Experiences using statecharts for a system requirements specification. - Nancy G. Leveson; Mats P. E. Heimdahl; Holly Hildreth; Jon Damon Reese; R. Ortega (IWSSD, 1991)

Software Requirements Analysis for Real-Time Process-Control Systems. - Matthew S. Jaffe; Nancy G. Leveson; Mats Per Erik Heimdahl; Bonnie E. Melhart (IEEE Trans. Software Eng., 1991)

Requirements Specification for Process-Control Systems. - Nancy G. Leveson; Mats Per Erik Heimdahl; Holly Hildreth; Jon Damon Reese (IEEE Trans. Software Eng., 1994)

Completeness and Consistency Analysis of State-Based Requirements. - Mats Per Erik Heimdahl; Nancy G. Leveson (ICSE, 1995)

Using PVS to analyze hierarchical state-based requirements for completeness and consistency. - Mats Per Erik Heimdahl; Barbara J. Czerny (HASE, 1996)

Experiences and Lessons from the Analysis of TCAS II. - Mats Per Erik Heimdahl (ISSTA, 1996)

Completeness and Consistency in Hierarchical State-Based Requirements. - Mats Per Erik Heimdahl; Nancy G. Leveson (IEEE Trans. Software Eng., 1996)

Reduction and Slicing of Hierarchical State Machines. - Mats Per Erik Heimdahl; Michael W. Whalen (ESEC / SIGSOFT FSE, 1997)

Verifying Communication Constraints in RSML Specifications. - Mats Per Erik Heimdahl (HASE, 1997)

Specification and Analysis of System Level Inter-Component Communication. - Mats Per Erik Heimdahl; Jeffrey M. Thompson (ICFEM, 1997)

Generating Code from Hierarchical State-Based Requirements. - Mats Per Erik Heimdahl; David J. Keenan (RE, 1997)

Software Requirements Specification and System Safety. - Mats Per Erik Heimdahl; Jon Damon Reese (RE, 1997)

A General Framework for Interconnecting Annotations of Software Systems. - Michael V. Stein; Mats Per Erik Heimdahl; John Riedl (COMPSAC, 1998)

On the Effectiveness of Slicing Hierarchical State Machines: A Case Study. - Mats Per Erik Heimdahl; Jeffrey M. Thompson; Michael W. Whalen (EUROMICRO, 1998)

Checking properties of safety critical specifications using efficient decision procedures. - David Y. W. Park; Jens U. Skakkebæk; Mats Per Erik Heimdahl; Barbara J. Czerny; David L. Dill (FMSP, 1998)

Automated Integrative Analysis of State-based Requirements. - Barbara J. Czerny; Mats Per Erik Heimdahl (ASE, 1998)

Formal Methods For Developing High Assurance Computer Systems: Working Group Report. - Mats Per Erik Heimdahl; Constance L. Heitmeyer (WIFT, 1998)

Specification and Analysis of Intercomponent Communication. - Mats Per Erik Heimdahl; Jeffrey M. Thompson; Barbara J. Czerny (Computer, 1998)

Designing Specification Languages for Process Control Systems: Lessons Learned and Steps to the Future. - Nancy G. Leveson; Mats Per Erik Heimdahl; Jon Damon Reese (ESEC / SIGSOFT FSE, 1999)

Specification-Based Prototyping for Embedded Systems. - Jeffrey M. Thompson; Mats Per Erik Heimdahl; Steven P. Miller (ESEC / SIGSOFT FSE, 1999)

Identifying Domain Axioms Using Binary Decision Diagrams. - Barbara J. Czerny; Mats Per Erik Heimdahl (HASE, 1999)

On the Requirements of High-Integrity Code Generation. - Michael W. Whalen; Mats Per Erik Heimdahl (HASE, 1999)

Enhancing Annotation Visibility for Software Inspection. - Michael V. Stein; Mats Per Erik Heimdahl; John Riedl (ASE, 1999)

An Approach to Automatic Code Generation for Safety-Critical Systems. - Michael W. Whalen; Mats Per Erik Heimdahl (ASE, 1999)

An Integrated Development Environment for Prototyping Safety Critical Systems. - Jeffrey M. Thompson; Mats Per Erik Heimdahl (IEEE International Workshop on Rapid System Prototyping, 1999)

Requirements Capture and Evaluation in Nimbus: The Light-Control Case Study. - Jeffrey M. Thompson; Michael W. Whalen; Mats Per Erik Heimdahl (J. Univers. Comput. Sci., 2000)

