From Lotosphere to Thermosphere

  • Holger HermannsEmail author
Part of the Lecture Notes in Computer Science book series (LNCS, volume 10500)


This paper reflects on the influential nature of some of the many scientific achievements linked to Ed Brinksma on the occasion of his 60th birthday. We in particular discuss pioneering contributions in the contexts of constraint-oriented specification, model-based testing, and cost-optimal timed reachability, as well as with respect to tools and algorithms for the construction and analysis of systems. We shed light on these achievements by linking a historical perspective with recent and very applied research directly rooted in these contributions.



We gratefully acknowledge insightful comments by Sadie Creese (University of Oxford) on an early draft of this paper. This work is supported by the ERC Advanced Investigators Grant 695614 (POWVER), and has profited from the EU-funded projects SENSATION, QUASIMODO, and AMETIST.


  1. 1.
    Alur, R., Dill, D.L.: A theory of timed automata. Theoret. Comput. Sci. 126, 183–235 (1994)MathSciNetCrossRefzbMATHGoogle Scholar
  2. 2.
    Behrmann, G., Brinksma, E., Hendriks, M., Mader, A.: Production scheduling by reachability analysis - a case study. In: 19th International Parallel and Distributed Processing Symposium (IPDPS 2005), CD-ROM/Abstracts Proceedings, Denver, CO, USA, 4–8 April 2005. IEEE Computer Society (2005)Google Scholar
  3. 3.
    Bengtsson, J., Larsen, K., Larsson, F., Pettersson, P., Yi, W.: UPPAAL—a tool suite for automatic verification of real-time systems. In: Alur, R., Henzinger, T.A., Sontag, E.D. (eds.) HS 1995. LNCS, vol. 1066, pp. 232–243. Springer, Heidelberg (1996). doi: 10.1007/BFb0020949 CrossRefGoogle Scholar
  4. 4.
    Bohnenkamp, H.C., D’Argenio, P.R., Hermanns, H., Katoen, J.-P.: MODEST: a compositional modeling formalism for hard and softly timed systems. IEEE Trans. Softw. Eng. 32(10), 812–830 (2006)CrossRefGoogle Scholar
  5. 5.
    Bohnenkamp, H.C., Hermanns, H., Klaren, R., Mader, A., Usenko, Y.S.: Synthesis and stochastic assessment of schedules for lacquer production. In: 1st International Conference on Quantitative Evaluation of Systems (QEST 2004), Enschede, The Netherlands, 27–30 September 2004, pp. 28–37. IEEE Computer Society (2004)Google Scholar
  6. 6.
    Bolognesi, T., Brinksma, E.: Introduction to the ISO specification language LOTOS. Comput. Netw. 14, 25–59 (1987)Google Scholar
  7. 7.
    Brinksma, E.: A theory for the derivation of tests. In: Aggarwal, S., Sabnani, K.K. (eds.) Protocol Specification, Testing and Verification V, Proceedings of the IFIP WG6.1 Eighth International Conference on Protocol Specification, Testing and Verification, pp. 171–194. North-Holland (1988)Google Scholar
  8. 8.
    Brinksma, E.: Constraint-oriented specification in a constructive formal description technique. In: de Bakker, J.W., de Roever, W.-P., Rozenberg, G. (eds.) REX 1989. LNCS, vol. 430, pp. 130–152. Springer, Heidelberg (1990). doi: 10.1007/3-540-52559-9_63 CrossRefGoogle Scholar
  9. 9.
    Brookes, S.D., Hoare, C.A.R., Roscoe, A.W.: A theory of communicating sequential processes. J. ACM 31(3), 560–599 (1984)MathSciNetCrossRefzbMATHGoogle Scholar
  10. 10.
    Cleaveland, R., Parrow, J., Steffen, B.: The concurrency workbench: a semantics-based tool for the verification of concurrent systems. ACM Trans. Program. Lang. Syst. 15(1), 36–72 (1993)CrossRefGoogle Scholar
  11. 11.
    Creese, S.J., Roscoe, A.W.: Verifying an infinite family of inductions simultaneously using data independence and FDR. In: Wu, J., Chanson, S.T., Gao, Q. (eds.) Formal Methods for Protocol Engineering and Distributed Systems, FORTE XII/PSTV XIX 1999, IFIP TC6 WG6.1 Joint International Conference on Formal Description Techniques for Distributed Systems and Communication Protocols (FORTE XII) and Protocol Specification, Testing and Verification (PSTV XIX), IFIP Conference Proceedings, Beijing, China, 5–8 October 1999, vol. 156, pp. 437–452. Kluwer (1999)Google Scholar
  12. 12.
    De Nicola, R., Hennessy, M.: Testing equivalences for processes. Theoret. Comput. Sci. 34, 83–133 (1984)MathSciNetCrossRefzbMATHGoogle Scholar
  13. 13.
