{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,19]],"date-time":"2026-02-19T14:04:20Z","timestamp":1771509860548,"version":"3.50.1"},"publisher-location":"Berlin, Heidelberg","reference-count":28,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783540441571","type":"print"},{"value":"9783540457329","type":"electronic"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2002]]},"DOI":"10.1007\/3-540-45732-1_4","type":"book-chapter","created":{"date-parts":[[2007,10,11]],"date-time":"2007-10-11T00:38:56Z","timestamp":1192063136000},"page":"19-31","source":"Crossref","is-referenced-by-count":31,"title":["A Rigorous View of Mode Confusion"],"prefix":"10.1007","author":[{"given":"Jan","family":"Bredereke","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Axel","family":"Lankenau","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2002,9,18]]},"reference":[{"key":"4_CR1","series-title":"Lect Notes Comput Sci","doi-asserted-by":"crossref","first-page":"86","DOI":"10.1007\/3-540-45416-0_9","volume-title":"Proc. of SAFECOMP 2001","author":"J. Rushby","year":"2001","unstructured":"Rushby, J.: Modeling the human in human factors. In: Proc. of SAFECOMP 2001. Volume 2187 of LNCS., Springer (2001) 86\u201391"},{"key":"4_CR2","volume-title":"Mental Models","author":"D. Norman","year":"1983","unstructured":"Norman, D.: Some observations on mental models. In Gentner, D., Stevens, A., eds.: Mental Models. Lawrence Erlbaum Associates Inc., Hillsdale, NJ, USA (1983)"},{"key":"4_CR3","unstructured":"Crow, J., Javaux, D., Rushby, J.: Models and mechanized methods that integrate human factors into automation design. In Abbott, K., Speyer, J. J., Boy, G., eds.: Proc. of the Int\u2019l Conf. on Human-Computer Interaction in Aeronautics: HCI-Aero 2000, Toulouse, France (2000)"},{"key":"4_CR4","doi-asserted-by":"crossref","unstructured":"Butler, R., Miller, S., Pott, J., Carre\u00f1o, V.: A formal methods approach to the analysis of mode confusion. In: Proc. of the 17th Digital Avionics Systems Conf., Bellevue, Washington, USA (1998)","DOI":"10.1109\/DASC.1998.741497"},{"key":"4_CR5","doi-asserted-by":"crossref","unstructured":"Rushby, J.: Analyzing cockpit interfaces using formal methods. In Bowman, H., ed.: Proc. of FM-Elsewhere. Volume 43 of Electronic Notes in Theoretical Computer Science., Pisa, Italy, Elsevier (2000)","DOI":"10.1016\/S1571-0661(04)80891-0"},{"key":"4_CR6","doi-asserted-by":"crossref","unstructured":"Hourizi, R., Johnson, P.: Beyond mode error: Supporting strategic knowledge structures to enhance cockpit safety. In: Proc. of IHM-HCI 2001, Lille, France, Springer (2001)","DOI":"10.1007\/978-1-4471-0353-0_14"},{"key":"4_CR7","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1518\/001872095779049516","volume":"37","author":"N. Sarter","year":"1995","unstructured":"Sarter, N., Woods, D.: How in the world did we ever get into that mode? Mode error and awareness in supervisory control. Human Factors 37 (1995) 5\u201319","journal-title":"Human Factors"},{"key":"4_CR8","doi-asserted-by":"publisher","first-page":"125","DOI":"10.1207\/s15327108ijap0902_3","volume":"9","author":"A. Degani","year":"1999","unstructured":"Degani, A., Shafto, M., Kirlik, A.: Modes in human-machine systems: Constructs, representation and classification. Int\u2019l Journal of Aviation Psychology 9 (1999) 125\u2013138","journal-title":"Int\u2019l Journal of Aviation Psychology"},{"key":"4_CR9","unstructured":"Buth, B.: Formal and Semi-Formal Methods for the Analysis of Industrial Control Systems \u2014 Habilitation Thesis. Univ. Bremen (2001)"},{"key":"4_CR10","unstructured":"Leveson, N., Pinnel, L., Sandys, S., Koga, S., Reese, J.: Analyzing software specifications for mode confusion potential. In: Workshop on Human Error and System Development, Glasgow, UK (1997)"},{"key":"4_CR11","unstructured":"Doherty, G.: A Pragmatic Approach to the Formal Specification of Interactive Systems. PhD thesis, University of York, Dept. of Computer Science (1998)"},{"key":"4_CR12","doi-asserted-by":"crossref","unstructured":"Wright, P., Fields, B., Harrison, M.: Deriving human-error tolerance requirements from tasks. In: Proc. of the 1st Int\u2019l Conf. on Requirements Engineering, Colorado, USA, IEEE (1994) 135\u2013142","DOI":"10.1109\/ICRE.1994.292393"},{"key":"4_CR13","unstructured":"Degani, A., Heymann, M.: Pilot-autopilot interaction: A formal perspective. In Abbott, K., Speyer, J. J., Boy, G., eds.: Proc. of the Int\u2019l Conf. on Human-Computer Interaction in Aeronautics: HCI-Aero 2000, Toulouse, France (2000) 157\u2013168"},{"key":"4_CR14","doi-asserted-by":"crossref","unstructured":"Rodriguez, M., Zimmermann, M., Katahira, M., de Villepin, M., Ingram, B., Leveson, N.: Identifying mode confusion