Background - Using Event-B for Critical Device Software Systems - page 45

104. Tretmans, J., Wijbrans, K., & Chaudron, M. R. V. (2001). Software engineering with formal
methods: The development of a storm surge barrier control system revisiting seven myths of
formal methods. Formal Methods in System Design , 19 (2), 195-215.
105. Voas, J. (1997). Error propagation analysis for cots systems. Computing and Control Engi-
neering Journal , 8 (6), 269-272.
106. von Neumann, J. (1966). Theory of self-reproducing automata . Chicago: University of Illi-
nois Press. A. W. Burks (Ed.).
107. Wassyng, A., & Lawford, M. (2003). Lessons learned from a successful implementation
of formal methods in an industrial project. In K. Araki, S. Gnesi, & D. Mandrioli (Eds.),
Lecture notes in computer science: Vol. 2805 . FME 2003: Formal methods (pp. 133-153).
Berlin: Springer.
108. Wichmann, B. A., & British Computer Society (1992). Software in safety-related systems
(Special report). BCS.
109. Wilkinson, P. J., & Kelly, T. P. (1998). Functional hazard analysis for highly integrated
aerospace systems. In Certification of ground/air systems seminar (pp. 4-146). New York:
IEEE. Ref. No. 1998/255.
110. Wizemann, T. (Ed.) (2010). Public health effectiveness of the FDA 510(k) clearance process:
Balancing patient safety and innovation: Workshop report . Washington: National Academies
Press.
111. Woodcock, J., & Banach, R. (2007). The verification grand challenge. Journal of Universal
Computer Science , 13 (5), 661-668.
112. Woodcock, J., Stepney, S., Cooper, D., Clark, J. A., & Jacob, J. (2008). The certification of
the Mondex electronic purse to ITSEC level E6. Formal Aspects of Computing , 20 (1), 5-19.
113. Woodcock, J., Larsen, P. G., Bicarregui, J., & Fitzgerald, J. (2009). Formal methods: Practice
and experience. ACM Computing Surveys , 41 , 19:1-19:36.
114. Xu, H., & Maibaum, T. (2012). An Event-B approach to timing issues applied to the generic
insulin infusion pump. In Z. Liu & A. Wassyng (Eds.), Lecture notes in computer science:
Vol. 7151 . Foundations of health informatics engineering and systems (pp. 160-176). Berlin:
Springer.
115. Zhang, Y., Jones, P. L., & Jetley, R. (2010). A hazard analysis for a generic insulin infusion
pump. Journal of Diabetes Science and Technology , 4 (2), 263-283.
116. Zio, E. (2009). Reliability engineering: Old problems and new challenges. Reliability Engi-
neering & Systems Safety , 94 (2), 125-141.