We present a type theory for higher-order modules that accounts for many central issues in
module system design, including translucency, applicativity, generativity, and modules as …

A hierarchical module system is an effective tool for structuring large programs. Strictly
hierarchical module systems impose an acyclic ordering on import dependencies among …

The formulation and analysis of a design specification is almost always of more utility than
the verification of the consistency of a program with its specification. Good specification tools …

A major problem in verifying the security of code is that the code's large size makes it much
too costly to verify in its entirety. This article describes a novel and practical approach to …

We propose checking the execution of an abstract data type's imperative implementation
against its algebraic specification. An explicit mapping from implementation states to …

Classical specification and verification techniques support invariants for individual objects
whose fields are primitive values, but do not allow sound modular reasoning about …

This paper explores the interpretation of specifications in the context of an object-oriented
programming language with subclassing and method overrides. In particular, the paper …

We describe a plan to create an auditable version of Multics. The engineering experiments
of that plan are now complete. Type extension as a design discipline has been …

Structured Analysis and System Specification Page 1 Original Historic Documents 529
Structured Analysis and System Specification Yourdon, New York, 7978 pp.7-7and37-44 M …

We describe a framework for compositional verification of finite-state processes. The
framework is based on two ideas: a subset of the logic CTL for which satisfaction is …