preserving transfer of control whenever the plant evolves towards the boundary of controllable dynamics. We then propose a composition operator for constructing hybrid automata from a library of such pre-characterized components supported by compositional and automatable proofs of hybrid interface specifications. },
access = {open},
bibtex = {damm.pnueli10.bib},
editors = {Zohar Manna and Doron A. Peled},
file = {damm.pnueli10.pdf:damm.pnueli10.pdf:PDF},
keywords = {uni-ol-2010-ses-damm},
subproject = {H3}
}
W. Damm, R. Achatz, K. Beetz, M. Broy, H. Daembkes, K. Grimm, und P. Liggesmeyer, "Nationale Roadmap Embedded Systems" , Broy, M. . Ed.,
doi: 10.1007/978-3-642-14901-6_5
@InBook{ 2010cps..book...67d, pages = {67-+},
title = {{Nationale Roadmap Embedded Systems}},
year = {2010},
editor = {{Broy, M.}},
author = {Damm, W. and Achatz, R. and Beetz, K. and Broy, M. and Daembkes, H. and Grimm, K. and Liggesmeyer, P.},
booktitle = {Cyber-Physical Systems, acatech DISKUTIERT, Volume 0.~ISBN 978-3-642-14498-1.~Springer-Verlag Berlin Heidelberg, 2010, p.~67},
doi = {10.1007/978-3-642-14901-6_5},
owner = {guenter},
keywords = {uni-ol-2010-ses-damm},
timestamp = {2011.05.12}
}
M. Fränzle, T. Gezgin, H. Hungar, S. Puch, und G. Sauter, "Using Guided Simulation to Assess Driver Assistance Systems" in Proc. Proc. FORMS/FORMAT 2010, 2010.
@InProceedings{ fgh10b,
author = {Fränzle, Martin and Gezgin, Tayfun and Hungar, Hardi and Puch, Stefan and Sauter, Gerald},
title = {Using Guided Simulation to Assess Driver Assistance Systems},
booktitle = {Proc. FORMS/FORMAT 2010},
year = {2010},
editor = {Schnieder, E. and Tarnai, G.},
abstract = {The goal of our approach is the model-based prediction of the effects of driver assistance systems. Starting with the integration of a computer model of the driver of a car into a simulation environment, we face the problem of analysing the emergent effects of a complex system with discrete, numeric and probabilistic components. In particular, it is difficult to assess the probability of rare events, though we are specifically interested in critical situations which will be infrequent for any reasonable system. For that purpose, we use a quantitative logic which enables us to specify criticality and other properties of simulation runs. An online evaluation of the logic permits us to define a procedure which guides the simulation towards critical situations and allows to estimate the risk of connected with the introduction of the assistance system.},
keywords = {ADAS, cognitive Model, HLA, HLA-Observer, IEEE 1516-2000, LTL, uni-ol-2010-ses-damm},
owner = {guenter},
timestamp = {2011.05.10}
}
J. Gacnik, H. Jost, F. Köster, und M. Fränzle, "The DeSCAS Methodology and Lessons Learned on Applying Formal Reasoning to Safety Domain Knowledge" in Proc. Proceedings of the 8th Symposium on Formal Methods for Automation and Safety in Railway and Automotive Systems (FORMS/FORMAT 2010), 2010.
@InProceedings{ jost10c,
author = {Jan Gacnik and Henning Jost and Frank Köster and Martin Fränzle},
title = {The DeSCAS Methodology and Lessons Learned on Applying Formal Reasoning to Safety Domain Knowledge},
booktitle = {Proceedings of the 8th Symposium on Formal Methods for Automation and Safety in Railway and Automotive Systems (FORMS/FORMAT 2010)},
year = {2010},
keywords = {uni-ol-2010-ses-damm},
editor = {Eckehard Schnieder and G\'{e}za Tarnai},
note = {ausgezeichnet mit dem Best Paper Award}
}
H. Jost, "Automating the Risk and Hazard Analysis via Generic Domain Concepts in Formal Ontologies" in Proc. Reliability, Risk and Safety -- Back to the Future, European Safety and Reliability Conference (ESREL 2010), 2010.
@InProceedings{ jost10a,
author = {Henning Jost},
title = {Automating the Risk and Hazard Analysis via Generic Domain Concepts in Formal Ontologies},
booktitle = {Reliability, Risk and Safety -- Back to the Future, European Safety and Reliability Conference (ESREL 2010)},
year = {2010},
keywords = {uni-ol-2010-ses-damm},
editor = {Ben J.M. Ale and Ioannis A. Papazoglou and Enrico Zio}
}
H. Jost, S. Köhler, S. Häusler, J. Gacnik, A. Hahn, F. Köster, und K. Lemmer, "Supporting Qualification -- Safety Standard Compliant Process Planning and Monitoring" in Proc. Proceedings 2010 IEEE Symposium on Product Compliance Engineering (PSES 2010), 2010.
@InProceedings{ jost10b,
author = {Henning Jost and Silke Köhler and Stefan {Häusler} and Jan Gacnik and Axel Hahn and Frank {Köster} and Karsten Lemmer},
title = {Supporting Qualification -- Safety Standard Compliant Process Planning and Monitoring},
booktitle = {Proceedings 2010 IEEE Symposium on Product Compliance Engineering (PSES 2010)},
keywords = {uni-ol-2010-ses-damm},
year = {2010}
}
T. Kerstan und M. Oertel, "Design of a real-time optimized emulation method" in Proc. Proceedings of the Conference on Design, Automation and Test in Europe, 3001 Leuven, Belgium, Belgium, 2010.
@InProceedings{ kerstan:2010:dro:1870926.1871079,
author = {Kerstan, Timo and Oertel, Markus},
title = {Design of a real-time optimized emulation method},
booktitle = {Proceedings of the Conference on Design, Automation and Test in Europe},
year = {2010},
series = {DATE '10},
pages = {646--649},
address = {3001 Leuven, Belgium, Belgium},
publisher = {European Design and Automation Association},
acmid = {1871079},
isbn = {978-3-9810801-6-2},
location = {Dresden, Germany},
numpages = {4},
owner = {guenter},
timestamp = {2011.05.12},
keywords = {uni-ol-2010-ses-damm},
url = {http://portal.acm.org/citation.cfm?id=1870926.1871079}
}
E. Thaden, H. Lipskoch, A. Metzner, und I. Stierand, "Exploiting Gaps in Fixed-Priority Preemptive Schedules for Task Insertion" in Proc. Proceedings of the 16th IEEE International Conference on Embedded and Real-Time Computing Systems and Applications (RTCSA), 2010.
@InProceedings{ thaden2010,
author = {Eike Thaden and Henrik Lipskoch and Alexander Metzner and Ingo Stierand},
title = {Exploiting Gaps in Fixed-Priority Preemptive Schedules for Task Insertion},
booktitle = {Proceedings of the 16th IEEE International Conference on Embedded and Real-Time Computing Systems and Applications (RTCSA)},
year = {2010},
abstract = {This paper addresses the problem of assigning tasks to embedded control units. The units are considered to be connected via a bus, and tasks may already be deployed onto the units. To save costs, the objective is to insert as many new tasks onto the system as possible. In this setting, to support early design decisions, we present an approximative and fast pre-analysis of the system. We introduce spare-time analysis and the analysis of maximal allowed worst-case execution time to simplify the problem and to achieve a fast solving algorithm, which we implement as mixed-integer linear problem. We conduct experiments to investigate the scalability of the approach with the result that for input sizes of up to 160 tasks with up to 50% not-yet-deployed tasks a solution is found in many cases within reasonable time, our machine needs in the average case 150s. With a reference example, taken from literature, we compare our approach with a similar method and show that our approach is faster.},
access = {restricted},
keywords = {uni-ol-2010-ses-damm},
bibtex = {thaden.rtcsa10.bib},
file = {thaden.rtcsa10.pdf:thaden.rtcsa10.pdf:PDF},
subproject = {R2}
}
J. Thyssen, D. Ratiu, W. Schwitzer, A. Harhurin, M. Feilkas, und E. Thaden, "A System for Seamless Abstraction Layers for Model-based Development of Embedded Software" in Proc. Proceedings of Envision 2020 Workshop, 2010.
@InProceedings{ thyssen2010abstractionlayers,
author = {Thyssen, Judith and Ratiu, Daniel and Schwitzer, Wolfgang and Harhurin, Alexander and Feilkas, Martin and Thaden, Eike},
title = {A System for Seamless Abstraction Layers for Model-based Development of Embedded Software},
booktitle = {Proceedings of Envision 2020 Workshop},
year = {2010},
publisher = {Bonner Köllen Verlag},
abstract = {Model-based development aims at reducing the complexity of software development by the pervasive use of adequate models throughout the whole development process starting from early phases up to implementation. In this paper we present a conceptual framework to holistically classify developed models along different levels of abstraction. We do this by designing adequate abstractions for different development stages while ignoring the information that is not relevant at a particular development step or for a certain stakeholder. The abstraction is achieved in terms of the granularity level of the system under study (e. g. system, sub-system, sub-sub-system) and in terms of the information that the models contain (e. g. specification of functionality, description of architecture, deployment on specific hardware). We also present the relation between models that describe different perspectives of the system or are at different granularity levels. However, we do not address the process to be followed for building these models.},
isbn = {978-3-88579-253-6},
issn = {1617-5468},
owner = {guenter},
keywords = {uni-ol-2010-ses-damm},
timestamp = {2011.05.10}
}
T. Toben, B. Westphal, und J. Rakow, "Spotlight Abstraction of Agents and Areas" in Proc. Quantitative and Qualitative Analysis of Network Protocols, Dagstuhl, Germany, 2010.
@InProceedings{ toben_et_al:dsp:2010:2517,
author = {Tobe Toben and Bernd Westphal and Jan-Hendrik Rakow},
title = {Spotlight Abstraction of Agents and Areas},
booktitle = {Quantitative and Qualitative Analysis of Network Protocols},
year = {2010},
editor = {Bengt Jonsson and Jörg Kreiker and Marta Kwiatkowska},
number = {10051},
series = {Dagstuhl Seminar Proceedings},
address = {Dagstuhl, Germany},
publisher = {Schloss Dagstuhl - Leibniz-Zentrum fuer Informatik, Germany},
abstract = {We present "spotlight abstraction" as a generic abstraction technique for the analysis of systems comprising an unbounded number of communicating agents. The abstraction principle is heterogeneous in the sense that the behaviour of a finite number of agents is preserved while the others are only abstractly represented. The precision of the abstraction can be tuned by an iterative procedure based on the analysis of counterexamples. Going beyond existing work, we show how to use the spotlight principle for analysing systems where the physical position of agents is relevant. To this end, we put the spotlight on areas rather than on fixed sets of agents.},
access = {restricted},
bibtex = {toben.dagstuhl10051.bib},
file = {toben.dagstuhl10051.pdf:toben.dagstuhl10051.pdf:PDF},
issn = {1862-4405},
keywords = {Spotlight Abstraction, Verification, Dynamic Communication Systems, uni-ol-2010-ses-damm},
subproject = {S2},
url = {http://drops.dagstuhl.de/opus/volltexte/2010/2517}
M. Baumann, H. Colonius, H. Hungar, F. Köster, M. Langner, A. Lüdtke, C. Möbus, J. Peinke, S. Puch, C. Schiessl, R. Steenken, und L. Weber, "Integrated Modeling for Safe Transportation - Driver modeling and driver experiments" in Proc. Fahrermodellierung in Wissenschaft und Wirtschaft, 2. Berliner Fachtagung für Fahrermodellierung, Düsseldorf, 2009.
@INPROCEEDINGS{Baumann2009,
author = {Baumann, M. and Colonius, H. and Hungar, H. and K{\"o}ster, F. and Langner, M. and L{\"u}dtke, A. and M{\"o}bus, C. and Peinke, J. and Puch, S. and Schiessl, C. and Steenken, R. and Weber, L.},
title = {Integrated Modeling for Safe Transportation - Driver modeling and driver experiments},
booktitle = {Fahrermodellierung in Wissenschaft und Wirtschaft, 2. Berliner Fachtagung für Fahrermodellierung},
year = {2009},
editor = {T. Jürgensoh and H. Kolrep},
number = {28},
series = {Fortschritt-Bericht VDI in der Reihe 22 (Mensch-Maschine-Systeme)},
pages = {84-99},
address = {Düsseldorf},
publisher = {VDI-Verlag},
owner = {luedtke},
timestamp = {2009.11.02}
}
E. Bode, M. Herbstritt, H. Hermanns, S. Johr, T. Peikenkamp, R. Pulungan, J. Rakow, R. Wimmer, und B. Becker, "Compositional Dependability Evaluation for STATEMATE" Software Engineering, IEEE Transactions on, vol. 35, iss. 2.
@ARTICLE{Bode2009,
author = {Bode, E. and Herbstritt, M. and Hermanns, H. and Johr, S. and Peikenkamp, T. and Pulungan, R. and Rakow, J. and Wimmer, R. and Becker, B.},
title = {Compositional Dependability Evaluation for STATEMATE},
journal = {Software Engineering, IEEE Transactions on},
year = {2009},
volume = {35},
pages = {274--292},
number = {2},
abstract = {Software and system dependability is getting ever more important in embedded system design. Current industrial practice of model-based analysis is supported by state-transition diagrammatic notations such as Statecharts. State-of-the-art modelling tools like STATEMATE support safety and failure-effect analysis at design time, but restricted to qualitative properties. This paper reports on a (plug-in) extension of STATEMATE enabling the evaluation of quantitative dependability properties at design time. The extension is compositional in the way the model is augmented with probabilistic timing information. This fact is exploited in the construction of the underlying mathematical model, a uniform continuous-time Markov decision process, on which we are able to check requirements of the form: "The probability to hit a safety-critical system configuration within a mission time of 3 hours is at most 0.01." We give a detailed explanation of the construction and evaluation steps making this possible, and report on a nontrivial case study of a high-speed train signalling system where the tool has been applied successfully.},
access = {restricted},
bibtex = {boede.jse09.bib},
keywords = {checking, ctmc, mdp, model, stochastic},
pdf = {boede.jse09.pdf},
priority = {2},
subprojects = {S3}
}
M. Büker, A. Metzner, und I. Stierand, "Testing Real-Time Task Networks with Functional Extensions Using Model-Checking" in Proc. 14th International Conference on Emerging Technologies and Factory Automation (ETFA'09), 2009.
@INPROCEEDINGS{BukerMetznerStierand2009,
author = {B{\"u}ker, Matthias and Metzner, Alexander and Stierand, Ingo},
title = {Testing Real-Time Task Networks with Functional Extensions Using Model-Checking},
booktitle = {14th International Conference on Emerging Technologies and Factory Automation (ETFA'09)},
year = {2009}
}
W.~Damm, T.~Peikenkamp, und B.~Josko, "Contract Based ISO CD 26262 Safety Analysis" in Proc. SAE World Congress -- Session on Safety-Critical Systems, 2009.
@INPROCEEDINGS{DPJ09,
author = {W.~Damm and T.~Peikenkamp and B.~Josko},
title = {{Contract Based ISO CD 26262 Safety Analysis}},
booktitle = {{SAE World Congress -- Session on Safety-Critical Systems}},
year = {2009},
owner = {guenter},
timestamp = {2011.05.12}
}
H. Dierks, A. Metzner, und I. Stierand, "Efficient Model-Checking for Real-Time Task Networks" in Proc. 6th International Conference on Embedded Software and Systems, 2009.
@INPROCEEDINGS{Dierks2009,
author = {Dierks, Henning and Metzner, Alexander and Stierand, Ingo},
title = {Efficient Model-Checking for Real-Time Task Networks},
booktitle = {6th International Conference on Embedded Software and Systems},
year = {2009},
month = may, __markedentry = {[guenter]},
owner = {guenter},
timestamp = {2011.05.04}
}
F. Frische, T. Mistrzyk, und A. Lüdtke, "Detection of Pilot Errors in Data by combining Task Modeling and Model Checking" in Proc. Proceedings INTERACT 2009, 12th IFIP TC13 Conference in Human-Computer Interaction, Part I, 2009.
@INPROCEEDINGS{Frische2009,
author = {Frische, F. and Mistrzyk, T. and L{\"u}dtke, A.},
title = {Detection of Pilot Errors in Data by combining Task Modeling and Model Checking},
booktitle = {Proceedings INTERACT 2009, 12th IFIP TC13 Conference in Human-Computer Interaction, Part I},
year = {2009},
series = {LNCS 5726},
publisher = {Springer},
owner = {luedtke},
timestamp = {2009.11.02}
}
J. G. c, H. Jost, D. Beisel, J. Rataj, und F. Köster, "DeSCAS Design Process Model for Automotive Systems -- Development Streams and Ontologies" in Proc. Safety-Critical Systems 2009, 2009, p. 10.
@INPROCEEDINGS{Jost09a,
author = {Jan Ga\v{c}nik and Henning Jost and Daniel Beisel and J{\"u}rgen Rataj and Frank K{\"o}ster},
title = {DeSCAS Design Process Model for Automotive Systems -- Development Streams and Ontologies},
booktitle = {Safety-Critical Systems 2009},
year = {2009},
number = {SP-2222},
series = {Special Publications},
pages = {10 pages},
publisher = {SAE International}
}
J. G. c, H. Jost, F. Köster, J. Rataj, K. Lemmer, W. Damm, M. Fränzle, und E. Schnieder, "DeSCAS -- Formale Ontologien zur Verwebung von interdisziplinären Entwicklungsprozessen" in Proc. AUTOMATION 2009, 2009.
@INPROCEEDINGS{Jost09b,
author = {Jan Ga\v{c}nik and Henning Jost and Frank K{\"o}ster and J{\"u}rgen Rataj and Karsten Lemmer and Werner Damm and Martin Fr{\"a}nzle and Eckehard Schnieder},
title = {DeSCAS -- Formale Ontologien zur Verwebung von interdisziplin{\"a}ren Entwicklungsprozessen},
booktitle = {AUTOMATION 2009},
year = {2009},
number = {2067},
series = {VDI-Berichte},
pages = {449 -- 452 (Langfassung auf CD-ROM: 12 Seiten)},
publisher = {VDI Wissensforum GmbH}
}
A. Lüdtke, "New Requirements for Modelling how Humans Succeed and Fail in Complex Traffic Scenarios" in Proc. Proceedings of the 7th Working Conference on Human Error, Safety and Systems Development Systems Development (HESSD), 2009.
@INPROCEEDINGS{Ludtke2009c,
author = {L{\"u}dtke, A.},
title = {New Requirements for Modelling how Humans Succeed and Fail in Complex Traffic Scenarios},
booktitle = {Proceedings of the 7th Working Conference on Human Error, Safety and Systems Development Systems Development (HESSD)},
year = {2009},
editor = {J. Vanderdonckt and P. Palanque},
series = {LNCS},
publisher = {Springer Verlag},
owner = {luedtke},
timestamp = {2009.11.02}
}
A. Lüdtke und J-P. Osterloh, "Simulating Perceptive Processes of Pilots to Support System Design" in Proc. Proceedings INTERACT 2009, 12th IFIP TC13 Conference in Human-Computer Interaction, Part I, 2009.
@INPROCEEDINGS{Ludtke2009b,
author = {L{\"u}dtke, A. and Osterloh, J-P.},
title = {Simulating Perceptive Processes of Pilots to Support System Design},
booktitle = {Proceedings INTERACT 2009, 12th IFIP TC13 Conference in Human-Computer Interaction, Part I},
year = {2009},
series = {LNCS 5726},
publisher = {Springer},
owner = {luedtke},
timestamp = {2009.11.02}
}
A. Lüdtke, J. -P. Osterloh, T. Mioch, F. Rister, und R. Looije, "Cognitive Modelling of Pilot Errors and Error Recovery in Flight Management Tasks" in Proc. Proceedings of the 7th Working Conference on Human Error, Safety and Systems Development Systems Development (HESSD), 2009.
@INPROCEEDINGS{Ludtke2009a,
author = {L{\"u}dtke, A. and Osterloh, J.-P. and Mioch, T. and Rister, F. and Looije, R.},
title = {Cognitive Modelling of Pilot Errors and Error Recovery in Flight Management Tasks},
booktitle = {Proceedings of the 7th Working Conference on Human Error, Safety and Systems Development Systems Development (HESSD)},
year = {2009},
editor = {J. Vanderdonckt and P. Palanque},
series = {LNCS},
publisher = {Springer Verlag},
owner = {luedtke},
timestamp = {2009.11.02}
}
A. Lüdtke, L. Weber, J. Osterloh, und B. Wortelen, "Modeling Pilot and Driver Behavior for Human Error Simulation" in Proc. Proceedings of the HCI International 2009, San Diego, 2009.
@INPROCEEDINGS{LWOW2009,
author = {L{\"{u}}dtke, Andreas and Weber, Lars and Osterloh, Jan-Patrick and Wortelen, Bertram},
title = {Modeling Pilot and Driver Behavior for Human Error Simulation},
booktitle = {Proceedings of the HCI International 2009},
year = {2009},
pages = {403--412},
address = {San Diego},
abstract = {In order to reduce human errors in the interaction with in safety criti- cal assistance systems it is crucial to consequently include the characteristics of the human operator already in the early phases of the design process. In this pa- per we present a cognitive architecture for simulating man-machine interaction in the aeronautics and automotive domain. Though both domains have their own characteristics we think that it is possible to apply the same core architec- ture to support pilot as well driver centered design of assistance systems. This text shows how phenomena relevant in the automobile or aviation environment can be integrated in the same cognitive architecture.},
keywords = {cognitive architecture, drivers, human error simulation, pilots},
owner = {guenter},
timestamp = {2011.05.10}
}
R. Passerone, I. B. Hafaiedh, S. Graf, A. Benveniste, D. Cancila, A. Cuccuru, S. Gerard, F. Terrier, W. Damm, A. Ferrari, L. Mangeruca, B. Josko, T. Peikenkamp, und A. Sangiovanni-Vincentelli, "Metamodels in Europe: Languages, Tools, and Applications" IEEE Design and Test of Computers, vol. 26.
doi: 10.1109/MDT.2009.64
@ARTICLE{10.1109/MDT.2009.64,
author = {Roberto Passerone and Imene Ben Hafaiedh and Susanne Graf and Albert Benveniste and Daniela Cancila and Arnaud Cuccuru and Sebastien Gerard and Francois Terrier and Werner Damm and Alberto Ferrari and Leonardo Mangeruca and Bernhard Josko and Thomas Peikenkamp and Alberto Sangiovanni-Vincentelli},
title = {Metamodels in Europe: Languages, Tools, and Applications},
journal = {IEEE Design and Test of Computers},
year = {2009},
volume = {26},
pages = {38-53},
address = {Los Alamitos, CA, USA},
doi = {http://doi.ieeecomputersociety.org/10.1109/MDT.2009.64},
issn = {0740-7475},
owner = {guenter},
publisher = {IEEE Computer Society},
timestamp = {2011.05.12}
}
G. Sauter, H. Dierks, M. Fränzle, und M. R. Hansen, "Light-weight hybrid model checking facilitating online prediction of temporal properties" in Proc. Proceedings of the 21st Nordic Workshop on Programming Theory, NWPT '09, Kgs. Lyngby, Denmark, 2009.
@INPROCEEDINGS{SauterEA:NWPT09,
author = {Sauter, Gerald and Dierks, Henning and Fr{\"{a}}nzle, Martin and Hansen, Michael R.},
title = {Light-weight hybrid model checking facilitating online prediction of temporal properties},
booktitle = {Proceedings of the 21st Nordic Workshop on Programming Theory, NWPT '09},
year = {2009},
pages = {20-22},
address = {Kgs. Lyngby, Denmark},
publisher = {Danmarks Tekniske Universitet},
note = {\url{http://imost.informatik.uni-oldenburg.de}},
url = {http://imost.informatik.uni-oldenburg.de/download/RobustMonitoring-NWPT09.pdf}
}
L. Weber, M. Baumann, A. Luedtke, und R. Steenken, "Modellierung von Entscheidungen beim Einfädeln auf die Autobahn" to appear: Fortschritts-Berichte VDI: Der Mensch im Mittelpunkt technischer Systeme. 8. Berliner Werkstatt Mensch-Maschine-Systeme.
@ARTICLE{Weber2009,
author = {Weber, L. and Baumann, M. and Luedtke, A. and Steenken, R.},
title = {Modellierung von Entscheidungen beim Einf{\"a}deln auf die Autobahn},
journal = {to appear: Fortschritts-Berichte VDI: Der Mensch im Mittelpunkt technischer Systeme. 8. Berliner Werkstatt Mensch-Maschine-Systeme},
year = {2009},
owner = {LarsW},
timestamp = {2009.09.18}
}
B. Wortelen und A. Lüdtke, "Ablauffähige Modellierung des Einflusses von Ereignishäufigkeiten auf die Aufmerksamkeitsverteilung von Autofahrern" in Proc. Der Mensch im Mittelpunkt technischer Systeme, 8. Berliner Werkstatt, Mensch-Maschine-Systeme, ZMMS Spektrum Band 22, Düsseldorf, 2009.
@INPROCEEDINGS{Wortelen2009,
author = {Wortelen, B. and L{\"u}dtke, A.},
title = {Ablauff{\"a}hige Modellierung des Einflusses von Ereignish{\"a}ufigkeiten auf die Aufmerksamkeitsverteilung von Autofahrern},
booktitle = {Der Mensch im Mittelpunkt technischer Systeme, 8. Berliner Werkstatt, Mensch-Maschine-Systeme, ZMMS Spektrum Band 22},
year = {2009},
editor = {A. Lichtenstein and C. St{\"o}{\ss}el and C. Clemens},
number = {29},
series = {Fortschritt-Berichte VDI, Reihe 22 Mensch-Maschine-Systeme},
pages = {80-85},
address = {D{\"u}sseldorf},
publisher = {VDI Verlag},
note = {ISBN 978-3-18-302922-8, ISSN 1439-958X},
owner = {luedtke},
timestamp = {2009.11.02}
}
Proceedings of the First Workshop on Certification of Safety-Critical Software Controlled Systems (SafeCert 2008).
@PROCEEDINGS{HuHu09a, title = {Proceedings of the First Workshop on Certification of Safety-Critical Software Controlled Systems (SafeCert 2008)},
year = {2009},
editor = {Michaela Huhn and Hardi Hungar},
volume = {238},
number = {4},
series = {Electronic Notes in Theoretical Computer Science},
owner = {hardi},
timestamp = {2010.01.13}
H. Hungar und E. Reyzl, "Software-Entwicklung und Zertifizierung im Umfeld sicherheitskritischer und hochverfügbarer Systeme: Bedeutung modellbasierter und formaler Ansätze für effiziente Entwicklung und Zertifizierung" in Proc. Software Engineering, 2008.
@INPROCEEDINGS{DBLP:conf/se/HungarR08,
author = {Hardi Hungar and Erwin Reyzl},
title = {Software-Entwicklung und Zertifizierung im Umfeld sicherheitskritischer und hochverf{\"u}gbarer Systeme: Bedeutung modellbasierter und formaler Ans{\"a}tze f{\"u}r effiziente Entwicklung und Zertifizierung},
booktitle = {Software Engineering},
year = {2008},
pages = {291-294},
bibsource = {DBLP, http://dblp.uni-trier.de},
crossref = {DBLP:conf/se/2008}
}
H. Hungar und E. Reyzl, "Ergebnisse des Workshops "Software-Entwicklung und Zertifizierung im Umfeld sicherheitskritischer und hochverfügbarer Systeme"" in Proc. Software Engineering (Workshops), 2008.
