{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,21]],"date-time":"2026-07-21T23:05:18Z","timestamp":1784675118595,"version":"3.55.0"},"publisher-location":"Cham","reference-count":106,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031197611","type":"print"},{"value":"9783031197628","type":"electronic"}],"license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022]]},"DOI":"10.1007\/978-3-031-19762-8_20","type":"book-chapter","created":{"date-parts":[[2022,10,19]],"date-time":"2022-10-19T08:03:09Z","timestamp":1666166589000},"page":"246-268","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":19,"title":["Safe and\u00a0Secure Future AI-Driven Railway Technologies: Challenges for\u00a0Formal Methods in\u00a0Railway"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2226-386X","authenticated-orcid":false,"given":"Monika","family":"Seisenberger","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2930-6367","authenticated-orcid":false,"given":"Maurice H.","family":"ter Beek","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1223-9986","authenticated-orcid":false,"given":"Xiuyi","family":"Fan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0636-5663","authenticated-orcid":false,"given":"Alessio","family":"Ferrari","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7349-8872","authenticated-orcid":false,"given":"Anne E.","family":"Haxthausen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4307-649X","authenticated-orcid":false,"given":"Phillip","family":"James","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andrew","family":"Lawrence","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6710-8436","authenticated-orcid":false,"given":"Bas","family":"Luttik","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4305-0625","authenticated-orcid":false,"given":"Jaco","family":"van de Pol","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5998-4655","authenticated-orcid":false,"given":"Simon","family":"Wimmer","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2022,10,17]]},"reference":[{"key":"20_CR1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-49851-4","volume-title":"Process Mining: Data Science in Action","author":"WMP van der Aalst","year":"2016","unstructured":"van der Aalst, W.M.P.: Process Mining: Data Science in Action. Springer, Heidelberg (2016). https:\/\/doi.org\/10.1007\/978-3-662-49851-4"},{"key":"20_CR2","unstructured":"ADLINK Technology: Transforming the rail industry with artificial intelligence (2021). https:\/\/www.globalrailwayreview.com\/whitepaper\/127609\/transforming-the-rail-industry-with-ai"},{"issue":"1","key":"20_CR3","doi-asserted-by":"publisher","first-page":"6:1","DOI":"10.1145\/3158668","volume":"28","author":"G Agha","year":"2018","unstructured":"Agha, G., Palmskog, K.: A survey of statistical model checking. ACM Trans. Model. Comput. Simul. 28(1), 6:1-6:39 (2018). https:\/\/doi.org\/10.1145\/3158668","journal-title":"ACM Trans. Model. Comput. Simul."},{"key":"20_CR4","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/978-3-030-31280-0_1","volume-title":"Testing Software and Systems","author":"BK Aichernig","year":"2019","unstructured":"Aichernig, B.K., et al.: Learning a behavior model of hybrid systems through combining model-based testing and machine learning. In: Gaston, C., Kosmatov, N., Le Gall, P. (eds.) ICTSS 2019. LNCS, vol. 11812, pp. 3\u201321. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-31280-0_1"},{"key":"20_CR5","doi-asserted-by":"publisher","unstructured":"Anselmi, A., et al.: An experience in formal verification of safety properties of a railway signalling control system. In: Rabe, G. (ed.) Proceedings of the 14th International Conference on Computer Safety, Reliability and Security (SAFECOMP 1995), pp. 474\u2013488. Springer (1995). https:\/\/doi.org\/10.1007\/978-1-4471-3054-3_33","DOI":"10.1007\/978-1-4471-3054-3_33"},{"issue":"6","key":"20_CR6","doi-asserted-by":"publisher","first-page":"307","DOI":"10.1016\/0020-0190(86)90071-2","volume":"22","author":"KR Apt","year":"1986","unstructured":"Apt, K.R., Kozen, D.: Limits for automatic verification of finite-state concurrent systems. Inf. Process. Lett. 22(6), 307\u2013309 (1986)","journal-title":"Inf. Process. Lett."},{"issue":"3","key":"20_CR7","doi-asserted-by":"publisher","first-page":"265","DOI":"10.1007\/s10009-019-00539-x","volume":"22","author":"P Arcaini","year":"2019","unstructured":"Arcaini, P., Kofro\u0148, J., Je\u017eek, P.: Validation of the Hybrid ERTMS\/ETCS Level 3 using Spin. Int. J. Softw. Tools Technol. Transfer 22(3), 265\u2013279 (2019). https:\/\/doi.org\/10.1007\/s10009-019-00539-x","journal-title":"Int. J. Softw. Tools Technol. Transfer"},{"key":"20_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"326","DOI":"10.1007\/978-3-030-72013-1_17","volume-title":"Tools and Algorithms for the Construction and Analysis of Systems","author":"P Ashok","year":"2021","unstructured":"Ashok, P., Jackermeier, M., K\u0159et\u00ednsk\u00fd, J., Weinhuber, C., Weininger, M., Yadav, M.: dtControl 2.0: explainable strategy representation via decision tree learning steered by experts. In: TACAS 2021. LNCS, vol. 12652, pp. 326\u2013345. Springer, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-72013-1_17"},{"key":"20_CR9","volume-title":"Principles of Model Checking","author":"C Baier","year":"2008","unstructured":"Baier, C., Katoen, J.: Principles of Model Checking. MIT Press, Cambridge (2008)"},{"key":"20_CR10","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"98","DOI":"10.1007\/978-3-030-00244-2_7","volume-title":"Formal Methods for Industrial Critical Systems","author":"M Bartholomeus","year":"2018","unstructured":"Bartholomeus, M., Luttik, B., Willemse, T.: Modelling and analysing ERTMS hybrid level 3 with the mCRL2 toolset. In: Howar, F., Barnat, J. (eds.) FMICS 2018. LNCS, vol. 11119, pp. 98\u2013114. