Systematic hierarchical analysis of requirements for critical systems.

Michael J. Butler University of Southampton, UK http://www.ecs.soton.ac.uk/people/mjb https://scholar.google.com/citations?user=c0BzzQwAAAAJ https://dl.acm.org/profile/81100548106 https://zbmath.org/authors/?q=ai:butler.michael-j https://en.wikipedia.org/wiki/Michael_Butler_(computer_scientist) https://orcid.org/0000-0003-4642-5373 https://www.wikidata.org/entity/Q6828969 https://d-nb.info/gnd/131558889 https://id.loc.gov/authorities/names/n2001010042

Asieh Salehi Fathabadi Colin F. Snook Dana Dghaym Thai Son Hoang Fahad Alotaibi Michael J. Butler Systematic hierarchical analysis of requirements for critical systems. 569-593 2025 June 21 Innov. Syst. Softw. Eng. 2 https://doi.org/10.1007/s11334-024-00551-8 db/journals/isse/isse21.html#FathabadiSDHAB25 streams/journals/isse

Colin F. Snook Asieh Salehi Fathabadi Thai Son Hoang Robert Thorburn Michael J. Butler Leonardo Aniello Vladimiro Sassone Developing Safe Exception Recovery Mechanisms for CHERI Capability Hardware Using UML-B Formal Analysis. 180-199 2025 ABZ https://doi.org/10.1007/978-3-031-94533-5_11 conf/zum/2025 db/conf/zum/abz2025.html#SnookFHTBAS25 streams/conf/zum Thai Son Hoang Colin F. Snook Karla Vanessa Morris Wright Laurent Voisin Michael J. Butler Semantics Formalisation - Modelling and Proving Strategies Using Event-B Versus Theories. 346-374 2024 The Application of Formal Methods https://doi.org/10.1007/978-3-031-67114-2_14 conf/birthday/2024woodcock db/conf/birthday/woodcock2024.html#HoangSWVB24 Haider Al-Shareefy Michael J. Butler Thai Son Hoang CuneiForm Method for Assuring the Safety of ML-Based Computer Vision Development Datasets. 214-221 2024 RE Workshops https://doi.org/10.1109/REW61692.2024.00034 conf/re/2024w db/conf/re/re2024w.html#AlShareefyBH24 streams/conf/re Fahad Alotaibi Thai Son Hoang Asieh Salehi Fathabadi Michael J. Butler Event-B Development of Modelling Human Intervention Request in Self-driving Vehicle Systems. 43-60 2024 ABZ https://doi.org/10.1007/978-3-031-63790-2_3 conf/zum/2024 db/conf/zum/abz2024.html#AlotaibiHFB24 Mehmet Said Nur Yagmahan Abdolbaghi Rezazadeh Michael J. Butler An Event-B Formal Model for Access Control and Resource Management of Serverless Apps. 181-190 2024 ABZ https://doi.org/10.1007/978-3-031-63790-2_11 conf/zum/2024 db/conf/zum/abz2024.html#YagmahanRB24 Thai Son Hoang Laurent Voisin Karla Vanessa Morris Wright Colin F. Snook Michael J. Butler Semantics Formalisation - From Event-B Contexts to Theories. 208-214 2024 ABZ https://doi.org/10.1007/978-3-031-63790-2_14 conf/zum/2024 db/conf/zum/abz2024.html#HoangVWSB24 Asieh Salehi Fathabadi Colin F. Snook Thai Son Hoang Robert Thorburn Michael J. Butler Leonardo Aniello Vladimiro Sassone Designing Exception Handling Using Event-B. 270-277 2024 ABZ https://doi.org/10.1007/978-3-031-63790-2_22 conf/zum/2024 db/conf/zum/abz2024.html#FathabadiSHTBAS24 Colin F. Snook Thai Son Hoang Asieh Salehi Fathabadi Michael J. Butler Martin Kubisch Analysing the Safety Implications of Security Risks in Cyber-Physical Systems. 97-119 2024 The Practice of Formal Methods (II) https://doi.org/10.1007/978-3-031-66673-5_6 series/lncs/14781 db/series/lncs/lncs14781.html#SnookHFBK24

Haider Al-Shareefy Michael J. Butler Thai Son Hoang An AIC-based approach for articulating unpredictable problems in open complex environments. 2024 abs/2403.14697 CoRR https://doi.org/10.48550/arXiv.2403.14697 db/journals/corr/corr2403.html#abs-2403-14697

Chenyang Zhu 0001 Michael J. Butler Corina Cîrstea Thai Son Hoang A fairness-based refinement strategy to transform liveness properties in Event-B models. 102907 2023 225 Sci. Comput. Program. https://doi.org/10.1016/j.scico.2022.102907 db/journals/scp/scp225.html#ZhuBCH23

Fahad Alotaibi Thai Son Hoang Michael J. Butler A Rigorous Iterative Analysis Approach for Capturing the Safety Requirements of Self-Driving Vehicle Systems. 1697-1702 2023 COMPSAC https://doi.org/10.1109/COMPSAC57700.2023.00262 conf/compsac/2023 db/conf/compsac/compsac2023.html#AlotaibiHB23 Haider Al-Shareefy Michael J. Butler Thai Son Hoang AIC Approach for Intelligent Systems Requirements Elicitation. 570-579 2023 ICSRS https://doi.org/10.1109/ICSRS59833.2023.10381076 conf/icsrs/2023 db/conf/icsrs/icsrs2023.html#AlShareefyBH23 Karla Vanessa Morris Wright Thai Son Hoang Colin F. Snook Michael J. Butler Formal Language Semantics for Triggered Enable Statecharts with a Run-to-Completion Scheduling. 178-195 2023 ICTAC https://doi.org/10.1007/978-3-031-47963-2_12 conf/ictac/2023 db/conf/ictac/ictac2023.html#WrightHSB23 Michael Akintunde Victoria Young Vahid Yazdanpanah Asieh Salehi Fathabadi Pauline Leonard Michael J. Butler Luc Moreau 0001 Verifiably Safe and Trusted Human-AI Systems: A Socio-technical Perspective. 56:1-56:6 2023 TAS https://doi.org/10.1145/3597512.3599719 https://www.wikidata.org/entity/Q130876418 conf/tas/2023 db/conf/tas/tas2023.html#AkintundeYYFLB023 Asieh Salehi Fathabadi Colin F. Snook Dana Dghaym Thai Son Hoang Fahad Alotaibi Michael J. Butler Designing Critical Systems Using Hierarchical STPA and Event-B. 220-237 2023 ABZ https://doi.org/10.1007/978-3-031-33163-3_17 conf/zum/2023 db/conf/zum/abz2023.html#FathabadiSDHAB23

Karla Morris Colin F. Snook Thai Son Hoang Geoffrey C. Hulette Robert C. Armstrong Michael J. Butler Formal verification and validation of run-to-completion style state charts using Event-B. 523-541 2022 18 Innov. Syst. Softw. Eng. 4 https://doi.org/10.1007/s11334-021-00416-4 db/journals/isse/isse18.html#MorrisSHHAB22

Fahad Alotaibi Thai Son Hoang Michael J. Butler High-Level Rigorous Template for Analysing Safety Properties of Self-driving Vehicle Systems. 1643-1648 2022 COMPSAC https://doi.org/10.1109/COMPSAC54236.2022.00261 conf/compsac/2022 db/conf/compsac/compsac2022.html#AlotaibiHB22 Asieh Salehi Fathabadi Dana Dghaym Thai Son Hoang Michael J. Butler Colin F. Snook Generating SPARK from Event-B, Providing Fundamental Safety and Security. 179-192 2022 MEDI Workshops https://doi.org/10.1007/978-3-031-23119-3_13 conf/medi/2022w db/conf/medi/medi2022w.html#FathabadiDHBS22 Robert Thorburn Vladimiro Sassone Asieh Salehi Fathabadi Leonardo Aniello Michael J. Butler Dana Dghaym Thai Son Hoang A lightweight approach to the concurrent use and integration of SysML and formal methods in systems design. 83-84 2022 MoDELS (Companion) https://doi.org/10.1145/3550356.3559577 conf/models/2022c db/conf/models/models2022c.html#ThorburnSFABDH22 Thai Son Hoang Colin F. Snook Dana Dghaym Asieh Salehi Fathabadi Michael J. Butler Building an Extensible Textual Framework for the Rodin Platform. 132-147 2022 SEFM Workshops https://doi.org/10.1007/978-3-031-26236-4_11 conf/sefm/2022w db/conf/sefm/sefm2022w.html#HoangSDFB22 Colin F. Snook Michael J. Butler Thai Son Hoang Asieh Salehi Fathabadi Dana Dghaym Developing the UML-B Modelling Tools. 181-188 2022 SEFM Workshops https://doi.org/10.1007/978-3-031-26236-4_16 conf/sefm/2022w db/conf/sefm/sefm2022w.html#SnookBHFD22

Colin F. Snook Thai Son Hoang Dana Dghaym Asieh Salehi Fathabadi Michael J. Butler Domain-specific scenarios for refinement-based methods. 101833 2021 112 J. Syst. Archit. https://doi.org/10.1016/j.sysarc.2020.101833 db/journals/jsa/jsa112.html#SnookHDFB21

