{"id":"https://openalex.org/W2011715386","doi":"https://doi.org/10.1002/spe.4380200804","title":"Formal verification of safety\u2010critical systems","display_name":"Formal verification of safety\u2010critical systems","publication_year":1990,"publication_date":"1990-08-01","ids":{"openalex":"https://openalex.org/W2011715386","doi":"https://doi.org/10.1002/spe.4380200804","mag":"2011715386"},"language":"en","primary_location":{"id":"doi:10.1002/spe.4380200804","is_oa":false,"landing_page_url":"https://doi.org/10.1002/spe.4380200804","pdf_url":null,"source":{"id":"https://openalex.org/S122199241","display_name":"Software Practice and Experience","issn_l":"0038-0644","issn":["0038-0644","1097-024X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320595","host_organization_name":"Wiley","host_organization_lineage":["https://openalex.org/P4310320595"],"host_organization_lineage_names":["Wiley"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Software: Practice and Experience","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5108477129","display_name":"Louise E. Moser","orcid":null},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Louise E. Moser","raw_affiliation_strings":["Department of Electrical and Computer Engineering, University of California, Santa Barbara, CA 93106, U.S.A","Dept. of Electrical & Computer Engineering, University of California, Santa Barbara, CA 93106, U.S.A"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of California, Santa Barbara, CA 93106, U.S.A","institution_ids":["https://openalex.org/I154570441"]},{"raw_affiliation_string":"Dept. of Electrical & Computer Engineering, University of California, Santa Barbara, CA 93106, U.S.A","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5020430309","display_name":"P. M. Melliar\u2010Smith","orcid":null},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"P. M. Melliar\u2010Smith","raw_affiliation_strings":["Department of Electrical and Computer Engineering, University of California, Santa Barbara, CA 93106, U.S.A","Dept. of Electrical & Computer Engineering, University of California, Santa Barbara, CA 93106, U.S.A"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of California, Santa Barbara, CA 93106, U.S.A","institution_ids":["https://openalex.org/I154570441"]},{"raw_affiliation_string":"Dept. of Electrical & Computer Engineering, University of California, Santa Barbara, CA 93106, U.S.A","institution_ids":["https://openalex.org/I154570441"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I154570441"],"apc_list":{"value":4220,"currency":"USD","value_usd":4220},"apc_paid":null,"fwci":5.0894,"has_fulltext":false,"cited_by_count":33,"citation_normalized_percentile":{"value":0.94814815,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"20","issue":"8","first_page":"799","last_page":"821"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7051025629043579},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.6903234720230103},{"id":"https://openalex.org/keywords/formal-methods","display_name":"Formal methods","score":0.6146085858345032},{"id":"https://openalex.org/keywords/formal-verification","display_name":"Formal verification","score":0.6133233904838562},{"id":"https://openalex.org/keywords/life-critical-system","display_name":"Life-critical system","score":0.5885247588157654},{"id":"https://openalex.org/keywords/abstraction","display_name":"Abstraction","score":0.5428270697593689},{"id":"https://openalex.org/keywords/reliability-engineering","display_name":"Reliability engineering","score":0.503070056438446},{"id":"https://openalex.org/keywords/software-verification","display_name":"Software verification","score":0.43568721413612366},{"id":"https://openalex.org/keywords/formal-specification","display_name":"Formal specification","score":0.4289494752883911},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.3781094551086426},{"id":"https://openalex.org/keywords/software-system","display_name":"Software system","score":0.36726629734039307},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.3581458628177643},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.34007567167282104},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1576266586780548},{"id":"https://openalex.org/keywords/software-construction","display_name":"Software