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-030-00244-2_7"},{"key":"20_CR11","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"372","DOI":"10.1007\/978-3-030-03421-4_24","volume-title":"Leveraging Applications of Formal Methods, Verification and Validation. Verification","author":"D Basile","year":"2018","unstructured":"Basile, D., ter Beek, M.H., Ciancia, V.: Statistical model checking of a moving block railway signalling scenario with Uppaal SMC. In: Margaria, T., Steffen, B. (eds.) ISoLA 2018. LNCS, vol. 11245, pp. 372\u2013391. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-030-03421-4_24"},{"key":"20_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/978-3-030-27008-7_1","volume-title":"Formal Methods for Industrial Critical Systems","author":"D Basile","year":"2019","unstructured":"Basile, D., ter Beek, M.H., Ferrari, A., Legay, A.: Modelling and analysing ERTMS L3 moving block railway signalling with Simulink and Uppaal SMC. In: Larsen, K.G., Willemse, T. (eds.) FMICS 2019. LNCS, vol. 11687, pp. 1\u201321. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-27008-7_1"},{"key":"20_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/978-3-030-50086-3_1","volume-title":"Formal Techniques for Distributed Objects, Components, and Systems","author":"D Basile","year":"2020","unstructured":"Basile, D., ter Beek, M.H., Legay, A.: Strategy synthesis for autonomous driving in a moving block railway system with Uppaal Stratego. In: Gotsman, A., Sokolova, A. (eds.) FORTE 2020. LNCS, vol. 12136, pp. 3\u201321. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-50086-3_1"},{"key":"20_CR14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"174","DOI":"10.1007\/978-3-030-85248-1_11","volume-title":"Formal Methods for Industrial Critical Systems","author":"D Basile","year":"2021","unstructured":"Basile, D., Fantechi, A., Rosadi, I.: Formal analysis of the UNISIG safety application intermediate sub-layer. In: Lluch Lafuente, A., Mavridou, A. (eds.) FMICS 2021. LNCS, vol. 12863, pp. 174\u2013190. Springer, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-85248-1_11"},{"issue":"6","key":"20_CR15","doi-asserted-by":"publisher","first-page":"957","DOI":"10.1007\/s00165-021-00556-1","volume":"33","author":"D Basile","year":"2021","unstructured":"Basile, D., Fantechi, A., Rucher, L., Mand\u00f2, G.: Analysing an autonomous tramway positioning system with the Uppaal statistical model checker. Formal Aspects Comput. 33(6), 957\u2013987 (2021). https:\/\/doi.org\/10.1007\/s00165-021-00556-1","journal-title":"Formal Aspects Comput."},{"issue":"3","key":"20_CR16","doi-asserted-by":"publisher","first-page":"50","DOI":"10.1109\/M-PDT.1995.414843","volume":"3","author":"T Basten","year":"1995","unstructured":"Basten, T., Bol, R.N., Voorhoeve, M.: Simulating and analyzing railway interlockings in ExSpect. IEEE Parallel Distrib. Technol. Syst. Appl. 3(3), 50\u201362 (1995). https:\/\/doi.org\/10.1109\/M-PDT.1995.414843","journal-title":"IEEE Parallel Distrib. Technol. Syst. Appl."},{"key":"20_CR17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"211","DOI":"10.1007\/978-3-030-61362-4_11","volume-title":"Leveraging Applications of Formal Methods, Verification and Validation: Verification Principles","author":"MH ter Beek","year":"2020","unstructured":"ter Beek, M.H., Cleophas, L., Legay, A., Schaefer, I., Watson, B.W.: X-by-Construction: correctness meets probability. In: Margaria, T., Steffen, B. (eds.) ISoLA 2020. LNCS, vol. 12476, pp. 211\u2013215. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-61362-4_11"},{"key":"20_CR18","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"141","DOI":"10.1007\/978-3-031-19849-6_9","volume-title":"ISoLA 2022","author":"MH ter Beek","year":"2022","unstructured":"ter Beek, M.H., Cleophas, L., Leucker, M., Schaefer, I.: X-by-Construction meets runtime verification. In: Margaria, T., Steffen, B. (eds.) ISoLA 2022. LNCS, vol. 13701, pp. 141\u2013148. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-19849-6_9"},{"key":"20_CR19","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"121","DOI":"10.1007\/978-3-540-73368-3_14","volume-title":"Computer Aided Verification","author":"G Behrmann","year":"2007","unstructured":"Behrmann, G., Cougnard, A., David, A., Fleury, E., Larsen, K.G., Lime, D.: UPPAAL-Tiga: time for playing games! In: Damm, W., Hermanns, H. (eds.) CAV 2007. LNCS, vol. 4590, pp. 121\u2013125. Springer, Heidelberg (2007). https:\/\/doi.org\/10.1007\/978-3-540-73368-3_14"},{"key":"20_CR20","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1016\/j.scico.2017.10.011","volume":"154","author":"U Berger","year":"2018","unstructured":"Berger, U., James, P., Lawrence, A., Roggenbach, M., Seisenberger, M.: Verification of the European Rail Traffic Management System in Real-Time Maude. Sci. Comput. Program. 154, 61\u201388 (2018). https:\/\/doi.org\/10.1016\/j.scico.2017.10.011","journal-title":"Sci. Comput. Program."},{"issue":"1","key":"20_CR21","doi-asserted-by":"publisher","first-page":"1","DOI":"10.2168\/LMCS-11(1:6)2015","volume":"11","author":"U Berger","year":"2015","unstructured":"Berger, U., Lawrence, A., Forsberg, F.N., Seisenberger, M.: Extracting verified decision procedures: DPLL and resolution. Log. Methods Comp. Sci. 11(1), 1\u201318 (2015). https:\/\/doi.org\/10.2168\/LMCS-11(1:6)2015","journal-title":"Log. Methods Comp. Sci."},{"issue":"2","key":"20_CR22","doi-asserted-by":"publisher","first-page":"139","DOI":"10.1023\/A:1008645826258","volume":"12","author":"C Bernardeschi","year":"1998","unstructured":"Bernardeschi, C., Fantechi, A., Gnesi, S., Larosa, S., Mongardi, G., Romano, D.: A formal verification environment for railway signaling system design. Formal Methods Syst. Des. 12(2), 139\u2013161 (1998). https:\/\/doi.org\/10.1023\/A:1008645826258","journal-title":"Formal Methods Syst. Des."