@INPROCEEDINGS{DBLP:conf/se/HungarR08b,
author = {Hardi Hungar and Erwin Reyzl},
title = {Ergebnisse des Workshops "Software-Entwicklung und Zertifizierung im Umfeld sicherheitskritischer und hochverf{\"u}gbarer Systeme"},
booktitle = {Software Engineering (Workshops)},
year = {2008},
pages = {345-349},
bibsource = {DBLP, http://dblp.uni-trier.de},
crossref = {DBLP:conf/se/2008w}
}
M. Baumann, H. Colonius, H. Hungar, F. Köster, M. Langner, A. Lüdtke, C. Möbus, J. Peinke, S. Puch, C. Schiessl, R. Steenken, und L. Weber, Integrated Modelling for Safe Transportation - Driver modeling and driver experimentsDüsseldorf: VDI Verlag.
@INCOLLECTION{BaumannColonius08,
author = {Baumann, M. and Colonius, H. and Hungar, H. and K\"oster, F. and Langner, M. and L\"udtke, A. and M\"obus, C. and Peinke, J. and Puch, S. and Schiessl, C. and Steenken, R. and Weber, L.},
title = {Integrated Modelling for Safe Transportation - Driver modeling and driver experiments},
booktitle = {Fahrermodellierung in Wissenschaft und Wirtschaft, 2. Berliner Fachtagung f{\"}ur Fahrzeugsmodellierung},
publisher = {VDI Verlag},
year = {2008},
editor = {T. J\"{u}rgensohn and H. Kolrep},
address = {D\"usseldorf},
endnotereftype = {Book Section},
shorttitle = {Integrated Modelling for Safe Transportation - Driver modeling and driver experiments}
}
R. Buschermoehle und J. Oelerink, "Rich Meta Object Facility as formal integration platform: Syntax, Semantics, and Implementation" in Proc. Innovations in Systems and Software Engineering, 2008.
@CONFERENCE{RBJO2008,
author = {Ralf Buschermoehle and Joerg Oelerink},
title = {Rich Meta Object Facility as formal integration platform: Syntax, Semantics, and Implementation},
booktitle = {Innovations in Systems and Software Engineering},
year = {2008},
volume = {4},
number = {3},
publisher = {Springer Verlag}
}
E. Böde, T. Peikenkamp, J. Rakow, und S. Wischmeyer, "Model Based Importance Analysis for Minimal Cut Sets" SFB/TR 14 AVACS, Reports of SFB/TR 14 AVACS 29, 2008.
@TECHREPORT{atr29,
author = {Eckard B{\"o}de and Thomas Peikenkamp and Jan Rakow and Samuel Wischmeyer},
title = {Model Based Importance Analysis for Minimal Cut Sets},
institution = {SFB/TR 14 AVACS},
year = {2008},
type = {Reports of SFB/TR 14 AVACS},
number = {29},
month = {Apr},
note = {ISSN: 1860-9821, http://www.avacs.org},
abstract = { In this report we show how fault injection together with recent advances in stochastic model checking can be combined to form a crucial ingredient for improving quantitative safety analysis. Based on standard design notations (Statecharts) annotated with fault occurrence distributions we compute the probability of reaching a safety-critical state and to what extent certain fault configurations contribute to this probability. },
access = {open},
bibtex = {atr029.bib},
editor = {Bernd Becker and Werner Damm and Martin Fr{\"a}nzle and Ernst-R{\"u}diger Olderog and Andreas Podelski and Reinhard Wilhelm},
pdf = {avacs_technical_report_029.pdf},
series = {ATR},
subproject = {S3}
}
E. Böde, T. Peikenkamp, J. Rakow, und S. Wischmeyer, "Model Based Importance Analysis for Minimal Cut Sets" in Proc. Automated Technology for Verification and Analysis, 6th International Symposium ATVA 2008, Seoul, Korea, 2008.
@INPROCEEDINGS{atva08,
author = {Eckard B{\"o}de and Thomas Peikenkamp and Jan Rakow and Samuel Wischmeyer},
title = {Model Based Importance Analysis for Minimal Cut Sets},
booktitle = {Automated Technology for Verification and Analysis, 6th International Symposium ATVA 2008, Seoul, Korea},
year = {2008},
volume = {5311},
series = {LNCS},
pages = {303-317},
abstract = {We show how fault injection together with recent advances in stochastic model checking can be combined to form a crucial ingredient for improving quantitative safety analysis. Based on standard design notations (Statecharts) annotated with fault occurrence distributions we compute to what extent certain fault con?gurations contribute to the probability of reaching a safety-critical state.},
access = {restricted},
bibtex = {boede.atva2008.bib},
pdf = {boede.atva2008.pdf},
subproject = {S3}
}
F. Frische, T. Mistrzyk, und A. Lüdtke, "Modellierung und Analyse von Pilotenverhalten in Flugzeug-Cockpits" in Proc. .50. Sitzung des Fachausschusses Anthropotechnik der Deutschen Gesellschaft f"ur Luft- und Raumfahrt, Beiträge der Ergonomie zur Mensch-System-Integration, Bonn, 2008.
@INPROCEEDINGS{Frische2008,
author = {Frische, F. and Mistrzyk, T. and L{\"u}dtke, A.},
title = {Modellierung und Analyse von Pilotenverhalten in Flugzeug-Cockpits},
booktitle = {.50. Sitzung des Fachausschusses Anthropotechnik der Deutschen Gesellschaft f\{"u}r Luft- und Raumfahrt, Beitr{\"a}ge der Ergonomie zur Mensch-System-Integration},
year = {2008},
editor = {M. Grandt and A. Bauch},
number = {2008-04},
series = {DGLR-Bericht},
address = {Bonn},
publisher = {DGLR e.V.},
owner = {luedtke},
timestamp = {2009.11.02}
}
J. Gacnik, H. Jost, D. Beisel, und F. Köster, "DeSCAS -- Design Process for the Development of Safety-Critical Advanced Driver Assistance Systems" in Proc. Formal Methods for Automation and Safety in Railway and Automotive Systems, 2008.
@INPROCEEDINGS{FORMS08,
author = {Jan Gacnik and Henning Jost and Daniel Beisel and Frank K{\"o}ster},
title = {DeSCAS -- Design Process for the Development of Safety-Critical Advanced Driver Assistance Systems},
booktitle = {Formal Methods for Automation and Safety in Railway and Automotive Systems},
year = {2008},
editor = {Ga Tarnai and Eckehard Schnieder},
pages = {103--110}
}
A. Lüdtke, "Analyse kognitiver Aspekte der Kommunikation im Flugzeugcockpit" in Proc. Workshop Proceedings der Tagungen Mensch & Computer 2008, DeLFI 2008 und Cognitive Design 2008, Berlin, 2008.
@INPROCEEDINGS{Ludtke2008a,
author = {L{\"u}dtke, A.},
title = {Analyse kognitiver Aspekte der Kommunikation im Flugzeugcockpit},
booktitle = {Workshop Proceedings der Tagungen Mensch & Computer 2008, DeLFI 2008 und Cognitive Design 2008},
year = {2008},
editor = {U. Lucke and M. C. Kindsmüller and S. Fischer and M. Herczeg and S. Seehusen},
address = {Berlin},
publisher = {Logos Verlag},
note = {ISBN 978-3-8325-2007-6},
owner = {luedtke},
timestamp = {2009.11.02}
}
E. -R. Olderog und H. Dierks, Real-Time Systems: Formal Specification and Automatic Verification, Cambridge University Press.
@BOOK{OD08, title = {Real-Time Systems: Formal Specification and Automatic Verification},
publisher = {Cambridge University Press},
year = {2008},
author = {E.-R. Olderog and H. Dierks},
note = {ISBN-13: 978-0521883337}
}
J. -P. Osterloh und A. Lüdtke, "Analyzing the Ergonomics of Aircraft Cockpits Using Cognitive Models" in Proc. Proceedings of the 2nd International Conference on Applied Human Factors and Ergonomic (AHFE), 2008, p. 10.
@INPROCEEDINGS{Osterloh2008,
author = {Osterloh, J.-P. and L{\"u}dtke, A.},
title = {Analyzing the Ergonomics of Aircraft Cockpits Using Cognitive Models},
booktitle = {Proceedings of the 2nd International Conference on Applied Human Factors and Ergonomic (AHFE)},
year = {2008},
editor = {W. Karowski and G. Salvendy},
pages = {10 pages},
publisher = {USA Publishing},
note = {CD Rom. ISBN 978-1-60643-712-4},
owner = {luedtke},
timestamp = {2009.11.02}
}
T. Toben, "Counterexample Guided Spotlight Abstraction Refinement" in Proc. Proceedings of the 28th IFIP WG6.1 International Conference on Formal Techniques for Networked and Distributed Systems (FORTE 2008), Tokyo, Japan, 2008.
@INPROCEEDINGS{Toben2008,
author = {Tobe Toben},
title = {Counterexample Guided Spotlight Abstraction Refinement},
booktitle = {Proceedings of the 28th IFIP WG6.1 International Conference on Formal Techniques for Networked and Distributed Systems (FORTE 2008)},
year = {2008},
editor = {K. Suzuki and T. Higashino and K. Yasumoto and K. El-Fakih},
volume = {5048},
series = {LNCS},
pages = {21--36},
address = {Tokyo, Japan},
month = jun, publisher = {Springer-Verlag}
}
T. Toben und B. Westphal, "Concurrent LSC Verification" in Proc. Proceedings of the 5th International Workshop on Automated Verification of Critical Systems (AVoCS'05), Warwick, UK, 2006.
@INPROCEEDINGS{TobenWestphal2006a,
author = {Tobe Toben and Bernd Westphal},
title = {Concurrent LSC Verification},
booktitle = {Proceedings of the 5th International Workshop on Automated Verification of Critical Systems (AVoCS'05)},
year = {2006},
editor = {Ranko Lazic and Rajagopal Nagarajan},
volume = {145},
series = {Electronic Notes in Theoretical Computer Science (ENTCS)},
pages = {95--111},
address = {Warwick, UK},
month = jan, publisher = {Elsevier B. V.}
}
L. Urbas, S. Leuchter, und A. Lüdtke, "Modellierung und Simulation von Teams in sicherheitskritischen Mensch-Maschine-Systemen" in Proc. Workshop Proceedings der Tagungen Mensch & Computer 2008, DeLFI 2008 und Cognitive Design 2008, Berlin, 2008.
@INPROCEEDINGS{Urbas2008,
author = {Urbas, L. and Leuchter, S. and L{\"u}dtke, A.},
title = {Modellierung und Simulation von Teams in sicherheitskritischen Mensch-Maschine-Systemen},
booktitle = {Workshop Proceedings der Tagungen Mensch & Computer 2008, DeLFI 2008 und Cognitive Design 2008},
year = {2008},
editor = {U. Lucke and M. C. Kindsm{\"a}ller and S. Fischer and M. Herczeg and S. Seehusen},
address = {Berlin},
publisher = {Logos Verlag},
note = {ISBN 978-3-8325-2007-6},
owner = {luedtke},
timestamp = {2009.11.02}
}
B. Westphal, "Specification and Verification of Dynamic Topology Systems" PhD Thesis , 2008.
@PHDTHESIS{Westphal2008_phd,
author = {Bernd Westphal},
title = {Specification and Verification of Dynamic Topology Systems},
school = {Carl von Ossietzky Universit{\"a}t Oldenburg, Germany},
year = {2008},
month = may, note = {urn:nbn:de:gbv:715-oops-7900},
url = {http://oops.uni-oldenburg.de/volltexte/2008/790/}
}
Tools for the Model-based Development of Certifiable, Dependable Systems, 10.06. - 15.06.2007Internationales Begegnungs- und Forschungszentrum fuer Informatik (IBFI), Schloss Dagstuhl, Germany.
@PROCEEDINGS{DBLP:conf/dagstuhl/2007P7241, title = {Tools for the Model-based Development of Certifiable, Dependable Systems, 10.06. - 15.06.2007},
year = {2008},
editor = {Michaela Huhn and Hardi Hungar and Doron Peled},
volume = {07241},
series = {Dagstuhl Seminar Proceedings},
publisher = {Internationales Begegnungs- und Forschungszentrum fuer Informatik (IBFI), Schloss Dagstuhl, Germany},
bibsource = {DBLP, http://dblp.uni-trier.de},
booktitle = {Tools for the Model-based Development of Certifiable, Dependable Systems}
M. Huhn, H. Hungar, und D. Peled, "07241 Summary - Tools for the Model-based Development of Certifiable, Dependable Systems" in Proc. Tools for the Model-based Development of Certifiable, Dependable Systems, 2007.
@INPROCEEDINGS{DBLP:conf/dagstuhl/HuhnHP07,
author = {Michaela Huhn and Hardi Hungar and Doron Peled},
title = {07241 Summary - Tools for the Model-based Development of Certifiable, Dependable Systems},
booktitle = {Tools for the Model-based Development of Certifiable, Dependable Systems},
year = {2007},
bibsource = {DBLP, http://dblp.uni-trier.de},
crossref = {DBLP:conf/dagstuhl/2007P7241},
ee = {http://drops.dagstuhl.de/opus/volltexte/2008/1405}
}
J. Bauer, W. Damm, T. Toben, und B. Westphal, "Verification and Synthesis of OCL Constraints via Topology Analysis: A Case Study" in Proc. Applications of Graph Transformations with Industrial Relevance Third International Symposium, AGTIVE 2007, Proceedings of Selected and Invited Papers, Schlosshotel am Bergpark, Wilhelmshöhe, Kassel, Germany, October 10 - 12, 2007, 2007.
@INPROCEEDINGS{BauerDammTobenWestphal2007,
author = {J{\"o}rg Bauer and Werner Damm and Tobe Toben and Bernd Westphal},
title = {Verification and Synthesis of OCL Constraints via Topology Analysis: A Case Study},
booktitle = {Applications of Graph Transformations with Industrial Relevance Third International Symposium, AGTIVE 2007, Proceedings of Selected and Invited Papers, Schlosshotel am Bergpark, Wilhelmsh{\"o}he, Kassel, Germany, October 10 - 12, 2007},
year = {2007},
editor = {Andy Sch{\"u}rr, Manfred Nagl, Albert Z{\"u}ndorf},
month = oct, publisher = {Universit\"{a}t Kassel},
url = {http://www.se.eecs.uni-kassel.de/se/fileadmin/se/publications/AGTIVE2007-Proceedings.pdf}
}
J. Bauer, T. Toben, und B. Westphal, "Mind the Shapes: Abstraction Refinement Via Topology Invariants" in Proc. Proceedings of the Fifth International Symposium on Automated Technology for Verification and Analysis (ATVA 2007), Tokyo, Japan, 2007.
@INPROCEEDINGS{BauerTobenWestphal2007,
author = {J{\"o}rg Bauer and Tobe Toben and Bernd Westphal},
title = {Mind the Shapes: Abstraction Refinement Via Topology Invariants},
booktitle = {Proceedings of the Fifth International Symposium on Automated Technology for Verification and Analysis (ATVA 2007)},
year = {2007},
editor = {K. S. Namjoshi and T. Yoneda and T. Higashino and Y. Okamura},
volume = {4762},
series = {LNCS},
pages = {35--50},
address = {Tokyo, Japan},
month = oct, publisher = {Springer-Verlag}
}
S. Blom, J. Calame, B. Lisser, S. Orzan, J. Pang, J. van de Pol, M. Torabi Dashti, und A. Wijs, "Distributed analysis with $\mu$CRL: A compendium of case studies" in Proc. Proc. 13th Conference on Tools and Algorithms for the Construction and Analysis of Systems, 2007.
@INPROCEEDINGS{BCLOP+07,
author = {Stefan Blom and Jens Calame and Bert Lisser and Simona Orzan and Jun Pang and Jaco {van de Pol} and Mohammad {Torabi Dashti} and Anton Wijs},
title = {Distributed analysis with $\mu${CRL}: A compendium of case studies},
booktitle = {Proc.\ 13th Conference on Tools and Algorithms for the Construction and Analysis of Systems},
year = {2007},
series = {Lecture Notes in Computer Science},
publisher = {Springer},
note = {To appear}
}
W. Damm, S. Disch, H. Hungar, S. Jacobs, J. Pang, F. Pigorsch, C. Scholl, U. Waldmann, und B. Wirtz, "Exact state set representations in the verification of linear hybrid systems with large discrete state-space" in Proc. Automated Technology for Verification and Analysis, 2007.
doi: 10.1007/978-3-540-75596-8_30
@INPROCEEDINGS{DammDHJPPSWW07,
author = {W. Damm and S. Disch and H. Hungar and S. Jacobs and J. Pang and F. Pigorsch and C. Scholl and U. Waldmann and B. Wirtz},
title = {Exact state set representations in the verification of linear hybrid systems with large discrete state-space},
booktitle = {Automated Technology for Verification and Analysis},
year = {2007},
editor = {Kedar S. Namjoshi and Tomohiro Yoneda and Teruo Higashino and Yoshio Okamura},
volume = {4762},
series = {Lecture Notes in Computer Science},
pages = {425--440},
publisher = {Springer},
note = {\url{http://dx.doi.org/10.1007/978-3-540-75596-8_30}{(c) Springer-Verlag}},
doi = {10.1007/978-3-540-75596-8_30},
url = {http://dx.doi.org/10.1007/978-3-540-75596-8_30}
}
W. Damm, A. Mikschl, J. Oehlerking, E. Olderog, J. Pang, A. Platzer, M. Segelken, und B. Wirtz, "Automating Verification of Cooperation, Control, and Design in Traffic Applications." in Proc. Formal Methods and Hybrid Real-Time Systems, 2007.
doi: 10.1007/978-3-540-75221-9_6
@INPROCEEDINGS{DammMOOPPSW07,
author = {Werner Damm and Alfred Mikschl and Jens Oehlerking and Ernst-R{\"u}diger Olderog and Jun Pang and Andr{\'e} Platzer and Marc Segelken and Boris Wirtz},
title = {Automating Verification of Cooperation, Control, and Design in Traffic Applications.},
booktitle = {Formal Methods and Hybrid Real-Time Systems},
year = {2007},
editor = {Cliff Jones and Zhiming Liu and Jim Woodcock},
volume = {4700},
series = {Lecture Notes in Computer Science},
pages = {115--169},
publisher = {Springer},
note = {\url{http://dx.doi.org/10.1007/978-3-540-75221-9_6}{(c) Springer-Verlag}},
abstract = {We present a verification methodology for cooperating traffic agents covering analysis of cooperation strategies, realization of strategies through control, and implementation of control. For each layer, we provide dedicated approaches to formal verification of safety and stability properties of the design. The range of employed verification techniques invoked to span this verification space includes application of pre-verified design patterns, automatic synthesis of Lyapunov functions, constraint generation for parameterized designs, model-checking in rich theories, and abstraction refinement. We illustrate this approach with a variant of the European Train Control System (ETCS), employing layer specific verification techniques to layer specific views of an ETCS design.},
doi = {10.1007/978-3-540-75221-9_6},
url = {http://dx.doi.org/10.1007/978-3-540-75221-9_6}
}
W. Damm, T. Toben, und B. Westphal, On the Expressive Power of Live Sequence ChartsSpringer-Verlag.
@INCOLLECTION{DammTobenWestphal2007,
author = {Werner Damm and Tobe Toben and Bernd Westphal},
title = {On the Expressive Power of Live Sequence Charts},
booktitle = {Program Analysis and Compilation, Theory and Practice: Essays Dedicated to Reinhard Wilhelm},
publisher = {Springer-Verlag},
year = {2007},
editor = {Thomas Reps and Mooly Sagiv and J{\"o}rg Bauer},
number = {4444},
series = {Lecture Notes in Computer Science},
pages = {225--246},
note = {To appear}
}
D. Helms, G. Ehmen, und W. Nebel, "Analysis and Modeling of Subthreshold Leakage of RT Components under PTV and State Variation" , von und (HS), C. O. U. O. O. Ed., BIS-Verlag der Carl von Ossietzky Universität Oldenburg, vol. 2.
@INBOOK{Helms07, chapter = {4},
pages = {29-35},
title = {Analysis and Modeling of Subthreshold Leakage of RT Components under PTV and State Variation},
publisher = {BIS-Verlag der Carl von Ossietzky Universit{\"a}t Oldenburg},
year = {2007},
editor = {Carl von Ossietzky Universit{\"a}t Oldenburg und OFFIS (HS)},
author = {Domenik Helms and G{\"u}nter Ehmen and Wolfgang Nebel},
volume = {2},
series = {Selected Readings on Embedded HW/SW-Systems},
month = {June},
booktitle = {Selected readings on embedded HW/SW-systems - ISSN 1860-238X }
}
S.~Kupferschmid, K.~Dräger, J.~Hoffmann, B.~Finkbeiner, H.~Dierks, A.~Podelski, und G.~Behrmann, "Uppaal/DMC -- Abstraction-based Heuristics for Directed Model Checking" in Proc. Tools and Algorithms for the Construction and Analysis of Systems (TACAS), 2007.
@INPROCEEDINGS{KDHetal07,
author = {S.~Kupferschmid and K.~Dr{\"a}ger and J.~Hoffmann and B.~Finkbeiner and H.~Dierks and A.~Podelski and G.~Behrmann},
title = {Uppaal/DMC -- Abstraction-based Heuristics for Directed Model Checking},
booktitle = {Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
year = {2007},
series = {Lecture Notes in Computer Science},
publisher = {Springer-Verlag}
}
J. Pang, W. Fokkink, R. Hofman, und R. Veldema, "Model checking a cache coherence protocol of a Java DSM implementation" Journal of Logic and Algebraic Programming, vol. 71, iss. 1.
@ARTICLE{PFHV07,
author = {Jun Pang and Wan Fokkink and Rutger Hofman and Ronald Veldema},
title = {Model checking a cache coherence protocol of a {J}ava {DSM} implementation},
journal = {Journal of Logic and Algebraic Programming},
year = {2007},
volume = {71},
pages = {1-43},
number = {1}
}
T. Toben, "Non-Interference Properties for Data-Type Reduction of Communicating Systems" in Proc. Proceedings of the Sixth International Conference on Integrated Formal Methods (IFM 2007), Oxford, UK, 2007.
@INPROCEEDINGS{Toben2007,
author = {Tobe Toben},
title = {Non-Interference Properties for Data-Type Reduction of Communicating Systems},
booktitle = {Proceedings of the Sixth International Conference on Integrated Formal Methods (IFM 2007)},
year = {2007},
editor = {J. Davies and J. Gibbons},
volume = {4591},
series = {LNCS},
pages = {619--638},
address = {Oxford, UK},
month = jul, publisher = {Springer-Verlag}
}
Verification, Model Checking, and Abstract Interpretation, 8th International Conference, VMCAI 2007, Nice, France, January 14-16, 2007, ProceedingsSpringer-Verlag.
@PROCEEDINGS{ProcVMCAI2007, title = {Verification, Model Checking, and Abstract Interpretation, 8th International Conference, VMCAI 2007, Nice, France, January 14-16, 2007, Proceedings},
year = {2007},
editor = {Byron Cook and Andreas Podelski},
volume = {4349},
series = {Lecture Notes in Computer Science},
publisher = {Springer-Verlag},
bibsource = {DBLP, http://dblp.uni-trier.de},
booktitle = {VMCAI},
isbn = {3-540-69735-7}
O. Åkerlund und others, "ISAAC, a framework for integrated safety analyses of functional, geometrical and human aspects" ERTS.
@ARTICLE{isaac06,
author = {Ove {\AA}kerlund and others},
title = {ISAAC, a framework for integrated safety analyses of functional, geometrical and human aspects},
journal = {ERTS},
year = {2006},
longauthor = {Ove {\AA}kerlund and Jakob Engblom and Bengt Werner and P. Bieber and C. Castel and L.Sagaspe and C. Seguin and E. B{\"o}de and A. L{\"u}dke and T. Peikenkamp and M. Bolzano and M. Bretschneider and M. Forte Da Cruz and M. Frisk and S. Metge and C. Papadopoulos and H. Trivedi and A. Cavallo and M. Cifaldi and J. Gauthier and A. Griffault and O. Lisagor and P. Person}
}
O. Akerlund, P. Bieber, B. E., M. Bozzano, M. Bretschneider, C. Castel, A. Cavallo, M. Cifaldi, J. Gauthier, A. Griffault, O. Lisagor, A. Lüdtke, S. Metge, C. Papadopoulos, T. Peikenkamp, L. Sagaspe, C. Seguin, H. Trivedi, und L. Valacca, "ISAAC, a framework for integrated safety analysis of functional, geometrical and human aspects" in Proc. Proceedings of the Embedded Real-Time Software conference (ERTS'06)., 2006.
@INPROCEEDINGS{Akerlund_et_al2006,
author = {Akerlund, O. and Bieber, P. and Boede. E. and Bozzano, M. and Bretschneider, M. and Castel, C. and Cavallo, A. and Cifaldi, M. and Gauthier, J. and Griffault, A. and Lisagor, O. and L{\"u}dtke, A. and Metge, S. and Papadopoulos, C. and Peikenkamp, T. and Sagaspe, L. and Seguin, C. and Trivedi, H. and Valacca, L.},
title = {{ISAAC},
a framework for integrated safety analysis of functional, geometrical and human aspects},
booktitle = {Proceedings of the Embedded Real-Time Software conference (ERTS'06).},
year = {2006},
owner = {luedtke},
timestamp = {2006.10.13}
}
E. Böde, W. Damm, J. Hoyem, B. Josko, J. Niehaus, und M. Segelken, "Adding Value to Automotive Models" in Proc. Automotive Software -- Connected Services in Mobile Networks, 2006.
@INPROCEEDINGS{ASWSD_Damm_06:2006,
author = {Eckard B\"ode and Werner Damm and Jarl Hoyem and Bernhard Josko and J\"urgen Niehaus and Marc Segelken},
title = {Adding Value to Automotive Models},
booktitle = {Automotive Software -- Connected Services in Mobile Networks},
year = {2006},
volume = {Volume 4147/2006},
series = {Lecture Notes in Computer Science},
pages = {86-102},
organization = {ARTIST and NSF Workshop on Automotive Software Development},
publisher = {Springer Berlin / Heidelberg},
date-modified = {2006-10-05 11:14:24 +0200},
url = {http://www.springerlink.com/content/yml61405270t10n6}
}
B. Badban, J. van de Pol, O. Tveretina, und H. Zantema, "Generalizing DPLL and Satisfiability for Equalities."
@ARTICLE{badban.bib,
author = {Bahareh Badban and Jaco van de Pol and Olga Tveretina and Hans Zantema},
title = {Generalizing DPLL and Satisfiability for Equalities},
year = {2006},
publisher = {Accepted for publication in the journal of Information and Computation I\&C}
}
J. Bauer, I. Schaefer, T. Toben, und B. Westphal, "Specification and Verification of Dynamic Communication Systems" in Proc. Sixth International Conference on Application of Concurrency to System Design, 2006. ACSD 2006., 2006.
