{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,11]],"date-time":"2026-04-11T04:21:21Z","timestamp":1775881281285,"version":"3.50.1"},"reference-count":31,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2019,4,1]],"date-time":"2019-04-01T00:00:00Z","timestamp":1554076800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2019,4,1]],"date-time":"2019-04-01T00:00:00Z","timestamp":1554076800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2023,4,15]],"date-time":"2023-04-15T00:00:00Z","timestamp":1681516800000},"content-version":"vor","delay-in-days":1475,"URL":"http:\/\/www.elsevier.com\/open-access\/userlicense\/1.0\/"},{"start":{"date-parts":[[2019,4,1]],"date-time":"2019-04-01T00:00:00Z","timestamp":1554076800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2019,4,1]],"date-time":"2019-04-01T00:00:00Z","timestamp":1554076800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2019,4,1]],"date-time":"2019-04-01T00:00:00Z","timestamp":1554076800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2019,4,1]],"date-time":"2019-04-01T00:00:00Z","timestamp":1554076800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,4,1]],"date-time":"2019-04-01T00:00:00Z","timestamp":1554076800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100000266","name":"EPSRC","doi-asserted-by":"publisher","award":["EP\/G059063\/1"],"award-info":[{"award-number":["EP\/G059063\/1"]}],"id":[{"id":"10.13039\/501100000266","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000266","name":"EPSRC","doi-asserted-by":"publisher","award":["EP\/J008133\/1"],"award-info":[{"award-number":["EP\/J008133\/1"]}],"id":[{"id":"10.13039\/501100000266","id-type":"DOI","asserted-by":"publisher"}]},{"name":"NORTE 2020","award":["NORTE-01-0145-FEDER-000016"],"award-info":[{"award-number":["NORTE-01-0145-FEDER-000016"]}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Science of Computer Programming"],"published-print":{"date-parts":[[2019,4]]},"DOI":"10.1016\/j.scico.2019.02.003","type":"journal-article","created":{"date-parts":[[2019,2,12]],"date-time":"2019-02-12T12:31:27Z","timestamp":1549974687000},"page":"17-34","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":21,"special_numbering":"C","title":["Formal techniques in the safety analysis of software components of a new dialysis machine"],"prefix":"10.1016","volume":"175","author":[{"given":"Michael D.","family":"Harrison","sequence":"first","affiliation":[]},{"given":"Leo","family":"Freitas","sequence":"additional","affiliation":[]},{"given":"Michael","family":"Drinnan","sequence":"additional","affiliation":[]},{"given":"Jos\u00e9 C.","family":"Campos","sequence":"additional","affiliation":[]},{"given":"Paolo","family":"Masci","sequence":"additional","affiliation":[]},{"given":"Costanzo","family":"di Maria","sequence":"additional","affiliation":[]},{"given":"Michael","family":"Whitaker","sequence":"additional","affiliation":[]}],"member":"78","reference":[{"key":"10.1016\/j.scico.2019.02.003_br0010","series-title":"Medical device software \u2013 software life cycle processes","author":"BSI","year":"2008"},{"key":"10.1016\/j.scico.2019.02.003_br0020","series-title":"General principles of software validation: Final guidance for industry and FDA staff","author":"US Food and Drug Administration","year":"2002"},{"issue":"10","key":"10.1016\/j.scico.2019.02.003_br0030","doi-asserted-by":"crossref","first-page":"1873","DOI":"10.1007\/s00467-014-2923-3","article-title":"Haemodialysing babies weighing <8 kg with the newcastle infant dialysis and ultrafiltration system (NIDUS): comparison with peritoneal and conventional haemodialysis","volume":"29","author":"Coulthard","year":"2014","journal-title":"Pediatric Nephrology"},{"key":"10.1016\/j.scico.2019.02.003_br0040","series-title":"Interactive systems: Design, Specification and Verification, DSVIS'08","first-page":"72","article-title":"Systematic analysis of control panel interfaces using formal tools","volume":"vol. 