{"id":"https://openalex.org/W4416298105","doi":"https://doi.org/10.1145/3774647","title":"Development and Validation of a Formal Model and Prototype for an Air Traffic Control System","display_name":"Development and Validation of a Formal Model and Prototype for an Air Traffic Control System","publication_year":2025,"publication_date":"2025-11-17","ids":{"openalex":"https://openalex.org/W4416298105","doi":"https://doi.org/10.1145/3774647"},"language":"en","primary_location":{"id":"doi:10.1145/3774647","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3774647","pdf_url":null,"source":{"id":"https://openalex.org/S128250343","display_name":"Formal Aspects of Computing","issn_l":"0934-5043","issn":["0934-5043","1433-299X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Formal Aspects of Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3774647","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086164365","display_name":"David Gele\u00dfus","orcid":"https://orcid.org/0000-0002-6722-6296"},"institutions":[{"id":"https://openalex.org/I44260953","display_name":"Heinrich Heine University D\u00fcsseldorf","ror":"https://ror.org/024z2rq82","country_code":"DE","type":"education","lineage":["https://openalex.org/I44260953"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"David Gele\u00dfus","raw_affiliation_strings":["Heinrich-Heine-Universit\u00e4t"],"raw_orcid":"https://orcid.org/0000-0002-6722-6296","affiliations":[{"raw_affiliation_string":"Heinrich-Heine-Universit\u00e4t","institution_ids":["https://openalex.org/I44260953"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001558097","display_name":"Sebastian Stock","orcid":"https://orcid.org/0000-0002-2231-8656"},"institutions":[{"id":"https://openalex.org/I121883995","display_name":"Johannes Kepler University of Linz","ror":"https://ror.org/052r2xn60","country_code":"AT","type":"education","lineage":["https://openalex.org/I121883995"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Sebastian Stock","raw_affiliation_strings":["Johannes Kepler Universit\u00e4t"],"raw_orcid":"https://orcid.org/0000-0002-2231-8656","affiliations":[{"raw_affiliation_string":"Johannes Kepler Universit\u00e4t","institution_ids":["https://openalex.org/I121883995"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017001509","display_name":"Fabian Vu","orcid":"https://orcid.org/0000-0003-2556-5553"},"institutions":[{"id":"https://openalex.org/I44260953","display_name":"Heinrich Heine University D\u00fcsseldorf","ror":"https://ror.org/024z2rq82","country_code":"DE","type":"education","lineage":["https://openalex.org/I44260953"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Fabian Vu","raw_affiliation_strings":["Heinrich-Heine-Universit\u00e4t"],"raw_orcid":"https://orcid.org/0000-0003-2556-5553","affiliations":[{"raw_affiliation_string":"Heinrich-Heine-Universit\u00e4t","institution_ids":["https://openalex.org/I44260953"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058847017","display_name":"Micha\u00ebl Leuschel","orcid":"https://orcid.org/0000-0002-4595-1518"},"institutions":[{"id":"https://openalex.org/I44260953","display_name":"Heinrich Heine University D\u00fcsseldorf","ror":"https://ror.org/024z2rq82","country_code":"DE","type":"education","lineage":["https://openalex.org/I44260953"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Michael Leuschel","raw_affiliation_strings":["Heinrich-Heine-Universit\u00e4t"],"raw_orcid":"https://orcid.org/0000-0002-4595-1518","affiliations":[{"raw_affiliation_string":"Heinrich-Heine-Universit\u00e4t","institution_ids":["https://openalex.org/I44260953"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089811302","display_name":"Atif Mashkoor","orcid":"https://orcid.org/0000-0003-1210-5953"},"institutions":[{"id":"https://openalex.org/I8606887","display_name":"Grand Valley State University","ror":"https://ror.org/001m1hv61","country_code":"US","type":"education","lineage":["https://openalex.org/I8606887"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Atif Mashkoor","raw_affiliation_strings":["College of Computing, Grand Valley State University","College of Computing, Grand Valley State University, Allendale, United States"],"raw_orcid":"https://orcid.org/0000-0003-1210-5953","affiliations":[{"raw_affiliation_string":"College of Computing, Grand Valley State University","institution_ids":["https://openalex.org/I8606887"]},{"raw_affiliation_string":"College of Computing, Grand Valley State University, Allendale, United