{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T02:08:45Z","timestamp":1777428525924,"version":"3.51.4"},"reference-count":43,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2015,6,1]],"date-time":"2015-06-01T00:00:00Z","timestamp":1433116800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2014,12,18]],"date-time":"2014-12-18T00:00:00Z","timestamp":1418860800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Science of Computer Programming"],"published-print":{"date-parts":[[2015,6]]},"DOI":"10.1016\/j.scico.2014.11.004","type":"journal-article","created":{"date-parts":[[2014,11,29]],"date-time":"2014-11-29T08:50:42Z","timestamp":1417251042000},"page":"88-113","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":16,"special_numbering":"C","title":["Formal model-driven engineering of critical information systems"],"prefix":"10.1016","volume":"103","author":[{"given":"Jim","family":"Davies","sequence":"first","affiliation":[]},{"given":"David","family":"Milward","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4046-5585","authenticated-orcid":false,"given":"Chen-Wei","family":"Wang","sequence":"additional","affiliation":[]},{"given":"James","family":"Welch","sequence":"additional","affiliation":[]}],"member":"78","reference":[{"key":"10.1016\/j.scico.2014.11.004_br0010","article-title":"Knight capital glitch loss hits $461m","author":"Massoudi","year":"2012","journal-title":"Financial Times"},{"key":"10.1016\/j.scico.2014.11.004_br0020","article-title":"Toyota to recall Prius hybrids over ABS software","author":"Williams","year":"2010","journal-title":"Computerworld"},{"key":"10.1016\/j.scico.2014.11.004_br0030","unstructured":"Australian Transport Safety Bureau, In-flight upset 154 km west of Learmouth, WA, VH-QPA, Airbus A330-303, December 2011."},{"key":"10.1016\/j.scico.2014.11.004_br0040","series-title":"Mars climate orbiter Mishap investigation board phase I report","author":"NASA","year":"1999"},{"key":"10.1016\/j.scico.2014.11.004_br0050","series-title":"Using Z: Specification, Refinement, and Proof","author":"Woodcock","year":"1996"},{"key":"10.1016\/j.scico.2014.11.004_br0060","series-title":"Proceedings First International Workshop on Formal Techniques for Safety-Critical Systems","first-page":"100","article-title":"Formal model-driven engineering: generating data and behavioural components","volume":"vol. 105","author":"Wang","year":"2012"},{"issue":"Part B","key":"10.1016\/j.scico.2014.11.004_br0070","doi-asserted-by":"crossref","first-page":"88","DOI":"10.1016\/j.scico.2013.02.002","article-title":"Model-driven engineering of information systems: 10 years and 1000 versions","volume":"89","author":"Davies","year":"2014","journal-title":"Sci. Comput. Program."},{"key":"10.1016\/j.scico.2014.11.004_br0080","doi-asserted-by":"crossref","first-page":"39","DOI":"10.1016\/j.entcs.2005.03.004","article-title":"Formality, evolution, and model-driven software engineering","volume":"130","author":"Davies","year":"2005","journal-title":"Electron. Notes Theor. Comput. Sci."},{"key":"10.1016\/j.scico.2014.11.004_br0090","doi-asserted-by":"crossref","first-page":"151","DOI":"10.1016\/j.entcs.2007.08.031","article-title":"Domain-specific semantics and data refinement of object models","volume":"195","author":"Davies","year":"2008","journal-title":"Electron. Notes Theor. Comput. Sci."},{"key":"10.1016\/j.scico.2014.11.004_br0100","series-title":"UML Distilled: A Brief Guide to the Standard Object Modeling Language","author":"Fowler","year":"2003"},{"key":"10.1016\/j.scico.2014.11.004_br0110","series-title":"The Object Constraint Language: Getting Your Models Ready for MDA","author":"Warmer","year":"2003"},{"key":"10.1016\/j.scico.2014.11.004_br0120","author":"Object Management Group"},{"key":"10.1016\/j.scico.2014.11.004_br0130","series-title":"The B-book: Assigning Programs to Meanings","author":"Abrial","year":"1996"},{"key":"10.1016\/j.scico.2014.11.004_br0140","series-title":"UML-B: formal modelling