@phdthesis{Aarts09,
	author =	{F. Aarts},
	year =		2009,
  	month =		nov,
	type =		{Master Thesis},
	school =	{Radboud University Nijmegen and Uppsala University},
	title =		{Inference and Abstraction of Communication Protocols},
}

@CONFERENCE{S.Stuijk06,
  author = {S. Stuijk and M.C.W. Geilen and T. Basten},
  title = {{SDF3: SDF For Free}},
  booktitle = {Application of Concurrency to System Design, 6th International Conference,
    ACSD 2006},
  year = {2006},
  pages = {276-278},
  month = {June},
  publisher = {IEEE CS Press},
  file = {SDF3 For Free:acsd06_sdf3.pdf:PDF},
  owner = {yyang},
  timestamp = {2008.05.05}
}

@CONFERENCE{A.H.Ghamarian06,
  author = {A.H. Ghamarian and M.C.W. Geilen and S. Stuijk and T. Basten and A.J.M. Moonen
    and M.J.G. Bekooij and B.D. Theelen and M.R. Mousavi},
  title = {Throughput Analysis of Synchronous Data Flow Graphs},
  booktitle = {Application of Concurrency to System Design, 6th International Conference,
    ACSD 2006},
  year = {2006},
  pages = {25-34},
  month = {June},
  publisher = {IEEE CS Press},
  file = {:acsd06_throughput.pdf:PDF},
  owner = {yyang},
  timestamp = {2008.05.05}
}

@article{AL91,
	author =	{M. Abadi and L. Lamport},
	year =		1991,
	journal =	tcs,
	volume =	82,
	number =	2,
	pages =		{253--284},
	title =		{The Existence of Refinement Mappings}
}

@inproceedings{AL92,
	author =	{M. Abadi and L. Lamport},
	crossref =	{REXrealtime},
	pages =		{1--27},
	title =		{An Old-Fashioned Recipe for Real Time},
	other =		{Full version available as Research Report 91,
			Digital Systems Research Center, October 1992}
}

@article{AL93,
	author =	{M. Abadi and L. Lamport},
	year =		1993,
	journal =	toplas,
	number =	15,
	volume =	1,
	pages =		{73--132},
	title =		{Composing Specifications}
}

@article{AL94,
     author =       "M. Abadi and L. Lamport",
     title =        "An Old-Fashioned Recipe for Real Time",
     pages =        "1543--1571",
     journal =      toplas,
     year =         "1994",
     month =        sep,
     volume =       "16",
     number =       "5",
}

@misc{ALM94,
	author =	{M. Abadi and L. Lamport and S. Merz},
	year =		1994,
	month =		aug,
	title =		{The {D}agstuhl Problem -- A {TLA+} Solution},
	note =		{Available through URL
{\tt http://www.research.digital.com/SRC/perso\-nal/Leslie\_Lamport/dagstuhl/dagstuhl.html}}
}

@article{AAM06,
  author    = {Y. Abdedda\"{\i}m and E. Asarin and O. Maler},
  title     = {Scheduling with timed automata},
  journal   = {Theor. Comput. Sci.},
  volume    = {354},
  number    = {2},
  year      = {2006},
  pages     = {272-300}
}

@misc{BL94,
	author =	{M. Broy and L. Lamport},
	year =		1994,
	month =		aug,
	title =		{Specification Problem},
	note =		{Available through the URL {\tt http://www.research.digital.com/SRC/personal/Leslie\_Lamport/dagstuhl/all.html}}
}

@inproceedings{BL96,
	author =	{M. Broy and L. Lamport},
	booktitle =	{Proceedings Dagstuhl-Seminar on the
				 RPC-Memory Specification Problem},
	year =		1996,
	publisher =	springer,
	title =		{Specification Problem},
	series =	lncs,
	note =		{To appear. Available through the URL {\tt http://www.research.digital.com/SRC/ personal/Leslie\_Lamport/dagstuhl/all.html}}
}

@techreport{Ab81,
	author =	{S. Abramsky},
	year =		1981,
	institution =	{Computer Systems Laboratory, Queen Mary College},
	type =		{Report},
	number =	290,
	title =		{Eliminating local non-determinism:
				 a new semantics for {CCS}}
}

@article{Ab87,
	author =	{S. Abramsky},
	year =		1987,
	journal =	tcs,
	pages =		{225--241},
	title =		{Observation equivalence as a testing equivalence},
	volume =	53
}

@phdthesis{Ab87a,
	author =	{S. Abramsky},
	year =		1987,
	school =	{University of London},
	title =		{Domain Theory and the Logic of Observable Properties}
}

@inproceedings{Ab89,
	author =	{S. Abramsky},
	year =		1989,
	title =		{The lazy lambda-calculus},
	booktitle =	{Research Topics in Functional Programming},
	editor =	{D. Turner},
	pages =		{65-116},
	publisher =	addison
}

@InCollection{abramsky94,
  author =      {S. Abramsky and A. Jung},
  booktitle =   {Handbook of Logic in Computer Science},
  title =       {Domain Theory},
  publisher =   {Clarendon Press},
  pages =       {1--168},
  year =        1994,
  editor =      {S. Abramsky and D. M. Gabbay and T. S. E. Maibaum},
  volume =      3
}

@techreport{AO90,
	author =	{S. Abramsky and L. Ong},
	year =		1989,
	institution =	{Department of Computing, Imperial College},
	type =		{Report},
	note =		{To appear in {\em Information and Computation}},
	title =		{Full Abstraction in the Lazy Lambda Calculus}
}

@techreport{AV90,
	author =	{S. Abramsky and S. Vickers},
	year =		1990,
	institution =	{Department of Computing, Imperial College},
	type =		{Report},
	number =	{DOC 90/1},
	title =		{Quantales, observational logic, and process semantics}
}

@techreport{Ac90,
	author =	{L. Aceto},
	address =	{Brighton},
	year =		1990,
	institution =	{Computer Science, University of Sussex},
	type =		{Report},
	number =	{3/90},
	title =		{A theory of testing for {ACP}}
}

@book{Ac92a,
        author =        {L. Aceto},
        year =          1992,
        publisher =     cup,
        series =        {Distinguished Dissertations in Computer Science},
        title =         {Action-refinement in process algebras}
}

@inproceedings{Ac94,
        author =        {L. Aceto},
        title =         {Deriving Complete Inference Systems for a Class of
                         {GSOS} Languages Generating Regular Behaviours},
        crossref =      {CONCUR94},
        pages =         {449--464}
}

@inproceedings{ABV92,
	author =	{L. Aceto and B. Bloom and F.W. Vaandrager},
	title =		{Turning {SOS} Rules into Equations},
	crossref =	{LICS7},
	pages =		{113--124}
}

@article{ABV94,
	author =	{L. Aceto and B. Bloom and F.W. Vaandrager},
	title =		{Turning {SOS} Rules into Equations},
	year =		1994,
	month =		may,
	journal =	{LICS'92 Special Issue of Information and Computation},
	volume =	111,
	number =	1,
	pages =		{1--52}
}

@inproceedings{ADF87,
	author =	{L. Aceto and De Nicola, R. and A. Fantechi},
	booktitle =	{Proceedings Advanced School on Mathematical Models for
				 the Semantics of Parallelism, 1986},
	year =		1987,
	editor =	{M. Venturini Zilli},
	publisher =	springer,
	series =	lncs,
	volume =	280,
	pages =		{1--20},
	title =		{Testing equivalences for event structures}
}

@inproceedings{AH89,
	author =	{L. Aceto and M. Hennessy},
	crossref =	{LICS4},
	pages =		{138--145},
	title =		{Towards action-refinement in process algebras},
	note = 		{Full version to appear in {\em Information and Computation}}
}

@techreport{AH90,
	author =	{L. Aceto and M. Hennessy},
	address =	{Brighton},
	year =		1990,
	type =		{Report},
	institution =	{Computer Science, University of Sussex},
	number =	{6/90},
	title =		{Adding Action Refinement to a Finite Process Algebra}
}

@article{AH92,
	author =	{L. Aceto and M. Hennessy},
	year =		1992,
	month =		jan,
	journal =	jacm,
	volume = 	39,
	number =	1,
	pages =		{147--187},
	title =		{Termination, deadlock, and divergence}
}

@techreport{AI94,
        author =        {L. Aceto and A. Ing\'{o}lfsd\'{o}ttir},
        title =       	{{CPO} Models for {GSOS} Languages ---
                    		{Part I}: {Compact GSOS} Languages},
        institution = 	{BRICS (Basic Research in Computer Science,
                         Centre of the Danish National Research Foundation)},
        year =        	1994,
        type =        	{Research Report},
        number =      	{RS-94-40},
        address =     	{Department of Mathematics and Computer Science,
                       		Aalborg University},
        month =    	dec,
        note =     	{An extended abstract of the paper will appear in:
                    	{\em Proceedings of CAAP~'95}, LNCS, 1995}
}

@techreport{AJ94,
        author =        {L. Aceto and A.S.A. Jeffrey},
        address =       {Department of Mathematics and Computer Science,
                         	Aalborg University},
        year =          1994,
        institution =   {BRICS (Basic Research in Computer Science,
                         Centre of the Danish National Research Foundation)},
        type =          {Report},
        number =        {RS--94--43},
        note =          {To appear in {\em Theoretical Computer Science}},
        title =         {A Complete Axiomatization of Timed Bisimulation for
                         a Class of Timed Regular Behaviours
                         {(Revised Version)}}
}

@book{Ac88,
	author =	{P. Aczel},
	year =		1988,
	publisher =	{Stanford University},
	series =	{CSLI Lecture Notes},
	volume =	14,
	title =		{Non-well-founded Sets}
}

@mastersthesis{Agg94,
	author=		{S. Aggarwal},
	school =	miteecs,
	title=		{Time Optimal Self-Stabilizing Spanning Tree
			Algorithms},
	month=		may,
	year=		1994,
	note =		{Available as Technical Report MIT/LCS/TR-632}
}

@article{ADLU91,
        author =        {A.V. Aho and A.T. Dahbura and D. Lee and
                         M.\"{U}. Uyar},
        year =          1991,
        journal =       ieeecomm,
        volume =        39,
        number =        11,
        pages =         {1604--1615},
        title =         {An optimization technique for protocol conformance
                         test generation based on {UIO} sequences and {R}ural
                         {C}hinese {P}ostman {T}ours}
}


@book{AHU74,
	author =	{A.V. Aho and J.E. Hopcroft and J.D. Ullman},
	year =		1974,
	publisher =	addison,
	title =		{The design and analysis of computer algorithms}
}

@techreport{AkBa90,
	author =	{G.J. Akkerman and J.C.M. Baeten},
	year =		1990,
	type =		{Report},
	institution =	{Programming Research Group, University of Amsterdam},
	number =	{P9006},
	title =		{Term Rewriting Analysis in Process Algebra}
}


@inproceedings{AHIMZV09,
  	author    = {I. AlAttili and F. Houben and G. Igna and S. Michels and F. Zhu and F.W. Vaandrager},
  	title     = {Adaptive Scheduling of Data Paths using {Uppaal Tiga}},
  	year      = {2009},
  	booktitle = {Proceedings First Workshop on Quantitative Formal Methods: Theory and Applications (QFM'09)},
  	series    = {Electronic Proceedings in Theoretical Computer Science},
  	volume    = {13},
        pages	  = {1-12},
  	editor    = {S. Andova et.al},
  	funding   = {OCTOPUS, QUASIMODO D3.4, D3.5, D5.7},
        category  = {wet - artikel in bundel - proceedings},
        url       = {http://www.mbsd.cs.ru.nl/publications/papers/fvaan/TigaOce/},
        doi	  = {http://dx.doi.org/10.4204/EPTCS%2E13%2E1}
}

@TechReport{albert02,
  author =       {Sarah Albert},
  title =        {CYBERNETIX Case Study -- Informal description},
  institution =  {Cybern{\'e}tix - LIF},
  year =         {2002},
  note =	 {Available through URL {\tt
                  http://ametist.cs.utwente.nl}},
  ABSTRACT =     {This paper is a basic presentation of the first case
                  study proposed by Cyberntix. The aim is to give a
                  first idea of the system, presenting the objectives,
                  the characteristics of the system and the
                  constraints and to present the questions concerning
                  this case study and the challenges to the different
                  partners.},
  TASKS =        {3.1.1},
  funding =      {purely funded by AMETIST}
}

@article{AS85,
	author =	{B. Alpern and F.B. Schneider},
	title =		{Defining liveness},
	year =		1985,
	journal =	ipl,
	volume =	21,
	pages =		{181--185}
}

@phdthesis{Alu91,
	author =	{R. Alur},
	year =		1991,
	school =	{Dept. of Computer Science, Stanford University},
	title  =	{Techniques for Automatic Verification of
				 Real-time Systems}
}

@incollection{Alu98,
	author =	{R. Alur},
	booktitle =	{NATO-ASI Summer School on Verification of
				 Digital and Hybrid Systems},
	year =		1998,
	publisher =	springer,
	title =		{Timed Automata}
}

@inproceedings{ACD90,
	title =		{Model-checking for real-time systems},
	author =	{R. Alur and C. Courcoubetis and D.L. Dill},
	crossref =	{LICS5},
	pages=		{414--425}
}

@article{ACD93,
	author =	{R. Alur and C. Courcoubetis and D.L. Dill},
	year =		1993,
	journal =	iandcomp,
	volume =	104,
	pages =		{2--34},
	title =		{Model checking in dense real time}
}

@inproceedings{AlurEtAl92,
	author =	{R. Alur and C. Courcoubetis and N. Halbwachs and
			D. Dill and H. Wong-Toi},
	crossref =	{CONCUR92},
	pages =		{340--354},
	title =		{Minimization of Timed Transition Systems}
}

@article{AlurEtAl95,
	author =	{R. Alur and C. Courcoubetis and N. Halbwachs and
			T.A. Henzinger and P.-H. Ho and X. Nicollin and
			A. Olivero and J.Sifakis and S. Yovine},
	year =		1995,
	journal =	tcs,
	volume =	138,
	pages =		{3--34},
	title =		{The algorithmic analysis of hybrid systems}
}

