Balancing Insight and Effort: The Industrial Uptake of Formal Methods - Formal Methods and Hybrid Real-Time Systems - page 252

50. Burdy, L., Cheon, Y., Cok, D., Ernst, M.D., Kiniry, J.R., Leavens, G.T., Leino, K.R.M.,
Poll, E.: An overview of JML Tools and Applications. Intl. Journal of Software Tools for
Technology Transfer 7, 212-232 (2005)
51. Chalin, P., Hurlin, C., Kiniry, J.: Integrating Static Checking and Interactive Verification:
Supporting Multiple Theories and Provers in Verification. In: Proceedings of Verified Soft-
ware: Tools, Technologies, and Experiences (VSTTE) (2005)
52. Clarke, E., Emerson, E., Sistla, A.: Automatic Verification of Finite-State Concurrent Sys-
tems Using Temporal Logic Specifications. ACM Transactions on Programming Languages
and Systems 8(2), 244-263 (1986)
53. McMillan, K.L.: Symbolic Model Checking. PhD thesis, Carnegie Mellon University, School
of Computer Science. Kluwer Academic Publishers, Dordrecht (1992)
54. Jackson, D.: Software Abstractions: Logic, Language, and Analysis. MIT Press, Heyward
Street, Cambridge, MA02142, USA (2006)
55. Hayes, I., Jones, C.: Specifications are not (Necessarily) Executable. Software Engineering
Journal, 330-338 (November 1989)
56. Kneuper, R.: Symbolic Execution as a Tool for Validation of Specifications. PhD thesis,
Department of Computer Science, Univeristy of Manchester (March, Technical Report Series
UMCS-89-7-1 (1989)
57. Andersen, M., Elmstrøom, R., Lassen, P.B., Larsen, P.G.: Making Specifications Executable
- Using IPTES Meta-IV. Microprocessing and Microprogramming 35(1-5), 521-528 (1992)
58. Fr ohlich, B.: Towards Executability of Implicit Definitions. PhD thesis, TU Graz, Institute
of Software Technology (September 1998)
59. Dick, J., Faivre, A.: Automating the Generation and Sequencing of Test Cases from Model-
Based Specifications. In: Larsen, P.G., Woodcock, J.C.P. (eds.) FME 1993. LNCS, vol. 670,
pp. 268-284. Springer, Heidelberg (1993)
60. Gaudel, M.C.: Testing can be formal, too. In: Mosses, P., Schwartzbach, M., Nielsen, M.
(eds.) CAAP 1995, FASE 1995, and TAPSOFT 1995. LNCS, vol. 915, pp. 82-96. Springer,
Heidelberg (1995)
61. Burdonov, I., Kossatchev, A., Petrenko, A., Galter, D.: KVEST: Automated Generation of
Test Suites from Formal Specifications. In: Wing, J.M., Woodcock, J.C.P., Davies, J. (eds.)
FM 1999. LNCS, vol. 1708, pp. 608-621. Springer, Heidelberg (1999)
62. TestingFaqs.org: Test Coverage Tools (2007), http://www.testingfaqs.org/

t-eval.html
63. van Lamsweerde, A.: Formal Specification: a Roadmap. In: ICSE '00: Proceedings of the
Conference on The Future of Software Engineering, pp. 147-159. ACM Press, New York
(2000)
64. Back, R.J.: On the Correctness of Refinement Steps in Program Development. PhD thesis,
Abo Akademi, Department of Computer Science, Helsinki, Finland Report A-1978-4 (1978)
65. Carrington, D., Hayes, I., Nickson, R., Watson, G., Welsh, J.: A Review of Existing Refine-
ment Tools. SVRC TR-94-8, University of Queensland (1994)
66. Jones, C.B.: Systematic Software Development Using VDM, 2nd edn. Prentice-Hall Interna-
tional, Englewood Cliffs, New Jersey (1990)
67. Ah-Kee, J.: Operation Decomposition Proof Obligations. PhD thesis, University of

Manchester (1989)
68. Badeau, F., Amelot, A.: Using B as a High Level Programming Language in an Industrial
Project: Roissy VAL. In: Z to B Conference / Nantes, pp. 334-354 (2005)
69. Burdy, L., J.M.: Automatic Refinement. In: Woodcock, J.C.P., Davies, J., Wing, J.M. (eds.)
FM 1999. LNCS, vol. 1709, Springer, Heidelberg (1999)