@INPROCEEDINGS{BauerSchaeferTobenWestphal2006,
author = {Joerg Bauer and Ina Schaefer and Tobe Toben and Bernd Westphal},
title = {{S}pecification and {V}erification of {D}ynamic {C}ommunication {S}ystems},
booktitle = {Sixth International Conference on Application of Concurrency to System Design, 2006. ACSD 2006.},
year = {2006},
pages = {189--200},
publisher = {IEEE Computer Society Press},
url = {http://seshome.informatik.uni-oldenburg.de/~berndw/2006_bauer_etal_acsd.pdf}
}
R. Buschermöhle, H. Eekhoff, und B. Josko, "SUCCESS - Motivation, Vorgehensweise und Ergebnisse" in Proc. INFORMATIK 2006 Informatik für Menschen, Band 1, Beiträge der 36. Jahrestagung der Gesellschaft für Informatik e.V. (GI) 2.-6.Oktober 2006 in Dresden., 2006.
@INPROCEEDINGS{SUCCESS06,
author = {Ralf Buscherm{\"o}hle and Heike Eekhoff and Bernhard Josko},
title = {SUCCESS - Motivation, Vorgehensweise und Ergebnisse},
booktitle = {INFORMATIK 2006 Informatik f{\"u}r Menschen, Band 1, Beitr{\"a}ge der 36. Jahrestagung der Gesellschaft f{\"u}r Informatik e.V. (GI) 2.-6.Oktober 2006 in Dresden.},
year = {2006},
publisher = {C. Hochberger, R{\"u}diger Liskowsky}
}
T. Chothia, S. Orzan, J. Pang, und M. Torabi Dashti, "A framework for automatically checking anonymity with $\mu$CRL" in Proc. Proc. 2nd Symposium on Trustworthy Global Computing, 2006.
@INPROCEEDINGS{COPT06,
author = {Tom Chothia and Simona Orzan and Jun Pang and Mohammad {Torabi Dashti}},
title = {A framework for automatically checking anonymity with $\mu${CRL}},
booktitle = {Proc.\ 2nd Symposium on Trustworthy Global Computing},
year = {2006},
series = {Lecture Notes in Computer Science},
publisher = {Springer},
note = {To appear}
}
W. Damm, S. Disch, H. Hungar, J. Pang, F. Pigorsch, C. Scholl, U. Waldmann, und B. Wirtz, "Automatic verification of hybrid systems with large discrete state space" in Proc. Proc. 4th Symposium on Automated Technology for Verification and Analysis, 2006.
@INPROCEEDINGS{DDHPP+06,
author = {Werner Damm and Stefan Disch and Hardi Hungar and Jun Pang and Florian Pigorsch and Christoph Scholl and Uwe Waldmann and Boris Wirtz},
title = {Automatic verification of hybrid systems with large discrete state space},
booktitle = {Proc.\ 4th Symposium on Automated Technology for Verification and Analysis},
year = {2006},
volume = {4218},
series = {Lecture Notes in Computer Science},
pages = {276-291},
publisher = {Springer}
}
Y. Deng, J. Pang, und P. Wu, "Measuring anonymity with relative entropy" in Proc. Proc. 4th Workshop on Formal Aspects in Security and Trust, 2006.
@INPROCEEDINGS{DPW06,
author = {Yuxin Deng and Jun Pang and Peng Wu},
title = {Measuring anonymity with relative entropy},
booktitle = {Proc.\ 4th Workshop on Formal Aspects in Security and Trust},
year = {2006},
series = {Lecture Notes in Computer Science},
publisher = {Springer},
note = {To appear}
}
W. Fokkink und J. Pang, "Variations on Itai-Rodeh leader election for anonymous rings and their analysis in PRISM" Journal of Universal Computer Science, vol. 12, iss. 8.
@ARTICLE{FokPan06,
author = {Wan Fokkink and Jun Pang},
title = {Variations on {I}tai-{R}odeh leader election for anonymous rings and their analysis in {PRISM}},
journal = {Journal of Universal Computer Science},
year = {2006},
volume = {12},
pages = {981-1006},
number = {8}
}
D. Helms, G. Ehmen, und W. Nebel, "Analysis and Modeling of Subthreshold Leakage of RT Components under PTV and State Variation" in Proc. Proceedings of the 2006 International Symposium on Low Power Electronics and Design, 2006.
@INPROCEEDINGS{Helms06,
author = {Domenik Helms and G{\"u}nter Ehmen and Wolfgang Nebel},
title = {Analysis and Modeling of Subthreshold Leakage of RT Components under PTV and State Variation},
booktitle = {Proceedings of the 2006 International Symposium on Low Power Electronics and Design},
year = {2006},
pages = {220-225},
month = {October},
url = {http://ses.informatik.uni-oldenburg.de/download/bib/paper/Analysis and Modeling of Subthreshold Leakage of RTComponents under PTV and State Variation.pdf}
}
D. Javaux, A. Lüdtke, P. Polson, F. Reuzeau, und N. Sarter, "Human Modeling and Complexity" in Proc. Proceedings of the International Conference on Human-Computer Interaction in Aeronautics (HCI-Aero 06), Toulouse, France, 2006.
@INPROCEEDINGS{Javaux_et_al2006,
author = {Javaux, D. and L{\"u}dtke, A. and Polson, P. and Reuzeau, F and Sarter, N.},
title = {Human Modeling and Complexity},
booktitle = {Proceedings of the International Conference on Human-Computer Interaction in Aeronautics (HCI-Aero 06)},
year = {2006},
editor = {F. Reuzeau and K. Corker and G. Boy},
pages = {242-243},
address = {Toulouse, France},
publisher = {Cépaduès-Editions},
note = {ISBN: 2.85428.748.7},
owner = {luedtke},
timestamp = {2006.10.13}
}
B.~Josko und H. (Eds.), "Deliverable D3.2 -- Guidelines for establishing dependability requirements and performing hazard analysis, and for verification and validation of dependability requirements and constructing a safety case, Part 2 -- Formal Verification Techniques" EASIS report2006.
@TECHREPORT{JD06,
author = {B.~Josko and H.~Dierks (Eds.)},
title = {Deliverable D3.2 -- Guidelines for establishing dependability requirements and performing hazard analysis, and for verification and validation of dependability requirements and constructing a safety case, Part 2 -- Formal Verification Techniques},
institution = {EASIS report},
year = {2006},
month = {November}
}
J. Klose, T. Toben, B. Westphal, und H. Wittke, "Check it out: On the Efficient Formal Verification of Life Sequence Charts" in Proc. Proceedings of CAV 2006, 2006.
@INPROCEEDINGS{2006_klose_etal_cav,
author = {Jochen Klose and Tobe Toben and Bernd Westphal and Hartmut Wittke},
title = {{C}heck it out: {O}n the {E}fficient {F}ormal {V}erification of {L}ife {S}equence {C}harts},
booktitle = {Proceedings of CAV 2006},
year = {2006},
editor = {Thomas Ball and Robert B. Jones},
volume = {4144},
series = {Lecture Notes in Computer Science},
publisher = {Springer},
paes = {219-233},
url = {http://seshome.informatik.uni-oldenburg.de/~berndw/2006_klose_etal_cav.pdf}
}
S.~Kupferschmid, J.~Hoffmann, H.~Dierks, und G.~Behrmann, "Adapting an AI Planning Heuristic for Directed Model Checking" in Proc. 13th International SPIN Workshop on Model Checking of Software, Vienna, Austria, 2006.
@INPROCEEDINGS{KHDB06,
author = {S.~Kupferschmid and J.~Hoffmann and H.~Dierks and G.~Behrmann},
title = {Adapting an AI Planning Heuristic for Directed Model Checking},
booktitle = {13th International SPIN Workshop on Model Checking of Software},
year = {2006},
editor = {A.~Valmari},
volume = {3925},
series = {Lecture Notes in Computer Science},
address = {Vienna, Austria},
month = MAR, optpublisher = {Springer-Verlag}
}
S. Leuchter, A. Lüdtke, und L. Urbas, "Human Performance Modellierung mit interoperablen kognitiven Agenten" in Proc. 48. Fachausschusssitzung Anthropotechnik der Deutschen Gesellschaft für Luft- und Raumfahrt e.V., Cognitive Systems Engineering in der Fahrzeug- und Prozessführung, 24.-25. Oktober 2006, Fraunhofer-IITB, Karlsruhe., 2006.
@INPROCEEDINGS{LeuchterLuedtkeUrbas2006,
author = {Leuchter, S and L{\"u}dtke, A. and Urbas, L.},
title = {Human Performance Modellierung mit interoperablen kognitiven Agenten},
booktitle = {48. Fachausschusssitzung Anthropotechnik der Deutschen Gesellschaft für Luft- und Raumfahrt e.V., Cognitive Systems Engineering in der Fahrzeug- und Prozessführung, 24.-25. Oktober 2006, Fraunhofer-IITB, Karlsruhe.},
year = {2006},
note = {(to be published)},
owner = {luedtke},
timestamp = {2006.10.13}
}
O. Lisagor, M. Pretzer, C. Seguin, D. J. Pumfrey, F. Iwu, und T. Peikenkamp, "Towards Safety Analysis of Highly Integrated Technologically Heterogeneous Systems -- A Domain-Based Approach for Modelling System Failure Logic" in Proc. Proceedings of the 24th International System Safety Conference (ISSC), Albuquerque, New Mexico, USA, 2006.
@INPROCEEDINGS{issc06,
author = {O. Lisagor and M. Pretzer and C. Seguin and D. J. Pumfrey and F. Iwu and T. Peikenkamp},
title = {Towards Safety Analysis of Highly Integrated Technologically Heterogeneous Systems -- A Domain-Based Approach for Modelling System Failure Logic},
booktitle = {Proceedings of the 24th International System Safety Conference (ISSC)},
year = {2006},
address = {Albuquerque, New Mexico, USA}
}
A. Lüdtke, A. Cavallo, L. Christophe, M. Cifaldi, M. Fabbri, und D. Javaux, "Human Error Analysis based on a Cognitive Architecture" in Proc. Proceedings of the International Conference on Human-Computer Interaction in Aeronautics (HCI-Aero 06), Toulouse, France, 2006.
@INPROCEEDINGS{Luedtke_et_al2006,
author = {L{\"u}dtke, A. and Cavallo, A. and Christophe, L. and Cifaldi, M. and Fabbri, M. and Javaux, D},
title = {Human Error Analysis based on a Cognitive Architecture},
booktitle = {Proceedings of the International Conference on Human-Computer Interaction in Aeronautics (HCI-Aero 06)},
year = {2006},
editor = {F. Reuzeau and K. Corker and G. Boy},
pages = {40-47},
address = {Toulouse, France},
publisher = {Cépaduès-Editions},
note = {ISBN: 2.85428.748.7},
owner = {luedtke},
timestamp = {2006.05.28}
}
A. Lüdtke und L. Weber, "Human Error Analysis Tool" in Proc. Proceedings of the International Conference on Human-Computer Interaction in Aeronautics (HCI-Aero 06), Toulouse, France, 2006.
@INPROCEEDINGS{LuedtkeWeber2006,
author = {L{\"u}dtke, A. and Weber, L.},
title = {Human Error Analysis Tool},
booktitle = {Proceedings of the International Conference on Human-Computer Interaction in Aeronautics (HCI-Aero 06)},
year = {2006},
editor = {F. Reuzeau and K. Corker and G. Boy},
pages = {252-253},
address = {Toulouse, France},
publisher = {Cépaduès-Editions},
note = {ISBN: 2.85428.748.7},
owner = {luedtke},
timestamp = {2006.09.02}
}
T. Toben und B. Westphal, "On the Expressive Power of Life Sequence Charts" in Proc. Proceedings of the 32nd Conference on Current Trends in Theory and Practice of Computer Science (SOFSEM'06), Mvevrín, Czech Republic, 2006.
@INPROCEEDINGS{TobenWestphal2006b,
author = {Tobe Toben and Bernd Westphal},
title = {{O}n the {E}xpressive {P}ower of {L}ife {S}equence {C}harts},
booktitle = {Proceedings of the 32nd Conference on Current Trends in Theory and Practice of Computer Science (SOFSEM'06)},
year = {2006},
editor = {Ji\v{r}\'{i} Wiedermann and Gerard Tel and Jaroslav Pokorn\'{y} and M\'{a}ria Bielikov\'{a} and J\'{u}lius \v{S}tuller},
volume = {2},
pages = {33--43},
address = {M\v{e}\v{r}\'{i}n, Czech Republic},
month = jan, publisher = {Institute of Computer Science AS CR, Prague}
}
B. Westphal und T. Toben, "The Good, the Bad and the Ugly: Well-formdness of Life Sequence Charts" in Proc. Proceedings of the 8th International Conference on Fundamental Approaches to Software Engineering (FASE 2006), Vienna, Austria, 2006.
@INPROCEEDINGS{2006_westphal_toben_fase,
author = {Bernd Westphal and Tobe Toben},
title = {{T}he {G}ood, the {B}ad and the {U}gly: {W}ell-formdness of {L}ife {S}equence {C}harts},
booktitle = {Proceedings of the 8th International Conference on Fundamental Approaches to Software Engineering (FASE 2006)},
year = {2006},
editor = {Luciano Baresi and R. Heckel},
volume = {3922},
series = {Lecture Notes in Computer Science},
pages = {230--246},
address = {Vienna, Austria},
month = mar, publisher = {Springer},
url = {http://seshome.informatik.uni-oldenburg.de/~berndw/2006_westphal_toben_fase.pdf}
E. Brinksma, G. Coulson, I. Crnkovic, A. Evans, S. Gérard, S. Graf, H. Hermanns, J. -M. Jézeqél, B. Jonsson, N. Plouzeau, A. Ravn, P. Schnoebelen, F. Terrier, und A. Votintseva, Part II: Component-Based Design and Integration PlatformsSpringer.
@INCOLLECTION{BrinksmaEtAl:05,
author = {E. Brinksma and G. Coulson and I. Crnkovic and A. Evans and S. G\'{e}rard and S. Graf and H. Hermanns and J.-M. J\'{e}zeq\'{e}l and B. Jonsson and N. Plouzeau and A. Ravn and Ph. Schnoebelen and F. Terrier and A. Votintseva},
title = {Part II: Component-Based Design and Integration Platforms},
booktitle = {Embedded Systems Design: The {ARTIST} Roadmap for Research and Development},
publisher = {Springer},
year = {2005},
editor = {B. Bouyssounouse and J. Sifakis},
number = {3436},
series = {LNCS},
pages = {103-214},
note = {available at http://www.artist-embedded.org/Roadmaps/index.html}
}
W. Damm, B. Josko, A. Pnueli, und A. Votintseva, "A Discrete-Time UML Semantics for Concurrency and Communication in Safety-Critical Applications" Science of Computer Programming, vol. 55, iss. 1-3.
@ARTICLE{DammJoskoPnueliVotintseva2005,
author = {Werner Damm and Bernhard Josko and Amir Pnueli and Angelika Votintseva},
title = {A Discrete-Time UML Semantics for Concurrency and Communication in Safety-Critical Applications},
journal = {Science of Computer Programming},
year = {2005},
volume = {55},
pages = {81-115},
number = {1-3},
month = {March},
note = {available at http://authors.elsevier.com/sd/article/S0167642304001479}
}
W. Damm, G. Pinto, und S. Ratschan, "Guaranteed Termination in the Verification of LTL Properties of Non-linear Robust Hybrid Systems." 2005.
@INPROCEEDINGS{damm2005guaranteed,
author = {Werner Damm and Guilherme Pinto and Stefan Ratschan},
title = {Guaranteed Termination in the Verification of {LTL} Properties of Non-linear Robust Hybrid Systems},
year = {2005},
note = {Submitted for Publication, 13 pages},
abstract = {We present a novel approach to the automatic verification of LTL requirements of non-linear discrete-time hybrid systems. The verification tool uses an interval-based constraint solver for non-linear robust constraints to compute incrementally refined abstractions. Although the problem is undecidable, we prove termination of abstraction refinement based verification of such properties for the class of robust non-linear hybrid systems, thus significantly extending previous semi-decidability results. We argue, that safety critical control applications are robust hybrid systems. We give first results on the application of this approach to a variant of an aircraft collision avoidance protocol.},
pdf = {damm2005guaranteed.pdf},
postscript = {damm2005guaranteed.ps}
}
W. Damm und B. Westphal, "Live and Let Die: LSC-based Verification of UML-Models" Science of Computer Programming, vol. 55, iss. 1--3.
@ARTICLE{DammWestphal2005,
author = {Werner Damm and Bernd Westphal},
title = {Live and Let Die: {LSC}-based Verification of {UML}-Models},
journal = {Science of Computer Programming},
year = {2005},
volume = {55},
pages = {117--159},
number = {1--3},
month = mar }
H.~Dierks, "Finding Optimal Plans for Domains with Continuous Effects with UPPAAL CORA" in Proc. Proceedings of the ICAPS'05 Workshop on Verification and Validation of Model-Based Planning and Scheduling Systems, 2005.
@INPROCEEDINGS{Die05b,
author = {H.~Dierks},
title = {{Finding Optimal Plans for Domains with Continuous Effects with UPPAAL CORA}},
booktitle = {{Proceedings of the ICAPS'05 Workshop on Verification and Validation of Model-Based Planning and Scheduling Systems}},
year = {2005}
}
H.~Dierks, Time, Abstraction and Heuristics -- Automatic Verification and Planning of Timed Systems using Abstraction and Heuristics.
@UNPUBLISHED{Die05Hab,
author = {H.~Dierks},
title = {{Time, Abstraction and Heuristics -- Automatic Verification and Planning of Timed Systems using Abstraction and Heuristics}},
note = {Habilitation thesis},
month = JUL, year = {2005},
http = {Dierks2005Habil.pdf}
}
A. Lüdtke, Kognitive Analyse Formaler Sicherheitskritischer Steuerungssysteme auf Basis eines integrierten Mensch-Maschine-ModellsBonn: Köllen Druck und Verlag GmbH.
@INCOLLECTION{Luedtke2005a,
author = {L{\"u}dtke, A.},
title = {{Kognitive Analyse Formaler Sicherheitskritischer Steuerungssysteme auf Basis eines integrierten Mensch-Maschine-Modells}},
booktitle = {{Ausgezeichnete Informatikdissertationen 2004, Gesellschaft f{\"u}r Informatik e.V.}},
publisher = {{K{\"o}llen Druck und Verlag GmbH}},
year = {2005},
editor = {D. Wagner et al.},
series = {Lecture Notes in Informatics (LNI)},
address = {Bonn},
edition = {{GI-Edition}},
note = {ISBN: 3-88579-409-8}
}
A. Lüdtke, Kognitive Analyse Formaler Sicherheitskritischer Steuerungssysteme auf Basis eines integrierten Mensch-Maschine-ModellsBerlin: Akad. Verl.-Ges. Aka.
@INCOLLECTION{Luedtke2005,
author = {L{\"u}dtke, A.},
title = {{Kognitive Analyse Formaler Sicherheitskritischer Steuerungssysteme auf Basis eines integrierten Mensch-Maschine-Modells}},
booktitle = {{Dissertationen zur K{\"u}nstlichen Intelligenz, DISKI}},
publisher = {{Akad. Verl.-Ges. Aka}},
year = {2005},
volume = {288},
address = {Berlin},
note = {ISBN 3-89838-288-5}
}
A. Lüdtke und S. Leuchter, "Human Error Analyse auf Basis Zweckbestimmter Kognitiver Modelle" in Proc. Workshop-Proceedings der 5. fachübergreifenden Konferenz Mensch und Computer, 4.-7. August 2005, Linz, Österreich, 2005.
@INPROCEEDINGS{LuedtkeLeuchter2005,
author = {L{\"u}dtke, A. and Leuchter, S.},
title = {{Human Error Analyse auf Basis Zweckbestimmter Kognitiver Modelle}},
booktitle = {{Workshop-Proceedings der 5. fach{\"u}bergreifenden Konferenz Mensch und Computer, 4.-7. August 2005, Linz, {\"O}sterreich}},
year = {2005},
editor = {A. Auinger},
publisher = {{\"O}sterreichische Computer Gesellschaft},
howpublished = {{Angenommen zum Workshop Interaktion bei Prozess und Fahrzeugf{\"u}hrung im Rahmen der Tagung Mensch \& Computer}}
}
A. Lüdtke und C. Möbus, "A Case Study for Using a Cognitive Model of Learned Carelessness in Cognitive Engineering" in Proc. Proceedings of HCI International'05 the 11th International Conference on Human-Computer Interaction, Mahwah, New Jersey, 2005.
@INPROCEEDINGS{LuedtkeMoebus2005,
author = {L{\"u}dtke, A. and M{\"o}bus, C.},
title = {{A Case Study for Using a Cognitive Model of Learned Carelessness in Cognitive Engineering}},
booktitle = {{Proceedings of HCI International'05 the 11th International Conference on Human-Computer Interaction}},
year = {2005},
editor = {G. Salvendy},
address = {Mahwah, New Jersey},
publisher = {Lawrence Erlbaum Associates, Inc.},
note = {ISBN 0-8058-5807-5, CD-ROM}
}
C. Mrugalla, O. Robbe, I. Schinz, T. Toben, und B. Westphal, "Formal Verification of a Sensor Voting and Monitoring UML Model" in Proc. Proceedings of the 4th International Workshop on Critical Systems Development Using Modeling Languages (CSDUML 2005), 2005.
@INPROCEEDINGS{MrugallaRobbeSchinzTobenWestphal2005,
author = {Christian Mrugalla and Oliver Robbe and Ingo Schinz and Tobe Toben and Bernd Westphal},
title = {Formal Verification of a Sensor Voting and Monitoring UML Model},
booktitle = {Proceedings of the 4th International Workshop on Critical Systems Development Using Modeling Languages (CSDUML 2005)},
year = {2005},
editor = {Siv Hilde Houmb, Jan J\"{u}rjens, Robert France},
month = sep, publisher = {Technische Universit\"{a}t M\"{u}nchen}
}
C. Möbus, O. Schröder, und A. Lüdtke, Trainingseinheit 7: Entscheiden unter Unsicherheit.Bielefeld: W.Bertelsmann-Verlag.
@INCOLLECTION{MoebusSchroederLuedtke2005,
author = {M{\"o}bus, C. and Schr{\"o}der, O. and L{\"u}dtke, A.},
title = {{Trainingseinheit 7: Entscheiden unter Unsicherheit.}},
booktitle = {{Entwicklung und Förderung der strategischen Handlungsflexibilität, Band 3: Analysieren - Modellieren - Entscheiden}},
publisher = {W.Bertelsmann-Verlag},
year = {2005},
editor = {G. Franke and R. Selka},
address = {Bielefeld},
note = {ISBN 3-7639-0654-1},
owner = {luedtke},
timestamp = {2006.10.13}
}
C. Möbus, O. Schröder, und A. Lüdtke, Entscheidung unter UnsicherheitBielefeld: W.Bertelsmann-Verlag.
@INCOLLECTION{MoebusSchroederLuedtke2005a,
author = {M{\"o}bus, C. and Schr{\"o}der, O. and L{\"u}dtke, A.},
title = {{Entscheidung unter Unsicherheit}},
booktitle = {{Entwicklung und F{\"o}rderung der strategischen Handlungsflexibilit{\"a}t, Band 3: Analysieren -- Modellieren -- Entscheiden}},
publisher = {W.Bertelsmann-Verlag},
year = {2005},
editor = {G. Franke, R. Selka},
pages = {49-69},
address = {Bielefeld},
note = {ISBN 3-7639-0654-1}
}
H. Seebold, A. Lüdtke, und C. Möbus, "Bayesian Belief Network based Diagnostics in a Problem-oriented Learning Environment for Cardiology" in Proc. Proceedings of Training, Education & Simulation International 2005 (TESI 2005), 22.-24. March 2005, Maastricht, The Netherlands, 2005.
@INPROCEEDINGS{SeeboldLuedtkeMoebus2005,
author = {Seebold, H and L{\"u}dtke, A. and M{\"o}bus, C.},
title = {{Bayesian Belief Network based Diagnostics in a Problem-oriented Learning Environment for Cardiology}},
booktitle = {{Proceedings of Training, Education \& Simulation International 2005 (TESI 2005), 22.-24. March 2005, Maastricht, The Netherlands}},
year = {2005},
owner = {luedtke},
timestamp = {2006.10.13}
}
B. Westphal, "LSC Verification for UML Models with Unbounded Creation and Destruction" in Proc. Proceedings of the Workshop on Software Model Checking (SoftMC 2005), 2005.
@INPROCEEDINGS{Westphal2005,
author = {Bernd Westphal},
title = {{LSC} Verification for UML Models with Unbounded Creation and Destruction},
booktitle = {Proceedings of the Workshop on Software Model Checking (SoftMC 2005)},
year = {2005},
editor = {Byron Cook, Scott Stoller, Willem Visser},
volume = {144},
number = {3},
series = {ENTCS},
pages = {133--145},
month = jul, publisher = {Elsevier B.V.},
x-pardate = {Mon Aug 8 14:53:37 MEST 2005},
x-topics = {umlverif uml ruve}
}
B. Becker, M. Behle, F. Eisenbrand, M. Fränzle, M. Herbstritt, C. Herde, J. Hoffmann, D. Kröning, B. Nebel, I. Polian, und R. Wimmer, "Bounded Model Checking and Inductive Verification of Hybrid Discrete-continuous Systems" in Proc. ITG/GI/GMM-Workshop ``Methoden und Beschreibungssprachen zur Modellierung und Verifikation von Schaltungen und Systemen'', 2004.
@INPROCEEDINGS{ber-bec:2004,
author = {Bernd Becker and Markus Behle and Fritz Eisenbrand and Martin Fr\"anzle and Marc Herbstritt and Christian Herde and Joerg Hoffmann and Daniel Kr\"oning and Bernhard Nebel and Ilia Polian and Ralf Wimmer},
title = {{Bounded Model Checking and Inductive Verification of Hybrid Discrete-continuous Systems}},
booktitle = {ITG/GI/GMM-Workshop ``Methoden und Beschreibungssprachen zur Modellierung und Verifikation von Schaltungen und Systemen''},
year = {2004},
pages = {65-75},
iranote = {AVACS H2},
isbn = {3-8322-2486-6},
language = {USenglish},
public = {no},
timestamp = {1080559316}
}
M. Brill, R. Buschermöhle, W. Damm, J. Klose, B. Westphal, und H. Wittke, Formal Verification of LSC's in the Development Process.
@INCOLLECTION{BrDaKlWeWi:04,
author = {Matthias Brill and Ralf Buscherm\"{o}hle and Werner Damm and Jochen Klose and Bernd Westphal and Hartmut Wittke},
title = {Formal Verification of {LSC}'s in the Development Process},
booktitle = {Integration of Software Specification Techniques for Applications in Engineering},
year = {2004},
editor = {Hartmut Ehrig and Werner Damm and Martin Gro\s{}e-Rhode and Wolfgang Reif and Eckehard Schnieder and Engelbert Westk\"{a}mper},
number = {3147},
series = {LNCS},
note = {(C) Springer-Verlag 2004, may not be further reproduced without their permission, and is published in Volume 3147 of the LNCS series.},
pdf = {spp-lncs-use-verif.pdf}
}
M. Brill, W. Damm, J. Klose, B. Westphal, und H. Wittke, Live Sequence Charts.
@INCOLLECTION{BrillDammKlose2004,
author = {Matthias Brill and Werner Damm and Jochen Klose and Bernd Westphal and Hartmut Wittke},
title = {Live Sequence Charts},
booktitle = {Integration of Software Specification Techniques for Applications in Engineering},
year = {2004},
editor = {Hartmut Ehrig and Werner Damm and Martin Gro\s{}e-Rhode and Wolfgang Reif and Eckehard Schnieder and Engelbert Westk\"{a}mper},
number = {3147},
series = {LNCS},
note = {(C) Springer-Verlag 2004, may not be further reproduced without their permission, and is published in Volume 3147 of the LNCS series.},
pdf = {spp-lncs-use-charts.pdf}
}
J. -Y. Brunel, W. Damm, A. Ferrari, U. Freund, B. Josko, S. Kowalewski, A. Sangiovanni-Vincentelli, M. Torngren, T. Thurner, und H. von Hasseln, "The Future Design Scenario and The SEA Inititative" in Proc. IFAC Symposium on Advances in Automotive Control, University of Salerno, Italy, 2004.