Specifying and Analysing System-Level Inter-Component Interfaces. - Mats Per Erik Heimdahl; Jeffrey M. Thompson (Requir. Eng., 2000)

On the analysis needs when verifying state-based software requirements: an experience report. - Mats Per Erik Heimdahl; Barbara J. Czerny (Sci. Comput. Program., 2000)

Coverage Based Test-Case Generation Using Model Checkers. - Sanjai Rayadurgam; Mats Per Erik Heimdahl (ECBS, 2001)

Test-Sequence Generation from Formal Requirement Models. - Sanjai Rayadurgam; Mats Per Erik Heimdahl (HASE, 2001)

Extending the Product Family Approach to Support n-Dimensional and Hierarchical Product Lines. - Jeffrey M. Thompson; Mats Per Erik Heimdahl (RE, 2001)

Automatic abstraction for model checking software systems with interrelated numeric constraints. - Yunja Choi; Sanjai Rayadurgam; Mats Per Erik Heimdahl (ESEC / SIGSOFT FSE, 2001)

Model Checking RSML-e Requirements. - Yunja Choi; Mats Per Erik Heimdahl (HASE, 2002)

Deviation Analysis Through Model Checking. - Mats Per Erik Heimdahl; Yunja Choi; Michael W. Whalen (ASE, 2002)

Guest Editor's Introduction. - Mats Per Erik Heimdahl (Autom. Softw. Eng., 2002)

Toward Automation for Model-Checking Requirements Specifications with Numeric Constraints. - Yunja Choi; Sanjai Rayadurgam; Mats Per Erik Heimdahl (Requir. Eng., 2002)

Auto-generating Test Sequences Using Model Checkers: A Case Study. - Mats Per Erik Heimdahl; Sanjai Rayadurgam; Willem Visser; George Devaraj; Jimin Gao (FATES, 2003)

Proving the Shalls. - Steven P. Miller; Alan C. Tribble; Mats Per Erik Heimdahl (FME, 2003)

Using PVS to Prove Properties of Systems Modelled in a Synchronous Dataflow Language. - Sanjai Rayadurgam; Anjali Joshi; Mats Per Erik Heimdahl (ICFEM, 2003)

Model Checking Software Requirement Specifications using Domain Reduction Abstraction. - Yunja Choi; Mats Per Erik Heimdahl (ASE, 2003)

NIMBUS: A Tool for Specification Centered Development. - Mats Per Erik Heimdahl; Michael W. Whalen; Jeffrey M. Thompson (RE, 2003)

On the Advantages of Approximate vs. Complete Verification: Bigger Models, Faster, Less Memory, Usually Accurate. - David Owen 002; Tim Menzies; Mats Per Erik Heimdahl; Jimin Gao (SEW, 2003)

Generating MC/DC Adequate Test Sequences Through Model Checking. - Sanjai Rayadurgam; Mats Per Erik Heimdahl (SEW, 2003)

Structuring product family requirements for n-dimensional and hierarchical product lines. - Jeffrey M. Thompson; Mats Per Erik Heimdahl (Requir. Eng., 2003)

Specification Test Coverage Adequacy Criteria = Specification Test Generation Inadequacy Criteria? - Mats Per Erik Heimdahl; George Devaraj; Robert Weber (HASE, 2004)

Combination Model Checking: Approach and a Case Study. - Yunja Choi; Mats Per Erik Heimdahl (ASE, 2004)

Test-Suite Reduction for Model Based Tests: Effects on Test Quality and Implications for Testing. - Mats Per Erik Heimdahl; George Devaraj (ASE, 2004)

Coverage-Directed Test Generation with Model Checkers: Challenges and Opportunities. - George Devaraj; Mats Per Erik Heimdahl; Donglin Liang (COMPSAC (1), 2005)

Model-Based Testing: Challenges Ahead. - Mats Per Erik Heimdahl (COMPSAC (1), 2005)

Model-Based Safety Analysis of Simulink Models Using SCADE Design Verifier. - Anjali Joshi; Mats Per Erik Heimdahl (SAFECOMP, 2005)

A Case for Specification Validation. - Mats Per Erik Heimdahl (VSTTE, 2005)

Deviation Analysis: A New Use of Model Checking. - Mats Per Erik Heimdahl; Yunja Choi; Michael W. Whalen (Autom. Softw. Eng., 2005)

