{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T20:23:45Z","timestamp":1740169425540,"version":"3.37.3"},"reference-count":46,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2016,4,1]],"date-time":"2016-04-01T00:00:00Z","timestamp":1459468800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"name":"North Portugal Regional Operational","award":["NORTE-07-0124-FEDER-000062"],"award-info":[{"award-number":["NORTE-07-0124-FEDER-000062"]}]},{"name":"National Strategic Reference Framework"},{"DOI":"10.13039\/501100008530","name":"European Regional Development Fund","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100008530","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Portuguese Foundation for Science and Technology"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Human-Mach. Syst."],"published-print":{"date-parts":[[2016,4]]},"DOI":"10.1109\/thms.2015.2421511","type":"journal-article","created":{"date-parts":[[2015,4,27]],"date-time":"2015-04-27T18:32:14Z","timestamp":1430159534000},"page":"303-316","source":"Crossref","is-referenced-by-count":14,"title":["Formal Verification of a Space System's User Interface With the IVY Workbench"],"prefix":"10.1109","volume":"46","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9163-580X","authenticated-orcid":false,"given":"Jose Creissac","family":"Campos","sequence":"first","affiliation":[]},{"given":"Manuel","family":"Sousa","sequence":"additional","affiliation":[]},{"given":"Miriam C. Bergue","family":"Alves","sequence":"additional","affiliation":[]},{"given":"Michael D.","family":"Harrison","sequence":"additional","affiliation":[]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45657-0_29"},{"journal-title":"Usability Engineering","year":"1993","author":"nielsen","key":"ref38"},{"key":"ref33","first-page":"7","article-title":"Property Specification patterns for finite-state verification","author":"dwyer","year":"0","journal-title":"2nd ACM Workshop on Formal Methods in Softwre Practice"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/1061254.1061256"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/s00165-008-0102-7"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/985692.985750"},{"key":"ref37","first-page":"411","article-title":"Patterns in property specifications for finite-state verification","author":"dwyer","year":"0","journal-title":"Proc 21st Int Conf Softw Eng"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1016\/j.conengprac.2004.03.007"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1111\/1467-8659.1230025"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/THMS.2014.2329476"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICRE.1998.667803"},{"key":"ref40","article-title":"Modelling and analysing the interactive behaviour of an infusion pump","volume":"45","author":"campos","year":"2011","journal-title":"Electron Commun EASST"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/32.940728"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/AERO.2002.1036832"},{"key":"ref13","first-page":"155","article-title":"Formal validation and verification of space flight software using statechart-assertions and runtime execution monitoring","author":"alves","year":"0","journal-title":"Proc IEEE Int Conf Syst Syst"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1023\/A:1011265604021"},{"key":"ref15","first-page":"148","article-title":"Specifying user interfaces for safety-critical medical systems","author":"elder","year":"0","journal-title":"Proc 2nd Intl Symp Med Robot Comput Assist Surg"},{"key":"ref16","article-title":"On formalising interactive number entry on infusion pumps","volume":"45","author":"masci","year":"2011","journal-title":"Electronic Communications of the EASST"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TSMCA.2012.2210406"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-73331-7_53"},{"key":"ref19","first-page":"130","article-title":"Validating human-device interfaces with model checking and temporal logic properties automatically generated from task analytic models","author":"bolton","year":"0","journal-title":"Proc 20th Behav Represent Model Simul Conf"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TSMCA.2011.2109709"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/1570433.1570442"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1006\/ijhc.2001.0523"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70569-7_6"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijhcs.2013.10.005"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijhcs.2003.08.004"},{"key":"ref5","article-title":"Reusing models and properties in the analysis of similar interactive devices","author":"harrison","year":"2013","journal-title":"Innovations Syst Softw Eng"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/5397.5399"},{"key":"ref7","first-page":"62","article-title":"Formal verification of safety-critical user interfaces: A space system case study","author":"sousa","year":"0","journal-title":"Proc Formal Verification Model Human Mach Syst AAAI Spring Symp"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/S0951-8320(01)00092-8"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/32.317428"},{"key":"ref1","doi-asserted-by":"crossref","first-page":"233","DOI":"10.1093\/spp\/21.4.233","article-title":"Computer-related accidental death: An empirical exploration","volume":"21","author":"mackenzie","year":"1994","journal-title":"Sci Public Policy"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/1822018.1822041"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48234-2_9"},{"key":"ref45","article-title":"GUI inspection from source code analysis","volume":"33","author":"silva","year":"2010","journal-title":"Electron Commun EASST"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/2494603.2480302"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/DASC.2003.1245813"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-11623-0_25"},{"key":"ref24","first-page":"101","article-title":"Analyzing mode confusion: An approach using FDR2","author":"buth","year":"0","journal-title":"Proc 23rd Int Conf Comput Safety Rel Security"},{"journal-title":"UML Distilled A Brief Guide to the Standard Object Modelling Language","year":"2004","author":"fowler","key":"ref41"},{"key":"ref23","article-title":"Demonstrating that medical devices satisfy user related safety requirements","author":"harrison","year":"0","journal-title":"Proc 4th Symp Found Health Inf Eng Syst \/6th Softw Eng Healthcare Workshop"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45236-2_4"},{"key":"ref26","first-page":"189","article-title":"Validating interactive system design through the verification of formal task and system models","author":"palanque","year":"0","journal-title":"Proc 8th IFIP Working Conf Eng for Human-Computer Interaction"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9781139195881"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.ress.2004.07.020"}],"container-title":["IEEE Transactions on Human-Machine Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6221037\/7431959\/07095568.pdf?arnumber=7095568","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,10,11]],"date-time":"2021-10-11T02:34:51Z","timestamp":1633919691000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7095568\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,4]]},"references-count":46,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/thms.2015.2421511","relation":{},"ISSN":["2168-2291","2168-2305"],"issn-type":[{"type":"print","value":"2168-2291"},{"type":"electronic","value":"2168-2305"}],"subject":[],"published":{"date-parts":[[2016,4]]}}}