Dana Dghaym Thai Son Hoang Michael J. Butler Runshan Hu Leonardo Aniello Vladimiro Sassone Verifying System-Level Security of a Smart Ballot Box. 34-49 2021 ABZ https://doi.org/10.1007/978-3-030-77543-8_3 conf/asm/2021 db/conf/asm/abz2021.html#DghaymHBHAS21 Thai Son Hoang Colin F. Snook Dana Dghaym Asieh Salehi Fathabadi Michael J. Butler The CamilleX Framework for the Rodin Platform. 124-129 2021 ABZ https://doi.org/10.1007/978-3-030-77543-8_11 conf/asm/2021 db/conf/asm/abz2021.html#HoangSDFB21 Asieh Salehi Fathabadi Colin F. Snook Thai Son Hoang Dana Dghaym Michael J. Butler Extensible Record Structures in Event-B. 130-136 2021 ABZ https://doi.org/10.1007/978-3-030-77543-8_12 conf/asm/2021 db/conf/asm/abz2021.html#FathabadiSHDB21 Asieh Salehi Fathabadi Colin F. Snook Thai Son Hoang Dana Dghaym Michael J. Butler Refinable Record Structures in Formal Methods. 3-15 2021 MEDI Workshops https://doi.org/10.1007/978-3-030-87657-9_1 conf/medi/2021w db/conf/medi/medi2021w.html#FathabadiSHDB21 Chenyang Zhu 0001 Michael J. Butler Corina Cîrstea Thai Son Hoang Reasoning About Real-Time Systems in Event-B Models with Fairness Assumptions. 143-150 2021 TASE https://doi.org/10.1109/TASE52547.2021.00035 conf/tase/2021 db/conf/tase/tase2021.html#ZhuBCH21

Asieh Salehi Fathabadi Mohammadsadegh Dalvandi Michael J. Butler Bashir M. Al-Hashimi Verifying Cross-Layer Interactions Through Formal Model-Based Assertion Generation. 83-86 2020 12 IEEE Embed. Syst. Lett. 3 https://doi.org/10.1109/LES.2019.2955316 db/journals/esl/esl12.html#FathabadiDBA20

Chenyang Zhu 0001 Michael J. Butler Corina Cîrstea Formalizing hierarchical scheduling for refinement of real-time systems. 102390 2020 189 Sci. Comput. Program. https://doi.org/10.1016/j.scico.2020.102390 db/journals/scp/scp189.html#ZhuBC20

Chenyang Zhu 0001 Michael J. Butler Corina Cîrstea Trace semantics and refinement patterns for real-time properties in event-B models. 102513 2020 197 Sci. Comput. Program. https://doi.org/10.1016/j.scico.2020.102513 db/journals/scp/scp197.html#0001BC20

Michael J. Butler Alexander Raschke Abstract State Machines, Alloy, B, TLA, VDM and Z (ABZ 2018). 102514 2020 197 Sci. Comput. Program. https://doi.org/10.1016/j.scico.2020.102514 db/journals/scp/scp197.html#ButlerR20

Michael J. Butler Thai Son Hoang Alexander Raschke Klaus Reichl Introduction to special section on the ABZ 2018 case study: Hybrid ERTMS/ETCS Level 3. 249-255 2020 22 Int. J. Softw. Tools Technol. Transf. 3 https://doi.org/10.1007/s10009-020-00562-3 db/journals/sttt/sttt22.html#ButlerHRR20

Karla Morris Colin F. Snook Thai Son Hoang Geoffrey C. Hulette Robert C. Armstrong Michael J. Butler Refinement and Verification of Responsive Control Systems. 272-277 2020 ABZ https://doi.org/10.1007/978-3-030-48077-6_23 conf/asm/2020 db/conf/asm/abz2020.html#MorrisSHHAB20 Karla Morris Colin F. Snook Thai Son Hoang Geoffrey C. Hulette Robert C. Armstrong Michael J. Butler Formal Verification of Run-to-Completion Style Statecharts Using Event-B. 311-325 2020 ECSA Companion https://doi.org/10.1007/978-3-030-59155-7_24 conf/ecsa/2020c db/conf/ecsa/ecsa2020c.html#MorrisSHHAB20 Michael J. Butler Philipp Körner Sebastian Krings Thierry Lecomte Michael Leuschel Luis-Fernando Mejia Laurent Voisin The First Twenty-Five Years of Industrial Use of the B-Method. 189-209 2020 FMICS https://doi.org/10.1007/978-3-030-58298-2_8 conf/fmics/2020 db/conf/fmics/fmics2020.html#ButlerKKLLMV20 Chenyang Zhu 0001 Michael J. Butler Corina Cîrstea Real-Time Trigger-Response Properties for Event-B Applied to the Pacemaker. 57-64 2020 TASE https://doi.org/10.1109/TASE49443.2020.00017 conf/tase/2020 db/conf/tase/tase2020.html#ZhuBC20

Giles Howard Michael J. Butler John Colley Vladimiro Sassone A methodology for assuring the safety and security of critical infrastructure based on STPA and Event-B. 56-75 2019 9 Int. J. Crit. Comput. Based Syst. 1/2 https://doi.org/10.1504/IJCCBS.2019.098815 db/journals/ijccbs/ijccbs9.html#HowardBCS19

Tope Omitola Abdolbaghi Rezazadeh Michael J. Butler Making (Implicit) Security Requirements Explicit for Cyber-Physical Systems: A Maritime Use Case Security Analysis. 75-84 2019 DEXA Workshops https://doi.org/10.1007/978-3-030-27684-3_11 conf/dexaw/2019 db/conf/dexaw/dexaw2019.html#OmitolaRB19 Mohammadsadegh Dalvandi Michael J. Butler Asieh Salehi Fathabadi SEB-CG: Code Generation Tool with Algorithmic Refinement Support for Event-B. 19-29 2019 FM Workshops (1) https://doi.org/10.1007/978-3-030-54994-7_3 conf/fm/2019-w1 db/conf/fm/fm2019w-1.html#DalvandiBF19 Michael J. Butler Dana Dghaym Thai Son Hoang Tope Omitola Colin F. Snook Andreas Fellner Rupert Schlick Thorsten Tarrach Tomas Fischer Peter Tummeltshammer Behaviour-Driven Formal Model Development of the ETCS Hybrid Level 3. 97-106 2019 ICECCS https://doi.org/10.1109/ICECCS.2019.00018 conf/iceccs/2019 db/conf/iceccs/iceccs2019.html#ButlerDHOSFSTFT19 Colin F. Snook Thai Son Hoang Dana Dghaym Michael J. Butler Domain-Specific Scenarios for Refinement-Based Methods. 18-31 2019 MEDI Workshops https://doi.org/10.1007/978-3-030-32213-7_2 conf/medi/2019w db/conf/medi/medi2019w.html#SnookHDB19 Chenyang Zhu 0001 Michael J. Butler Corina Cîrstea Towards Refinement Semantics of Real-Time Trigger-Response Properties in Event-B. 1-8 2019 TASE https://doi.org/10.1109/TASE.2019.00-26 conf/tase/2019 db/conf/tase/tase2019.html#0001BC19

Asieh Salehi Fathabadi Michael J. Butler Sheng Yang 0003 Luis Alfonso Maeda-Nunez James R. B. Bantock Bashir M. Al-Hashimi Geoff V. Merrett A model-based framework for software portability and verification in embedded power management systems. 12-23 2018 82 J. Syst. Archit. https://doi.org/10.1016/j.sysarc.2017.12.001 db/journals/jsa/jsa82.html#FathabadiBYMBAM18

Michael J. Butler Klaus-Dieter Schewe Introduction to the ABZ 2016 Special issue. 1-2 2018 158 Sci. Comput. Program. https://doi.org/10.1016/j.scico.2018.01.005 db/journals/scp/scp158.html#ButlerS18

Thai Son Hoang Colin F. Snook Asieh Salehi Fathabadi Michael J. Butler Lukas Ladenberger Validating and verifying the requirements and design of a haemodialysis machine using the Rodin toolset. 122-147 2018 158 Sci. Comput. Program. https://doi.org/10.1016/j.scico.2017.11.002 db/journals/scp/scp158.html#HoangSFBL18