Interaction Testing in Model-Based Development: Effect on Model-Coverage. - Renée C. Bryce; Ajitha Rajan; Mats Per Erik Heimdahl (APSEC, 2006)

On the Distribution of Property Violations in Formal Models: An Initial Study. - Jimin Gao; Mats Per Erik Heimdahl; David Owen 002; Tim Menzies (COMPSAC (1), 2006)

Coverage metrics for requirements-based testing. - Michael W. Whalen; Ajitha Rajan; Mats Per Erik Heimdahl; Steven P. Miller (ISSTA, 2006)

Proving the shalls. - Steven P. Miller; Alan C. Tribble; Michael W. Whalen; Mats Per Erik Heimdahl (Int. J. Softw. Tools Technol. Transf., 2006)

Flexible and Extensible Notations for Modeling Languages. - Jimin Gao; Mats Per Erik Heimdahl; Eric Van Wyk (FASE, 2007)

Behavioral Fault Modeling for Model-based Safety Analysis. - Anjali Joshi; Mats Per Erik Heimdahl (HASE, 2007)

Model Validation using Automatically Generated Requirements-Based Tests. - Ajitha Rajan; Michael W. Whalen; Mats Per Erik Heimdahl (HASE, 2007)

Safety and Software Intensive Systems: Challenges Old and New. - Mats Per Erik Heimdahl (FOSE, 2007)

On the effect of test-suite reduction on automatically generated model-based tests. - Mats Per Erik Heimdahl; George Devaraj (Autom. Softw. Eng., 2007)

Requirements Coverage as an Adequacy Measure for Conformance Testing. - Ajitha Rajan; Michael W. Whalen; Matt Staats; Mats Per Erik Heimdahl (ICFEM, 2008)

Partial Translation Verification for Untrusted Code-Generators. - Matthew Staats; Mats Per Erik Heimdahl (ICFEM, 2008)

The effect of program and model structure on mc/dc test adequacy coverage. - Ajitha Rajan; Michael W. Whalen; Mats Per Erik Heimdahl (ICSE, 2008)

ReqsCov: A Tool for Measuring Test-Adequacy over Requirements. - Matt Staats; Weijia Deng; Ajitha Rajan; Mats Per Erik Heimdahl; Kurt Woodham (ASE, 2008)

A Software Certification Consortium and its Top 9 Hurdles. - John Hatcliff; Mats Per Erik Heimdahl; Mark Lawford; T. S. E. Maibaum; Alan Wassyng; Fred L. Wurden (SafeCert@ETAPS, 2008)

Hardware Supported Flexible Monitoring: Early Results. - Antonia Zhai; Guojin He; Mats Per Erik Heimdahl (RV, 2009)

Flexibility in modeling languages and tools: a call to arms. - Eric Van Wyk; Mats Per Erik Heimdahl (Int. J. Softw. Tools Technol. Transf., 2009)

Coverage Metrics for Requirements-Based Testing: Evaluation of Effectiveness. - Matt Staats; Michael W. Whalen; Ajitha Rajan; Mats Per Erik Heimdahl (NASA Formal Methods, 2010)

Challenges in the regulatory approval of medical cyber-physical systems. - Oleg Sokolsky; Insup Lee 001; Mats Per Erik Heimdahl (EMSOFT, 2011)

Programs, tests, and oracles: the foundations of testing revisited. - Matt Staats; Michael W. Whalen; Mats Per Erik Heimdahl (ICSE, 2011)

Better testing through oracle selection. - Matt Staats; Michael W. Whalen; Mats Per Erik Heimdahl (ICSE, 2011)

Guest editorial: special issue on selected topics in automated software engineering - Specification mining and defect detection. - Mats Per Erik Heimdahl; Gabriele Taentzer (Autom. Softw. Eng., 2011)

On the Danger of Coverage Directed Test Case Generation. - Matt Staats; Gregory Gay 002; Michael W. Whalen; Mats Per Erik Heimdahl (FASE, 2012)

Automated oracle creation support, or: How I learned to stop worrying about fault propagation and love mutation testing. - Matt Staats; Gregory Gay 002; Mats Per Erik Heimdahl (ICSE, 2012)

Your what is my how: Why requirements and architectural design should be iterative. - Michael W. Whalen; Anitha Murugesan; Mats Per Erik Heimdahl (TwinPeaks@RE, 2012)