@inproceedings{ACH94,
        author=		"R. Alur and C. Courcoubetis and T.A. Henzinger",
        title=		"The observational power of clocks",
        crossref =      {CONCUR94},
        pages=		"162--177"
}

@inproceedings{ACHH93,
	title =		{Hybrid automata: an algorithmic approach to
			the specification and verification of hybrid systems},
	author =	{R. Alur and C. Courcoubetis and T.A. Henzinger
				and P.-H. Ho},
	crossref =	{Hybrid93},
	pages =		{209--229}
}


@inproceedings{ACY95,
        author =        {R. Alur and C. Courcoubetis and M. Yannakakis},
        booktitle =     stoc27,
        publisher =     stocpub,
        year =          1995,
        pages =         {363--372},
        title =         {Distinguishing tests for nondeterministic and
                         probabilistic machines}
}


@article{ADI06,
	author =	{R. Alur and T. Dang and F. Ivancic},
	year =		2006,
	journal =	{ACM Transactions on Embedded Computing Systems},
	volume =	5,
	number =	1,
	month =		{February},
	pages =		{152--199},
	title =		{Predicate Abstraction for Reachability Analysis of Hybrid Systems}
}

@article{AlurIKY95,
  author    = {R. Alur and A. Itai and R.P. Kurshan and M. Yannakakis},
  title     = {Timing Verification by Successive Approximation},
  journal   = {Inf. Comput.},
  volume    = {118},
  number    = {1},
  year      = {1995},
  pages     = {142-157}
}

@inproceedings{AD90,
	author =	{R. Alur and D.L. Dill},
	crossref =	{ICALP17},
	pages =		{322--335},
	title =		{Automata for modeling real-time systems}
}

@inproceedings{AD92,
	author =	{R. Alur and D.L. Dill},
	crossref =	{REXrealtime},
	pages =		{45--73},
	title =		{The Theory of Timed Automata}
}

@article{AD94,
	author=		"R. Alur and D.L. Dill",
	title=		"A theory of timed automata",
	journal=	{Theoretical Computer Science},
	year=		1994,
	volume=		126,
	pages=		"183--235"
}

@inproceedings{AFH91,
	title =		{The benefits of relaxing punctuality},
	author =	{R. Alur and T. Feder and T.A. Henzinger},
	crossref =	{PODC10},
	pages=		{139--152}
}

@inproceedings{AGLS01,
	author =	{R. Alur and R. Grosu and I. Lee and O. Sokolsky},
	title =		{Compositional refinement of hierarchical hybrid
					systems},
	crossref =	{Hybrid01},
	pages =		{33--48}
}

@inproceedings{AlH89,
        author="R. Alur and T.A. Henzinger",
        title="A really temporal logic",
        booktitle="Proceedings of the 30th Annual Symposium on
                Foundations of Computer Science",
        publisher="IEEE Computer Society Press",
        year="1989",
        pages="164--169"
}

@inproceedings{AlH92,
	author =	{R. Alur and T.A. Henzinger},
	crossref =	{REXrealtime},
	pages =		{74--106},
	title =		{Logics and Models of Real Time: a Survey}
}

@inproceedings{AlH92a,
        author="R. Alur and T.A. Henzinger",
        title="Back to the future: towards a theory of timed regular
                languages",
        booktitle="Proceedings of the 33rd Annual Symposium on
                Foundations of Computer Science",
        publisher="IEEE Computer Society Press",
        year="1992",
        pages="177--186"
}

@inproceedings{AlH93,
	author =	{R. Alur and T.A. Henzinger},
	crossref =	{AMASTrealtime},
	title =		{Real-time System $=$ Discrete System $+$
			Clock Variables},
	pages =		{1--29}
}

@article{AlH93a,
        author="R. Alur and T.A. Henzinger",
        title="Real-time logics: complexity and expressiveness",
        journal="Information and Computation",
        volume="104",
        number="1",
        year="1993",
        pages="35--77"
}

@article{AlH94,
        author="R. Alur and T.A. Henzinger",
        title="A really temporal logic",
        journal="Journal of the ACM",
        volume="41",
        number="1",
        year="1994",
        pages="181--204"
}

@inproceedings{AlH97,
        author="R. Alur and T.A. Henzinger",
	year =		1997,
	title =		{Modularity for timed and hybrid systems},
	booktitle =	{Proceedings of the Ninth International
			 Conference on Concurrency Theory},
	pages =		{74-88},
	publisher =	springer,
	series =	lncs,
	volume =	1243
}

@inproceedings{AlH96,
        author="R. Alur and T.A. Henzinger",
	year =		1996,
	title =		{Reactive modules},
	booktitle =	{Proceedings of the 11th IEEE Syposium on
				 Logic in Computer Science},
	pages =		{207-218}
}

@article{AH99,
  title={{Reactive Modules}},
  author={Alur, R. and Henzinger, T.A.},
  journal={Formal Methods in System Design},
  volume={15},
  number={1},
  pages={7--48},
  year={1999},
  publisher={Springer}
}

@inproceedings{AHH93,
        author="R. Alur and T.A. Henzinger and P.-H. Ho",
        title="Automatic symbolic verification of embedded systems",
        booktitle="Proceedings of the 14th Annual Real-time Systems
                Symposium",
        publisher="IEEE Computer Society Press",
        year="1993",
        pages="2--11"
}

@inproceedings{AHV93,
        author = 	{R. Alur and T.A. Henzinger and M.Y. Vardi},
        title = 	{Parametric real-time reasoning},
        booktitle = 	{Proceedings of the 25th Annual Symposium on
                		Theory of Computing},
        publisher =	{ACM Press},
        year =		{1993},
        pages =		{592--601}
}

@Article{AIKY95,
title={Timing Verification by Successive Approximation},
author={R. Alur and A. Itai and R. P. Kurshan and M. Yannakakis},
pages={142--157},
journal=iandcomp,
month=apr,
year=1995,
volume=118,
number=1
}

@inproceedings{AK96,
	author =	{R. Alur and R.P. Kurshan},
	title =		{Timing Analysis in {COSPAN}},
	crossref =	{HybridIII},
	pages =		{220--231}
}

@inproceedings{ALP01,
        author =        {R. Alur and S. La~Torre and G. Pappas},
        title = {Optimal Paths in Weighted Timed Automata},
        crossref =      {Hybrid01}
}


@techreport{Am85,
	author =	{P. America},
	institution =	{Philips Research Laboratories},
	type =		{ESPRIT project 415},
	number =	{Doc.\ Nr.\ 91},
	address =	{Eindhoven},
	year =		1985,
	title =		{Definition of the programming language {POOL-T}}
}

@techreport{Am86,
	author =	{P. America},
	institution =	{Philips Research Laboratories},
	type =		{ESPRIT project 415},
	number =	{Doc.\ Nr.\ 53},
	address =	{Eindhoven},
	year =		1986,
	title =		{Rationale for the design of {POOL}}
}

@article{Am86a,
	author =	{P. America},
	journal =	eatcs,
	year =		1986,
	pages =		{69--84},
	title =		{Object-Oriented programming: a theoretician's introduction},
	volume =	27
}

@inproceedings{Am86b,
	author =	{P. America},
	year =		1986,
	title =		{{POOL-T --- A} parallel object-oriented language},
	booktitle =	{Object-Oriented Concurrent Systems},
	publisher =	mitp,
	editor =	{A. Yonezawa and M. Tokoro}
}

@techreport{Am87,
	author =	{P. America},
	institution =	{Philips Research Laboratories},
	type =		{ESPRIT project 415},
	number =	{Doc.\ Nr.\ 240},
	address =	{Eindhoven},
	year =		1987,
	title =		{A sketch for {POOL2}}
}

@incollection{Am89,
	author =	{P. America},
	booktitle =	{{J.W. de Bakker}, 25 jaar semantiek, liber amicorum},
	publisher =	cwi,
	address =	{Amsterdam},
	year =		1989,
	pages =		{31--40},
	title =		{The practical importance of formal semantics}
}

@article{AdB88,
	author =	{P. America and Bakker, J.W. de},
	year =		1988,
	journal =	tcs,
	pages =		{109--176},
	title =		{Designing equivalent semantic models for process creation},
	volume =	60
}

@inproceedings{ABKR86,
	author =	{P. America and Bakker, J.W. de and J.N. Kok and J.J.M.M. Rutten},
	crossref =	{POPL13},
	pages =		{194--208},
	title =		{Operational semantics of a parallel object-oriented language}
}

@article{ABKR89,
	author =	{P.H.M. America and Bakker, J.W. de and J.N. Kok
				 and J.J.M.M. Rutten},
	year =		1989,
	journal =	i&c,
	volume =	83,
	pages =		{152--205},
	title =		{Denotational semantics of a parallel object-oriented
				 language}
}

@misc{AMETISTfinal,
  author = {AMETIST},
  title = {Final Project Report},
  year = {2007},
  month = aug,
  note = {Deliverable from the European project IST-2001-35304 Advanced Methods for Timed Systems (AMETIST)},
  url = {http://www.cs.ru.nl/F.Vaandrager/AMETIST/final.pdf}
}


@phdthesis{And94,
	author =	{M. Andersson},
	address =	{Sweden},
	year =		1994,
	month =		dec,
	school =	{Department of Automatic Control, Lund Institute
			of Technology},
	title =		{Object-Oriented Modeling and Simulation of
			Hybrid Systems}
}

@article{Ang87,
  author    = {D. Angluin},
  title     = {Learning Regular Sets from Queries and Counterexamples},
  journal   = {Inf. Comput.},
  volume    = {75},
  number    = {2},
  year      = {1987},
  pages     = {87-106}
}

@inproceedings{AAB00,
	author =	{A. Annichini and E. Asarin and A. Bouajjani},
	crossref =	{CAV12},
	title =		{Symbolic Techniques for Parametric Reasoning
				about Counter and Clock Systems},
	pages = 	{419--434}
}

@inproceedings{AS01,
author =     {A. {Collomb--Annichini} and M. Sighireanu},
year =       2001,
title =      {Parameterized Reachability Analysis of the {IEEE 1394 Root
              Contention Protocol using TReX}},
booktitle =  {Proceedings of the Workshop on Real-Time Tools
             (RT-TOOLS'2001)},
editor =     {P. Pettersson and S. Yovine},
}

@inproceedings{ABS01,
author =     {A. Annichini and A. Bouajjani and M. Sighireanu},
year =       2001,
title =      {{TReX}: a tool for reachability analysis of complex systems},
booktitle =  {Proceedings of the international conference on computer
              aided verification (CAV'01), {\rm Paris, France}},
editor =     {G. Berry and H. Comon and A. Finkel},
series =     lncs,
volume =     1855,
publisher =  springer
}


@manual{ANSI83,
	organization =	{ANSI},
	address =	{Washington D.C.},
	year =		1983,
	title =		{Reference manual for the {Ada} programming language}
}

@article{Apt81,
title="Ten Years of {H}oare's Logic, a Survey, Part {I}",
author="K.R. Apt",
year=1981,
number=4,
volume=3,
pages="431--483",
journal=toplas
}

@article{Apt84,
title="Ten Years of {H}oare's Logic, a Survey, Part {II}: Nondeterminism",
author="K.R. Apt",
year=1984,
volume=28,
pages="83--109",
journal=tcs
}

@incollection{Apt90,
	author =	{K.R. Apt},
	crossref =	{handbook-tcs-b},
	title =		{Logic Programming},
	pages =		{495--574},
	chapter =	10
}

@article{AF84,
	author =	{K.R. Apt and N. Francez},
	year =		1984,
	journal =	toplas,
	number =	3,
	pages =		{370--379},
	title =		{Modelling the distributed termination convention of {CSP}},
	volume =	6
}

@article{AFK88,
	author =	{K.R. Apt and N. Francez and S. Katz},
	year =		1988,
	journal =	discomp,
	pages =		{226--241},
	title =		{Appraising fairness in languages for distributed
				 programming},
	volume =	2
}

@article{AP86,
	author =	{K.R. Apt and G.D. Plotkin},
	year =		1986,
	month =		oct,
	journal =	jacm,
	pages =		{724--767},
	volume =	33,
	number =	4,
	title =		{Countable nondeterminism and random assignment}
}

@article{AriK96,
	author =	{Z.M. Ariola and J.W. Klop},
	year =		1996,
	journal =	funinf,
	volume =	{26},
	number =	{3/4},
	pages =		{207--240},
	title =		{Equational Term Graph Rewriting},
	note =		{Extended version as University of Oregon
			 Technical Report CIS-TR-95-16}
}

@InProceedings{AH96,
  author        = {M. Archer and C. Heitmeyer},
  title         = {Mechanical Verification of Timed Automata: A Case Study},
  booktitle     = {Proceedings IEEE Real-Time Technology and Applications
			 Symposium (RTAS'96)},
  publisher     = {IEEE Computer Society Press},
  year          = 1996
}

@manual{Artifex94,
	title =		{Artifex 3.1 -- Tutorial},
	year =		1994,
	organization =	{ARTIS s.r.l.},
	address =	{Torino, Italy}
}

@article{AD89,
	author =	{A. Arnold and A. Dicky},
	year =		1989,
	journal =	i&c,
	pages =		{198--229},
	title =		{An algebraic characterization of transition system equivalences},
	volume =	82
}

@InProceedings{AsarinMalerPnueliConcur98,
  author =       {E.~Asarin, O.~Maler and A.~Pnueli},
  title =        {On Discretization of Delays in Timed Automata and
                  Digital Circuits},
  booktitle =    {Proc.\ Concur'98},
  editor =       {R.~de Simone and D.~Sangiorgi},
  series =       {LNCS},
  year =         1998,
  publisher =    {Springer},
  month =        {September},
  note =         {to appear}
}