States","institution_ids":["https://openalex.org/I8606887"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5086164365"],"corresponding_institution_ids":["https://openalex.org/I44260953"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.36708657,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"38","issue":"1","first_page":"1","last_page":"37"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10525","display_name":"Human-Automation Interaction and Safety","score":0.2745000123977661,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10525","display_name":"Human-Automation Interaction and Safety","score":0.2745000123977661,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11489","display_name":"Air Traffic Management and Optimization","score":0.2062000036239624,"subfield":{"id":"https://openalex.org/subfields/2202","display_name":"Aerospace Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.10779999941587448,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.8008000254631042},{"id":"https://openalex.org/keywords/air-traffic-control","display_name":"Air traffic control","score":0.7045999765396118},{"id":"https://openalex.org/keywords/formal-methods","display_name":"Formal methods","score":0.5543000102043152},{"id":"https://openalex.org/keywords/interface","display_name":"Interface (matter)","score":0.5016000270843506},{"id":"https://openalex.org/keywords/formal-verification","display_name":"Formal verification","score":0.4794999957084656},{"id":"https://openalex.org/keywords/formal-specification","display_name":"Formal specification","score":0.45820000767707825},{"id":"https://openalex.org/keywords/development","display_name":"Development (topology)","score":0.4318000078201294},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.4092999994754791},{"id":"https://openalex.org/keywords/interface-model","display_name":"Interface model","score":0.3732999861240387}],"concepts":[{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.8008000254631042},{"id":"https://openalex.org/C166961238","wikidata":"https://www.wikidata.org/wiki/Q221395","display_name":"Air traffic control","level":2,"score":0.7045999765396118},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6668000221252441},{"id":"https://openalex.org/C75606506","wikidata":"https://www.wikidata.org/wiki/Q1049183","display_name":"Formal methods","level":2,"score":0.5543000102043152},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.5016000270843506},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.4794999957084656},{"id":"https://openalex.org/C116253237","wikidata":"https://www.wikidata.org/wiki/Q1437424","display_name":"Formal specification","level":2,"score":0.45820000767707825},{"id":"https://openalex.org/C2776542497","wikidata":"https://www.wikidata.org/wiki/Q5266672","display_name":"Development (topology)","level":2,"score":0.4318000078201294},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4092999994754791},{"id":"https://openalex.org/C2988635477","wikidata":"https://www.wikidata.org/wiki/Q28130211","display_name":"Interface model","level":2,"score":0.3732999861240387},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3598000109195709},{"id":"https://openalex.org/C44154836","wikidata":"https://www.wikidata.org/wiki/Q45045","display_name":"Simulation","level":1,"score":0.34709998965263367},{"id":"https://openalex.org/C17500928","wikidata":"https://www.wikidata.org/wiki/Q959968","display_name":"Control system","level":2,"score":0.3465999960899353},{"id":"https://openalex.org/C37789001","wikidata":"https://www.wikidata.org/wiki/Q782543","display_name":"Graphical user interface","level":2,"score":0.336899995803833},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.33629998564720154},{"id":"https://openalex.org/C89505385","wikidata":"https://www.wikidata.org/wiki/Q47146","display_name":"User interface","level":2,"score":0.3276999890804291},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.3142000138759613},{"id":"https://openalex.org/C40866790","wikidata":"https://www.wikidata.org/wiki/Q956238","display_name":"Interactive computing","level":2,"score":0.29840001463890076},{"id":"https://openalex.org/C24858836","wikidata":"https://www.wikidata.org/wiki/Q844718","display_name":"Theory of computation","level":2,"score":0.296099990606308},{"id":"https://openalex.org/C2985583900","wikidata":"https://www.wikidata.org/wiki/Q722617","display_name":"Formal description","level":2,"score":0.2955999970436096},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.2946999967098236},{"id":"https://openalex.org/C2987419075","wikidata":"https://www.wikidata.org/wiki/Q8004","display_name":"Traffic