    Garavel, H., Serwe,W.: The unheralded value of the multiway rendezvous: illustration with the production cell benchmark. In: Hermanns, H., Höfner, P. (eds.) Proceedings 2nd Workshop on Models for Formal Analysis of Real Systems, MARS@ETAPS 2017, EPTCS, Uppsala, Sweden, 29 April 2017, vol. 244, pp. 230–270 (2017)Google Scholar
  14. 14.
    Graf-Brill, A., Hermanns, H.: Model-based testing for asynchronous systems. In: Petrucci, L., Seceleanu, C., Cavalcanti, A. (eds.) FMICS 2017, AVoCS 2017. LNCS, vol. 10471, pp. 66–82. Springer, Cham (2017). doi: 10.1007/978-3-319-67113-0_5 CrossRefGoogle Scholar
  15. 15.
    Graf-Brill, A., Hartmanns, A., Hermanns, H., Rose, S.: Modelling and certification for electric mobility. In: 15th IEEE International Conference on Industrial Informatics, INDIN 2017, Emden, Germany, 24–26 July 2017. IEEE (2017)Google Scholar
  16. 16.
    Graf-Brill, A., Hermanns, H., Garavel, H.: A model-based certification framework for the EnergyBus standard. In: Ábrahám, E., Palamidessi, C. (eds.) FORTE 2014. LNCS, vol. 8461, pp. 84–99. Springer, Heidelberg (2014). doi: 10.1007/978-3-662-43613-4_6 CrossRefGoogle Scholar
  17. 17.
    Hahn, M.E., Hartmanns, A., Hermanns, H., Katoen, J.-P.: A compositional modelling and analysis framework for stochastic hybrid systems. Formal Methods Syst. Des. 43(2), 191–232 (2013)CrossRefzbMATHGoogle Scholar
  18. 18.
    Hartmanns, A., Hermanns, H.: The modest toolset: an integrated environment for quantitative modelling and verification. In: Ábrahám, E., Havelund, K. (eds.) TACAS 2014. LNCS, vol. 8413, pp. 593–598. Springer, Heidelberg (2014). doi: 10.1007/978-3-642-54862-8_51 CrossRefGoogle Scholar
  19. 19.
    Havelund, K., Larsen, K.G., Skou, A.: Formal verification of a power controller using the real-time model checker Uppaal. In: Katoen, J.-P. (ed.) ARTS 1999. LNCS, vol. 1601, pp. 277–298. Springer, Heidelberg (1999). doi: 10.1007/3-540-48778-6_17 CrossRefGoogle Scholar
  20. 20.
    Hermanns, H.: Interactive Markov Chains: And the Quest for Quantified Quality. LNCS, vol. 2428. Springer, Heidelberg (2002). doi: 10.1007/3-540-45804-2 zbMATHGoogle Scholar
  21. 21.
    Hermanns, H., Katoen, J.-P.: Automated compositional Markov chain generation for a plain-old telephone system. Sci. Comput. Program. 36(1), 97–127 (2000)CrossRefzbMATHGoogle Scholar
  22. 22.
    Larsen, K., Behrmann, G., Brinksma, E., Fehnker, A., Hune, T., Pettersson, P., Romijn, J.: As cheap as possible: effcient cost-optimal reachability for priced timed automata. In: Berry, G., Comon, H., Finkel, A. (eds.) CAV 2001. LNCS, vol. 2102, pp. 493–505. Springer, Heidelberg (2001). doi: 10.1007/3-540-44585-4_47 CrossRefGoogle Scholar
  23. 23.
    Mader, A., Bohnenkamp, H.C., Usenko, Y.S., Jansen, D.N., Hurink, J., Hermanns, H.: Synthesis and stochastic assessment of cost-optimal schedules. STTT 12(5), 305–318 (2010)CrossRefGoogle Scholar
  24. 24.
    Tretmans, J.: Model based testing with labelled transition systems. In: Hierons, R.M., Bowen, J.P., Harman, M. (eds.) Formal Methods and Testing. LNCS, vol. 4949, pp. 1–38. Springer, Heidelberg (2008). doi: 10.1007/978-3-540-78917-8_1 CrossRefGoogle Scholar
  25. 25.
    Tretmans, J., Kars, P., Brinksma, E.: Protocol conformance testing: a formal perspective on ISO IS-9646. In: Kroon, J., Heijink, R.J., Brinksma, E. (eds.) Protocol Test Systems IV, Proceedings of the IFIP TC6/WG6.1 Fourth International Workshop on Protocol Test Systems, IFIP Transactions, Leidschendam, The Netherlands, 15–17 October 1991, vol. C-3, pp. 131–142. North-Holland (1991)Google Scholar
  26. 26.
    Uppaal Cora (2005). Accessed 31 July 2017
  27. 27.
    Catastrophic Surface Pro 3 battery life finally has its firmware fix (2016). Accessed 31 July 2017
  28. 28.
    Samsung recalls Galaxy Note 7 worldwide due to exploding battery fears (2016). Accessed 31 July 2017
  29. 29.
    Basis Peak watches recalled (2016). Accessed 31 July 2017
  30. 30.
    Important: Medical device correction, EnRhythm pacemakers (2010). Accessed 31 July 2017
  31. 31.
    Qualitätsprobleme bei E-Bikes: Schlappe Akkus, anfällige Elektronik (2011). Accessed 31 July 2017

Copyright information

© Springer International Publishing AG 2017

Authors and Affiliations

  1. 1.Saarland University – Computer ScienceSaarbrückenGermany

Personalised recommendations