@InProceedings{AsarinMalerPnueliSifakis,
  author =       {E.~Asarin, O.~Maler, A.~Pnueli and J.~Sifakis},
  title =        {Controller Synthesis for Timed Automata},
  booktitle =    {Proc.\ System Structure and Control},
  year =         1998,
  organization = {IFAC},
  publisher =    {Elsevier},
  month =        {July},
  note =         {to appear}
}

@mastersthesis{Assegei08,
author={F.A. Assegei},
school={Eindhoven University of Technology, Department of Electrical Engineering},
title={Decentralized frame synchronization of a {TDMA}-based wireless sensor network},
year=2008
}

@book{ABBFGIKMRZ86,
author="E. Astesiano and C. Bendix Nielsen and N. Botta and
A. Fantechi and A. Giovini and P. Inverardi and E. Karlsen and
F. Mazzanti and G. Reggio and E. Zucca",
title="The Trial Definition of {A}da, Deliverable 7 of the {CEC} {MAP}
project: {T}he
Draft Formal Definition of {ANSI/MIL-STD} 1815 {A}da",
publisher = {CEC MAP},
year=1986}

@inproceedings{AGMRZ86,
        author = {E. Astesiano and A. Giovini and F. Mazzanti and G. Reggio and
E. Zucca},
        title = {The {Ada} challenge for new formal semantic techniques},
        booktitle = {Ada: Managing the Transition -- Proceedings of the 1986 Ada
-Europe International Conference},
        year = 1986,
        editor = {P.L. Wallis},
        publisher = {Cambridge University Press},
        address = {Cambridge, U.K.}
}

@article{AB84,
	author =	{D. Austry and G. Boudol},
	year =		1984,
	journal =	tcs,
	number =	1,
	pages =		{91--131},
	title =		{Alg\`{e}bre de processus et synchronisations},
	volume =	30
}

@techreport{AKKV87,
	author =	{B. Awerbuch and L.M. Kirousis and E. Kranakis and P.M.B. Vitanyi},
	year =		1987,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R8707},
	address =	{Amsterdam},
	title =		{On proving register atomicity}
}

@inproceedings{BvW90,
        author =        {R.J.R. Back and Wright, J. von},
        crossref =      {REXrefinement},
        pages =         {42--66},
        title =         {Refinement Calculus, Part {I}:
                        Sequential Nondeterministic Programs}
}

@inproceedings{BD92,
	author =	{E. Badouel and P. Darondeau},
	crossref =	{CONCUR92},
	pages =		{302--316},
	title =		{Structural Operational Specifications and Trace
				Automata}
}

@techreport{BBD94,
	author =	{E. Badouel and L. Bernardinello and P. Darondeau},
 	title=        	{Polynomial Algorithms for the Synthesis of
				Bounded Nets},
 	institution= 	{INRIA},
 	type=        	{Report},
 	number=      	2316,
 	year=        	1994,
	month =		jul,
 	note=        	{To be presented at {\em CAAP'95}}
}

@misc{BDR94,
	author =	{E. Badouel and P. Darondeau and J.-C. Raoult},
	title =		{Context-Free Event Domains are Recognizable},
	year =		1994,
 	note=        	{To be presented at {\em AMAST'95}}
}

@book{Ba86,
	author =	{J.C.M. Baeten},
	address =	{Deventer},
	year =		1986,
	publisher =	{Kluwer},
	series =	{Programmatuurkunde},
	note =		{In Dutch},
	title =		{Procesalgebra}
}

@misc{Ba92,
	author =	{J.C.M. Baeten},
	title =		{Informatica als Wetenschap ---
			Formele specificatie en wiskundige verificatie},
	year =		1992,
	month =		oct,
	note =		{Inaugural address,
			Technical University Eindhoven, The Netherlands}
}

@inproceedings{Ba92a,
	author =	{J.C.M. Baeten},
	crossref =	{NAPAW92},
	pages =		{231--240},
	title =		{The Total Order Assumption}
}

@article{BB88,
	author =	{J.C.M. Baeten and J.A. Bergstra},
	year =		1988,
	journal =	i&c,
	number =	3,
	pages =		{205--245},
	title =		{Global renaming operators in concrete process algebra},
	volume =	78
}

@article{BB88a,
author="J.C.M. Baeten and J.A. Bergstra",
title="Processen en Procesexpressies",
journal="Informatie",
year=1988,
pages="177--248",
volume=30,
number=3,
note="In Dutch"
}

@inproceedings{BB88b,
  	author =        {J.C.M. Baeten and J.A. Bergstra},
  	year =          1988,
  	publisher=      cwi,
  	pages=          {279--294},
  	booktitle =     {Proceedings SION Conference CSN 88},
  	title =         {Recursive Process Definitions with the State
  				Operator}
}

@techreport{BB89a,
	author =	{J.C.M. Baeten and J.A. Bergstra},
	year =		1989,
	type =		{Report},
	institution =	{Programming Research Group, University of Amsterdam},
	number =	{P8910},
	note =		{To appear in {\em Proceedings of the METEOR Workshop Methods based on Formal Specifications}, Mierlo September 1989, LNCS},
	title =		{Design of a specification language by abstract syntax engineering (preliminary version)}
}

@inproceedings{BB90b,
	author =	{J.C.M. Baeten and J.A. Bergstra},
	year =		1990,
	crossref =	{CONCUR90},
	pages =		{83--98},
	title =		{Process algebra with a zero object}
}

@article{BB91,
	author =	{J.C.M. Baeten and J.A. Bergstra},
	year =		1991,
	journal =	fac,
	volume =	3,
	number =	2,
	pages =		{142--188},
	title =		{Real Time Process Algebra}
}

@inproceedings{BB91a,
	author =	{J.C.M. Baeten and J.A. Bergstra},
	crossref =	{CONCUR91},
	pages =		{96--110},
	title =		{Real Space Process Algebra}
}

@article{BB91b,
	author =	{J.C.M. Baeten and J.A. Bergstra},
	year =		1991,
	journal =	tcs,
	volume =	82,
	pages =		{285--302},
	title =		{Recursive Process Definitions with the State Operator}
}

@techreport{BB91c,
	title =		{A Survey of Axiom Systems for Process Algebras},
	author =	{J.C.M. Baeten and J.A. Bergstra},
	year =		1991,
	month =		oct,
	institution =	{University of Amsterdam},
	number =	{P9111},
	type =		{Report},
	address =	{Amsterdam}
}

@inproceedings{BB92,
	author =	{J.C.M. Baeten and J.A. Bergstra},
	crossref =	{REXrealtime},
	pages =		{107--123},
	title =		{The State Operator in Real Time Process Algebra}
}

@inproceedings{BB92a,
	author =	{J.C.M. Baeten and J.A. Bergstra},
	crossref =	{CONCUR92},
	pages =		{401--420},
	title =		{Discrete Time Process Algebra}
}

@inproceedings{BB92b,
	title =		{Process Algebra with Signals and Conditions},
	author =	{J.C.M. Baeten and J.A. Bergstra},
	year =		1992,
	booktitle =	{Programming and Mathematical Methods, Proceedings
			Summer School Marktoberdorf 1991},
	editor =	{M. Broy},
	note =		{NATO ASI Series F88},
	publisher =	springer,
	pages =		{273--323}
}

@techreport{BB93a,
	title =		{On Sequential Composition, Action Prefixes and
				Process Prefix},
	author =	{J.C.M. Baeten and J.A. Bergstra},
	year =		1993,
	institution =	{University of Amsterdam},
	number =	{P9305},
	type =		{Report},
	address =	{Amsterdam},
	note =		{Also available as Report CSN 93/14,
			Eindhoven University of Technology, 1993.
			To appear in {\em Formal Aspects of Computing}}
}

@inproceedings{BB93b,
	title =		{Non Interleaving Process Algebra},
	author =	{J.C.M. Baeten and J.A. Bergstra},
	crossref =	{CONCUR93},
	pages =		{308--323}
}

@techreport{BBB93,
	author =	{J.C.M. Baeten and J.A. Bergstra and R.N. Bol},
	year =		1993,
	type =		{Report},
	institution =	{Programming Research Group, University of Amsterdam},
	number =	{P9309},
	title =		{A real time process logic}
}

@article{BBK86,
	author =	{J.C.M. Baeten and J.A. Bergstra and J.W. Klop},
	year =		1986,
	journal =	funinf,
	number =	2,
	pages =		{127--168},
	title =		{Syntax and defining equations for an interrupt
			 mechanism in process algebra},
	volume =	{IX}
}

@inproceedings{BBK87,
	author =	{J.C.M. Baeten and J.A. Bergstra and J.W. Klop},
	booktitle =	ebberup,
	address =	{Amsterdam},
	year =		1987,
	editor =	{M. Wirsing},
	publisher =	nholland,
	pages =		{53--75},
	title =		{Conditional axioms and $\alpha / \beta$ calculus in process algebra}
}

@article{BBK87a,
	author =	{J.C.M. Baeten and J.A. Bergstra and J.W. Klop},
	year =		1987,
	journal =	tcs,
	number =	{1/2},
	pages =		{129--176},
	title =		{On the consistency of {Koomen's} fair abstraction rule},
	volume =	51
}

@article{BBK87b,
	author =	{J.C.M. Baeten and J.A. Bergstra and J.W. Klop},
	year =		1987,
	journal =	comj,
	number =	6,
	pages =		{498--506},
	title =		{Ready-trace semantics for concrete process algebra
			 with the priority operator},
	volume =	30
}

@inproceedings{BBK87c,
	author =	{J.C.M. Baeten and J.A. Bergstra and J.W. Klop},
	booktitle =	{Proceedings PARLE conference, {\rm Eindhoven}, Vol. II (Parallel Languages)},
	year =		1987,
	editor =	{Bakker, J.W. de and A.J. Nijman and P.C. Treleaven},
	publisher =	springer,
	series =	lncs,
	volume =	259,
	pages =		{94--113},
	title =		{Decidability of bisimulation equivalence for processes generating context-free languages}
}

@techreport{BBMV89,
	author =	{J.C.M. Baeten and J.A. Bergstra and S. Mauw
				 and G.J. Veltink},
	year =		1989,
	type =		{Report},
	institution =	{Programming Research Group, University of Amsterdam},
	note =		{To appear in {\em Proceedings of the METEOR Workshop Methods based on Formal Specifications}, Mierlo September 1989, LNCS},
	title =		{A process specification formalism based on static {COLD}}
}

@inproceedings{BG87,
	author =	{J.C.M. Baeten and Glabbeek, R.J. van},
	crossref =	{ICALP14},
	pages =		{84--94},
	title =		{Another look at abstraction in process algebra}
}

@inproceedings{BG87a,
	author =	{J.C.M. Baeten and Glabbeek, R.J. van},
	booktitle =	fsttcs7,
	year =		1987,
	editor =	{K.V. Nori},
	series =	lncs,
	volume =	287,
	publisher =	springer,
	pages =		{153--172},
	title =		{Merge and termination in process algebra}
}

@article{BG89,
	author =	{J.C.M. Baeten and Glabbeek, R.J. van},
	year =		1989,
	journal =	funinf,
	pages =		{221--242},
	title =		{Abstraction and empty process in process algebra},
	volume =	{XII}
}

@techreport{BV88,
	author =	{J.C.M. Baeten and F.W. Vaandrager},
	year =		1988,
	month =		oct,
	type =		{Report},
	institution =	{Programming Research Group, University of Amsterdam},
	number =	{P8821},
	title =		{Specification and verification of a circuit in {ACP}
				 (revised version)}
}

@article{BV92,
	author =	{J.C.M. Baeten and F.W. Vaandrager},
	year =		1992,
	journal =	acta,
	volume =	29,
	number =	4,
	pages =		{303--334},
	title =		{An algebra for process creation}
}

@inproceedings{BV93,
	author =	{J.C.M. Baeten and C. Verhoef},
	crossref =	{CONCUR93},
	title =		{A Congruence Theorem for Structured Operational
				Semantics with Predicates},
	pages =		{477--492}
}

@incollection{BaVe94,
	author =	{J.C.M. Baeten and C. Verhoef},
	title =		{Concrete Process Algebra},
	crossref = 	{HandLICS4},
	pages =		{149--268}
}

@book{BW90,
	author =	{J.C.M. Baeten and W.P. Weijland},
	year =		1990,
	publisher =	cup,
	series =	{Cambridge Tracts in Theoretical Computer Science 18},
	title =		{Process Algebra}
}

@book{BK08,
	author =	{C. Baier and J.-P. Katoen},
	year =		2008,
	publisher =	mitp,
	address =	{Cambridge, Massachusetts},
	title =		{Principles of Model Checking}
}

@inproceedings{BS00,
	author = 	{C. Baier and M.I.A. Stoelinga},
	booktitle = 	{Proceedings of 3rd International Conference on
       			Foundations of Science and Computation
       			Structures (FOSSACS),
       			{\rm Berlin, Germany, March 2000}},
	title = 	{Norm functions for probabilistic bisimulations
       				with delays},
	editor = 	{J. Tiuryn},
	year = 		2000,
	series = 	lncs,
	volume = 	1784,
	publisher = 	springer,
	pages = 	{1--16}
}

@techreport{BS01,
	author = 	{C. Baier and M.I.A. Stoelinga},
	title =		{Probabilistic Simulation Relations:
			Decidability, Complexity and Compositionality},
	year =		2001,
	number =	{CSI-R01XX},
	institution =	{Computing Science Institute, University of Nijmegen},
	note =		{To appear}
}

@article{FormalGossip07,
 author = {R. Bakhshi and F. Bonnet and W. Fokkink and B. Haverkort},
 title = {Formal analysis techniques for gossiping protocols},
 journal = {SIGOPS Oper. Syst. Rev.},
 volume = {41},
 number = {5},
 year = {2007},
 issn = {0163-5980},
 pages = {28--36},
 doi = {http://doi.acm.org/10.1145/1317379.1317385},
 publisher = {ACM},
 address = {New York, NY, USA},
 }

@article{dB69,
title="Semantics of Programming Languages",
author="Bakker, J.W. de",
journal="Advances in Information Systems Science",
pages="173--227",
year=1969,
volume=2}

