Using formal specifications to support testing

ACM Computing Surveys

Volumn 41, Issue 2, 2009, Pages

  Hierons, Robert M ^a   Bogdanov, Kirill ^b   Bowen, Jonathan P ^c   Cleaveland, Rance ^d   Derrick, John ^b   Dick, Jeremy ^e,k   Gheorghe, Marian ^b   Harman, Mark ^c   Kapoor, Kalpesh ^f   Krause, Paul ^g   Lüttgen, Gerald ^h   Simons, Anthony J H ^b   Vilkomir, Sergiy ^i,l   Woodward, Martin R ^m   Zedan, Hussein ^j  

^a BRUNEL UNIVERSITY   (United Kingdom)

^b UNIVERSITY OF SHEFFIELD   (United Kingdom)

^c KING'S COLLEGE LONDON   (United Kingdom)

^d UNIVERSITY OF MARYLAND   (United States)

^e Integrate Systems Engineering Ltd   (United Kingdom)

^f INDIAN INSTITUTE OF TECHNOLOGY GUWAHATI   (India)

^g UNIVERSITY OF SURREY   (United Kingdom)

^h UNIVERSITY OF YORK   (United Kingdom)

ⁱ UNIVERSITY OF TENNESSEE   (United States)

^j DE MONTFORT UNIVERSITY   (United Kingdom)

^k Gate House   (United Kingdom)

^l EAST CAROLINA UNIVERSITY   (United States)

^m 4169 A V Williams Building ^*

more..

Author keywords

Formal methods; Software testing

Indexed keywords

FORMAL SPECIFICATIONS; HIGH-QUALITY SOFTWARES; STATE-OF-THE ARTS; SUPPORT TESTING;

COMPUTER SOFTWARE SELECTION AND EVALUATION; SOFTWARE TESTING; SPECIFICATIONS;

FORMAL METHODS;

EID: 61949111611     PISSN: 03600300     EISSN: 15577341     Source Type: Journal    
DOI: 10.1145/1459352.1459354     Document Type: Article

References (277)

