Formal Methods for the International Space Station ISS - Correct System Design: Recent Insights and Advances - page 376

13. Lamport, L., Shostak, R., Pease, M.: The Byzantine Generals Problem ,In:ACM
Transactions on Programming Languages and Systems, Vol.4, Nr. 3, (1982)
14. Lankenau, A., Meyer, O. and Krieg-Bruckner, B.: Safety in Robotics: The Bremen
Autonomous Wheelchair. In: Proceedings of AMC'98 - Coimbra, 5th Int. Workshop
on Advanced Motion Control, Coimbra, Portugal 1998. ISBN 0-7803-4484-7. pp.
524-529.
15. Lankenau, A., Meyer, O.: Formal Methods in Robotics: Fault Tree Based Verica-
tion. Submitted to Quality Week Europe 99.
16. R.S.Lazic: Theories for mechanical verication of data-independent CSP ,Oxford
University Computing Laboratory technical report, 1997.
17. Lyu, M. R. (ed.): Handbook of Software Reliability Engineering , IEEE Computer
Society Press, Computing McGraw-Hill (1995).
18. Milner, R.: Communication and Concurrency. Prentice-Hall International (1989).
19. J. Peleska: Test Automation for Safety-Critical Systems: Industrial Application
and Future Developments. In M.-C. Gaudel and J. Woodcock (Eds.): FME '96:
Industrial Benet and Advances in Formal Methods. LNCS 1051, Springer-Verlag,
Berlin Heidelberg New York (1996) 39-59.
20. J. Peleska: Formal Methods and the Development of Dependable Systems. Ha-
bilitationsschrift, Bericht Nr. 9612, Dezember 1996, Institut fur Informatik und
Praktische Mathematik, Christian-Albrechts-Universitat Kiel (1997).
21. J. Peleska and M. Siegel: Test Automation of Safety-Critical Reactive Systems.
South African Computer Jounal (1997)19:53-77.
22. Peleska, J.: Testing Reactive Real-Time Systems. Tutorial, held at the FTRTFT
'98. Denmark Technical University, Lyngby (1998).
23. J. Peleska and C. Zahlten: Test Automation for Avionic Systems and Space Tech-
nology (Extended Abstract). Softwaretechnik-Trends (1999)19:34-36.
24. Roscoe, A. W.: The Theory and Practice of Concurrency. Prentice-Hall Interna-

tional (1998).
25. Shi, H., Peleska, J.: Daimler-Benz Aerospace { Project DMS-R, FTC Development
{ Fault Management Layer (FML): Verication of Byzantine Agreement Protocol
Implementation. Technical Report, JP Software-Consulting, (1998).
26. Schneider, S.: An Operational Semantics for Timed CSP. Information and Com-
putation , 116:193{213, 1995.
27. Shi, H., Peleska, J. and Kouvaras, M: Combining Methods for the Analysis of a
Fault-Tolerant System. Submitted to 1999 Pacic Rim International Symposium
on Dependable Computing (PRDC 1999).
28. M. J. Spivey. The Z Notation. Prentice-Hall International, Englewood Clis NJ

(1992).
29. Storey, N.: Safety-Critical Computer Systems. Addison-Wesley (1996).
30. L. Twele, H. Schlinglo, H. Szczerbicka: Performability Analysis of an Avionics-
Interface; Proc. IEEE Conf. on Systems, Man and Cybernetics; San Diego, N.J.,
pp. 499-504, (Oct. 1998)
31. Gerd Urban, Hans-Joachim Kolinowitz and Jan Peleska: A Survivable Avionics
System for Space Applications. Published in Proceedings of the FTCS-28, 28th
Annual Symposium on Fault-Tolerant Computing, Munich, June 23-25, 1998, 372-
381.
32. Zhiming Liu, E. V. Srensen, A. P. Ravn and Chaochen Zhou: Towards a Calculus
of System Dependability. Journal of high integrity systems (1994) 1: 49-65 .