@preamble{ "\newcommand{\SortNoop}[1]{}" }
@book{dB80,
	author =	{{\SortNoop{Bakker}}de Bakker, {J.W.}},
	year =		1980,
	publisher =	prentice,
	title =		{Mathematical Theory of Program Correctness}
}

@article{BBKM84,
	author =	{Bakker, J.W. de and J.A. Bergstra and J.W. Klop
				 and J.-J.Ch. Meyer},
	year =		1984,
	journal =	tcs,
	pages =		{135--156},
	title =		{Linear time and branching time semantics for
				 recursion with merge},
	volume =	34
}

@inproceedings{dBK88,
	author =	{Bakker, J.W. de and J.N. Kok},
	booktitle =	{Proceedings Fifth Generation Computer Systems 1988, {\rm Tokyo, Japan}},
	year =		1988,
	pages =		{347--355},
	title =		{Uniform abstraction, atomicity and contractions in the comparative semantics of concurrent {Prolog}}
}

@inproceedings{BKMOZ86,
	author =	{Bakker, J.W. de and J.N. Kok and J.-J.Ch. Meyer
			 and E.-R. Olderog and J.I. Zucker},
	crossref =	{current-trends},
	pages =		{51--121},
	title =		{Contrasting themes in the semantics of
			imperative concurrency}
}

@inproceedings{dBdR72,
author="Bakker, J.W. de and Roever, W.P. de",
title="A Calculus for Recursive Program Schemes",
pages="167--196",
year=1972,
booktitle=icalp1,
publisher=nholland}

@proceedings{dBR92,
	editor =	{Bakker, J.W. de and J.J.M.M. Rutten},
	year =		1992,
	publisher =	{World Scientific},
	title =		{Ten years of concurrency semantics:
			selected papers of the Amsterdam Concurrency Group}
}

@article{BZ82,
	author =	{Bakker, J.W. de and J.I. Zucker},
	year =		1982,
	journal =	i&c,
	number =	{1/2},
	pages =		{70--120},
	title =		{Processes and the denotational semantics of
					 concurrency},
	volume =	54
}

@book{BD74,
	author =	{R. Balbes and P. Dwinger},
	year =		1974,
	publisher =	{University of Missouri Press},
	title =		{Distributive Lattices}
}

@article{BaBr91,
	author =	{M. Baldassari and G. Bruno and A. Castella},
	title =		{{PROTOB}, an Object-Oriented {CASE} Tool for
			Modelling and Prototyping Distributed Systems},
	year =		1991,
	month =		aug,
	volume =	21,
	number =	8,
	pages =		{823--844},
	journal =	{Software Practice and Experience}
}

@article{BHGWF93,
	author =	{S. Balemi and G.J. Hoffmann and P. Gyugyi and
			H. Wong-Toi and G.F. Franklin},
	year =		1993,
	month =		jul,
	journal =	{IEEE Transactions on Automatic Control},
	volume =	38,
	number =	7,
	pages =		{1040--1059},
	title =		{Supervisory control of a rapid thermal
			multiprocessor}
}

@inproceedings{BallR00,
  author    = {T. Ball and
               S.K. Rajamani},
  title     = {Bebop: A Symbolic Model Checker for Boolean Programs},
  year      = {2000},
  pages     = {113-130},
  editor    = {K. Havelund and J. Penix and W. Visser},
  booktitle     = {SPIN Model Checking and Software Verification, 7th International
               SPIN Workshop, Stanford, CA, USA, August 30 - September
               1, 2000, Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {1885}
}


@inproceedings{BallR01,
  author    = {T. Ball and S.K. Rajamani},
  title     = {The {SLAM} Toolkit},
  year      = {2001},
  pages     = {260-264},
  editor    = {G. Berry and H. Comon and A. Finkel},
  booktitle = {Computer Aided Verification, 13th International Conference,
               CAV 2001, Paris, France, July 18-22, 2001, Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {2102}
}

@misc{BLT00,
	author =	{G. Bandini and R. {Lutje Spelberg} and H. Toetenel},
	year =		2000,
	month =		jul,
	title =		{Parametric Verification of the {IEEE} 1394a
			Root Contention Protocol using {LPMC}},
	howpublished =	{http://tvs.twi.tudelft.nl/},
	note =		{Submitted for publication}
}

@INCOLLECTION{Bar92
, AUTHOR       = "H.P. Barendregt"
, TITLE        = "Lambda Calculi with Types"
, CROSSREF     = {HandLICS2}
, PAGES        = "117--309"
}

@Article{BSdV03,
  author = 	 {F. Bartels and A. Sokolova and Vink, E.P. de},
  title = 	 {A Hierarchy of Probabilistic System Types},
  journal = 	 {Electronic Notes in Theoretical Computer Science},
  editor = 	 {H.P. Gumm},
  volume =	 82,
  number =	 1,
  year = 	 {2003}
}

@article{BSW69,
	author =	{K.A. Bartlett and R.A. Scantlebury and P.T. Wilkinson},
	year =		1969,
	journal =	cacm,
	pages =		{260--261},
	title =		{A note on reliable full--duplex transmission over
				 half--duplex links},
	volume =	12
}

@article{Bas96,
    author = "T. Basten",
    title = "Branching bisimilarity is an equivalence indeed!",
    journal = "Information Processing Letters",
    volume = "58",
    number = "3",
    pages = "141--147",
    year = "1996"
}

@phdthesis{Bauer06,
	author =	{J. Bauer},
	year =		2006,
	school =	{Universit\"at des Saarlandes, Saarbr\"ucken, Germany},
	title =		{Analysis of Communication Topologies by Partner Abstraction}
}

@phdthesis{Bz87,
	author =	{M. Bednarczyk},
	address =	{Brighton},
	year =		1987,
	school =	{Computer Science, University of Sussex},
	title =		{Categories of asynchronous systems}
}

@inproceedings{BeekRSR07,
  author    = {D. A. van Beek and M. A. Reniers and R. R. H. Schiffelers and
               J. E. Rooda},
  title     = {Foundations of a Compositional Interchange Format for Hybrid Systems},
  year      = {2007},
  pages     = {587-600},
  editor    = {A. Bemporad and A. Bicchi and G. C. Buttazzo},
  booktitle = {Hybrid Systems: Computation and Control, 10th International
               Workshop, HSCC 2007, Pisa, Italy, April 3-5, 2007, Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {4416}
}

@inproceedings{BehrmannBHM05,
  author    = {G. Behrmann and E. Brinksma and M. Hendriks and A. Mader},
  title     = {Production Scheduling by Reachability Analysis - A Case Study},
  ee        = {http://doi.ieeecomputersociety.org/10.1109/IPDPS.2005.363},
  booktitle     = {19th International Parallel and Distributed Processing Symposium
               (IPDPS 2005), CD-ROM / Abstracts Proceedings, 4-8 April
               2005, Denver, CA, USA},
  publisher = {IEEE Computer Society},
  year      = {2005}
}

@misc{tiga_manual,
  author    = {G. Behrmann and A. Cougnard and A. David and E. Fleury and K.G. Larsen and D. Lime},
  title     = {{U}ppaal {T}iga User-manual},
  year      = {2007},
  url	    = {http://www.cs.aau.dk/~adavid/tiga/manual.pdf}
}

@inproceedings{BehrmannDL04,
  author    = {G. Behrmann and
               A. David and
               K.G. Larsen},
  title     = {A Tutorial on {U}ppaal},
  year      = {2004},
  pages     = {200-236},
  editor    = {M. Bernardo and F. Corradini},
  booktitle = {Formal Methods for the Design of Real-Time Systems, International
               School on Formal Methods for the Design of Computer, Communication
               and Software Systems, SFM-RT 2004, Bertinoro, Italy, September
               13-18, 2004, Revised Lectures},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {3185}
}

@inproceedings{Uppaal4.0,
   author = {Behrmann, G. and David, A. and Larsen, K. G. and H{\aa}kansson, J. and Pettersson, P. and Yi, W. and Hendriks, M.},
   title = {Uppaal 4.0},
   booktitle = {Third International Conference on the Quantitative Evaluation of SysTems (QEST 2006), {\rm 11-14 September 2006, Riverside, CA, USA}},
   year = {2006},
   pages = {125--126},
   publisher = {IEEE Computer Society},
   urlpage = {http://doi.ieeecomputersociety.org/10.1109/QEST.2006.59},
}


@inproceedings{BHV00,
	author =	{G. Behrmann and T.S. Hune and F.W. Vaandrager},
	crossref =	{CAV12},
	title =		{Distributed Timed Model Checking ---
			 How the Search Order Matters},
	pages =		{216-231}
}

@inproceedings{Betal01,
	author =	{G. Behrmann and A. Fehnker and T.S. Hune and
			K.G. Larsen and P. Pettersson and J.M.T. Romijn
			and F.W. Vaandrager},
	crossref =	{Hybrid01},
	pages =		{147--161},
	title =		{Minimum-Cost Reachability for Priced Timed Automata}
}

@inproceedings{Betal01a,
	author =	{G. Behrmann and A. Fehnker and T.S. Hune and
			K.G. Larsen and P. Pettersson and J.M.T. Romijn},
	crossref =	{TACAS01},
	pages =		{174--188},
	title =		{Efficient Guiding Towards Cost-Optimality in {UPPAAL}}
}

@InProceedings{BFH01:aaai,
  author =       {Gerd Behrmann and A. Fehnker and Thomas S. Hune
                  and Kim G. Larsen and Paul Petterson and Judi
                  Romijn},
  title =        {Guiding and Cost-Optimality in {{\sc Uppaal}}},
  booktitle =    {The 2001 AAAI Spring Symposium Series: Model-Based
                  Validation of Intelligence },
  year =         2001,
  organization = {AAAI}
}

@article{BLR05,
 author = {Gerd Behrmann and Kim G. Larsen and Jacob I. Rasmussen},
 title = {Optimal scheduling using priced timed automata},
 journal = {SIGMETRICS Perform. Eval. Rev.},
 volume = {32},
 number = {4},
 year = {2005},
 issn = {0163-5999},
 pages = {34--40},
 doi = {http://doi.acm.org/10.1145/1059816.1059823},
 publisher = {ACM},
 address = {New York, NY, USA},
 }

@techreport{Bek71,
title="Towards a Mathematical Theory of Processes",
type="Technical Report",
author="H. Beki\v{c}",
year=1971,
number="TR25.125",
institution="IBM Laboratory",
address="Vienna",
note="This document also appeared in \cite{Bek84}"}

@book{Bek84,
author="H. Beki\v{c}",
title="Programming Languages and Their Definition {\rm (C.B.
Jones, editor)}",
year=1984,
volume=177,
publisher=springer,
series=lncs}

@inproceedings{BenEtAl96,
	author = {J. Bengtsson and W.O.D. Griffioen and K.J. Kristoffersen
		and K.G. Larsen and F. Larsson and P. Pettersson and Wang Yi},
	crossref =	{CAV8},
	title =		{Verification of an Audio Protocol with Bus Collision
			 Using {UPPAAL}},
	pages =		{244--256}
}

@inproceedings{BenEtAl96a,
	author = {J. Bengtsson and K.G. Larsen and F. Larsson and P. Pettersson
		 and Wang Yi},
	title =		{{UPPAAL:} a tool suite for the automatic verification
				of real-time systems},
	crossref =	{HybridIII},
	pages =		{232--243}
}

@inproceedings{SALoverview00:LFM,
        AUTHOR = {S. Bensalem and V. Ganesh and Y.  Lakhnech and C. Mu\~{n}oz and S. Owre and H. Rue\ss and J. Rushby and V. Rusu and H. Sa\"{i}di and N.
    Shankar and E. Singerman and A. Tiwari},
        TITLE = {An Overview of {SAL}},
        BOOKTITLE = {{LFM} 2000: Fifth {NASA} Langley Formal Methods Workshop},
        YEAR = {2000},
        EDITOR = {{C.} Michael Holloway},
        PAGES = {187--196},
        ADDRESS = {Hampton, {VA}},
        MONTH = {jun},
        ORGANIZATION = {{NASA} Langley Research Center},
        URL = {http://www.csl.sri.com/papers/lfm2000/}
    }


@inproceedings{BLS96,
	author = 	{S. Bensalem and Y. Lakhnech and H. Saidi},
	crossref =	{CAV8},
	title =		{Powerful Techniques for the Automatic
			Generation of Invariants},
	pages =		{323--335}
}

@incollection{Ben94,
	author =	{A. Bensoussan},
	title =		{New Trends in Applied Mathematics},
	booktitle =	{From Universal Morphisms to Megabytes -- a Baayen
			Space Odyssey},
	year =		1994,
	editor =	{K.R. Apt and A. Schrijver and N.M. Temme},
	publisher =	{CWI},
	address =	{Amsterdam},
	pages =		{153--178}
}

@Article{Ben-84,
  author =      "Benthem, J. van",
  title =       "Correspondence Theory",
  journal =     "{\em In} Handbook of Philosophical Logic, Vol. II,
                 {\em D. Gabbay, F. Guenthner (Eds.), Reidel}",
  year =        "1984",
  OPTvolume =   "",
  OPTnumber =   "",
  OPTpages =    "",
  OPTmonth =    "",
  OPTnote =     ""
}

@inproceedings{vB89,
	author =	{Benthem, J. van},
	crossref =	{REXlinear},
	pages =		{1--49},
	title =		{Time, Logic and Computation}
}

@inproceedings{Ben95,
	author={A. Benveniste},
	title={Compositional and Uniform Modelling of Hybrid Systems (draft)},
	booktitle={Proceedings Second European Workshop on Real-Time and
		 Hybrid Systems},
	year=1995,
	month=jun,
	address={Grenoble, France},
	editor =	{A. Bouajjani and O. Maler}
}

@article{BA93,
	author =	{A. Benveniste and K.J. {\AA}str\"{o}m},
	year =		1993,
	month =		jul,
	journal =	{IEEE Transactions on Automatic Control},
	volume =	38,
	number =	7,
	pages =		{1004--1010},
	title =		{Meeting the Challenge of Computer Science in the
			Industrial Applications of Control:
			An Introductory Discussion to the Special Issue}
}

