Modern cars have become driving computers that provide a variety of safety and comfort
functions. However, most automotive systems do not have a central computer, but typically …

Statechart modelling notations, with so-called 'run to completion'semantics and simulation
tools for validation, are popular with engineers for designing systems. However, they do not …

Given the safety-critical nature of healthcare systems, their rigorous safety assessment, in
terms of studying their behavior in the presence of potential faults and how the …

We present a formal specification and analysis of a haemodialysis machine (HD machine) in
Event-B using the Rodin Toolset. The medical device domain is a particularly complex …

Abstract Deductive Cause Consequence Analysis (Dcca) is a model checking-based safety
analysis technique that determines all combinations of faults potentially causing a hazard …

The use of software has become ubiquitous and prevalent in modern medical devices such
as hemodialysis machines. Consequently, the failure rate of medical devices due to software …

Safety-critical systems can be negatively affected by faults such as component failures or
environmental disturbances. One or more occurrences of such faults might lead to hazards …

Abstract Systems engineering concerns the complete process for the development of
complex systems comprising hardware, software, facilities and personnel. Such systems are …

The corrections of the large and complex systems have become an issue of great
importance recently due to the system development process. The device technology is quite …

This paper reports on our experiences of applying S#(“safety sharp”) to model and analyze
the case study “hemodialysis machine.” The S# safety analysis approach focuses on the …