{"id":"https://openalex.org/W2114957237","doi":"https://doi.org/10.1109/32.210304","title":"Formal verification of algorithms for critical systems","display_name":"Formal verification of algorithms for critical systems","publication_year":1993,"publication_date":"1993-01-01","ids":{"openalex":"https://openalex.org/W2114957237","doi":"https://doi.org/10.1109/32.210304","mag":"2114957237"},"language":"en","primary_location":{"id":"doi:10.1109/32.210304","doi":"https://doi.org/10.1109/32.210304","is_oa":false,"landing_page_url":"https://doi.org/10.1109/32.210304","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-a","cwts-core","dongbi-a","fnege-3","jufo-3","norway-2","poland-140","russia-white-list-1"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020087247","display_name":"John Rushby","orcid":"https://orcid.org/0000-0002-6604-9953","observed_orcids":["https://orcid.org/0000-0002-6604-9953"]},"institutions":[{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"J.M. Rushby","raw_affiliation_strings":["Computer Science Laboratory, SRI International, Inc., Menlo Park, CA, USA","SRI Int., Menlo Park, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science Laboratory, SRI International, Inc., Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152"]},{"raw_affiliation_string":"SRI Int., Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062815122","display_name":"Friedrich W. von Henke","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I196349391","display_name":"Universit\u00e4t Ulm","ror":"https://ror.org/032000t02","country_code":"DE","type":"education","lineage":["https://openalex.org/I196349391"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"F. von Henke","raw_affiliation_strings":["Fakult\u00e4t f\u00fcr Informatik, Universit\u00e4t Ulm, Ulm, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fakult\u00e4t f\u00fcr Informatik, Universit\u00e4t Ulm, Ulm, Germany","institution_ids":["https://openalex.org/I196349391"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":13.1249,"has_fulltext":false,"cited_by_count":94,"citation_normalized_percentile":{"value":0.99485648,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":98},"biblio":{"volume":"19","issue":"1","first_page":"13","last_page":"23"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.8651999831199646,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.8651999831199646,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.11630000174045563,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.01269999984651804,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/formal-verification","display_name":"formal verification","score":0.9909999966621399},{"id":"https://openalex.org/keywords/machine-checked-verification","display_name":"machine-checked verification","score":0.6819999814033508},{"id":"https://openalex.org/keywords/byzantine-fault-tolerance","display_name":"Byzantine fault tolerance","score":0.9629999995231628},{"id":"https://openalex.org/keywords/clock-synchronization","display_name":"clock synchronization","score":0.9190000295639038},{"id":"https://openalex.org/keywords/digital-flight-control-systems","display_name":"digital flight control systems","score":0.8859999775886536},{"id":"https://openalex.org/keywords/critical-systems","display_name":"critical systems","score":0.8320000171661377},{"id":"https://openalex.org/keywords/formal-specification","display_name":"formal specification","score":0.8669999837875366},{"id":"https://openalex.org/keywords/correctness-proofs","display_name":"correctness proofs","score":0.6259999871253967}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8269277811050415},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.7369480133056641},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.6897098422050476},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.6795351505279541},{"id":"https://openalex.org/C75606506","wikidata":"https://www.wikidata.org/wiki/Q1049183","display_name":"Formal methods","level":2,"score":0.5984712243080139},{"id":"https://openalex.org/C116253237","wikidata":"https://www.wikidata.org/wiki/Q1437424","display_name":"Formal specification","level":2,"score":0.5512087941169739},{"id":"https://openalex.org/C202973057","wikidata":"https://www.wikidata.org/wiki/Q7380130","display_name":"Runtime verification","level":3,"score":0.5469898581504822},{"id":"https://openalex.org/C206880738","wikidata":"https://www.wikidata.org/wiki/Q431667","display_name":"Automated theorem proving","level":2,"score":0.42081737518310547},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4197050929069519},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.35849034786224365},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/32.210304","doi":"https://doi.org/10.1109/32.210304","is_oa":false,"landing_page_url":"https://doi.org/10.1109/32.210304","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-a","cwts-core","dongbi-a","fnege-3","jufo-3","norway-2","poland-140","russia-white-list-1"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320320295","display_name":"Newcastle University","ror":"https://ror.org/01kj2bm70"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W1483928759","https://openalex.org/W1495250406","https://openalex.org/W1509326417","https://openalex.org/W1519489162","https://openalex.org/W1534850143","https://openalex.org/W1558939704","https://openalex.org/W1583232763","https://openalex.org/W1586821729","https://openalex.org/W1600849051","https://openalex.org/W1720140439","https://openalex.org/W1978895269","https://openalex.org/W1988192943","https://openalex.org/W2000755144","https://openalex.org/W2003530032","https://openalex.org/W2016944512","https://openalex.org/W2099078002","https://openalex.org/W2102554929","https://openalex.org/W2118891797","https://openalex.org/W2125349868","https://openalex.org/W2126924915","https://openalex.org/W2131950980","https://openalex.org/W2151087276","https://openalex.org/W2164357820","https://openalex.org/W2170194695","https://openalex.org/W2326972230","https://openalex.org/W2525216991","https://openalex.org/W2998385477","https://openalex.org/W3137092842","https://openalex.org/W3173162483","https://openalex.org/W6628869819"],"related_works":["https://openalex.org/W7056659958","https://openalex.org/W2154561484","https://openalex.org/W2061744342","https://openalex.org/W1593276140","https://openalex.org/W7096529178","https://openalex.org/W6888437740","https://openalex.org/W2172298634","https://openalex.org/W145630957","https://openalex.org/W2171317417","https://openalex.org/W7098878964"],"abstract_inverted_index":{"The":[0,34,83,129],"authors":[1,106],"describe":[2],"their":[3,103],"experience":[4],"with":[5],"formal,":[6],"machine-checked":[7],"verification":[8,66,80,98,116,136,145],"of":[9,28,45,52,57,67,90,122,125,134,144],"algorithms":[10,124],"for":[11,20,60,76,111],"critical":[12],"applications,":[13],"concentrating":[14],"on":[15,102],"a":[16,29,112],"Byzantine":[17],"fault-tolerant":[18,46],"algorithm":[19,55,69,92],"synchronizing":[21],"the":[22,25,41,58,68,72,87,91,97,105,120,126,132,141],"clocks":[23],"in":[24,37,86,137,147],"replicated":[26],"computers":[27],"digital":[30],"flight":[31],"control":[32],"system.":[33],"problems":[35],"encountered":[36],"unsynchronized":[38],"systems":[39,146],"and":[40,43,56,79,93,115,140],"necessity,":[42],"criticality,":[44],"synchronization":[47],"are":[48,63,99,153],"described.":[49,82],"An":[50],"overview":[51],"one":[53],"such":[54],"arguments":[59],"its":[61],"correctness":[62],"given.":[64],"A":[65],"performed":[70],"using":[71],"authors'":[73],"EHDM":[74],"system":[75,117],"formal":[77,113,135],"specification":[78,114],"is":[81],"errors":[84],"found":[85],"published":[88],"analysis":[89],"benefits":[94,133,152],"derived":[95],"from":[96],"indicated.":[100],"Based":[101],"experience,":[104],"derive":[107],"some":[108],"key":[109],"requirements":[110],"adequate":[118],"to":[119,149],"task":[121],"verifying":[123],"type":[127],"considered.":[128],"conclusions":[130],"regarding":[131],"this":[138],"domain":[139],"capabilities":[142],"required":[143],"order":[148],"realize":[150],"those":[151],"summarized.>":[154]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":5},{"year":2013,"cited_by_count":2},{"year":2012,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2016-06-24T00:00:00"}