5136","author":"Campos","year":"2008"},{"key":"10.1016\/j.scico.2019.02.003_br0050","series-title":"Computer-Aided Verification (CAV '02)","first-page":"359","article-title":"NuSMV 2: An Open Source Tool for Symbolic Model Checking","volume":"vol. 2404","author":"Cimatti","year":"2002"},{"key":"10.1016\/j.scico.2019.02.003_br0060","series-title":"Model Checking","author":"Clarke","year":"1999"},{"issue":"1","key":"10.1016\/j.scico.2019.02.003_br0070","doi-asserted-by":"crossref","first-page":"265","DOI":"10.4271\/2008-01-0664","article-title":"An introduction to MISRA C++","volume":"1","author":"Tapp","year":"2009","journal-title":"SAE Int. J. Passeng. Cars \u2013 Electron. Electr. Syst."},{"key":"10.1016\/j.scico.2019.02.003_br0080","first-page":"155","article-title":"Escher Verification Studio Perfect Developer and Escher C Verifier","author":"Carlton","year":"2012","journal-title":"J. Wiley and Sons"},{"key":"10.1016\/j.scico.2019.02.003_br0090","series-title":"Theoretical Aspects of Computer Software","first-page":"569","article-title":"Sharing actions and attributes in modal action logic","volume":"vol. 526","author":"Ryan","year":"1991"},{"key":"10.1016\/j.scico.2019.02.003_br0100","series-title":"User-centred requirements for software engineering","first-page":"185","article-title":"Why industry doesn't use the wonderful notations we researchers have given them to reason about their designs","author":"Monk","year":"1991"},{"key":"10.1016\/j.scico.2019.02.003_br0110","series-title":"Computer Aided Verification","first-page":"526","article-title":"SCR: A toolset for specifying and analyzing software requirements","author":"Heitmeyer","year":"1998"},{"key":"10.1016\/j.scico.2019.02.003_br0120","series-title":"Proceedings ACM Symposium Engineering Interactive Systems (EICS 2013)","first-page":"81","article-title":"Verification of interactive software for medical devices: PCA infusion pumps and FDA regulation as an example","author":"Masci","year":"2013"},{"key":"10.1016\/j.scico.2019.02.003_br0130","series-title":"2nd Workshop on Formal Methods in Software Practice","first-page":"7","article-title":"Property Specification Patterns for Finite-State Verification","author":"Dwyer","year":"1998"},{"issue":"9","key":"10.1016\/j.scico.2019.02.003_br0140","doi-asserted-by":"crossref","first-page":"753","DOI":"10.1093\/comjnl\/37.9.753","article-title":"From english to formal specifications","volume":"37","author":"Vadera","year":"1994","journal-title":"The Computer Journal"},{"key":"10.1016\/j.scico.2019.02.003_br0150","series-title":"ACM Proceedings High Integrity Language Technology","article-title":"Can C++ be made as safe as SPARK?","author":"Crocker","year":"2014"},{"key":"10.1016\/j.scico.2019.02.003_br0160","series-title":"Perfect developer reference manual v6.10","author":"Crocker","year":"2013"},{"key":"10.1016\/j.scico.2019.02.003_br0170","series-title":"Translation strategies for medical device control software","author":"Freitas","year":"2015"},{"key":"10.1016\/j.scico.2019.02.003_br0180","article-title":"Isabelle\/HOL: a proof assistant for Higher-Order Logic","volume":"vol. 2283","author":"Nipkow","year":"2002"},{"issue":"1","key":"10.1016\/j.scico.2019.02.003_br0190","doi-asserted-by":"crossref","first-page":"24","DOI":"10.1109\/32.210305","article-title":"State-based model checking of event-driven system requirements","volume":"19","author":"Atlee","year":"1993","journal-title":"IEEE Transactions on Software Engineering"},{"issue":"1","key":"10.1016\/j.scico.2019.02.003_br0200","doi-asserted-by":"crossref","first-page":"2","DOI":"10.1145\/2560537","article-title":"Comprehensive formal verification of an OS microkernel","volume":"32","author":"Klein","year":"2014","journal-title":"ACM Trans. Comput. Syst."