Translating a VDM Model of a Medical Device into Kapture.

Leo Freitas Leonardo Freitas Newcastle University, UK University of York, UK https://www.ncl.ac.uk/computing/staff/profile/leofreitas.html https://orcid.org/0000-0001-9661-563X

Joe Hare Leo Freitas Ken Pierce Translating a VDM Model of a Medical Device into Kapture. 2025 June abs/2506.09636 CoRR https://doi.org/10.48550/arXiv.2506.09636 db/journals/corr/corr2506.html#abs-2506-09636 streams/journals/corr

John S. Fitzgerald Peter Gorm Larsen Ken Pierce Leo Freitas Nick Battle Verification Technology for VDM: Craft and Automation. 109-130 2024 The Practice of Formal Methods (I) https://doi.org/10.1007/978-3-031-66676-6_6 series/lncs/14780 db/series/lncs/lncs14780.html#FitzgeraldLPFB24 Leo Freitas Aaron John Buhagiar William E. Scott III SmartAudits: Applying Timebands to a Medical Device. 131-152 2024 The Practice of Formal Methods (I) https://doi.org/10.1007/978-3-031-66676-6_7 series/lncs/14780 db/series/lncs/lncs14780.html#FreitasBS24

Hugo Daniel Macedo Ken Pierce Leo Freitas Proceedings of the 22nd International Overture Workshop. 2024 abs/2410.00071 CoRR https://doi.org/10.48550/arXiv.2410.00071 db/journals/corr/corr2410.html#abs-2410-00071 streams/journals/corr

Leo Freitas Aaron John Buhagiar Specification-based CSV Support in VDM. 2023 abs/2303.15984 CoRR https://doi.org/10.48550/arXiv.2303.15984 db/journals/corr/corr2303.html#abs-2303-15984

Leo Freitas Peter Gorm Larsen VDM recursive functions in Isabelle/HOL. 2023 abs/2303.17457 CoRR https://doi.org/10.48550/arXiv.2303.17457 db/journals/corr/corr2303.html#abs-2303-17457

Leo Freitas Topologically sorting VDM-SL definitions for Isabelle/HOL translation. 2023 abs/2304.15006 CoRR https://doi.org/10.48550/arXiv.2304.15006 db/journals/corr/corr2304.html#abs-2304-15006

Leo Freitas International System of Quantities library in VDM. 2023 abs/2311.09704 CoRR https://doi.org/10.48550/arXiv.2311.09704 db/journals/corr/corr2311.html#abs-2311-09704

Aaron John Buhagiar Leo Freitas William E. Scott III Peter Gorm Larsen Digital Twins for Organ Preservation Devices. 22-36 2022 ISoLA (4) https://doi.org/10.1007/978-3-031-19762-8_3 conf/isola/2022-4 db/conf/isola/isola2022-4.html#BuhagiarFSL22

Leo Freitas William E. Scott III Patrick Degenaar Medicine-by-wire: Practical considerations on formal techniques for dependable medical systems. 102545 2020 200 Sci. Comput. Program. https://doi.org/10.1016/j.scico.2020.102545 db/journals/scp/scp200.html#FreitasSD20

Abdulaziz Almehrej Leo Freitas Paolo Modesti Account and Transaction Protocol of the Open Banking Standard. 230-236 2020 ABZ https://doi.org/10.1007/978-3-030-48077-6_16 conf/asm/2020 db/conf/asm/abz2020.html#AlmehrejFM20

Abdulaziz Almehrej Leo Freitas Paolo Modesti Security Analysis of the Open Banking Account and Transaction API Protocol. 2020 abs/2003.12776 CoRR https://arxiv.org/abs/2003.12776 db/journals/corr/corr2003.html#abs-2003-12776

Michael D. Harrison Leo Freitas Michael J. Drinnan José Creissac Campos Paolo Masci 0001 Costanzo di Maria Michael Whitaker Formal techniques in the safety analysis of software components of a new dialysis machine. 17-34 2019 175 Sci. Comput. Program. https://doi.org/10.1016/j.scico.2019.02.003 db/journals/scp/scp175.html#HarrisonFDCMMW19