Trace Queries for Safety Requirements in High Assurance Systems. - Jane Cleland-Huang; Mats Per Erik Heimdahl; Jane Huffman Hayes; Robyn R. Lutz; Patrick Maeder (REFSQ, 2012)

Modeling and requirements on the physical side of cyber-physical systems. - Mats Per Erik Heimdahl; Lian Duan; Anitha Murugesan; Sanjai Rayadurgam (TwinPeaks@ICSE, 2013)

Modes, features, and state-based modeling for clarity and flexibility. - Anitha Murugesan; Sanjai Rayadurgam; Mats Per Erik Heimdahl (MiSE, 2013)

Observable modified Condition/Decision coverage. - Michael W. Whalen; Gregory Gay 002; Dongjiang You; Mats Per Erik Heimdahl; Matt Staats (ICSE, 2013)

Compositional verification of a medical device system. - Anitha Murugesan; Michael W. Whalen; Sanjai Rayadurgam; Mats Per Erik Heimdahl (HILT, 2013)

Your "What" Is My "How": Iteration and Hierarchy in System Design. - Michael W. Whalen; Andrew Gacek; Darren D. Cofer; Anitha Murugesan; Mats Per Erik Heimdahl; Sanjai Rayadurgam (IEEE Softw., 2013)

Reasoning About Confidence and Uncertainty in Assurance Cases: A Survey. - Lian Duan; Sanjai Rayadurgam; Mats Per Erik Heimdahl; Anaheed Ayoub; Oleg Sokolsky; Insup Lee 001 (FHIES/SEHC, 2014)

From Requirements to Code: Model Based Development of a Medical Cyber Physical System. - Anitha Murugesan; Mats Per Erik Heimdahl; Michael W. Whalen; Sanjai Rayadurgam; John Komp; Lian Duan; BaekGyu Kim; Oleg Sokolsky; Insup Lee 001 (FHIES/SEHC, 2014)

Linking abstract analysis to concrete design: A hierarchical approach to verify medical CPS safety. - Anitha Murugesan; Oleg Sokolsky; Sanjai Rayadurgam; Michael W. Whalen; Mats Per Erik Heimdahl; Insup Lee 001 (ICCPS, 2014)

Analysis and testing of PLEXIL plans. - Jason Biatek; Michael W. Whalen; Mats Per Erik Heimdahl; Sanjai Rayadurgam; Michael R. Lowry (FormaliSE, 2014)

Steering model-based oracles to admit real program behaviors. - Gregory Gay 002; Sanjai Rayadurgam; Mats Per Erik Heimdahl (ICSE Companion, 2014)

Moving the goalposts: coverage satisfaction is not enough. - Gregory Gay 002; Matt Staats; Michael W. Whalen; Mats Per Erik Heimdahl (SBST, 2014)

Exploring the twin peaks using probabilistic verification techniques. - Anitha Murugesan; Lu Feng 001; Mats Per Erik Heimdahl; Sanjai Rayadurgam; Michael W. Whalen; Insup Lee 001 (TwinPeaks, 2014)

Structuring simulink models for verification and reuse. - Michael W. Whalen; Anitha Murugesan; Sanjai Rayadurgam; Mats Per Erik Heimdahl (MiSE, 2014)

Improving the accuracy of oracle verdicts through automated model steering. - Gregory Gay 002; Sanjai Rayadurgam; Mats Per Erik Heimdahl (ASE, 2014)

A reference model for simulating agile processes. - Ian J. De Silva; Sanjai Rayadurgam; Mats Per Erik Heimdahl (ICSSP, 2015)

Efficient observability-based test generation by dynamic symbolic execution. - Dongjiang You; Sanjai Rayadurgam; Michael W. Whalen; Mats Per Erik Heimdahl; Gregory Gay 002 (ISSRE, 2015)

Executing Model-Based Tests on Platform-Specific Implementations (T). - Dongjiang You; Sanjai Rayadurgam; Mats Per Erik Heimdahl; John Komp; BaekGyu Kim; Oleg Sokolsky (ASE, 2015)

Hierarchical multi-formalism proofs of cyber-physical systems. - Michael W. Whalen; Sanjai Rayadurgam; Elaheh Ghassabani; Anitha Murugesan; Oleg Sokolsky; Mats Per Erik Heimdahl; Insup Lee 001 (MEMOCODE, 2015)

Are We There Yet? Determining the Adequacy of Formalized Requirements and Test Suites. - Anitha Murugesan; Michael W. Whalen; Neha Rungta; Oksana Tkachuk; Suzette Person; Mats Per Erik Heimdahl; Dongjiang You (NFM, 2015)