},{"key":"20_CR23","doi-asserted-by":"publisher","unstructured":"Bertot, Y., Cast\u00e9ran, P.: Interactive Theorem Proving and Program Development - Coq\u2019Art: The Calculus of Inductive Constructions. Texts in Theoretical Computer Science. An EATCS Series, Springer, Heidelberg (2004). https:\/\/doi.org\/10.1007\/978-3-662-07964-5","DOI":"10.1007\/978-3-662-07964-5"},{"key":"20_CR24","doi-asserted-by":"publisher","first-page":"14011","DOI":"10.1109\/TITS.2021.3131637","volume":"23","author":"N Be\u0161inovi\u0107","year":"2022","unstructured":"Be\u0161inovi\u0107, N., et al.: Artificial intelligence in railway transport: taxonomy, regulations and applications. IEEE Trans. Intell. Transp. Syst. 23, 14011\u201314024 (2022). https:\/\/doi.org\/10.1109\/TITS.2021.3131637","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"key":"20_CR25","doi-asserted-by":"publisher","first-page":"314","DOI":"10.1016\/j.trc.2017.07.002","volume":"82","author":"M Biagi","year":"2017","unstructured":"Biagi, M., Carnevali, L., Paolieri, M., Vicario, E.: Performability evaluation of the ERTMS\/ETCS - level 3. Transp. Res. C-Emer. 82, 314\u2013336 (2017). https:\/\/doi.org\/10.1016\/j.trc.2017.07.002","journal-title":"Transp. Res. C-Emer."},{"issue":"1","key":"20_CR26","doi-asserted-by":"publisher","first-page":"333","DOI":"10.1007\/s10817-018-9455-7","volume":"61","author":"JC Blanchette","year":"2018","unstructured":"Blanchette, J.C., Fleury, M., Lammich, P., Weidenbach, C.: A verified SAT solver framework with learn, forget, restart, and incrementality. J. Autom. Reasoning 61(1), 333\u2013365 (2018). https:\/\/doi.org\/10.1007\/s10817-018-9455-7","journal-title":"J. Autom. Reasoning"},{"key":"20_CR27","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"22","DOI":"10.1007\/978-3-030-27008-7_2","volume-title":"Formal Methods for Industrial Critical Systems","author":"M Bouwman","year":"2019","unstructured":"Bouwman, M., Janssen, B., Luttik, B.: Formal modelling and verification of an interlocking using mCRL2. In: Larsen, K.G., Willemse, T. (eds.) FMICS 2019. LNCS, vol. 11687, pp. 22\u201339. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-27008-7_2"},{"key":"20_CR28","doi-asserted-by":"publisher","unstructured":"Bouwman, M., van der Wal, D., Luttik, B., Stoelinga, M., Rensink, A.: A case in point: verification and testing of a EULYNX interface. Form. Asp. Comput. (2022). https:\/\/doi.org\/10.1145\/3528207","DOI":"10.1145\/3528207"},{"key":"20_CR29","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"112","DOI":"10.1007\/11603009_10","volume-title":"Formal Modeling and Analysis of Timed Systems","author":"P Bouyer","year":"2005","unstructured":"Bouyer, P., Laroussinie, F., Reynier, P.-A.: Diagonal constraints in timed automata: forward analysis of timed systems. In: Pettersson, P., Yi, W. (eds.) FORMATS 2005. LNCS, vol. 3829, pp. 112\u2013126. Springer, Heidelberg (2005). https:\/\/doi.org\/10.1007\/11603009_10"},{"issue":"1","key":"20_CR30","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/s10817-017-9418-4","volume":"60","author":"J Brunner","year":"2017","unstructured":"Brunner, J., Lammich, P.: Formal verification of an executable LTL model checker with partial order reduction. J. Autom. Reason. 60(1), 3\u201321 (2017). https:\/\/doi.org\/10.1007\/s10817-017-9418-4","journal-title":"J. Autom. Reason."},{"issue":"3","key":"20_CR31","doi-asserted-by":"publisher","first-page":"249","DOI":"10.1007\/s10009-020-00562-3","volume":"22","author":"M Butler","year":"2020","unstructured":"Butler, M., Hoang, T.S., Raschke, A., Reichl, K.: Introduction to special section on the ABZ 2018 case study: Hybrid ERTMS\/ETCS Level 3. Int. J. Softw. Tools Technol. Transfer 22(3), 249\u2013255 (2020). https:\/\/doi.org\/10.1007\/s10009-020-00562-3","journal-title":"Int. J. Softw. Tools Technol. Transfer"},{"key":"20_CR32","doi-asserted-by":"publisher","unstructured":"Cappart, Q., Limbr\u00e9e, C., Schaus, P., Quilbeuf, J., Traonouez, L., Legay, A.: Verification of interlocking systems using statistical model checking. In: Proceedings of the 18th International Symposium on High Assurance Systems Engineering (HASE 2017), pp. 61\u201368. IEEE (2017). https:\/\/doi.org\/10.1109\/HASE.2017.10","DOI":"10.1109\/HASE.2017.10"},{"key":"20_CR33","doi-asserted-by":"publisher","first-page":"106024","DOI":"10.1016\/j.cie.2019.106024","volume":"137","author":"TP Carvalho","year":"2019","unstructured":"Carvalho, T.P., et al.: A systematic literature review of machine learning methods applied to predictive maintenance. Comput. Ind. Eng. 137, 106024 (2019). https:\/\/doi.org\/10.1016\/j.cie.2019.106024","journal-title":"Comput. Ind. Eng."},{"key":"20_CR34","doi-asserted-by":"publisher","unstructured":"Chiappini, A., et al.: Formalization and validation of a subset of the European train control system. In: Proceedings of the 32nd International Conference on Software Engineering (ICSE 2010), pp. 109\u2013118. ACM (2010). https:\/\/doi.org\/10.1145\/1810295.1810312","DOI":"10.1145\/1810295.1810312"},{"key":"20_CR35","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"378","DOI":"10.1007\/978-3-642-31424-7_29","volume-title":"Computer Aided Verification","author":"A Cimatti","year":"2012","unstructured":"Cimatti, A., et al.: Formal verification and validation of ERTMS industrial railway train spacing system. In: Madhusudan, P., Seshia, S.A. (eds.) CAV 2012. LNCS, vol. 7358, pp. 378\u2013393. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-31424-7_29"},{"key":"20_CR36","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"284","DOI":"10.1007\/3-540-49646-7_22","volume-title":"Computer Safety, Reliability and Security","author":"A Cimatti","year":"1998","unstructured":"Cimatti, A., Giunchiglia, F., Mongardi, G., Romano, D., Torielli, F., Traverso, P.: Model checking safety critical software with SPIN: an application to a railway interlocking system. In: Ehrenberger, W. (ed.) SAFECOMP 1998. LNCS, vol. 1516, pp. 284\u2013293. Springer, Heidelberg (1998). https:\/\/doi.org\/10.1007\/3-540-49646-7_22"},{"key":"20_CR37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10575-8","volume-title":"Handbook of Model Checking","year":"2018","unstructured":"Clarke, E.M., Henzinger, T.A., Veith, H., Bloem, R. (eds.): Handbook of Model Checking. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-10575-8"},{"issue":"3","key":"20_CR38","doi-asserted-by":"publisher","first-page":"281","DOI":"10.1007\/s10009-019-00540-4","volume":"22","author":"A Cunha","year":"2019","unstructured":"Cunha, A., Macedo, N.: Validating the Hybrid ERTMS\/ETCS level 3 concept with Electrum. Int. J. Softw. Tools Technol. Transfer 22(3), 281\u2013296 (2019). https:\/\/doi.org\/10.1007\/s10009-019-00540-4","journal-title":"Int. J. Softw. Tools Technol. Transfer"},{"issue":"1","key":"20_CR39","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s10664-020-09912-w","volume":"26","author":"CDN Damasceno","year":"2021","unstructured":"Damasceno, C.D.N., Mousavi, M.R., Simao, A.S.: Learning by sampling: learning behavioral family models from software product lines. Empir. Softw. Eng. 26(1), 1\u201346 (2021). https:\/\/doi.org\/10.1007\/s10664-020-09912-w","journal-title":"Empir. Softw. Eng."},{"key":"20_CR40","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"206","DOI":"10.1007\/978-3-662-46681-0_16","volume-title":"Tools and Algorithms for the Construction and Analysis of Systems","author":"A David","year":"2015","unstructured":"David, A., Jensen, P.G., Larsen, K.G., Miku\u010dionis, M., Taankvist, J.H.:  Uppaal Stratego. In: Baier, C., Tinelli, C. (eds.) TACAS 2015. LNCS, vol. 9035, pp. 206\u2013211. Springer, Heidelberg (2015). https:\/\/doi.org\/10.1007\/978-3-662-46681-0_16"},{"issue":"3","key":"20_CR41","doi-asserted-by":"publisher","first-page":"297","DOI":"10.1007\/s10009-019-00548-w","volume":"22","author":"D Dghaym","year":"2019","unstructured":"Dghaym, D., Dalvandi, M., Poppleton, M., Snook, C.: Formalising the hybrid ERTMS Level 3 specification in iUML-B and Event-B. Int. J. Softw. Tools Technol. Transfer 22(3), 297\u2013313 (2019). https:\/\/doi.org\/10.1007\/s10009-019-00548-w","journal-title":"Int. J. Softw. Tools Technol. Transfer"},{"key":"20_CR42","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"79","DOI":"10.1007\/978-3-030-18744-6_5","volume-title":"Reliability, Safety, and Security of Railway Systems. Modelling, Analysis, Verification, and Certification","author":"S Dillmann","year":"2019","unstructured":"Dillmann, S., H\u00e4hnle, R.: Automated planning of ETCS tracks. In: Collart-Dutilleul, S., Lecomte, T., Romanovsky, A. (eds.) RSSRail 2019. LNCS, vol. 11495, pp. 79\u201390. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-18744-6_5"},{"key":"20_CR43","doi-asserted-by":"publisher","unstructured":"Duell, J., Fan, X., Burnett, B., Aarts, G., Zhou, S.M.: A comparison of explanations given by explainable artificial intelligence methods on analysing electronic health records. In: Proceedings of the 7th EMBS International Conference on Biomedical and Health Informatics (BHI 2021), pp. 1\u20134. IEEE (2021). https:\/\/doi.org\/10.1109\/BHI50953.2021.9508618","DOI":"10.1109\/BHI50953.2021.9508618"},{"issue":"1","key":"20_CR44","doi-asserted-by":"publisher","first-page":"107","DOI":"10.1007\/s100090100063","volume":"4","author":"C Eisner","year":"2002","unstructured":"Eisner, C.: Using symbolic CTL model checking to verify the railway stations of Hoorn-Kersenboogerd and Heerhugowaard. Int. J. Softw. Tools Technol. Transf. 4(1), 107\u2013124 (2002). https:\/\/doi.org\/10.1007\/s100090100063","journal-title":"Int. J. Softw. Tools Technol. Transf."},{"key":"20_CR45","doi-asserted-by":"crossref","unstructured":"Esparza, J., Lammich, P., Neumann, R., Nipkow, T., Schimpf, A., Smaus, J.: A fully verified executable LTL model checker. Arch. Formal Proofs (2014). https:\/\/isa-afp.org\/entries\/CAVA_LTL_Modelchecker.html","DOI":"10.1007\/978-3-642-39799-8_31"},{"key":"20_CR46","unstructured":"European Committee for Electrotechnical Standardization: CENELEC EN 50128 \u2013 Railway applications - Communication, signalling and processing systems - Software for railway control and protection systems (2011)"},{"key":"20_CR47","unstructured":"European Committee for Electrotechnical Standardization: CENELEC EN 50126\u20131 \u2013 Railway applications - The specification and demonstration of reliability, availability, maintainability and safety (RAMS) - Part 1: Generic RAMS process (2017)"},{"key":"20_CR48","unstructured":"European Committee for Electrotechnical Standardization: CENELEC EN 50129 \u2013 Railway applications - Communication, signalling and processing systems - Safety related electronic systems for signalling (2018)"},{"key":"20_CR49","unstructured":"Fan, X.: Verifiable Explainable AI (2021)"},{"key":"20_CR50","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"276","DOI":"10.1007\/978-3-642-34032-1_26","volume-title":"Leveraging Applications of Formal Methods, Verification and Validation. Applications and Case Studies","author":"A Fantechi","year":"2012","unstructured":"Fantechi, A.: Distributing the challenge of model checking interlocking control tables. In: Margaria, T., Steffen, B. (eds.) ISoLA 2012. LNCS, vol. 7610, pp. 276\u2013289. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-34032-1_26"},{"key":"20_CR51","doi-asserted-by":"publisher","unstructured":"Ferrari, A., ter Beek, M.H.: Formal methods in railways: a systematic mapping study. ACM Comput. Surv. (2022). https:\/\/doi.org\/10.1145\/3520480","DOI":"10.1145\/3520480"},{"key":"20_CR52","doi-asserted-by":"publisher","unstructured":"Ferrari, A., Magnani, G., Grasso, D., Fantechi, A.: Model checking interlocking control tables. In: Schnieder, E., Tarnai, G. (eds.) Proceedings of the 8th Symposium on Formal Methods for Automation and Safety in Railway and Automotive Systems (FORMS\/FORMAT 2010), pp. 107\u2013115. Springer (2010). https:\/\/doi.org\/10.1007\/978-3-642-14261-1_11","DOI":"10.1007\/978-3-642-14261-1_11"},{"key":"20_CR53","doi-asserted-by":"publisher","unstructured":"Ferrari, A., Mazzanti, F., Basile, D., ter Beek, M.H.: Systematic evaluation and usability analysis of formal tools for railway system design. IEEE Trans. Softw. Eng. (2021). https:\/\/doi.org\/10.1109\/TSE.2021.3124677","DOI":"10.1109\/TSE.2021.3124677"},{"key":"20_CR54","doi-asserted-by":"publisher","unstructured":"Ferrari, A., Mazzanti, F., Basile, D., ter