@INPROCEEDINGS{vonHasselnEtal2004,
author = {J.-Y. Brunel and W. Damm and A. Ferrari and U. Freund and B. Josko and S. Kowalewski and A. Sangiovanni-Vincentelli and M. Torngren and T. Thurner and H. von Hasseln},
title = {The Future Design Scenario and The {SEA} Inititative},
booktitle = {{IFAC} Symposium on Advances in Automotive Control},
year = {2004},
address = {University of Salerno, Italy},
pdf = {FutureDesignScenario.pdf}
}
R. Buschermöhle, M. Brörkens, I. Brückner, W. Damm, W. Hasselbring, B. Josko, C. Schulte, und T. Wolf, "Model Checking - Grundlagen und Praxiserfahrungen" Informatik Spektrum, iss. 2.
@ARTICLE{bbbdhjsw:2003,
author = {Buscherm{\"o}hle, R. and Br{\"o}rkens, M. and Br{\"u}ckner, I. and Damm, W. and Hasselbring, W. and Josko, B. and Schulte, C. and Wolf, T.},
title = {{M}odel {C}hecking - {G}rundlagen und {P}raxiserfahrungen},
journal = {{I}nformatik {S}pektrum},
year = {2004},
number = {2},
month = {april},
note = {to appear},
abstract = { },
pdf = {MCP.pdf}
}
W. Damm, H. Hungar, und E. -R. Olderog, "On the Verification of Cooperating Traffic Agents" in Proc. Proc. FMCO '03: Formal Methods for Components and Objects, 2004.
@INPROCEEDINGS{DHO04,
author = {W. Damm and H. Hungar and E.-R. Olderog},
title = {On the Verification of Cooperating Traffic Agents},
booktitle = {Proc.\ FMCO '03: Formal Methods for Components and Objects},
year = {2004},
editor = {F.S. de Boer and M.M. Bonsangue and S. Graf and W.-P. de Roever},
series = {LNCS 3188},
pages = {77--110},
abstract = {This paper exploits design patterns employed in coordinating autonomous transport vehicles so as to ease the burden in verifying cooperating hybrid systems. The presented verification methodology is equally applicable for avionics applications (such as TCAS), train applications (such as ETCS), or automotive applications (such as platooning). We present a verification rule explicating the essence of employed design patters, guaranteeing global safety properties of the kind "a collision will never occur", and whose premises can either be established by off-line analysis of the worst-case behavior of the involved traffic agents, or by purely local proofs, involving only a single traffic agent. In a companion paper we will show, how such local proof obligations can be discharged automatically. },
key = {DHO04}
}
H.~Dierks, "Heuristic Guided Model-Checking of Real-Time Systems (Extended Abstract)" in Proc. Proceedings of the 16th Nordic Workshop on Programming Theory, 2004.
@INPROCEEDINGS{Die04b,
author = {H.~Dierks},
title = {{Heuristic Guided Model-Checking of Real-Time Systems (Extended Abstract)}},
booktitle = {{Proceedings of the 16th Nordic Workshop on Programming Theory}},
year = {2004},
editor = {P.~Pettersson and Wang Yi},
series = {Technical Report 2004-041},
pages = {14--16},
month = OCT, organization = {Uppsala University, Sweden},
issn = {1404-3203}
}
A. Lüdtke und C. Möbus, "Automatisierte Prognose von Bedienungsfehlern bei der Entwicklung von Pilotenassistenzsystemen" in Proc. Verlässlichkeit der Mensch-Maschine-Interaktion: 46. Fachausschusssitzung Anthropotechnik der Deutschen Gesellschaft für Luft- und Raumfahrt e.V., Bonn, 2004.
@CONFERENCE{LuedtkeMoebus2004a,
author = {L{\"u}dtke, A. and M{\"o}bus, C.},
title = {{Automatisierte Prognose von Bedienungsfehlern bei der Entwicklung von Pilotenassistenzsystemen}},
booktitle = {{Verl{\"a}sslichkeit der Mensch-Maschine-Interaktion: 46. Fachausschusssitzung Anthropotechnik der Deutschen Gesellschaft f{\"u}r Luft- und Raumfahrt e.V.}},
year = {2004},
editor = {M. Grandt},
number = {2004-03},
series = {DGLR-Bericht},
pages = {241-270},
address = {Bonn},
publisher = {{Deutsche Gesellschaft f{\"u}r Luft-- und Raumfahrt e.V.}},
note = {ISBN 3-932182-36-7}
}
A. Lüdtke und C. Möbus, "A Cognitive Pilot Model to Predict Learned Carelessness for System Design" in Proc. Proceedings of HCI-Aero the International Conference on Human-Computer Interaction in Aeronautics, Toulouse, France, 2004.
@INPROCEEDINGS{LuedtkeMoebus2004b,
author = {L{\"u}dtke, A. and M{\"o}bus, C.},
title = {A Cognitive Pilot Model to Predict Learned Carelessness for System Design},
booktitle = {{Proceedings of HCI-Aero the International Conference on Human-Computer Interaction in Aeronautics}},
year = {2004},
editor = {A. Pritchett and A. Jackson},
address = {Toulouse, France},
month = {September 29 - October 1},
note = {CD-ROM}
}
A. Lüdtke und C. Möbus, Überprüfung eines Lernenden Pilotenmodells durch Rekonstruktion von HandlungsprotokollenDüsseldorf: VDI Verlag GmbH.
@INCOLLECTION{LuedtkeMoebus2004,
author = {L{\"u}dtke, A. and M{\"o}bus, C.},
title = {{{\"U}berpr{\"u}fung eines Lernenden Pilotenmodells durch Rekonstruktion von Handlungsprotokollen}},
booktitle = {{Entwerfen und Gestalten: 5. Berliner Werkstatt Mensch-Maschine-Systeme 2003}},
publisher = {VDI Verlag GmbH},
year = {2004},
editor = {C. Steffens and M. Th{\"u}ring and L. Urbas},
pages = {160-180},
address = {D{\"u}sseldorf},
note = {ISBN 3-18-301622-2}
}
A. Metzner, "Why Model Checking Can Improve WCET Analysis" in Proc. Proceeding of the $16^th$ Internation Conference on Computer Aided Verification (CAV'04), 2004.
@INPROCEEDINGS{metzner04,
author = {Alexander Metzner},
title = {{Why Model Checking Can Improve WCET Analysis}},
booktitle = {Proceeding of the $16^{th}$ Internation Conference on Computer Aided Verification (CAV'04)},
year = {2004},
volume = {3114},
series = {Lecture Notes in Computer Science}
}
T. Peikenkamp, E. Böde, I. Brückner, H. Spenke, M. Bretschneider, und H.-J. "Model-based Safety Analysis of a Flap Control System" in Proc. Proceedings of the INCOSE 2004 -- 14th Annual International Symposium, Toulouse, 2004.
@INPROCEEDINGS{incose2004,
author = {T. Peikenkamp and E. B{\"o}de and I. Br{\"u}ckner and H. Spenke and M. Bretschneider and {H.-J.} Holberg},
title = {Model-based {S}afety {A}nalysis of a {F}lap {C}ontrol {S}ystem},
booktitle = {Proceedings of the INCOSE 2004 -- 14th Annual International Symposium},
year = {2004},
address = {Toulouse},
pdf = {incose2004.pdf}
}
I. Schinz, T. Toben, C. Mrugalla, und B. Westphal, "The Rhapsody UML Verification Environment" in Proc. Proceedings of the 2nd International Conference on Software Engineering and Formal Methods (SEFM 2004), Beijing, China, 2004.
@INPROCEEDINGS{SchinzTobenMrugallaWestphal2004,
author = {Ingo Schinz and Tobe Toben and Christian Mrugalla and Bernd Westphal},
title = {{T}he {R}hapsody {UML} {V}erification {E}nvironment},
booktitle = {Proceedings of the 2nd International Conference on Software Engineering and Formal Methods (SEFM 2004)},
year = {2004},
editor = {Jorge R. Cuellar and Zhiming Liu},
address = {Beijing, China},
month = {sep},
publisher = {IEEE},
postscript = {schinz_i_rhapumlverif.ps.gz}
}
H. Seebold, A. Lüdtke, und C. Möbus, "The Engineering and Evaluation of an Intelligent Problem-Oriented Learning Environment." in Proc. Proceedings of the Workshop on Teaching and Learning Systems, The Role of Artificial Intelligence in Past, Present and Future, 15th Meeting of the GI Special Interest Group Intelligent Teaching and Learning Systems, KI 2004., 2004.
@INPROCEEDINGS{SeeboldLuedtkeMoebus2004,
author = {Seebold, H and L{\"u}dtke, A. and M{\"o}bus, C.},
title = {The Engineering and Evaluation of an Intelligent Problem-Oriented Learning Environment.},
booktitle = {{Proceedings of the Workshop on Teaching and Learning Systems, The Role of Artificial Intelligence in Past, Present and Future, 15th Meeting of the GI Special Interest Group Intelligent Teaching and Learning Systems, KI 2004.}},
year = {2004},
editor = {Martens, A. and Harrer, A.},
owner = {luedtke},
timestamp = {2006.10.13}
}
Integration of Software Specification Techniques for Applications in Engineering, Ehrig, H., Damm, W., Desel, J., Große-Rhode, M., Reif, W., Schnieder, E., und Westkämper, E. Eds., Springer-Verlag.
@BOOK{Ehrig2004, title = {Integration of Software Specification Techniques for Applications in Engineering},
publisher = {Springer-Verlag},
year = {2004},
editor = {Hartmut Ehrig and Werner Damm and J\"{o}rg Desel and Martin Gro{\ss}e-Rhode and Wolfgang Reif and Eckehard Schnieder and Engelbert Westk\"{a}mper},
number = {3147},
series = {Lecture Notes in Computer Science}
H.~Dierks und J.~Tapken, "Moby/DC --- A Tool for Model-Checking Parametric Real-Time Specifications" in Proc. Tools and Algorithms for the Construction and Analysis of Systems (TACAS), 2003.
@INPROCEEDINGS{DT03,
author = {H.~Dierks and J.~Tapken},
title = {{Moby/DC --- A Tool for Model-Checking Parametric Real-Time Specifications}},
booktitle = {Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
year = {2003},
volume = {2619},
series = {Lecture Notes in Computer Science},
pages = {271--277},
publisher = {Springer-Verlag},
crossref = {LNCS2619}
}
T. Bienmüller, "Reducing Complexity for the Verification of Statemate Designs" PhD Thesis , 2003.
@PHDTHESIS{Bienmueller:2003,
author = {Tom Bienm{\"u}ller},
title = {Reducing {C}omplexity for the {V}erification of {S}tatemate {D}esigns},
school = {Carl von Ossietzky Universit\"at Oldenburg Germany},
year = {2003},
month = jun, note = {ISSN 0946-2910}
}
M. Bozzano, Villafiorita, O. A. Akerlund, P. Bieber, C. Bougnol, B. E., M. Bretschneider, A. Cavallo, C. Castel, M. Cifaldi, A. Cimatti, A. Griffault, C. Kehren, B. Lawrence, A. Lüdtke, S. Metge, C. Papadopoulos, R. Passatello, T. Peikenkamp, P. Persson, C. Seguin, L. Trotta, L. Valacca, und G. Zacco, "ESACS: an Integrated Methodology for Design and Safety Analysis of Complex Systems" in Proc. European Safety and Reliability Conference (ESREL), June 15 - 18, 2003, Maastricht, The Netherlands, 2003.
@INPROCEEDINGS{Bozzano_et_al2003,
author = {Bozzano, M. and Villafiorita and A. Akerlund, O. and Bieber, P. and Bougnol, C. and Boede. E. and Bretschneider, M. and Cavallo, A. and Castel, C. and Cifaldi, M. and Cimatti, A. and Griffault, A. and Kehren, C. and Lawrence, B. and L{\"u}dtke, A. and Metge, S. and Papadopoulos, C. and Passatello, R. and Peikenkamp, T. and Persson, P. and Seguin, C. and Trotta, L. and Valacca, L. and Zacco, G.},
title = {{ESACS: an Integrated Methodology for Design and Safety Analysis of Complex Systems}},
booktitle = {{European Safety and Reliability Conference (ESREL), June 15 - 18, 2003, Maastricht, The Netherlands}},
year = {2003},
owner = {luedtke},
timestamp = {2006.12.13}
}
W. Damm, B. Josko, A. Pnueli, und A. Votintseva, "Understanding UML: A Formal Semantics of Concurrency and Communication in Real-Time UML" in Proc. Proceedings of the First International Symposium on Formal Methods for Components and Objects (FMCO), 2003.
@INPROCEEDINGS{DammJoskoPnueliVotintseva2003,
author = {W. Damm and B. Josko and A. Pnueli and A. Votintseva},
title = {{U}nderstanding {UML}: {A} {F}ormal {S}emantics of {C}oncurrency and {C}ommunication in {R}eal-{T}ime {UML}},
booktitle = {Proceedings of the First International Symposium on Formal Methods for Components and Objects (FMCO)},
year = {2003},
series = {LNCS},
publisher = {Springer-Verlag}
}
W. Damm, C. Schulte, M. Segelken, H. Wittke, U. Higgen, und M. Eckrich, "Formale Verifikation von ASCET Modellen im Rahmen der Entwicklung der Aktivlenkung" Lecture Notes in Informatics, vol. P-34.
@ARTICLE{ascet_afs_verif:2003,
author = {W. Damm and C. Schulte and M. Segelken and H. Wittke and U. Higgen and M. Eckrich},
title = {{F}ormale {V}erifikation von {ASCET} {M}odellen im {R}ahmen der {E}ntwicklung der {A}ktivlenkung},
journal = {{L}ecture {N}otes in {I}nformatics},
year = {2003},
volume = {P-34},
pages = {340-345},
month = {May},
isbn = {3-88579-363-6},
pdf = {Aktivlenkung_ASCET_verif.pdf}
}
W. Damm und B. Westphal, "Live and Let Die: LSC-based Verification of UML-Models" in Proc. Proceedings of the First International Symposium on Formal Methods for Components and Objects (FMCO), 2003.
@INPROCEEDINGS{DW03,
author = {W. Damm and B. Westphal},
title = {Live and {L}et {D}ie: {LSC}-based {V}erification of {UML}-{M}odels},
booktitle = {Proceedings of the First International Symposium on Formal Methods for Components and Objects (FMCO)},
year = {2003},
series = {LNCS},
publisher = {Springer-Verlag}
}
M. Fränzle und C. Herde, "Efficient SAT engines for concise logics: Accelerating proof search for zero-one linear constraint systems" in Proc. Logic for Programming, Artificial Intelligence and Reasoning (LPAR 2003), 2003.
@CONFERENCE{IMM2003-02531,
author = {M. Fr{\"a}nzle and C. Herde},
title = {Efficient {SAT} engines for concise logics: Accelerating proof search for zero-one linear constraint systems},
booktitle = {Logic for Programming, Artificial Intelligence and Reasoning ({LPAR} 2003)},
year = {2003},
editor = {Moshe Y. Vardi, Andrei Voronkov},
volume = {2850},
series = {{LNCS},
subseries {LNAI}},
pages = {302-316},
month = {sep},
publisher = {Springer Verlag},
abstract = {We investigate the problem of generalizing acceleration techniques as found in recent satisfiability engines for conjunctive normal forms (CNFs) to linear constraint systems over the Booleans. The rationale behind this research is that rewriting the propositional formulae occurring in e.g. bounded model checking ({BMC}) [Biere, Cimatti,Zhu, 1999] to {CNF} requires a blowup in either the formula size (worst-case exponential) or in the number of propositional variables (linear, thus yielding a worst-case exponential blow-up of the search space). We demonstrate that acceleration techniques like observation lists and lazy clause evaluation [Moskewicz e.a., 2001] as well as the more traditional non-chronological backtracking and learning techniques generalize smoothly to Davis-Putnam-like resolution procedures for the very concise propositional logic of linear constraint systems over the Booleans. Despite the more expressive input language, the performance of our prototype implementation comes surprisingly close to that of state-of-the-art {CNF-SAT} engines like ZChaff [Moskewicz e.a., 2001]. First experiments with bounded model-construction problems show that the overhead in the satisfiability engine that can be attributed to the richer input language is often amortized by the conciseness gained in the propositional encoding of the {BMC} problem.},
keywords = {Satisfiability; non-clausal propositional logic; zero-one linear constraint systems; proof search; acceleration techniques},
postscript = {LPAR03_Fraenzle_Herde.ps}
}
M. Fränzle, J. Niehaus, A. Metzner, und W. Damm, "A Semantics for Distributed Execution of STATEMATE" Formal Aspects of Computing, vol. 15, iss. 4.
@ARTICLE{distributedstatemate,
author = {Martin Fr{\"a}nzle and J{\"u}rgen Niehaus and Alexander Metzner and Werner Damm},
title = {A Semantics for Distributed Execution of {STATEMATE}},
journal = {Formal Aspects of Computing},
year = {2003},
volume = {15},
pages = {390--405},
number = {4},
month = {December},
note = {ISSN: 0934-5043},
publisher = {Springer-Verlag London Ltd}
}
J. Klose, "Live Sequence Charts: A Graphical Formalism for the Specification of Communication Behavior" PhD Thesis , 2003.
@PHDTHESIS{Klose2003,
author = {Jochen Klose},
title = {Live Sequence Charts: A Graphical Formalism for the Specification of Communication Behavior},
school = {Carl von Ossietzky Universit\"{a}t Oldenburg},
year = {2003},
postscript = {diss_klose.ps.gz}
}
J. Klose und B. Westphal, "Verification of a Radio-based Signaling System Using Scenarios" in Proc. International Workshop on Software Specification of Safety Relevant Transportation Control Tasks, 23 -- 24 April 2002, Braunschweig, Düsseldorf, 2003.
@INPROCEEDINGS{KloseWestphal2002a,
author = {Jochen Klose and Bernd Westphal},
title = {Verification of a Radio-based Signaling System Using Scenarios},
booktitle = {International Workshop on Software Specification of Safety Relevant Transportation Control Tasks, 23 -- 24 April 2002, Braunschweig},
year = {2003},
editor = {Eckehard Schnieder},
number = {535},
series = {Fortschritt-Berichte VDI, Reihe 12, Verkehrstechnik/Fahrzeugtechnik},
pages = {49--62},
address = {D\"usseldorf},
publisher = {VDI Verlag},
abstract = {This paper presents a sequence chart-based design methodology for the formal verification of a system under design. Since standard Message Sequence Charts are neither expressive enough nor do they have a sufficient formal semantics we introduce Live Sequence Charts (LSCs) in order to overcome these deficiencies. Using a radio-based crossing control system as an example we outline how to embed LSCs into a model-based development process. This entails a transition from scenario-like Sequence Charts used early in the design process to the graphical specification of system properties to be verified in later stages.},
x-topics = {lsc meth use}
}
M. Lettrari, "Using Abstractions for Heuristic State Space Exploration of Reactive Object-Oriented Systems" in Proc. FME 2003: Formal Methods, International Symposium of Formal Methods Europe, Pisa, Italy, September 8-14, 2003, Proceedings, 2003.
@INPROCEEDINGS{Lettrari:2003,
author = {M. Lettrari},
title = {Using Abstractions for Heuristic State Space Exploration of Reactive Object-Oriented Systems},
booktitle = {FME 2003: Formal Methods, International Symposium of Formal Methods Europe, Pisa, Italy, September 8-14, 2003, Proceedings},
year = {2003},
volume = {2805},
series = {Lecture Notes in Computer Science},
pages = {462-481},
publisher = {Springer},
postscript = {lettrarie-01.ps}
}
A. Lüdtke, C. Möbus, R. Raabe, D. Eschrich, und T. Engwert, Evaluationsbericht für das Trainingsprogramm SHAFTBielefeld: W.Bertelsmann-Verlag.
@INCOLLECTION{Luedtke_et_al2003,
author = {L{\"u}dtke, A. and M{\"o}bus, C. and Raabe, R. and Eschrich, D. and Engwert, T.},
title = {{Evaluationsbericht für das Trainingsprogramm SHAFT}},
booktitle = {{Strategische Handlungsflexibilität, CD zu Band II: Komplexität erkennen und bewältigen}},
publisher = {W.Bertelsmann-Verlag},
year = {2003},
editor = {G. Franke and R. Selka},
pages = {12-18},
address = {Bielefeld},
owner = {luedtke},
timestamp = {2006.10.13}
}
A. Lüdtke, C. Möbus, R. Raabe, D. Eschrich, und T. Engwert, Erfahrungsberichte bzgl. des Trainingsprogramms SHAFTBielefeld: W.Bertelsmann-Verlag.
@INCOLLECTION{Luedtke_et_al2003a,
author = {L{\"u}dtke, A. and M{\"o}bus, C. and Raabe, R. and Eschrich, D. and Engwert, T.},
title = {{Erfahrungsberichte bzgl. des Trainingsprogramms SHAFT}},
booktitle = {{Strategische Handlungsflexibilität, CD zu Band II: Komplexität erkennen und bewältigen}},
publisher = {W.Bertelsmann-Verlag},
year = {2003},
editor = {G. Franke and R. Selka},
pages = {4-9, T1 S. 79, T2 S. 6, T3 S. 6-8},
address = {Bielefeld},
owner = {luedtke},
timestamp = {2006.10.13}
}
A. Metzner, "Incremental Task Allocation: Integrating Real-Time Software in Distributed Embedded Systems" in Proc. Proceeding of the $16^th$ International Conference on Software and Systems Engineering and their Application (ICSSEA'03), 2003.
@INPROCEEDINGS{metzner03,
author = {Alexander Metzner},
title = {{Incremental Task Allocation: Integrating Real-Time Software in Distributed Embedded Systems}},
booktitle = {Proceeding of the $16^{th}$ International Conference on Software and Systems Engineering and their Application (ICSSEA'03)},
year = {2003}
}
C. Möbus, A. Lüdtke, und H. -J. Thole, Hinweise zur Weiterentwicklung computersimulierter PlanspieleBielefeld: W.Bertelsmann-Verlag.
@INCOLLECTION{MoebusLuedtkeThole2003,
author = {M{\"o}bus, C. and L{\"u}dtke, A. and Thole, H.-J.},
title = {{Hinweise zur Weiterentwicklung computersimulierter Planspiele}},
booktitle = {{Strategische Handlungsflexibilität, Band 1: Grundlagen für die Entwicklung von Trainingsprogrammen}},
publisher = {W.Bertelsmann-Verlag},
year = {2003},
editor = {G. Franke and R. Selka},
pages = {139-154},
address = {Bielefeld},
note = {ISBN 3-7639-0652-5},
owner = {luedtke},
timestamp = {2006.10.13}
}
E.-R.~Olderog und H.~Dierks, "Moby/RT: A Tool for Specification and Verification of Real-Time Systems" Journal of Universal Computer Science, vol. 9, iss. 2.
@ARTICLE{OD03,
author = {E.-R.~Olderog and H.~Dierks},
title = {{Moby/RT: A Tool for Specification and Verification of Real-Time Systems}},
journal = {Journal of Universal Computer Science},
year = {2003},
volume = {9},
pages = {88--105},
number = {2},
month = FEB }
O. Schröder, C. Möbus, und A. Lüdtke, Individuelle Voraussetzungen der strategischen HandlungsflexibilitätBielefeld: W.Bertelsmann-Verlag.
@INCOLLECTION{SchroederMoebusLuedtke2003,
author = {Schr{\"o}der, O. and M{\"o}bus, C. and L{\"u}dtke, A.},
title = {{Individuelle Voraussetzungen der strategischen Handlungsflexibilit{\"a}t}},
booktitle = {{Strategische Handlungsflexibilit{\"a}t, Band 1: Grundlagen f{\"u}r die Entwicklung von Trainingsprogrammen}},
publisher = {W.Bertelsmann-Verlag},
year = {2003},
editor = {G. Franke and R. Selka},
pages = {17-80},
address = {Bielefeld},
note = {ISBN 3-7639-0652-5}
}
C. Schulte, M. Brörkens, I. Brückner, R. Buschermöhle, und T. Wolf, "Sicherheit für sicherheitskritische Systeme" Electronic Embedded Systeme, vol. 09/03.
@ARTICLE{ees_verif:2003,
author = {C. Schulte and M. Brörkens and I. Brückner and R. Buschermöhle and T. Wolf},
title = {Sicherheit für sicherheitskritische Systeme},
journal = {{E}lectronic {E}mbedded {S}ysteme},
year = {2003},
volume = {09/03},
pages = {19-21},
month = {September}
}
Tools and Algorithms for the Construction and Analysis of Systems, 9th International Conference, TACAS 2003Springer-Verlag.
@PROCEEDINGS{LNCS2619, title = {{Tools and Algorithms for the Construction and Analysis of Systems, 9th International Conference, TACAS 2003}},
year = {2003},
editor = {H.~Garavel and J.~Hatcliff},
volume = {2619},
series = {Lecture Notes in Computer Science},
publisher = {Springer-Verlag}
J. Bohn, W. Damm, J. Klose, A. Moik, und H. Wittke, "Modeling and Validating Train System Applications Using Statemate and Live Sequence Charts" in Proc. Proceedings of the Conference on Integrated Design and Process Technology (IDPT2002), 2002.
@INPROCEEDINGS{klose02c,
author = {J\"urgen Bohn and Werner Damm and Jochen Klose and Adam Moik and Hartmut Wittke},
title = {{M}odeling and {V}alidating {T}rain {S}ystem {A}pplications {U}sing {S}tatemate and {L}ive {S}equence {C}harts},
booktitle = {Proceedings of the Conference on Integrated Design and Process Technology ({IDPT2002})},
year = {2002},
editor = {H. Ehrig and B. J. Kr{\"a}mer and A. Ertas},
publisher = {Society for Design and Process Science},
abstract = {The European CENELEC norm now requires train system applications with critical safety integrity levels to be developed using formal methods, in particular supporting various forms of analysis to check for different correctness properties. In doing so, the CENELEC standard reflects the increasing need for advanced validation techniques in developing in particular also on board train system applications, which increasingly involve both complex and safety critical control units. This paper describes a methodology for developing train system applications based on powerful extensions of the Statemate modeling tool from I-Logix Inc. The extension come in three dimensions: - Live Sequence Charts - a variant of the well-known Message Sequence Charts of MSC2000 and the Sequence Diagrams in UML - are integrated with Statemate in order to allow capturing all interworkings between players such as on-board train control and train crossing control or between different trains, thus supporting the system development steps with a concise and semantically well-founded representation of the critical communication protocols - Model Checking is integrated into Statemate to formally establish the correctness between such system requirements and a system specification developed in the industry standard CASE tool Statemate. This paper reports on an extension of the product version now marketed by I-Logix, which supports formal verification of communication protocols captured as Live Sequence Charts. Model Checking can hence be used to verify all safety requirements on the system model, as well as to formally verify all system integration aspects using a virtual system integration as captured in Statemate. - Automatic Generation of Test Vectors from the Statemate specification model as well as from Scenarios can be used to validate the actual control units - in fact the test vectors can be downloaded to test-rigs allowing hardware-in-the-loop tests of system components. The paper focuses on the overall methodology, which is explained using a train-system application, incorporating experiences from an ongoing cooperation with Bombardier transport systems.},
pdf = {klose02c.pdf}
}
M. Brörkens und M. Möller, "Dynamic Event Generation for Runtime Checking using the JDI" in Proc. Runtime Verification, 2002.
