![[ICO]](/icons/blank.gif){kind=icon}
![[PARENTDIR]](/icons/back.gif){kind=icon}
![[ ]](/icons/layout.gif){kind=icon}
![[ ]](/icons/compressed.gif){kind=icon}
![[TXT]](/icons/text.gif){kind=icon}
![[ ]](/icons/unknown.gif){kind=icon}
![[ ]](/icons/a.gif){kind=icon}
| Name | Last modified | Size | Description |
|---|---|---|---|---|
| Parent Directory | - | ||
| 1oo2-final-2col.pdf | 2012-10-01 11:47 | 428K | |
| 1oo2-revised-04dec10.pdf | 2011-02-13 11:57 | 249K | |
| 4slot.pdf | 2002-07-03 08:31 | 136K | |
| 4slot.ps.gz | 2002-07-03 08:31 | 67K | |
| ARIAS_FinalReport.pdf | 2019-03-14 10:31 | 3.7M | |
| DSS-Then-Now.pdf | 2007-10-05 08:29 | 970K | |
| NAS1-00079-final.pdf | 2005-09-22 19:59 | 534K | |
| README.html | 2005-01-27 05:36 | 885 | |
| USpatent7865339.pdf | 2011-06-24 15:16 | 205K | |
| a2nutshell.pdf | 2024-10-14 12:31 | 515K | |
| aaa13.pdf | 2017-04-17 17:34 | 250K | |
| aaa15.pdf | 2017-04-17 17:23 | 243K | |
| aesscs14.pdf | 2014-05-11 00:29 | 123K | |
| aiaa09.pdf | 2009-10-31 14:51 | 234K | |
| aiaa09.ps.gz | 2009-10-31 14:51 | 194K | |
| aisafety24.pdf | 2025-06-03 11:55 | 952K | |
| anselmP3.pdf | 2024-06-07 12:17 | 174K | |
| assurance2-arxiv.pdf | 2021-01-16 16:27 | 467K | |
| assure24.pdf | 2024-10-31 15:57 | 110K | |
| assure25.pdf | 2025-10-21 16:07 | 85K | |
| attach.pdf | 2003-04-23 15:48 | 514K | |
| attach.ps.gz | 2003-04-19 14:24 | 207K | |
| benchmark.pdf | 2004-01-29 08:36 | 393K | |
| blp86.pdf | 2007-10-28 10:38 | 166K | |
| brian11.pdf | 2023-06-11 20:27 | 151K | |
| buscompare.pdf | 2002-06-25 14:24 | 292K | |
| buscompare.ps.gz | 2002-06-25 14:24 | 120K | |
| cav00.dmp | 2000-09-12 15:53 | 107K | |
| cav00.pdf | 2015-09-02 11:31 | 121K | |
| cav00.ps.gz | 2005-10-25 10:09 | 80K | |
| clarissa-dasc23.pdf | 2023-10-06 11:49 | 1.1M | |
| cliff24-longver.pdf | 2025-08-11 13:53 | 1.3M | |
| combined95.pdf | 2009-08-12 13:41 | 257K | |
| computer83.pdf | 2004-01-29 16:59 | 3.3M | |
| confidence22.pdf | 2022-06-12 12:06 | 1.1M | |
| confidence24.pdf | 2024-08-07 15:54 | 1.3M | |
| csi07.pdf | 2008-01-22 08:13 | 50K | |
| csi07.ps.gz | 2008-01-22 08:12 | 41K | |
| csl-09-02.pdf | 2010-01-12 14:46 | 288K | |
| csl-92-2-long.pdf | 2022-10-02 13:18 | 484K | |
| csl-93-1.pdf | 2006-06-27 14:34 | 389K | |
| csl-93-1.ps.gz | 2006-06-27 14:34 | 260K | |
| csl-93-7.pdf | 2004-05-19 12:31 | 2.0M | |
| csl-93-7.ps.gz | 2005-04-07 11:06 | 756K | |
| dasc08.pdf | 2009-05-06 03:47 | 1.8M | |
| dasc11.pdf | 2011-10-27 14:45 | 284K | |
| dasc99.doc | 2000-04-21 15:05 | 63K | |