},{"key":"10.1016\/j.scico.2019.02.003_br0210","series-title":"IEEE International Symposium on Secure Software Engineering","article-title":"Engineering the tokeneer enclave protection software","author":"Barnes","year":"2006"},{"key":"10.1016\/j.scico.2019.02.003_br0220","series-title":"Proceedings of the ninth ACM international conference on Embedded software, EMSOFT '11","first-page":"155","article-title":"Safety-assured development of the GPCA infusion pump software","author":"Kim","year":"2011"},{"key":"10.1016\/j.scico.2019.02.003_br0230","series-title":"Formal Aspects of Component Software","first-page":"260","article-title":"Architecture-based design: A satellite on-board software case study","author":"Mavridou","year":"2017"},{"key":"10.1016\/j.scico.2019.02.003_br0240","series-title":"Modeling in Event-B: System and Software Engineering","author":"Abrial","year":"2010"},{"key":"10.1016\/j.scico.2019.02.003_br0250","series-title":"Abstract State Machines, Alloy, B, TLA, VDM, and Z","first-page":"376","article-title":"Hemodialysis machine in hybrid Event-B","author":"Banach","year":"2016"},{"key":"10.1016\/j.scico.2019.02.003_br0260","series-title":"FME 2003: Formal Methods","first-page":"40","article-title":"Trends in software verification","volume":"vol. 2805","author":"Holzmann","year":"2003"},{"key":"10.1016\/j.scico.2019.02.003_br0270","series-title":"Proc. 3rd IEEE International High Assurance Systems Engineering Symposium","first-page":"13","article-title":"Formal specification in collaborative design of critical software tools","author":"Coppit","year":"1998"},{"issue":"1","key":"10.1016\/j.scico.2019.02.003_br0280","doi-asserted-by":"crossref","first-page":"43","DOI":"10.1177\/1063293X17737357","article-title":"Enhancing integrated design model\u2013based process and engineering tool environment: Towards an integration of functional analysis, operational analysis and knowledge capitalisation into co-engineering practices","volume":"26","author":"Garcia","year":"2018","journal-title":"Concurrent Engineering"},{"issue":"4","key":"10.1016\/j.scico.2019.02.003_br0290","doi-asserted-by":"crossref","first-page":"726","DOI":"10.1017\/S0960129512000242","article-title":"A formal approach to collaborative modelling and co-simulation for embedded systems","volume":"23","author":"Fitzgerald","year":"2013","journal-title":"Mathematical Structures in Computer Science"},{"issue":"6","key":"10.1016\/j.scico.2019.02.003_br0300","doi-asserted-by":"crossref","first-page":"834","DOI":"10.1109\/THMS.2017.2717910","article-title":"Verification of user interface software: the example of use-related safety requirements and programmable medical devices","volume":"47","author":"Harrison","year":"2017","journal-title":"IEEE Transactions on Human Machine Systems"},{"key":"10.1016\/j.scico.2019.02.003_br0310","article-title":"Structuring functional requirements of control systems to facilitate refinement-based formalisation","volume":"vol. 46","author":"Yeganefard","year":"2011"}],"container-title":["Science of Computer Programming"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0167642318300819?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0167642318300819?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,9,28]],"date-time":"2025-09-28T22:46:52Z","timestamp":1759099612000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0167642318300819"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,4]]},"references-count":31,"alternative-id":["S0167642318300819"],"URL":"https:\/\/doi.org\/10.1016\/j.scico.2019.02.003","relation":{},"ISSN":["0167-6423"],"issn-type":[{"value":"0167-6423","type":"print"}],"subject":[],"published":{"date-parts":[[2019,4]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Formal techniques in the safety analysis of software components of a new dialysis machine","name":"articletitle","label":"Article Title"},{"value":"Science of Computer Programming","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.scico.2019.02.003","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2019 Elsevier B.V.","name":"copyright","label":"Copyright"}]}}