1. ABRIAL, J.-R. 1996. The B-Book: Assigning Programs to Meanings. Cambridge University Press, Cambridge, U.K.
2. AERTRYCK, L. V., BENVENISTE, M., AND LE METAYER, D. 1997. CASTING: A formally based software test generation method. In ICFEM'97:1st International Conference on Formal Engineering Methods, IEEE (Hiroshima, Japan).
3. AHO, A. V., DAHBURA, A. T., LEE, D., AND UYAR, M. U. 1988. An optimization technique for protocol conformance test generation based on UIO sequences and Rural Chinese Postman Tours. In Protocol Specification, Testing, and Verification VIII. Elsevier (North-Holland), Amsterdam, The Netherlands, 75-86.
4. AICHERNIG, B. K. 1999. Automated black-box testing with abstract VDM oracles. In Computer Safety, Reliability and Security: The 18th International Conference, SAFECOMP'99, Toulouse, France, September 1999, M. Felici, K. Kanoun, and A. Pasquini, Eds. Lecture Notes in Computer Science, vol. 1698. Springer-Verlag, Berlin, Germany, 250-259.
5. AICHERNIG, B. K. 2000. Formal specification techniques as a catalyst in validation. In Proceedings of the 5th IEEE High Assurance Systems Engineering Symposium (HASE, Albuquerque, NM). 203-207.
6. AICHERNIG, B. K. 2001a. Systematic black-box testing of computer based systems through formal abstraction techniques. Ph.D. dissertation, Graz University of Technology, Graz, Austria.
7. AICHERNIG, B. K. 2001b. Test-case calculation through abstraction. In Formal Methods Europe (FME 2001), J. N. Oliveira and R Zave, Eds. Lecture Notes in Computer Science, vol. 2021. Springer-Verlag, Berlin, Germany, 571-589.
8. AL-AMAYREH, A. AND ZIN, A. M. 1999. PROBE: A formal specification-based testing system. In Proceedings of the 20th International Conference on Information Systems. 400-404.
9. ALLEN, S. P. AND WOODWARD, M. R. 1996. Assessing the quality of specification-based testing. In Proceedings of the 3rd International Conference on Achieving Quality in Software. Chapman and Hall, London, U.K., 341-354.
10. ALUR, R., COURCOUBETIS, C., HENZINGER, T., AND HO, P. 1993. Hybrid Automata: An Algorithmic approach to the specification and analysis of hybrid systems. In Hybrid Systems, R. L. Grossman, A. Nerode, A. P. Ravn, and H. Rischel, Eds. Lecture Notes in Computer Science, vol. 736, 209-229.
11. ALUR, R. AND DILL, D. 1990. Automata for modeling real-time systems. In Automata, Languages and Programming, 17th International Colloquium, ICALP90. Lecture Notes in Computer Science, vol. 443. Springer-Verlag, Berlin, Germany, 322-335.
12. ALUR, R. AND DILL, D. L. 1994. A theory of timed automata. Theoret. Comput. Sci. 126, 2, 183-235.
13. ALUR, R., GROSU, R., HUR, Y., KUMAR, V., AND LEE, I. 2000. Modular specification of hybrid systems in CHARON. In Hybrid Systems: Computation and Control, Third International Workshop (HSCC). 6-19.
14. ALUR, R. AND KURSHAN, R. 1996. Timing analysis in COSPAN. In Hybrid Systems III: Verification and Control, Proceedings of the DIMACS/SYCON Workshop, October 22-25, 1995, Rutgers University, New Brunswick, NJ, USA, R. Alur, T. A. Henziger, and E. D. Sontag, Eds. Lecture Notes in Computer Science, vol. 1066, 220-231.
15. AMBERT, F., BOUQUET, F., CHEMIN, S., GUENAUD, S., LEGEARD, B., PEUREUX, F., UTTING, M., AND VACELET, N. 2002. BZ-testing-tools: A tool-set for test generation from Z and B using constraint logic programming. In Formal Approaches to Testing Software (FATES 2002). INRIA, Brno, Czech Republic, 105-120.
16. AMLA, N. AND AMMANN, R 1992. Using Z specifications in category partition testing. In COMPASS '92, Proceedings of the 7th Annual Conference on Computer Assurance (Gaithersburg, MD). 15-18.
17. AMMANN, P., BLACK, P. E., AND MAJURSKI, W 1998. Using model checking to generate tests from specifications. In Proceedings of the 2nd IEEE International Conference on Formal Engineering Methods (ICFEM, Brisbane, Australia). 46-54.
18. AMMANN, R AND OFFUTT, J. 1994. Using formal methods to derive test frames in category-partition testing. In Proceedings of the 9th Annual Conference on Computer Assurance (COMPASS, Gaithersburg, MD). 69-80.
19. AMMANN, R E. AND BLACK, R E. 2000. Test generation and recognition with formal methods. In Proceedings of the International Workshop on Automated Program Analysis, Testing and Verification (Limerick, Ireland). 64-67.
20. ANTSAKLIS, R, KOHN, W., NERODĚ, A., AND SASTRY, S., Eds. 1995. Hybrid Systems II. Lecture Notes in Computer Science, vol. 999. Springer-Verlag.
21. ANTSAKLIS, P. J., Ed. 1997. Hybrid Systems IV. Lecture Notes in Computer Science, vol. 1237. Springer-Verlag, Berlin, Germany.
22. ANTSAKLIS, R J., KOHN, W., LEMMON, M., NERODE, A., AND SASTRY, S. 1999. Hybrid Systems. Lecture Notes in Computer Science, vol. 1567. Springer-Verlag.
23. ARTHO, C., BARRINGER, H., GOLDBERG, A., HAVELUND, K., KHURSHID, S., LOWRY, M., PASAREANU, C., ROSU, G., SEN, K., VISSER, W., AND WASHINGTON, R. 2005. Combining test case generation and runtime verification. Theoret. Comput. Sci. 336, 2-3, 209-234.
24. ATTERER, R. 2000. Automatic test data generation from VDM-SL specifications. M.S. thesis. Queen's University of Belfast, Northern Ireland, U.K.
25. BALANESCU, T., COWLING, T., GEORGESCU, H., GHEORGHE, M., HOLCOMBE, M., AND VERTAN, C 1999. Communicating stream X-machines systems are no more than X-machines. J. Univers. Comput. Sci. 5, 494-507.
26. BALL, T. AND RAJAMANI, S. 2001. Automatically validating temporal safety properties of interfaces. In SPIN 2001. Lecture Notes in Computer Science, vol. 2057. Springer-Verlag, Berlin, Germany, 103-122.
27. BARNETT, M., GRIESKAMP, W., NACHMANSON, L., SCHULTE, W., TILLMANN, N., AND VEANES, M. 2003. Towards a tool environment for model-based testing with ASML. In Formal Approaches to Testing. Lecture Notes in Computer Science, vol. 2931. Springer-Verlag, Berlin, Germany, 252-266.
28. BEHNIA, S. AND WAESELYNCK, H. 1999. Test criteria definition for B models. In Proceedings of the World Congress on Formal Methods. 509-529.
29. BENGTSSON, J., LARSEN, K. G., LARSON, F., PETTERSSON, P., AND YI, W. 1995. UppAal: A tool suite for automatic verification of real-time systems. In Hybrid Systems III: Verification and Control, Proceedings of the DIMACS/SYCON Workshop, October 22-25, 1995, Rutgers University, New Brunswick, NJ, USA, R. Alur, T. A. Henzinger, and E. D. Sontag, Eds. Lecture Notes in Computer Science, vol. 1066. Springer, Berlin, Germany, 232-243.
30. BENJAMIN, M., GEIST, D., HARTMAN, A., MAS, G., SMEETS, R., AND WOLFSTHAL, Y 1999. A study in coverage-driven test generation. In Proceedings of the 36th Design Automation Conference (DAC). 970-975.
31. BERNOT, G., GAUDEL, M.-C., AND MARRE, B. 1991. Software testing based on formal specifications: A theory and a tool. IEE/BCS Softw. Eng. J. 6, 6, 387-405.
32. BEYER, D., CHLIPALA, A., HENZINGER, T, JHALA, R., AND MAJUMDAR, R. 2004. Generating tests from counterexamples. In Proceedings of the ICSE 2004. IEEE Computer Society Press, Los Alamitos, CA, 326-335.
33. BICARREGUI, J., DICK, J., MATTHEWS, B., AND WOODS, E. 1997. Making the most of formal specification through animation, testing and proof. Sci. Comput. Program. 29/1-2, 55-80.