@INPROCEEDINGS{broerkens02,
author = {Mark Br{\"o}rkens and Michael M{\"o}ller},
title = {Dynamic Event Generation for Runtime Checking using the {JDI}},
booktitle = {Runtime Verification},
year = {2002},
editor = {Klaus Havelund and Grigore Ro{\c{s}}u},
volume = {70},
series = {Electronic Notes in Theoretical Computer Science},
pages = {21--35},
month = jul # { 26},
publisher = {Elsevier Science},
note = {Also DIKU technical report 02-14 from University of Copenhagen. to appear.},
abstract = {Approaches to runtime checking have to track the execution of a software system and therefore have to deal with generating and processing execution events. Often these techniques are applied at the code level - either by inserting new source code prior to the compilation or by modifying the target code, e.g. Java byte code, before running the program. The jassda framework and tool enable runtime checking of Java programs against a CSP-like specification. For generating events it uses the Java Debug Interface (JDI) and thus no modifications to the code are necessary. Another advantage is that events are generated on demand, i.e. dynamically at runtime it is determined which events to generate for the current debug run without modifying the program itself. This paper shows how this event generation is done by the jassda framework.},
conference = {satellite workshop to CAV'02},
key = {RV},
postscript = {broerkens02.ps},
url = {http://jassda.sourceforge.net/publications.html},
venue = {Copenhagen, Denmark}
}
W. Damm und B. Jonsson, "Eliminating Queues from RT UML Model Representations" in Proc. 7th Int'l Symposium on Formal Techniques in Real-Time and Faul t-Tolerance Systems, FTRTFT 2002, 2002.
@INPROCEEDINGS{Damm/Jonsson:2002,
author = {Werner Damm and Bengt Jonsson},
title = {Eliminating Queues from {RT UML} Model Representations },
booktitle = {7th Int'l Symposium on Formal Techniques in Real-Time and Faul t-Tolerance Systems, FTRTFT 2002},
year = {2002},
editor = {Werner Damm and Ernst-R{\"u}diger Olderog},
volume = {2469},
series = {LNCS},
pages = {375--393},
month = {September},
publisher = {Springer}
}
H.~Dierks, G.~Behrmann, und K.G.~Larsen, "Solving Planning Problems Using Real-Time Model-Checking (Translating PDDL3 into Timed Automata)" in Proc. AIPS-Workshop Planning via Model-Checking, 2002.
@INPROCEEDINGS{DBL02,
author = {H.~Dierks and G.~Behrmann and K.G.~Larsen},
title = {{Solving Planning Problems Using Real-Time Model-Checking (Translating PDDL3 into Timed Automata)}},
booktitle = {{AIPS-Workshop Planning via Model-Checking}},
year = {2002},
editor = {F.~Kabanza and S.~Thiebaux},
pages = {30--39},
month = APR }
H. Dierks und M. Lettrari, "Constructing Test Automata from Graphical Real-Time Requirements" in Proc. Formal Techniques in Real-Time and Fault-Tolerant Systems, 2002.
@INPROCEEDINGS{let02,
author = {Henning Dierks and Marc Lettrari},
title = {{C}onstructing {T}est {A}utomata from {G}raphical {R}eal-{T}ime {R}equirements},
booktitle = {Formal Techniques in Real-Time and Fault-Tolerant Systems},
year = {2002},
editor = {W. Damm and E.R. Olderog},
number = {2469},
series = {LNCS},
pages = {433-453},
publisher = {Sprin\-ger Ver\-lag},
postscript = {let02.ps}
}
M. Fränzle, "Take it NP-easy: Bounded Model Construction for Duration Calculus" in Proc. International Symposium on Formal Techniques in Real-Time and Fault-Tolerant systems (FTRTFT 2002), 2002.
@INPROCEEDINGS{fraenzle02b,
author = {Fr{\"a}nzle, Martin},
title = {Take it {NP}-easy: Bounded Model Construction for Duration Calculus},
booktitle = {International Symposium on Formal Techniques in Real-Time and Fault-Tolerant systems (FTRTFT 2002)},
year = {2002},
editor = {Olderog, Ernst-R{\"u}diger and Damm, Werner},
volume = {2469},
series = {Lecture Notes in Computer Science},
pages = {245--264},
publisher = {Springer Verlag},
abstract = {Following the recent successes of bounded model-checking, we reconsider the problem of constructing models of discrete-time Duration Calculus formulae. While this problem is known to be non-elementary when arbitrary length models are considered [Hansen1994], it turns out to be only NP-complete when constrained to bounded length. As a corollary we obtain that model construction is in NP for the formulae actually encountered in case studies using Duration Calculus, as these have a certain small-model property. First experiments with a prototype implementation of the procedures demonstrate a competitive performance. \emph{Keywords:} Discrete-time Duration Calculus; Model construction; Bounded model construction; Complexity},
postscript = {fraenzle02b.ps}
}
J. Klose, T. Kropf, und J. Ruf, "A Visual Approach to Validating System Level Designs" in Proc. 15.th International Symposioum on System Synthesis (ISSS), Kyoto, Japan, 2002.
@INPROCEEDINGS{klose02a,
author = {Jochen Klose and Thomas Kropf and J{\"u}rgen Ruf},
title = {A {V}isual {A}pproach to {V}alidating {S}ystem {L}evel {D}esigns},
booktitle = {15.th International Symposioum on System Synthesis (ISSS)},
year = {2002},
pages = {186 -- 191},
address = {Kyoto, Japan},
publisher = {IEEE Computer Society Press},
abstract = {This paper proposes a simulation-based methodology for validation of a system under design in an early phase of development. The key element of this approach is the visual specification, as Live Sequence Charts (LSCs), of the properties to be checked. The LSCs are automatically translated into the input format for the SystemC-based checker engine, which indicates during simulation, if the property is fulfilled or produces a counter-example, if the property is violated. The entire process from the visual property specification to the checking is largely automated, which makes our approach accessible even for users which have not been trained in formal methods.}
}
J. Klose und B. Westphal, "Relating LSC Specifications to UML Models" in Proc. Proceedings INT2002- International Workshop on Integration of Specification Techniques for Applications in Engineering, 2002.
@INPROCEEDINGS{Klose/Westphal:2002,
author = {Jochen Klose and Bernd Westphal},
title = {Relating {LSC} {S}pecifications to {UML M}odels},
booktitle = {Proceedings INT2002- International Workshop on Integration of Specification Techniques for Applications in Engineering},
year = {2002},
editor = {Hartmut Ehrig and Martin Grosse-Rhode},
abstract = {Variants of sequence diagrams are used in UML-based development processes to capture ``scenarios'', i.e. representative sequences of interactions between objects, to clarify use-cases of the system under design. A set of scenarios provides a starting point for a formal specification to be verified. The sequence diagram variant SD of UML lacks formal rigor and expressivity so we propose to use Live Sequence Charts instead. Since the semantics of Live Sequence Charts is defined in terms of abstract ``instances'', the contribution of this work is to give an interpretation of LSCs with free variables. This is a single small step in an ongoing effort to establish a verification environment for UML models.},
postscript = {klose02b.ps.gz}
}
A. Lüdtke und C. Möbus, "Prognose von Bedienungsfehlern durch Simulation der Entstehung gelernter Sorglosigkeit bei der Pilot-Cockpit Interaktion" in Proc. Situation Awareness in der Fahrzeug-- und Prozessführung: 44. Fachausschusssitzung Anthropotechnik der Deutschen Gesellschaft für Luft-- und Raumfahrt e.V, Bonn, 2002.
@CONFERENCE{LuedtkeMoebus2002c,
author = {L{\"u}dtke, A. and M{\"o}bus, C.},
title = {{Prognose von Bedienungsfehlern durch Simulation der Entstehung gelernter Sorglosigkeit bei der Pilot-Cockpit Interaktion}},
booktitle = {{Situation Awareness in der Fahrzeug-- und Prozessf{\"u}hrung: 44. Fachausschusssitzung Anthropotechnik der Deutschen Gesellschaft f{\"u}r Luft-- und Raumfahrt e.V}},
year = {2002},
editor = {M. Grandt and K.-P. Gärtner},
number = {2002-04},
series = {DGLR-Bericht},
pages = {163-180},
address = {Bonn},
publisher = {{Deutsche Gesellschaft f{\"u}r Luft-- und Raumfahrt e.V.}},
note = {ISBN 3-932182-29-4}
}
A. Lüdtke und C. Möbus, "Prognose von Bedienungsfehlern durch Routinebildung in teilautonomen Systemen: Konzept und empirische Untersuchung" in Proc. Bedienen und Verstehen: 4. Berliner Werkstatt Mensch-Maschine-Systeme 2001, Düsseldorf, 2002.
@CONFERENCE{LuedtkeMoebus2002a,
author = {L{\"u}dtke, A. and M{\"o}bus, C.},
title = {{Prognose von Bedienungsfehlern durch Routinebildung in teilautonomen Systemen: Konzept und empirische Untersuchung}},
booktitle = {{Bedienen und Verstehen: 4. Berliner Werkstatt Mensch-Maschine-Systeme 2001}},
year = {2002},
editor = {R. Marzi and V. Karavezyris and H.H. Erbe and K.P. Timpe},
pages = {164-184},
address = {D{\"u}sseldorf},
publisher = {VDI Verlag GmbH},
note = {ISBN 3-18-300822-X}
}
A. Lüdtke und C. Möbus, "Modellierung von Routineeffekten durch gelernte Sorglosigkeit bei der Bedienung teilautonomer Systeme" in Proc. 43. Kongress der Deutschen Gesellschaft für Psychologie, Lengerich, 2002, p. 464.
@CONFERENCE{LuedtkeMoebus2002,
author = {L{\"u}dtke, A. and M{\"o}bus, C.},
title = {{Modellierung von Routineeffekten durch gelernte Sorglosigkeit bei der Bedienung teilautonomer Systeme}},
booktitle = {{43. Kongress der Deutschen Gesellschaft für Psychologie}},
year = {2002},
pages = {464},
address = {Lengerich},
publisher = {Pabst Science Publishers},
note = {ISBN 3-936142-88-2}
}
A. Lüdtke, C. Möbus, und H. J. Thole, "Cognitive Modelling Approach to Diagnose Over-Simplification in Simulation-Based Training" in Proc. Proceedings of ITS2002 the 6th International Conference Intelligent Tutoring Systems, Biarritz, France and San Sebastian, Spain, June 2002, Berlin, 2002.
@INPROCEEDINGS{LuedtkeMoebusThole2002,
author = {L{\"u}dtke, A. and M{\"o}bus, C. and Thole, H.J.},
title = {{Cognitive Modelling Approach to Diagnose Over-Simplification in Simulation-Based Training}},
booktitle = {{Proceedings of ITS2002 the 6th International Conference Intelligent Tutoring Systems, Biarritz, France and San Sebastian, Spain, June 2002}},
year = {2002},
editor = {St. A. Cerri and G. Gouarderes and F. Paraguacu},
volume = {2363},
series = {LNCS},
pages = {496-506},
address = {Berlin},
publisher = {Springer},
note = {ISBN 3-540-43750-9}
}
Formal Techniques in Real-Time and Fault-Tolerant Systems, W.~Damm und E.-R.~Olderog, Eds., Springer-Verlag-Verlag, vol. 2469.
@BOOK{LNCS2469, title = {{Formal Techniques in Real-Time and Fault-Tolerant Systems}},
publisher = {{Springer-Verlag}-Verlag},
year = {2002},
editor = {W.~Damm and E.-R.~Olderog},
volume = {2469},
series = {Lecture Notes in Computer Science}
T. Bienmüller, W. Damm, J. Klose, und H. Wittke, "Formale Analyse und Verifikation von Statemate Entwürfen" it+ti, vol. 43, iss. 1.
@ARTICLE{itti00,
author = {Tom Bienm{\"u}ller and Werner Damm and Jochen Klose and Hartmut Wittke},
title = {Formale {A}nalyse und {V}erifikation von {S}tatemate {E}ntw{\"u}rfen},
journal = {it+ti},
year = {2001},
volume = {43},
number = {1},
url = {http://www.it-ti.de}
}
U. Brockmeyer, J. Klose, und M. Lettrari, "UML Validation Suite" in Proc. Proceedings of FATES'01 - Formal Approaches to Testing of Software, 2001.
@INPROCEEDINGS{klose01c,
author = {Udo Brockmeyer and Jochen Klose and Marc Lettrari},
title = {{UML V}alidation {S}uite},
booktitle = {Proceedings of {FATES'01} - {F}ormal {A}pproaches to {T}esting of {S}oftware},
year = {2001},
editor = {J. Tretmans and E. Brinksma},
postscript = {klose1c.ps.gz}
}
W. Damm und M. Cohen, "Advanced Validation Techniques Meet Complexity Challange in Embedded Software Development" Embedded Systems Journal.
@ARTICLE{damm01b,
author = {Werner Damm and Moshe Cohen},
title = {Advanced Validation Techniques Meet Complexity Challange in Embedded Software Development},
journal = {Embedded Systems Journal},
year = {2001},
note = {(to appear)},
abstract = {While people seem willing to buy software for PCs that crashes regularly, embedded software in products like cars, trains, airplanes, cellular phones, switching systems, elevators, or medical devices must meet significantly higher product quality standards. To ensure high availability, the design process for embedded software must address the challenge of stringent time-to market and quality requirements in the face of an exponential growth both in function complexity and distribution. Advanced validation techniques are fast becoming essential in mastering this challenge.},
postscript = {damm01b.ps.gz}
}
W. Damm und D. Harel, "LSCs: Breathing Life into Message Sequence Charts" Formal Methods in System Design, vol. 19, iss. 1.
@ARTICLE{Damm01a,
author = {W. Damm and D. Harel},
title = {{LSC}s: {B}reathing {L}ife into {M}essage {S}equence {C}harts},
journal = {Formal {M}ethods in {S}ystem {D}esign},
year = {2001},
volume = {19},
pages = {45 - 80},
number = {1},
month = {July},
abstract = {While message sequence charts (MSCs) are widely used in industry to document the interworking of processes or objects, they are expressively quite weak, being based on the modest semantic notion of a partial ordering of events as defined, e.g., in the ITU standard. A highly expressive and rigorously defined MSC language is a must for serious, semantically meaningful tool support for use-cases and scenarios. It is also a prerequisite to addressing what we regard as one of the central problems in behavioral specification of systems: relating scenario-based inter-object specification to state-machine intra-object specification. This paper proposes an extension of MSCs, which we call live sequence charts (or LSCs), since our main extension deals with specifying "liveness", i.e., things that must occur. In fact, LSCs allow the distinction between possible and necessary behavior both globally, on the level of an entire chart and locally, when specifying events, conditions and progress over time within a chart. This makes it possible to specify forbidden scenarios, and enables naturally specified structuring constructs like as subcharts, branching and iteration.},
editor = {A. Benveniste and A. Poigne}
}
W. Damm und J. Klose, "Verification of a Radio-based Signaling System Using the Statemate Verification Environment" Formal Methods in System Design, vol. 19, iss. 2.
@ARTICLE{Klose01a,
author = {Werner Damm and Jochen Klose},
title = {Verification of a {R}adio-based {S}ignaling {S}ystem {U}sing the {S}tatemate {V}erification {E}nvironment},
journal = {Formal {M}ethods in {S}ystem {D}esign},
year = {2001},
volume = {19},
number = {2},
abstract = {With the trend to partially move safety-related features from courtyards into on-board control software, new challenges arise in supporting such designs by formal verification capabilities, essentially entailing the need for a model-based design process. This paper reports on the usage of the Statemate Verification Environment to model and verify a radio-based signaling systems, a trial case study offered by the German train system company DB. It shows, that industrially sized applications can be modeled and verified with a verification tool to be offered as a commercial product by I-Logix, Inc. },
editor = {Stefania Gnesi and Diego Latella}
}
M. Fränzle, "What will be eventually true of polynomial hybrid automata" in Proc. Theoretical Aspects of Computer Software (TACS 2001), 2001.
@INPROCEEDINGS{Fraenzle:WhatWillBeEventuallyTrueOfHybridAutomata,
author = {Fr{\"a}nzle, Martin},
title = {What will be eventually true of polynomial hybrid automata},
booktitle = {Theoretical Aspects of Computer Software (TACS 2001)},
year = {2001},
editor = {Kobayashi, Naoki and Pierce, Benjamin C.},
volume = {2215},
series = {LNCS},
pages = {340--359},
publisher = {Springer Verlag},
abstract = {Hybrid automata have been introduced in both control engineering and computer science as a formal model for the dynamics of hybrid discrete-continuous systems. While computability issues concerning safety properties have been extensively studied, liveness properties have remained largely uninvestigated. In this article, we investigate decidability of state recurrence and of progress properties. First, we show that state recurrence and progress are in general undecidable for polynomial hybrid automata. Then, we demonstrate that they are closely related for hybrid automata subject to a simple model of noise, even though these automata are infinite-state systems. Based on this, we augment a semi-decision procedure for recurrence with a semi-decision method for length-boundedness of paths in such a way that we obtain an automatic verification method for progress properties of linear and polynomial hybrid automata that may only fail on pathological, practically uninteresting cases. These cases are such that satisfaction of the desired progress property crucially depends on the complete absence of noise, a situation unlikely to occur in real hybrid systems.},
postscript = {fraenzle01b.ps}
}
M. Fränzle und K. Lüth, "Visual Temporal Logic as a Rapid Prototyping Tool" Computer Languages, vol. 27, iss. 1--3.
@ARTICLE{FraenzleLueth:VisualTLasRPTool-Journal,
author = {Fr{\"a}nzle, Martin and L{\"u}th, Karsten},
title = {Visual Temporal Logic as a Rapid Prototyping Tool},
journal = {Computer Languages},
year = {2001},
volume = {27},
pages = {93--113},
number = {1--3},
abstract = {Within this survey article, we explain real-time symbolic timing diagrams and the ICOS tool-box supporting timing-diagram-based requirements capture and rapid prototyping. Real-time symbolic timing diagrams are a full-fledged metric-time temporal logic, but with a graphical syntax reminiscent of the informal timing diagrams widely used in electrical engineering. ICOS integrates a variety of tools, ranging from graphical specification editors over tautology checking and counterexample generation to code generators emitting C or VHDL, thus bridging the gap from formal specification to rapid prototype generation.},
postscript = {fraenzle01a.ps}
}
J. Klose und M. Lettrari, "Scenario-based Monitoring and Testing of Real-time UML models" in Proc. UML 2001 - The Unified Modeling Language: Modeling Languages, Concepts, and Tools, 2001.
@INPROCEEDINGS{klose01d,
author = {Jochen Klose and Marc Lettrari},
title = {Scenario-based {M}onitoring and {T}esting of {R}eal-time {UML} models},
booktitle = {{UML} 2001 - {T}he {U}nified {M}odeling {L}anguage: {M}odeling {L}anguages, {C}oncepts, and {T}ools},
year = {2001},
editor = {M. Gogolla and C. Kobryn},
volume = {2185},
series = {LNCS},
publisher = {Springer Verlag},
abstract = {In this paper it is shown how Sequence Diagrams can be used both for monitoring and testing functional and real-time requirements of an executable UML design. We show how this testing approach can be integrated in an UML-based development process. In addition, we will present how a prototype which implements the described monitoring and testing methods is integrated in a well known UML design tool.}
}
J. Klose und H. Wittke, "An Automata Based Representation of Live Sequence Charts" in Proc. Proceedings of TACAS 2001, 2001.
@INPROCEEDINGS{Klose/Wittke:2001,
author = {Jochen Klose and Hartmut Wittke},
title = {An {A}utomata {B}ased {R}epresentation of {L}ive {S}equence {C}harts},
booktitle = {Proceedings of TACAS 2001},
year = {2001},
editor = {Tiziana Margaria and Wang Yi},
number = {2031},
series = {LNCS},
publisher = {Sprin\-ger Ver\-lag},
abstract = {The growing popularity of sequence charts, first of all Message Sequence Charts and UML Sequence Diagrams, for the description of communication behavior has evoked criticism regarding the semantics of the charts which led to extensions of these standardized visual formalisms. One such extension are Live Sequence Charts which allow to distinguish mandatory and possible behavior in protocol specifications. In the original language definition for LSCs the semantics are only described informally, although a sketch for a possible formalization has been provided as well. In this paper we intend to fill in the semantic blanks of the original LSC definition. Following the sketched path we define the semantics of an LSC by deriving a Timed Büchi Automata from it. We also consider qualitative and quantative timing aspects and sub-charts.}
}
C. Möbus und A. Lüdtke, "Eingebettete Systeme: Unterstützung der Sicherheitsanalyse von Avionik-Systemen." Oldenburger Forschungs- und Entwicklungsinstitut für Informatik-Werkzeuge und -Systeme, Jahresbericht 20002001.
@TECHREPORT{MoebusLuedtke2001,
author = {M{\"o}bus, C. and L{\"u}dtke, A.},
title = {{Eingebettete Systeme: Unterstützung der Sicherheitsanalyse von Avionik-Systemen.}},
institution = {{Oldenburger Forschungs- und Entwicklungsinstitut für Informatik-Werkzeuge und -Systeme, Jahresbericht 2000}},
year = {2001},
owner = {luedtke},
pages = {20-24},
timestamp = {2006.12.13}
T. Bienmüller, W. Damm, und H. Wittke, "The STATEMATE Verification Environment -- Making it real" in Proc. 12th international Conference on Computer Aided Verification, CAV, 2000.
@INPROCEEDINGS{cav00,
author = {Tom Bienm{\"u}ller and Werner Damm and Hartmut Wittke},
title = {The {STATEMATE} {V}erification {E}nvironment -- {M}aking it real},
booktitle = {12th international {C}onference on {C}omputer {A}ided {V}erification, {CAV}},
year = {2000},
editor = {E. Allen Emerson and A. Prasad Sistla},
number = {1855},
series = {LNCS},
pages = {561-567},
publisher = {Springer Verlag},
abstract = {The STATEMATE Verification Environment supports requirement analysis and specification development of embedded controllers as part of the STATEMATE product offering of I-Logix, Inc. This paper discusses key enhancements of the prototype tool in order to enable full scale industrial usage of the tool-set. It thus reports on a successfully completed technology transfer from a prototype tool-set to a commercial offering. The discussed enhancements are substantiated with performance results all taken from real industrial applications of leading companies in automotive and avionics.}
}
H.~Dierks, "Specification and Verification of Polling Real-Time Systems" in Proc. Ausgezeichnete Informatikdissertationen 1999, 2000.
@INPROCEEDINGS{Die00c,
author = {H.~Dierks},
title = {{Specification and Verification of Polling Real-Time Systems}},
booktitle = {{Ausgezeichnete Informatikdissertationen 1999}},
year = {2000},
editor = {H.~Fiedler and O.~G{\"u}nther and W.~Grass and S.~H{\"o}lldobler and G.~Hotz and R.~Reischuk and B.~Seeger and D.~Wagner},
pages = {32--41},
publisher = {Teubner}
}
H.~Dierks, "PLC-Automata: A New Class of Implementable Real-Time Automata" Theoret. Comput. Sci. vol. 253, iss. 1.
@ARTICLE{Die00,
author = {H.~Dierks},
title = {{PLC-Automata: A New Class of Implementable Real-Time Automata}},
journal = {Theoret.\ Comput.\ Sci.},
year = {2000},
volume = {253},
pages = {61--93},
number = {1},
month = DEC, optnote = {full version of \cite{Die97}}
}
H.~Dierks und J.~Tapken, "Modelling and Verifying of `Cash-Point Service' Using Moby/PLC" Formal Aspects of Computing, vol. 12.
@ARTICLE{DT00,
author = {H.~Dierks and J.~Tapken},
title = {{Modelling and Verifying of `Cash-Point Service' Using Moby/PLC}},
journal = {Formal Aspects of Computing},
year = {2000},
volume = {12},
pages = {221--222}
}
A. Metzner und J. Niehaus, "MSPARC: Multithreading in Real-Time Architectures" Journal of Universal Computer Science, vol. 6, iss. 10.
@ARTICLE{metzner2000,
author = {A. Metzner and J. Niehaus},
title = {MSPARC: Multithreading in Real-Time Architectures},
journal = {Journal of Universal Computer Science},
year = {2000},
volume = {6},
pages = {1034--1051},
number = {10},
abstract = {This paper presents the use of multithreaded processors in real-time architectures. In particular we will handle real-time applications with hard timing constraints. In our approach, events (e.g. timer interrupts, signals from the environment, etc) are distinguished into three classes according to the reaction times that have to be met. Since two of these classes are well known in real-time systems, we will focus on the new class, for which the special features of a multithreaded processor together with a real-time scheduler realized in hardware are employed. Doing so enables us to realize the handling of events from this new class in software while still meeting the demands on reaction time. Additionally, the predictability of the application and the ease of implementing them are increased. The processor, named MSPARC, which we developed to support these features, is based on block multithreading and is outlined in this paper, too. We then present an architecture, designed for rapid prototyping of embedded systems, to show the feasibility of this approach. Finally, a case study shows the potential of multithreading for embedded systems.},
url = {http://www.jucs.org/jucs_6_10/msparc_multithreading_in_real}
}
C. Möbus und A. Lüdtke, "Eingebettete Systeme: Wissensbasierte Unterstützung der Sicherheitsanalyse" Oldenburger Forschungs- und Entwicklungsinstitut für Informatik-Werkzeuge und -Systeme, Jahresbericht 19992000.