signal","level":2,"score":0.28610000014305115},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.27480000257492065},{"id":"https://openalex.org/C195672273","wikidata":"https://www.wikidata.org/wiki/Q6888132","display_name":"Model-based design","level":2,"score":0.273499995470047},{"id":"https://openalex.org/C126433048","wikidata":"https://www.wikidata.org/wiki/Q7921324","display_name":"Verification and validation of computer simulation models","level":2,"score":0.26600000262260437},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2621999979019165},{"id":"https://openalex.org/C107645828","wikidata":"https://www.wikidata.org/wiki/Q12070446","display_name":"System model","level":2,"score":0.2599000036716461}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3774647","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3774647","pdf_url":null,"source":{"id":"https://openalex.org/S128250343","display_name":"Formal Aspects of Computing","issn_l":"0934-5043","issn":["0934-5043","1433-299X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Formal Aspects of Computing","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3774647","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3774647","pdf_url":null,"source":{"id":"https://openalex.org/S128250343","display_name":"Formal Aspects of Computing","issn_l":"0934-5043","issn":["0934-5043","1433-299X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Formal Aspects of Computing","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W148012277","https://openalex.org/W977824395","https://openalex.org/W1486359109","https://openalex.org/W1510011834","https://openalex.org/W1517782647","https://openalex.org/W1534850143","https://openalex.org/W1544621933","https://openalex.org/W1971486022","https://openalex.org/W1983124907","https://openalex.org/W2031111226","https://openalex.org/W2093274105","https://openalex.org/W2103839338","https://openalex.org/W2124618178","https://openalex.org/W2135465691","https://openalex.org/W2142951562","https://openalex.org/W2162289170","https://openalex.org/W2167063371","https://openalex.org/W2278151521","https://openalex.org/W2293612389","https://openalex.org/W2607648995","https://openalex.org/W2613487784","https://openalex.org/W2785617014","https://openalex.org/W2902204765","https://openalex.org/W2902797339","https://openalex.org/W2908386671","https://openalex.org/W2974268290","https://openalex.org/W3027526230","https://openalex.org/W3033189755","https://openalex.org/W3036305508","https://openalex.org/W3123969935","https://openalex.org/W3134737661","https://openalex.org/W3161736591","https://openalex.org/W3163812145","https://openalex.org/W3164150178","https://openalex.org/W3194646202","https://openalex.org/W4221011989","https://openalex.org/W4254354208","https://openalex.org/W4280587267","https://openalex.org/W4285251330","https://openalex.org/W4376621736","https://openalex.org/W4376621938","https://openalex.org/W4376621947","https://openalex.org/W4376622154","https://openalex.org/W4376622161","https://openalex.org/W4376622578","https://openalex.org/W4376622634","https://openalex.org/W4388511209"],"related_works":[],"abstract_inverted_index":{"This":[0],"article":[1],"presents":[2],"an":[3,7,12,37,79],"Event-B":[4],"model":[5,42,77],"and":[6,50,88,94,110,117,121],"interactive":[8,26,49,85],"GUI":[9],"prototype":[10,82],"for":[11,29],"air":[13,30],"traffic":[14,31],"control":[15],"system":[16,27,57],"called":[17],"the":[18,56,61,70,75,92,108,111,115,124],"arrival":[19],"manager":[20],"(AMAN).":[21],"AMAN":[22,81],"is":[23],"a":[24,45],"safety-critical":[25],"designed":[28],"controllers":[32],"to":[33,105],"manage":[34],"landings":[35],"at":[36],"airport.":[38],"The":[39],"presented":[40],"formal":[41,76],"consists":[43],"of":[44,55,97],"human-machine":[46],"interface":[47],"comprising":[48],"autonomous":[51],"parts.":[52],"Safety":[53],"properties":[54],"were":[58],"proven":[59],"using":[60,69,91],"Rodin":[62],"platform,":[63],"while":[64],"validation":[65,102],"was":[66],"carried":[67],"out":[68],"ProB":[71,98],"tool.":[72],"We":[73,100],"turned":[74],"into":[78],"executable":[80],"by":[83],"combining":[84],"domain-specific":[86],"visualizations":[87],"automatic":[89],"simulation":[90],"VisB":[93],"SimB":[95],"components":[96],".":[99],"used":[101],"obligations":[103],"(VOs)":[104],"systematically":[106],"validate":[107],"model\u2019s":[109],"prototype\u2019s":[112],"compliance":[113],"with":[114],"requirements":[116],"uncovered":[118],"some":[119],"contradictions":[120],"ambiguities":[122],"in":[123],"case":[125],"study.":[126]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-11-17T00:00:00"}