@article{BG90,
	author =	{A. Benveniste and P. Le Guernic},
	year =		1990,
	month =		may,
	journal =	{IEEE Transactions on Automatic Control},
	volume =	35,
	number =	5,
	pages =		{535--546},
	title =		{Hybrid Dynamical Systems Theory and the {SIGNAL} Language}
}

@techreport{BGVZ07,
	title =		{Formal Specification and Analysis of Zeroconf using {U}ppaal},
	author =	{J. Berendsen and B. Gebremichael and F.W. Vaandrager and M. Zhang},
        year =          2007,
        month =		dec,
        type =          {Report},
        institution =   {Institute for Computing and Information Sciences, Radboud University Nijmegen},
        number =        {ICIS-R07032},
        url =           {http://www.cs.ru.nl/ita/publications/papers/fvaan/zeroconf.html}
}

@article{BGVZ10,
	title =		{Formal Specification and Analysis of Zeroconf using {U}ppaal},
	author =	{J. Berendsen and B. Gebremichael and F.W. Vaandrager and M. Zhang},
	year =		2010,
	journal =	{ACM Transactions on Embedded Computing Systems},
	url =		{http://www.mbsd.cs.ru.nl/publications/papers/fvaan/zeroconf/full.html},
	funding =	{HaaST, AMETIST, VOSS2, FRAAI, QUASIMODO D1.3, D2.3, D5.7},
	category = 	{wet - artikel in wet tijdschrift},
	note =		{To appear}
}

@inproceedings{BCJ09,
  author    = {J. Berendsen and T. Chen and D. N. Jansen},
  title     = {Undecidability of Cost-Bounded Reachability in Priced Probabilistic Timed Automata},
  year      = {2009},
  pages     = {128-137},
  doi       = {http://dx.doi.org/10.1007/978-3-642-02017-9_16},
  url       = {http://dx.doi.org/10.1007/978-3-642-02017-9_16},
  editor    = {J. Chen and S. B. Cooper},
  booktitle = {Theory and Applications of Models of Computation, 6th Annual Conference, TAMC 2009, Changsha, China, May 18-22, 2009.  Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {5532},
  funding   = {FRAAI, QUASIOMODO D2.2},
  category  = {wet - artikel in bundel - proceedings}
}

@techreport{2006-Berendsen-ProbablyReachability,
   	author = {J. Berendsen and D.N. Jansen and J.P. Katoen},
   	title = {Probably on Time and within Budget: On Reachability in Priced Probabilistic Timed Automata},
   	institution = {Institute for Computing and Information Sciences, Radboud University Nijmegen},
   	year = {2006},
   	number = {ICIS--R06023},
   	month = {August},
   	category = {vak (technisch rapport)},
   	url = {https://osiris.cs.ru.nl/pms/iris-diglib/src/getContent.php?id=2006-Berendsen-ProbablyReachability},
}

@inproceedings{BJK06,
   	author = {J. Berendsen and D.N. Jansen and J.P. Katoen},
   	title = {Probably on Time and within Budget: On Reachability in Priced Probabilistic Timed Automata},
   	booktitle = {Proceedings Third International Conference on the Quantitative Evaluation of SysTems (QEST 2006),
				 {\rm 11-14 September 2006, Riverside, CA, USA}},
   	year = {2006},
   	pages = {311--322},
   	address = {Los Alamitos, CA, USA},
   	publisher = {IEEE Computer Society},
   	isbn = {0-7695-2665-9},
   	doi = {http://doi.ieeecomputersociety.org/10.1109/QEST.2006.43},
   	category = {wet - artikel in bundel - proceedings},
   	urlpage = {http://doi.ieeecomputersociety.org/10.1109/QEST.2006.43},
}

@article{BJSV09,
   	author = 	{J. Berendsen and D.N. Jansen and J. Schmaltz and F.W. Vaandrager},
	year =		2009,
	journal =	{Journal of Applied Logic},
	title =		{The Axiomatization of Override and Update},
        funding =       {FRAAI, QUASIOMODO D2.3},
	category = 	{wet - artikel in wet tijdschrift},
        doi =		{http://dx.doi.org/10.1016/j.jal.2009.11.001},
	url =	{http://www.mbsd.cs.ru.nl/publications/papers/fvaan/override/},
	note =		{Available online 18 November 2009}
}

@techreport{BJV09,
   	author = 	{J. Berendsen and D.N. Jansen and F.W. Vaandrager},
	title =         {Fortuna: Model Checking Priced Probabilistic Timed Automata},
	year =		2009,
        type =          {Report},
        institution =   {Institute for Computing and Information Sciences, Radboud University Nijmegen},
        funding =       {FRAAI, QUASIMODO D2.2, D5.9, ROCKS},
        url =		{http://www.cs.ru.nl/J.Berendsen/fortuna/}
}

@techreport{BV07,
   	author = {J. Berendsen and F.W. Vaandrager},
   	title = {Compositional Abstraction in Real-Time Model Checking},
   	institution = {Radboud University Nijmegen},
   	year = {2007},
   	number = {ICIS--R07027},
   	category = {vak (technisch rapport)},
   	url = {http://www.ita.cs.ru.nl/publications/papers/fvaan/BV07.html},
   	note =	{An extended abstract appeared in \emph{Proc.\  FORMATS'08}, LNCS 5215}
}

@unpublished{BV07a,
   	author = 	{J. Berendsen and F.W. Vaandrager},
	year =		2007,
        month =		{September},
	note =		{Technical note available at {\tt http://www.ita.cs.ru.nl/publications/papers/fvaan/BV07.html}},
	title =		{Parallel Composition in a Paper of {J}ensen, {L}arsen and {S}kou is not Associative}
}

@unpublished{BV08,
   	author = 	{J. Berendsen and F.W. Vaandrager},
	year =		2008,
        month =		{May},
	note =		{Technical note available at {\tt http://www.ita.cs.ru.nl/publications/papers/fvaan/BV07.html}},
	title =		{Parallel Composition in a Paper by {De Alfaro} e.a. is not Associative}
}

@inproceedings{BV08a,
        author = 	{J. Berendsen and F.W. Vaandrager},
        title = 	{Compositional Abstraction in Real-Time Model Checking},
        year =          2008,
	booktitle =	{Proceedings Sixth International Conference on Formal
			 Modeling and Analysis of Timed Systems (FORMATS 2008),
			{\rm  September 15-17, 2008, Saint-Malo, France}},
	series =	{Lecture Notes in Computer Science},
        url =   	{http://www.cs.ru.nl/ita/publications/papers/fvaan/BV07.html},
        pages =		{233-249},
	publisher =	{Springer Berlin / Heidelberg},
	volume =	5215,
	editors =	{F. Cassez and C. Jard},
        category = 	{wet - artikel in bundel - proceedings},
 	doi = 		{http://dx.doi.org/10.1007/978-3-540-85778-5_17},
        note =		{Full version available as Technical Report ICIS--R07027, Radboud University Nijmegen, 2007}
}

@inproceedings{BCH85,
	author =	{J.--L. Bergerand and P. Caspi and N. Halbwachs},
	booktitle =	{Proceedings IEEE-CS Real-Time systems Symposium},
	address =	{San Diego},
	year =		1985,
	title =		{Outline of a real-time dataflow language}
}

@techreport{Be85,
	author =	{J.A. Bergstra},
	year =		1985,
	institution =	{CIF, State University of Utrecht},
	type =		{Logic Group Preprint Series},
	number =	{Nr.\  3},
	title =		{Put and get, primitives for synchronous unreliable message passing}
}

@book{Be87,
	author =	{J.A. Bergstra},
	address =	{Deventer},
	year =		1987,
	publisher =	{Kluwer},
	series =	{Programmatuurkunde},
	note =		{In Dutch},
	title =		{Terminologie van algebra\"{\i}sche specificaties}
}

@techreport{Be88,
	author =	{J.A. Bergstra},
	year =		1988,
	type =		{Report},
	institution =	{Programming Research Group, University of Amsterdam},
	number =	{P8808},
	title =		{A mode transfer operator in process algebra}
}

@techreport{Be88a,
	author =	{J.A. Bergstra},
	year =		1988,
	type =		{Report},
	institution =	{Programming Research Group, University of Amsterdam},
	number =	{P8815},
	title =		{Process algebra for synchronous communication and observation}
}

@inproceedings{Be88b,
	author =	{J.A. Bergstra},
	year =		1988,
	booktitle =	{Algebraic and Logic Programming},
	editor =	{J. Grabowski and P. Lescanne and W. Wechler},
	series =	lncs,
	volume =	343,
	publisher =	springer,
	pages =		{11-20},
	title =		{{ACP} with signals}
}

@incollection{Be90,
	author =	{J.A. Bergstra},
	crossref =	{Ba90},
	pages =		{81--88},
	title =		{A process creation mechanism in process algebra}
}

@techreport{BH89,
	author=		{J.A. Bergstra and J. Heering},
	title=		{Which data types have $\omega$-complete initial
			 algebra specifications?},
	year=		1989,
	month=		dec,
	institution =	cwi,
	type =		{Report},
	number=		{CS-R8958},
	address=	{Amsterdam}
}

@article{BBP94,
	author =	{J.A. Bergstra and I. Bethke and A. Ponse},
	year =		1994,
	journal =	{The Computer Journal},
 	volume =	37,
	number =	4,
	title =		{Process Algebra with Iteration and Nesting},
	pages =		{243--258}
}

@techreport{BHK87,
	author =	{J.A. Bergstra and J. Heering and P. Klint},
	year =		1987,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R8705},
	address =	{Amsterdam},
	title =		{{ASF} -- An algebraic specification formalism}
}

@article{BHK90,
	author =	{J.A. Bergstra and J. Heering and P. Klint},
	year =		1990,
	journal =	jacm,
	number =	2,
	pages =		{335--372},
	title =		{Module algebra},
	volume =	37
}

@techreport{BK82,
	author =	{J.A. Bergstra and J.W. Klop},
	address =	{Amsterdam},
	institution = 	{Mathematisch Centrum},
	year =		1982,
	type =		{Report},
	number =	{IW 206},
	title =		{Fixed point semantics in process algebras}
}

@inproceedings{BK84,
	author =	{J.A. Bergstra and J.W. Klop},
	crossref =	{ICALP11},
	pages =		{82--95},
	title =		{The algebra of recursively defined processes and the
				 algebra of regular processes}
}

@techreport{BK84a,
	author =	{J.A. Bergstra and J.W. Klop},
	year =		1984,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R8405},
	address =	{Amsterdam},
	title =		{Fair {FIFO} queues satisfy an algebraic criterion
				 for protocol correctness}
}

@article{BK84b,
	author =	{J.A. Bergstra and J.W. Klop},
	year =		1984,
	journal =	i&c,
	number =	{1/3},
	pages =		{109--137},
	title =		{Process algebra for synchronous communication},
	volume =	60
}

@article{BK85,
	author =	{J.A. Bergstra and J.W. Klop},
	year =		1985,
	journal =	tcs,
	number =	1,
	pages =		{77--121},
	title =		{Algebra of communicating processes with abstraction},
	volume =	37
}

@inproceedings{BK86,
	author =	{J.A. Bergstra and J.W. Klop},
	booktitle =	{Math. Methods of Spec. and Synthesis of Software
				 Systems '85, Math. Research 31},
	address =	{Berlin},
	year =		1986,
	editor =	{W. Bibel and K.P. Jantke},
	publisher =	{Akademie-Verlag},
	note =		{First appeared as: Report CS-R8404, CWI, Amsterdam, 1984},
	pages =		{9--23},
	title =		{Verification of an alternating bit protocol by means of process algebra}
}

@incollection{BK86a,
	author =	{J.A. Bergstra and J.W. Klop},
	booktitle =	{Mathematics and Computer Science},
	series =	{CWI Monograph 1},
	address =	{Amsterdam},
	year =		1986,
	editor =	{Bakker, J.W. de and M. Hazewinkel and J.K. Lenstra},
	publisher =	nholland,
	pages =		{89--138},
	title =		{Algebra of communicating processes}
}

@incollection{BK86b,
	author =	{J.A. Bergstra and J.W. Klop},
	booktitle =	{Mathematics and Computer Science II},
	series =	{CWI Monograph 4},
	address =	{Amsterdam},
	year =		1986,
	editor =	{M. Hazewinkel and J.K. Lenstra and L.G.L.T. Meertens},
	publisher =	nholland,
	pages =		{61--94},
	title =		{Process algebra: specification and verification in bisimulation semantics}
}

@article{BK86c,
        author={J.A. Bergstra and J.W. Klop},
        title={Conditional Rewrite Rules: Confluence and Termination},
        journal=jcss,
        volume=32,
        year=1986,
        pages={323-362}
}

@techreport{BK87,
	author =	{J.A. Bergstra and J.W. Klop},
	year =		1987,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R8733},
	address =	{Amsterdam},
	title =		{A convergence theorem in process algebra}
}

@article{BK87a,
	author =	{J.A. Bergstra and J.W. Klop},
	year =		1987,
	institution =	cwi,
	address =	{Amsterdam},
	journal =	cwin,
	note =		{Also appeared in: Algebraic Methods: Theory, Tools and Applications (M. Wirsing \& J.A. Bergstra), LNCS 394, Springer-Verlag, pp. 447--463},
	pages =		{3--23},
	title =		{{$ACP_{\tau}$}: a universal axiom system for process specification},
	volume =	15
}

@inproceedings{BK88,
	author =	{J.A. Bergstra and J.W. Klop},
	booktitle =	{Proceedings Logic Colloquium 1986},
	address =	{Hull},
	year =		1988,
	editor =	{F.R. Drake and J.K. Truss},
	publisher =	nholland,
	note =		{First appeared as: Report CS-R8420, CWI, Amsterdam, 1984},
	pages =		{21--81},
	title =		{A complete inference system for regular processes with silent moves}
}