34. BIDOIT, M. AND MOSSES, R 2003. CASL User Manual: Introduction to Using the Common Algebraic Specification Language. Lecture Notes in Computer Science, vol. 2900. Springer-Verlag, Berlin, Germany.
35. BOGDANOV, K. 2000. Automated testing of Harel's Statecharts. Ph.D. dissertation, The University of Sheffield, Sheffield, U.K.
36. BOUGÉ, L., CHOQUET, N., FRIBOURG, L., AND GAUDEL, M.-C. 1986. Test sets generation from algebraic specifications using logic programming. J. Syst. Softw. 6, 4, 343-360.
37. BOWEN, J. P., BOGDANOV, K., CLARK, J., HARMAN, M., HIERONS, R. M., AND KRAUSE, R 2002. FORTEST: Formal methods and testing. In Proceedings of the 26th IEEE Computer Software and Applications (COMPSAC). 91-101.
38. BRADFIELD, J. AND STIRLING, C. 2001. Modal logics and mu-calculi: An introduction. In Handbook of Process Algebra. Elsevier Science, Amsterdam, The Netherlands, 293-330.
39. BRINKSMA, E. 1988. A theory for the derivation of tests. In Protocol Specification, Testing, and Verification VIII. North-Holland, Amsterdam, The Netherlands, 63-74.
40. BRINKSMA, E., HEERINK, L., AND TRETMANS, J. 1997. Developments in testing transition systems. InIFIP TC6 10th International Workshop on Testing of Communicating Systems. Kluwer, Dordrecht, The Netherlands, 143-166.
41. BRINKSMA, E., HEERINK, L., AND TRETMANS, J. 1998. Factorized test generation for multi-input/output transition systems. In IFIP TC611th International Workshop on Testing of Communicating Systems. Kluwer, Dordrecht, The Netherlands, 67-82.
42. BROEKMAN, B. AND NOTENBOOM, E. 2003. Testing Embedded Software. Addison-Wesley, London, U.K.
43. BRYANT, R. E. 1986. Graph-based algorithms for Boolean function manipulation. IEEE Trans. Comput. 35, 8, 677-691.
44. BURTON, S. 2002. Automated testing from specifications. Ph.D. dissertation. The University of York, York, U.K.
45. CALLAHAN, J., SCHNEIDER, F., AND EASTERBROOK, S. 1996. Automated software testing using model-checking. In SPIN '96. Rutgers University, Brunswick, NJ, 118-127.
46. CARDELL-OLIVER, R. 2000. Conformance tests for real-time systems with timed automata specifications. Form. Aspects Comput. 12, 5, 350-371.
47. CARRINGTON, D. A. AND STOCKS, R A. 1994. A tale of two paradigms: Formal methods and software testing. In Z User Workshop, Cambridge 1994, J. P. Bowen and J. A. Hall, Eds. Workshops in Computing. Springer-Verlag, Berlin, Germany, 51-68.
48. CAVALLI, A. R., CHIN, B.-M., AND CHON, K. 1996. Testing methods for SDL systems. Comput. Netw. ISDN Syst. 28, 12, 1669-1683.
49. CAVALLI, A. R., LEE, D., RINDERKNECHT, C., AND ZAÏDI, F. 1999. Hit-or-Jump: An algorithm for embedded testing with applications to in services. In Proceedings of the Conference on Formal Methods for Protocol Engineering and Distributed Systems (FORTE XII). 41-56.
50. CHAN, W. Y. L., VUONG, S. T., AND ITO, M. R. 1989. On test sequence generation for protocols. In Proceedings of the IFIP WG6.1 Ninth International Symposium, on Protocol Specification, Testing and Verification. 119-130.
51. CHANG, J. AND RICHARDSON, D. 1994. Static and dynamic specification slicing. In Proceedings of the 4th Irvine Software Symposium (Irvine, CA).
52. CHEN, H. Y., TSE, T. H., CHAN, F. T., AND CHEN, T. Y. 1998. In black and white: An integrated approach to class-level testing of object-oriented programs. ACM Trans. Softw. Eng. Methodol. 7, 3, 250-295.
53. CHEN, H. Y., TSE, T. H., AND CHEN, T. Y. 2001. TACCLE: A methodology for object-oriented software testing at the class and cluster levels. ACM Trans. Softw. Eng. Methodol. 10, 4, 56-109.
54. CHEN, H. Y., TSE, T. H., AND DENG, Y. T. 2000. ROCS: An object-oriented class-level testing system based on the relevant observable contexts technique. Inform. Softw. Technol. 42, 10, 677-686.
55. CHOQUET, N. 1986. Test data generation using a prolog with constraints. In Proceedings of the Workshop on Software Testing. IEEE Computer Society Press, Los Alamitos, CA, 132-141.
56. CHOW, T. S. 1978. Testing software design modeled by finite state machines. IEEE Trans. Softw. Eng. 4, 178-187.
57. CIANCARINI, R, CIMATO, S., AND MASCOLO, C. 1996. Engineering formal requirements: Analysis and testing. In Proceedings of the 8th International Conference on Software Engineering and Knowledge Engineering (SEKE, Lake Tahoe, CA). 385-392.
58. CIMATTI, A., CLARKE, E. M., GIUNCHIGLIA, F., AND ROVERI, M. 1999. NuSMV: A new symbolic model verifier. In CAV '99. Lecture Notes in Computer Science, vol. 1464. Springer-Verlag, Berlin, Germany, 495-499.
59. CLARKE, E. M. AND EMERSON, E. A. 1981. Synthesis of synchronization skeletons for branching time temporal logic. In Workshop on Logics of Programs. Lecture Notes in Computer Science, vol. 131. Springer-Verlag, Berlin, Germany, 52-71.
60. CLARKE, E. M., EMERSON, E. A., AND SISTALA, A. R 1986. Automatic verification of finite-state concurrent systems using temporal logic specifications. ACM Trans. Program. Lang. Syst. 8, 2, 244-263.
61. CLARKE, E. M., GRUMBERG, O., AND PELED, D. 1999. Model Checking. MIT Press, Cambridge, MA.
62. CLARKE, E. M. AND WING, J. M. 1996. Formal methods: State of the art and future directions. ACM Comput. Surv. 28, 4, 626-643.
63. CLARKE, L. A., HASSELL, J., AND RICHARDSON, D. J. 1982. A close look at domain testing. IEEE Trans. Softw. Eng. 8, 4, 380-390.
64. CLEAVELAND, R., LI, T., AND SIMS, S. 2000. The Concurrency Workbench of the New Century. SUNY, Stony Brook, NY.
65. CORBETT, J. C., DWYER, M. B., HATCLIFF, J., LAUBACH, S., PASAREANU, C. S., ROBBY, AND ZHENG, H. 2000. Bandera: Extracting finite-state models from Java source code. In Proceedings of the International Conference on Software Engineering. IEEE Computer Society Press, Los Alamitos, CA, 439-448.
66. CRAGGS, I., SARDIS, M., AND HEUILLARD, T. 2003. AGEDIS case studies: Model-based testing in industry. In Proceedings of the 1st European Conference on Model-Driven Software Engineering. 106-117.
67. CUSACK, E. AND WEZEMAN, C. 1993. Deriving tests for objects specified in z. In Z User Workshop, London 1992, J. R Bowen and J. E. Nicholls, Eds. Workshops in Computing. Springer-Verlag, Berlin, Germany, 180-195.
68. DAUCHY, P., GAUDEL, M.-C., AND MARRE, B. 1993. Using algebraic specifications in software testing: A case study on the software of an automatic subway. J. Syst. Softw. 21, 3, 229-244.
69. DAWS, C., OLIVERO, A., TRIPAKIS, S., AND YOVINE, S. 1995. The tool kronos. In Hybrid Systems. Lecture Notes in Computer Science, vol. 1066. Springer, Berlin, Germany, 208-219.
70. DE VRIES, R. G. AND TRETMANS, J. 2000. On-the-fly conformance testing using SPIN. Softw. Tools Technol. Transf. 2, 4 (Mar.), 382-393.
71. DEMILLO, R., LIPTON, R. J., AND PERLIS, A. J. 1979. Social processes and proofs of theorems and programs. Commun. ACM 22, 5, 271-280.
72. DERRICK, J. AND BOITEN, E. 1999. Testing refinements of state-based formal specifications. Softw. Test. Verif. Reliab. 9, 27-50.
73. DICK, J. AND FAIVRE, A. 1993. Automating the generation and sequencing of test cases from model based specifications. In FME '93: Industrial Strength Formal Methods, J. C. P. Woodcock and R G. Larsen, Eds. Lecture Notes in Computer Science, vol. 670. Springer-Verlag, Berlin, Germany, 268-284.