Chenyang Zhu 0001 Michael J. Butler Corina Cîrstea Refinement of Timing Constraints for Concurrent Tasks with Scheduling. 219-233 2018 ABZ https://doi.org/10.1007/978-3-319-91271-4_15 conf/asm/2018 db/conf/asm/abz2018.html#ZhuBC18 Mohammadsadegh Dalvandi Michael J. Butler Abdolbaghi Rezazadeh Asieh Salehi Fathabadi Verifiable Code Generation from Scheduled Event-B Models. 234-248 2018 ABZ https://doi.org/10.1007/978-3-319-91271-4_16 conf/asm/2018 db/conf/asm/abz2018.html#DalvandiBRF18 Thai Son Hoang Michael J. Butler Klaus Reichl The Hybrid ERTMS/ETCS Level 3 Case Study. 251-261 2018 ABZ https://doi.org/10.1007/978-3-319-91271-4_17 conf/asm/2018 db/conf/asm/abz2018.html#HoangBR18 Karla Morris Colin F. Snook Thai Son Hoang Robert C. Armstrong Michael J. Butler Refinement of Statecharts with Run-to-Completion Semantics. 121-138 2018 FTSCS https://doi.org/10.1007/978-3-030-12988-0_8 conf/ftscs/2018 db/conf/ftscs/ftscs2018.html#MorrisSHAB18 Dana Dghaym Colin F. Snook Thai Son Hoang Michael J. Butler Reusing Formal Models via Lifting. 189-192 2018 ICECCS https://doi.org/10.1109/ICECCS2018.2018.00029 https://doi.ieeecomputersociety.org/10.1109/ICECCS2018.2018.00029 conf/iceccs/2018 db/conf/iceccs/iceccs2018.html#DghaymSHB18 Colin F. Snook Thai Son Hoang Dana Dghaym Michael J. Butler Tomas Fischer Rupert Schlick Keming Wang Behaviour-Driven Formal Model Development. 21-36 2018 ICFEM https://doi.org/10.1007/978-3-030-02450-5_2 conf/icfem/2018 db/conf/icfem/icfem2018.html#SnookHDBFSW18 James Snook Michael J. Butler Thai Son Hoang Developing A New Language to Construct Algebraic Hierarchies for Event-B. 135-141 2018 SETTA https://doi.org/10.1007/978-3-319-99933-3_9 conf/setta/2018 db/conf/setta/setta2018.html#SnookBH18 Chenyang Zhu 0001 Michael J. Butler Corina Cîrstea Semantics of Real-Time Trigger-Response Properties in Event-B. 150-155 2018 TASE https://doi.org/10.1109/TASE.2018.00028 conf/tase/2018 db/conf/tase/tase2018.html#ZhuBC18 Michael J. Butler Alexander Raschke Thai Son Hoang Klaus Reichl Abstract State Machines, Alloy, B, TLA, VDM, and Z - 6th International Conference, ABZ 2018, Southampton, UK, June 5-8, 2018, Proceedings ABZ Springer 2018 Lecture Notes in Computer Science 10817 978-3-319-91270-7 978-3-319-91271-4 https://doi.org/10.1007/978-3-319-91271-4 db/conf/asm/abz2018.html

Naoto Sato Hironobu Kuruma Masanori Kaneko Yuichiroh Nakagawa Hideto Ogawa Thai Son Hoang Michael J. Butler DeepSaucer: Unified Environment for Verifying Deep Neural Networks. 2018 abs/1811.03752 CoRR http://arxiv.org/abs/1811.03752 db/journals/corr/corr1811.html#abs-1811-03752

Richard Banach Michael J. Butler Shengchao Qin Huibiao Zhu Core Hybrid Event-B II: Multiple cooperating Hybrid Event-B machines. 1-35 2017 139 Sci. Comput. Program. https://doi.org/10.1016/j.scico.2016.12.003 db/journals/scp/scp139.html#BanachBQZ17

Mohammadsadegh Dalvandi Michael J. Butler Abdolbaghi Rezazadeh Derivation of algorithmic control structures in Event-B refinement. 49-65 2017 148 Sci. Comput. Program. https://doi.org/10.1016/j.scico.2017.05.010 db/journals/scp/scp148.html#DalvandiBR17

Giles Howard Michael J. Butler John Colley Vladimiro Sassone Formal Analysis of Safety and Security Requirements of Critical Systems Supported by an Extended STPA Methodology. 174-180 2017 EuroS&P Workshops https://doi.org/10.1109/EuroSPW.2017.68 conf/eurosp/2017w db/conf/eurosp/eurosp2017w.html#HowardBCS17 Dana Dghaym Michael J. Butler Asieh Salehi Fathabadi Extending ERS for Modelling Dynamic Workflows in Event-B. 20-29 2017 ICECCS https://doi.org/10.1109/ICECCS.2017.29 https://doi.ieeecomputersociety.org/10.1109/ICECCS.2017.29 conf/iceccs/2017 db/conf/iceccs/iceccs2017.html#DghaymBF17 Thai Son Hoang Dana Dghaym Colin F. Snook Michael J. Butler A Composition Mechanism for Refinement-Based Methods. 100-109 2017 ICECCS https://doi.org/10.1109/ICECCS.2017.27 https://doi.ieeecomputersociety.org/10.1109/ICECCS.2017.27 conf/iceccs/2017 db/conf/iceccs/iceccs2017.html#HoangDSB17 Thai Son Hoang Colin F. Snook Dana Dghaym Michael J. Butler Class-Diagrams for Abstract Data Types. 100-117 2017 ICTAC https://doi.org/10.1007/978-3-319-67729-3_7 conf/ictac/2017 db/conf/ictac/ictac2017.html#HoangSDB17 Chris Bogdiukiewicz Michael J. Butler Thai Son Hoang Martin Paxton James Snook Xanthippe Waldron Toby Wilkinson Formal Development of Policing Functions for Intelligent Systems. 194-204 2017 ISSRE https://doi.org/10.1109/ISSRE.2017.40 https://doi.ieeecomputersociety.org/10.1109/ISSRE.2017.40 conf/issre/2017 db/conf/issre/issre2017.html#BogdiukiewiczBH17 Colin F. Snook Thai Son Hoang Michael J. Butler Analysing Security Protocols Using Refinement in iUML-B. 84-98 2017 NFM https://doi.org/10.1007/978-3-319-57288-8_6 conf/nfm/2017 db/conf/nfm/nfm2017.html#SnookHB17 Michael J. Butler Dana Dghaym Tomas Fischer Thai Son Hoang Klaus Reichl Colin F. Snook Peter Tummeltshammer Formal Modelling Techniques for Efficient Development of Railway Control Products. 71-86 2017 RSSRail https://doi.org/10.1007/978-3-319-68499-4_5 conf/rssrail/2017 db/conf/rssrail/rssrail2017.html#ButlerDFHRST17 Ahmed Al-Brashdi Michael J. Butler Abdolbaghi Rezazadeh Incremental Database Design using UML-B and Event-B. IMPEX/FM&MDD 2017 34-47 journals/corr/abs-1805-04636 https://doi.org/10.4204/EPTCS.271.3 http://arxiv.org/abs/1805.05514 https://www.wikidata.org/entity/Q129833401 db/series/eptcs/eptcs271.html#abs-1805-05514

Thai Son Hoang Laurent Voisin A. Salehi Michael J. Butler Toby Wilkinson N. Beauger Theory Plug-in for Rodin 3.x. 2017 abs/1701.08625 CoRR http://arxiv.org/abs/1701.08625 db/journals/corr/corr1701.html#HoangVSBWB17

Michael J. Butler Editorial. 179-180 2016 28 Formal Aspects Comput. 2 https://doi.org/10.1007/s00165-016-0368-0 https://www.wikidata.org/entity/Q59625788 db/journals/fac/fac28.html#Butler16

Dana Dghaym Matheus Garay Trindade Michael J. Butler Asieh Salehi Fathabadi A Graphical Tool for Event Refinement Structures in Event-B. 269-274 2016 ABZ https://doi.org/10.1007/978-3-319-33600-8_20 https://www.wikidata.org/entity/Q59625782 conf/asm/2016 db/conf/asm/abz2016.html#DghaymTBF16 Thai Son Hoang Colin F. Snook Lukas Ladenberger Michael J. Butler Validating the Requirements and Design of a Hemodialysis Machine Using iUML-B, BMotion Studio, and Co-Simulation. 360-375 2016 ABZ https://doi.org/10.1007/978-3-319-33600-8_31 https://www.wikidata.org/entity/Q59625785 conf/asm/2016 db/conf/asm/abz2016.html#HoangSLB16 Richard Banach Michael J. Butler Modelling Hybrid Systems in Event-B and Hybrid Event-B: A Comparison of Water Tanks. 90-105 2016 ICFEM https://doi.org/10.1007/978-3-319-47846-3_7 https://www.wikidata.org/entity/Q59625776 conf/icfem/2016 db/conf/icfem/icfem2016.html#BanachB16 Michael J. Butler Jean-Raymond Abrial Richard Banach Modelling and Refining Hybrid Systems in Event-B and Rodin. 29-42 2016 From Action Systems to Distributed Systems https://doi.org/10.1201/b20053-5 https://www.wikidata.org/entity/Q59625791 books/crc/asds2016 db/books/collections/asds2016.html#ButlerAB16 Michael J. Butler Klaus-Dieter Schewe Atif Mashkoor Miklós Biró Abstract State Machines, Alloy, B, TLA, VDM, and Z - 5th International Conference, ABZ 2016, Linz, Austria, May 23-27, 2016, Proceedings ABZ Springer 2016 Lecture Notes in Computer Science 9675 978-3-319-33599-5 https://doi.org/10.1007/978-3-319-33600-8 db/conf/asm/abz2016.html

Ashish Darbari Iain Singleton Michael J. Butler John Colley Formal Modelling, Testing and Verification of HSA Memory Models using Event-B. 2016 abs/1605.04744 CoRR http://arxiv.org/abs/1605.04744 db/journals/corr/corr1605.html#DarbariSBC16