| dasc99.pdf | 2000-04-21 16:15 | 65K | |
| dasc99.ps.gz | 2000-04-21 16:14 | 36K | |
| defeaters24.pdf | 2024-05-31 09:42 | 838K | |
| ehdm-tutorial.pdf | 2024-09-16 16:31 | 511K | |
| emsoft01.pdf | 2001-10-12 13:44 | 120K | |
| emsoft01.ps.gz | 2001-10-12 13:43 | 45K | |
| emsoft11.epub | 2012-07-21 10:39 | 122K | |
| emsoft11.html | 2012-07-20 09:47 | 74K | |
| emsoft11.mobi | 2012-07-21 10:39 | 42K | |
| emsoft11.pdf | 2012-05-15 16:36 | 227K | |
| er-ontarg.pdf | 2022-01-06 13:13 | 295K | |
| er_ontarg.pdf | 2016-02-11 15:12 | 272K | |
| erts06.pdf | 2006-01-06 14:04 | 54K | |
| erts06.ps.gz | 2006-01-06 14:08 | 38K | |
| faaversion.pdf | 2000-02-01 19:43 | 254K | |
| facs11.pdf | 2012-02-16 10:58 | 233K | |
| faisc24.pdf | 2024-12-16 16:45 | 907K | |
| fase04.pdf | 2004-05-06 11:47 | 209K | |
| fase04.ps.gz | 2004-05-06 11:46 | 173K | |
| festschrift-randell11.pdf | 2011-08-16 17:59 | 150K | |
| fm-elsewhere00.pdf | 2001-05-21 15:57 | 113K | |
| fm-elsewhere00.ps.gz | 2001-05-21 15:57 | 36K | |
| fm89.pdf | 2006-06-21 16:58 | 92K | |
| fm89.ps.gz | 2006-06-21 17:00 | 80K | |
| fm99.dvi.Z | 1999-10-13 10:18 | 9.1K | |
| fm99.ps.gz | 1999-11-05 15:07 | 38K | |
| fmis11.pdf | 2011-09-21 05:29 | 200K | |
| forte-pstv2000.ps.gz | 2000-11-22 11:31 | 16K | |
| ftcs93.pdf | 2012-05-15 17:45 | 313K | |
| ftrtft02.pdf | 2002-11-21 10:02 | 192K | |
| ftrtft02.ps.gz | 2002-11-21 10:51 | 56K | |
| gde23.pdf | 2023-07-10 09:54 | 1.5M | |
| gnc08-unexpected.pdf | 2008-08-11 15:07 | 170K | |
| gnc08-verification.pdf | 2008-08-11 15:07 | 200K | |
| hase00.ps.gz | 2000-11-22 11:29 | 12K | |
| hci-aero00.doc | 2000-11-22 13:35 | 123K | |
| hci-aero00.pdf | 2000-11-22 13:36 | 116K | |
| hcss03.pdf | 2003-07-22 09:52 | 65K | |
| hcss03.ps.gz | 2003-07-22 09:53 | 48K | |
| hol91.ps.gz | 2001-05-29 11:11 | 73K | |
| icdcit16.pdf | 2016-01-17 20:27 | 168K | |
| iceccs07.pdf | 2007-07-24 10:59 | 84K | |
| iceccs07.ps.gz | 2007-07-24 10:59 | 66K | |
| icfem05.pdf | 2005-09-20 10:30 | 137K | |
| icfem05.ps.gz | 2005-09-20 10:31 | 105K | |
| ics-ijcar04.pdf | 2004-06-07 08:49 | 122K | |
| ics-ijcar04.ps.gz | 2004-06-07 08:49 | 45K | |
| isp82.pdf | 2004-12-14 16:57 | 849K | |
| isp82.ps.gz | 2005-08-22 17:35 | 870K | |
| isp82.txt | 2004-12-15 09:48 | 45K | |
| isss03.pdf | 2003-10-16 18:26 | 63K | |
| isss03.ps | 2003-10-16 18:26 | 132K | |
| jitc07.pdf | 2007-02-08 11:34 | 97K | |
| jmr-thesis-intro.pdf | 2006-06-22 10:54 | 154K | |
| jmr-thesis-pp151-153.pdf | 2006-06-22 10:54 | 117K | |