74. DIJKSTRA, E. W 1972. Notes of structured programming. In Structured Programming, O. J. Dahl, E. W. Dijkstra, and C. A. R. Hoare, Eds. Academic Press, New York, NY.
75. DOONG, R.-K. AND FRANKL, P. G. 1991. Case studies on testing object-oriented programs. In The Symposium on Testing, Analysis and Verification (TAV4). ACM Press, New York, NY, 165-177.
76. DOONG, R.-K. AND FRANKL, R G. 1994. The ASTOOT approach to testing object-oriented programs. ACM Trans. Softw. Eng. Methodol. 3, 2, 101-130.
77. DUALE, A. Y. AND UYAR, M. U 2004. A method enabling feasible conformance test sequence generation for EFSM models. IEEE Trans. Comput. 53, 5, 614-627.
78. EILENBERG, S. 1974. Automata, languages and machines. Vol. A. Academic Press, New York, NY.
79. EISNER, C 2005. Formal verification of software source code through semi-automatic modeling. Softw. Syst. Model. 4, 1, 14-31.
80. EL-FAR, I. K., THOMPSON, H. H., AND MOTTAY, F. E. 2001. Experiences in testing pocket PS applications. In Proceedings of the International Internet & Software Quality Week Europe Conference.
81. EMERSON, E. A. 1990. Temporal and modal logic. In Handbook of Theoretical Computer Science. Vol. B. North-Holland, Amsterdam, The Netherlands, 995-1072.
82. EN-NOUAARY, A., DSSOULI, R., AND KHENDEK, F. 2002. Timed Wp-method: Testing real-time systems. IEEE Trans. Softw. Eng. 28, 11, 1023-1038.
83. EN-NOUAARY, A., DSSOULI, R., KHENDEK, F., AND ELQORTOBI, A. 1998. Timed test cases generation based on state characterization technique. In Proceedings of the IEEE Real-Time Systems Symposium. 220-229.
84. ENGELS, A., FEIJS, L. M. G., AND MAUW, S. 1997. Test generation for intelligent networks using model checking. In Tools and Algorithms for Construction and Analysis of Systems, Third International Workshop, TACAS '97. Lecture Notes in Computer Science, vol. 1217. Springer-Verlag, Berlin, Germany, 384-398.
85. ERNST, M. D. 2001. Summary of dynamically discovering likely program invariants. In Proceedings of the International Conference on Software Maintenance (ICSM). 540-544.
86. FARCHI, E., HARTMAN, A., AND PINTER, S. 2002. Using a model-based test generator to test for standard conformance. IBM Syst. J. 41, 1, 89-110.
87. FENTON, N., KRAUSE, P., AND NEIL, M. 2002. Software measurement: Uncertainty and causal modeling. IEEE Softw. 10, 4, 116-122.
88. FERNANDEZ, J.-C., JARD, C., JERON, T., AND VIHO, G. 1996. Using on-the-fly verification techniques for the generation of test suites. In Computer Aided Verification, 8th International Conference, CAV'96, New Brunswick, NJ, USA, July 31-August 3, 1996, Proceedings, R. Alur and T. A. Henzinger, Eds. Lecture Notes in Computer Science, vol. 1102. Springer, Berlin, Germany, 348-359.
89. FETZER, J. H. 1988. Program verification: The very idea. Commun. ACM 31, 9, 1048-1063.
90. FLETCHER, R. AND SAJEEV, A. S. M. 1996. A framework for testing object-oriented software using formal specifications. In Proceedings of the Ada-Europe'96, International Conference on Reliable Software Technologies (Montreux, Switzerland). 159-170.
91. Formal Systems (Europe) Ltd. 1997. Failures-Divergence Refinement: FDR2 User Manual. Formal Systems (Europe) Ltd. Oxford, U.K.
92. FRANTZEN, L., TRETMANS, J., AND WILLEMSE, T. A. C 2004. Test generation based on symbolic specifications. In Proceedings of the Formal Approaches to Software Testing, 4th International Workshop (FATES) Linz, Austria), 1-15.
93. FUJIWARA, S., VON BOCHMANN, G., KHENDEK, F., AMALOU, M., AND GHEDAMSI, A. 1991. Test selection based on finite state models. IEEE Trans. Softw. Eng. 17, 6, 591-603.
94. GANNON, J., MCMULLIN, P., AND HAMLET, R. 1981. Data-abstraction implementation, specification, and testing. ACM Trans. Program. Lang. Syst. 3, 2, 211-223.
95. GARAVEL, H. AND HERMANNS, H. 2002. On combining functional verification and performance evaluation using CADP. In Proceedings of the International Symposium of Formal Methods Europe (FME). 410-429.
96. GARGANTINI, A. AND HEITMEYER, C. 1999. Using model checking to generate tests from requirements specifications. In ESEC '99. Lecture Notes in Computer Science, vol. 1687. Springer-Verlag, Berlin, Germany, 146-162.
97. GAUDEL, M.-C. 1995. Testing can be formal too. In TAPSOFT'95. Springer-Verlag, Berlin, Germany, 82-96.
98. GAUDEL, M.-C. 2001. Testing from formal specifications, a generic approach. In. Ada-Europe. Lecture Notes in Computer Science, vol. 2043. Springer-Verlag, Berlin, Germany, 35-48.
99. GAUDEL, M.-C. AND JAMES, R R. 1998. Testing algebraic data types and processes: a unifying theory. Form. Aspect. Comput. 10, 5-6, 436-451.
100. GERRARD, C. P., COLEMAN, D., AND GALLIMORE, R. M. 1990. Formal specification and design time testing. IEEE Trans. Softw. Eng. 16, 1, 1-12.
101. GILL, A. 1962. Introduction to the Theory of Finite-State Machines. McGraw-Hill, New York, NY.
102. GIRARD, A. R., SPRY, S., AND HEDRICK, J. K. 2005. Real-time embedded hybrid control software for intelligent cruise control applications. IEEE Robot. Automat. Mag. 12, 1, 22-28.
103. GODEFROID, R 1996. Partial-Order Methods for the Verification of Concurrent Systems-An Approach to the State-Explosion Problem. Lecture Notes in Computer Science, vol. 1032. Springer-Verlag, New York, NY.
104. GODEFROID, R 1997. Model checking for programming languages using VeriSoft. In Principles of Programming Languages. ACM Press, New York, NY, 174-186.
105. GODHAVN, J.-M., LAUVDAL, T., AND EGELAND, O. 1996. Hybrid control in sea traffic management systems. In Hybrid Systems III. Lecture Notes in Computer Science, vol. 1066, Springer, Berlin, Germany, 149-160.
106. GOGUEN, J. A. AND MALCOLM, G. 2000. Software Engineering with OBJ: Algebraic Specifications in Action. Kluwer Academic Publishers, Dordrecht, The Netherlands.
107. GOGUEN, J. A. AND TARDO, J. J. 1979. An introduction to OBJ: A language for writing and testing formal algebraic specifications. In Proceedings of the IEEE Conference on Specifications of Reliable Software. IEEE Computer Society Press, Los Alamitos, CA, 170-189.
108. GONENC, G. 1970. A method for the design of fault detection experiments. IEEE Trans. Comput. 19, 551-558.
109. GOODENOUGH, J. B. AND GERHART, S. L. 1975. Toward a theory of test data selection. IEEE Trans. Softw. Eng. 1, 2, 156-173.
110. GOTLIEB, A., BOTELLA, B., AND RUEHER, M. 1998. Automatic test data generation using constraint solving techniques. In Proceedings of ISSTA '98. ACM Press, New York, NY, 53-62.
111. GRIESKAMP, W., GUREVICH, Y., SCHULTE, W., AND VEANES, M. 2002. Generating finite state machines from abstract state machines. In Proceedings of the ACM SIGSOFT Symposium on Software Testing and Analysis. 112-122.
112. GROCE, A., PELED, D., AND YANNAKAKIS, M. 2002. Adaptive model checking. In TACAS 2002. Lecture Notes in Computer Science, vol. 2280. Springer-Verlag, Berlin, Germany, 357-370.
113. GUNTER, E. AND PELED, D. 2005. Model checking, testing and verification working together. Form. Aspects Comput. 17, 201-221.
114. GUPTA, V., JAGADEESAN, R., AND SARASWAT, V A. 1998. Computing with continuous change. Set. Comput. Program. 30, 1-2, 3-49.
115. HALL, P. A. V. 1988. Towards testing with respect to formal specification. In Proceedings of the 2nd IEE/BCS Conference on Software Engineering. 159-163.