Leo Freitas VDM at Large: Modelling the EMV® 2^nd 2 nd Generation Kernel. 109-125 2018 SBMF https://doi.org/10.1007/978-3-030-03044-5_8 conf/sbmf/2018 db/conf/sbmf/sbmf2018.html#Freitas18 Leo Freitas Paolo Modesti Martin Emms A Methodology for Protocol Verification Applied to EMV® 1. 180-197 2018 SBMF https://doi.org/10.1007/978-3-030-03044-5_12 conf/sbmf/2018 db/conf/sbmf/sbmf2018.html#FreitasME18 Michael D. Harrison Michael J. Drinnan José Creissac Campos Paolo Masci 0001 Leo Freitas Costanzo di Maria Michael Whitaker Safety Analysis of Software Components of a Dialysis Machine Using Model Checking. 137-154 2017 FACS https://doi.org/10.1007/978-3-319-68034-7_8 conf/facs2/2017 db/conf/facs2/facs2017.html#HarrisonDCMFMW17 Leo Freitas James Baxter 0001 Ana Cavalcanti 0001 Andy J. Wellings Modelling and Verifying a Priority Scheduler for an SCJ Runtime Environment. 63-78 2016 IFM https://doi.org/10.1007/978-3-319-33693-0_5 conf/ifm/2016 db/conf/ifm/ifm2016.html#FreitasBCW16 Frank Zeyda Simon Foster 0001 Leo Freitas An Axiomatic Value Model for Isabelle/UTP. 155-175 2016 UTP https://doi.org/10.1007/978-3-319-52228-9_8 conf/utp/2016 db/conf/utp/utp2016.html#ZeydaFF16 James Baxter 0001 Ana Cavalcanti 0001 Andy J. Wellings Leo Freitas Safety-Critical Java Virtual Machine Services. 7:1-7:10 2015 JTRES https://doi.org/10.1145/2822304.2822307 conf/jtres/2015 db/conf/jtres/jtres2015.html#BaxterCWF15

Leo Freitas Paul Watson 0001 Formalizing workflows partitioning over federated clouds: multi-level security and costs. 881-906 2014 91 Int. J. Comput. Math. 5 https://doi.org/10.1080/00207160.2013.820282 db/journals/ijcm/ijcm91.html#FreitasW14

Martin Emms Budi Arief Leo Freitas Joseph Hannon Aad P. A. van Moorsel Harvesting High Value Foreign Currency Transactions from EMV Contactless Credit Cards Without the PIN. 716-726 2014 CCS https://doi.org/10.1145/2660267.2660312 conf/ccs/2014 db/conf/ccs/ccs2014.html#EmmsAFHM14 Leo Freitas Iain Whiteside Proof Patterns for Formal Methods. 279-295 2014 FM https://doi.org/10.1007/978-3-319-06410-9_20 conf/fm/2014 db/conf/fm/fm2014.html#FreitasW14 Leo Freitas Cliff B. Jones Andrius Velykis Iain Whiteside A Model for Capturing and Replaying Proof Strategies. 183-199 2014 VSTTE https://doi.org/10.1007/978-3-319-12154-3_12 conf/vstte/2014 db/conf/vstte/vstte2014.html#FreitasJVW14 Leo Freitas Cliff B. Jones Andrius Velykis Can a system learn from interactive proofs? 124-139 2014 HOWARD-60 https://doi.org/10.29007/s478 conf/birthday/2014howard db/conf/birthday/howard2014.html#FreitasJV14 Cliff B. Jones Leo Freitas Andrius Velykis Ours Is to Reason Why. 227-243 2013 Theories of Programming and Formal Methods https://doi.org/10.1007/978-3-642-39698-4_14 conf/birthday/2013he db/conf/birthday/he2013.html#JonesFV13 Leo Freitas Paul Watson 0001 Formalising Workflows Partitioning over Federated Clouds: Multi-level Security and Costs. 219-226 2012 SERVICES https://doi.org/10.1109/SERVICES.2012.75 https://doi.ieeecomputersociety.org/10.1109/SERVICES.2012.75 conf/services/2012 db/conf/services/services2012.html#FreitasW12