and design aided by UML","author":"Snook","year":"2004"},{"key":"10.1016\/j.scico.2014.11.004_br0150","series-title":"The Object-Z Specification Language","author":"Smith","year":"2000"},{"key":"10.1016\/j.scico.2014.11.004_br0160","series-title":"MDA Explained: The Model Driven Architecture: Practice and Promise","author":"Kleppe","year":"2003"},{"issue":"8","key":"10.1016\/j.scico.2014.11.004_br0170","doi-asserted-by":"crossref","first-page":"453","DOI":"10.1145\/360933.360975","article-title":"Guarded commands, nondeterminacy and formal derivation of programs","volume":"18","author":"Dijkstra","year":"1975","journal-title":"Commun. ACM"},{"issue":"4","key":"10.1016\/j.scico.2014.11.004_br0180","doi-asserted-by":"crossref","first-page":"517","DOI":"10.1145\/69558.69559","article-title":"A generalization of Dijkstra's calculus","volume":"11","author":"Nelson","year":"1989","journal-title":"ACM Trans. Program. Lang. Syst."},{"key":"10.1016\/j.scico.2014.11.004_br0190","series-title":"Java Persistence with Hibernate","author":"Bauer","year":"2006"},{"key":"10.1016\/j.scico.2014.11.004_br0200","series-title":"Model Driven Architecture: Applying MDA to Enterprise Computing","author":"Frankel","year":"2003"},{"key":"10.1016\/j.scico.2014.11.004_br0210","series-title":"Refactoring: Improving the Design of Existing Code","author":"Fowler","year":"1999"},{"key":"10.1016\/j.scico.2014.11.004_br0220","author":"The Eclipse Foundation"},{"key":"10.1016\/j.scico.2014.11.004_br0230","series-title":"Domain-Specific Program Generation","first-page":"216","article-title":"Program transformation with Stratego\/XT","volume":"vol. 3016","author":"Visser","year":"2004"},{"issue":"10","key":"10.1016\/j.scico.2014.11.004_br0240","doi-asserted-by":"crossref","first-page":"444","DOI":"10.1145\/1932682.1869497","article-title":"The Spoofax language workbench: rules for declarative specification of languages and IDEs","volume":"45","author":"Kats","year":"2010","journal-title":"SIGPLAN Not."},{"key":"10.1016\/j.scico.2014.11.004_br0250","series-title":"Formal Methods: Foundations and Applications \u2013 15th Brazilian Symposium, SBMF 2012, Proceedings","first-page":"99","article-title":"Compositionality and refinement in model-driven engineering","volume":"vol. 7498","author":"Davies","year":"2012"},{"issue":"1\u20132","key":"10.1016\/j.scico.2014.11.004_br0260","doi-asserted-by":"crossref","first-page":"65","DOI":"10.1007\/s00165-007-0066-z","article-title":"Relational concurrent refinement part II: internal operations and outputs","volume":"21","author":"Boiten","year":"2009","journal-title":"Form. Asp. Comput."},{"issue":"2","key":"10.1016\/j.scico.2014.11.004_br0270","doi-asserted-by":"crossref","first-page":"181","DOI":"10.1007\/s00165-005-0081-x","article-title":"A singleton failures semantics for communicating sequential processes","volume":"18","author":"Bolton","year":"2006","journal-title":"Form. Asp. Comput."},{"key":"10.1016\/j.scico.2014.11.004_br0280","series-title":"Proceedings of the 22nd International Conference on Software Engineering","first-page":"547","article-title":"Safety critical systems: challenges and directions","author":"Knight","year":"2002"},{"issue":"6","key":"10.1016\/j.scico.2014.11.004_br0290","doi-asserted-by":"crossref","first-page":"1017","DOI":"10.1016\/j.infsof.2012.12.007","article-title":"Translation of Z specifications to executable code: application to the database domain","volume":"55","author":"Khalafinejad","year":"2013","journal-title":"Inf. Softw. Technol."},{"key":"10.1016\/j.scico.2014.11.004_br0300","series-title":"The Object-Z Specification Language","author":"Smith","year":"2000"},{"key":"10.1016\/j.scico.2014.11.004_br0310","series-title":"Refinement in Z and Object-Z: Foundations and Advanced Applications","author":"Derrick","year":"2001"},{"key":"10.1016\/j.scico.2014.11.004_br0320","series-title":"Proceedings of FM 2006","first-page":"205","article-title":"Compositional class refinement in Object-Z","author":"McComb","year":"2006"},{"issue":"3","key":"10.1016\/j.scico.2014.11.004_br0330","doi-asserted-by":"crossref","first-page":"289","DOI":"10.1007\/BF01211075","article-title":"A fully abstract semantics of classes for Object-Z","volume":"7","author":"Smith","year":"1995","journal-title":"Form. Asp. Comput."