{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T15:36:58Z","timestamp":1783611418556,"version":"3.55.0"},"reference-count":68,"publisher":"Springer Science and Business Media LLC","issue":"3-4","license":[{"start":{"date-parts":[[2006,9,12]],"date-time":"2006-09-12T00:00:00Z","timestamp":1158019200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Innovations Syst Softw Eng"],"published-print":{"date-parts":[[2006,11,14]]},"DOI":"10.1007\/s11334-006-0006-8","type":"journal-article","created":{"date-parts":[[2006,9,11]],"date-time":"2006-09-11T13:26:29Z","timestamp":1157981189000},"page":"165-178","source":"Crossref","is-referenced-by-count":5,"title":["Formalization and assessment of regulatory requirements for safety-critical software"],"prefix":"10.1007","volume":"2","author":[{"given":"Sergiy A.","family":"Vilkomir","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jonathan P.","family":"Bowen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Aditya K.","family":"Ghose","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2006,9,12]]},"reference":[{"key":"6_CR1","doi-asserted-by":"crossref","DOI":"10.1017\/CBO9780511624162","volume-title":"The B-book","author":"JR Abrial","year":"1996","unstructured":"Abrial JR (1996) The B-book. Cambridge University Press, Cambridge"},{"key":"6_CR2","unstructured":"Atchison B, Lindsay P, Tombs D (1999) A case study in software safety assurance using formal methods. Technical Report No. 99-31, Software Verification Research Centre, School of Information Technology, The University of Queensland, Australia, September 1999"},{"key":"6_CR3","volume-title":"The unified modeling language user guide","author":"G Booch","year":"1998","unstructured":"Booch G, Jacobson I, Rumbaugh J (1998) The unified modeling language user guide. Object Technology series, Addison\u2013Wesley, Reading"},{"key":"6_CR4","volume-title":"Formal specification and documentation using Z: a case study approach","author":"JP Bowen","year":"1996","unstructured":"Bowen JP (1996) Formal specification and documentation using Z: a case study approach. International Thomson Computer Press, London"},{"issue":"4","key":"6_CR5","doi-asserted-by":"crossref","first-page":"91","DOI":"10.1145\/332051.332078","volume":"43","author":"JP Bowen","year":"2000","unstructured":"Bowen JP (2000) The ethics of safety-critical systems. Commun ACM 43(4): 91-97","journal-title":"Commun ACM"},{"issue":"2","key":"6_CR6","doi-asserted-by":"crossref","first-page":"69","DOI":"10.1145\/505776.505794","volume":"26","author":"JP Bowen","year":"2001","unstructured":"Bowen JP (2001) Experience teaching Z with tool and web support. ACM SIGSOFT Softw Eng Notes 26(2): 69-75","journal-title":"ACM SIGSOFT Softw Eng Notes"},{"issue":"1","key":"6_CR7","first-page":"6","volume":"11","author":"S Brown","year":"2000","unstructured":"Brown S (2000) Overview of IEC 61508. Design of electrical\/electronic\/programmable electronic safety-related systems. Comp Control Eng J 11(1): 6-12","journal-title":"Design of electrical\/electronic\/programmable electronic safety-related systems. Comp Control Eng J"},{"key":"6_CR8","doi-asserted-by":"crossref","unstructured":"Bowen JP, Hinchey MG (1997) The use of industrial-strength formal methods. In: Proceedings of 21st international computer software and application conference (COMPSAC\u201997), Washington DC, USA, 13\u201315 August 1997, pp 332\u2013337","DOI":"10.1109\/CMPSAC.1997.624973"},{"key":"6_CR9","doi-asserted-by":"crossref","unstructured":"Bowen JP, Hinchey MG (2006) Ten commandments of formal methods ten years later. Computer 39(1)","DOI":"10.1109\/MC.2006.35"},{"key":"6_CR10","unstructured":"Cortellessa V, Cukic B, Mili A, Shereshevsky M, Sandhu H, Del Gobbo D, Napolitano M (2000) Certifying adaptive flight control software. In: Proceedings of the ISACC2000: the software risk management conference, Reston, VA, USA, 24\u201326 September 2000"},{"issue":"3","key":"6_CR11","doi-asserted-by":"crossref","first-page":"42","DOI":"10.1109\/52.382183","volume":"12","author":"R De Lemos","year":"1995","unstructured":"De Lemos R, Saeed A, Anderson T (1995) Analyzing