Leo Freitas John P. McDermott Formal methods for security in the Xenon hypervisor. 463-489 2011 13 Int. J. Softw. Tools Technol. Transf. 5 https://doi.org/10.1007/s10009-011-0195-9 https://www.wikidata.org/entity/Q113445073 db/journals/sttt/sttt13.html#FreitasM11

John P. McDermott Leo Freitas Using formal methods for security in the Xenon project. 67 2010 CSIIRW https://doi.org/10.1145/1852666.1852742 conf/csiirw/2010 db/conf/csiirw/csiirw2010.html#McDermottF10 Andrius Velykis Leo Freitas Formal Modelling of Separation Kernel Components. 230-244 2010 ICTAC https://doi.org/10.1007/978-3-642-14808-8_16 conf/ictac/2010 db/conf/ictac/ictac2010.html#VelykisF10

Leo Freitas Jim Woodcock 0001 FDR Explorer. 133-154 2009 21 Formal Aspects Comput. 1-2 https://doi.org/10.1007/s00165-008-0074-7 db/journals/fac/fac21.html#FreitasW09

Leo Freitas Jim Woodcock 0001 A Chain Datatype in Z. 357-374 2009 3 Int. J. Softw. Informatics 2-3 http://www.ijsi.org/ch/reader/view_abstract.aspx?file_no=357&flag=1 db/journals/ijsi/ijsi3.html#FreitasW09

Leo Freitas Jim Woodcock 0001 Yichi Zhang Verifying the CICS File Control API with Z/Eves: An experiment in the verified software repository. 197-218 2009 74 Sci. Comput. Program. 4 https://doi.org/10.1016/j.scico.2008.09.012 https://www.wikidata.org/entity/Q126190056 db/journals/scp/scp74.html#FreitasWZ09

Andrew Butterfield Leo Freitas Jim Woodcock 0001 Mechanising a formal model of flash memory. 219-237 2009 74 Sci. Comput. Program. 4 https://doi.org/10.1016/j.scico.2008.09.014 db/journals/scp/scp74.html#ButterfieldFW09

Leo Freitas Jim Woodcock 0001 Zheng Fu POSIX file store in Z/Eves: An experiment in the verified software repository. 238-257 2009 74 Sci. Comput. Program. 4 https://doi.org/10.1016/j.scico.2008.08.001 db/journals/scp/scp74.html#FreitasWF09

Leo Freitas Mechanising Data-Types for Kernel Design in Z. 186-203 2009 SBMF https://doi.org/10.1007/978-3-642-10452-7_13 conf/sbmf/2009 db/conf/sbmf/sbmf2009.html#Freitas09

Leo Freitas Jim Woodcock 0001 Mechanising Mondex with Z/Eves. 117-139 2008 20 Formal Aspects Comput. 1 https://doi.org/10.1007/s00165-007-0059-y db/journals/fac/fac20.html#FreitasW08

John P. McDermott Leo Freitas A formal security policy for xenon. 43-52 2008 FMSE https://doi.org/10.1145/1456396.1456401 conf/ccs/2008fmse db/conf/ccs/fmse2008.html#McDermottF08 Jim Woodcock 0001 Leo Freitas Linking VDM and Z. 143-152 2008 ICECCS https://doi.org/10.1109/ICECCS.2008.36 https://doi.ieeecomputersociety.org/10.1109/ICECCS.2008.36 conf/iceccs/2008 db/conf/iceccs/iceccs2008.html#WoodcockF08 Leo Freitas Jim Woodcock 0001 Andrew Butterfield POSIX and the Verification Grand Challenge: A Roadmap. 153-162 2008 ICECCS https://doi.org/10.1109/ICECCS.2008.35 https://doi.ieeecomputersociety.org/10.1109/ICECCS.2008.35 conf/iceccs/2008 db/conf/iceccs/iceccs2008.html#FreitasWB08 Hugh Anderson Gabriel Ciobanu Leo Freitas UTP and Temporal Logic Model Checking. 22-41 2008 UTP https://doi.org/10.1007/978-3-642-14521-6_3 https://www.wikidata.org/entity/Q57936888 conf/utp/2008 db/conf/utp/utp2008.html#AndersonCF08 Leo Freitas Jim Woodcock 0001 Proving Theorems About JML Classes. 255-279 2007 conf/birthday/2007bz Formal Methods and Hybrid Real-Time Systems https://doi.org/10.1007/978-3-540-75221-9_11 db/conf/birthday/BjornerZhou2007.html#FreitasW07 Leo Freitas Zheng Fu Jim Woodcock 0001 POSIX file store in Z/Eves: an experiment in the verified software repository. 3-14 2007 conf/iceccs/2007 ICECCS https://doi.org/10.1109/ICECCS.2007.36 https://doi.ieeecomputersociety.org/10.1109/ICECCS.2007.36 db/conf/iceccs/iceccs2007.html#FreitasFW07 Leo Freitas Konstantinos Mokos Jim Woodcock 0001 Verifying the CICS File Control API with Z/Eves: An Experiment in the Verified Software Repository. 290-298 2007 conf/iceccs/2007 ICECCS https://doi.org/10.1109/ICECCS.2007.45 https://doi.ieeecomputersociety.org/10.1109/ICECCS.2007.45 db/conf/iceccs/iceccs2007.html#FreitasMW07