Mohammadsadegh Dalvandi Michael J. Butler Abdolbaghi Rezazadeh Transforming Event-B Models to Dafny Contracts. 2015 72 Electron. Commun. Eur. Assoc. Softw. Sci. Technol. https://doi.org/10.14279/tuj.eceasst.72.1021 db/journals/eceasst/eceasst72.html#DalvandiBR15

George Eleftherakis Michael J. Butler Mike Hinchey Editorial. 473 2015 27 Formal Aspects Comput. 3 https://doi.org/10.1007/s00165-015-0335-1 https://www.wikidata.org/entity/Q59625807 db/journals/fac/fac27.html#EleftherakisBH15

Asieh Salehi Fathabadi Michael J. Butler Abdolbaghi Rezazadeh Language and tool support for event refinement structures in Event-B. 499-523 2015 27 Formal Aspects Comput. 3 https://doi.org/10.1007/s00165-014-0311-1 db/journals/fac/fac27.html#FathabadiBR15

Michael J. Butler Einar Broch Johnsen Luigia Petre Editorial. 611-612 2015 27 Formal Aspects Comput. 4 https://doi.org/10.1007/s00165-015-0338-y db/journals/fac/fac27.html#ButlerJP15

Richard Banach Michael J. Butler Shengchao Qin Nitika Verma Huibiao Zhu Core Hybrid Event-B I: Single Hybrid Event-B machines. 92-123 2015 105 Sci. Comput. Program. https://doi.org/10.1016/j.scico.2015.02.003 https://www.wikidata.org/entity/Q59625800 db/journals/scp/scp105.html#BanachBQVZ15

Eman H. Alkhammash Michael J. Butler Asieh Salehi Fathabadi Corina Cîrstea Building traceable Event-B models from requirements. 318-338 2015 111 Sci. Comput. Program. https://doi.org/10.1016/j.scico.2015.06.002 https://www.wikidata.org/entity/Q59625804 db/journals/scp/scp111.html#AlkhammashBFC15

Mar Yah Said Michael J. Butler Colin F. Snook A method of refinement in UML-B. 1557-1580 2015 14 Softw. Syst. Model. 4 https://doi.org/10.1007/s10270-013-0391-z https://www.wikidata.org/entity/Q59625832 db/journals/sosym/sosym14.html#SaidBS15

Mohammadsadegh Dalvandi Michael J. Butler Abdolbaghi Rezazadeh From Event-B Models to Dafny Code Contracts. 308-315 2015 FSEN https://doi.org/10.1007/978-3-319-24644-4_21 conf/fsen/2015 db/conf/fsen/fsen2015.html#DalvandiBR15 Asieh Salehi Fathabadi Luis Alfonso Maeda-Nunez Michael J. Butler Bashir M. Al-Hashimi Geoff V. Merrett Towards Automatic Code Generation of Run-Time Power Management for Embedded Systems Using Formal Methods. 104-111 2015 MCSoC https://doi.org/10.1109/MCSoC.2015.28 https://doi.ieeecomputersociety.org/10.1109/MCSoC.2015.28 conf/mcsoc/2015 db/conf/mcsoc/mcsoc2015.html#FathabadiMBAM15 Michael J. Butler Sylvain Conchon Fatiha Zaïdi Formal Methods and Software Engineering - 17th International Conference on Formal Engineering Methods, ICFEM 2015, Paris, France, November 3-5, 2015, Proceedings ICFEM Springer 2015 Lecture Notes in Computer Science 9407 978-3-319-25422-7 https://doi.org/10.1007/978-3-319-25423-4 https://www.wikidata.org/entity/Q59625787 db/conf/icfem/icfem2015.html Vitaly Savicks Michael J. Butler John Colley Co-simulation Environment for Rodin: Landing Gear Case Study. 148-153 2014 ABZ (Case Study) https://doi.org/10.1007/978-3-319-07512-9_11 https://www.wikidata.org/entity/Q59625812 conf/asm/2014cst db/conf/asm/abz2014cst.html#SavicksBC14 Inna Pereverzeva Michael J. Butler Asieh Salehi Fathabadi Linas Laibinis Elena Troubitsyna Formal Derivation of Distributed MapReduce. 238-254 2014 ABZ https://doi.org/10.1007/978-3-662-43652-3_21 conf/asm/2014 db/conf/asm/abz2014.html#PereverzevaBFLT14 Asieh Salehi Fathabadi Colin F. Snook Michael J. Butler Applying an Integrated Modelling Process to Run-time Management of Many-Core Systems. 120-135 2014 IFM https://doi.org/10.1007/978-3-319-10181-1_8 conf/ifm/2014 db/conf/ifm/ifm2014.html#FathabadiSB14 Toby Wilkinson Michael J. Butler John Colley A Systematic Approach to Requirements Driven Test Generation for Safety Critical Systems. 43-56 2014 IMBSA https://doi.org/10.1007/978-3-319-12214-4_4 https://www.wikidata.org/entity/Q59625820 conf/imbsa/2014 db/conf/imbsa/imbsa2014.html#WilkinsonBC14 Vitaly Savicks Michael J. Butler John Colley Co-simulating event-B and continuous models via FMI. 37 2014 SummerSim http://dl.acm.org/citation.cfm?id=2685654 conf/summersim/2014 db/conf/summersim/summersim2014.html#SavicksBC14

Eman H. Alkhammash Asieh Salehi Fathabadi Michael J. Butler Corina Cîrstea Building Traceable Event-B Models from Requirements. 2013 66 Electron. Commun. Eur. Assoc. Softw. Sci. Technol. https://doi.org/10.14279/tuj.eceasst.66.894 db/journals/eceasst/eceasst66.html#AlkhammashFBC13

Dana Dghaym Michael J. Butler Asieh Salehi Fathabadi Evaluation of Graphical Control Flow Management Approaches for Event-B Modelling. 2013 66 Electron. Commun. Eur. Assoc. Softw. Sci. Technol. https://doi.org/10.14279/tuj.eceasst.66.891 db/journals/eceasst/eceasst66.html#DghaymBF13

Jonathan P. Bowen Michael J. Butler Steve Reeves Mike Hinchey Editorial. 343 2013 25 Formal Aspects Comput. 3 https://doi.org/10.1007/s00165-013-0281-8 https://www.wikidata.org/entity/Q56939593 db/journals/fac/fac25.html#BowenBRH13

Andrew Ireland Gudmund Grov Maria Teresa Llano Michael J. Butler Reasoned modelling critics: Turning failed proofs into modelling guidance. 293-309 2013 78 Sci. Comput. Program. 3 https://doi.org/10.1016/j.scico.2011.03.006 https://www.wikidata.org/entity/Q59625829 db/journals/scp/scp78.html#IrelandGLB13

Michael J. Butler Issam Maamria Practical Theory Extension in Event-B. 67-81 2013 Theories of Programming and Formal Methods https://doi.org/10.1007/978-3-642-39698-4_5 https://www.wikidata.org/entity/Q59625844 conf/birthday/2013he db/conf/birthday/he2013.html#ButlerM13 Manoranjan Satpathy S. Ramesh 0002 Colin F. Snook Neeraj Kumar Singh 0001 Michael J. Butler A mixed approach to rigorous development of control designs. 7-12 2013 CACSD https://doi.org/10.1109/CACSD.2013.6663474 https://www.wikidata.org/entity/Q59625836 conf/cacsd/2013 db/conf/cacsd/cacsd2013.html#SatpathyRSSB13 Richard Banach Michael J. Butler A Hybrid Event-B Study of Lane Centering. 97-111 2013 CSDM https://doi.org/10.1007/978-3-319-02812-5_8 conf/csdm/2013 db/conf/csdm/csdm2013.html#BanachB13 Richard Banach Michael J. Butler Cruise Control in Hybrid Event-B. 76-93 2013 ICTAC https://doi.org/10.1007/978-3-642-39718-9_5 conf/ictac/2013 db/conf/ictac/ictac2013.html#BanachB13 Sanaz Yeganefard Michael J. Butler Problem decomposition and sub-model reconciliation of control systems in Event-B. 528-535 2013 IRI https://doi.org/10.1109/IRI.2013.6642515 https://doi.ieeecomputersociety.org/10.1109/IRI.2013.6642515 https://www.wikidata.org/entity/Q59625848 conf/iri/2013 db/conf/iri/iri2013.html#YeganefardB13 Manoranjan Satpathy Colin F. Snook Silky Arora S. Ramesh 0002 Michael J. Butler Systematic Development of Control Designs via Formal Refinement. 143-148 2013 MODELSWARD https://doi.org/10.5220/0004321001430148 conf/modelsward/2013 db/conf/modelsward/modelsward2013.html#SatpathySARB13 Michael J. Butler John Colley Andrew Edmunds Colin F. Snook Neil Evans Neil Grant Helen Marshall Modelling and Refinement in CODA Refine@IFM 2013 36-51 https://doi.org/10.4204/EPTCS.115.3 http://arxiv.org/abs/1305.6112 journals/corr/abs-1305-5634 db/series/eptcs/eptcs115.html#abs-1305-6112 Michael J. Butler Laurent Voisin Thomas Muller Tooling. 157-185 2013 Industrial Deployment of System Engineering Methods https://doi.org/10.1007/978-3-642-33170-1_12 books/daglib/0032363 db/books/collections/RT2013.html#ButlerVM13 Michael J. Butler Mastering System Analysis and Design through Abstraction and Refinement. 49-78 2013 Engineering Dependable Software Systems https://doi.org/10.3233/978-1-61499-207-3-49 series/natosec/34 db/series/natosec/natosec34.html#Butler13