safety requirements for process-control systems. IEEE Softw 12(3): 42-53","journal-title":"IEEE Softw"},{"key":"6_CR12","unstructured":"Droschl G (1999) Analyzing the requirements of an access control using VDMTool and PVS (abstract). In: Proceeding of world congress on formal methods in the development of computing systems (FM\u201999), Toulouse, France, September 1999, LNCS vol. 1709, Springer, Berlin Heidelberg New York, p 1870"},{"issue":"6","key":"6_CR13","doi-asserted-by":"crossref","first-page":"836","DOI":"10.1109\/32.824413","volume":"25","author":"W Emmerich","year":"1999","unstructured":"Emmerich W, Finkelstein A, Montangero C, Antonelli S, Armitage S, Stevens R (1999) Managing standards compliance. IEEE Trans Softw Eng 25(6): 836-851","journal-title":"IEEE Trans Softw Eng"},{"key":"6_CR14","doi-asserted-by":"crossref","unstructured":"Emmet L, Bloomfield R (1997) Viewpoints on improving the standards making process: document factory or consensus management? In: Proceedings of the 3rd international software engineering standards symposium (ISSES 97), Walnut Creek, CA, USA, 2\u20136 June 1997","DOI":"10.1109\/SESS.1997.595972"},{"key":"6_CR15","unstructured":"Eriksson LH (1996) Specifying railway interlocking requirements for practical use. In: Proceedings of the 15th international conference on computer safety, reliability and security (SAFECOMP\u201996), Vienna, Austria, 23\u201325 October 1996"},{"key":"6_CR16","unstructured":"European Commission (2000) Nuclear safety and environment. Common position of European nuclear regulators for the licensing of safety critical software for nuclear reactors. Report EUR 19265, May 2000"},{"issue":"11","key":"6_CR17","doi-asserted-by":"crossref","first-page":"1002","DOI":"10.1109\/32.730547","volume":"24","author":"NE Fenton","year":"1998","unstructured":"Fenton NE, Neil M (1998) A strategy for improving safety related software engineering standards. IEEE Trans Softw Eng 24(11): 1002-1013","journal-title":"IEEE Trans Softw Eng"},{"key":"6_CR18","volume-title":"Designing concurrent, distributed, and real-time applications with UML","author":"H Gomaa","year":"2000","unstructured":"Gomaa H (2000) Designing concurrent, distributed, and real-time applications with UML. Addison\u2013Wesley, Reading"},{"key":"6_CR19","volume-title":"Modeling reactive systems with statecharts: the statemate approach","author":"D Harel","year":"1998","unstructured":"Harel D, Politi M (1998) Modeling reactive systems with statecharts: the statemate approach. McGraw\u2013Hill, New York"},{"issue":"7","key":"6_CR20","doi-asserted-by":"crossref","first-page":"573","DOI":"10.1109\/32.708570","volume":"24","author":"K Hansen","year":"1998","unstructured":"Hansen K, Ravn AP, Stavridou V (1998) From safety analysis to software requirements. IEEE Trans Softw Eng 24(7): 573-584","journal-title":"IEEE Trans Softw Eng"},{"key":"6_CR21","unstructured":"Hayhurst KJ, Holloway CM (2001) Challenges in software aspects of aerospace systems. In: Proceedings of 26th annual NASA Goddard software engineering workshop (IEEE\/NASA SEW-26), Greenbelt, MD, USA, 27\u201329 November 2001, pp. 7\u201313"},{"key":"6_CR22","unstructured":"Henry JY, Soubies B, Le Meur M, Boulc\u2019h J (1992) Evaluation methods for the I and C safety softwares of nuclear power plants. In: International Atomic Energy Agency Technical Committee meeting on safety assessment of computerized control and protection systems, Ref. J4-TC-698.2, IAEA Headquarters, Vienna, Austria 12\u201316 October 1992"},{"key":"6_CR23","volume-title":"Industrial-strength formal methods in practice","year":"1999","unstructured":"Hinchey MG, Bowen JP (eds.) (1999) Industrial-strength formal methods in practice. Springer, Berlin Heidelberg New York"},{"issue":"3","key":"6_CR24","doi-asserted-by":"crossref","first-page":"21","DOI":"10.1109\/52.896246","volume":"17","author":"J H\u00f6rl","year":"2000","unstructured":"H\u00f6rl J, Aichernig B (2000) Validating voice communication requirements using lightweight formal methods. IEEE Softw 17(3): 21-27","journal-title":"IEEE Softw"},{"key":"6_CR25","volume-title":"Constructing the