Leo Freitas Jim Woodcock 0001 Ana Cavalcanti 0001 State-rich model checking. 49-64 2006 2 Innov. Syst. Softw. Eng. 1 https://doi.org/10.1007/s11334-006-0021-9 db/journals/isse/isse2.html#FreitasWC06

Leo Freitas Ana Cavalcanti 0001 Jim Woodcock 0001 Taking Our Own Medicine: Applying the Refinement Calculus to State-Rich Refinement Model Checking. 697-716 2006 conf/icfem/2006 ICFEM https://doi.org/10.1007/11901433_38 db/conf/icfem/icfem2006.html#FreitasCW06 Jim Woodcock 0001 Leo Freitas Z/Eves and the Mondex Electronic Purse. 15-34 2006 conf/ictac/2006 ICTAC https://doi.org/10.1007/11921240_2 db/conf/ictac/ictac2006.html#WoodcockF06 Leo Freitas Jim Woodcock 0001 FDR Explorer. 19-34 2006 conf/refine/2006 Refine@ICFEM https://doi.org/10.1016/j.entcs.2006.08.042 db/journals/entcs/entcs187.html#FreitasW07 Leonardo Freitas Model checking Circus. 2005 University of York, UK https://ethos.bl.uk/OrderDetails.do?uin=uk.bl.ethos.425409 British Library, EThOS Jim Woodcock 0001 Ana Cavalcanti 0001 Leonardo Freitas Operational Semantics for Model Checking Circus. 237-252 2005 conf/fm/2005 FM https://doi.org/10.1007/11526841_17 db/conf/fm/fm2005.html#WoodcockCF05 Tim Miller 0001 Leo Freitas Petra Malik Mark Utting CZT Support for Z Extensions. 227-245 2005 conf/ifm/2005 IFM https://doi.org/10.1007/11589976_14 db/conf/ifm/ifm2005.html#MillerFMU05 Leonardo Freitas Augusto Sampaio 0001 Ana Cavalcanti 0001 JACK: A Framework for Process Algebra Implementation in Java. 98-113 2002 SBES https://doi.org/10.5753/sbes.2002.23941 conf/sbes/2002 db/conf/sbes/sbes2002.html#FreitasS002 Abdulaziz Almehrej Hugh Anderson Budi Arief Nick Battle James Baxter 0001 Aaron John Buhagiar Andrew Butterfield José Creissac Campos Ana Cavalcanti 0001 Gabriel Ciobanu Patrick Degenaar Michael J. Drinnan Martin Emms John S. Fitzgerald Simon Foster 0001 Zheng Fu Joseph Hannon Joe Hare Michael D. Harrison Cliff B. Jones Peter Gorm Larsen Hugo Daniel Macedo Petra Malik Costanzo di Maria Paolo Masci 0001 John P. McDermott Tim Miller 0001 Paolo Modesti Konstantinos Mokos Aad P. A. van Moorsel Ken Pierce Augusto Sampaio 0001 William E. Scott III Mark Utting Andrius Velykis Paul Watson 0001 Andy J. Wellings Michael Whitaker Iain Whiteside Jim Woodcock 0001 Frank Zeyda Yichi Zhang