Michael J. Butler External and internal choice with event groups in Event-B. 555-567 2012 24 Formal Aspects Comput. 4-6 https://doi.org/10.1007/s00165-012-0239-2 https://www.wikidata.org/entity/Q59625866 db/journals/fac/fac24.html#Butler12

Andrew Edmunds Abdolbaghi Rezazadeh Michael J. Butler Formal Modelling for Ada Implementations: Tasking Event-B. 119-132 2012 Ada-Europe https://doi.org/10.1007/978-3-642-30598-6_9 https://www.wikidata.org/entity/Q59625870 conf/adaEurope/2012 db/conf/adaEurope/adaEurope2012.html#EdmundsRB12 Andrew Edmunds Michael J. Butler Issam Maamria Renato Silva Chris Lovell Event-B Code Generation: Type Extension with Theories. 365-368 2012 ABZ https://doi.org/10.1007/978-3-642-30885-7_33 https://www.wikidata.org/entity/Q59625863 conf/asm/2012 db/conf/asm/abz2012.html#EdmundsBMSL12 Sanaz Yeganefard Michael J. Butler Control Systems: Phenomena and Structuring Functional Requirement Documents. 39-48 2012 ICECCS https://doi.ieeecomputersociety.org/10.1109/ICECCS.2012.13 conf/iceccs/2012 db/conf/iceccs/iceccs2012.html#YeganefardB12 Asieh Salehi Fathabadi Michael J. Butler Abdolbaghi Rezazadeh A Systematic Approach to Atomicity Decomposition in Event-B. 78-93 2012 SEFM https://doi.org/10.1007/978-3-642-33826-7_6 https://www.wikidata.org/entity/Q59625859 conf/sefm/2012 db/conf/sefm/sefm2012.html#FathabadiBR12 Brett Bicknell Jose Reis Michael J. Butler John Colley Colin F. Snook A Practical Approach for Closed Systems Formal Verification Using Event-B. 323-332 2012 SEFM https://doi.org/10.1007/978-3-642-33826-7_22 https://www.wikidata.org/entity/Q59625857 conf/sefm/2012 db/conf/sefm/sefm2012.html#BicknellRBCS12

Andrew Edmunds Michael J. Butler John Colley Building on the DEPLOY Legacy: Code Generation and Simulation http://arxiv.org/abs/1210.7034 2012 CoRR abs/1210.7034 db/journals/corr/corr1210.html#abs-1210-7034

Mohammad Reza Sarshogh Michael J. Butler Specification and refinement of discrete timing properties in Event-B. 2011 46 Electron. Commun. Eur. Assoc. Softw. Sci. Technol. https://doi.org/10.14279/tuj.eceasst.46.701 db/journals/eceasst/eceasst46.html#SarshoghB11

Sanaz Yeganefard Michael J. Butler Structuring Functional Requirements of Control Systems to Facilitate Refinement-based Formalisation. 2011 46 Electron. Commun. Eur. Assoc. Softw. Sci. Technol. https://doi.org/10.14279/tuj.eceasst.46.695 db/journals/eceasst/eceasst46.html#YeganefardB11

Renato Silva Carine Pascal Thai Son Hoang Michael J. Butler Decomposition tool for event-B. 199-208 2011 41 Softw. Pract. Exp. 2 https://doi.org/10.1002/spe.1002 https://www.wikidata.org/entity/Q59625876 db/journals/spe/spe41.html#SilvaPHB11

Asieh Salehi Fathabadi Abdolbaghi Rezazadeh Michael J. Butler Applying Atomicity and Model Decomposition to a Space Craft System in Event-B. 328-342 2011 NASA Formal Methods https://doi.org/10.1007/978-3-642-20398-5_24 https://www.wikidata.org/entity/Q59625879 conf/nfm/2011 db/conf/nfm/nfm2011.html#FathabadiRB11 Ali Gondal Michael Poppleton Michael J. Butler Composing Event-B Specifications - Case-Study Experience. 100-115 2011 SC https://doi.org/10.1007/978-3-642-22045-6_7 https://www.wikidata.org/entity/Q59625882 conf/soco/2011 db/conf/soco/sc2011.html#GondalPB11 Michael J. Butler Wolfram Schulte FM 2011: Formal Methods - 17th International Symposium on Formal Methods, Limerick, Ireland, June 20-24, 2011. Proceedings 6664 2011 https://doi.org/10.1007/978-3-642-21437-0 978-3-642-21436-3 FM Lecture Notes in Computer Science Springer db/conf/fm/fm2011.html

Eerke A. Boiten Michael J. Butler John Derrick Graeme Smith 0001 Editorial. 1 2010 22 Formal Aspects Comput. 1 https://doi.org/10.1007/s00165-009-0147-2 https://www.wikidata.org/entity/Q59625910 db/journals/fac/fac22.html#BoitenBDS10

Jean-Raymond Abrial Michael J. Butler Stefan Hallerstede Thai Son Hoang Farhad Mehta Laurent Voisin Rodin: an open toolset for modelling and reasoning in Event-B. 447-466 2010 12 Int. J. Softw. Tools Technol. Transf. 6 https://doi.org/10.1007/s10009-010-0145-y https://www.wikidata.org/entity/Q59625896 db/journals/sttt/sttt12.html#AbrialBHHMV10

Andrew Ireland Gudmund Grov Michael J. Butler Reasoned Modelling Critics: Turning Failed Proofs into Modelling Guidance. 189-202 2010 ASM https://doi.org/10.1007/978-3-642-11811-1_15 https://www.wikidata.org/entity/Q59625915 conf/asm/2010 db/conf/asm/abz2010.html#IrelandGB10 Edd Turner Michael J. Butler Michael Leuschel A Refinement-Based Correctness Proof of Symmetry Reduced Model Checking. 231-244 2010 ASM https://doi.org/10.1007/978-3-642-11811-1_18 https://www.wikidata.org/entity/Q59625906 conf/asm/2010 db/conf/asm/abz2010.html#TurnerBL10 Issam Maamria Michael J. Butler Andrew Edmunds Abdolbaghi Rezazadeh On an Extensible Rule-Based Prover for Event-B. 407 2010 ASM https://doi.org/10.1007/978-3-642-11811-1_40 conf/asm/2010 db/conf/asm/abz2010.html#MaamriaBER10 Jennifer Sorge Michael Poppleton Michael J. Butler A Basis for Feature-Oriented Modelling in Event-B. 409 2010 ASM https://doi.org/10.1007/978-3-642-11811-1_42 https://www.wikidata.org/entity/Q59625901 conf/asm/2010 db/conf/asm/abz2010.html#SorgePB10 Renato Silva Michael J. Butler Shared Event Composition/Decomposition in Event-B. 122-141 2010 FMCO https://doi.org/10.1007/978-3-642-25271-6_7 https://www.wikidata.org/entity/Q59625889 conf/fmco/2010 db/conf/fmco/fmco2010.html#SilvaB10 Colin F. Snook Vitaly Savicks Michael J. Butler Verification of UML Models by Translation to UML-B. 251-266 2010 FMCO https://doi.org/10.1007/978-3-642-25271-6_13 https://www.wikidata.org/entity/Q59625892 conf/fmco/2010 db/conf/fmco/fmco2010.html#SnookSB10 Issam Maamria Michael J. Butler Rewriting and Well-Definedness within a Proof System. 55-71 2010 PAR@ITP https://doi.org/10.29007/b7wc conf/itp/2010par db/conf/itp/par2010.html#MaamriaB10 Sanaz Yeganefard Michael J. Butler Abdolbaghi Rezazadeh Evaluation of a Guideline by Formal Modelling of Cruise Control System in Event-B. 182-191 2010 NASA Formal Methods conf/nfm/2010 db/conf/nfm/nfm2010.html#YeganefardBR10 Issam Maamria Michael J. Butler Rewriting and Well-Definedness within a Proof System PAR 2010 49-64 https://doi.org/10.4204/EPTCS.43.4 http://arxiv.org/abs/1012.4897 journals/corr/abs-1012-4555 db/series/eptcs/eptcs43.html#abs-1012-4897

Shamim Ripon Michael J. Butler Formalizing cCSP Synchronous Semantics in PVS http://arxiv.org/abs/1001.3464 2010 CoRR abs/1001.3464 db/journals/corr/corr1001.html#abs-1001-3464

Shamim Ripon Michael J. Butler Deriving Relationship Between Semantic Models - An Approach for cCSP http://arxiv.org/abs/1002.3330 2010 CoRR abs/1002.3330 db/journals/corr/corr1002.html#abs-1002-3330