user interface with statecharts","author":"I Horrocks","year":"1999","unstructured":"Horrocks I (1999) Constructing the user interface with statecharts. Addison\u2013Wesley, Reading"},{"key":"6_CR26","unstructured":"IAEA (2000) Software for computer based systems important to safety in nuclear power plants. Safety guide. IAEA Safety Standards Series No. NS-G-1.1, International Atomic Energy Agency, Vienna"},{"key":"6_CR27","unstructured":"IAEA (2000) Legal and governmental infrastructure for nuclear, radiation, radioactive waste and transport safety: safety requirements. IAEA Safety Standards Series No. GS-R-1, International Atomic Energy Agency, Vienna"},{"key":"6_CR28","unstructured":"IEC (1986) Software for computers in the safety systems of nuclear power stations. IEC 60880, Edition: 1.0, International Electrotechnical Commission, 30 September 1986"},{"key":"6_CR29","unstructured":"IEC (1998) Functional safety of electrical\/electronic\/ programmable electronic safety-related systems. Part 3: software requirements. IEC 61508, International Electrotechnical Commission, December 1998"},{"key":"6_CR30","unstructured":"IEEE (1994) IEEE standard criteria for digital computers in safety systems of nuclear power generating stations. IEEE Std 7-4.3.2-1993, February 1994"},{"key":"6_CR31","unstructured":"IEEE (1998) IEEE standard criteria for safety systems for nuclear power generating stations. IEEE Std 603-1998"},{"key":"6_CR32","unstructured":"ISO\/IEC (1998) Information technology\u2014framework and taxonomy of international standardized profiles\u2014Part 1: general principles and documentation framework, 4th edn. ISO\/IEC TR 10000-1:1998"},{"key":"6_CR33","unstructured":"ISO\/IEC (2002) Information Technology\u2014Z formal specification notation\u2014syntax, type system and semantics. ISO\/IEC 13568, International Organization for Standardization"},{"key":"6_CR34","volume-title":"The way of Z: practical programming with formal methods","author":"J Jacky","year":"1997","unstructured":"Jacky J (1997) The way of Z: practical programming with formal methods. Cambridge University Press, Cambridge"},{"key":"6_CR35","unstructured":"Kharchenko VS, Shostak IV, Manzhos YS (2002) The intelligent system for licensing critical software. Aerospace Eng Technol 4, 46-51(in Russian)"},{"key":"6_CR36","volume-title":"Formal specification using Z. Grass roots series, 2nd edn.","author":"D Lightfoot","year":"2001","unstructured":"Lightfoot D (2001) Formal specification using Z. Grass roots series, 2nd edn. Palgrave Macmillan Press, Houndmills, England"},{"key":"6_CR37","doi-asserted-by":"crossref","unstructured":"Lutz R (2000) Software engineering for safety: a roadmap. In: Proceedings of the 22nd international conference on software engineering (ICSE), Limerick, Ireland, 4\u201311 June 2000, ACM, New York","DOI":"10.1145\/336512.336556"},{"key":"6_CR38","unstructured":"Linder A, Miedl H (1998) Methodology and tools for independent verification and validation of computerized I & C systems important to safety. In: Proceedings of a specialists\u2019 meeting on computerized reactor protection and safety related systems in nuclear power plants, IAEA-IWG-NPPCI-98\/1 Working Material, Budapest, Hungary, 27\u201329 October 1997. Reproduced by the IAEA, Vienna, Austria, 1998, pp 127\u2013138"},{"key":"6_CR39","unstructured":"McDermid JA, Pumfrey DJ (2001) Software safety: why is there no consensus? In: Proceedings of the 19th international system safety conference, Huntsville, AL, USA, 10\u201314 September 2001"},{"key":"6_CR40","volume-title":"Logic and specification: extending Vdm-Sl for advanced formal specification (Computer Science: Research and Practice)","author":"C Middelburg","year":"1993","unstructured":"Middelburg C (1993) Logic and specification: extending Vdm-Sl for advanced formal specification (Computer Science: Research and Practice). Chapman & Hall, London"},{"key":"6_CR41","doi-asserted-by":"crossref","unstructured":"Nissanke N, Dammag H (2000) Risk Bands\u2014a novel feature of safecharts. In: Proceedings of the 11th international symposium on software reliability engineering (ISSRE), 