Conclusions

Abstract

This last chapter does consider two main points :

• 1) Are formal methods an appropriate answer to model safety critical distributed systems?

• 2) What should be a right development process for the development of such critical systems?

As editors, we are of course convinced that formal methods are the only way to design and develop safety critical distributed systems. We not suggest any new notations, nor new processes.

We claim that, instead of reinventing the wheel, it is possible to take advantage of current notations, by mixing them carefully, that means providing right notations for specifying right properties. In other words we recommend to start from semi formal notations that must be used in coordination with some dedicated ones all over the development phases.

Moreover we believe that the chosen process must fit the capabilities of the development team. This second consideration is certainly the most important by product of the Dagsthul seminar.