Traces are used to show whether a model complies with the intended behavior. A modeler
can use trace checking to ensure the preservation of the model behavior during the …

We provide a detailed description of refinement in Event-B, both as a contribution in itself
and as a foundation for the approach to simultaneous animation of multiple levels of …

The MCS list-based queuing lock (MCS) is a mutual exclusion protocol whose variants have
been used in Java virtual machines. MCS is specified as a state machine in Maude, a …

Refinement guarantees that the concrete version of a model does not violate the constraints
introduced at the abstract level. The peculiarity of refinement, however, is that we have no …

Formal specification can benefit software quality by precisely defining the behaviors of
operations to prevent primary mistakes in the early phase of software projects, but a …

The development of the Event-B formal method and the supporting tools Rodin and ProB
was guided by practical experiences with the B-Method, the Z specification notation, VDM …

The technical and academic aspects of the Event-B method, and the abstract description of
its application in industrial contexts are the subjects of numerous publications. In this paper …

The Event-B method can be used to model all sorts of discrete event systems, among them
sequential programs. In this article we describe our experiences with using Event-B by way …

Due to the popularity of object-oriented programming approaches, there is a growing
interest in utilizing object-oriented concepts, such as encapsulation and reuse, when …

This thesis is concerned with the development of interactive systems for smart environments.
One of the characteristic of smart environments is the need to support different interaction …