116. HAMLET, R. 1989. Theoretical comparison of testing methods. In Proceedings of the Third Symposium on Testing, Analysis and Verification. ACM Press, New York, NY, 28-37.
117. HARDER, M. 2002. Improving test suites via generated specifications. Tech. rep. 848. Department of EECS. Cambridge, MA.
118. HAREL, D. AND GERY, E. 1997. Executable object modeling with Statecharts. IEEE Comput., 30, 7, 31-42.
119. HARMAN, M., HU, L., HIERONS, R. M., WEGENER, J., STHAMER, H., BARESEL, A., AND ROPER, M. 2004. Testability transformation. IEEE Trans. Softw. Eng. 30, 1, 3-16.
120. HAVELUND, K. AND PRESSBURGER, T. 1998. Model checking Java programs using Java PathFinder. Softw. Tools Technol. Transf. 2, 4, 366-381.
121. HAVELUND, K. AND ROSU, G. 2004. An overview of the runtime verification tool Java PathExplorer. Form. Meth. Syst. Des. 24, 2, 189-215.
122. HAYES, I. J. 1986. Specification directed module testing. IEEE Trans. Softw. Eng. 12, 1, 124-133.
123. HELKE, S., NEUSTUPNY, T., AND SANTEN, T. 1997. Automating test case generation from Z specifications with Isabelle. In ZUM '97: The Z Formal Specification Notation, J. R Bowen, M. G. Hinchey, and D. Till, Eds. Lecture Notes in Computer Science, vol. 1212. Springer-Verlag, Berlin, Germany, 52-71.
124. HENNIE, F. C. 1964. Fault-detecting experiments for sequential circuits. In Proceedings of the 5th Annual Symposium on Switching Circuit Theory and Logical Design. 95-110.
125. HENZINGER, T., JHALA, R., MAJUMDAR, R., AND SUTRE, G. 2003. Software verification with Blast. In SPIN2003. Lecture Notes in Computer Science, vol. 2648. Springer-Verlag, Berlin, Germany, 235-239.
126. HENZINGER, T. A., KUPFERMAN, O., AND VARDI, M. Y. 1996. A space-efficient on-the-fly algorithm for real-time model checking. In CONCUR '96. Lecture Notes in Computer Science, vol. 1119. Springer-Verlag, Berlin, Germany, 514-529.
127. HIERONS, R. M. 1997a. Testing from a finite state machine: Extending invertibility to sequences. Comput. J. 40, 4, 220-230.
128. HIERONS, R. M. 1997b. Testing from a Z specification. Softw. Test. Verif. Reliab. 7, 1, 19-33.
129. HIERONS, R. M. 2001. Checking states and transitions of a set of communicating finite state machines. Microproc. Microsyst. (Special Issue on Testing and Testing Techniques for Real-Time Embedded Software Systems) 24, 9, 443-452.
130. HIERONS, R. M. 2002. Comparing tests in the presence of hypotheses. ACM Trans. Softw. Eng. Methodol. 11, 4, 427-448.
131. HIERONS, R. M. 2004a. Minimizing the number of resets when testing from a finite state machine. Inform. Process. Lett. 90, 6, 287-292.
132. HIERONS, R. M. 2004b. Testing from a non-deterministic finite state machine using adaptive state counting. IEEE Trans. Comput. 53, 10, 1330-1342.
133. HIERONS, R. M. AND HARMAN, M. 2000. Testingcomformance to a quasi-non-determinstic stream X-machine. Form. Aspects Comput. 12, 6, 423-442.
134. HIERONS, R. M. AND HARMAN, M. 2004. Testing conformance of a deterministic implementation to a non-deterministic stream X-machine. Theoret. Comput. Sci. 323, 1-3, 191-233.
135. HIERONS, R. M., KIM, T.-H., AND URAL, H. 2004. On the testability of SDL specifications. Comput. Netw. 44, 5, 681-700.
136. HIERONS, R. M., SADEGHIPOUR, S., AND SINGH, H. 2001. Testing a system specified using Statecharts and Z. Inform. Softw. Technol. 43, 2, 137-149.
137. HIERONS, R. M. AND URAL, H. 2006. Optimizing the length of checking sequences. IEEE Trans. Comput. 55, 5, 618-629.
138. HOARE, C. A. R. 1985. Communicating Sequential Processes. Prentice Hall International Series in Computer Science. Prentice Hall, Englewood Cliffs, NJ.
139. HOARE, C. A. R. 1996. How did software get so reliable without proof? In Cost 237 Workshop, D. Hutchison, H. Christiansen, G. Coulson, and A. S. Danthine, Eds. Lecture Notes in Computer Science, vol. 1052. Springer, Berlin, Germany, 1-17.
140. HOLCOMBE, M. AND IPATE, F. 1998. Correct Systems: Building a Business Process Solution. Springer-Verlag, Berlin, Germany.
141. HOLZMANN, G. 2003. The Spin Model Checker: Primer and Reference Manual. Addison-Wesley, Reading, MA.
142. HOLZMANN, G. J. 1996. On-the-fly model checking. ACM Comput. Surv. 28, 4, 120-120.
143. HOLZMANN, G. J. AND SMITH, M. H. 2001. Software model checking: Extracting verification models from source code. Softw. Test. Verif. Reliab. 11, 2, 65-79.
144. HONG, H., CHA, S., LEE, I., SOKOLSKY, O., AND URAL, H. 2003. Data flow testing as model checking. In Proceedings of ICSE 2003. IEEE Computer Society Press, Los Alamitos, CA, 232-243.
145. HONG, H., LEE, I., SOKOLSKY, O., AND URAL, H. 2002. A temporal logic based theory of test coverage and generation. In TACAS 2002. Lecture Notes in Computer Science, vol. 2280. Springer-Verlag, Berlin, Germany, 327-341.
146. HONG, H. S., LEE, I., SOKOLSKY, O., AND CHA, S. D. 2001. Automatic test generation from Statecharts using model checking. In FATES '01. BRICS Notes Series, vol. NS-01-4. BRICS, Aarhus, Denmark, 15-30.
147. HÖRCHER, H.-M. AND PELESKA, J. 1995. Using formal specifications to support software testing. Softw. Qual. J. 4, 4, 309-327.
148. HÖRL, J. AND AICHERNIG, B. K. 2000. Validating voice communication requirements using lightweight formal methods. IEEE Softw. 17, 3, 21-27.
149. HSIEH, E. R 1971. Checking experiments for sequential machines. IEEE Trans. Comput. 20, 1152-1166.
150. HUBER, F., SCHÄTZ, B., AND EINERT, G. 1997. Consistent graphical specification of distributed systems. In Proceedings of the 4th International Symposium of Formal Methods Europe (FME). 122-141.
151. HUGHES, M. AND STOTTS, D. 1996. Daistish: Systematic algebraic testing for OO programs in the presence of side-effects. In Proceedings of the International Symposium on Software Testing and Analysis. ACM Press, New York, NY, 53-61.
152. HUR, Y., FIERRO, R. B., AND LEE, I. 2003. Modeling distributed autonomous robots using CHARON: Formation control case study. In Proceedings of the 6th IEEE International Symposium on Object-Oriented Real-Time Distributed Computing (ISORC). 93-98.
153. IPATE, F. AND HOLCOMBE, M. 1997. An integration testing method that is proved to find all faults. Int. J. Comput. Math. 63, 3&4, 159-178.
154. IPATE, F. AND HOLCOMBE, M. 2000. Generating test sets from non-deterministic stream X-machines. Form. Aspects Comput. 12, 6, 443-458.
155. ISO. 1989a. ISO 8807:1989 Information Processing Systems, Open Systems Interconnection - LOTOS - A Formal Description Technique Based on the Temporal Ordering of Observational Behaviour. ISO, Geneva, Switzerland.
156. ISO. 1989b. ISO 9074; Estelle - A Formal Description Technique Based on an Extended State Transition Model. ISO, Geneva, Switzerland.
157. ITU-T. 1997. Recommendation Z.500 Framework on Formal Methods in Conformance Testing. International Telecommunications Union, Geneva, Switzerland.
158. ITU-T. 1999. Recommendation Z.100 Specification and Description Language (SDL). International Telecommunications Union, Geneva, Switzerland.
159. JACKSON, D. AND VAZIRI, M. 2000. Finding bugs with a constraint solver. In ISSTA'00: Proceedings of the International Symposium on Software Testing and Analysis. ACM Press, New York, NY, 14-25.
