The RAISE specification language
The RAISE specification language
Using Z: specification, refinement, and proof
Using Z: specification, refinement, and proof
The algorithm design manual
Model checking
Towards an Integrated Model Checker for Railway Signalling Data
FME '02 Proceedings of the International Symposium of Formal Methods Europe on Formal Methods - Getting IT Right
Model Checking RAISE Applicative Specifications
SEFM '07 Proceedings of the Fifth IEEE International Conference on Software Engineering and Formal Methods
Modelling Systems: Practical Tools and Techniques in Software Development
Modelling Systems: Practical Tools and Techniques in Software Development
Deriving specifications for systems that are connected to the physical world
Formal methods and hybrid real-time systems
A formal approach for the construction and verification of railway control systems
Formal Aspects of Computing
Towards a framework for modelling and verification of relay interlocking systems
FOCS'10 Proceedings of the 16th Monterey conference on Foundations of computer software: modeling, development, and verification of adaptive systems
Modelling and verification of relay interlocking systems
Monterey'08 Proceedings of the 15th Monterey conference on Foundations of Computer Software: future Trends and Techniques for Development
Automated generation of safety requirements from railway interlocking tables
ISoLA'12 Proceedings of the 5th international conference on Leveraging Applications of Formal Methods, Verification and Validation: applications and case studies - Volume Part II
| Hi-index | 0.00 |
This paper describes a tool for formal modelling relay interlocking systems and explains how it has been stepwise, formally developed using the RAISE method. The developed tool takes the circuit diagrams of a relay interlocking system as input and gives as result a state transition system modelling the dynamic behaviour of the interlocking system, i.e. the dynamic behaviour of the circuits depicted in the diagrams. The resulting state transition system (model) is expressed in the SAL language such that the SAL model checker can be used to model check required properties of this model of the interlocking system. The tool has been applied to the circuit diagrams of Stenstrup station in Denmark and the resulting formal model has then been model checked to satisfy a number of required safety properties.