{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,18]],"date-time":"2026-03-18T09:51:17Z","timestamp":1773827477999,"version":"3.50.1"},"reference-count":23,"publisher":"Elsevier BV","issue":"1","license":[{"start":{"date-parts":[[1993,1,1]],"date-time":"1993-01-01T00:00:00Z","timestamp":725846400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Microprocessors and Microsystems"],"published-print":{"date-parts":[[1993,1]]},"DOI":"10.1016\/0141-9331(93)90091-k","type":"journal-article","created":{"date-parts":[[2003,3,15]],"date-time":"2003-03-15T01:33:26Z","timestamp":1047692006000},"page":"31-36","source":"Crossref","is-referenced-by-count":19,"title":["The industrial use of formal methods"],"prefix":"10.1016","volume":"17","author":[{"given":"Martyn","family":"Thomas","sequence":"first","affiliation":[]}],"member":"78","reference":[{"key":"10.1016\/0141-9331(93)90091-K_BIB1","doi-asserted-by":"crossref","first-page":"611","DOI":"10.1109\/32.24710","article-title":"Formal methods applied to a floating-point number system","author":"Barrett","year":"1989","journal-title":"IEEE Trans. Softw. Eng."},{"key":"10.1016\/0141-9331(93)90091-K_BIB2","series-title":"Proc AIS 91","first-page":"197","article-title":"A gentle introduction to formal methods","author":"King","year":"1991"},{"key":"10.1016\/0141-9331(93)90091-K_BIB3","series-title":"Systematic Software Development Using VDM","author":"Jones","year":"1986"},{"key":"10.1016\/0141-9331(93)90091-K_BIB4","series-title":"The Z Notation","author":"Spivey","year":"1989"},{"key":"10.1016\/0141-9331(93)90091-K_BIB5","doi-asserted-by":"crossref","first-page":"25","DOI":"10.1016\/0169-7552(87)90085-7","article-title":"Introduction to the ISO Specification Language LOTOS","volume":"Vol 14","author":"Bolognesi","year":"1987","journal-title":"Comput. Netw. ISDN Syst."},{"key":"10.1016\/0141-9331(93)90091-K_BIB6","series-title":"Proceedings of the Conference on Aviation Safety","article-title":"Reasons why safety-critical avionics software cannot be adequately validated","author":"Littlewood","year":"1991"},{"key":"10.1016\/0141-9331(93)90091-K_BIB7","series-title":"Proc ACM SIGSOFT 1991 Conference on Software for Critical Systems","first-page":"66","article-title":"The infeasibility of experimental quantification of life-critical software reliability","volume":"16","author":"Butler","year":"1991"},{"key":"10.1016\/0141-9331(93)90091-K_BIB8","series-title":"Interim Defence Standard 00-55","year":"1991"},{"key":"10.1016\/0141-9331(93)90091-K_BIB9","series-title":"Interim Defence Standard 00-56","year":"1991"},{"key":"10.1016\/0141-9331(93)90091-K_BIB10","unstructured":"Personal communication. This is apparently the argument being used by some members of the committee revising DO-178A (the RTCA\/FUROCAE guidance document for the certification of airborne systems containing software in civil aircraft) to defeat a proposal that level 1 (safety-critical) software should be required to be specified using formal methods. The same arguments were also put forward in the industry review of Defence Standard 00\u201355"},{"key":"10.1016\/0141-9331(93)90091-K_BIB11","doi-asserted-by":"crossref","first-page":"11","DOI":"10.1109\/52.57887","article-title":"Seven myths of formal methods","author":"Hall","year":"1990","journal-title":"IEEE Softw."},{"key":"10.1016\/0141-9331(93)90091-K_BIB12","series-title":"Computers and Safety","first-page":"92","article-title":"Safety-critical software in control systems","author":"Hill","year":"1990"},{"key":"10.1016\/0141-9331(93)90091-K_BIB13","doi-asserted-by":"crossref","first-page":"43","DOI":"10.1145\/71633.71634","article-title":"Calculating properties of Z specifications","author":"Woodcock","year":"1989","journal-title":"ACM SIGSoft Softw. Eng. Notes"},{"issue":"No 2","key":"10.1016\/0141-9331(93)90091-K_BIB14","first-page":"189","article-title":"Assessment of safety-critical software in nuclear power plants","volume":"Vol 32","author":"Parnas","year":"1991","journal-title":"Nucl. Safety"},{"key":"10.1016\/0141-9331(93)90091-K_BIB15","series-title":"VDM '91, Formal Software Development Methods","first-page":"588","article-title":"CICS Project Report: experiences and results from the use of Z in IBM","author":"Houston","year":"1991"},{"key":"10.1016\/0141-9331(93)90091-K_BIB16","series-title":"Introduction to Discrete Mathematics for Software Engineering","author":"Denvir","year":"1986"},{"key":"10.1016\/0141-9331(93)90091-K_BIB17","unstructured":"Bowen, J and Stavridou, V \u2018Safety-critical systems, formal methods and standards\u2019 IEEE Trans. Softw. Eng. Submitted. Contact Jonathan Bowen, Oxford University Programming Research Group, 11 Keble Road, Oxford OX1 3QD, UK"},{"key":"10.1016\/0141-9331(93)90091-K_BIB18","series-title":"Proc 12th International Conference on Software Engineering","first-page":"186","article-title":"SACEM software validation","author":"Guiho","year":"1990"},{"key":"10.1016\/0141-9331(93)90091-K_BIB19","series-title":"PCTE: a basis for a Portable Common Tools Environment","first-page":"53ff","year":"1987"},{"key":"10.1016\/0141-9331(93)90091-K_BIB20","series-title":"Report VIP.T.E.4.3","article-title":"VDM Extensions: Final report","author":"Bruijning","year":"1988"},{"key":"10.1016\/0141-9331(93)90091-K_BIB21","series-title":"Software for Computers in the Application of Industrial Safety-Related Systems","volume":"122","year":"1991"},{"key":"10.1016\/0141-9331(93)90091-K_BIB22","series-title":"ESA Software Engineering Standards","year":"1991"},{"key":"10.1016\/0141-9331(93)90091-K_BIB23","series-title":"Requirements and Technical Concepts for Aviation","article-title":"Software Considerations in Airborne Systems and Equipment Certification","year":"1991"}],"container-title":["Microprocessors and Microsystems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:014193319390091K?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:014193319390091K?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2019,3,25]],"date-time":"2019-03-25T04:28:16Z","timestamp":1553488096000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/014193319390091K"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[1993,1]]},"references-count":23,"journal-issue":{"issue":"1","published-print":{"date-parts":[[1993,1]]}},"alternative-id":["014193319390091K"],"URL":"https:\/\/doi.org\/10.1016\/0141-9331(93)90091-k","relation":{},"ISSN":["0141-9331"],"issn-type":[{"value":"0141-9331","type":"print"}],"subject":[],"published":{"date-parts":[[1993,1]]}}}