J.–R. Abrial, E. Borger, and H. Langmaack, “Formal methods for industrial applications: Specifying and programming the steam boiler control,” in LNCS, Vol. 1165, Springer–Verlag, 1996.
C. Artho, “Finding faults in multi–threaded programs,” Master's, thesis, Institute of Computer Systems, Federal Institute of Technology, Zurich/Austin, 2001.
C. Artho, D. Drusinsky, A. Goldberg, K. Havelund, M. Lowry, C. Pasareanu, G. Roşu, and W. Visser, “Experiments with test case generation and runtime analysis,” in E. Börger, A. Gargantini, and E. Riccobene (Eds.), Abstract State Machines (ASM'03), Lecture Notes in Computer Science, Springer, 2003, pp. 87–107.
G.S. Avrunin, J.C. Corbett, M.B. Dwyer, C.S. Pasareanu, and S.F. Siegel, “Comparing finite–state verification techniques for concurrent software,” Technical Report UM–CS–1999–069, Department of Computer Science, University of Massachusetts at Amherst, USA, 1999.
B. Boehm and D. Port, “Defect and fault seeding in dependability benchmarking,” in Proc. of the DSN Workshop on Dependability Benchmarking, June 2002.
A.T. Chamillard, L.A. Clarke, and G.S. Avrunin, “An empirical comparison of static concurrency analysis techniques,” TR 96–84, Department of Computer Science, University of Massachusetts, 1997.
B.P. Collins and C.J. Nix, “The use of software engineering, including the Z notation, in the development of CICS,” Quality Assurance, Vol. 14, No. 2, pp. 103–110, 1988.
J.C. Corbett, “Evaluating deadlock detection methods for concurrent software,” IEEE Trans. Softw. Eng., Vol. 22, No. 3, pp. 161–179, 1996.
C. Drew and M. Hardman, Designing and Conducting Behavioral Research,Pergamon General Psychology Series, 1985.
D. Drusinsky, “The temporal Rover and the ATG Rover,” in SPIN Model Checking and Software Verification, Vol. 1885 of LNCS, Springer, 2000, pp. 323–330.
S. Duri, U. Buy, R. Devarapalli, and S.M. Shatz, “Application and experimental evaluation of state space reduction methods for deadlock analysis in ada,” ACM Trans. Softw. Eng. Meth., Vol. 3, No. 4, pp. 340–380, 1994.
A. Groce and W. Visser, “Model checking Java programs using structural heuristics,” in Proceedings of the 2002 International Symposium on Software Testing and Analysis (ISSTA), ACM Press, July 2002.
K. Havelund and G. Roşu, “Monitoring Java programs with Java PathExplorer,” in Proceedings of Runtime Verification (RV'01), Vol. 55 of Electronic Notes in Theoretical Computer Science, Elsevier Science, 2001.
S. Savage, M. Burrows, G. Nelson, P. Sobalvarro, and T. Anderson, “Eraser: A dynamic data race detector for multithreaded programs,” ACM Transactions on Computer Systems, Vol. 15, No. 4, pp. 391–411, 1997.
W. Visser, K. Havelund, G. Brat, and S.–J. Park. “Model checking programs,” in Proc. of the 15th IEEE International Conference on Automated Software Engineering, Grenoble, France, Sept. 2000.
W. Visser, K. Havelund, G. Brat, S.–J. Park, and F. Lerda, “Model checking programs,” Automated Software Engineering Journal, Vol. 10, No. 2, 2003.
R. Washington, K. Golden, and J. Bresina, “Plan execution, monitoring, and adaptation for planetary rovers,” Electronic Transactions on Artificial Intelligence, Vol. 4, No. A, pp. 3–21, 2000. http://www.ep.liu.se/ej/etai/2000/004/.
J.C. Widmaier, C. Smidts, and X. Huang, “Producing more reliable software: Mature software engineering process vs. state–of–the–art technology,” in Proceedings of the 22nd International Conference on Software Engineering, Limerick, Ireland, ACM Press, June 2000, pp. 87–94.