Representing Confidence in Assurance Case Evidence. - Lian Duan; Sanjai Rayadurgam; Mats Per Erik Heimdahl; Oleg Sokolsky; Insup Lee 001 (SAFECOMP Workshops, 2015)

Design Considerations for Modeling Modes in Cyber-Physical Systems. - Anitha Murugesan; Sanjai Rayadurgam; Michael W. Whalen; Mats Per Erik Heimdahl (IEEE Des. Test, 2015)

The Risks of Coverage-Directed Test Case Generation. - Gregory Gay 002; Matt Staats; Michael W. Whalen; Mats Per Erik Heimdahl (IEEE Trans. Software Eng., 2015)

Automated Oracle Data Selection Support. - Gregory Gay 002; Matt Staats; Michael W. Whalen; Mats Per Erik Heimdahl (IEEE Trans. Software Eng., 2015)

First Steps towards Exporting Education: Software Engineering Education Delivered Online to Professionals. - Kevin D. Wendt; Ken Reily; Mats Per Erik Heimdahl (CSEE&T, 2016)

Representation of Confidence in Assurance Cases Using the Beta Distribution. - Lian Duan; Sanjai Rayadurgam; Mats Per Erik Heimdahl; Oleg Sokolsky; Insup Lee 001 (HASE, 2016)

Complete Traceability for Requirements in Satisfaction Arguments. - Anitha Murugesan; Michael W. Whalen; Elaheh Ghassabani; Mats Per Erik Heimdahl (RE, 2016)

The Effect of Program and Model Structure on the Effectiveness of MC/DC Test Adequacy Coverage. - Gregory Gay 002; Ajitha Rajan; Matt Staats; Michael W. Whalen; Mats Per Erik Heimdahl (ACM Trans. Softw. Eng. Methodol., 2016)

Architectural Modeling and Analysis for Safety Engineering. - Danielle Stewart; Michael W. Whalen; Darren D. Cofer; Mats Per Erik Heimdahl (IMBSA, 2017)

Domain modeling for development process simulation. - Ian J. De Silva; Sanjai Rayadurgam; Mats Per Erik Heimdahl (ICSSP, 2017)

Toward Rigorous Object-Code Coverage Criteria. - Taejoon Byun; Vaibhav Sharma 001; Sanjai Rayadurgam; Stephen McCamant; Mats Per Erik Heimdahl (ISSRE, 2017)

Proof-based coverage metrics for formal verification. - Elaheh Ghassabani; Andrew Gacek; Michael W. Whalen; Mats Per Erik Heimdahl; Lucas G. Wagner (ASE, 2017)

Automated Steering of Model-Based Test Oracles to Admit Real Program Behaviors. - Gregory Gay 002; Sanjai Rayadurgam; Mats Per Erik Heimdahl (IEEE Trans. Software Eng., 2017)

Contract discovery from black-box components. - Vaibhav Sharma 001; Taejoon Byun; Stephen McCamant; Sanjai Rayadurgam; Mats Per Erik Heimdahl (WASPI@ESEC/SIGSOFT FSE, 2018)

Requirements Reference Models Revisited: Accommodating Hierarchy in System Design. - Anitha Murugesan; Sanjai Rayadurgam; Mats Per Erik Heimdahl (RE, 2019)

Black-Box Testing of Deep Neural Networks. - Taejoon Byun; Sanjai Rayadurgam; Mats P. E. Heimdahl (ISSRE, 2021)

Counterexample Guided Inductive Repair of Reactive Contracts. - Soha Hussein; Vaibhav Sharma 001; Stephen McCamant; Sanjai Rayadurgam; Mats Per Erik Heimdahl (ASE, 2021)

Composition of Fault Forests. - Danielle Stewart; Michael W. Whalen; Mats Per Erik Heimdahl; Jing Liu; Darren D. Cofer (SAFECOMP, 2021)

AADL-Based safety analysis using formal methods applied to aircraft digital systems. - Danielle Stewart; Jing Liu; Darren D. Cofer; Mats Per Erik Heimdahl; Michael W. Whalen; Michael Peterson (Reliab. Eng. Syst. Saf., 2021)

Inductive Validity Cores. - Elaheh Ghassabani; Michael W. Whalen; Andrew Gacek; Mats Per Erik Heimdahl (IEEE Trans. Software Eng., 2021)