construction","score":0.1564769744873047}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7051025629043579},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.6903234720230103},{"id":"https://openalex.org/C75606506","wikidata":"https://www.wikidata.org/wiki/Q1049183","display_name":"Formal methods","level":2,"score":0.6146085858345032},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.6133233904838562},{"id":"https://openalex.org/C163707989","wikidata":"https://www.wikidata.org/wiki/Q1996307","display_name":"Life-critical system","level":3,"score":0.5885247588157654},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.5428270697593689},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.503070056438446},{"id":"https://openalex.org/C33054407","wikidata":"https://www.wikidata.org/wiki/Q6504747","display_name":"Software verification","level":5,"score":0.43568721413612366},{"id":"https://openalex.org/C116253237","wikidata":"https://www.wikidata.org/wiki/Q1437424","display_name":"Formal specification","level":2,"score":0.4289494752883911},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3781094551086426},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.36726629734039307},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3581458628177643},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.34007567167282104},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1576266586780548},{"id":"https://openalex.org/C186846655","wikidata":"https://www.wikidata.org/wiki/Q3398377","display_name":"Software construction","level":4,"score":0.1564769744873047},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1002/spe.4380200804","is_oa":false,"landing_page_url":"https://doi.org/10.1002/spe.4380200804","pdf_url":null,"source":{"id":"https://openalex.org/S122199241","display_name":"Software Practice and Experience","issn_l":"0038-0644","issn":["0038-0644","1097-024X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320595","host_organization_name":"Wiley","host_organization_lineage":["https://openalex.org/P4310320595"],"host_organization_lineage_names":["Wiley"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Software: Practice and Experience","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W786201291","https://openalex.org/W1511590542","https://openalex.org/W2007748565","https://openalex.org/W2016944512","https://openalex.org/W2070485163","https://openalex.org/W2075806344","https://openalex.org/W2085741309","https://openalex.org/W2129360963","https://openalex.org/W2132840411","https://openalex.org/W3035757797"],"related_works":["https://openalex.org/W2145025660","https://openalex.org/W2171674700","https://openalex.org/W1922520186","https://openalex.org/W1544097700","https://openalex.org/W1946493810","https://openalex.org/W1495250406","https://openalex.org/W17088386","https://openalex.org/W1608485412","https://openalex.org/W61995002","https://openalex.org/W2964297799"],"abstract_inverted_index":{"Abstract":[0],"We":[1],"describe":[2],"our":[3],"practical":[4],"experience":[5],"in":[6,16],"the":[7,17,26,29,52,59,67,75,101],"use":[8],"of":[9,19,28,32,49,62,66,70],"formal":[10],"verification":[11,78,81],"to":[12,58,93],"obtain":[13],"increased":[14],"confidence":[15],"design":[18,30],"safety\u2010critical":[20,106],"systems.":[21,107],"The":[22],"experiment":[23],"involved":[24],"demonstrating":[25],"consistency":[27],"specifications":[31],"SIFT,":[33],"a":[34],"software\u2010implemented":[35],"fault\u2010tolerant":[36],"operating":[37],"system":[38],"for":[39,86,105],"aircraft":[40],"flight":[41],"control.":[42],"Specifications":[43],"were":[44],"written":[45],"at":[46],"successive":[47,68],"levels":[48,69],"abstraction":[50],"from":[51],"most":[53],"abstract":[54],"requirements":[55,104],"definition":[56],"down":[57],"detailed":[60],"level":[61],"program":[63],"code.":[64],"Consistency":[65],"specification":[71],"was":[72],"demonstrated":[73],"using":[74],"enhanced":[76],"HDM":[77],"system.":[79],"Formal":[80],"is":[82],"currently":[83],"feasible":[84],"only":[85],"carefully":[87],"simplified":[88],"systems,":[89],"but":[90],"there":[91],"appears":[92],"be":[94],"no":[95],"alternative":[96],"method":[97],"that":[98],"can":[99],"meet":[100],"extreme":[102],"safety":[103]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2018,"cited_by_count":1},{"year":2012,"cited_by_count":1}],"updated_date":"2026-06-23T06:36:01.041984","created_date":"2025-10-10T00:00:00"}