{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,3]],"date-time":"2026-04-03T23:29:57Z","timestamp":1775258997759,"version":"3.50.1"},"publisher-location":"Cham","reference-count":21,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030034177","type":"print"},{"value":"9783030034184","type":"electronic"}],"license":[{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018]]},"DOI":"10.1007\/978-3-030-03418-4_32","type":"book-chapter","created":{"date-parts":[[2018,10,28]],"date-time":"2018-10-28T01:32:38Z","timestamp":1540690358000},"page":"539-545","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Model-Based Development for High-Assurance Embedded Systems"],"prefix":"10.1007","author":[{"family":"Robby","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"John","family":"Hatcliff","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jason","family":"Belt","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2018,10,29]]},"reference":[{"key":"32_CR1","doi-asserted-by":"crossref","unstructured":"Carpenter, T., Hatcliff, J., Vasserman, E.Y.: A reference separation architecture for mixed-criticality medical and IoT devices. In: Proceedings of the 1st ACM Workshop on the Internet of Safe Things, SafeThings 2017, New York, pp. 14\u201319. ACM (2017)","DOI":"10.1145\/3137003.3137008"},{"key":"32_CR2","doi-asserted-by":"crossref","unstructured":"Deng, X., Robby, Hatcliff, J.: Kiasan\/KUnit: automatic test case generation and analysis feedback for open object-oriented systems. In: Testing: Academic and Industrial Conference Practice and Research Techniques - MUTATION (TAICPART-MUTATION 2007), pp. 3\u201312, September 2007","DOI":"10.1109\/TAIC.PART.2007.32"},{"key":"32_CR3","unstructured":"Feiler, P.H., Hansson, J., de Niz, D., Wrage, L.: System architecture virtual integration: an industrial case study. Technical report CMU\/SEI-2009-TR-017, CMU (2009)"},{"issue":"5","key":"32_CR4","doi-asserted-by":"publisher","first-page":"357","DOI":"10.2345\/0899-8205-52.5.357","volume":"52","author":"S Harp","year":"2018","unstructured":"Harp, S., Carpenter, T., Hatcliff, J.: A reference architecture for secure medical devices. Biomed. Instrum. Technol. 52(5), 357\u2013365 (2018). Association for the Advancement of Medical Instrumentation (AAMI)","journal-title":"Biomed. Instrum. Technol."},{"key":"32_CR5","doi-asserted-by":"crossref","unstructured":"Hatcliff, J., Dwyer, M.B., Robby: Bogor: a flexible framework for creating software model checkers. In: Testing: Academic Industrial Conference - Practice And Research Techniques (TAIC PART 2006), pp. 3\u201322, August 2006","DOI":"10.1109\/TAIC-PART.2006.5"},{"key":"32_CR6","doi-asserted-by":"crossref","unstructured":"Hatcliff, J., Robby, Chalin, P., Belt, J.: Explicating symbolic execution (xSymExe): an evidence-based verification framework. In: 35th International Conference on Software Engineering (ICSE), pp. 222\u2013231, May 2013","DOI":"10.1109\/ICSE.2013.6606568"},{"key":"32_CR7","doi-asserted-by":"crossref","unstructured":"Hatcliff, J., Larson, B., Carpenter, T., Jones, P., Zhang, Y., Jorgens, J.: The Open PCA pump project: an exemplar open source medical device as a community resource. In: Proceedings of the 2018 Medical Cyber-Physical Systems (MedCPS) Workshop (2018)","DOI":"10.1145\/3357495.3357496"},{"issue":"3","key":"32_CR8","doi-asserted-by":"publisher","first-page":"16:1","DOI":"10.1145\/2187671.2187678","volume":"44","author":"J Hatcliff","year":"2012","unstructured":"Hatcliff, J., Leavens, G.T., Leino, K.R.M., M\u00fcller, P., Parkinson, M.: Behavioral interface specification languages. ACM Comput. Surv. 44(3), 16:1\u201316:58 (2012)","journal-title":"ACM Comput. Surv."},{"key":"32_CR9","doi-asserted-by":"crossref","unstructured":"Hatcliff, J., Wassyng, A., Kelly, T., Comar, C., Jones, P.L.: Certifiably safe software-dependent systems: challenges and directions. In: Proceedings of the on Future of Software Engineering (ICSE FOSE), pp. 182\u2013200 (2014)","DOI":"10.1145\/2593882.2593895"},{"key":"32_CR10","unstructured":"SAE International: SAE AS5506 Rev. C Architecture Analysis and Design Language (AADL). SAE International (2017). http:\/\/www.sae.org"},{"key":"32_CR11","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"228","DOI":"10.1007\/978-3-319-24255-2_17","volume-title":"Computer Safety, Reliability, and Security","author":"AL King","year":"2015","unstructured":"King, A.L., et al.: Towards assurance for plug & play medical systems. In: Koornneef, F., van Gulijk, C. (eds.) SAFECOMP 2014. LNCS, vol. 9337, pp. 228\u2013242. Springer, Cham (2015). https:\/\/doi.org\/10.1007\/978-3-319-24255-2_17"},{"key":"32_CR12","doi-asserted-by":"crossref","unstructured":"Larson, B., Hatcliff, J., Fowler, K., Delange, J.: Illustrating the AADL error modeling annex (v.2) using a simple safety-critical medical device. In: Proceedings of the 2013 ACM SIGAda Annual Conference on High Integrity Language Technology, HILT 2013, New York, pp. 