160. JALOTE, R 1983. Specification and testing of abstract data types. In Proceedings of the 7th International Computer Software and Applications Conference (COMPSAC). IEEE Computer Society Press, Los Alamitos, CA, 508-511.
161. JALOTE, R AND CABALLERO, M. G. 1988. Automated testcase generation for data abstraction. In Proceedings of the 12th International Computer Software and Applications Conference (COMPSAC). IEEE Computer Society Press, Los Alamitos, CA, 205-210.
162. JARD, C. AND JÉRON, T. 2005. TGV: Theory, principles and algorithms. Int. J. Softw. Tools Technol. Trans. 7, 4, 297-315.
163. JONES, C. B. 1991. Systematic Software Development using VDM, 2nd ed. Prentice Hall International Series in Computer Science. Prentice Hall, Englewood Cliffs, NJ.
164. KEMMERER, R. A. 1985. Testing formal specifications to detect design errors. IEEE Trans. Softw. Eng. 11, 1, 32-43.
165. KERBRAT, A., JÉRON, T., AND GROZ, R. 1999. Automated test generation from SDL specifications. In SDL For. 135-152.
166. KERNIGHAN, B. W. AND PLAUGER, R J. 1981. Software Tools in Pascal. Addison-Wesley, Reading, MA.
167. KING, S., HAMMOND, J., CHAPMAN, R., AND PRYOR, A. 2000. Is proof more cost-effective than testing? IEEE Trans. Softw. Eng. 26, 8 (Aug.), 675-686.
168. KOHAVI, Z. 1978. Switching and Finite State Automata Theory. McGraw-Hill, New York, NY.
169. KONDO, K. AND YOSHIDA, M. 2005. Use of hybrid models for testing and debugging control software for electromechanical systems. IEEE/ASME Trans. Mechatron. 10, 3, 275-284.
170. KONÉ, O. 2001. A local approach to the testing of real-time systems. Comput. J. 44, 5, 435-447.
171. KRICHEN, M. AND TRIPAKIS, S. 2004. Black-box conformance testing for real-time systems. In Proceedings of the 11th International SPIN Workshop. 109-126.
172. KRICHEN, M. AND TRIPAKIS, S. 2005. An expressive and implementable formal framework for testing real-time systems. In Proceedings of the 17th IFIP TC6/WG 6.1 International Conference on Testing of Communicating Systems (TestCom). 209-225.
173. KUHN, D. R. 1999. Fault classes and error detection capability of specification-based testing. ACM Trans. Softw. Eng. Methodol. 8, 4, 411-424.
174. LAU, M. F. AND YU, Y.-T. 2005. An extended fault class hierarchy for specification-based testing. ACM Trans. Softw. Eng. Methodol. 14, 3, 247-276.
175. LEDUC, G. 1991. Conformance relation, associated equivalence, and a new canonical tester in LOTOS. In Protocol Specification, Testing, and Verification XI. Elsevier (North-Holland), Amsterdam, The Netherlands, 249-264.
176. LEE, D. AND YANNAKAKIS, M. 1994. Testing finite-state machines: State identification and verification. IEEE Trans. Comput. 43, 3, 306-320.
177. LEE, D. AND YANNAKAKIS, M. 1996. Principles and methods of testing finite-state machines. Proc. IEEE 84, 8, 1089-1123.
178. LEGEARD, B., PEUREUX, F., AND UTTING, M. 2002a. Automated boundary testing from Z and B. In Formal Methods Europe (FME 02). Lecture Notes in Computer Science, vol. 2391. Springer, Berlin, Germany, 21-40.
179. LEGEARD, B., PEUREUX, F., AND UTTING, M. 2002b. A comparison of the BTT and TTF test-generation methods. In Proceedings of the Conference on Formal Specification and Development in Z and B (ZB). 309-329.
180. LESTIENNES, G. AND GAUDEL, M.-C. 2002. Testing processes from formal specifications with inputs, outputs and data types. In Proceedings of the 13th International Symposium on Software Reliability Engineering (ISSRE). 3-14.
181. LICHTENSTEIN, O. AND PNUELI, A. 1985. Checking that finite state concurrent programs satisfy their linear specification. In Principles of Programming Languages. IEEE Computer Society Press, Los Alamitos, CA, 97-107.
182. LITTLEWOOD, B. 2005. CASTING: Dependability assessment of software-based systems: State of the art. In ICSE'05: Proceedings of the 27th International Conference on Software Engineering. 6-7.
183. LIU, S. 1999. Verifying consistency and validity of formal specifications by testing. In World Congress on Formal Methods, J. Wing, J. Woodcock, and J. Davies, Eds. Lecture Notes in Computer Science, vol. 1708. Springer-Verlag, Berlin, Germany, 896-914.
184. LIU, S., FUKUZAKL, T., AND MIYAMOTO, K. 2000. A GUI and testing tool for SOFL. In APSEC 2000: Proceedings of the 7th Asia-Pacific Software Engineering Conference. IEEE Computer Society Press, Los Alamitos, CA, 421-425.
185. LÓPEZ, N. AND NÚÑEZ, M. 2004. An overview of probabilistic process algebras and their equivalences. In Validation of Stochastic Systems. Lecture Notes in Computer Science, vol. 2925. Springer, Berlin, Germany, 89-123.
186. LUO, G. L., PETRENKO, A., AND VON BOCHMANN, G. 1994a. Selecting test sequences for partially-specified nondeterministic finite state machines. In Proceedings of the 7th IFIP Workshop on Protocol Test Systems. Chapman and Hall, London, U.K., 95-110.
187. LUO, G. L., VON BOCHMANN, G., AND PETRENKO, A. 1994b. Test selection based on communicating nondeterministic finite-state machines using a generalized Wp-method. IEEE Trans. Softw. Eng. 20, 2, 149-161.
188. LYNCE, I. AND MARQUES-SILVA, J. 2002. Building state-of-the-art sat solvers. In Proceedings of the 15th European Conference on Artificial Intelligence (ECAI). 166-170.
189. MACCOLL, I. AND CARRINGTON, D. 1998. Testing MATIS: A case study on specification-based testing of interactive systems. In FAHCI98: Proceedings of the Formal Aspects of Human Computer Interaction Workshop. British Computer Society, Swindon, U.K., 57-69.
190. MACHADO, R D. L. 2000. Testing from structured algebraic specifications. In Proceedings of the Algebraic Methodology and Software Technology (AMAST). 529-544.
191. MANNA, Z. AND PNUELI, A. 1992. Verifying hybrid systems. In Hybrid Systems. Lecture Notes in Computer Science, vol. 736. Springer-Verlag, Berlin, Germany, 4-35.
192. MANNA, Z. AND PNUELI, A. 1995. Temporal Verification of Reactive Systems. Springer-Verlag, Berlin, Germany.
193. MARINOV, D. AND KHURSHID, S. 2001. TestEra: A novel framework for automated testing of Java programs. In Proceedings of the 16th IEEE Conference on Automated Software Engineering (ASE).
194. MARRE, B. 1995. LOFT: A tool for assisting selection of test data sets from algebraic specifications. In TAPSOFT'95: Theory and Practice of Software Development. Lecture Notes in Computer Science, vol. 915. Springer, Berlin, Germany, 799-800.
195. MARRIOTT, K. AND STUCKEY, R 1998. Programming with Constraints: An Introduction. MIT Press, Cambridge, MA.
196. MCMILLAN, K. L. 1993. Symbolic Model Checking. Kluwer Academic Publishers, Dordrecht, The Netherlands.
197. MCMULLIN, R R. AND GANNON, J. D. 1983. Combining testing with formal specifications: A case study. IEEE Trans. Softw. Eng. 9, 3, 328-335.
198. MEUDEC, C. 1997. Automatic generation of software tests from formal specifications. Ph.D. dissertation, Queen's University of Belfast, Northern Ireland, U.K.
199. MIAO, H., GAO, X., AND LIU, L. 1999. An approach to testing the nonexistence of initial state in Z specifications. In Proceedings of the Test Symposium. (ATS). 289-294.
200. MLKK, E. 1995. Compilation of Z specifications into C for automatic test result evaluation. In ZUM '95: The Z Formal Specification Notation, 9th International Conference of Z Users. Springer-Verlag, Berlin, Germany, 167-180.