| linkfaults.ps.gz | 2001-09-17 09:54 | 74K | |
| logicandrel17.pdf | 2017-06-18 04:02 | 36K | |
| marktoberdorf16.pdf | 2017-12-08 16:16 | 348K | |
| mcmillan.pdf | 2002-07-02 17:39 | 100K | |
| mcmillan.ps.gz | 2002-07-02 17:39 | 48K | |
| mils-constitution.pdf | 2021-01-16 16:21 | 328K | |
| mils-example.pdf | 2021-01-24 16:38 | 730K | |
| modalpvs.pdf | 2022-05-05 14:19 | 188K | |
| modcert.pdf | 2002-07-02 17:59 | 100K | |
| modcert.ps.gz | 2002-07-02 18:01 | 53K | |
| movep2k.dvi.Z | 2000-05-14 19:19 | 31K | |
| movep2k.ps | 2000-05-11 17:08 | 107K | |
| movep2k.ps.gz | 2000-05-14 19:19 | 42K | |
| ncsc-ns85.pdf | 2007-10-27 16:38 | 92K | |
| ncsc84-model.dvi.Z | 1997-12-15 10:48 | 28K | |
| ncsc84-model.pdf | 2007-10-27 17:36 | 122K | |
| ncsc84-model.ps.gz | 1997-12-15 10:48 | 43K | |
| ncsc84-tcb.dvi.Z | 1997-12-15 10:49 | 29K | |
| ncsc84-tcb.pdf | 2007-10-27 17:36 | 122K | |
| ncsc84-tcb.ps.gz | 1997-12-15 10:49 | 43K | |
| needham03.pdf | 2005-06-08 13:35 | 138K | |
| needham03.ps.gz | 2005-06-08 13:34 | 124K | |
| om1.pdf | 2005-06-29 15:47 | 110K | |
| om1.ps.gz | 2005-06-29 15:46 | 77K | |
| ontargbegs17.pdf | 2018-01-01 09:54 | 228K | |
| ontargbegs18.pdf | 2020-09-21 15:51 | 386K | |
| ontargbegsvac20.pdf | 2020-10-01 16:39 | 295K | |
| ontargbegsvac22.pdf | 2022-05-31 16:41 | 315K | |
| ontological.pdf | 2013-09-30 08:36 | 182K | |
| partition.ps.gz | 1999-06-17 11:14 | 200K | |
| pmms-rushby-ehdm85.pdf | 2023-01-30 17:48 | 277K | |
| procieee03.pdf | 2003-04-24 10:08 | 186K | |
| procieee03.ps.gz | 2003-04-24 10:08 | 69K | |
| pvs-interfaces.ps.gz | 2002-08-22 16:32 | 180K | |
| ress00.pdf | 2000-10-29 09:04 | 75K | |
| ress02.pdf | 2011-03-23 11:52 | 154K | |
| ress02.ps.gz | 2002-03-28 09:34 | 49K | |
| roadmap03.pdf | 2004-10-22 15:37 | 221K | |
| roadmap03.ps.gz | 2004-10-22 15:37 | 163K | |
| rushby-randell-sp83.pdf | 2006-06-26 18:22 | 932K | |
| rushby-thesis.pdf | 2022-10-05 11:20 | 18M | |
| rv08.pdf | 2009-04-03 11:47 | 192K | |
| rv08.ps.gz | 2009-04-03 11:48 | 136K | |
| safecomp01.pdf | 2001-10-12 13:40 | 51K | |
| safecomp01.ps.gz | 2001-10-12 13:39 | 18K | |
| safecomp13.pdf | 2013-10-03 15:40 | 91K | |
| safecomp20.pdf | 2020-08-27 16:09 | 188K | |
| sal-cav04.pdf | 2004-08-20 11:47 | 118K | |
| sal-cav04.ps.gz | 2004-08-20 11:47 | 99K | |
| sal-tool.pdf | 2004-03-25 15:31 | 103K | |
| sal-tool.ps.gz | 2004-03-25 15:33 | 85K | |
| salatg.pdf | 2005-02-24 11:03 | 234K | |
| salatg.ps.gz | 2005-02-24 11:03 | 152K | |
| sas14.pdf | 2014-04-30 11:45 | 267K | |