65\u201384. ACM (2013)","DOI":"10.1145\/2658982.2527271"},{"key":"32_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"276","DOI":"10.1007\/978-3-642-38088-4_19","volume-title":"NASA Formal Methods","author":"BR Larson","year":"2013","unstructured":"Larson, B.R., Chalin, P., Hatcliff, J.: BLESS: formal specification and verification of behaviors for embedded systems with software. In: Brat, G., Rungta, N., Venet, A. (eds.) NFM 2013. LNCS, vol. 7871, pp. 276\u2013290. Springer, Heidelberg (2013). https:\/\/doi.org\/10.1007\/978-3-642-38088-4_19"},{"key":"32_CR14","doi-asserted-by":"crossref","unstructured":"Larson, B.R., Hatcliff, J., Chalin, P.: Open source patient-controlled analgesic pump requirements documentation. In: Proceedings of the 5th International Workshop on Software Engineering in Health Care, Piscataway, pp. 28\u201334. IEEE (2013)","DOI":"10.1109\/SEHC.2013.6602474"},{"key":"32_CR15","doi-asserted-by":"publisher","first-page":"74","DOI":"10.1109\/MDAT.2015.2464813","volume":"32","author":"BR Larson","year":"2015","unstructured":"Larson, B.R., Zhang, Y., Barrett, S.C., Hatcliff, J., Jones, P.L.: Enabling safe interoperation by medical device virtual integration. IEEE Des. Test 32, 74\u201388 (2015)","journal-title":"IEEE Des. Test"},{"issue":"1","key":"32_CR16","doi-asserted-by":"publisher","first-page":"75","DOI":"10.1109\/JPROC.2011.2165270","volume":"100","author":"I Lee","year":"2012","unstructured":"Lee, I., et al.: Challenges and research directions in medical cyber-physical systems. Proc. IEEE 100(1), 75\u201390 (2012)","journal-title":"Proc. IEEE"},{"key":"32_CR17","unstructured":"Leroy, X., Blazy, S., K\u00e4stner, D., Schommer, B., Pister, M., Ferdinand, C.: CompCert - a formally verified optimizing compiler. In: ERTS 2016: Embedded Real Time Software and Systems. SEE (2016)"},{"key":"32_CR18","doi-asserted-by":"crossref","unstructured":"Procter, S., Hatcliff, J.: An architecturally-integrated, systems-based hazard analysis for medical applications. In: Twelfth ACM\/IEEE International Conference on Formal Methods and Models for Codesign (MEMOCODE), pp. 124\u2013133. IEEE (2014)","DOI":"10.1109\/MEMCOD.2014.6961850"},{"key":"32_CR19","doi-asserted-by":"crossref","unstructured":"Robby, Dwyer, M.B., Hatcliff, J.: Bogor: an extensible and highly-modular software model checking framework. In: Proceedings of the 9th European Software Engineering Conference Held Jointly with 11th ACM SIGSOFT International Symposium on Foundations of Software Engineering, ESEC\/FSE-2011, pp. 267\u2013276 (2003)","DOI":"10.1145\/949952.940107"},{"key":"32_CR20","unstructured":"Kansas State University: Open PCA pump project (2018). http:\/\/openpcapump.santoslab.org"},{"key":"32_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"42","DOI":"10.1007\/978-3-319-99229-7_5","volume-title":"Computer Safety, Reliability, and Security","author":"Y Zhang","year":"2018","unstructured":"Zhang, Y., Larson, B., Hatcliff, J.: Assurance case considerations for interoperable medical systems. In: Gallina, B., Skavhaug, A., Schoitsch, E., Bitsch, F. (eds.) SAFECOMP 2018. LNCS, vol. 11094, pp. 42\u201348. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-99229-7_5"}],"container-title":["Lecture Notes in Computer Science","Leveraging Applications of Formal Methods, Verification and Validation. Modeling"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-03418-4_32","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,3]],"date-time":"2026-04-03T22:08:43Z","timestamp":1775254123000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-03418-4_32"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018]]},"ISBN":["9783030034177","9783030034184"],"references-count":21,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-03418-4_32","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018]]},"assertion":[{"value":"29 October 2018","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ISoLA","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Symposium on Leveraging Applications of Formal Methods","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Limassol","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Cyprus","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2018","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"5 November 2018","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"9 November 2018","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"8","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"isola2018","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.isola-conference.org\/isola2018\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Equinocs","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"149","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"126","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"85% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"invitation-based event","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}