201. MIL-STD 188-220B. 1998. Military Standard-Interoperability Standard for Digital Message Device Subsystems. Department of Defense, Washington, DC.
202. MILLER, R. E. AND PAUL, S. 1993. On the generation of minimal length conformance tests for communications protocols. IEEE/ACM Trans. Network. 1, 1, 116-129.
203. MLLNER, R. 1989. Communication and Concurrency. Prentice Hall International Series in Computer Science. Prentice Hall, Englewood Cliffs, NJ.
204. MOORE, E. R 1956. Gedanken-experiments. In Automata Studies, C. Shannon and J. McCarthy, Eds. Princeton University Press, Princeton, NJ.
205. MOSSES, R D. 2004. CASL Reference Manual: The Complete Documentation of the Common Algebraic Specification Language. Lecture Notes in Computer Science, vol. 2960. Springer-Verlag, Berlin, Germany.
206. MOST COOPERATION. 2002. MOST media oriented system transport-multimedia and control networking technology. MOST Cooperation. Karlsruhe, Germany.
207. MURRAY, L., CARRINGTON, D., MACCOLL, I., MCDONALD, J., AND STROOPER, P. 1998. Formal derivation of finite state machines for class testing. In 11th International Conference of Z Users. Lecture Notes in Computer Science, vol. 1493. Springer, Berlin, Germany, 42-59.
208. NAITO, S. AND TSUNOYAMA, M. 1981. Fault detection for sequential machines. In Proceedings of the IEEE Fault Tolerant Computing Conference. 238-243.
209. NIELSEN, B. AND SKOU, A. 2003. Automated test generation from timed automata. Softw. Tools Technol. Transf. 5, 1, 59-77.
210. NÚÑEZ, M. AND RODRÍGUEZ, 1. 2003. Towards testing stochastic timed systems. In Formal Techniques for Networked and Distributed Systems (FORTE2003). Lecture Notes in Computer Science, vol. 2767. Springer, Berlin, Germany, 335-350.
211. OFFUTT, J. AND LIU, S. 1999. Generating test data from SOFL specifications. J. Syst. Softw. 49, 1, 49-62.
212. OSTRAND, T. J. AND BALCER, M. J. 1988. The category-partition method for specifying and generating functional tests. Commun. ACM 31, 6, 676-686.
213. PARK, D., STERN, U., SKAKKEBAEK, J. U., AND DILL, D. L. 2000. Java model checking. In Proceedings of the International Workshop on Automated Program Analysis, Testing and Verification (Limerick, Ireland). 74-82.
214. PELED, D. 1998. Ten years of partial order reduction. In Computer Aided Verification, 10th International Conference (CAV'98). Lecture Notes in Computer Science, vol. 1427. Springer-Verlag, Berlin, Germany, 17-28.
215. PELED, D. 2003. Model checking and testing combined. In Automata, Languages and Programming, 30th International Colloquium (ICALP 2003). Lecture Notes in Computer Science, vol. 2719. Springer-Verlag, Berlin, Germany, 47-63.
216. PELED, D., VARDI, M., AND YANNAKAKIS, M. 2002. Black box checking. J. Automat. Lang. Combin. 7, 2, 225-246.
217. PETRENKO, A. 1991. Checking experiments with protocol machines. In Protocol Test Systems. IFIP Transactions. North-Holland, Amsterdam, The Netherlands, 83-94.
218. PETRENKO, A. 2001. Fault model-driven test derivation from finite state models: Annotated bibliography. Lecture Notes in Computer Science, vol. 2067. Springer, Berlin, Germany, 196-205.
219. PETRENKO, A., BORODAY, S., AND GROZ, R. 1999. Configurations in EFSM. In Proceedings of the IFIP Joint International Conference on Formal Description Techniques for Distributed Systems (FORTE XII) and Communication Protocols, and Protocol Specification, Testing, and Verification (PSTV XIX, China). 5-24.
220. PETRENKO, A., BORODAY, S., AND GROZ, R. 2004. Confirming configurations in EFSM testing. IEEE Trans. Softw. Eng. 30, 1, 29-42.
221. PETRENKO, A., YEVTUSHENKO, N., LEBEDEV, A., AND DAS, A. 1994. Nondeterministic state machines in protocol conformance testing. In Protocol Test Systems, VI (C-19). Elsevier Science (North-Holland), Amsterdam, The Netherlands, 363-378.
222. PETRENKO, A., YEVTUSHENKO, N., AND VON BOCHMANN, G. 1996. Testing deterministic implementations from nondeterministic FSM specifications. In Proceedings of the 9th International Workshop on Testing of Communicating Systems (IWTCS). 125-140.
223. PHALIPPOU, M. 1994. Executable testers. In Protocol Test Systems VI. North-Holland, Amsterdam, The Netherlands, 35-50.
224. PNUELI, A. 1977. The temporal logic of programs. In Proceedings of FOCS. IEEE Computer Society Press, Los Alamitos, CA, 46-57.
225. PRETSCHNER, A., PRENNINGER, W., WAGNER, S., KÜHNEL, C, BAUMGARTNER, M., SOSTAWA, B., ZÖLCH, R., AND STAUNER, T. 2005. One evaluation of model-based testing and its automation. In Proceedings of the 27th ACM/IEEE International Conference on Software Engineering (ICSE, St. Louis, MO), 392-401.
226. QUEILLE, J. R AND SIFAKIS, J. 1982. Specification and verification of concurrent systems in CESAR. In International Symposium on Programming. Lecture Notes in Computer Science, vol. 137. Springer-Verlag, Berlin, Germany, 337-351.
227. RAVN, A. P., RISCHEL, H., CONRAD, F., AND ANDERSEN, T. O. 1995. Hybrid control of a robot - a case study. In Hybrid Systems II. Lecture Notes in Computer Science, vol. 999, Springer, Berlin, Germany, 391-404.
228. RICE, M. D. AND SEIDMAN, S. B. 1998. An approach to architectural analysis and testing. In Proceedings of the 3rd International Workshop on Software Architecture. ACM Press, New York, NY, 121-123.
229. RICHARDSON, D., AHA, S. L., AND O'MALLEY, T. O. 1992. Specification-based test oracles for reactive systems. In Proceedings of the 14th IEEE International Conference on Software Engineering. 105-118.
230. RICHARDSON, D. J. AND CLARKE, L. A. 1985. Partition analysis: A method combining testing and verification. IEEE Trans. Softw. Eng. 14, 12, 1477-1490.
231. ROBINSON, A. AND VORONKOV, A. 2001. Handbook of Automated Reasoning. MIT Press, Cambridge, MA.
232. SABNANI, K. AND DAHBURA, A. 1998. A protocol test generation procedure. Comput. Netw. 15, 4, 285-297.
233. SATO, F., MUNEMORI, J., IDEGUCHI, T., AND MIZUNO, T. 1989. Sequence generation tool for communication system. In Proceedings of the 2nd International Conference on Formal Description Techniques for Distributed Systems and Communication Protocols (FORTE).
234. SCHMITT, M., EK, A., GRABOWSKI, J., HOGREFE, D., AND KOCH, B. 1998. Autolink-putting SDL-based test generation into practice. In Testing of Communicating Systems, IFIP TC6 11th International Workshop on Testing Communicating Systems (IWTCS). Kluwer Academic Publishers, Amsterdam, The Netherlands, 227-244.
235. SIDHU, D. R AND LEUNG, T.-K. 1989. Formal methods for protocol testing: A detailed study. IEEE Trans. Softw. Eng. 15, 4, 413-426.
236. SIMS, S. 1999. The Process Algebra Compiler User's Manual. Reactive Systems, Inc., Falls Church, VA.
237. SINGH, H., CONRAD, M., AND SADEGHIPOUR, S. 1997. Test case design based on Z and the classification-tree method. In Proceedings of the 1st IEEE Conference on Formal Engineering Methods. IEEE Computer Society Press, Los Alamitos, CA, 81-90.
238. SPIVEY, J. M. 1988. Understanding Z: A Specification Language and its Formal Semantics. Cambridge University Press, Cambridge, U.K.