},{"issue":"3","key":"10.1016\/j.scico.2014.11.004_br0340","doi-asserted-by":"crossref","first-page":"277","DOI":"10.1007\/s10270-005-0085-2","article-title":"Unifying classes and processes","volume":"4","author":"Cavalcanti","year":"2005","journal-title":"Softw. Syst. Model."},{"key":"10.1016\/j.scico.2014.11.004_br0350","series-title":"Proceedings of ZUM '98","first-page":"5","article-title":"How to combine Z with a process algebra","volume":"vol. 1493","author":"Fischer","year":"1998"},{"key":"10.1016\/j.scico.2014.11.004_br0360","series-title":"Proceedings of the 20th International Conference on Software Engineering","first-page":"95","article-title":"Blending Object-Z and timed CSP: an introduction to TCOZ","author":"Mahony","year":"1998"},{"key":"10.1016\/j.scico.2014.11.004_br0370","series-title":"Structured Programming","first-page":"367","article-title":"Trace refinement of action systems","author":"Back","year":"1994"},{"key":"10.1016\/j.scico.2014.11.004_br0380","unstructured":"OMG, Meta Object Facility (MOF) 2.0 Query\/View\/Transformation Specification, OMG document formal\/2011-01-01, Object Management Group, 2011."},{"issue":"1\u20132","key":"10.1016\/j.scico.2014.11.004_br0390","doi-asserted-by":"crossref","first-page":"31","DOI":"10.1016\/j.scico.2007.08.002","article-title":"ATL: a model transformation tool","volume":"72","author":"Jouault","year":"2008","journal-title":"Sci. Comput. Program."},{"issue":"3","key":"10.1016\/j.scico.2014.11.004_br0400","doi-asserted-by":"crossref","first-page":"621","DOI":"10.1147\/sj.453.0621","article-title":"Feature-based survey of model transformation approaches","volume":"45","author":"Czarnecki","year":"2006","journal-title":"IBM Syst. J."},{"key":"10.1016\/j.scico.2014.11.004_br0410","series-title":"MoDELS","first-page":"533","article-title":"Formal verification of QVT transformations for code generation","author":"Stenzel","year":"2011"},{"issue":"3","key":"10.1016\/j.scico.2014.11.004_br0420","doi-asserted-by":"crossref","first-page":"385","DOI":"10.1007\/s10270-008-0098-8","article-title":"A systematic approach to generate B preconditions: application to the database domain","volume":"8","author":"Mammar","year":"2009","journal-title":"Softw. Syst. Model."},{"key":"10.1016\/j.scico.2014.11.004_br0430","doi-asserted-by":"crossref","first-page":"125","DOI":"10.1016\/j.entcs.2005.10.021","article-title":"A taxonomy of model transformation","volume":"152","author":"Mens","year":"2006","journal-title":"Electron. Notes Theor. Comput. Sci."}],"container-title":["Science of Computer Programming"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S016764231400536X?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S016764231400536X?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2018,9,27]],"date-time":"2018-09-27T06:23:52Z","timestamp":1538029432000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S016764231400536X"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,6]]},"references-count":43,"alternative-id":["S016764231400536X"],"URL":"https:\/\/doi.org\/10.1016\/j.scico.2014.11.004","relation":{},"ISSN":["0167-6423"],"issn-type":[{"value":"0167-6423","type":"print"}],"subject":[],"published":{"date-parts":[[2015,6]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Formal model-driven engineering of critical information systems","name":"articletitle","label":"Article Title"},{"value":"Science of Computer Programming","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.scico.2014.11.004","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"Copyright \u00a9 2014 The Authors. Published by Elsevier B.V.","name":"copyright","label":"Copyright"}]}}