Titlebook: Rigorous Development of Complex Fault-Tolerant Systems; Michael Butler,Cliff B. Jones,Elena Troubitsyna Book 2006 Springer-Verlag Berlin H

关心

多产鱼

Train Systemshe attention payed to the precise mathematical definition of the train network, and the modelling of a complete system including the external environment. A special attention is given to the prevention of errors and also (but to a less extend) to their tolerance. The modelling notation which is used in this presentation is Event-B.

dura-mater

Separating Concerns in Requirements Analysis: An Examplem in isolation, deferring their composition to a later stage. This paper illustrates the approach by applying it to the requirements of the positioning functions of a proton therapy installation. It explains how a flaw in the design of the system can be isolated to a single subproblem, which can be formalized and subjected to automatic analysis.

意外的成功

Train Systemsects of this development are emphasized: the preliminary informal presentation of the requirements, the careful definition of a refinement strategy, the attention payed to the precise mathematical definition of the train network, and the modelling of a complete system including the external environm

继而发生

Flustered

The Fault-Tolerant Insulin Pump Therapyump) and software in order to make glucose sensing and insulin delivery automatic. These devices are not physically connected together and they come with the necessary features to detect malfunctions which they may have..As the patient’s health is the most important, the therapy has to be able to wo

INCUR

Reasoning About Exception Flow at the Architectural Levells of reliability, mechanisms for detecting and handling errors should be designed since early phases of software development, preferably using a rigorous or formal methodology. In recent years, many researchers have been advocating the idea that exception handling-related issues should be addressed

fetter

Are Practitioners Writing Contracts?To be truly effective though, it is essential that module interfaces be rigorously specified. Design by Contract (DBC) is an increasingly popular method of interface specification for object-oriented systems. Many researchers are actively adding support for DBC to various languages such as Ada, Java

CRANK

Determining the Specification of a Control System: An Illustrative Examplet are nearly incoherent. An argument given by Hayes, Jackson, and Jones provides reasons to focus first on the wider environment in which the system will reside. In their approach are two major ideas: pushing out the specification boundaries, and carefully distinguishing between the requirements of

Lineage