Beek, M.H., Fantechi, A.: Comparing formal tools for system design: a judgment study. In: Proceedings of the 42nd International Conference on Software Engineering (ICSE 2020), pp. 62\u201374. ACM (2020). https:\/\/doi.org\/10.1145\/3377811.3380373","DOI":"10.1145\/3377811.3380373"},{"key":"20_CR55","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"49","DOI":"10.1007\/978-3-030-83723-5_4","volume-title":"Leveraging Applications of Formal Methods, Verification and Validation: Tools and Trends","author":"J Fitzgerald","year":"2021","unstructured":"Fitzgerald, J., Larsen, P.G., Margaria, T., Woodcock, J.: Engineering of digital twins for cyber-physical systems. In: Margaria, T., Steffen, B. (eds.) ISoLA 2020. LNCS, vol. 12479, pp. 49\u201353. Springer, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-83723-5_4"},{"key":"20_CR56","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/978-3-031-19762-8_1","volume-title":"ISoLA 2022","author":"J Fitzgerald","year":"2022","unstructured":"Fitzgerald, J., Larsen, P.G., Margaria, T., Woodcock, J., Gomes, C.: Engineering of digital twins for cyber-physical systems. In: Margaria, T., Steffen, B. (eds.) ISoLA 2022. LNCS, vol. 13704, pp. 3\u20138. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-19762-8_1"},{"issue":"3","key":"20_CR57","doi-asserted-by":"publisher","first-page":"349","DOI":"10.1007\/s10009-019-00542-2","volume":"22","author":"SJ Tueno Fotso","year":"2019","unstructured":"Tueno Fotso, S.J., Frappier, M., Laleau, R., Mammar, A.: Modeling the hybrid ERTMS\/ETCS level 3 standard using a formal requirements engineering approach. Int. J. Softw. Tools Technol. Transfer 22(3), 349\u2013363 (2019). https:\/\/doi.org\/10.1007\/s10009-019-00542-2","journal-title":"Int. J. Softw. Tools Technol. Transfer"},{"key":"20_CR58","unstructured":"Furness, N., van Houten, H., Arenas, L., Bartholomeus, M.: ERTMS level 3: the game-changer. IRSE News 232, 2\u20139 (2017). https:\/\/www.irse.nl\/resources\/170314-ERTMS-L3-The-gamechanger-from-IRSE-News-Issue-232.pdf"},{"issue":"4","key":"20_CR59","doi-asserted-by":"publisher","first-page":"8","DOI":"10.1109\/MITP.2020.3005640","volume":"22","author":"F Gossen","year":"2020","unstructured":"Gossen, F., Margaria, T., Steffen, B.: Towards explainability in machine learning: the formal methods way. IT Prof. 22(4), 8\u201312 (2020). https:\/\/doi.org\/10.1109\/MITP.2020.3005640","journal-title":"IT Prof."},{"issue":"2","key":"20_CR60","doi-asserted-by":"publisher","first-page":"178","DOI":"10.1007\/s10703-021-00369-1","volume":"57","author":"A Griggio","year":"2021","unstructured":"Griggio, A., Roveri, M., Tonetta, S.: Certifying proofs for SAT-based model checking. Formal Methods Syst. Des. 57(2), 178\u2013210 (2021). https:\/\/doi.org\/10.1007\/s10703-021-00369-1","journal-title":"Formal Methods Syst. Des."},{"key":"20_CR61","doi-asserted-by":"publisher","unstructured":"Groote, J.F., Vlijmen, S.F.M., Koorn, J.W.C.: The safety guaranteeing system at station Hoorn-Kersenboogerd. In: Proceedings of the 10th Annual Conference on Computer Assurance Systems Integrity, Software Safety and Process Security (COMPASS 1995), pp. 57\u201368. IEEE (1995). https:\/\/doi.org\/10.1109\/CMPASS.1995.521887","DOI":"10.1109\/CMPASS.1995.521887"},{"issue":"3","key":"20_CR62","doi-asserted-by":"publisher","first-page":"315","DOI":"10.1007\/s10009-020-00551-6","volume":"22","author":"D Hansen","year":"2020","unstructured":"Hansen, D., et al.: Validation and real-life demonstration of ETCS hybrid level 3 principles using a formal B model. Int. J. Softw. Tools Technol. Transfer 22(3), 315\u2013332 (2020). https:\/\/doi.org\/10.1007\/s10009-020-00551-6","journal-title":"Int. J. Softw. Tools Technol. Transfer"},{"key":"20_CR63","doi-asserted-by":"publisher","unstructured":"Hartonas-Garmhausen, V., Kurfess, T.R., Clarke, E.M., Long, D.E.: Automatic verification of industrial designs. In: Proceedings of the Workshop on Industrial-Strength Formal Specification Techniques (WIFT 1995), pp. 88\u201396. IEEE Computer Society (1995). https:\/\/doi.org\/10.1109\/WIFT.1995.515481","DOI":"10.1109\/WIFT.1995.515481"},{"key":"20_CR64","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"118","DOI":"10.1007\/978-3-642-21437-0_11","volume-title":"FM 2011: Formal Methods","author":"AE Haxthausen","year":"2011","unstructured":"Haxthausen, A.E., Kj\u00e6r, A.A., Le Bliguet, M.: Formal development of a tool for automated modelling and verification of relay interlocking systems. In: Butler, M., Schulte, W. (eds.) FM 2011. LNCS, vol. 6664, pp. 118\u2013132. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-21437-0_11"},{"issue":"1","key":"20_CR65","doi-asserted-by":"publisher","first-page":"94","DOI":"10.1006\/jcss.1998.1581","volume":"57","author":"TA Henzinger","year":"1998","unstructured":"Henzinger, T.A., Kopke, P.W., Puri, A., Varaiya, P.: What\u2019s decidable about hybrid automata? J. Comput. Syst. Sci. 57(1), 94\u2013124 (1998). https:\/\/doi.org\/10.1006\/jcss.1998.1581","journal-title":"J. Comput. Syst. Sci."},{"key":"20_CR66","doi-asserted-by":"publisher","first-page":"91","DOI":"10.1016\/j.scico.2016.05.010","volume":"133","author":"LV Hong","year":"2017","unstructured":"Hong, L.V., Haxthausen, A.E., Peleska, J.: Formal modelling and verification of interlocking systems featuring sequential release. Sci. Comput. Program. 133, 91\u2013115 (2017). https:\/\/doi.org\/10.1016\/j.scico.2016.05.010","journal-title":"Sci. Comput. Program."