Michael Leuschel Dominique Cansell Michael J. Butler Validating and Animating Higher-Order Recursive Functions in B. 78-92 2009 Rigorous Methods for Software Construction and Analysis https://doi.org/10.1007/978-3-642-11447-2_6 https://www.wikidata.org/entity/Q59625954 conf/birthday/2009borger db/conf/birthday/borger2009.html#LeuschelCB09 Mar Yah Said Michael J. Butler Colin F. Snook Language and Tool Support for Class and State Machine Refinement in UML-B. 579-595 2009 FM https://doi.org/10.1007/978-3-642-05089-3_37 https://www.wikidata.org/entity/Q59625922 conf/fm/2009 db/conf/fm/fm2009.html#SaidBS09 Asieh Salehi Fathabadi Michael J. Butler Applying Event-B Atomicity Decomposition to a Multi Media Protocol. 89-104 2009 FMCO https://doi.org/10.1007/978-3-642-17071-3_5 https://www.wikidata.org/entity/Q59625908 conf/fmco/2009 db/conf/fmco/fmco2009.html#FathabadiB09 Divakar Yadav Michael J. Butler Verification of Liveness Properties in Distributed Systems. 625-636 2009 IC3 https://doi.org/10.1007/978-3-642-03547-0_59 https://www.wikidata.org/entity/Q59625956 conf/ic3/2009 db/conf/ic3/ic3-2009.html#YadavB09 Renato Silva Michael J. Butler Supporting Reuse of Event-B Developments through Generic Instantiation. 466-484 2009 ICFEM https://doi.org/10.1007/978-3-642-10373-5_24 https://www.wikidata.org/entity/Q59625917 conf/icfem/2009 db/conf/icfem/icfem2009.html#SilvaB09 Michael J. Butler Decomposition Structures for Event-B. 20-38 2009 IFM https://doi.org/10.1007/978-3-642-00255-7_2 conf/ifm/2009 db/conf/ifm/ifm2009.html#Butler09 Kriangsak Damchoom Michael J. Butler Applying Event and Machine Decomposition to a Flash-Based Filestore in Event-B. 134-152 2009 SBMF https://doi.org/10.1007/978-3-642-10452-7_10 https://www.wikidata.org/entity/Q59625934 conf/sbmf/2009 db/conf/sbmf/sbmf2009.html#DamchoomB09 Elisabeth Ball Michael J. Butler Event-B Patterns for Specifying Fault-Tolerance in Multi-agent Interaction. 104-129 2009 Methods, Models and Tools for Fault Tolerance https://doi.org/10.1007/978-3-642-00867-2_6 https://www.wikidata.org/entity/Q59625938 series/lncs/5454 db/series/lncs/lncs5454.html#BallB09 Divakar Yadav Michael J. Butler Formal Development of a Total Order Broadcast for Distributed Transactions Using Event-B. 152-176 2009 Methods, Models and Tools for Fault Tolerance https://doi.org/10.1007/978-3-642-00867-2_8 https://www.wikidata.org/entity/Q59625944 series/lncs/5454 db/series/lncs/lncs5454.html#YadavB09 Jean-Raymond Abrial Michael J. Butler Rajev Joshi Elena Troubitsyna J. C. P. Woodcock Refinement Based Methods for the Construction of Dependable Systems, 13.09. - 18.09.2009 Refinement Based Methods for the Construction of Dependable Systems 09381 2009 Schloss Dagstuhl - Leibniz-Zentrum für Informatik, Germany Dagstuhl Seminar Proceedings db/conf/dagstuhl/P9381.html http://drops.dagstuhl.de/portals/09381/ Michael J. Butler Cliff B. Jones Alexander B. Romanovsky Elena Troubitsyna Methods, Models and Tools for Fault Tolerance Methods, Models and Tools for Fault Tolerance 5454 2009 https://doi.org/10.1007/978-3-642-00867-2 https://www.wikidata.org/entity/Q59625947 978-3-642-00866-5 Lecture Notes in Computer Science Springer db/series/lncs/lncs5454.html Jean-Raymond Abrial Michael J. Butler Rajev Joshi Elena Troubitsyna J. C. P. Woodcock 09381 Extended Abstracts Collection - Refinement Based Methods for the Construction of Dependable Systems. 2009 Refinement Based Methods for the Construction of Dependable Systems http://drops.dagstuhl.de/opus/volltexte/2010/2374/ conf/dagstuhl/2009P9381 db/conf/dagstuhl/P9381.html#AbrialBJTW09

Michael J. Butler Divakar Yadav An incremental development of the Mondex system in Event-B. 61-77 2008 20 Formal Aspects Comput. 1 https://doi.org/10.1007/s00165-007-0061-4 https://www.wikidata.org/entity/Q59625970 db/journals/fac/fac20.html#ButlerY08

Michael Leuschel Michael J. Butler ProB: an automated analysis toolset for the B method. 185-203 2008 10 Int. J. Softw. Tools Technol. Transf. 2 https://doi.org/10.1007/s10009-007-0063-9 https://www.wikidata.org/entity/Q59625968 db/journals/sttt/sttt10.html#LeuschelB08

Colin F. Snook Michael J. Butler UML-B: A Plug-in for the Event-B Tool Set. 344 2008 ABZ https://doi.org/10.1007/978-3-540-87603-8_32 https://www.wikidata.org/entity/Q59625976 conf/asm/2008 db/conf/asm/abz2008.html#SnookB08 Jean-Raymond Abrial Michael J. Butler Stefan Hallerstede Laurent Voisin A Roadmap for the Rodin Toolset. 347 2008 ABZ https://doi.org/10.1007/978-3-540-87603-8_35 https://www.wikidata.org/entity/Q59625972 conf/asm/2008 db/conf/asm/abz2008.html#AbrialBHV08 Kriangsak Damchoom Michael J. Butler Jean-Raymond Abrial Modelling and Proof of a Tree-Structured File System in Event-B and Rodin. 25-44 2008 ICFEM https://doi.org/10.1007/978-3-540-88194-0_5 https://www.wikidata.org/entity/Q59625958 conf/icfem/2008 db/conf/icfem/icfem2008.html#DamchoomBA08 Shamim Ripon Michael J. Butler PVS Embedding of cCSP Semantic Models and Their Relationship. 103-118 2008 conf/avocs/2008 AVoCS https://doi.org/10.1016/j.entcs.2009.08.020 https://www.wikidata.org/entity/Q59625926 db/conf/avocs/avocs2008.html#RiponB09 Andrew Edmunds Michael J. Butler Linking Event-B and Concurrent Object-Oriented Programs. 159-182 2008 conf/refine/2008 Refine@FM https://doi.org/10.1016/j.entcs.2008.06.008 https://www.wikidata.org/entity/Q59625964 db/journals/entcs/entcs214.html#EdmundsB08 Egon Börger Michael J. Butler Jonathan P. Bowen Paul Boca Abstract State Machines, B and Z, First International Conference, ABZ 2008, London, UK, September 16-18, 2008. Proceedings 5238 2008 978-3-540-87602-1 Lecture Notes in Computer Science Springer ABZ https://doi.org/10.1007/978-3-540-87603-8 https://www.wikidata.org/entity/Q56939723 db/conf/asm/abz2008.html Michael Leuschel Michael J. Butler Corinna Spermann Edd Turner Symmetry Reduction for B by Permutation Flooding. 79-93 2007 conf/b/2007 B https://doi.org/10.1007/11955757_9 db/conf/b/b2007.html#LeuschelBST07 Manoranjan Satpathy Michael J. Butler Michael Leuschel S. Ramesh 0002 Automatic Testing from Formal Specifications. 95-113 2007 conf/tap/2007 TAP https://doi.org/10.1007/978-3-540-73770-4_6 db/conf/tap/tap2007.html#SatpathyBLR07 Edd Turner Michael Leuschel Corinna Spermann Michael J. Butler Symmetry Reduced Model Checking for B. 25-34 2007 conf/tase/2007 TASE https://doi.org/10.1109/TASE.2007.50 https://doi.ieeecomputersociety.org/10.1109/TASE.2007.50 https://www.wikidata.org/entity/Q59625986 db/conf/tase/tase2007.html#TurnerLSB07 Michael J. Butler Michael G. Hinchey María M. Larrondo-Petrie Formal Methods and Software Engineering, 9th International Conference on Formal Engineering Methods, ICFEM 2007, Boca Raton, FL, USA, November 14-15, 2007, Proceedings ICFEM Lecture Notes in Computer Science 4789 Springer 2007 978-3-540-76648-3 https://doi.org/10.1007/978-3-540-76650-6 db/conf/icfem/icfem2007.html

Eerke A. Boiten Michael J. Butler Guest Editorial Editorial for the FAC Special Issue based on derivative papers from "Refine '05". 263 2006 18 Formal Aspects Comput. 3 https://doi.org/10.1007/s00165-006-0009-0 https://www.wikidata.org/entity/Q59625994 db/journals/fac/fac18.html#BoitenB06

Colin F. Snook Michael J. Butler UML-B: Formal modeling and design aided by UML. 92-122 2006 15 ACM Trans. Softw. Eng. Methodol. 1 https://doi.org/10.1145/1125808.1125811 db/journals/tosem/tosem15.html#SnookB06

