Titlebook: Computer Safety, Reliability and Security; 20th International C Udo Voges Conference proceedings 2001 Springer-Verlag Berlin Heidelberg 200

Sinus-Rhythm

gonioscopy

terature are reviewed and automated analysis techniques are proposed. The techniques based on OCL expressions and graph transformations are detailed and their limitations are discussed. To speed up the checker methods, a reduced form for UML statecharts is introduced. Using this form, the correctnes

Intact

al parts of the design process and considered on an equal basis at the earliest stage possible in the development. A practical example is given to illustrate this viewpoint. The need to expand and complement the customary set of notions and methodologies is motivated.

Instrumental

枫树

plausible mental models. Using mechanized formal methods, we can then calculate divergences between the actual system behavior and that suggested by the mental model. These divergences indicate possible automation surprises and other human factors problems and suggest places where the design should

删减

阐明

s that support the train driver in performing his activity and analyses the role of the interactive systems, such as computer based equipments, to understand possible human-machine interaction problems. The application of the methodology has shown that a strong involvement of the users of the intera

goodwill

commercial off-the-shelf (COTS) components in safety-related systems, and a usual feature of COTS products is a lack of such evidence. There is therefore a debate as to the appropriateness of COTS products in such applications. This paper discusses not only evidence, but also risk, the other issue a

不容置疑

ability analysis of computer systems early in the design process. The proposed framework combines functional and behavioral modeling, fault injection and simulation. Starting from the RDD-100 model built by the system designers, two techniques are discussed for the mutation of this model to analyze

细微差别