| sassur24.pdf | 2024-09-22 14:06 | 1.4M | |
| sefm04.pdf | 2005-02-24 18:12 | 105K | |
| sefm04.ps.gz | 2005-02-24 18:12 | 67K | |
| sefm06.pdf | 2006-10-17 15:00 | 94K | |
| sefm06.ps.gz | 2006-10-17 14:59 | 61K | |
| sefm09.pdf | 2009-12-09 17:50 | 82K | |
| sefm09.ps.gz | 2009-12-09 17:50 | 64K | |
| sehas03.pdf | 2003-05-05 10:12 | 20K | |
| sehas03.ps.gz | 2003-05-05 10:12 | 12K | |
| sensors.pdf | 2002-07-02 16:15 | 139K | |
| sensors.ps.gz | 2002-07-02 16:16 | 61K | |
| sfsem-sttt.pdf | 2005-10-26 02:36 | 229K | |
| shonan16.pdf | 2020-08-01 15:28 | 293K | |
| sift23.pdf | 2023-07-02 14:31 | 1.0M | |
| skfsp.pdf | 2006-06-16 12:11 | 75K | |
| sosp81.pdf | 2004-05-25 15:32 | 76K | |
| sosp81.ps.gz | 2004-05-25 15:19 | 71K | |
| sreis01.pdf | 2001-08-03 17:54 | 53K | |
| sreis01.ps.gz | 2001-08-03 17:54 | 21K | |
| sri-csl-15-1-assurance-cases.pdf | 2015-11-10 17:15 | 1.2M | |
| ssm9.txt | 2022-10-02 13:18 | 210K | |
| sss10.pdf | 2010-02-11 01:01 | 155K | |
| sss86.pdf | 2004-05-25 15:40 | 49K | |
| sss86.ps.gz | 2004-05-25 15:41 | 25K | |
| startup-verification.pdf | 2004-01-25 13:27 | 166K | |
| startup-verification.ps.gz | 2004-01-25 13:28 | 140K | |
| startup03.pdf | 2025-04-30 12:35 | 236K | |
| steiner-etal-dsn04.pdf | 2005-06-30 14:33 | 218K | |
| sttt07.pdf | 2007-10-30 09:32 | 230K | |
| tahoe01.pdf | 2001-07-31 18:16 | 87K | |
| techconscwks2017-update.pdf | 2022-08-27 12:31 | 532K | |
| techconscwks2017.pdf | 2019-03-20 14:05 | 504K | |
| testgen.pdf | 2004-07-12 11:11 | 155K | |
| testgen.ps.gz | 2004-07-12 11:11 | 106K | |
| tocais19.pdf | 2019-04-05 14:37 | 670K | |
| tr166.pdf | 2022-10-07 14:29 | 53M | |
| tr182.pdf | 2023-09-15 15:13 | 7.1M | |
| tse93.pdf | 2010-10-14 16:00 | 297K | |
| tse93.ps.gz | 2010-10-14 16:00 | 283K | |
| tse95.ps.gz | 2002-01-23 21:08 | 137K | |
| tse99.pdf | 2010-10-19 10:33 | 325K | |
| tse99.ps.gz | 2010-10-19 10:33 | 319K | |
| vsi07.pdf | 2007-07-24 11:41 | 62K | |
| vsi07.ps.gz | 2007-07-24 11:41 | 49K | |
| vstte05-jmr.ps.gz | 2005-10-27 14:47 | 102K | |
| vstte05.ps.gz | 2005-10-27 14:46 | 107K | |
| vstte07.pdf | 2007-07-26 13:17 | 152K | |
| vstte07.ps.gz | 2007-07-26 13:32 | 111K | |
| windowtiming.pdf | 2002-06-06 10:49 | 90K | |
| windowtiming.ps | 2002-06-06 10:47 | 236K | |
| windowtiming.ps.gz | 2002-07-02 17:43 | 58K | |
| wosd17.pdf | 2017-11-01 17:20 | 65K | |
| wsss99.pdf | 2004-08-19 17:02 | 167K | |
If your browser cannot deal with this format, append the complete name of the file (e.g., spin99.ps.gz) onto one of the fields below.