@inproceedings{BK89,
	author =	{J.A. Bergstra and J.W. Klop},
	crossref =	{REXlinear},
	pages =		{50--122},
	title =		{Process theory based on bisimulation semantics}
}

@techreport{BKO86,
	author =	{J.A. Bergstra and J.W. Klop and E.-R. Olderog},
	year =		1986,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R8609},
	address =	{Amsterdam},
	title =		{Failure semantics with fair abstraction}
}

@inproceedings{BKO87,
	author =	{J.A. Bergstra and J.W. Klop and E.-R. Olderog},
	booktitle =	ebberup,
	address =	{Amsterdam},
	year =		1987,
	editor =	{M. Wirsing},
	publisher =	nholland,
	pages =		{77--103},
	title =		{Failures without chaos: a new process semantics for fair abstraction}
}

@article{BKO88,
	author =	{J.A. Bergstra and J.W. Klop and E.-R. Olderog},
	year =		1988,
	journal =	sicomp,
	number =	6,
	pages =		{1134--1177},
	title =		{Readies and Failures in the Algebra of Communicating
				 Processes},
	volume =	17
}

@inproceedings{BKT85,
	author =	{J.A. Bergstra and J.W. Klop and J.V. Tucker},
	crossref =	{seminar-on-concurrency},
	pages =		{76--95},
	title =		{Process algebra with asynchronous communication
				 mechanisms}
}

@article{BT87,
	author =	{J.A. Bergstra and J. Tiuryn},
	year =		1987,
	journal =	funinf,
	note =		{Also appeared as: Report IW 241, Mathematisch Centrum, Amsterdam, 1983},
	pages =		{213--224},
	title =		{Process algebra semantics for queues},
	volume =	{X}
}

@inproceedings{BT80,
        author =        {J.A. Bergstra and J.V. Tucker},
	crossref =	{ICALP7},
        pages =         {76--90},
        title =         {A characterisation of computable data types
                     by means of a finite equational specification method}
}

@article{BT82,
author="J.A. Bergstra and J.V. Tucker",
title="The completeness of the algebraic specification methods for
computable data types",
year=1982,
pages="186--200",
journal=iandc,
volume=12}

@article{BT84,
	author =	{J.A. Bergstra and J.V. Tucker},
	year =		1984,
	journal =	scp,
	number =	2,
	pages =		{171--199},
	title =		{Top down design and the algebra of communicating processes},
	volume =	5
}

@inproceedings{Berry78,
	author =	{G. Berry},
	title =		{Stable models of typed lambda-calculi},
	pages =		{72--89},
	crossref =	{ICALP5}
}

@phdthesis{Berry79,
	author =	{G. Berry},
	year =		1979,
	month =		mar,
	school =	{Univ. of Paris7},
	title =		{Mod\`{e}les Compl\`{e}tement Ad\'{e}quats et
			Stable des $\lambda$-calculs typ\'{e}s}
}

@techreport{Berry91,
	author =	{G. Berry},
	address =	{Sophia-Antipolis, France},
	year =		1991,
	type =		{Rapport de Recherche},
	number =	{06/91},
	institution =	{Ecole des Mines, CMA},
	title =		{A Hardware Implementation of {P}ure {E}sterel}
}

@inproceedings{BeCo84,
	author =	{G. Berry and L. Cosserat},
	crossref =	{seminar-on-concurrency},
	pages =		{389--448},
	title =		{The {{\bf Esterel}} synchronous programming language
				 and its mathematical semantics}
}

@article{BeGo92,
	author =	{G. Berry and G. Gonthier},
	year =		1992,
	month =		nov,
	journal =	scp,
	volume =	19,
	number =	2,
	pages =		{87--152},
	title =		{The {{\sc Esterel}} synchronous programming language:
				 design, semantics, implementation}
}

@inproceedings{Bs85,
	author =	{E. Best},
	crossref =	{seminar-on-concurrency},
	pages =		{221--245},
	title =		{Concurrent behaviour -- sequences, processes and axioms}
}

@inproceedings{Best87,
	author =	{E. Best},
	crossref =	{advances-in-Petri-nets-87-2},
	pages =		{416--440},
	title =		{{COSY}: its relation to nets and to {CSP}}
}

@article{BD87,
	author =	{E. Best and R. Devillers},
	year =		1987,
	journal =	tcs,
	number =	1,
	pages =		{87--136},
	title =		{Sequential and concurrent behavior in {Petri} net theory},
	volume =	55
}

@misc{BDE93,
	author =	{E. Best and R. Devillers and J. Esparza},
	year =		1993,
	title =		{General refinement and recursion operators for the
				{P}etri box calculus},
	note =		{Will be published in {\em Proc. of STACS-93},
				Springer-Verlag}
}

@inproceedings{BeDH92,
	author =	{E. Best and R. Devillers and J.G. Hall},
	crossref =	{advances-in-Petri-nets-92},
	pages =		{21--69},
	title =		{The {Petri} box calculus: a new causal algebra with
			 multi-label communication}
}

@techreport{BDKP89,
	author =	{E. Best and R. Devillers and A. Kiehn and L. Pomello},
	institution =	{Universit\'{e} Libre de Bruxelles, Laboratoire d' Informatique Theorique},
	number =	{LIT 202},
	year =		1989,
	title =		{Fully concurrent bisimulation}
}

@article{BDKP91,
	author =	{E. Best and R. Devillers and A. Kiehn and L. Pomello},
	year =		1991,
	journal =	acta,
	pages =		{231--264},
	title =		{Concurrent Bisimulations in {P}etri nets},
	volume =	28
}

@techreport{BeEK92,
	author =	{E. Best and J. Esparza and M. Koutny},
	year =		1992,
	month =		nov,
	institution =	{Universit{\"{a}}t Hildesheim,
				 Institut f{\"{u}}r Informatik},
	type =		{Hildesheimer Informatikbericht},
	number =	{14/92},
	title =		{Operational semantics for the box algebra}
}

@techreport{BeKo90,
author="E. Best and M. Koutny",
title="Partial Order Semantics of Priority Systems",
institution="Universit{\"{a}}t Hildesheim, Institut f{\"{u}}r Informatik",
year=1990,
number="6/90"
}

@article{BJP99,
  author    = {A. Beugnard and J. J{\'e}z{\'e}quel and N. Plouzeau},
  title     = {Making Components Contract Aware},
  journal   = {IEEE Computer},
  volume    = {32},
  number    = {7},
  year      = {1999},
  pages     = {38-45}
}

@techreport{BG93a,
        author =        {M.A. Bezem and J.F. Groote},
        year =          1993,
	month =		mar,
        title =         {A Formal Verification of the Alternating Bit
			Protocol in the Calculus of Constructions},
        type =		{Logic Group Preprint Series},
        number =	88,
        institution =	{Dept. of Philosophy, Utrecht University},
}

@article{BG93b,
        author =        {M.A. Bezem and J.F. Groote},
	year =		1993,
	volume =	{30 April},
	journal =	{Automatisering Gids},
	title =		{Kloof theorie/praktijk bezit redelijke kanten}
}

@article{Bez96,
        author =        {M.A. Bezem and J.G. Springintveld},
        title =         {A simple proof of the undecidability
                         of inhabitation in $\lambda {P}$},
        year =          1996,
        journal =       {Journal of Functional Programming},
        volume =        6,
        number =        5,
        pages =         {???}
}

@inproceedings{BF87,
	author = 	{N. Bidoit and C. Froidevaux},
	title = 	{Minimalism subsumes Default Logic and Circumscription},
	crossref =	{LICS2},
	pages =		{89--97}
}

@techreport{BF88,
title="Negation by Default and Non Stratifiable Logic Programs",
author="N. Bidoit and C. Froidevaux",
number=437,
institution="L.R.I. France",
year=1988
}

@article{BiBl86,
	author =	{F. Biemans and P. Blonk},
	year =		1986,
	journal =	{Computers in Industry},
	number =	6,
	pages =		{491--504},
	title =		{On the formal specification and verification of {CIM} architectures using {LOTOS}},
	volume =	7
}

@inproceedings{Bi35,
	author =	{G. Birkhoff},
	booktitle =	{Proceedings of the Cambridge Philosophical Society 31(4)},
	year =		1935,
	pages =		{433--454},
	title =		{On the structure of abstract algebras}
}

@article{BV85,
  	author = 	{F.A.J. Birrer and F.W. Vaandrager},
  	title = 	{Politie-informatiesystemen, Automatisering en Privacy},
  	journal = 	{Kwartaalschrift Privacy en Persoonsregistratie},
  	year = 		1985,
  	volume = 	10,
  	number = 	3,
  	pages = 	{15--19}
}

@article{BBM97,
	author =	{N. Bj{\o}rner and A. Browne and Z. Manna},
	year =		1997,
	journal =	tcs,
	volume =	173,
	number =	1,
	pages =		{49--87},
	title =		{Automatic Generation of Invariants and
			Intermediate Assertions}
}

@article{BEtAl00,
	author =	{N. Bj{\o}rner and A. Browne and M.A. Col\'on
			and B. Finkbeiner and Z. Manna and H.B. Sipma and
			T.E. Uribe},
        title=		{Verifying Temporal Properties of Reactive Systems:
			A {STeP} Tutorial},
	journal =	{Formal Methods in System Design},
        year=		2000,
	note = 		{To appear}
}

@inproceedings{Bl87,
	author =	{B. Bloom},
	crossref =	{PODC6},
	pages =		{249--259},
	title =		{Constructing Two-Writer Atomic Registers}
}

@article{Bl88,
  	author = {B. Bloom},
  	title = {Constructing Two-writer Atomic Registers},
  	journal = ieeetc,
  	year = 1988,
  	volume = 37,
  	number = 12,
  	pages = {1506--1514},
  	month = dec
}

@phdthesis{Bl89,
	author =	{B. Bloom},
	year =		1989,
	month =		aug,
	school =	miteecs,
	title =		{Ready Simulation, Bisimulation, and the Semantics
				 of {CCS}-like Languages}
}

@unpublished{Bl90,
	author =	{B. Bloom},
	year =		1990,
	month =		oct,
	title =		{Strong Process Equivalence in the Presence of
				 Hidden Moves},
	note =		{Preliminary report}
}

@article{Bl90a,
	author =	{B. Bloom},
	year =		1990,
	month =		jul # "/" # aug,
	pages =		{263--300},
	journal =	iandcomp,
	volume =	87,
	number =	{1/2},
	title =		{Can {LCF} be Topped?
			 {F}lat Lattice Models of Typed $\lambda$-Calculus}
}

@techreport{Bloom-93-ready,
	author =	{B. Bloom},
	month =		aug,
	year =		1993,
	institution =	{Department of Computer Science, Cornell University},
	number =	{TR 93-1372},
	address =	{Ithaca, New York},
	title =		{Ready, set, go: Structural operational semantics for
				linear-time process algebras}
}

@techreport{Bloom-93-weak,
	author =	{B. Bloom},
	month =		aug,
	year =		1993,
	institution =	{Department of Computer Science, Cornell University},
	number =	{TR 93-1373},
	address =	{Ithaca, New York},
	title =		{Structural operational semantics for weak
					 bisimulations}
}


@unpublished{Bloom-94-chocolate,
  	author = {B. Bloom},
  	title = {{CHOCOLATE: Calculi of Higher Order COmmunication and
           LAmbda TErms}},
  	note = {To appear in POPL '94},
  	month = {November },
  	year = 1994,
  	key = {}
}

@inproceedings{BIM88,
	author =	{B. Bloom and S. Istrail and A.R. Meyer},
	crossref =	{POPL15},
	pages =		{229--239},
	title =		{Bisimulation Can't be Traced: Preliminary Report},
	note =		{Full version available as Technical Report 90-1150,
			Department of Computer Science, Cornell University,
			Ithaca, New York, August 1990.
			Accepted to appear in {\em Journal of the ACM}}
}

@techreport{BIM90,
	author =	{B. Bloom and S. Istrail and A.R. Meyer},
	number =	{90-1150},
	month =		aug,
	year =		1990,
	institution =	{Department of Computer Science, Cornell University},
	address =	{Ithaca, New York},
	title =		{Bisimulation Can't be Traced}
}

@article{BIM95,
	author =	{B. Bloom and S. Istrail and A.R. Meyer},
	year =		1995,
	month =		jan,
	journal =	jacm,
	volume = 	42,
	number =	1,
	pages =		{232--268},
	title =		{Bisimulation Can't be Traced}
}

@InProceedings{Bloom-Meyer-89-b,
  	author = 	{B. Bloom and A.R. Meyer},
  	title = 	{Experimenting with Process Equivalence},
  	booktitle = 	{Proceedings of the International BCS-FACS Workshop on
			Semantics for Concurrency, Leicester, UK},
  	year = 		1990,
  	month = 	jul,
  	publisher = 	springer,
	note =		{To appear in a Special Issue of {\em TCS}}
}

@misc{BlV94,
	author =	{B. Bloom and F.W. Vaandrager},
	year =		1994,
	month =		jul,
	title =		{{SOS} Rule Formats for Parameterized and
				State-Bearing Processes}
}

@article{Bo76,
	author =	{G.V. Bochman},
	year =		1976,
	journal =	cacm,
	number =	2,
	pages =		{55--62},
	title =		{Semantic evaluation from left to right},
	volume =	19
}

@article{Boa93,
	author =	{M. Boasson},
	year =		1993,
	month =		jul,
	journal =	{IEEE Transactions on Automatic Control},
	volume =	38,
	number =	7,
	pages =		{1094--1106},
	title =		{Control Systems Software}
}

@inproceedings{dBP91,
	author =	{Boer, F.S. de and C. Palamidessi},
	crossref =	{CONCUR91},
	pages =		{127--141},
	title =		{Embedding as a Tool for Language Comparison:
				On the {CSP} Hierarchy}
}

