We have implemented various symbolic model checking algorithms, such as BMC, k-
Induction and IC3 for B, Event-B and other modeling languages. The high-level nature of …

The Event-B formalism allows program specifications to be modelled at an abstract level and
refined towards a concrete model. However, Event-B lacks explicit control flow structure and …

Cross-layer runtime management (RTM) frameworks for embedded systems provide a set of
standard application programming interfaces (APIs) for communication between different …

Our work aims to build a bridge between constructive (top-down) and analytical (bottom-up)
approaches to software verification. This paper presents a tool-supported method for linking …

In model-driven development, the automated generation of a multi-threaded program based
on a model specifying the intended system behaviour is an important step. Verifying that …

Automatic code generation gives software engineers a convenient way to realise a VDM-SL
specification in a programming language in order to achieve interoperability with standard …

Event-B is a formal method that is used in the development of safety-critical systems;
however, these systems may introduce uncertainty and also need to meet real-time …

Ensuring and verifying the properties of safety-and security-critical software is paramount.
Event-B is a modelling language which enables the design of systems, using mathematical …

The constructive approach to software correctness aims at formal modelling of the intended
behaviour and structure of a system in different levels of abstraction and verifying properties …

As systems rely on software, the reliability of the software is required. Formal methods are
prominent ways to improve the reliability of software. Formal specification is one of the …