Neil Evans Michael J. Butler A Proposal for Records in Event-B. 221-235 2006 conf/fm/2006 FM https://doi.org/10.1007/11813040_16 db/conf/fm/fm2006.html#EvansB06 Gary T. Leavens Jean-Raymond Abrial Don S. Batory Michael J. Butler Alessandro Coglio Kathi Fisler Eric C. R. Hehner Cliff B. Jones Dale Miller 0001 Simon L. Peyton Jones Murali Sitaraman Douglas R. Smith Aaron Stump Roadmap for enhanced languages and methods to aid verification. 221-236 2006 conf/gpce/2006 GPCE https://doi.org/10.1145/1173706.1173740 https://www.wikidata.org/entity/Q59625999 db/conf/gpce/gpce2006.html#LeavensABBCFHJMJSSS06 Jean-Raymond Abrial Michael J. Butler Stefan Hallerstede Laurent Voisin An Open Extensible Tool Environment for Event-B. 588-605 2006 conf/icfem/2006 ICFEM https://doi.org/10.1007/11901433_32 db/conf/icfem/icfem2006.html#AbrialBHV06 Divakar Yadav Michael J. Butler Rigorous Design of Fault-Tolerant Transactions for Replicated Database Systems Using Event B. 343-363 2006 conf/rodin/2006 RODIN Book https://doi.org/10.1007/11916246_18 db/conf/rodin/rodin2006.html#YadavB06 Michael J. Butler Cliff B. Jones Alexander B. Romanovsky Elena Troubitsyna Rigorous Development of Complex Fault-Tolerant Systems [FP6 IST-511599 RODIN project] RODIN Book Lecture Notes in Computer Science 4157 Springer 2006 3-540-48265-2 https://doi.org/10.1007/11916246 db/conf/rodin/rodin2006.html

Michael J. Butler Carla Ferreira 0001 Muan Yong Ng Precise Modelling of Compensating Business Transactions and its Application to BPEL. 712-743 2005 11 J. Univers. Comput. Sci. 5 https://doi.org/10.3217/jucs-011-05-0712 db/journals/jucs/jucs11.html#ButlerFN05

Michael J. Butler Michael Leuschel Colin F. Snook Tools for System Validation with B Abstract Machines. 57-69 2005 conf/asm/2005 Abstract State Machines http://www.univ-paris12.fr/lacl/dima/asm05/asm-mjb.ps db/conf/asm/asm2005.html#ButlerLS05 Roberto Bruni 0001 Michael J. Butler Carla Ferreira 0001 C. A. R. Hoare Hernán C. Melgratti Ugo Montanari Comparing Two Approaches to Compensable Flow Composition. 383-397 2005 conf/concur/2005 CONCUR https://doi.org/10.1007/11539452_30 db/conf/concur/concur2005.html#BruniBFHMM05 Michael J. Butler Shamim Ripon Executable Semantics for Compensating CSP. 243-256 2005 conf/epew/2005 EPEW/WS-FM https://doi.org/10.1007/11549970_18 https://www.wikidata.org/entity/Q59626004 db/conf/epew/epew2005.html#ButlerR05 Michael J. Butler Michael Leuschel Combining CSP and B for Specification and Property Verification. 221-236 2005 conf/fm/2005 FM https://doi.org/10.1007/11526841_16 db/conf/fm/fm2005.html#ButlerL05 Michael Leuschel Michael J. Butler Automatic Refinement Checking for B. 345-359 2005 conf/icfem/2005 ICFEM https://doi.org/10.1007/11576280_24 https://www.wikidata.org/entity/Q59626020 db/conf/icfem/icfem2005.html#LeuschelB05 Abdolbaghi Rezazadeh Michael J. Butler Some Guidelines for Formal Development of Web-Based Applications in B-Method. 472-492 2005 conf/zum/2005 ZB https://doi.org/10.1007/11415787_27 db/conf/zum/zb2005.html#RezazadehB05

Stefan Hallerstede Michael J. Butler Performance analysis of probabilistic action systems. 313-331 2004 16 Formal Aspects Comput. 4 https://doi.org/10.1007/s00165-004-0037-6 https://www.wikidata.org/entity/Q59626031 db/journals/fac/fac16.html#HallerstedeB04

Stéphane Lo Presti Michael J. Butler Michael Leuschel Chris Booth A Trust Analysis Methodology for Pervasive Computing Systems. 129-143 2004 conf/atal/2004trust Trusting Agents for Trusting Electronic Societies https://doi.org/10.1007/11532095_8 https://www.wikidata.org/entity/Q59626014 db/conf/atal/trust2004.html#PrestiBLB04 Michael J. Butler C. A. R. Hoare Carla Ferreira 0001 A Trace Semantics for Long-Running Transactions. 133-150 2004 conf/birthday/2004csp 25 Years Communicating Sequential Processes https://doi.org/10.1007/11423348_8 db/conf/birthday/csp2004.html#ButlerHF04 Michael J. Butler Carla Ferreira 0001 An Operational Semantics for StAC, a Language for Modelling Long-Running Business Transactions. 87-104 https://doi.org/10.1007/978-3-540-24634-3_9 2004 conf/coordination/2004 COORDINATION db/conf/coordination/coordination2004.html#ButlerF04 Michael J. Butler Michael Leuschel Stéphane Lo Presti Phillip Turner The Use of Formal Methods in the Analysis of Trust (Position Paper). 333-339 https://doi.org/10.1007/978-3-540-24747-0_25 2004 conf/itrust/2004 iTrust db/conf/itrust/itrust2004.html#ButlerLPT04 Manoranjan Satpathy Michael Leuschel Michael J. Butler ProTest: An Automatic Test Environment for B Specifications. 113-136 2004 conf/mbt/2004 MBT https://doi.org/10.1016/j.entcs.2004.12.009 https://www.wikidata.org/entity/Q59626009 db/journals/entcs/entcs111.html#SatpathyLB05 Juan Carlos Augusto Michael J. Butler Carla Ferreira 0001 Stephen-John Craig Using SPIN and STeP to Verify Business Processes Specifications. 207-213 https://doi.org/10.1007/978-3-540-39866-0_22 2003 conf/ershov/2003 Ershov Memorial Conference db/conf/ershov/ershov2003.html#AugustoBFC03 Michael Leuschel Michael J. Butler ProB: A Model Checker for B. 855-874 https://doi.org/10.1007/978-3-540-45236-2_46 2003 conf/fm/2003 FME db/conf/fm/fme2003.html#LeuschelB03 Muan Yong Ng Michael J. Butler Towards Formalizing UML State Diagrams in CSP. 138- 2003 conf/sefm/2003 SEFM https://doi.org/10.1109/SEFM.2003.1236215 https://doi.ieeecomputersociety.org/10.1109/SEFM.2003.1236215 db/conf/sefm/sefm2003.html#NgB03 Carla Ferreira 0001 Michael J. Butler Using B Refinement to Analyse Compensating Business Processes. 477-496 2003 conf/zum/2003 ZB https://doi.org/10.1007/3-540-44880-2_28 db/conf/zum/zb2003.html#FerreiraB03

Michael J. Butler A System-Based Approach to the Formal Development of Embedded Controllers for a Railway. 355-366 2002 6 Des. Autom. Embed. Syst. 4 https://doi.org/10.1023/A:1016503426126 https://www.wikidata.org/entity/Q59626045 db/journals/dafes/dafes6.html#Butler02

Michael J. Butler On the Use of Data Refinement in the Development of Secure Communications Systems. 2-34 2002 14 Formal Aspects Comput. 1 https://doi.org/10.1007/s001650200025 https://www.wikidata.org/entity/Q59626050 db/journals/fac/fac14.html#Butler02

Mandy Chessell Catherine Griffin David Vines Michael J. Butler Carla Ferreira 0001 Peter Henderson 0001 Extending the concept of transaction compensation. 743-758 2002 41 IBM Syst. J. 4 https://doi.org/10.1147/sj.414.0743 db/journals/ibmsj/ibmsj41.html#ChessellGVBFH02

Muan Yong Ng Michael J. Butler Tool Support for Visualizing CSP in UML. 287-298 2002 conf/icfem/2002 ICFEM https://doi.org/10.1007/3-540-36103-0_31 db/conf/icfem/icfem2002.html#NgB02 Leonid Mikhailov Michael J. Butler An Approach to Combining B and Alloy. 140-161 2002 conf/zum/2002 ZB https://doi.org/10.1007/3-540-45648-1_8 db/conf/zum/zb2002.html#MikhailovB02 Michael J. Butler Luigia Petre Kaisa Sere Integrated Formal Methods, Third International Conference, IFM 2002, Turku, Finland, May 15-18, 2002, Proceedings IFM Lecture Notes in Computer Science 2335 Springer 2002 3-540-43703-7 https://doi.org/10.1007/3-540-47884-1 db/conf/ifm/ifm2002.html Pieter H. Hartel Michael J. Butler Eduard de Jong Mark Longley Transacted Memory for Smart Cards. 478-499 2001 conf/fm/2001 FME https://doi.org/10.1007/3-540-45251-6_28 db/conf/fm/fme2001.html#HartelBJL01 Colin F. Snook Michael J. Butler Using a Graphical Design Tool for Formal Specification. 24 2001 PPIG https://ppig.org/papers/2001-ppig-13th-snook/ conf/ppig/2001 db/conf/ppig/ppig2001.html#SnookB01