@TECHREPORT{MoebusLuedtke2000,
author = {M{\"o}bus, C. and L{\"u}dtke, A.},
title = {{Eingebettete Systeme: Wissensbasierte Unterstützung der Sicherheitsanalyse}},
institution = {{Oldenburger Forschungs- und Entwicklungsinstitut für Informatik-Werkzeuge und -Systeme, Jahresbericht 1999}},
year = {2000},
owner = {luedtke},
pages = {40-43},
timestamp = {2006.12.13}
}
J. Niehaus, W. Damm, A. Metzner, und A. Mikschl, "Die EVENTS-Architektur" it + ti, vol. 42, iss. 2.
@ARTICLE{events2000,
author = {J. Niehaus and W. Damm and A. Metzner and A. Mikschl},
title = {Die EVENTS-Architektur},
journal = {it + ti},
year = {2000},
volume = {42},
pages = {40--44},
number = {2},
abstract = {Die innerhalb des EVENTS Projekts entwickelte Zielarchitektur ist auf eine möglichst große Reduktion der durch Taskwechsel entstehenden Latenzzeiten in eingebetteten Steuerungssystemen hin ausgerichtet. Dazu werden zum einen in einer Eigenentwicklung entstandene multithreaded Prozessoren (MSPARC) verwendet. Zum anderen wird ein neues Architekturkonzept realisiert, in dem diese Prozessoren als Slave-Module zu einem in Hardware realisiertem, externen Controller eingesetzt werden. In diesem Artikel beschreiben wir zunächst die im Projekt unterstützte Klasse von Applikationen und stellen dann die EVENTS Architektur vor. Eine erste Leistungsabschätzung mit kleinen Benchmarks läßt auf die zu erwartende Leistung des Systems schließen.}
}
J. Niehaus, K. Lüth, und W. Damm, "Multithreading in Rapid Prototyping Target Platforms" in Proc. AES2000, 2000.
@INPROCEEDINGS{niehaus2000b,
author = {J{\"u}rgen Niehaus and Karsten L{\"u}th and Werner Damm},
title = {Multithreading in Rapid Prototyping Target Platforms},
booktitle = {AES2000},
year = {2000},
pages = {116-122},
month = {Jan.},
publisher = {FZI Karslruhe},
abstract = {This paper describes work in progress on the use of multithreaded processors as a target platform for rapid prototyping of embedded control systems. We give a short introduction to multithreaded processors in general and the MSPARC - a SPARC V.8 based processor capable of multithreading with four contexts - in particular. A rapid prototyping target platform mainly consisting of a MSPARC processor and a FPGA-field is also presented. Finally, we show the design of an ignition control system used as a case study and present preliminary performance results of the architecture, which were obtained using an execution based, cycle accurate simulator.},
postscript = {niehaus2000b.ps}
}
F. Terrier, N. Voros, und U. Brockmeyer, "Specification, Implementation, and Validation of Object-Oriented Embedded Systems" in Proc. Object-Oriented Technology - ECOOP 2000 Workshop Reader, 2000.
@INPROCEEDINGS{brockmeyer00a,
author = {F. Terrier and N. Voros and U. Brockmeyer},
title = {{Specification, Implementation, and Validation of Object-Oriented Embedded Systems}},
booktitle = {Object-Oriented Technology - ECOOP 2000 Workshop Reader},
year = {2000},
editor = {J. Malenfant, S. Moisan, A. Moreira},
volume = {1964},
series = {Lecture Notes in Computer Science},
pages = {150--177},
abstract = {This workshop objective is to identify the main lacks of UML for developing real-time embedded systems and the main prospective directions for research to these difficulties. For that, it aims to gather academics and industrial people to discuss on industrial needs, on formalisms prospects and on advanced solutions. It tries to tackle the three main parts of a development cycle: specification/analysis, design/implementation and validation. Three main sessions have emerged from the workshop submissions. The first one was focused on setting the end users requirements for UML modeling of real-time embedded systems. The second has been focused on design and implementation techniques proposals and experiences. The third has been centered on formal techniques for the validation of the applications from their UML model. }
H.~Dierks, "PLC-Automata: A New Class of Implementable Real-Time Automata" in Proc. ARTS'97, 1997.
@INPROCEEDINGS{Die97,
author = {H.~Dierks},
title = {{PLC-Automata: A New Class of Implementable Real-Time Automata}},
booktitle = {ARTS'97},
year = {1997},
volume = {1231},
series = {Lecture Notes in Computer Science},
pages = {111--125},
month = MAY, publisher = {Springer-Verlag},
crossref = {LNCS1231},
optnote = {short version of \cite{Die00}}
}
H.~Dierks und C.~Dietz, "Graphical Specification and Reasoning: Case Study ``Generalized Railroad Crossing''" in Proc. FME'97, 1997.
@INPROCEEDINGS{DD97,
author = {H.~Dierks and C.~Dietz},
title = {{Graphical Specification and Reasoning: Case Study ``Generalized Railroad Crossing''}},
booktitle = {FME'97},
year = {1997},
editor = {J.~Fitzgerald and C.B.~Jones and P.~Lucas},
volume = {1313},
series = {Lecture Notes in Computer Science},
pages = {20--39},
publisher = {Springer-Verlag},
crossref = {LNCS1313}
}
H.~Dierks, A.~Fehnker, A.~Mader, und F.W.~Vaandrager, "Operational and Logical Semantics for Polling Real-Time Systems" in Proc. FTRTFT'98, 1998.
@INPROCEEDINGS{DFMV98,
author = {H.~Dierks and A.~Fehnker and A.~Mader and F.W.~Vaandrager},
title = {{Operational and Logical Semantics for Polling Real-Time Systems}},
booktitle = {FTRTFT'98},
year = {1998},
volume = {1486},
series = {Lecture Notes in Computer Science},
pages = {29--40},
publisher = {Springer-Verlag},
crossref = {LNCS1486},
optnote = {short version of \cite{DFMV98full}}
}
A.~Allara, M.~Bombana, S.~Comai, B.~Josko, R.~Schlör, und D.~Sciuto, "Specification of Embedded Monitors for Property Checking" in Proc. Proceedings, Forum on Design Languages, FDL'99, 1999.
@INPROCEEDINGS{josko99a,
author = {A.~Allara and M.~Bombana and S.~Comai and B.~Josko and R.~Schl{\"o}r and D.~Sciuto},
title = {Specification of Embedded Monitors for Property Checking},
booktitle = {Proceedings, Forum on Design Languages, {FDL'99}},
year = {1999},
pages = {117--126},
abstract = {In the formal verification domain the use of monitors represents a powerful technique where model I/O sequences are monitored and triggers are raised to allow a simplification in the construction of formal properties. This reduces the chances of incorrect system specifications and can sometimes reduce also the actual model checking time. The drawback of this technique lies in its heterogeneity. In fact, usually monitors are defined at the implementation level of the device model under test. In this paper we present a more general approach based on the idea of abstracting monitors definition from the model level up to the specification level without imposing further constraints on the current model checking techniques. A test case from the telecom domain is used to illustrate the definition and use of this type of embedded monitors, showing advantages and benefits related to their application. },
keywords = {Formal Verification, Monitors, Timing Diagrams, Model Checking}
}
T. Bienmüller, J. Bohn, H. Brinkmann, U. Brockmeyer, W. Damm, H. Hungar, und P. Jansen, Verification of Automotive Control UnitsSpringer Verlag.
@INCOLLECTION{csd99,
author = {Tom Bienm{\"u}ller and J{\"u}rgen Bohn and Henning Brinkmann and Udo Brockmeyer and Werner Damm and Hardi Hungar and Peter Jansen},
title = {Verification of Automotive Control Units},
booktitle = {Correct System Design},
publisher = {Springer Verlag},
year = {1999},
editor = {Ernst-R{\"u}diger Olderog and Bernd Steffen},
volume = {1710},
series = {LNCS},
pages = {319--341},
abstract = {This paper describes the application of model-checking based verification tools to specification models of automotive control units. It firstly discusses the current state of a tool set which copes with discrete controllers described in \textsc{Statemate},
and then reports on proposed extensions currently under development to deal with hybrid ones which involve continuous values, too. First results based on an extension of abstraction techniques to verify such units are reported.},
postscript = {csd99.ps.gz}
}
T. Bienmüller, U. Brockmeyer, W. Damm, G. Döhmen, C. Eßmann, H. Holberg, H. Hungar, B. Josko, R. Schlör, G. Wittich, H. Wittke, G. Clements, J. Rowlands, und E. Sefton, "Formal Verification of an Avionics Application using Abstraction and Symbolic Model Checking" in Proc. Towards System Safety -- Proceedings of the Seventh Safety-critical Systems Symposium, Huntingdon, UK, 1999.
@INPROCEEDINGS{sms99,
author = {Tom Bienm{\"u}ller and Udo Brockmeyer and Werner Damm and Gert D{\"o}hmen and Claus E{\ss}mann and Hans-J{\"u}rgen Holberg and Hardi Hungar and Bernhard Josko and Rainer Schl{\"o}r and Gunnar Wittich and Hartmut Wittke and Geoffrey Clements and John Rowlands and Eric Sefton},
title = {Formal {V}erification of an {A}vionics {A}pplication using {A}bstraction and {S}ymbolic {M}odel {C}hecking},
booktitle = {Towards {S}ystem {S}afety -- {P}roceedings of the {S}eventh {S}afety-critical {S}ystems {S}ymposium, Huntingdon, UK},
year = {1999},
editor = {Felix Redmill and Tom Anderson},
pages = {150--173},
organization = {Safety-{C}ritical {S}ystems {C}lub},
publisher = {Springer},
abstract = { This paper demonstrates the use of model-checking based verification technology to establish safety critical properties for an industrial avionics application. The verification technology is tightly integrated with the Statemate system of i-Logix Inc., USA. Key features of this technology are its scalability to complete system verification, the powerful debugging capabilities, graphical entry for safety critical properties, and the capability to re-use verification results for design components. The paper describes the application, the Statemate verification environment, and its use to establish safety critical properties of a British Aerospace application. The technical focus is on the use of abstraction techniques, allowing to focus verification on aspects of the design relevant to the property under investigation.},
postscript = {sms99.ps.gz}
}
J. Bohn, "Mechanical Support and Validation of a Design Calculus for Communicating Systems by a Logic-Based Proof System" PhD Thesis , Germany, 1997.
@PHDTHESIS{BohnPhD97,
author = {J\"urgen Bohn},
title = {Mechanical Support and Validation of a Design Calculus for Communicating Systems by a Logic-Based Proof System},
school = {Department of Computer Science, University of Oldenburg},
year = {1997},
address = {Germany},
pages = {308},
postscript = {BohnPhD97.ps.gz}
}
J. Bohn und H. Hungar, TRAVERDI --- Transformation and Verification of Distributed SystemsSpringer.
@INCOLLECTION{hungar:BoHu95,
author = {J. Bohn and H. Hungar},
title = {TRAVERDI --- Transformation and Verification of Distributed Systems},
booktitle = {KORSO: Methods, Languages, and Tools for the Construction of Correct Software},
publisher = {Springer},
year = {1995},
editor = {M. Broy and S. J\"ahnichen},
series = {LNCS 1009},
pages = {317--338},
key = {BoHu95}
}
J. Bohn, " "Formalizing the transformational design of communicating systems in the theorem prover LAMBDA" " in Proc. Higher Order Algebra, Logic and Term Rewriting (HOA'93), 1993, p. 14.
@INPROCEEDINGS{BohnHOA93,
author = {J{\"u}rgen Bohn},
title = {{ "Formalizing the transformational design of communicating systems in the theorem prover LAMBDA" }},
booktitle = {Higher Order Algebra, Logic and Term Rewriting (HOA'93)},
year = {1993},
editor = {J. Heering and K. Meinke and B. M{\"o}ller},
pages = {14},
month = sep, publisher = {CWI, Amsterdam, The Netherlands},
abstract = { },
postscript = {BohnHOA93.ps.gz}
}
J. Bohn, " "Formal transformational reasoning about reactive systems in the theorem prover LAMBDA" " in Proc. Supplementary proceedings of the 7th international workshop on Higher Order Logic Theorem Proving and its Applications, 1994, p. 17.
@INPROCEEDINGS{BohnHOL94,
author = {J{\"u}rgen Bohn},
title = {{ "Formal transformational reasoning about reactive systems in the theorem prover LAMBDA" }},
booktitle = {Supplementary proceedings of the 7th international workshop on Higher Order Logic Theorem Proving and its Applications},
year = {1994},
editor = {T. Melham and J. Camilleri},
pages = {17},
publisher = {University of Malta},
abstract = { },
postscript = {BohnHOL94.ps.gz}
}
J. Bohn, W. Damm, O. Grumberg, H. Hungar, und K. Laster, " "First-Order-CTL Model Checking" " in Proc. FSTTCS, 1998.
@INPROCEEDINGS{BohnDammHungar98,
author = {J{\"u}rgen Bohn and Werner Damm and Orna Grumberg and Hardi Hungar and Karen Laster},
title = {{ "First-Order-CTL Model Checking" }},
booktitle = {FSTTCS},
year = {1998},
volume = {1530},
series = {Lecture Notes in Computer Science},
pages = {283--294},
month = {May},
abstract = {This work presents a first-order model checking procedure that verifies systems with potentially infinite data spaces with respect to first-order CTL specification. The procedure relies on a partition of the system variables into \emph{control} and \emph{data}. While control values are expanded into BDD-representations, data values enter in form of their properties relevant to the verification task. The algorithm is completely automatic. If the algorithm terminates, it has generated a first-order verification condition on the data space which characterizes the system's correctness. Termination can be guaranteed for a class that properly includes the data independent systems, defined in \cite{Wol86}. The procedure works like a symbolic model checker on the control part. The data part is handled by annotating each control-expanded state of the system by a first-order formula. These formulas characterize, for each state, the set of data valuations that altogether make the specification true for the system. A novel part of our work is that the first-order annotations are represented as BDDs and are manipulated symbolically. Since the formulas are represented by BDDs, we get ''for free'' propositional simplifications. Moreover, the canonical representation provided by BDDs makes it easier to detect termination of our model checking procedure. Finally, the encoding of predicates as boolean variables enables \emph{sharing} of subformulas among the formulas produced by the model checking procedure. This work improves \cite{DHG-charme95},
where we extended \emph{explicit} model checking algorithms. In contrast, this paper shows how to cast first-order model checking into BDD-based representations. Thus, for complex control aspects of the design the full power of symbolic model checking is provided, while at the same time temporal reasoning is supported by the generation of a verification condition in cases where the data complexity is too high for ordinary procedures.},
issn = {0302-9743},
postscript = {BohnDammHungar98.ps.gz}
}
J. Bohn und W. Janssen, "A strategic approach to transformational design" in Proc. Proc. Int. Conf. FME 96; Industrial benefit and Advances in Formal Methods, Oxford, UK, 1996.
@INPROCEEDINGS{BohnJanssen96,
author = {J{\"u}rgen Bohn and Wil Janssen},
title = {{A strategic approach to transformational design}},
booktitle = {Proc. Int. Conf. FME 96; Industrial benefit and Advances in Formal Methods},
year = {1996},
editor = {M. Gaudel and J. Woodcock},
volume = {1051},
series = {Lecture Notes in Computer Science},
pages = {609--628},
address = {Oxford, UK},
month = mar, publisher = {Springer-Verlag, Berlin},
abstract = { },
postscript = {BohnJanssen96.ps.gz}
}
J. Bohn und S. Rössig, "On Automatic and Interactive Design of Communicating Systems" in Proc. Proceedings of the 1st International Workshop on Tools and Algorithms for the Construction and Analysis of Systems (TACAS'95), Aarhus, Denmark, 1995.
@INPROCEEDINGS{BohnRoessig95,
author = {J{\"u}rgen Bohn and Stephan R{\"o}ssig},
title = {On Automatic and Interactive Design of Communicating Systems},
booktitle = {Proceedings of the 1st International Workshop on Tools and Algorithms for the Construction and Analysis of Systems (TACAS'95)},
year = {1995},
editor = {E. Brinksma and W. R. Cleaveland and K. G. Larsen and T. Margaria and B. Steffen},
volume = {1019},
series = {Lecture Notes in Computer Science},
pages = {216--237},
address = {Aarhus, Denmark},
publisher = {Springer-Verlag},
issn = {0302-9743},
postscript = {BohnRoessig95.ps.gz}
}
U. Brockmeyer und G. Wittich, "Real-Time Verification of STATEMATE Designs --- Tool-Paper" in Proc. Computer Aided Verification, 1998.
@INPROCEEDINGS{brockmeyer98b,
author = {U. Brockmeyer and G. Wittich},
title = {{Real-Time Verification of STATEMATE Designs --- Tool-Paper}},
booktitle = {Computer Aided Verification},
year = {1998},
editor = {Alan J. Hu and Moshe Y. Vardi},
volume = {1427},
series = {Lecture Notes in Computer Science},
pages = {537--541},
abstract = {This tool-paper presents a toolset for real-time verification of STATEMATE designs. STATEMATE is a widely used design tool for embedded control applications. In our approach designs including all timing information are translated into untimed finite state machines (FSMs) %Kripke Structures which are verified by symbolic model-checking. Real-time requirements are expressed by TCTL formulae interpreted over discrete time. A reduction from TCTL model-checking to CTL model-checking is implemented in order to use a CTL model-checker for the verification task. Some experimental results of the toolset are given. },
postscript = {brockmeyer98b.ps}
}
U. Brockmeyer und G. Wittich, "Tamagotchis Need Not Die -- Verification of STATEMATE Designs" in Proc. Tools and Algorithms for the Construction and Analysis of Systems, 1998.
@INPROCEEDINGS{brockmeyer98a,
author = {U. Brockmeyer and G. Wittich},
title = {{Tamagotchis Need Not Die -- Verification of STATEMATE Designs}},
booktitle = {Tools and Algorithms for the Construction and Analysis of Systems},
year = {1998},
editor = {Bernhard Steffen},
volume = {1384},
series = {Lecture Notes in Computer Science},
pages = {217--231},
abstract = {This paper presents a toolset we built for supporting verification of STATEMATE designs. STATEMATE is a widely used design tool for embedded control applications. Designs are translated into finite state machines which are optimized and then verified by symbolic model checking. To express requirement specifications the visual formalism of symbolic timing diagrams is used. Their semantics is given by translation into temporal logic. If the model checker generates a counterexample, it is retranslated into either a symbolic timing diagram or a stimulus for the STATEMATE simulator. },
postscript = {brockmeyer98a.ps}
}
U. Brockmeyer und G. Wittich, "Case Study: Verification of an Embedded Fault-Tolerant Avionics System" in Proc. IEEE International Workshop on Embedded Fault-Tolerant Systems (EFTS'98), 1998.
@INPROCEEDINGS{brockmeyer98d,
author = {U. Brockmeyer and G. Wittich},
title = {{Case Study: Verification of an Embedded Fault-Tolerant Avionics System}},
booktitle = {IEEE International Workshop on Embedded Fault-Tolerant Systems (EFTS'98)},
year = {1998},
pages = {90-95},
abstract = {This paper shows how an fault-tolerant avionics system given as a STATEMATE design can be verified using a toolset we built. We demonstrate our verification environment on a sample avionics case study which is provided by our project partner ESG. This case study is about a fault-tolerant Helicopter Monitoring System of a Helicopter with two engines. There are two independent tasks which are scheduled periodically by a control task. For each engine the first task compares a computed and a measured rotations per minute (rpm) value. If the difference raises above a given threshold, the task generates an alarm displayed to the pilot. Then the pilot has to decide whether to switch off the engine or not. The second task monitors the remaining fuel of the aircraft. It first computes two values to determine the remaining amount of fuel. One value is computed by fuel throughput and one is computed by the initial amount of fuel and the flight distance. Again an alarm is generated if the two values differ too much. Otherwise the weighted average of these values is assumed to be the remaining amount of fuel. An alarm is also generated if this value reaches a critical threshold. All generated alarms have to be acknowledged by the pilot. The control task schedules the above two tasks and also accepts commands given by the pilot by performing the corresponding actions. We present some results we got on verifying some relevant properties of the fault-tolerant monitoring system with our toolset. },
postscript = {brockmeyer98d.ps}
}
C. Courcoubetis, W. Damm, und B. Josko, "Verification of timing properties of VHDL" in Proc. 5th Conference on Computer-Aided Verification, 1993.
@INPROCEEDINGS{josko93a,
author = {C. Courcoubetis and W. Damm and B. Josko},
title = {Verification of timing properties of {VHDL}},
booktitle = {5th Conference on Computer-Aided Verification},
year = {1993},
editor = {C. Courcoubetis},
series = {Lecture Notes in Computer Science 697},
pages = {225--236},
publisher = {Springer-Verlag},
abstract = {This paper shows how timing properties of VHDL processes can be verified using timed transition systems. The timing model being adopted is the timed automaton model used in the timing extension of Kurshan's COSPAN system. It demonstrates how a VHDL process can be translated into a timed automaton by describing the construction of the corresponding timed process that handles the scheduled signal assignments of the VHDL specification. Verification is performed in the case in which the complement of the timing properties to be verified are provided in terms of a timed automaton. Interestingly enough, this is the case for a large class of hardware properties expressed in terms of timing diagrams.}
}
W. Damm, U. Brockmeyer, H. -J. Holberg, G. Wittich, und M. Eckrich, "Einsatz formaler Methoden zur Erhöhung der Sicherheit eingebetteter Systeme im Kfz" in Proc. Systemengeneering in der Kfz-Entwicklung, 1997.
@INPROCEEDINGS{brockmeyer97a,
author = {W. Damm and U. Brockmeyer and H.-J. Holberg and G. Wittich and M. Eckrich},
title = {{Einsatz formaler Methoden zur Erh\"ohung der Sicherheit eingebetteter Systeme im Kfz}},
booktitle = {Systemengeneering in der Kfz-Entwicklung},
year = {1997},
editor = {VDI-Gesellschaft Fahrzeug und Verkehrstechnik},
volume = {1374},
series = {VDI Berichte},
pages = {349--366},
abstract = { },
postscript = {brockmeyer97a.ps}
}
W. Damm, G. Döhmen, V. Gerstner, und B. Josko, "Modular verification of Petri nets: The temporal logic approach" in Proc. Stepwise Refinement of Distributed Systems. Models, Formalisms, Correctness, 1990.
@INPROCEEDINGS{josko90b,
author = {Werner Damm and Gert D{\"o}hmen and Volker Gerstner and Bernhard Josko},
title = {Modular verification of Petri nets: The temporal logic approach},
booktitle = {Stepwise Refinement of Distributed Systems. {Models, Formalisms, Correctness}},
year = {1990},
editor = {Jaco W. de Bakker and Willem-Paul de Roever and Grzegorz Rozenberg},
series = {Lecture Notes in Computer Science 430},
pages = {180--207},
publisher = {Springer-Verlag},
abstract = {``How does reactive behaviour decompose? What can be done to encourage stepwise refinement of the behavioural aspects of a system? How can one cope with the intricacy, that the behaviour of a complex reactive system presents?'' These questions posed in [Harel, Pnueli 1985] and informally discussed there in the setting of statecharts, are taken up in this paper using a particular class of Petri-Nets as models for {\em open reactive systems}. It presents an assumption/commitment style temporal logic for specifying the behaviour of such systems, an automatic proof method for verifying the correctness of an implementation of such a specification in terms of the considered class of Petri-Nets based on model checking of MCTL formula, and presents a proof-method for inferring the behaviour of a compound reactive system from the behaviour of its constituents. }
}
W. Damm, G. Döhmen, und J. Klose, "Secure Decentralized Control of Railway Crossings" in Proc. Fourth International ERCIM Workshop on Formal Methods in Industrial Critical Systems, 1999.
@INPROCEEDINGS{Klose99a,
author = {W. Damm and G. D{\"o}hmen and J. Klose},
title = {Secure Decentralized Control of Railway Crossings},
booktitle = {Fourth International {ERCIM} Workshop on Formal Methods in Industrial Critical Systems},
year = {1999},
editor = {S. Gnesi and D. Latella},
pages = {115 - 132},
abstract = { This paper demonstrates the use of model checking based verification technology to establish safety critical properties for a railway control application. The verification technology is tightly integrated with the Statemate system of i-Logix Inc., USA. Key features of this technology are the powerful debugging capabilities and graphical entry for safety critical properties. This paper gives an overview over the verification environment and also highlights the design methodology that provides its base. In order to further enhance the verification environment we add Message Sequence Charts (MSC) to the existing tool-set. We show that MSCs can be effectively used in the requirements analysis phase of the design process. As a sample application serves a railway control system.},
postscript = {klose99a.ps.gz}
}
W. Damm und D. Harel, "LSCs: Breathing Life into Message Sequence Charts" in Proc. FMOODS'99 IFIP TC6/WG6.1 Third International Conference on Formal Methods for Open Object-Based Distributed Systems, 1999.
@INPROCEEDINGS{werner98a,
author = {W. Damm and D. Harel},
title = {{LSCs: Breathing Life into Message Sequence Charts}},
booktitle = {FMOODS'99 IFIP TC6/WG6.1 Third International Conference on Formal Methods for Open Object-Based Distributed Systems},
year = {1999},
abstract = {While message sequence charts (MSCs) are widely used in industry to document the interworking of processes or objects, they are expressively quite weak, being based on the modest semantic notion of a partial ordering of events as defined, e.g., in the ITU standard. A highly expressive and rigorously defined MSC language is a must for serious, semantically meaningful tool support for use-cases and scenarios. It is also a prerequisite to addressing what we regard as one of the central problems in behavioral specification of systems: relating scenario-based inter-object specification to state-machine intra-object specification. This paper proposes an extension of MSCs, which we call live sequence charts (or LSCs), since our main extension deals with specifying "liveness", i.e., things that must occur. In fact, LSCs allow the distinction between possible and necessary behavior both globally, on the level of an entire chart and locally, when specifying events, conditions and progress over time within a chart. This also makes it possible to specify forbidden scenarios, and strengthens structuring constructs like as subcharts, branching and iteration.},
postscript = {werner98a.ps}
}
W. Damm, H. Hungar, P. Kelb, und R. Schlör, Using graphical specification languages and symbolic model checking in the verification of a production cellSpringer.
@INCOLLECTION{hungar:DHKS94,
author = {W. Damm and H. Hungar and P. Kelb and R. Schl\"or},
title = {Using graphical specification languages and symbolic model checking in the verification of a production cell},
booktitle = {Formal Development of Reactive Systems. Case Study Production Cell},
publisher = {Springer},
year = {1994},
editor = {C. Lewerentz and T. Lindner},
series = {LNCS 891},
pages = {131--149},
key = {DHKS94}
}
W. Damm, B. Josko, H. Hungar, und A. Pnueli, "A Compositional Real-time Semantics of STATEMATE Designs" in Proc. Proceedings COMPOS'97, 1998.
@INPROCEEDINGS{DammJoskoHungarPnueli98,
author = {Werner Damm and Bernhard Josko and Hardi Hungar and Amir Pnueli},
title = {A Compositional Real-time Semantics of {STATEMATE} Designs},
booktitle = {Proceedings COMPOS'97},
year = {1998},
editor = {W.-P.~de~Roever and H.~Langmaack and A.~Pnueli},
series = {Lecture Notes in Computer Science 1536},
pages = {186--238},
publisher = {Springer-Verlag},
abstract = {This paper presents a reference semantics for a verification tool currently under development allowing to verify temporal properties of embedded control systems modelled using the STATEMATE system. The semantics reported differs from others reported in the literature by faithfully modelling the semantics as supported in the STATEMATE simulation tool. It differs from the recent paper by Harel and Naamad by providing a {\em compositional\/} semantics, a prerequisite for the support of {\em compositional verification methods},
and by the degree of mathematical rigour. We use a variant of \textit{synchronous transition systems} introduced by Manna and Pnueli as base model for our semantics. \par The STATEMATE modelling language constructs covered in this paper are \textit{Activity charts},
modelling the functional decomposition of a design into subunits called \textit{activities} as well as the \textit{information flow} between these, and \textit{Statecharts},
modelling reactive behaviour using the well established approach of hierarchically organized state-machines. We strive for a verification approach which is compositional w.r.t.\ the decomposition of systems into subsystems. This will allow activities of ``reasonable'' complexity to be verified using \textit{symbolic model checking}. \par Larger activities will be verified on the basis of proof-systems relating properties of individual activities to properties of compound activities, using the well known \textit{assumption commitment paradigm}. A key topic for this paper is the construction of so called \textit{compositional models},
which are ``rich enough'' to model the STATEMATE parallel composition by intersection of the infinite traces generated by the components of the parallel composition. Roughly, compositional models have to provide room for padding arbitrary (but still ``legal'') environment interactions into computations of a component. Alternatively, the construction of compositional models can be phrased as a requirement on the model to support a sufficiently rich class of \textit{observables} for assumption-commitment style reasoning to be complete. In this sense, this paper derives the set of atomic propositions included as observables in the assumption-commitment style temporal logic supported by the verification tool. \par The richness of the STATEMATE modelling languages forbids a complete treatment within such a formal semantics. While Harel and Naamad elaborate in a detailed fashion the construction of compound transitions from transition segments, we take this as given in this paper. We also abstract from the concrete syntax of action annotations, but keep them rich enough to show how all the associated intricacies can be handled formally.}
}
W. Damm, B. Josko, und R. Schlör, Specification and Verification of VHDL-based System-Level Hardware DesignsOxford University Press.