},{"key":"20_CR67","unstructured":"Hvilsh\u00f8j, F., Iosifidis, A., Assent, I.: ECINN: efficient counterfactuals from invertible neural networks. CoRR abs\/2103.13701 (2021). https:\/\/doi.org\/10.48550\/arXiv.2103.13701"},{"key":"20_CR68","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"253","DOI":"10.1007\/978-3-319-05032-4_19","volume-title":"Software Engineering and Formal Methods","author":"P James","year":"2014","unstructured":"James, P., et al.: Verification of solid state interlocking programs. In: Counsell, S., N\u00fa\u00f1ez, M. (eds.) SEFM 2013. LNCS, vol. 8368, pp. 253\u2013268. Springer, Cham (2014). https:\/\/doi.org\/10.1007\/978-3-319-05032-4_19"},{"issue":"6","key":"20_CR69","doi-asserted-by":"publisher","first-page":"685","DOI":"10.1007\/s10009-014-0304-7","volume":"16","author":"P James","year":"2014","unstructured":"James, P., Moller, F., Nguyen, H.N., Roggenbach, M., Schneider, S., Treharne, H.: Techniques for modelling and verifying railway interlockings. Int. J. Softw. Tools Technol. Transfer 16(6), 685\u2013711 (2014). https:\/\/doi.org\/10.1007\/s10009-014-0304-7","journal-title":"Int. J. Softw. Tools Technol. Transfer"},{"key":"20_CR70","doi-asserted-by":"publisher","first-page":"315","DOI":"10.1016\/j.scico.2014.04.005","volume":"96","author":"P James","year":"2014","unstructured":"James, P., Moller, F., Nguyen, H.N., Roggenbach, M., Schneider, S., Treharne, H.: On modelling and verifying railway interlockings: tracking train lengths. Sci. Comput. Program. 96, 315\u2013336 (2014). https:\/\/doi.org\/10.1016\/j.scico.2014.04.005","journal-title":"Sci. Comput. Program."},{"key":"20_CR71","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"189","DOI":"10.1007\/978-3-319-05032-4_15","volume-title":"Software Engineering and Formal Methods","author":"P James","year":"2014","unstructured":"James, P., et al.: Verification of scheme plans using CSP$$||$$B. In: Counsell, S., N\u00fa\u00f1ez, M. (eds.) SEFM 2013. LNCS, vol. 8368, pp. 189\u2013204. Springer, Cham (2014). https:\/\/doi.org\/10.1007\/978-3-319-05032-4_15"},{"issue":"1","key":"20_CR72","doi-asserted-by":"publisher","first-page":"11","DOI":"10.1007\/s11786-014-0174-0","volume":"8","author":"P James","year":"2014","unstructured":"James, P., Roggenbach, M.: Encapsulating formal methods within domain specific languages: a solution for verifying railway scheme plans. Math. Comput. Sci. 8(1), 11\u201338 (2014). https:\/\/doi.org\/10.1007\/s11786-014-0174-0","journal-title":"Math. Comput. Sci."},{"key":"20_CR73","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"692","DOI":"10.1007\/978-3-662-46681-0_61","volume-title":"Tools and Algorithms for the Construction and Analysis of Systems","author":"G Kant","year":"2015","unstructured":"Kant, G., Laarman, A., Meijer, J., van de Pol, J., Blom, S., van Dijk, T.: LTSmin: high-performance language-independent model checking. In: Baier, C., Tinelli, C. (eds.) TACAS 2015. LNCS, vol. 9035, pp. 692\u2013707. Springer, Heidelberg (2015). https:\/\/doi.org\/10.1007\/978-3-662-46681-0_61"},{"key":"20_CR74","doi-asserted-by":"publisher","unstructured":"Katz, G., Barrett, C.W., Tinelli, C., Reynolds, A., Hadarean, L.: Lazy proofs for DPLL(T)-based SMT solvers. In: Proceedings of the 16th Conference on Formal Methods in Computer-Aided Design (FMCAD 2016), pp. 93\u2013100. IEEE (2016). https:\/\/doi.org\/10.1109\/FMCAD.2016.7886666","DOI":"10.1109\/FMCAD.2016.7886666"},{"key":"20_CR75","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"475","DOI":"10.1007\/978-3-030-53291-8_25","volume-title":"Computer Aided Verification","author":"M Kwiatkowska","year":"2020","unstructured":"Kwiatkowska, M., Norman, G., Parker, D., Santos, G.: PRISM-games 3.0: stochastic game verification with concurrency, equilibria and time. In: Lahiri, S.K., Wang, C. (eds.) CAV 2020. LNCS, vol. 12225, pp. 475\u2013487. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-53291-8_25"},{"key":"20_CR76","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"393","DOI":"10.1007\/978-3-031-19759-8_24","volume-title":"ISoLA 2022","author":"K Larsen","year":"2022","unstructured":"Larsen, K., Legay, A., Nolte, G., Schl\u00fcter, M., Stoelinga, M., Steffen, B.: Formal methods meet machine learning (F3ML). In: Margaria, T., Steffen, B. (eds.) ISoLA 2022. LNCS, vol. 13703, pp. 393\u2013405. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-19759-8_24"},{"key":"20_CR77","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"124","DOI":"10.1007\/978-3-030-83723-5_9","volume-title":"Leveraging Applications of Formal Methods, Verification and Validation: Tools and Trends","author":"T Lecomte","year":"2021","unstructured":"Lecomte, T.: Digital modelling in the railways. In: Margaria, T., Steffen, B. (eds.) ISoLA 2020. LNCS, vol. 12479, pp. 124\u2013139. Springer, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-83723-5_9"},{"key":"20_CR78","unstructured":"Lundberg, S.M., Lee, S.: A unified approach to interpreting model predictions. In: Proceedings of the 31st Conference on Neural Information Processing Systems (NIPS 2017), pp. 4768\u20134777 (2017). https:\/\/proceedings.neurips.cc\/paper\/2017\/hash\/8a20a8621978632d76c43dfd28b67767-Abstract.html"},{"key":"20_CR79","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"279","DOI":"10.1007\/978-3-319-47169-3_20","volume-title":"Leveraging Applications of Formal Methods, Verification and Validation: Discussion, Dissemination, Applications","author":"HD Macedo","year":"2016","unstructured":"Macedo, H.D., Fantechi, A., Haxthausen, A.E.: Compositional verification of multi-station interlocking systems. In: Margaria, T., Steffen, B. (eds.) ISoLA 2016. LNCS, vol. 9953, pp. 279\u2013293. Springer, Cham (2016). https:\/\/doi.org\/10.1007\/978-3-319-47169-3_20"},{"key":"20_CR80","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"146","DOI":"10.1007\/978-3-319-57288-8_11","volume-title":"NASA Formal Methods","author":"HD Macedo","year":"2017","unstructured":"Macedo, H.D., Fantechi, A., Haxthausen, A.E.: Compositional model checking of interlocking systems for lines with multiple stations. In: Barrett, C., Davies, M., Kahsai, T. (eds.) NFM 2017. LNCS, vol. 10227, pp. 146\u2013162. Springer, Cham (2017). https:\/\/doi.org\/10.1007\/978-3-319-57288-8_11"},{"issue":"3","key":"20_CR81","doi-asserted-by":"publisher","first-page":"333","DOI":"10.1007\/s10009-019-00543-1","volume":"22","author":"A Mammar","year":"2019","unstructured":"Mammar, A., Frappier, M., Tueno Fotso, S.J., Laleau, R.: A formal refinement-based analysis of the hybrid ERTMS\/ETCS level 3 standard. Int. J. Softw. Tools Technol. Transfer 22(3), 333\u2013347 (2019). https:\/\/doi.org\/10.1007\/s10009-019-00543-1","journal-title":"Int. J. Softw. Tools Technol. Transfer"},{"key":"20_CR82","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"138","DOI":"10.1007\/978-3-030-91384-7_8","volume-title":"Model Checking, Synthesis, and Learning","author":"T Margaria","year":"2021","unstructured":"Margaria, T., Schieweck, A.: Towards engineering digital twins by\u00a0active behaviour mining. In: Olderog, E.