Background - Using Event-B for Critical Device Software Systems - page 42

29. Dobrica, L., & Niemelä, E. (2002). A survey on software architecture analysis methods.
IEEE Transactions on Software Engineering , 28 (7), 638-653.
30. Draft defence standard 00-56 (1996). Safety management requirements for defence systems
containing programmable electronics. Ministry of Defence, UK.
31. Eubanks, C. F., Kmenta, S., & Ishii, K. (1996). System behavior modeling as a basis for
advanced failure modes and effects analysis. In Proceedings of the ASME design engineering
technical conference . London: UCL Press.
32. Fankhauser, H. (2001). Safety functions versus control functions. In U. Voges (Ed.), Lecture
notes in computer science: Vol. 2187 . Computer safety, reliability and security (pp. 66-74).
Berlin: Springer.
33. FDA. Food and Drug Administration. http://www.fda.gov/ .
34. Fries, R. C. (2011). Handbook of medical device design .NewYork:Dekker.
35. Gall, H. (2008). Functional safety IEC 61508/IEC 61511 the impact to certification and the
user. In Proceedings of the 2008 IEEE/ACS international conference on computer systems
and applications , AICCSA'08 (pp. 1027-1031). Washington: IEEE Comput. Soc.
36. Gibbs, W. W. (1994). Software's chronic crisis. Scientific American , September.
37. Gordon, M. J. C. (1983). LCF-LSM: A system for specifying and verifying hardware .Uni-
versity of Cambridge Computer Laboratory.
38. Halbwachs, N., Caspi, P., Raymond, P., & Pilaud, D. (1991). The synchronous dataflow pro-
gramming language Lustre. In Proceedings of the IEEE (pp. 1305-1320).
39. Hall, A. (1996). Using formal methods to develop an ATC information system. IEEE Soft-
ware , 13 (2), 66-76.
40. Harel, D. (1987). Algorithmics: The spirit of computing . Boston: Addison-Wesley Longman.
41. Harrild, D. M., & Henriquez, C. S. (2000). A computer model of normal conduction in the
human atria. Circulation Research , 87 , 25-36.
42. Hegde, V., & Raheja, D. (2010). Design for reliability in medical devices. In Reliability and
maintainability symposium (RAMS), 2010 proceedings—annual (pp. 1-6).
43. Heimdahl, M. P. E., & Leveson, N. G. (1996). Completeness and consistency in hierarchical
state-based requirements. IEEE Transactions on Software Engineering , 22 , 363-377.
44. Hennebert, C., & Guiho, G. (1993). SACEM: A fault tolerant system for train speed con-
trol. In The twenty-third international symposium on fault-tolerant computing ,FTCS-23
(pp. 624-628). Digest of papers.
45. High Confidence Software and Systems Coordinating Group (2009). High-confidence medi-
cal devices: Cyber-physical systems for 21st century health care (Technical report). NITRD.
http://www.nitrd.gov/About/MedDevice-FINAL1-web.pdf .
46. Hiller, M., Jhumka, A., & Suri, N. (2001). An approach for analysing the propagation of
data errors in software. In Proceedings of the 2001 international conference on dependable
systems and networks (formerly: FTCS) , DSN'01 (pp. 161-172). Washington: IEEE Comput.
Soc.
47. Hinchey, M. G., & Bowen, J. P. (1995). Prentice Hall international series in computer sci-
ence. Applications of formal methods . London: Prentice Hall.
48. Hokstad, P., & Corneliussen, K. (2004). Loss of safety assessment and the IEC 61508 stan-
dard. Reliability Engineering & Systems Safety , 83 (1), 111-120.
49. Houston, I., & King, S. (1991). CICS project report experiences and results from the use of
ZinIBM.InS.Prehn&W.Toetenel(Eds.), Lecture notes in computer science: Vol. 551 .
VDM'91 formal software development methods (pp. 588-596). Berlin: Springer.
50. IEC60513 (1994). International Electrotechnical Commission: Fundamental aspects of safety
standards for medical electrical equipment. http://www.iec.ch/ .
51. IEC62304 (2006). International Electrotechnical Commission: Medical device software—
software life-cycle processes. http://www.iec.ch/ .
52. IEC60513 (2007). International Electrotechnical Commission: Medical electrical equipment.
http://www.iec.ch/ .
53. IEC61508 (2008). IEC functional safety and IEC 61508: Working draft on functional safety
of electrical/electronic/programmable electronic safety-related systems. http://www.iec.ch/ .