The hemodialysis machine case study is examined in Hybrid Event-B (an extension of Event-
B that includes provision for continuously varying behaviour as well as the usual discrete …

A system development case study problem based on a set of aircraft landing gear is
examined in Hybrid Event-B (an extension of Event-B that includes provision for …

Any reasonable implementation of privacy requirements can not be made through legal
compliance alone. The belief that a software system can be developed without privacy being …

Designing hybrid systems requires the handling of discrete and continuous behaviours. The
formal verification of such systems revolves around the use of heavy mathematical features …

Retrenchment is a flexible model evolution formalism that compensates for the limitations
imposed by specific formulations of refinement. Its refinement-like proof obligations feature …

Retrenchment is a flexible model evolution formalism that arose as a reaction to the
limitations imposed by refinement, and for which the proof obligations feature additional …

It is widely agreed that building correct fault-tolerant systems is very difficult. To address this
problem, this paper introduces a new model-based approach for developing masking fault …

Refinement of formal system models towards implementation has been a mainstay of system
development since the inception of formal and Correct by Construction approaches to …

The cardiac pacemaker system, proposed as a problem topic in the Verification Grand
Challenge, offers a range of difficulties to address for formal specification, development, and …

A very simple model for train stopping is used as a vehicle for investigating how the
development of a control system, initially designed in the continuous domain and …