@inproceedings{dBP91a,
        author = 	{Boer, F.S. de and C. Palamidessi},
        title = 	{A Fully Abstract Model for Concurrent Constraint
                		Programming},
        year = 		1991,
        booktitle = 	{Proceedings of TAPSOFT/CAAP},
        editor = 	{S. Abramsky and T.S.E. Maibaum},
        publisher = 	springer,
        series = 	lncs,
        pages = 	{296-319},
        volume = 	493,
	note =		{Revised and Extended version in Technical Report
			 CS-9110, Department of Computer Science,
			 University of Utrecht, The Netherlands}
}

@article{dBP92,
        author = 	{Boer, F.S. de and C. Palamidessi},
        title = 	{Embedding as a Tool for Language Comparison},
	year =		1992,
        journal = 	iandcomp,
        note = 		{To appear.  Available also as Technical
                	Report CS-R9102, CWI, Amsterdam, 1991}
}

@techreport{BPB94,
        author = 	{Boer, F.S. de and C. Palamidessi and E. Best},
	year =		1994,
	institution =	{Universita di Genova, DISI},
	number =	{DISI-TR-94-15},
	title =		{Concurrent Constraint Programming with
				Information Removal}
}

@inproceedings{dBKPR91,
	author =	{Boer, F.S. de and J.N. Kok and C. Palamidessi
				and J.J.M.M. Rutten},
	crossref =	{CONCUR91},
	pages =		{111--126},
	note =		{Extended version as Technical Report RUU-CS-90-40,
                		University of Utrecht},
	title =		{The Failure of Failures in a Paradigm for
				Asynchronous Communication}
}

@inproceedings{dBKP92,
	author =	{Boer, F.S. de and J.W. Klop and C. Palamidessi},
	title =		{Asynchronous Communication in Process Algebra},
	crossref =	{LICS7},
	pages =		{137--147}
}

@inproceedings{BAHKM93,
	author =	{Boer, G.A. den and Albada, G.D. van and
			L.O. Hertzberger and C. Koburg and M. Mergel},
	title =		{The {MARIE} Autonomous Mobile Robot},
	booktitle =	{International Conference on Intelligent
			Autonomous Systems (IAS 3)},
	month =		feb,
	year =		1993
}

@incollection{denB73,
	author =	{Boer, W. den},
	title =		{Vaandragers tussen 1920 en 1930},
	year =		1973,
	booktitle =	{Genealogie van het geslacht Vaandrager},
	editors =	{H.J. Barendregt, samensteller},
	publisher =	{De Residentie},
	address =	{Den Haag}
}

@inproceedings{BP03,
  author    = {N. Bogunovic and E. Pek},
  title     = {Verification of Mutual Exclusion Algorithms with {SMV} System},
  year      = {2003},
  pages     = {21--25},
  booktitle = {EUROCON 2003.  Computer as a Tool.  The IEEE Region 8. Vol 2},
  publisher = {IEEE Computer Society}
}

@inproceedings{BohnenkampGGK05,
  author    = {H.C. Bohnenkamp and J. Gorter and J. Guidi and J.-P. Katoen},
  title     = {Are You Still There? - A Lightweight Algorithm to Monitor
               Node Presence in Self-Configuring Networks},
  year      = {2005},
  pages     = {704-709},
  booktitle     = {2005 International Conference on Dependable Systems and
               Networks (DSN 2005), 28 June - 1 July 2005, Yokohama, Japan,
               Proceedings},
  publisher = {IEEE Computer Society}
}

@inproceedings{BHZV02,
	author =	{H. Bohnenkamp and H. Hermanns and M. Zhang and F.W. Vaandrager},
	booktitle =	{Proceedings of the 3rd PROGRESS Workshop on
			 Embedded Systems,
			{\rm Utrecht, the Netherlands}},
	year =		2002,
	publisher =	{PROGRESS/STW},
	title =		{Cost-Optimisation of the {IPv4} Zeroconf Protocol},
	url =		{http://www.cs.ru.nl/ita/publications/papers/fvaan/progress2002.pdf},
	note =		{ISBN 90-73461-34-0}
}

@inproceedings{BSHV03,
	author =	{H. Bohnenkamp and Stok, P. van der and H. Hermanss and
			F.W. Vaandrager},
	booktitle =	{Proceedings of the International Conference on
			 Dependable Systems and Networks (DSN2003)},
	year =		2003,
	publisher =	{IEEE Computer Society},
	address =	{Los Alamitos, California},
	title =		{Cost-Optimisation of the {IPv4} Zeroconf Protocol},
	url =		{http://www.cs.ru.nl/ita/publications/papers/fvaan/IPDS.html},
	pages =		{531--540}
}

@techreport{BAK89,
title="An Analysis of Loop Checking Mechanisms for Logic Programs",
author="R.N. Bol and K.R. Apt and J.W. Klop",
year=1989,
note="To appear in {\em Theoretical Computer Science}",
number="CS-R8947",
	institution =	cwi,
	type =		{Report},
	address =	{Amsterdam},
}

@inproceedings{BolG91,
	title = 		{The Meaning of Negative Premises in
			  	Transition System Specifications
				(extended abstract)},
	author = 		{R.N. Bol and J.F. Groote},
	crossref =		{ICALP18},
	pages =			{481--494},
	note =			{Full version appeared as Report CS-R9054,
				 CWI, Amsterdam, 1990}
}

@inproceedings{BL91,
	author =	{T. Bolognesi and F. Lucidi},
	title =		{{LOTOS}-like process algebras with urgent or timed
				interactions},
	crossref =	{FORTE4}
}

@inproceedings{BLT90,
	author =	{T. Bolognesi and F. Lucidi and S. Trigila},
	title =		{From Timed {P}etri Nets to Timed {LOTOS}},
	crossref =	{PSTV10},
	pages =		{395--408}
}

@inproceedings{BL92,
	author =	{T. Bolognesi and F. Lucidi},
	crossref =	{REXrealtime},
	pages =		{124--148},
	title =		{Timed process algebras with urgent interactions and
			 a unique powerful binary operator}
}

@inproceedings{BS87,
	author =	{T. Bolognesi and S.A. Smolka},
	crossref =	{PSTV7},
	title =		{Fundamental results for the verification of
				 observational equivalence: a survey},
	pages =		{165--178}
}

@techreport{BFL95,
	author =	{C. Bonini and W.J. Fokkink and A. Lesch},
	year =		1995,
	month =		jan,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R9502},
	address =	{Amsterdam},
	title =		{A reference model for teleconferencing systems}
}

@techreport{BOOST,
	author =	{{BOOST}},
	year =		1991,
	month =		dec,
	institution =	{RACE Programme, Proposal 12416},
	type =		{Technical Annex},
	title =		{Broadband Object-Oriented Service Technology}
}

@inproceedings{BS95,
	author =	{M. Boreale and D. Sangiorgi},
	booktitle =	{Proceedings 12th Symposium on Theoretical Aspects
			 of Computer Science (STACS'95)},
	year =		1995,
	series =	lncs,
	publisher =	springer,
	title =		{A fully abstract semantics for causality in the
			 $\pi$-calculus},
	note =		{To appear.  Full version submitted for publication}
}

@misc{BS94,
	author =        {M. Boreale and D. Sangiorgi},
	title =         {A fully abstract semantics for causality in the
                         $\pi$-calculus (full version)},
	year =		1994,
	month =		oct,
	note =		{Submitted for publication}
}


@article{BU91,
        author =        {B.S. Bosik and M.\"{U}. Uyar},
        year =          1991,
        journal =       jcnisdns,
        volume =        22,
        number =        1,
        pages =         {7--33},
        title =         {Finite state machine based formal methods in
                         protocol conformance testing: from theory to
                         implementation}
}



@techreport{Bos94,
	author =	{D.J.B. Bosscher},
	title =		{Term Rewriting Properties of {SOS} Axiomatisations},
	year =		1994,
	month =		jan,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R9405},
	address =	{Amsterdam}
}

@inproceedings{Bos94b,
	author =	{D.J.B. Bosscher},
	title =		{Term Rewriting Properties of {SOS} Axiomatisations},
	crossref =	{TACS94},
        pages =         {425--439}
}

@article{BG95,
	author =	{D.J.B. Bosscher and W.O.D. Griffioen},
	title =		{Een {P}hilips-protocol correct bewezen},
	year = 		1995,
	journal =	{Informatie},
 	volume =	37,
	number =	6,
	pages =		{14--18}
}

@inproceedings{BG96,
title={Regularity of a class of Context-free Processes is decidable},
author={D.J.B. Bosscher and W.O.D. Griffioen},
crossref = {ICALP23},
pages={182--193}
}

@inproceedings{BPV94,
	author =	{D.J.B. Bosscher and I. Polak and F.W. Vaandrager},
	title =		{Verification of an Audio Control Protocol},
	crossref =	{FTRTFT94},
	pages =		{170--192}
}

@techreport{BPV94b,
	author =	{D.J.B. Bosscher and I. Polak and F.W. Vaandrager},
	title =		{Verification of an Audio Control Protocol},
	year =		1994,
	month =		jul,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R9445},
	address =	{Amsterdam}
}

@incollection{BPV94c,
	author =	{D.J.B. Bosscher and I. Polak and F.W. Vaandrager},
	title =		{Verification of an Audio Control Protocol},
	year =		1994,
	booktitle =	{Theories and Experiences for Real-Time System
			 Development},
	editors =	{T. Rus and C. Rattray},
	publisher =	{World Scientific},
	series =	{AMAST Series in Computing},
	volume =	2,
	address =	{Singapore},
	pages =		{147--176},
}

@inproceedings{BP95,
	author =	{D.J.B. Bosscher and A. Ponse},
	title =		{Translating a Process Algebra with Symbolic Data
			Values to Linear Format},
	crossref =	{TACAS95},
	pages =		{119--130}
}

@inproceedings{BLR95,
	author =	{A. Bouadjjani and Y. Lakhnech and R. Robbana},
	crossref =	{CAV7},
	title =		{From Duration Calculus to Linear Hybrid Automata}
}

@techreport{BGL94,
        author =        {A. Bouali and S. Gnesi and S. Larosa},
        year =          1994,
	month =		jul,
        institution =   cwi,
        type =          {Report},
        number =        {CS-R9443},
        address =       {Amsterdam},
        title =         {The Integration Project for the {JACK} Environment}
}

@techreport{BD94,
        author =        {A. Bouali and De Nicola, R.},
        year =          1994,
	month =		sep,
        institution =   cwi,
        type =          {Report},
        number =        {CS-R9452},
        address =       {Amsterdam},
        title =         {Branching bisimulation as a strong bisimulation}
}

@incollection{Bo85,
	author =	{G. Boudol},
	booktitle =	{Logics and Models of Concurrent Systems},
	year =		1985,
	editor =	{K. Apt},
	note =		{NATO ASI Series F13},
	publisher =	springer,
	pages =		{261--303},
	title =		{Notes on algebraic calculi of processes}
}

@article{Bo89,
	author =	{G. Boudol},
	year =		1989,
	journal =	eatcs,
	pages =		{136--144},
	title =		{Atomic actions (note)},
	volume =	38
}

@inproceedings{Bo89a,
title="Towards a Lambda-Calculus for Concurrent and Communicating Systems",
author="G. Boudol",
year=1989,
booktitle="TAPSOFT 1989,\rm~" #lncs# "~351",
pages="149--161",
publisher=springer}

@inproceedings{Bo90,
	author =	{G. Boudol},
	crossref =	{RochePosay},
	pages =		{62--95},
	title =		{Flow Event Structures and Flow Nets}
}

@misc{Bo92,
	author =	{G. Boudol},
	year =		1992,
	title =		{Asynchrony and the $\pi$-calculus (Note)}
}

@inproceedings{BC87,
	author =	{G. Boudol and I. Castellani},
	booktitle =	tapsoft87v1,
	year =		1987,
	editor =	{H. Ehrig and R. Kowalski and G. Levi and U. Montanari},
	series =	lncs,
	volume =	249,
	publisher =	springer,
	pages =		{123--137},
	title =		{On the semantics of concurrency: partial orders
				 and transition systems}
}

@article{BC88,
	author =	{G. Boudol and I. Castellani},
	year =		1988,
	journal =	funinf,
	number =	4,
	pages =		{433--452},
	title =		{A non-interleaving semantics for {CCS} based on proved transitions},
	volume =	11
}

@article{BC88a,
	author =	{G. Boudol and I. Castellani},
	year =		1988,
	journal =	tcs,
	number =	{1/2},
	pages =		{25--84},
	title =		{Concurrency and atomicity},
	volume =	59
}

@inproceedings{BC89,
	author =	{G. Boudol and I. Castellani},
	crossref =	{REXlinear},
	pages =		{411--427},
	title =		{Permutation of transitions: an event structure
			 semantics for {CCS} and {SCCS}}
}

@inproceedings{BC90,
	author =	{G. Boudol and I. Castellani},
	crossref =	{RochePosay},
	pages =		{96--141},
	title =		{Three Equivalent Semantics for {CCS}}
}

@techreport{BC91a,
 	author=      	{G. Boudol and I. Castellani},
 	title=        	{Flow models of distributed computations: Event
				Structures and Nets},
 	institution= 	{INRIA},
 	type=        	{Report},
 	number=      	1482,
 	year=        	1991,
 	note=        	{A previous version appeared in Proc.\ La Roche-Posay,
              			LNCS 469, 1990}
}

@TechReport{BC91b,
 Author=      "G. Boudol and I. Castellani",
 Title=       "Flow models of distributed computations: three equivalent
               semantics for {CCS}",
 Institution= "INRIA",
 Type=        "Report",
 Number=      "1484",
 Year=        "1991",
 Note=        "To appear in {\em Information and Computation}.
              A previous version appeared in Proc.\ La Roche-Posay,
              LNCS 469, 1990"}

@techreport{BoLa89,
	author =	{G. Boudol and K.G. Larsen},
	year =		1989,
	month =		sep,
	institution = 	{Institute for Electronic Systems,
			 The University of Aalborg},
	number =	{R 89-33},
	title =		{Graphical Versus Logical Specifications}
}

