Proving Invariants of I/O Automata with TAME Myla ArcherConstance HeitmeyerElvinia Riccobene OriginalPaper Pages: 201 - 232
Specification, Validation, and Synthesis of Email Agent Controllers: A Case Study in Function Rich Reactive System Design Robert J. Hall OriginalPaper Pages: 233 - 261
Creating High Confidence in a Separation Kernel W.B. MartinP.D. WhiteF.S. Taylor OriginalPaper Pages: 263 - 284
The DSD Schema Language Nils KlarlundAnders MøllerMichael I. Schwartzbach OriginalPaper Pages: 285 - 319