potential in software design. In: Proc. of the Int\u2019l Conf. on Digital Aviation Systems, Philadelphia, PA, USA (2000)","DOI":"10.1109\/DASC.2000.884886"},{"key":"4_CR15","doi-asserted-by":"crossref","unstructured":"Zimmermann, M., Rodriguez, M., Ingram, B., Katahira, M., de Villepin, M., Leveson, N.: Making formal methods practical. In: Proc. of the Int\u2019l Conf. on Digital Aviation Systems, Philadelphia, PA, USA (2000)","DOI":"10.1109\/DASC.2000.886879"},{"key":"4_CR16","doi-asserted-by":"crossref","unstructured":"Rushby, J., Crow, J., Palmer, E.: An automated method to detect potential mode confusions. In: Proc. of the 18th AIAA\/IEEE Digital Avionics Systems Conf., St. Louis, Montana, USA (1999)","DOI":"10.1109\/DASC.1999.863725"},{"key":"4_CR17","series-title":"Lect Notes Comput Sci","doi-asserted-by":"crossref","first-page":"120","DOI":"10.1007\/3-540-48234-2_9","volume-title":"SPIN\u2019 99","author":"G. L\u00fcttgen","year":"1999","unstructured":"L\u00fcttgen, G., Carre\u00f1o, V.: Analyzing mode confusion via model checking. In Dams, D., Gerth, R., Leue, S., Massink, M., eds.: SPIN\u2019 99. Volume 1680 of LNCS., Berlin Heidelberg, Springer (1999) 120\u2013135"},{"key":"4_CR18","unstructured":"Lankenau, A.: Avoiding mode confusion in service-robots. In Mokhtari, M., ed.: Integration of Assistive Technology in the Information Age, Proc. of the 7th Int\u2019l Conf. on Rehabilitation Robotics, Evry, France, IOS Press (2001) 162\u2013167"},{"key":"4_CR19","unstructured":"Palmer, E.: \u201cOops, it didn't arm.\u201d \u2014 A case study of two automation surprises. In: Proc. of the 8th Int\u2019l Symp. on Aviation Psychology. (1995)"},{"key":"4_CR20","unstructured":"Javaux, D.: Explaining Sarter &Woods\u2019 classical results. The cognitive complexity of pilot-autopilot interaction on the Boeing 737-EFIS. In: Proc. of HESSD\u201998. (1998) 62\u201377"},{"key":"4_CR21","unstructured":"Hourizi, R., Johnson, P.: Unmasking mode errors: A new application of task knowledge principles to the knowledge gaps in cockpit design. In: Proc. of INTERACT 2001 \u2014 The 8th IFIP Conf. on Human Computer Interaction, Tokyo, Japan (2001)"},{"key":"4_CR22","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/S0020-0255(00)00020-7","volume":"126","author":"T. R\u00f6fer","year":"2000","unstructured":"R\u00f6fer, T., Lankenau, A.: Architecture and applications of the Bremen Autonomous Wheelchair. Information Sciences 126 (2000) 1\u201320","journal-title":"Information Sciences"},{"key":"4_CR23","first-page":"29","volume":"7","author":"A. Lankenau","year":"2001","unstructured":"Lankenau, A., R\u00f6fer, T.: The Bremen Autonomous Wheelchair \u2014 a versatile and safe mobility assistant. IEEE Robotics and Automation Magazine, \u201cReinventing the Wheelchair\u201d 7 (2001) 29\u201337","journal-title":"Reinventing the Wheelchair"},{"key":"4_CR24","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1016\/0167-6423(95)96871-J","volume":"25","author":"D. L. Parnas","year":"1995","unstructured":"Parnas, D. L., Madey, J.: Functional documents for computer systems. Science of Computer Programming 25 (1995) 41\u201361","journal-title":"Science of Computer Programming"},{"key":"4_CR25","unstructured":"van Schouwen, A. J., Parnas, D. L., Madey, J.: Documentation of requirements for computer systems. In: IEEE Int\u2019l. Symp. on Requirements Engineering \u2014 RE\u201993, San Diego, California, USA, IEEE Comp. Soc. Press (1993) 198\u2013207"},{"key":"4_CR26","volume-title":"Communicating Sequential Processes","author":"C. Hoare","year":"1985","unstructured":"Hoare, C.: Communicating Sequential Processes. Prentice-Hall, Englewood Cliffs, New Jersey. USA (1985)"},{"key":"4_CR27","unstructured":"Roscoe, A.W.: The Theory and Practice of Concurrency. Prentice-Hall (1997)"},{"key":"4_CR28","unstructured":"Lankenau, A.: Bremen Autonomous Wheelchair \u201cRolland\u201d: Self-Localization and Shared-Control \u2014 Challenges in Mobile Service Robotics. PhD thesis, Universit\u00e4t Bremen, Dept. of Mathematics and Computer Science (2002) To appear 29"}],"container-title":["Lecture Notes in Computer Science","Computer Safety, Reliability and Security"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/3-540-45732-1_4","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,3]],"date-time":"2019-05-03T18:40:53Z","timestamp":1556908853000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/3-540-45732-1_4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2002]]},"ISBN":["9783540441571","9783540457329"],"references-count":28,"URL":"https:\/\/doi.org\/10.1007\/3-540-45732-1_4","relation":{},"ISSN":["0302-9743"],"issn-type":[{"value":"0302-9743","type":"print"}],"subject":[],"published":{"date-parts":[[2002]]}}}