-R., Steffen, B., Yi, W. (eds.) Model Checking, Synthesis, and Learning. LNCS, vol. 13030, pp. 138\u2013163. Springer, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-91384-7_8"},{"issue":"2","key":"20_CR83","doi-asserted-by":"publisher","first-page":"37e:1","DOI":"10.1145\/3487043","volume":"31","author":"S Mart\u00ednez-Fern\u00e1ndez","year":"2022","unstructured":"Mart\u00ednez-Fern\u00e1ndez, S., et al.: Software engineering for AI-based systems: a survey. ACM Trans. Softw. Eng. Methodol. 31(2), 37e:1-37e:59 (2022). https:\/\/doi.org\/10.1145\/3487043","journal-title":"ACM Trans. Softw. Eng. Methodol."},{"key":"20_CR84","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"109","DOI":"10.1007\/978-3-319-10702-8_8","volume-title":"Formal Methods for Industrial Critical Systems","author":"F Mazzanti","year":"2014","unstructured":"Mazzanti, F., Spagnolo, G.O., Della Longa, S., Ferrari, A.: Deadlock avoidance in train scheduling: a model checking approach. In: Lang, F., Flammini, F. (eds.) FMICS 2014. LNCS, vol. 8718, pp. 109\u2013123. Springer, Cham (2014). https:\/\/doi.org\/10.1007\/978-3-319-10702-8_8"},{"key":"20_CR85","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"91","DOI":"10.1007\/978-3-030-18744-6_6","volume-title":"Reliability, Safety, and Security of Railway Systems. Modelling, Analysis, Verification, and Certification","author":"M Chenariyan Nakhaee","year":"2019","unstructured":"Chenariyan Nakhaee, M., Hiemstra, D., Stoelinga, M., van Noort, M.: The recent applications of machine learning in rail track maintenance: a survey. In: Collart-Dutilleul, S., Lecomte, T., Romanovsky, A. (eds.) RSSRail 2019. LNCS, vol. 11495, pp. 91\u2013105. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-18744-6_6"},{"key":"20_CR86","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"2","DOI":"10.1007\/3-540-44585-4_2","volume-title":"Computer Aided Verification","author":"KS Namjoshi","year":"2001","unstructured":"Namjoshi, K.S.: Certifying model checkers. In: Berry, G., Comon, H., Finkel, A. (eds.) CAV 2001. LNCS, vol. 2102, pp. 2\u201313. Springer, Heidelberg (2001). https:\/\/doi.org\/10.1007\/3-540-44585-4_2"},{"key":"20_CR87","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45949-9","volume-title":"Isabelle\/HOL","year":"2002","unstructured":"Nipkow, T., Wenzel, M., Paulson, L.C. (eds.): Isabelle\/HOL. LNCS, vol. 2283. Springer, Heidelberg (2002). https:\/\/doi.org\/10.1007\/3-540-45949-9"},{"key":"20_CR88","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"247","DOI":"10.1007\/978-3-030-45190-5_14","volume-title":"Tools and Algorithms for the Construction and Analysis of Systems","author":"W Oortwijn","year":"2020","unstructured":"Oortwijn, W., Huisman, M., Joosten, S.J.C., van de Pol, J.: automated verification of parallel nested DFS. In: TACAS 2020. LNCS, vol. 12078, pp. 247\u2013265. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-45190-5_14"},{"key":"20_CR89","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"63","DOI":"10.1007\/978-3-031-05814-1_5","volume-title":"Reliability, Safety, and Security of Railway Systems. Modelling, Analysis, Verification, and Certification","author":"T Peham","year":"2022","unstructured":"Peham, T., Przigoda, J., Przigoda, N., Wille, R.: Optimal railway routing using virtual subsections. In: Collart-Dutilleul, S., Haxthausen, A.E., Lecomte, T. (eds.) RSSRail 2022. LNCS, vol. 13294, pp. 63\u201379. Springe, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-05814-1_5"},{"key":"20_CR90","doi-asserted-by":"crossref","unstructured":"Peleska, J., Haxthausen, A.E., Lecomte, T.: Standardisation considerations for autonomous train control. In: Margaria, T., Steffen, B. (eds.) ISoLA 2022. LNCS, Springer (2022)","DOI":"10.1007\/978-3-031-19762-8_22"},{"key":"20_CR91","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"246","DOI":"10.1007\/978-3-642-10373-5_13","volume-title":"Formal Methods and Software Engineering","author":"A Platzer","year":"2009","unstructured":"Platzer, A., Quesel, J.-D.: European train control system: a case study in formal verification. In: Breitman, K., Cavalcanti, A. (eds.) ICFEM 2009. LNCS, vol. 5885, pp. 246\u2013265. Springer, Heidelberg (2009). https:\/\/doi.org\/10.1007\/978-3-642-10373-5_13"},{"key":"20_CR92","doi-asserted-by":"publisher","unstructured":"van de Pol, J.C.: Automated verification of nested DFS. In: N\u00fa\u00f1ez, M., G\u00fcdemann, M. (eds.) FMICS 2015. LNCS, vol. 9128, pp. 181\u2013197. Springer, Cham (2015). https:\/\/doi.org\/10.1007\/978-3-319-19458-5_12","DOI":"10.1007\/978-3-319-19458-5_12"},{"key":"20_CR93","unstructured":"Potyka, N., Yin, X., Toni, F.: Towards a theory of faithfulness: faithful explanations of differentiable classifiers over continuous data. CoRR abs\/2205.09620 (2022). https:\/\/doi.org\/10.48550\/arXiv.2205.09620"},{"key":"20_CR94","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"222","DOI":"10.1007\/978-3-030-88885-5_15","volume-title":"Automated Technology for Verification and Analysis","author":"S Pranger","year":"2021","unstructured":"Pranger, S., K\u00f6nighofer, B., Posch, L., Bloem, R.: TEMPEST - synthesis tool for reactive systems and shields in probabilistic environments. In: Hou, Z., Ganesh, V. (eds.) ATVA 2021. LNCS, vol. 12971, pp. 222\u2013228. Springer, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-88885-5_15"},{"key":"20_CR95","doi-asserted-by":"publisher","unstructured":"Ribeiro, M.T., Singh, S., Guestrin, C.: \"Why should I trust you?