@INCOLLECTION{josko95,
author = {Werner Damm and Bernhard Josko and Rainer Schl{\"o}r},
title = {Specification and Verification of {VHDL}-based System-Level Hardware Designs},
booktitle = {Specification and Validation Methods},
publisher = {Oxford University Press},
year = {1995},
editor = {E. B{\"o}rger},
pages = {331--410},
abstract = {This chapter provides the semantic foundation of a formal verification environment for VHDL. The envisaged tool supports {\it specification\/} of system-level hardware designs using an extension of the classical concepts of timing diagrams allowing us to express first-order properties and causality relations between events. A formal semantics of such {\it symbolic timing diagrams\/} is given in terms of a linear time first-order temporal logic. System-level designs expressed in VHDL --- an IEEE standard hardware description language --- can be verified against temporal logic specifications using a {\it compositional proof system\/} presented in this chapter. This proof-system is proved correct with respect to a {\it formal semantics\/} for VHDL in the style of {\it structural operational semantics\/} based on {\it transition systems\/}. For the special case of VHDL designs using finite data types only, the semantics provides a link to {\it model-checking\/} tools allowing {\it automatic verification\/} of VHDL designs against a temporal logic specification. Such a verification environment is currently under development within the ESPRIT project FORMAT.},
keywords = {VHDL, hardware verification, temporal logic, specification languages, formal semantics, visual formalisms}
}
W. Damm, B. Josko, und R. Schlör, "A Net-Based Semantics for VHDL" in Proc. Proceedings EURO-DAC with EURO-VHDL 93, 1993.
@INPROCEEDINGS{josko93b,
author = {W. Damm and B. Josko and R. Schl{\"o}r},
title = {A Net-Based Semantics for {VHDL}},
booktitle = {Proceedings EURO-DAC with EURO-VHDL 93},
year = {1993},
pages = {514--519},
abstract = {The VHDL standard [IEEE87] gives only an informal description of the semantics of VHDL. But to apply formal verification techniques a precise semantics definition is necessary. This paper defines a formal semantics for VHDL based on interpreted Petri nets. The presented semantics is compositional and provides a link to automatic verification methods for VHDL based designs.}
}
W. Damm, F. Liu, und T. Peikenkamp, "A graph Rewriting Model enhanced with sharing for OR-parallel execution of Logic Programs" in Proc. Proc. of SemaGraph'91 Symposium on the Semantics and Progmatics of Generalized Graph Rewriting, Nijmegen, The Netherlands, 1991.
@INPROCEEDINGS{DLP91,
author = {W. Damm and F. Liu and T. Peikenkamp},
title = { A graph Rewriting Model enhanced with sharing for OR-parallel execution of Logic Programs},
booktitle = {Proc. of SemaGraph'91 Symposium on the Semantics and Progmatics of Generalized Graph Rewriting},
year = {1991},
pages = {29--46},
address = {Nijmegen, The Netherlands},
month = {December},
abstract = {This paper seeks for a further rise in efficiency of OR-parallel execution models by exploiting sharing among different OR-parallel processes. Inspired by the principle of graph rewriting for handling sharing in functional languages, we present a graph rewriting model enhanced with sharing for OR-parallel execution of logic programs. Our approach is in orthogonal to most of the existing OR-parallel models such as SRI, Aurora and Andorra models which aim to raise efficiency of OR-parallel execution by incorporating different strategies for process control and environment management. The preliminary simulation results of the model enhanced with sharing have shown a significant reduction of computation tree and heap space used for the evaluation of non-deterministic programs. More importantly, comparied with non-shared OR-parallel models, our model enhanced with sharing promises a speed up for non-deterministic programs.}
}
W. Damm und A. Pnueli, "Verifying out-of-order executions" in Proc. Advances in Hardwre Design and Verification: IFIP WG 10.5 International Conference on Correct Hardware Design and Verification Methods (CHARME), 1997.
@INPROCEEDINGS{damm97,
author = {W. Damm and A. Pnueli},
title = {Verifying out-of-order executions},
booktitle = {Advances in Hardwre Design and Verification: IFIP WG 10.5 International Conference on Correct Hardware Design and Verification Methods (CHARME)},
year = {1997},
editor = {H.F.Li and D.K.Probst},
pages = {23--47},
publisher = {Chapman \& Hall}
}
W. Damm, A. Pnueli, und S. Ruah, "Herbrand automata for hardware verification" in Proc. Proc of the 9th International Conference on Conucrrency (CONCUR), 1998.
@INPROCEEDINGS{damm98,
author = {W. Damm and A. Pnueli and S. Ruah},
title = {Herbrand automata for hardware verification},
booktitle = {Proc of the 9th International Conference on Conucrrency (CONCUR)},
year = {1998},
editor = {R. De Simone and D. Sangiorgi},
series = {LNCS},
publisher = {Springer Verlag}
}
H.~Dierks, "Synthesizing Controllers from Real-Time Specifications" IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, vol. 18, iss. 1.
@ARTICLE{Die99,
author = {H.~Dierks},
title = {{Synthesizing Controllers from Real-Time Specifications}},
journal = {IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
year = {1999},
volume = {18},
pages = {33--43},
number = {1}
}
H.~Dierks, "Specification and Verification of Polling Real-Time Systems" PhD Thesis , 1999.
@PHDTHESIS{Die99b,
author = {H.~Dierks},
title = {{Specification and Verification of Polling Real-Time Systems}},
school = {University of Oldenburg},
year = {1999},
month = JUL, optnote = {to appear}
}
H.~Dierks, "Der Einsatz von Theorem-Beweisern am Beispiel der Graphentheorie" Master's Dissertation , 1997.
@MASTERSTHESIS{Die97e,
author = {H.~Dierks},
title = {{Der Einsatz von Theorem-Beweisern am Beispiel der Graphentheorie}},
school = {University of Oldenburg, Department of Mathematics, Oldenburg, Germany},
year = {1997},
month = AUG }
H.~Dierks, "Die Fertigungszelle als verifiziertes Realzeitsystem" Master's Dissertation , 1995.
@MASTERSTHESIS{Die95,
author = {H.~Dierks},
title = {{Die Fertigungszelle als verifiziertes Realzeitsystem}},
school = { University of Oldenburg, Department of Computer Science, Oldenburg, Germany},
year = {1995},
month = MAY, key = {T1}
}
H.~Dierks, A.~Fehnker, A.~Mader, und F.W.~Vaandrager, "Operational and Logical Semantics for Polling Real-Time Systems" Computer Science Institute Nijmegen, Faculty of Mathematics and Informatics, Catholic University of Nijmegen, CSI-R9813, 1998.
@TECHREPORT{DFMV98full,
author = {H.~Dierks and A.~Fehnker and A.~Mader and F.W.~Vaandrager},
title = {{Operational and Logical Semantics for Polling Real-Time Systems}},
institution = {Computer Science Institute Nijmegen, Faculty of Mathematics and Informatics, Catholic University of Nijmegen},
year = {1998},
number = {CSI-R9813},
month = APR, optnote = {full paper of \cite{DFMV98}}
}
H.~Dierks und J.~Tapken, "Tool-Supported Hierarchical Design of Distributed Real-Time Systems" in Proc. Proceedings of the 10th EuroMicro Workshop on Real Time Systems, 1998.
@INPROCEEDINGS{DT98,
author = {H.~Dierks and J.~Tapken},
title = {{Tool-Supported Hierarchical Design of Distributed Real-Time Systems}},
booktitle = {Proceedings of the 10th EuroMicro Workshop on Real Time Systems},
year = {1998},
pages = {222--229},
month = JUN, publisher = {IEEE Computer Society}
}
K. Feyerabend, "Real time symbolic timing diagrams" Department of computer science, Oldenburg University1996.
@TECHREPORT{feyerabend96b,
author = {Konrad Feyerabend},
title = {Real time symbolic timing diagrams},
institution = {Department of computer science, Oldenburg University},
year = {1996},
month = Sep, note = {http://ca.informatik.uni-oldenburg.de},
abstract = {Symbolic Timing Diagrams have been introduced to increase acceptance of formal specification methods among hardware designers. Within the FORMAT project they have been used as input language to automated verification tools. They have proven to be very valuable for easy to understand specifications of critical system requirements. Over the past few years, quantitative (real time) timing aspects have gained increasing attendance in formal specification and verification. Intuitively, adding real time requirements to the graphical denotation of symbolic timing diagrams is easily accomplished by annotating constraint arcs to carry time intervals. In this paper we define the formal semantics of real time timing diagrams by a translation to timed propositional temporal logic. It is intended as technical reference and assumes some knowledge on STD. For an introduction to real time symbolic timing diagrams refer to Feyerabend/Josko: Graphical Specification with Real Time Symbolic Timing Diagrams.},
postscript = {feyerabend96b.ps}
}
K. Feyerabend und B. Josko, "A Visual Formalism for Real Time Requirement Specifications" in Proc. Transformation-Based Reactive Systems Development, Proceedings, 4th International AMAST Workshop on Real-Time Systems and Concurrentand Distributed Software, ARTS'97, 1997.
@INPROCEEDINGS{feyerabend96c,
author = {Konrad Feyerabend and Bernhard Josko},
title = {A Visual Formalism for Real Time Requirement Specifications},
booktitle = {Transformation-Based Reactive Systems Development, Proceedings, 4th International {AMAST} Workshop on Real-Time Systems and Concurrentand Distributed Software, {ARTS'97}},
year = {1997},
editor = {Miquel Bertran and Teodor Rus},
series = {Lecture Notes in Computer Science 1231},
pages = {156--168},
publisher = {Springer-Verlag},
abstract = {This paper presents a semantical basis of a graphical specification language, called {\em real-time symbolic timing diagrams (RTSTD)},
to express real-time requirements of embedded systems. RTSTD allow a concise and unambigous formulation of real-time properties that are intuitively understandable by hardware designers. We give a precise semantical foundation of this graphical language in terms of real-time temporal logic. Due to this interpretation RTSTD can be embedded into existing verification tools to check whether an implementation satiesfies the given specification expressed as RTSTD.},
postscript = {feyerabend96c.ps}
}
K. Feyerabend und R. Schlör, "Hardware Synthesis from Requirement Specifications" in Proc. EURO-DAC'96 with EURO-VHDL'96 Proceedings, 1996.
@INPROCEEDINGS{Feyerabend:Schloer:1996,
author = {Konrad Feyerabend and Rainer Schl{\"o}r},
title = {Hardware Synthesis from Requirement Specifications},
booktitle = {EURO-DAC'96 with EURO-VHDL'96 Proceedings},
year = {1996},
month = {September},
publisher = {IEEE Computer Society Press},
abstract = {This paper describes the theory and implementation of a novel system for hardware synthesis from requirement specifications expressed in a graphical specification language called Symbolic Timing Diagrams (STD). The system can be used together with an existing formal--verification environment for VHDL leading to a novel methodology based on the combination of synthesis and formal verification. We show the feasibility of the approach and experimental results obtained with the system on the well known example of an industrial production cell, where both FPGA and ASIC hardware implementations were successfully synthesized.},
postscript = {feyerabend96a.ps}
}
M. Fränzle, "Analysis of Hybrid Systems: An ounce of realism can save an infinity of states" in Proc. Computer Science Logic (CSL'99), 1999.
@INPROCEEDINGS{fraenzle99a,
author = {Fr{\"a}nzle, Martin},
title = {Analysis of Hybrid Systems: An ounce of realism can save an infinity of states},
booktitle = {Computer Science Logic (CSL'99)},
year = {1999},
editor = {Flum, J{\"o}rg and Rodr{\'\i}guez-Artalejo, Mario},
volume = {1683},
series = {Lecture Notes in Computer Science},
pages = {126--140},
publisher = {Springer Verlag},
abstract = {Hybrid automata have been introduced in both control engineering and computer science as a formal model for the dynamics of hybrid discrete-continuous systems. In the case of so-called linear hybrid automata this formalization supports semi-decision procedures for state reachability, yet no decision procedures due to inherent undecidability. Thus, unlike finite or timed automata, already linear hybrid automata are out-of-scope of fully automatic verification. In this article, we devise a new semi-decision method for safety of linear and polynomial hybrid systems which may only fail on pathological, practically uninteresting cases. These remaining cases are such that their safety depends on the {\em complete} absence of noise, a situation unlikely to occur in real hybrid systems. Furthermore, we show that if low probability effects of noise are ignored akin to the way they are suppressed in digital modelling then safety becomes fully decidable.},
postscript = {fraenzle99a.ps}
}
M. Fränzle, Model-Checking Dense-Time Duration Calculus.
@UNPUBLISHED{fraenzle98b,
author = {Fr{\"a}nzle, Martin},
title = {Model-Checking Dense-Time Duration Calculus},
note = {Presented at the Duration Calculus Track of the 33rd European Summer School on Logic, Language and Information (an extended version has been submitted for a special issue of BCS FACS, to appear in 2001)},
month = aug, year = {1998},
abstract = {Since the seminal work of Zhou Chaochen, M.\,R.~Hansen, and P.~Sestoft on decidability of Duration Calculus it is well-known that decidable fragments of Duration Calculus can only be obtained through withdrawal of much of the interesting vocabulary of this logic. While this was formerly taken as an indication that key-press verification with respect to elaborate DC specifications were impossible, we show that model-checking {\em realistic} designs is nevertheless feasible. The key issue is that the classical undecidability results rely on a notion of validity of a formula that refers to a class of models which is considerably richer than the possible behaviours of embedded real-time systems. By analyzing two suitably sparser model classes we obtain model-checking procedures for rich subsets of Duration Calculus. Together with undecidability results also obtained, this sheds light upon the exact borderline between decidability and undecidability of Duration Calculi and related logics.},
postscript = {fraenzle98b.ps}
}
M. Fränzle, W. Goerigk, B. von Karger, und M. Müller-Olm, "Beyond ProCoS at Kiel: A Synopsis of Recent Research" in Proc. ProCoS WG Workshop at FM'99 (Part of the FM'99 CD-Rom), 1999.
@INPROCEEDINGS{FraenzleEA:BeyondProCoSKiel,
author = {Fr{\"a}nzle, Martin and Goerigk, Wolfgang and Karger, Burghard von and M{\"u}ller-Olm, Markus},
title = {Beyond {ProCoS} at {Kiel}: A Synopsis of Recent Research},
booktitle = {ProCoS WG Workshop at FM'99 (Part of the FM'99 CD-Rom)},
year = {1999},
pages = {1--17},
month = {September},
publisher = {Springer electronic media},
abstract = {This article presents an overview over research activities at various German universities which were sparked by the broad scope of topics covered by the Kiel ProCoS group.},
postscript = {fraenzle99b.ps}
}
M. Fränzle und K. Lüth, "Visual Temporal Logic as a Rapid Prototyping Tool" in Proc. Proc. 1st internat. Symp. on Visual Formal Methods (VFM `99), 1999.
@INPROCEEDINGS{FraenzleLueth:VisualTLasRPTool,
author = {Fr{\"a}nzle, Martin and L{\"u}th, Karsten},
title = {Visual Temporal Logic as a Rapid Prototyping Tool},
booktitle = {Proc. 1st internat. Symp. on Visual Formal Methods (VFM `99)},
year = {1999},
editor = {D. Bosnacki, S. Mauw, T. Willemse},
number = {99-08},
series = {Computer Science Reports},
pages = {1--15},
publisher = {Eindhoven University of Technology},
annote = {An extended version has appeared in Computer Languages 27(1--3), p. 93--113}
}
M. Fränzle und K. Lüth, "Compiling Graphical Real-Time Specifications into Silicon" in Proc. Formal Techniques in Real-Time and Fault-Tolerant Systems (FTRTFT'98), 1998.
@INPROCEEDINGS{fraenzle98a,
author = {Fr{\"a}nzle, Martin and L{\"u}th, Karsten},
title = {Compiling Graphical Real-Time Specifications into Silicon},
booktitle = {Formal Techniques in Real-Time and Fault-Tolerant Systems (FTRTFT'98)},
year = {1998},
series = {Lecture Notes in Computer Science},
publisher = {Springer Verlag},
abstract = {Two different approaches towards automatic synthesis of embedded controllers from fully formal graphical specifications are presented. The source language is {\em real-time symbolic timing diagrams},
which are a {\em metric-time temporal logic} s.t.\ hard real-time constraints have to be dealt with. In the first synthesis method, we use a classical approach with first order temporal logic and B\"uchi automata as intermediate representations. As this leads to state explosion and unsatisfactory circuit complexity when large-scale timing constraints are encountered, a second, novel technique is currently under development. Here, timed automata are used as intermediate representation, and timing constraints, if found to be sufficiently independent, are directly mapped to hardware timers.},
postscript = {fraenzle98a.ps}
}
M. Fränzle und M. Müller-Olm, "Compilation and Synthesis for Real-Time Embedded Controllers" in Proc. Correct System Design --- Recent Insights and Advances, 1999.
@INPROCEEDINGS{fraenzle99c,
author = {Fr{\"a}nzle, Martin and M{\"u}ller-Olm, Markus},
title = {Compilation and Synthesis for Real-Time Embedded Controllers},
booktitle = {Correct System Design --- Recent Insights and Advances},
year = {1999},
editor = {Olderog, Ernst-R{\"u}diger and Steffen, Bernhard},
volume = {1710},
series = {Lecture Notes in Computer Science},
pages = {256--287},
publisher = {Springer Verlag},
abstract = {This article provides an overview over two constructive approaches to provably correct hard real-time code generation where hard real-time code is \emph{generated} from abstract requirements rather than \emph{verified} against the timing requirements \emph{a posteriori}. The first, more pragmatic approach is concerned with translation of imperative programs, extended by hard real-time commands which allow one to specify upper bounds for the execution time of basic blocks. In the second approach, Duration Calculus, a metric-time temporal logic, is used as the source language. Duration Calculus allows one to specify real-time systems at a very high level of abstraction.},
postscript = {fraenzle99c.ps}
}
M. Grabowski und H. Hungar, "On the existence of effective Hoare logics" in Proc. 3rd IEEE Symp. on Logic in Comp. Sc., 1988.
@INPROCEEDINGS{hungar:GrHu88,
author = {Michal Grabowski and Hardi Hungar},
title = {On the existence of effective {H}oare logics},
booktitle = {3rd IEEE Symp.\ on Logic in Comp.\ Sc.},
year = {1988},
pages = {428--435},
key = {GrHu88}
}
H. Hungar, "Correctness of programs over poor signatures" in Proc. Foundations of Software Technology and Theoretical Comp. Sc., 1991.
@INPROCEEDINGS{hungar:Hun91c,
author = {Hardi Hungar},
title = {Correctness of programs over poor signatures},
booktitle = {Foundations of Software Technology and Theoretical Comp.\ Sc.},
year = {1991},
editor = {S. Biswas and K. V. Nori},
series = {LNCS 560},
pages = {109--120},
key = {Hun91c}
}
H. Hungar, Specification and Verification Using a Visual Formalism on Top of Temporal LogicSpringer.
@INCOLLECTION{hungar:Hun96e,
author = {H. Hungar},
title = {Specification and Verification Using a Visual Formalism on Top of Temporal Logic},
booktitle = {Formal Systems Specification: The RPC-Memory Specification Case Study},
publisher = {Springer},
year = {1996},
editor = {Manfred Broy and Stephan Merz and Katharina Spies},
series = {LNCS 1169},
pages = {305--339},
key = {Hun96e}
}
H. Hungar, "Complexity of proving program correctness" in Proc. Theoretical Aspects of Computer Software, 1991.
@INPROCEEDINGS{hungar:Hun91b,
author = {Hardi Hungar},
title = {Complexity of proving program correctness},
booktitle = {Theoretical Aspects of Computer Software},
year = {1991},
editor = {T. Ito and A. R. Meyer},
series = {LNCS 526},
pages = {459--474}
}
H. Hungar, "Model Checking and Higher-Order Recursion" in Proc. Math. Found. of Comp. Sc., 1999.
@INPROCEEDINGS{hungar99MFCS,
author = {Hardi Hungar},
title = {Model Checking and Higher-Order Recursion},
booktitle = {Math.\ Found.\ of Comp.\ Sc.},
year = {1999},
editor = {Miros{\l}aw Kuty{\l}owski and Leszek Pacholski and Thomasz Wierzbicki},
series = {LNCS 1672},
pages = {149--159},
publisher = {Springer},
abstract = {Since Muller and Schupp have shown in 1985 that monadic second-order logic (MSOL) is decidable for context-free graphs, several specialized procedures have been developed for related problems, mostly for sublogics like the modal mu-calculus, or even its alternation-free fragment. This work shows the decidability of S1S, the trace version of MSOL, for the richer set of \emph{macro graphs}. The generation mechanism of macro graphs is of higher-order nature and relates to the context-free one like macro grammars [Fischer, 1968] relate to context-free grammars. Technically, the result follows from the decidability of the emptiness problem of the trace language of a macro graph with fairness. The decision procedure is given in form of a tableau system. Soundness and completeness follow from the relation of the (finite) tableaux to their infinite unfoldings. This kind of proof promises to be helpful in the derivation of further results.},
postscript = {hungar99MFCS.ps}
}
H. Hungar, O. Grumberg, und W. Damm, "What if model checking must be truly symbolic" in Proc. Work. Conf. on Correct Hardware Design and Verification Methods, 1995.
@INPROCEEDINGS{hungar:HGD95,
author = {H. Hungar and O. Grumberg and W. Damm},
title = {What if model checking must be truly symbolic},
booktitle = {Work.\ Conf.\ on Correct Hardware Design and Verification Methods},
year = {1995},
editor = {P. Camurati and H. Eveking},
series = {LNCS 987},
pages = {1--20},
publisher = {Springer},
key = {HGD95}
}
H. Hungar und B. Steffen, "Local model checking for context-free processes" in Proc. 20th Int. Coll. on Automata, Languages and Programming, 1993.
@INPROCEEDINGS{hungar:HuSt93,
author = {H. Hungar and B. Steffen},
title = {Local model checking for context-free processes},
booktitle = {20th Int.\ Coll.\ on Automata, Languages and Programming},
year = {1993},
editor = {A. Lingas and R. Karlsson and S. Carlsson},
series = {LNCS 700},
pages = {593--605},
publisher = {Springer},
key = {HuSt93}
}
H. Hungar und B. Steffen, "Local model checking for context-free processes" Nordic J. of Comp. vol. 1.
@ARTICLE{hungar:HuSt94,
author = {H. Hungar and B. Steffen},
title = {Local model checking for context-free processes},
journal = {Nordic J.\ of Comp.},
year = {1994},
volume = {1},
pages = {364--385},
key = {HuSt94}
}
B. Josko, "Verifying the correctness of AADL modules using model checking" in Proc. Stepwise Refinement of Distributed Systems. Models, Formalisms, Correctness, 1990.
@INPROCEEDINGS{josko90a,
author = {Bernhard Josko},
title = {Verifying the correctness of {AADL} modules using model checking},
booktitle = {Stepwise Refinement of Distributed Systems. {Models, Formalisms, Correctness}},
year = {1990},
editor = {Jaco W. de Bakker and Willem-Paul de Roever and Grzegorz Rozenberg},
series = {Lecture Notes in Computer 430},
pages = {386--400},
publisher = {Springer-Verlag},
abstract = {This paper presents a temporal logic MCTL which is suitable for modular specification and verification of computer architectures. MCTL has the advantage that open systems can be specified and verified; i.e.\ it allows the specification of properties under some assumptions on the environment. The module concept may help to solve the state explosion problem in the verification of temporal logic specifications. To verify the correctness of an implementation we describe a model checking algorithm for that logic. }
}
B. Josko, "Context Dependent Bisimulation" in Proc. Proceedings of the 3rd Workshop on Concurrency and Compositionality, 1991.
@INPROCEEDINGS{josko91c,
author = {Bernhard Josko},
title = {Context Dependent Bisimulation},
booktitle = {Proceedings of the 3rd Workshop on Concurrency and Compositionality},
year = {1991},
editor = {Eike Best and Grzegorz Rozenberg},
series = {{GMD}-Studien Nr. 191},
pages = {155--160},
abstract = {Bisimulation is used to describe the behavioural equivalence of labelled transition systems. In [Brown, Clarke, Grumberg 1988] an analogue definition is given for state based systems (Kripke structures) and it is shown that the notion of bisimulation coincides with the equivalence induced by the temporal logic CTL*. We will generalize their results concerning weak bisimulation to reactive systems. A reactive system is an open system interacting with its environment, and consequently its behaviour depends on the actions of the environment. Hence an equivalence relation for reactive systems should include the reactions of the environment. This leads to a notion of relativized bisimulation. For action based systems such a context dependent bisimulation is given in [Larsen 1987], where the environment constraints are given by an action system too. We define a relativized (weak) bisimulation for Kripke structures where the environment constraints are given by a temporal logic specification. We show that this notion of relativized bisimulation coincides with the relativized equivalence induced by the temporal logic CTL* without the nexttime-operator. Furthermore, we show that it is possible to construct a CTL formula which uniquely characterizes a Kripke structure relatively to a given environment. }
}
B. Josko, "A Context Dependent Equivalence Relation between Kripke structures" in Proc. Computer-Aided Verification '90, 1991.
@INPROCEEDINGS{josko91a,
author = {Bernhard Josko},
title = {A Context Dependent Equivalence Relation between {K}ripke structures},
booktitle = {Computer-Aided Verification '90},
year = {1991},
editor = {E. M. Clarke and R. P. Kurshan},
series = {{DIMACS} Series in Discrete Mathematics and Theoretical Computer Science, Volume 3},
pages = {341--358},
publisher = {American Mathematical Society},
abstract = {In [BCG87] Browne, Clarke and Grumberg define a bisimulation relation on Kripke structure and give a characterization of this equivalence relation in temporal logic. We will generalize their results to reactive systems, which are modelled by Kripke structures together with some constraints describing some requirements how the environment has to interact with the module. Our results subsume the result of [BCG87] by using the constraint {\em true}. Furthermore, it answers the questions raised in that paper how the equivalence of Kripke structures with fairness constraints can be characterized.}
}
B. Josko, "A Context Dependent Equivalence Relation between Kripke structures. (Extended Abstract)" in Proc. Computer-Aided Verification 1990, Proceedings, 1991.