239. SPIVEY, J. M. 1992. The Z Notation: A Reference Manual, 2nd ed. Prentice Hall International Science in Computer Science, Prentice Hall, Englewood Cliffs, NJ.
240. STAUNER, T., MULLER, O., AND FUCHS, M. 1997. Using HYTECH to verify an automotive control system. Lecture Notes in Computer Science, vol. 201. Springer, Berlin, Germany, 139-153.
241. STEPNEY, S. 1995. Testing as abstraction. In The Z Formal Specification Notation (ZUM 95). Lecture Notes in Computer Science, vol. 967. Springer, Berlin, Germany, 137-151.
242. STIRLING, C. 1992. Modal and temporal logics. In Handbook of Logic in Computer Science. Vol. 2. Oxford University Press, Oxford, U.K., 477-563.
243. STOCKS, R A. 1993. Applying formal methods to software testing. Ph.D. dissertation, University of Queensland, Brisbane, Australia.
244. STOCKS, R A. AND CARRINGTON, D. A. 1996. A framework for specification-based testing. IEEE Trans. Softw. Eng. 22, 11 (Nov.), 777-793.
245. TAN, L., KIM, J., SOKOLSKY, O., AND LEE, I. 2004. Model-based testing and monitoring for hybrid embedded systems. In Proceedings of the IEEE International Conference on Information Reuse and Integration (IRI). 487-492.
246. TAOUIL-TRAVERSON, S. AND VIGNES, S. 1996. Preliminary analysis cycle for B-method software development. In EUROMICRO 96: Proceedings of the 22nd EUROMICRO Conference, Beyond 2000: Hardware and Software Design Strategies. 319-325.
247. TRACEY, N., CLARK, J., MANDER, K., AND MCDERMID, J. 2000. Automated test-data generation for exception conditions. Softw. Prac. Exp. 30, 1, 61-79.
248. TREHARNE, H., DRAPER, J., AND SCHNEIDER, S. 1998. Test case preparation using a prototype. In B'98: 2nd International B Conference, Recent Advances in the Development and Use of the B Method, D. Bert, Ed. Lecture Notes in Computer Science, vol. 1393. Springer-Verlag, Berlin, Germany, 293-311.
249. TRETMANS, J. 1996. Conformance testing with labeled transitions systems: Implementation relations and test generation. Comput. Network. ISDN Syst. 29, 1, 49-79.
250. TRETMANS, J. AND BRINKSMA, E. 2003. TORX: Automated Model Based Testing. In Proceedings of the First European Conference on Model-Driven Software Engineering, A. Hartman and K. Dussa-Zieger, Eds. Imbuss, Möhrendorf, Germany. 13 pages.
251. TSUCHIYA, T. AND KLKUNO, T. 2002. On fault classes and error detection capability of specification-based testing. ACAi Trans. Softw. Eng. Methodol. 11, 1, 58-62.
252. URAL, H., SALEH, K., AND WILLIAMS, A. 2000. Test generation based on control and data dependencies within system specifications in SDL. Comput. Commun. 23, 609-627.
253. URAL, H., WU, X., AND ZHANG, F. 1997. On minimizing the lengths of checking sequences. IEEE Trans. Comput. 46, 1, 93-99.
254. UYAR, M. U. AND DUALE, A. Y 1999. Resolving inconsistencies in EFSM modeled specifications. In Proceedings of the IEEE Military Communications Conference (MILCOM, Atlantic City, NJ).
255. UYAR, M. Ü., FECKO, M. A., DUALE, A. Y., AMER, R D., AND SETHI, A. S. 2003. Experience in developing and testing network protocol software using FDTs. Inform. Softw. Technol. 45, 12, 815-835.
256. VALMARI, A. 1990. A stubborn attack on the state explosion problem. In Proceedings of Computer Aided Verification, 2nd International Workshop (CAV). DIMACS, vol. 3. AMS, Providence, RI, 25-42.
257. VARAIYA, R 1993. Smart cars on smart roads. IEEE Trans. Automat. Cont. 38, 2, 195-207.
258. VARDI, M. AND WOLPER, R 1986. An automata-theoretic approach to automatic program verification. In Proceedings of the Symposium on Logic in Computer Science (LICS). IEEE Computer Society Press, Los Alamitos, CA, 332-344.
259. VASILEVSKII, M. R 1973. Failure Diagnosis of Automata. Cybernetics. Plenum Publishing Corporation, New York, NY.
260. VILKOMIR, S. A. AND BOWEN, J. P. 2001. Formalization of software testing criteria using the Z notation. In Proceedings of the 25th Annual International Computer Software and Applications Conference (COMPSAC, Chicago, IL). IEEE Computer Society, Los Alamitos, CA, 351-356.
261. VILKOMIR, S. A. AND BOWEN, J. R 2002. Reinforced condition/decision coverage (RC/DC): A new criterion for software testing. In Proceedings of the 2nd International Conference of B and Z Users (ZB). 291-308.
262. VON BOCHMANN, G. AND PETRENKO, A. 1994. Protocol testing: Review of methods and relevance for software testing. In Proceedings of the ACM International Symposium on Software Testing and Analysis (Seattle, WA). 109-123.
263. VON BOCHMANN, G., PETRENKO, A., BELLAL, O., AND MARGUIRAGA, S. 1997. Automating the process of test derivation from SDL specifications. In Proceedings of the 8th SDL forum, INT. Evry, France, 261-276.
264. WAESELYNCK, H. AND BEHNIA, S. 1998. B model animation for external verification. In Proceedings of the 2nd International Conference on Formal Engineering Methods. 36-45.
265. WATANABE, A. AND SAKAMURA, K. 1996. A specification-based adaptive test case generation strategy for open operating system standards. In Proceedings of the 18th ACM International Conference on Software Engineering. 81-89.
266. WEYUKER, E. J. 2002. Thinking formally about testing without a formal specification. In Proceedings of the Conference on Formal Approaches to Testing of Software (Brno, Czech Republic). 1-10.
267. WEYUKER, E. J. AND OSTRAND, T. J. 1980. Theories of program testing and the the application of revealing subdomains. IEEE Trans. Softw. Eng. 6, 3, 236-246.
268. WEZEMAN, C. D. 1989. The CO-OP method for compositional derivation of conformance testers. In Protocol Specification, Testing, and Verification IX. Elsevier (North-Holland), Amsterdam, The Netherlands, 145-158.
269. WHITE, L. J. AND COHEN, E. I. 1980. A domain strategy for computer program testing. IEEE Trans. Softw. Eng. 6, 3 (May), 247-257.
270. WIMMEL, G., LÖTZBEYER, H., PRETSCHNER, A., AND SLOTOSCH, O. 2000. Specification based test sequence generation with propositional logic. Softw. Test. Verif. Reliab. 10, 229-248.
271. WIN, T. AND ERNST, M. 2002. Verifying distributed algorithms via dynamic analysis and theorem proving. Tech. rep. 841. MIT Laboratory for Computer Science, MIT, Cambridge, MA.
272. WOODWARD, M. R. 1993. Errors in algebraic specifications and an experimental mutation testing tool. IEE/BCS Softw. Eng. J. 8, 4, 211-224.
273. YANG, B. AND URAL, H. 1990. Protocol conformance test generation using multiple UIO sequences with overlapping. In Proceedings of ACM SIGCOMM 90: Communications, Architectures, and Protocols (Twente, The Netherlands). 118-125.
274. YAO, M., PETRENKO, A., AND VON BOCHMANN, G. 1993. Conformance testing of protocol machines without reset. In Protocol Specification, Testing and Verification, XIII (C-16). Elsevier (North-Holland), Amsterdam, The Netherlands, 241-256.
275. YEVTUSHENKO, N. V., LEBEDEV, A. V., AND PETRENKO, A. F. 1991. On checking experiments with nondeterministic automata. Automat. Contr. Comput. Sci. 6, 81-85.
276. YOUNG, M. AND TAYLOR, R. N. 1989. Rethinking the taxonomy of fault detection techniques. In Proceedings of the IEEE/ACM International Conference on Software Engineering. 53-62.
277. ZHU, H. 2003. A note on test oracles and semantics of algebraic specifications. In Proceedings of the Third International Conference on Quality Software (QSIC, Dallas, TX). 91-98.