\": explaining the predictions of any classifier. In: Proceedings of the Demonstrations Session of the 2016 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (NAACL HLT 2016), pp. 97\u2013101 (2016). https:\/\/doi.org\/10.18653\/v1\/n16-3020","DOI":"10.18653\/v1\/n16-3020"},{"issue":"2\u20133","key":"20_CR96","doi-asserted-by":"publisher","first-page":"102","DOI":"10.1561\/2500000045","volume":"5","author":"T Ringer","year":"2019","unstructured":"Ringer, T., Palmskog, K., Sergey, I., Gligoric, M., Tatlock, Z.: QED at large: A survey of engineering of formally verified software. Found. Trends Program. Lang. 5(2\u20133), 102\u2013281 (2019). https:\/\/doi.org\/10.1561\/2500000045","journal-title":"Found. Trends Program. Lang."},{"key":"20_CR97","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"458","DOI":"10.1007\/978-3-319-99229-7_39","volume-title":"Computer Safety, Reliability, and Security","author":"S Shafaei","year":"2018","unstructured":"Shafaei, S., Kugele, S., Osman, M.H., Knoll, A.: Uncertainty in machine learning: a safety perspective on autonomous driving. In: Gallina, B., Skavhaug, A., Schoitsch, E., Bitsch, F. (eds.) SAFECOMP 2018. LNCS, vol. 11094, pp. 458\u2013464. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-99229-7_39"},{"key":"20_CR98","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"478","DOI":"10.1007\/978-3-030-25543-5_27","volume-title":"Computer Aided Verification","author":"SF Siegel","year":"2019","unstructured":"Siegel, S.F.: What\u2019s wrong with on-the-fly partial order reduction. In: Dillig, I., Tasiran, S. (eds.) CAV 2019. LNCS, vol. 11562, pp. 478\u2013495. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-25543-5_27"},{"issue":"2","key":"20_CR99","doi-asserted-by":"publisher","first-page":"265","DOI":"10.1109\/TIV.2019.2955903","volume":"5","author":"CE Tuncali","year":"2020","unstructured":"Tuncali, C.E., Fainekos, G., Prokhorov, D.V., Ito, H., Kapinski, J.: Requirements-driven test generation for autonomous vehicles with machine learning components. IEEE Trans. Intell. Veh. 5(2), 265\u2013280 (2020). https:\/\/doi.org\/10.1109\/TIV.2019.2955903","journal-title":"IEEE Trans. Intell. Veh."},{"key":"20_CR100","unstructured":"Underwriters Laboratories Inc.: ANSI\/UL 4600 Standard for Safety Evaluation of Autonomous Products (2022)"},{"issue":"2","key":"20_CR101","doi-asserted-by":"publisher","first-page":"86","DOI":"10.1145\/2967606","volume":"60","author":"FW Vaandrager","year":"2017","unstructured":"Vaandrager, F.W.: Model learning. Commun. ACM 60(2), 86\u201395 (2017). https:\/\/doi.org\/10.1145\/2967606","journal-title":"Commun. ACM"},{"key":"20_CR102","series-title":"Lecture Notes in Computer Science (Lecture Notes in Artificial Intelligence)","doi-asserted-by":"publisher","DOI":"10.1007\/11542384","volume-title":"The Seventeen Provers of the World","year":"2006","unstructured":"Wiedijk, F. (ed.): The Seventeen Provers of the World. LNCS (LNAI), vol. 3600. Springer, Heidelberg (2006). https:\/\/doi.org\/10.1007\/11542384"},{"key":"20_CR103","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"58","DOI":"10.1007\/978-3-030-57628-8_4","volume-title":"Formal Modeling and Analysis of Timed Systems","author":"S Wimmer","year":"2020","unstructured":"Wimmer, S., Herbreteau, F., van de Pol, J.: Certifying emptiness of timed B\u00fcchi automata. In: Bertrand, N., Jansen, N. (eds.) FORMATS 2020. LNCS, vol. 12288, pp. 58\u201375. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-57628-8_4"},{"key":"20_CR104","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1007\/978-3-319-89960-2_4","volume-title":"Tools and Algorithms for the Construction and Analysis of Systems","author":"S Wimmer","year":"2018","unstructured":"Wimmer, S., Lammich, P.: Verified model checking of timed automata. In: Beyer, D., Huisman, M. (eds.) TACAS 2018. LNCS, vol. 10805, pp. 61\u201378. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-89960-2_4"},{"issue":"10","key":"20_CR105","doi-asserted-by":"publisher","first-page":"64","DOI":"10.1145\/3448248","volume":"64","author":"JM Wing","year":"2021","unstructured":"Wing, J.M.: Trustworthy AI. Commun. ACM 64(10), 64\u201371 (2021). https:\/\/doi.org\/10.1145\/3448248","journal-title":"Commun. ACM"},{"key":"20_CR106","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"246","DOI":"10.1007\/978-3-642-34032-1_24","volume-title":"Leveraging Applications of Formal Methods, Verification and Validation. Applications and Case Studies","author":"K Winter","year":"2012","unstructured":"Winter, K.: Optimising ordering strategies for symbolic model checking of railway interlockings. In: Margaria, T., Steffen, B. (eds.) ISoLA 2012. LNCS, vol. 7610, pp. 246\u2013260. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-34032-1_24"}],"container-title":["Lecture Notes in Computer Science","Leveraging Applications of Formal Methods, Verification and Validation. Practice"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-19762-8_20","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,10,19]],"date-time":"2022-10-19T23:14:46Z","timestamp":1666221286000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-19762-8_20"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"ISBN":["9783031197611","9783031197628"],"references-count":106,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-19762-8_20","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022]]},"assertion":[{"value":"17 October 2022","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ISoLA","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Symposium on Leveraging Applications of Formal Methods","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Rhodes","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Greece","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2022","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 October 2022","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 October 2022","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"isola2022","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.isola-conference.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}