• Publications
  • Influence
The Hemodialysis Machine Case Study
TLDR
This documents presents a description of a case study concerning the control of a hemodialysis HD machine. Expand
  • 39
  • 7
Software Safety and Security Risk Mitigation in Cyber-physical Systems
TLDR
Cyber-physical systems (CPSs) offer many opportunities but pose many challenges—especially regarding functional safety, cybersecurity, and their interplay, as well as their impact on society. Expand
  • 19
  • 2
  • PDF
How to Select the Suitable Formal Method for an Industrial Application: A Survey
TLDR
We present a comprehensive set of criteria, based on a systematic literature review and decade-long personal experience in industrial projects, for evaluating and comparing different formal methods. Expand
  • 15
  • 2
Formal validation and verification of a medical software critical component
TLDR
This paper presents a formal development process, based on the Abstract State Machine method, that integrates most of the activities required by the standard and fulfills the FDA principles. Expand
  • 17
  • 1
  • PDF
Transformation Heuristics for Formal Requirements Validation by Animation
TLDR
We propose transformation heuristics in order to produce a derived animatable specification which may be non-provable, but exhibiting the same behavior as the original specification. Expand
  • 24
  • 1
Live and global consistency checking in a collaborative engineering environment
TLDR
We present a novel approach for live, multi-tool, consistency checking where engineers continue to use their respective tools and receive inconsistency feedback across their tools' artifacts in a live manner. Expand
  • 4
  • 1
Hemodialysis Machine in Hybrid Event-B
The hemodialysis machine case study is examined in Hybrid Event-B (an extension of Event-B that includes provision for continuously varying behaviour as well as the usual discrete changes of state).Expand
  • 4
  • 1
Build Software or Buy: A Study on Developing Large Scale Software
TLDR
In this paper, we identify the factors that govern the decision of making software applications in-house, outsourcing them, or buying them from the market. Expand
  • 5
  • 1
Investigating Model Driven Architecture
TLDR
We analyze the modeling languages which are capable to support the concept of MDA for its full potential. Expand
  • 2
  • 1
  • PDF
Asm2C++: A Tool for Code Generation from Abstract State Machines to Arduino
TLDR
This paper presents Asm2C++, a tool that automatically generates executable C++ code for Arduino from a formal specification given as Abstract State Machines (ASMs). Expand
  • 21
  • PDF