After a number of success stories in safety‐critical domains, we are starting to witness
applications of formal methods in contemporary systems and software engineering …

The validation of a formal model consists of checking its conformance with actual
requirements. In the context of (Event-) B, some temporal aspects can typically be validated …

This paper presents a specification of the hybrid ERTMS/ETCS level 3 standard in the
framework of the case study proposed for the 6th edition of the ABZ conference. The …

Traces are used to show whether a model complies with the intended behavior. A modeler
can use trace checking to ensure the preservation of the model behavior during the …

The validation of formal specifications is a challenging task. It is one of the factors that
impede the penetration of formal methods into the common practices of software …

The share of formal methods is still marginal in contemporary systems and software
engineering. One of the reasons is the absence of systematic guidelines and evaluation …

A significant impediment to the uptake of formal refinement-based methods among
practitioners is the challenge of validating that the formal specifications of these methods …

Refinement guarantees that the concrete version of a model does not violate the constraints
introduced at the abstract level. The peculiarity of refinement, however, is that we have no …

ABSTRACT Medical Devices (MDs) are by definition safety-critical and increasingly also
become security-critical when interoperating, ie, when communicating in some form. Finding …

In this paper, we explore the possibility to use Event-B as a formal domain modeling tool. We
identify the areas where domain modelers can struggle and present some guidelines to …