Formal Methods for the International Space Station ISS - Correct System Design: Recent Insights and Advances - page 375

Acknowledgements. The authors would like to express their gratitude to Hans
Langmaack for supporting their scientic careers. His knowledge, views and
philosophical attitude towards Formal Methods, Mathematics, and Computer
Science have stimulated our research work in an invaluable way.
The work presented in this article summarises results that would not have
been obtained without the considerable contributions of our collaborators Rachel
Cardell-Oliver (University of Essex), Hans-Joachim Kolinowitz, Michel Kou-
varas, and Gerd Urban (DaimlerChrysler Aerospace Bremen), Hui Shi and Hol-
ger Schlinglo (TZI-BISS at the University of Bremen).

References

1. Booch, G., Rumbaugh, J. and Jacobsen, I.: The Unied Modeling Language User
Guide. Addison-Wesley (1998).
2. Booch, G., Rumbaugh, J. and Jacobsen, I.: The Unied Modeling Language Ref-
erence Manual. Addison-Wesley (1999).
3. Buth, B., Cardell-Oliver, R., Peleska, J.: Combining tools for the verication of
fault-tolerant systems. In Berghammer, R., Buth, B., Peleska, J. (eds.), Tools for
Software Development and Verication , Monographs of the Bremen Institute of
Safe Systems 1, Shaker Verlag, (1998), ISBN 3-8265-3806-4.
4. Bettina Buth: PAMELA+PVS (Abstract for Tool Demo) In Michael John-
son (Ed.): Algebraic Methodology and Software Technology. Proceedings of the
AMAST'97, Sidney, Australia, December 1997, Springer LNCS 1349 (1997), 560-
562.
5. Buth, B., Kouvaras, M., Peleska, J., Shi, H.: Deadlock analysis for a fault-tolerant
system. In Johnson, M. (ed.), Algebraic Methodology and Software Technology.
Proceedings of the AMAST'97 , number 1349 in LNCS, pages 60{75. Springer, De-
cember 1997.
6. Buth, B., Peleska, J., Shi, H.: Combining Methods for the Livelock Analysis of
a Fault-Tolerant System. In A. M. Haeberer (Ed.): Algebraic Methodology and
Software Technology. Proceedings of the 7th International Conference, AMAST
98, Amazonia, Brazil, January 1999. Springer LNCS 1548, pp. 124-139, 1998.
7. Buth, B., Peleska, J., Shi, H.: Combining Methods for the Analysis of a Fault-
Tolerant System. CD-ROM Proceedings of the 12th International Software Quality
Week, May 24-28, 1999, Software Research Institute.
8. Dierks, H.: PLC-Automata: A New Class of Implementable Real-Time Automata.
In M. Bertran and T. Rus, editors, Transformation-Based Reactive Systems De-
velopment (ARTS'97), volume 1231 of Lecture Notes in Computer Science, pages
111-125. Springer-Verlag, 1997.
9. Formal Systems: FDR2 User Manual Formal Systems (Europe) Lts (1997). Avail-
able under http://www.formal.demon.co.uk/fdr2manual/index.html
10. Gamma, E., Helm, R., Johnson, R. and Vlissides, J.: Design Patterns: Elements of
Reusable Object-Oriented Software Addison-Wesley (1995)
11. D. Harel, A. Pnueli, J. Pruzan-Schmidt and R. Sherman. On the formal semantics
of Statecharts .In Proceedings Symposium on Logic in Computer Science , (1987)
54-64.
12. Hoare, C.A.R.: Communicating Sequential Processes. Prentice-Hall International

(1985).