@INPROCEEDINGS{josko91b,
author = {Bernhard Josko},
title = {A Context Dependent Equivalence Relation between {K}ripke structures. (Extended Abstract)},
booktitle = {Computer-Aided Verification 1990, Proceedings},
year = {1991},
editor = {E. M. Clarke and R. P. Kurshan},
series = {Lecture Notes in Computer Science 531},
pages = {204--213},
publisher = {Springer-Verlag},
abstract = {In [BCG88] Browne, Clarke and Grumberg define a bisimulation relation on Kripke structure and give a characterization of this equivalence relation in temporal logic. We will generalize their results to reactive systems, which are modelled by Kripke structures together with some constraints describing some requirements how the environment has to interact with the module. Our results subsume the result of [BCG88] by using the constraint {\em true}. Furthermore, it answers the questions raised in that paper how the equivalence of Kripke structures with fairness constraints can be characterized. }
}
B. Josko, "Modelchecking of CTL Formulae under Liveness Assumptions" in Proc. ICALP 87, 1987.
@INPROCEEDINGS{josko87,
author = {Bernhard Josko},
title = {Modelchecking of {CTL} Formulae under Liveness Assumptions},
booktitle = {{ICALP} 87},
year = {1987},
editor = {Th. Ottmann},
series = {Lecture Notes in Computer 267},
pages = {280--289},
publisher = {Springer-Verlag},
abstract = {Our aim is a modular verification method for concurrent systems. To verify a module separated from the other components we have to assume some (correct) behaviour of these components concerning the interactions with the module under consideration. These reactions of the other modules can be described by liveness properties. Hence in a modular verification method we have to prove a formula under some liveness assumptions. A logic which is able to express the correctness of a subsystem under some liveness assumption is e.g.\ CTL* or only its linear time part TL. But model checking for CTL* is exponential in the size of a given formula. Hence, often CTL is used instead of CTL* in specifications of concurrent systems as this logic has a linear model checking algorithm. But CTL has a restricted expressive power, e.g.\ it is not expressible that some property holds under some liveness assumptions. In this paper we define a logic LCTL, which is an extension of CTL where quantifications over paths are interpreted with respect to some liveness assumptions.I.e., formulae of LCTL are pairs $(l,f)$ where $l$ is a liveness assumption (expressed in TL) and $f$ is a CTL formula. }
}
B. Josko, "Modular Specification and Verification of Reactive Systems" PhD Thesis , 1993.
@PHDTHESIS{josko93c,
author = {Bernhard Josko},
title = {Modular Specification and Verification of Reactive Systems},
school = {Universit\"at Oldenburg},
year = {1993},
type = {Habilitationsschrift},
abstract = {In this thesis we develop a theory for compositional verification of reactive systems in the framework of assumption/commitment style logic. Due to the fact that the state space of a system may grow exponentially with the number of its components (a phenomenon commonly referred to as the state explosion problem) modular and compositional verification methods are necessary to verify the correctness of large programs and systems. \parThe background of our work is twofold: On one hand it is based on temporal logic which is a comprehensive and well established specification language for expressing a wide spectrum of properties of reactive systems. On the other hand {\em assumption/commitment} style specifications have to be used to express the dependency of the behaviour of a system on the interaction with its environment; so the specification of a system is given always relatively to an expected behaviour of its environment. \par In this thesis we combine the theory of assumption/commitment specifications with the theory of {\em branching time} temporal logic and present the logic MCTL* as an extension of the branching time temporal logic CTL*. We develop a design methodology for compositional verification using assumption/commitment specifications of branching time temporal logic which subsumes the linear time approach. \par Our compositional approach overcomes the state explosion problem in a way that basic components of a complex system can be verified automatically using a special model checking algorithm. We present an efficient model checking algorithm for assumption/commitment specifications which is an extension of the well-known CTL model checker. To verify complex systems proof rules are given to derive properties of the global systems from already established properties of its components. The presented proof calculus is complete for finite systems. The feasibility of our approach is demonstrated by typical examples. \par Theoretical explorations of the temporal logic MCTL* are given. We classify the logic MCTL* within the hierarchy of branching time temporal logics and show that MCTL* subsumes the logic CTL* and can be embedded into the $\mu$-calculus of alternation depth 2. This embedding is achieved by means of a translation into ECTL, an automata extension of CTL*. Furthermore, a uniform semantics definition for CTL*, fair CTL*, MCTL* and others is given introducing the notion of extended computation trees. }
}
Jürgen Bohn, "Interaktive Synthese kommunizierender Systeme mit LAMBDA" in Proc. GI/ITG Workshop Formale Methoden zum Entwurf korrekter Systeme, Bad Herrenalb, 1993.
@INPROCEEDINGS{Bohn93a,
author = {{J{\"u}rgen Bohn}},
title = {{I}nteraktive {S}ynthese kommunizierender {S}ysteme mit {LAMBDA}},
booktitle = {{GI/ITG} Workshop Formale Methoden zum Entwurf korrekter Systeme},
year = {1993},
editor = {{Th. Kropf} and {R. Kumar} and {D. Schmid}},
pages = {116--121},
address = {Bad Herrenalb},
month = mar, organization = {GI/ITG},
publisher = {Universit{\"a}t Karlsruhe, Interner Bericht Nr. 10/93},
abstract = { },
postscript = {Bohn93a.ps.gz}
}
J. Klose, "Erweiterte Message Sequence Charts für die Verifikation von Statemate-Entwürfen" in Proc. Informatik'99 - Informatik überwindet Grenzen, 29. Jahrestagung der Gesellschaft für Informatik, 1999.
@INPROCEEDINGS{klose99b,
author = {Jochen Klose},
title = {Erweiterte {M}essage {S}equence {C}harts f\"ur die {V}erifikation von {S}tatemate-{E}ntw\"urfen},
booktitle = {Informatik'99 - Informatik \"uberwindet Grenzen, 29. Jahrestagung der Gesellschaft f\"ur Informatik},
year = {1999},
editor = {K. Beiersd\"orfer and G. Engels and W. Sch\"afer},
pages = {181-189},
publisher = {Springer Verlag},
abstract = {Das DFG Schwerpunktprogramm \"Integration von Techniken der Softwarespezifikation f\"ur ingenieurwissenschaftliche Anwendungen\" besch\"aftigt sich mit dem Zusammenspiel Beschreibungstechniken der Informatik und der Ingeniuerwissenschaften bei der Spezifikation von Software. Dieser Artikel stellt die Arbeiten des Einzelprojektes \"Use-case driven Specification of Engineering Applications\" vor. Es wird eine kurze Einführung in die Thematik des Schwerpunktprogramms gegeben, sowie das Vorgehen bei der Verifikation von Statemate-Entw\"urfen erl\"autert. Es wird ebenfalls eine kurze Einf\"uhrung in den Industriestandard \"Message Sequence Charts\" gegeben, bevor die Erweiterungen dieses Standards vorgestellt werden.}
}
F. Liu und T. Peikenkamp, "Evaluation and Parallelization of Functions in Functional Logic Languages" in Proc. Proc. of the 4th International Workshop on the Parallel Implementation of Functional Languages, Aachen, Germany, 1992.
@INPROCEEDINGS{LP92,
author = {F. Liu and T. Peikenkamp},
title = {Evaluation and Parallelization of Functions in Functional Logic Languages},
booktitle = {Proc. of the 4th International Workshop on the Parallel Implementation of Functional Languages},
year = {1992},
address = {Aachen, Germany},
month = {September}
}
F. Liu, T. Peikenkamp, und W. Damm, "An extended gradient model for NUMA multiprocessors" in Proc. Algorithms, Concurrency and Knowledge, Proc. Asian Computing Science Conference, 1995.
@INPROCEEDINGS{liu95a,
author = {F. Liu and T. Peikenkamp and W. Damm},
title = {An extended gradient model for {NUMA} multiprocessors},
booktitle = {Algorithms, Concurrency and Knowledge, Proc.\ Asian Computing Science Conference},
year = {1995},
editor = {K. Kanchanasut and J.-J. L{\'e}vy},
volume = {1023},
series = {Lecture Notes in Computer Science},
pages = {210--224},
abstract = {In this paper, we present the design and implementation of an effective and scalable dynamic load balancing system for Non-Uniform Memory Access (NUMA) multiprocessors where load balancing is a key issue to achieve adequate efficiency. The proposed load balancing algorithm extends the well-known gradient model to enhance its applicability in a wide range of multiprocessor systems and to improve the overall system performance. A comparative performance study between the two models based on the preliminary simulation results is also reported in the paper.},
postscript = {liu95a.ps}
}
K. Lüth, "The ICOS Synthesis Environment" in Proc. Formal Techniques in Real-Time and Fault-Tolerant Systems, 1998.
@INPROCEEDINGS{lueth98b,
author = {L{\"u}th, Karsten},
title = {The {ICOS} {S}ynthesis {E}nvironment},
booktitle = {Formal Techniques in Real-Time and Fault-Tolerant Systems},
year = {1998},
editor = {Ravn, A.P. and Rischel, H.},
volume = {1486},
series = {LNCS},
pages = { 294--297},
month = {September},
publisher = {Springer Verlag},
abstract = {This paper presents an overview of the ICOS system, a design environment for control-dominated reactive systems, which is based on a graphical specification language called real-time symbolic timing diagrams. ICOS offers a broad set of tools to create, verify, and to synthesize hardware or software code from timing diagram specifications. },
postscript = {lueth98b.ps}
}
K. Lüth, "From Real-Time Timing Diagrams to Silicon: Compiling Real-Time R equirement Specifications" in Proc. 5th International Conference on Information Systems, Analysis an d Synthesis (ISAS'99 together with SCI'99), 1999.
@CONFERENCE{lueth99a,
author = {Karsten L{\"u}th},
title = {From Real-Time Timing Diagrams to Silicon: Compiling Real-Time R equirement Specifications},
booktitle = {5th International Conference on Information Systems, Analysis an d Synthesis (ISAS'99 together with SCI'99)},
year = {1999},
editor = {Michel Torres and Belkis Sanchez and Addelaziz Bouras and Weimin g Shen},
pages = {152--159},
month = {August},
organization = {International Institute of Informatics and Systemics together with IEEE},
abstract = {Formalized languages are now widely used to specify protocols for hardware-like systems. In this article we present tools which generate executable code from requirements that are expressed in a formalized graphical real-time specification language, the so-called {\em Real Time Symbolic Timing Diagrams} (or RTSTD, for short). The first set of tools automatically derives a prototype implementation of the specified component,which is correct by construction in respect to the specification. The second set of tools produces executable code, which can be used during testing to check whether the component under test satisfies or violates the requirements. },
postscript = {lueth99a.ps}
}
K. Lüth, A. Metzner, T. Peikenkamp, und J. Risau, "The EVENTS Approach to Rapid Prototyping for Embedded Control Systems" in Proc. Workshops zur Architektur von Rechensystemen:ARCS '97, Rostock, Germany, 1997.
@INPROCEEDINGS{peikenkamp97a,
author = {K. L{\"u}th and A. Metzner and T. Peikenkamp and J. Risau},
title = {The {EVENTS} Approach to Rapid Prototyping for Embedded Control Systems},
booktitle = {Workshops zur Architektur von Rechensystemen:ARCS '97},
year = {1997},
editor = {R. Hoffmann and B. Klauer and Ch. M\"uller-Schloer and K.D. Reinatz and D. Tavangarian and K. Waldschmidt and H. Ch. Zeidler},
pages = {45-54},
address = {Rostock, Germany},
month = sep, organization = {ITG and GI},
abstract = {This paper presents a prototyping system for embedded control applications (ECAs) which is currently being developed at the Computer Architecture group of the University of Oldenburg. Part of this system is a hardware architecture which acts as a target for prototyping and uses multithreaded processors to aim at those ECAs that require fast reaction to external events (i.e. sensor input). The other part consists of software tools that allow users to automatically generate code for this architecture using graphical specification languages.},
html = {http://ca.informatik.uni-oldenburg.de/publications/zes97/zes97.html},
postscript = {peikenkamp97a.ps}
}
K. Lüth, J. Niehaus, und A. Metzner, "A Statemate-based Rapid Prototyping Environment" in Proc. 6. Deutsches Anwenderforum für Statemate, 1998.
@INPROCEEDINGS{lueth98c,
author = {L{\"u}th, Karsten and Niehaus, J{\"ur}gen and Metzner, Alexander},
title = {A Statemate-based Rapid Prototyping Environment},
booktitle = {6. {D}eutsches {A}nwenderforum f{\"ur} Statemate},
year = {1998},
month = may, abstract = {This paper presents a rapid prototyping environment for hardware/software codesign of embedded control applications in which Statemate is used as specification and code-synthesis tool. The environment, which is currently being developed at the Computer Architecture Group of the University of Oldenburg, consists of a programmable FPGA field, processor boards, and a programming environment which automates all synthesis steps from the initial Statemate model down to executable hardware and software code. },
postscript = {lueth98c.ps}
}
K. Lüth, . Peikenkamp, und J. Niehaus, "HW/SW Cosynthesis using Statecharts and Symbolic Timing Diagrams" in Proc. Proceedings of the 9th IEEE International Workshop on Rapid System Prototyping, 1998.
@INPROCEEDINGS{lueth98a,
author = {L{\"u}th, Karsten and Peikenkamp, {T}homas and Niehaus, J{\"u}rgen},
title = {{HW/SW} {C}osynthesis using {S}tatecharts and {S}ymbolic {T}iming {D}iagrams},
booktitle = {Proceedings of the 9th {IEEE} International Workshop on {R}apid {S}ystem {P}rototyping},
year = {1998},
month = {Juni},
abstract = {This paper presents a hardware/software cosynthesis environment for embedded systems which is currently being developed at the Computer Architecture Group of the University of Oldenburg. We use two graphical formalisms as specification languages and synthesize code for a multi-processor rapid prototyping board. The two major problems we deal with are first, to realize an efficient distributed execution of the specified system and second, to develop automated interface-code generation for the hardware and software parts of the system under design.},
postscript = {lueth98a.ps}
}
A. Lüdtke, "Abstraktionsbasierte Erklärungen für Prognose und Diagnose mit Bayes-Netzen" in Proc. Beiträge zum 8. Arbeitstreffen der GI-Fachgruppe 1.1.5/7.0.1 "`Intelligente Lehr-und Lehrsysteme"', Duisburg, 18.-19. September 1997, "`Blaue Berichte"' der TU München, 1997.
@INPROCEEDINGS{Luedtke1997a,
author = {Lüdtke, A.},
title = {{Abstraktionsbasierte Erklärungen für Prognose und Diagnose mit Bayes-Netzen}},
booktitle = {{Beiträge zum 8. Arbeitstreffen der GI-Fachgruppe 1.1.5/7.0.1 "`Intelligente Lehr-und Lehrsysteme"', Duisburg, 18.-19. September 1997, "`Blaue Berichte"' der TU München}},
year = {1997},
editor = {C. Herzog},
series = {Blaue Berichte},
publisher = {TU München},
owner = {luedtke},
timestamp = {2006.10.13}
}
A. Lüdtke, "Intervention bei Sorglosigkeit in der Sicherheitsanalyse. Abschlußbericht des Projektes SUCCESS (Support for Safety Critical Complex Embedded Systems" Oldenburger Forschungs- und Entwicklungsinstitut für Informatik-Werkzeuge und -Systeme, Forschungsbereich Eingebettete Systeme1999.
@TECHREPORT{Luedtke1999,
author = {Lüdtke, A.},
title = {{Intervention bei Sorglosigkeit in der Sicherheitsanalyse. Abschlußbericht des Projektes SUCCESS (Support for Safety Critical Complex Embedded Systems}},
institution = {{Oldenburger Forschungs- und Entwicklungsinstitut für Informatik-Werkzeuge und -Systeme, Forschungsbereich Eingebettete Systeme}},
year = {1999},
owner = {luedtke},
timestamp = {2006.12.13}
}
A. Lüdtke, Abstraktionsbasierte Erklärungen für Wahrscheinlichkeitsberechnungen mit Bayes-Netzen, Carl von Ossietzky Universität Oldenburg, Fachbereich Informatik, Ammerländer Heerstraße 114-118, 26129 Oldenburg, Deutschland.
@BOOK{Luedtke1997, title = {Abstraktionsbasierte Erklärungen für Wahrscheinlichkeitsberechnungen mit Bayes-Netzen},
publisher = {{Carl von Ossietzky Universität Oldenburg, Fachbereich Informatik, Ammerländer Heerstraße 114-118, 26129 Oldenburg, Deutschland}},
year = {1997},
author = {Lüdtke, A.},
owner = {luedtke},
timestamp = {2006.12.13}
}
A. Mikschl und W. Damm, "MSparc: A Multithreaded Sparc" Lecture Notes on Computer Science.
@ARTICLE{mikschl96a,
author = {A. Mikschl and W. Damm},
title = {MSparc: A Multithreaded Sparc},
journal = {Lecture Notes on Computer Science},
year = {1996},
abstract = {This paper presents a multithreaded processor, the MSparc. MSparc supports up to four contexts on chip and employs block multithreading. The processor is compatible to standard Sparc processors making multithreading completely transparent to application programs. Switching can be done by hardware or software and is achieved within one processor cycle. Preliminary performance evaluations in a NUMA architecture with weak cache coherence show processor utilization of up to 83\%.},
postscript = {mikschl96a.ps}
}
C. Möbus und A. Lüdtke, "Eingebettete Systeme: Wissensakquisition für die Risikoanalyse." Oldenburger Forschungs- und Entwicklungsinstitut für Informatik-Werkzeuge und -Systeme, Jahresbericht 19981999.
@TECHREPORT{MoebusLuedtke1999,
author = {M{\"o}bus, C. and L{\"u}dtke, A.},
title = {{Eingebettete Systeme: Wissensakquisition für die Risikoanalyse.}},
institution = {{Oldenburger Forschungs- und Entwicklungsinstitut für Informatik-Werkzeuge und -Systeme, Jahresbericht 1998}},
year = {1999},
owner = {luedtke},
pages = {42-44},
timestamp = {2006.12.13}
}
J. R. (. Niehaus), A. Mikschl, und W. Damm, "A RISC Approach to Weak Cache Coherence" in Proc. Euro-Par'96 Parallel Processing: Second International Euro-Par Conference, Vol. II, 1996.
@INPROCEEDINGS{risau96a,
author = {J\"urgen Risau (now: Niehaus) and Alfred Mikschl and Werner Damm},
title = {A {RISC} Approach to Weak Cache Coherence},
booktitle = {Euro-Par'96 Parallel Processing: Second International Euro-Par Conference, Vol. II},
year = {1996},
editor = {Luc Bouge and Pierre Fraigniaud and Anne Mignotte and Yves Robert},
series = {LNCS 1124},
pages = {453-456},
organization = {Springer Verlag},
abstract = {Data used by parallel programs can be divided into classes, based on how threads access it. For different classes of data different coherence mechanisms might be optimal. This paper presents four primitives designed for use in a shared memory multiprocessor system, where each processor has its private cache. Using these primitives, programmers can implement those coherence models that are best suited to their applications. The paper gives a description of the primitives and some implementation details. },
postscript = {risau96a.ps}
}
J. R. (. Niehaus), A. Mikschl, und W. Damm, "Implementation of a New Weak Cache Coherence Protocol" CvO University of Oldenburg1996.
@TECHREPORT{risau96b,
author = {J\"urgen Risau (now: Niehaus) and Alfred Mikschl and Werner Damm},
title = {Implementation of a New Weak Cache Coherence Protocol},
institution = {CvO University of Oldenburg},
year = {1996},
abstract = { Most strong cache coherence protocols provide a sequential consistent memory model. Weak coherence models often give an, albeit restricted, view of this model, too. However, there are many different possibilities to write parallel programs and not all of them are based on sequential consistency. This paper presents a new cache coherence protocol that provides many different ways of implementing coherence and synchronization. Using this protocol threads can exploit knowledge about how they use data and decide which coherence scheme to use. An implementation of the protocol in a NUMA environment is described in detail and discussed. This is a long version of "A RISC Approach to Weak Cache Coherence" by the same authors.},
postscript = {risau96b.ps}
}
J. R. (. Niehaus), A. Stermann, und W. Damm, "Software Controlled Cache Coherence in Shared-Memory Multiprocessors" CvO University of Oldenburg1996.
@TECHREPORT{risau96c,
author = {J\"urgen Risau (now: Niehaus) and Astrid Stermann and Werner Damm},
title = {Software Controlled Cache Coherence in Shared-Memory Multiprocessors},
institution = {CvO University of Oldenburg},
year = {1996},
abstract = { During the last few years many different memory consistency protocols have been proposed. These range from strong models like sequential consistency or processor consistency to weak ones like weak ordering, release consistency and SCNF. Implementations of these protocols are usually transparent to application programs: They try to hide as much detail as possible, usually leaving 'well behaved' applications with a sequential consistent memory view. There are two reasons why a different approach to memory consistency is chosen in this paper. On one hand this transparency of protocols imposes a limit on the amount of information about data access categories that can be given by applications. More information could reduce coherence overhead substantially. On the other hand sequential consistency is not the only feasible programming model for writing parallel programs. Most applications do not rely on the strong limitations given by it, because they synchronize to access shared data. We therefore propose processor primitives that allow applications to implement different consistency schemes for accesses to different data objects. We also describe the implementation of these primitives in a bus-based shared memory NUMA-Architecture. To show the feasibility of such an architecture, preliminary performance results using or-parallel Prolog programs are given.},
postscript = {risau96c.ps}
}
R. Schlör, "A Prover for VHDL-based Hardware Design" in Proc. IFIP International Conference on Computer Hardware Description Languages and their Applications, 1995.
@INPROCEEDINGS{Schloer95,
author = {R. Schl{\"o}r},
title = {A {P}rover for {VHDL}-based {H}ardware {D}esign},
booktitle = {{IFIP} International Conference on Computer Hardware Description Languages and their Applications},
year = {1995},
pages = {643-650},
month = {September},
abstract = {This paper gives a survey over a self--contained part of the ESPRIT-project ``FORMAT'', which developes a {\em prover} for VHDL--based hardware design. Notable is the use of a {\em graphical} specification language called STD , which can be seen as a visual dialect of temporal logic. The heart of the prover is built by two powerful industrial verification tools: A (compositional) symbolic model checker (developed by SIEMENS), and the LAMBDA--theorem prover (developed by AHL). The aim of this paper is to describe (1) the various tools integrated in the prover, (2) the graphical specification language STD with its associated design methodology, and (3) to explain how proofs about {\em generic} (parameterized) designs are performed in the prover, using a combination of automatic and interactive reasoning.},
postscript = {Schloer95.ps}
}
R. Schlör, A. Allara, und S. Comai, "System Verification using User-Friendly Interfaces" in Proc. Design, Automation and Test in Europe / User Forum, 1999.
@INPROCEEDINGS{SchloerAllaraComai99,
author = {R. Schl{\"o}r and A. Allara and S. Comai},
title = {{S}ystem {V}erification using {U}ser-{F}riendly {I}nterfaces},
booktitle = {Design, Automation and Test in Europe / User Forum},
year = {1999},
pages = {167--172},
publisher = {IEEE Computer Society Press},
abstract = {This paper reports on the use of a verification environment for VHDL based on automatic verification techniques 1. The paper focuses on two different aspects: (1) A graphical language and interface for the specification of properties called STDx (extended Symbolic Timing Diagrams) is described and its application is illustrated. (2) A methodology for formal verification of system properties based on a combination of modelchecking and tautology-checking is suggested. - A first account of successful application of the techniques on a selected industrial design is given.},
postscript = {SchloerAllaraComai99.ps}
}
R. Schlör und W. Damm, "Specification and Verification of System-Level Hardware Designs using Timing Diagrams" in Proc. Proceedings, The European Conference onDesign Automation, Paris, France, 1993.
@INPROCEEDINGS{SchloerDamm93,
author = {R. Schl{\"o}r and W. Damm},
title = {Specification and Verification of System-Level Hardware Designs using Timing Diagrams},
booktitle = {Proceedings, The European Conference onDesign Automation},
year = {1993},
pages = {518-524},
address = {Paris, France},
publisher = {IEEE Computer Society Press},
abstract = {In this paper we present a novel approach to the specification and verification of system-level hardware designs. It is based on Timing Diagrams, a graphical specification language with an intuitive semantics, which is especially appropriate for the description of asynchronous distributed systems such as hardware designs. Timing Diagrams and their semantics are formally defined based on a translation to Temporal Logic. It is shown that for the resulting type of formulas there is an efficient modelchecking procedure, thus allowing fully automatic verification of hardware designs.},
postscript = {SchloerDamm93.ps}
}
R. Schlör, B. Josko, und D. Werth, "Using a visual formalism for design verification in industrial environments" in Proc. VISUAL'98, 1998.
@INPROCEEDINGS{SchloerJoskoWerth98,
author = {R. Schl{\"o}r and B. Josko and D. Werth},
title = {Using a visual formalism for design verification in industrial environments},
booktitle = {VISUAL'98},
year = {1998},
series = {Lecture Notes in Computer Science 1385},
pages = {208--221},
publisher = {Springer-Verlag},
abstract = { This paper reports experiences and results gained during the evaluation of the visual formalism {\em STD} as specification method for formal verification, performed in cooperation with industrial partners. The visual formalism {\em STD} ({\em S}ymbolic {\em T}iming {\em D}iagrams) was developed continuously since 1993 by OFFIS as a specification method, which satisfies several needs: (1) It is based on the principles used in the familiar notation of timing diagrams (as conventionally used by hardware designers). (2) It is a method amenable to formal verification, using state--of--the art verification tools efficiently (in particular, symbolic model--checking). (3) It supports {\em compositional} verification, which is an approach to verify large designs in a compositional way (breaking up proofs of requirements stated for a full design into a sequence of smaller proof tasks, which imply the global proof task). The formalism (with the supporting tools) has been integrated into an established verification environment ({\em CheckOff--M}), which allows to verify industrial--scale designs by model--checking.},
postscript = {SchloerJoskoWerth98.ps.gz}
}
G. Schumacher, B. Josko, G. Wagner, und M. Radetzki, "Development of a Telephone Answering Machine in a Lab - FPGAs in Education" in Proc. Sixth International Workshop on Field Programmable Logic and Applications, FPL'96, 1996.
@INPROCEEDINGS{josko96,
author = {Guido Schumacher and Bernhard Josko and Gerhard Wagner and Martin Radetzki},
title = {Development of a Telephone Answering Machine in a Lab - {FPGAs} in Education},
booktitle = {Sixth International Workshop on Field Programmable Logic and Applications, {FPL'96}},
year = {1996},
series = {Lecture Notes in Computer Science 1142},
pages = {400--404},
publisher = {Springer-Verlag},
abstract = {Practical experiences with state-of-the-art synthesis and simulation tools are fundamental in the education of hardware designers. To understand the difficulties and problems in IC design, students should train each step in a design flow including the test of the completed system. We present our experience obtained in a one term lab using FPGAs as target technology. }
}
Compositionality: The Significant DifferenceSpringer-Verlag.
@PROCEEDINGS{LNCS1536, title = {{Compositionality: The Significant Difference}},
year = {1998},
editor = {H.~Langmaack and A.~Pnueli and W.P.~de~Roever},
volume = {1536},
series = {Lecture Notes in Computer Science},
publisher = {Springer-Verlag}
}
Tenth International Symposium on System SynthesisIEEE CS Press.
@PROCEEDINGS{ISSS97, title = {{Tenth International Symposium on System Synthesis}},
year = {1997},
publisher = {IEEE CS Press},
month = SEP, key = {ISSS}
Dokument aufrufenW. D. Eckard Böde Matthias Büker, M. Fränzle, B. Kramer, C. Neurohr, und S. V. Maelen, "Identifikation und Quantifizierung von Automationsrisiken für hochautomatisierte Fahrfunktionen" , techreport , 2019.