Behavioral interface specification languages provide formal code-level annotations, such as
preconditions, postconditions, invariants, and assertions that allow programmers to express …

Systems Theoretic Process Analysis (STPA) is a powerful new hazard analysis method
designed to go beyond traditional safety techniques-such as Fault Tree Analysis (FTA)-that …

Software Engineering for Safety: A Roadmap Robyn Lutz Page 1 Software Engineering for
Safety: A Roadmap Robyn Lutz Key Research Pointers Provide readier access to formal …

System safety analysis techniques are well established and are used extensively during the
design of safety-critical systems. Despite this, most of the techniques are highly subjective …

Model checking techniques can be successfully employed as a test case generation
technique to generate tests from formal models. The number of tests cases produced …

Modeling languages, like programming languages, need to be designed if they are to be
practical, usable, accepted, and of lasting value. We present principles for the design of …

The DEPLOY project has provided a rare opportunity to explore and document the potential
benefits of and challenges to creating and exploiting usable formal methods. Using the …

While human effort is critical to creating requirements specifications and human inspection
can detect many specification errors, software tools find errors inspections miss and also find …

There is an increased use of software in safety-critical systems; a trend that is likely to
continue in the future. Although traditional system safety techniques are applicable to …

System safety analysis techniques are well established and are used extensively during the
design of safety-critical systems. Despite this, most of the techniques are highly subjective …