Michael J. Butler csp2B: A Practical Approach to Combining CSP and B. 182-198 2000 12 Formal Aspects Comput. 3 https://doi.org/10.1007/PL00003930 db/journals/fac/fac12.html#Butler00

Michael J. Butler Carla Ferreira 0001 A Process Compensation Language. 61-76 https://doi.org/10.1007/3-540-40911-4_5 2000 conf/ifm/2000 IFM db/conf/ifm/ifm2000.html#ButlerF00 Manoranjan Satpathy Rachel Harrison Colin F. Snook Michael J. Butler A Generic Model for Assessing Process Quality. 94-110 2000 conf/iwsm/2000 IWSM https://doi.org/10.1007/3-540-44704-0_8 db/conf/iwsm/iwsm2000.html#SatpathyHSB00 Michael J. Butler Mairead Meagher Performing Algorithmic Refinement before Data Refinement in B. 324-343 2000 conf/zum/2000 ZB https://doi.org/10.1007/3-540-44525-0_19 db/conf/zum/zb2000.html#ButlerM00

Michael J. Butler Calculational Derivation of Pointer Algorithms from Tree Operations. 221-260 1999 33 Sci. Comput. Program. 3 db/journals/scp/scp33.html#Butler99 https://doi.org/10.1016/S0167-6423(98)00016-1

Michael J. Butler Pieter H. Hartel Reasoning about Grover's quantum search algorithm using probabilistic <i>wp</i>. 417-429 1999 21 ACM Trans. Program. Lang. Syst. 3 https://doi.org/10.1145/319301.319303 https://www.wikidata.org/entity/Q130926867 db/journals/toplas/toplas21.html#ButlerH99

Michael J. Butler csp2B: A Practical Approach to Combining CSP and B. 490-508 1999 conf/fm/1999-1 World Congress on Formal Methods https://doi.org/10.1007/3-540-48119-2_28 db/conf/fm/fm1999-1.html#Butler99 Pieter H. Hartel Michael J. Butler Moshe Levy The Operational Semantics of a Java Secure Processor. 313-352 https://doi.org/10.1007/3-540-48737-9_9 1999 conf/java/1999formal Formal Syntax and Semantics of Java db/conf/java/formal99.html#HartelBL99

Ralph-Johan Back Michael J. Butler Fusion and Simultaneous Execution in the Refinement Calculus. 921-949 1998 35 Acta Informatica 11 https://doi.org/10.1007/s002360050148 db/journals/acta/acta35.html#BackB98

Michael J. Butler An Approach to the Design of Distributed Systems with B AMN. 223-241 1997 conf/zum/1997 ZUM db/conf/zum/zum1997.html#Butler97 https://doi.org/10.1007/BFb0027291

Michael J. Butler Stepwise Refinement of Communicating Systems. 139-173 1996 27 Sci. Comput. Program. 2 db/journals/scp/scp27.html#Butler96 https://doi.org/10.1016/0167-6423(96)81173-7 https://www.wikidata.org/entity/Q59626081

Michael J. Butler Thomas Långbacka Program Derivation Using the Refinement Calculator. 93-108 1996 conf/tphol/1996 TPHOLs db/conf/tphol/tphol96.html#ButlerL96 https://doi.org/10.1007/BFb0105399

Michael J. Butler Carroll Morgan Action Systemes, Unbounded Nondeterminism, and Infinite Traces. 37-53 1995 7 Formal Aspects Comput. 1 db/journals/fac/fac7.html#ButlerM95 https://doi.org/10.1007/BF01214622 https://www.wikidata.org/entity/Q59626085

Michael J. Butler Emil Sekerinski Kaisa Sere An Action System Approach to the Steam Boiler Problem. 129-148 1995 conf/dagstuhl/1995fm Formal Methods for Industrial Applications db/conf/dagstuhl/fm1995.html#ButlerSS95 https://doi.org/10.1007/BFb0027234 Ralph-Johan Back Michael J. Butler Exploring Summation and Product Operators in the Refinement Calculus. 128-158 1995 conf/mpc/1995 MPC db/conf/mpc/mpc95.html#BackB95 https://doi.org/10.1007/3-540-60117-1_8 Michael J. Butler Refinement and Decomposition of Value-Passing Action Systems. 217-232 1993 conf/concur/1993 CONCUR db/conf/concur/concur1993.html#Butler93 https://doi.org/10.1007/3-540-57208-2_16 Michael J. Butler A CSP approach to action systems. 1992 University of Oxford, UK http://eprints.soton.ac.uk/250974/ https://ethos.bl.uk/OrderDetails.do?uin=uk.bl.ethos.316816 British Library, EThOS Michael J. Butler Behavioural Extension for CSP. 254-267 1991 conf/fm/1991-1 VDM Europe (1) db/conf/fm/vdme1991-1.html#Butler91 https://doi.org/10.1007/3-540-54834-3_16 Michael J. Butler Service Extension at the Specification Level. 319-333 1990 conf/zum/1990 Z User Workshop db/conf/zum/zum1990.html#Butler90 Jean-Raymond Abrial Michael Akintunde Ahmed Al-Brashdi Bashir M. Al-Hashimi Haider Al-Shareefy Eman H. Alkhammash Fahad Alotaibi Leonardo Aniello Robert C. Armstrong Silky Arora Juan Carlos Augusto Ralph-Johan Back Elisabeth Ball Richard Banach James R. B. Bantock Don S. Batory N. Beauger Brett Bicknell Miklós Biró Paul Boca Chris Bogdiukiewicz Eerke A. Boiten Chris Booth Egon Börger Jonathan P. Bowen Roberto Bruni 0001 Dominique Cansell Mandy Chessell Corina Cîrstea Alessandro Coglio John Colley Sylvain Conchon Stephen-John Craig Mohammadsadegh Dalvandi Kriangsak Damchoom Ashish Darbari John Derrick Dana Dghaym Andrew Edmunds George Eleftherakis Neil Evans Asieh Salehi Fathabadi Andreas Fellner Carla Ferreira 0001 Tomas Fischer Kathi Fisler Ali Gondal Neil Grant Catherine Griffin Gudmund Grov Stefan Hallerstede Rachel Harrison Pieter H. Hartel Eric C. R. Hehner Peter Henderson 0001 Michael G. HincheyMike Hinchey Thai Son Hoang C. A. R. Hoare Giles Howard Runshan Hu Geoffrey C. Hulette Andrew Ireland Einar Broch Johnsen Cliff B. Jones Simon L. Peyton Jones Eduard de Jong Rajev Joshi Masanori Kaneko Philipp KoernerPhilipp Körner Sebastian Krings Martin Kubisch Hironobu Kuruma Lukas Ladenberger Linas Laibinis Thomas Långbacka María M. Larrondo-Petrie Gary T. Leavens Thierry Lecomte Pauline Leonard Michael Leuschel Moshe Levy Maria Teresa Llano Mark Longley Chris Lovell Issam Maamria Luis Alfonso Maeda-Nunez Helen Marshall Atif Mashkoor Mairead Meagher Farhad Mehta Luis-Fernando Mejia Hernán C. Melgratti Geoff V. Merrett Leonid Mikhailov Dale Miller 0001 Ugo Montanari Luc Moreau 0001 Carroll Morgan Karla Morris Thomas Muller Yuichiroh Nakagawa Muan Yong Ng Hideto Ogawa Tope Omitola Carine Pascal Martin Paxton Luigia Petre Michael Poppleton Stéphane Lo Presti Shengchao Qin S. Ramesh 0002 Alexander Raschke Steve Reeves Klaus Reichl José ReisJose Reis Abdolbaghi Rezazadeh Shamim Ripon Alexander B. Romanovsky Mar Yah Said A. Salehi Mohammad Reza Sarshogh Vladimiro Sassone Naoto Sato Manoranjan Satpathy Vitaly Savicks Klaus-Dieter Schewe Rupert Schlick Wolfram Schulte Emil Sekerinski Kaisa Sere Renato Silva Neeraj Kumar Singh 0001 Iain Singleton Murali Sitaraman Douglas R. Smith Graeme Smith 0001 Colin F. Snook James Snook Jennifer Sorge Corinna Spermann Aaron Stump Thorsten Tarrach Robert Thorburn Matheus Garay Trindade Elena Troubitsyna Peter Tummeltshammer Edd Turner Phillip Turner Nitika Verma David Vines Inna VistbakkaInna Pereverzeva Laurent Voisin Xanthippe Waldron Keming Wang Toby Wilkinson Jim Woodcock 0001J. C. P. Woodcock Karla Vanessa Morris Wright Divakar Yadav Mehmet Said Nur Yagmahan Sheng Yang 0003 Vahid Yazdanpanah Sanaz Yeganefard Victoria Young Fatiha Zaïdi Chenyang Zhu 0001 Huibiao Zhu