8\u201311 October 2000, San Jose, CA, USA, pp 293\u2013301","DOI":"10.1109\/ISSRE.2000.885880"},{"key":"6_CR42","unstructured":"Nissanke N, Robinson N (1994) Formal methods in safety analysis. In:Proceedings of 13th international conference on computer safety, reliability and security (SAFECOMP\u201994), Anaheim, CA, pp 239\u2013248"},{"key":"6_CR43","unstructured":"NUREG (2002) Guidance for performance-based regulation. In: Kadambi NP (ed) NUREG BR-0303. US Nuclear Regulatory Commission, Washington, DC, USA, December 2002"},{"key":"6_CR44","doi-asserted-by":"crossref","unstructured":"Orendi RG (1997) Human factors experience in designing a modern control room for a VVER-1000 nuclear plant. In: Proceedings of the 1997 IEEE 6th conference on human factors and power plants, Orlando, FL, USA, 8\u201313 June 1997, pp 2-7\u20132-12","DOI":"10.1109\/HFPP.1997.624805"},{"issue":"2","key":"6_CR45","first-page":"189","volume":"32","author":"DL Parnas","year":"1991","unstructured":"Parnas DL, Asmis GJK, Madey J (1991) Assessment of safety-critical software in nuclear power plants. Nucl Safety 32(2): 189-198","journal-title":"Nucl Safety"},{"key":"6_CR46","doi-asserted-by":"crossref","unstructured":"Penny J, Eaton A, Bishop PG, Bloomfield AE (2001) The practicalities of goal-based safety regulation. In: Proceedings of the 9th safety-critical systems symposium, Bristol, UK, 6\u20138 February 2001, pp 35\u201348","DOI":"10.1007\/978-1-4471-0713-2_3"},{"key":"6_CR47","unstructured":"RTCA (1992) Software considerations in airborne systems and equipment certification. RTCA\/DO-178B, RTCA, Washington, DC, USA"},{"key":"6_CR48","doi-asserted-by":"crossref","unstructured":"Ruddle A (1993) Formal methods in the specification of real-time, safety-critical control systems. In: Proceedings of the 7th annual Z user meeting, London, 14\u201315 December 1992, Springer, Berlin Heidelberg New York, pp 131\u2013 146","DOI":"10.1007\/978-1-4471-3556-2_10"},{"key":"6_CR49","unstructured":"Spivey JM (1992) The Z notation: a reference manual, 2nd edn. Prentice Hall International Series in Computer Science, Prentice Hall, Englewood Cliffs"},{"key":"6_CR50","doi-asserted-by":"crossref","unstructured":"Stepney S (2001) New horizons in formal methods. The Computer Bulletin, BCS, Swindon, UK January 2001, pp 24\u201326","DOI":"10.1093\/combul\/43.1.24"},{"issue":"9","key":"6_CR51","doi-asserted-by":"crossref","first-page":"575","DOI":"10.1002\/spe.4380170903","volume":"17","author":"S Stepney","year":"1987","unstructured":"Stepney S, Lord S (1987) Formal specification of an access control system. Softw Pract Exp 17(9): 575-593","journal-title":"Softw Pract Exp"},{"key":"6_CR52","unstructured":"TACS (1992) User guide for MALPAS release 6.0. TACS\/1019\/N7, TA Consultancy Services Limited, UK, December 1992"},{"key":"6_CR53","doi-asserted-by":"crossref","unstructured":"Thuy NNQ, Ficheux-Vapne F (1995) IEC 880: feedback of experience and guidelines for future work. In: Proceedings of 2nd IEEE international software engineering standards symposium (ISESS\u201995), 21\u201325 August 1995, pp 117\u2013126","DOI":"10.1109\/SESS.1995.525957"},{"key":"6_CR54","doi-asserted-by":"crossref","unstructured":"Treharne H, King S, Henson M, Schneider S (eds) (2005) ZB 2005: formal specification and development in Z and B. In: Proceedings of 4th international conference of B and Z users, Guildford, UK, April 2005, LNCS vol 3455, Springer, Berlin Heidelberg New York","DOI":"10.1007\/b135596"},{"key":"6_CR55","unstructured":"UK Def Stan (1996) Safety management requirements for defence systems. Part 1: requirements. UK Def Stan 00-56 (Part 1)\/Issue 2, 13 December 1996"},{"key":"6_CR56","unstructured":"UK Def Stan (1997) Requirements for safety related software in defence equipment. Part 1: requirements. UK Def Stan 00-55 (Part 1)\/Issue 2, 1 August 1997"},{"key":"6_CR57","unstructured":"UK Def Stan (1997) Requirements for safety related software in defence equipment. Part 2: guidance. UK Def Stan 00-55 (Part 2)\/Issue 2, 1 August 1997"},{"key":"6_CR58","unstructured":"US NRC (1996) Criteria for digital computers in safety systems of nuclear power plants. Regulatory guide 1.152, Rev. 1, U.S. Nuclear Regulatory Commission, Washington, DC, USA, January 1996"},{"key":"6_CR59","unstructured":"Valentine S (1992) Putting numbers into the mathematical toolkit. In: Proceedings of the 7th annual Z user meeting, London, 14\u201315 December 1992, Springer, Berlin Heidelberg New York, pp9\u201336"},{"key":"6_CR60","doi-asserted-by":"crossref","unstructured":"Vilkomir SA, Bowen JP (2001) Formalization of software testing criteria using the Z notation. In: Proceedings of 25th IEEE annual international computer software and applications conference (COMPSAC), Chicago, Illinois, USA, 8\u201312 October 2001, IEEE Computer Society Press, Los Alamitos, pp 351\u2013356","DOI":"10.1109\/CMPSAC.2001.960638"},{"key":"6_CR61","unstructured":"Vilkomir SA, Bowen JP (2002) Establishing formal regulatory requirements or safety-critical software certification. In: Proceedings of 5th international conference on achieving quality in software (AQuIS) and 2nd international conference on software process improvement and capability determination (SPICE), Venice, Italy, 13\u201315 March 2002, pp 7\u201318"},{"issue":"1","key":"6_CR62","doi-asserted-by":"crossref","first-page":"42","DOI":"10.1007\/s00165-005-0084-7","volume":"18","author":"SA Vilkomir","year":"2006","unstructured":"Vilkomir SA, Bowen JP (2006) From MC\/DC to RC\/DC: formalization and analysis of control-flow testing criteria. Formal Aspects Comput 18(1): 42-62","journal-title":"Formal Aspects Comput"},{"key":"6_CR63","doi-asserted-by":"crossref","unstructured":"Vilkomir SA, Ghose AK (2004) Development of a normative package for safety-critical software using formal regulatory requirements. In: Proceedings of the 5th international conference on product focused software process improvement (PROFES), Kansai Science City, Japan, 5\u20138 April 2004, LNCS Vol. 3009. Springer, Berlin Heidelberg New York, pp 523\u2013537","DOI":"10.1007\/978-3-540-24659-6_38"},{"key":"6_CR64","unstructured":"Vilkomir SA, Kharchenko VS (1999) Methodology of the review of software for safety important systems. In: Proceedings of the 10th European conference on safety and reliability (ESREL), Vol 1, Munich-Garching, Germany, 13\u201317 September 1999, pp 593\u2013596"},{"key":"6_CR65","unstructured":"Vilkomir SA, Kharchenko VS (2000) An \u201cAsymmetric\u201d approach to the assessment of safety-critical software during certification and licensing. In: Proceedings of ESCOM-SCOPE 2000 conference, Munich, Germany, 18\u201320 April 2000, pp 467\u2013475"},{"key":"6_CR66","unstructured":"Vilkomir SA, Kharchenko VS, Ponomaryev AS, Gorda AL (1999) The system safety assessment by the use of programming tools during the licensing process. In: Proceedings of the 17th international system safety conference, Orlando, FL, USA, August 1999, pp 222\u2013227"},{"key":"6_CR67","volume-title":"Introduction to VDM","author":"M Woodman","year":"1993","unstructured":"Woodman M, Heal B (1993) Introduction to VDM. McGraw\u2013Hill, New York"},{"key":"6_CR68","volume-title":"Software engineering with the B-method","author":"J Wordsworth","year":"1996","unstructured":"Wordsworth J (1996) Software engineering with the B-method. Addison\u2013Wesley, Reading"}],"container-title":["Innovations in Systems and Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11334-006-0006-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s11334-006-0006-8\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11334-006-0006-8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,6,1]],"date-time":"2019-06-01T09:47:43Z","timestamp":1559382463000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s11334-006-0006-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2006,9,12]]},"references-count":68,"journal-issue":{"issue":"3-4","published-print":{"date-parts":[[2006,11,14]]}},"alternative-id":["6"],"URL":"https:\/\/doi.org\/10.1007\/s11334-006-0006-8","relation":{},"ISSN":["1614-5046","1614-5054"],"issn-type":[{"value":"1614-5046","type":"print"},{"value":"1614-5054","type":"electronic"}],"subject":[],"published":{"date-parts":[[2006,9,12]]}}}