@incollection{BRS86,
	author =	{G. Boudol and G. Roucairol and Simone, R. de},
	booktitle =	{Advances in Petri Nets 1985},
	year =		1986,
	editor =	{G. Rozenberg},
	series =	lncs,
	volume =	222,
	publisher =	springer,
	pages =		{41--58},
	title =		{Petri nets and algebraic calculi of processes}
}

@inproceedings{Bouge85,
	author =	{L. Boug\'{e}},
	crossref =	{ICALP12},
	pages =		{63--70},
	title =		{Repeated synchronous snapshots and their implementation
				 in {CSP} (extended abstract)}
}

@article{Bouge87,
	author =	{L. Boug\'{e}},
	year =		1987,
	journal =	tcs,
	pages =		{145--169},
	title =		{Repeated snapshots in distributed systems with
		 synchronous communications and their implementation in {CSP}},
	volume =	49
}

@article{Bouge87a,
	author =	{L. Boug\'{e}},
	year =		1987,
	publisher =	{Gesellschaft f\"{u}r Informatik, Bonn},
	journal =	{Petri Net Newsletter},
	title =		{Simple nets: when symmetry meets simplicity},
	volume =	28
}

@article{Bouge88,
	author =	{L. Boug\'{e}},
	year =		1988,
	journal =	acta,
	volume =	25,
	pages =		{179--201},
	title =		{On the existence of symmetric algorithms to find
		 leaders in networks of communicating sequential processes}
}

@misc{Bou95,
	author =	{R.H. Bourgonjon},
	title =		{Software pervasion in the electronic industry},
	note =		{Slides of talk presented at meeting of
			Dutch graduate school IPA},
	address =	{Eindhoven},
	month =		jun,
	year =		1995
}

@inproceedings{Boute90,
	author =	{R.T. Boute},
	year =		1990,
	month =		aug,
	title =		{Funmath: towards a general formalism for system
			description in engineering applications},
	booktitle =	{Advances in Electrical Engineering Software},
	editor =	{P.P. Silvester},
	pages =		{215--226},
	publisher =	{Computational Mechanics Publications, Southampton,
			and Springer-Verlag, Berlin}
}


@book{ARTISTRoadmap,
	title =		{Embedded Systems Design: The {ARTIST} Roadmap for Research and Development},
	booktitle =	{Handbook of Process Algebra},
	editor =	{B. Bouyssounouse and J. Sifakis},
	year =		2005,
	series =	lncs,
	volume =	3436,
	publisher =	springer,
	crossrefonly =  1
}

@misc{WWW_Formal_Methods,
	author =	{J.P. Bowen},
	title =		{{The World-Wide Web Virtual Library on Formal Methods}},
	note =		{URL
		{\tt http://www.comlab.ox.ac.uk/archive/formal-methods.html}}
}

@techreport{BH94,
	author =	{J.P. Bowen and M.G. Hinchey},
	year =		1994,
	institution =	{Oxford University Computing Laboratory,
			 Programming Research Group},
	type =		{Technical Report},
	number =	{PRG-TR-7-94},
	title =		{Seven more myths of formal methods}
}

@article{BowenH06,
  author    = {J.P. Bowen and M.G. Hinchey},
  title     = {Ten Commandments of Formal Methods ...Ten Years Later},
  journal   = {IEEE Computer},
  volume    = {39},
  number    = {1},
  year      = {2006},
  pages     = {40-48}
}

@inproceedings{HB99,
  author =       {H. Bowman},
  title =        {Modelling Timeouts without Timelocks},
  month =        {May},
  year =         {1999},
  pages =        {20},
  keywords =     {Timed Automata, Timelocks, Timeouts},
  booktitle =    {ARTS'99, 5th International AMAST Workshop on
                  Real-time and Probabilistic Systems},
  publisher =    {Springer-Verlag},
  series =       {LNCS},
}


@book{BoM88,
	author =	{R.S. Boyer and J.S. Moore},
	year =		1988,
	address =	{New York},
	publisher =	{Academic Press},
	title =		{A Computational Logic Handbook}
}

@InProceedings{bdmoty:cav98,
  author =       {M. Bozga and C. Daws and O. Maler and A. Olivero and
			 S. Tripakis and S. Yovine},
  title =        {{Kronos: A Model-Checking Tool for Real-Time Systems}},
  crossref =	 {CAV10},
  pages =        {546--550}
}

@phdthesis{Bra95,
	author=		{M.S. Branicky},
	title=		{Studies in Hybrid Systems:
				Modeling, Analysis, and Control},
	school=		{Laboratory for Information and Decision Systems,
				Massachusetts Institute of Technology,
				Cambridge, MA, USA},
	month = 	jun,
	year =		1995
}

@inproceedings{Bra98,
	author= 	{M.S. Branicky},
        title =         {Analyzing and Synthesizing Hybrid Control Systems},
	crossref =	{Embedded98},
	pages =		{74--113}
}

@inproceedings{BDL97,
	author =	{M.S. Branicky and E. Dolginova and N.A. Lynch},
	title =		{A toolbox for proving and maintaining hybrid
				 specifications},
	crossref =	{HybridIV},
	pages =		{18--30}
}

@inproceedings{BrTa86,
	author =	{W. Brauer and D.A. Taubner},
	booktitle =	{Proceedings $4^{th}$ Hungarian
				 Computer Science Conference},
	address =	{Budapest},
	year =		1986,
	editor =	{M. Arat\'{o} and I. K\'{a}tai and L. Varga},
	publisher =	{Acad\'{e}miai Kiad\'{o}},
	pages =		{129--143},
	title =		{Petri nets and {CSP}}
}

@article{BrH75,
title="The Programming Language {C}oncurrent {P}ascal",
author="P. {Brinch Hansen}",
volume=1,
number=2,
year=1975,
pages="199--207",
journal=ieeese}

@inproceedings{vdBG94,
        author =        {Brink, J. van den and W.O.D. Griffioen},
        title =         {Formal Semantics of Interworkings with Discrete
				Absolute Time},
	crossref =	{ACP94},
	pages =		{106--123}
}

@inproceedings{Br87,
	author=		{E. Brinksma},
	year=		1987,
	title=		{A Theory for the Derivation of Tests},
	booktitle=	{Proceedings of the Eighth International Conference on
			Protocol Specification, Testing and Verification},
	editor=		{S. Aggarwal},
	publisher=	nholland
}

@phdthesis{Br88,
	author =	{E. Brinksma},
	year =		1988,
	school =	{Department of Computer Science, University of Twente},
	title =		{On the design of {Extended LOTOS} --
			 a specification language for open distributed systems}
}

@techreport{BM04,
  author =       {E. Brinksma and A. Mader},
  year =         2004,
  month =        {January},
  institution =  {Centre for Telematics and Information Technology, Univ. of Twente, The Netherlands},
  number =       {TR-CTIT-04-03},
  title =        {On Verification Modelling of Embedded Systems}
}

@article{BMF02,
	author = {E. Brinksma and A. Mader and A. Fehnker},
	title = {Verification and Optimization of a {PLC} Control Schedule},
	journal = {Int. Journal on Software Tools for Technology Transfer},
	volume = {4},
	number = {1},
	pages = {21-33},
	year = {2002},
	url = {http://www.cs.utwente.nl/~mader/PAPERS/spinfin.ps},
	abstract = {We report on the use of model checking techniques for
both the verification of a process control program and the derivation of
optimal control schedules.  Most of this work has been carried out as part of
a case study for the EU VHS project (Verification of Hybrid Systems), in which
the program for a Programmable Logic Controller (PLC) of an experimental
chemical plant had to be designed and verified.  The original intention of
our approach was to see how much could be achieved here using the standard
model checking environment of SPIN/Promela.  As the symbolic calculations of
real-time model checkers can be quite expensive it is interesting to try and
exploit the efficiency of established non-real-time model checkers like SPIN in
those cases where promising work-arounds seem to exist. In our case we handled
the relevant real-time properties of the PLC controller using a
time-abstraction technique; for the scheduling we implemented in Promela a
so-called variable time advance procedure.  To compare and interpret the
results we carried out the same case study with the aid of the real-time model
checker Uppaal, enhanced with facilities for cost-guided state space
exploration.  Both approaches proved sufficiently powerful to verify the
design of the controller and/or derive (time-)optimal schedules within
reasonable time and space requirements.}
}



@inproceedings{Bro93,
	author =	{R.W. Brocket},
	booktitle =	{Essays on Control: Perspectives in the Theory and
			its Applications},
	year =		1993,
	editor =	{H.L. Trentelman and J.C. Willems},
	publisher =	{Birkh\"{a}user, Boston},
	series =	{Progress in Systems and Control Theory},
	volume =	14,
	pages =		{29--53},
	title =		{Hybrid Models for Motion Control Systems}
}

@inproceedings{BrW93,
	author =	{J. Broenink and K. Wijbrans},
	title =		{Describing discontinuities in bond graphs},
	year =		1993,
	publisher =	{SCS Simulation Series 25 No 2},
	booktitle =	{Proceedings of the First International Conference
				on Bond Graph Modeling}
}

@article{BHR84,
	author =	{S.D. Brookes and C.A.R. Hoare and A.W. Roscoe},
	year =		1984,
	journal =	jacm,
	number =	3,
	pages =		{560--599},
	title =		{A theory of communicating sequential processes},
	volume =	31
}

@inproceedings{BR85,
	author =	{S.D. Brookes and A.W. Roscoe},
	crossref =	{seminar-on-concurrency},
	pages =		{281--305},
	title =		{An improved failures model for communicating processes}
}

@inproceedings{BrownP06,
  author    = {G. M. Brown and L. Pike},
  title     = {Easy Parameterized Verification of Biphase Mark and 8N1
               Protocols},
  booktitle = {TACAS},
  year      = {2006},
  pages     = {58-72},
  editor    = {H. Hermanns and J. Palsberg},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {3920},
}


@article{BCG88,
	author =	{M.C. Browne and E.M. Clarke and O. Gr\"{u}mberg},
	year =		1988,
	journal =	{Theoretical Computer Science},
	number =	{1,2},
	pages =		{115--131},
	title =		{Characterizing finite {Kripke} structures
				 in propositional temporal logic},
	volume =	59
}

@techreport{Br86,
	author =	{M. Broy},
	year =		1986,
	institution =	passau,
	type =		{Report},
	number =	{MIP-8602},
	title =		{Process semantics of communicating concurrent programs}
}

@article{Broy88,
	author =	{M. Broy},
	year =		1988,
	journal =	scp,
	pages =		{65--86},
	title =		{Views on queues},
	volume =	11
}

@inproceedings{BrSt87,
	author =	{M. Broy and T. Streicher},
	booktitle =	{Proceedings Advanced School on Mathematical Models for the Semantics of Parallelism, 1986},
	year =		1987,
	editor =	{M. Venturini Zilli},
	series =	lncs,
	volume =	280,
	publisher =	springer,
	pages =		{114--143},
	title =		{Views of distributed systems}
}

@INCOLLECTION{Bru70
, AUTHOR       = "Bruijn, N.G. de"
, TITLE        = "The Mathematical Language {AUTOMATH}"
, PAGES        = "29--61"
, SERIES       = lnm
, VOLUME       = 25
, PUBLISHER    = springer
, ADDRESS      = "Berlin"
, YEAR         = "1970"
}

@INPROCEEDINGS{Bru80
, AUTHOR       = "Bruijn, N.G. de"
, TITLE        = "A survey of the project {Automath}"
, BOOKTITLE    = "To H.B. Curry: Essays on Combinatory Logic, Lambda
			Calculus and Formalisms"
, EDITOR       = "J.R. Hindley and J.P. Seldin"
, PUBLISHER    = "Academic Press"
, YEAR         = "1980"
}

@inproceedings{BKKM94,
        author =        {J.J. Brunekreef and J.-P. Katoen and R. Koymans
				and S. Mauw},
        title =         {Algebraic Specification of Dynamic Leader Election
			Protocols in Broadcast Networks},
	crossref =	{ACP94},
	pages =		{338--357}
}

@inproceedings{BS98,
  author    = {G. Bruns and M.G. Staskauskas},
  title     = {Applying Formal Methods to a Protocol Standard and its Implementations.},
  booktitle = {Proceedings International Symposium on Software Engineering for Parallel
                 and Distributed Systems (PDSE 1998), {\rm 20-21 April, 1998, Kyoto, Japan}},
  publisher = {IEEE Computer Society},
  year      = {1998},
  pages     = {198-205},
}


@article{Bry86,
	author =	{R.E. Bryant},
	year =		1986,
	month =		aug,
	journal =	ieeetc,
	volume =	{C-35},
	number =	8,
	pages =		{677--691},
	title =		{Graph-Based Algorithms for Boolean Function
				Manipulation}
}

@article{BuSi83,
        author =        {G.N. Buckley and A. Silberschatz},
        year =          1983,
        journal = toplas,
        volume=5,
        number=2,
        pages="223--235",
        title =         {An Effective Implementation for the Generalized
                              Input-Output Construct of {CSP}}
}

@inproceedings{BCMDH90,
	title =		{Symbolic Model Checking $10^{20}$ States and Beyond},
	author =	{J.R. Burch and E.M. Clarke and K.L. McMillan and
				 D.L. Dill and L.J.  Hwang},
	crossref =	{LICS5},
	pages=		{428--439}
}

@article{BCMDH92,
	title =		{Symbolic Model Checking $10^{20}$ States and Beyond},
	author =	{J.R. Burch and E.M. Clarke and K.L. McMillan and
				 D.L. Dill and L.J.  Hwang},
	journal =	i&c,
	volume =	98,
	number =	2,
	year =		1992,
	month =		jun,
	pages=		{142--170}
}

@article{Bur69,
author="R.M.B. Burstall",
year=1969,
title="Proving Properties of Programs by Structural Induction",
journal=comj,
volume=12,
number=1,
pages="41--48"}

@inproceedings{BuLa69,
author="R.M. Burstall and P. Landin",
title="Programs and their Proofs: an Algebraic Approach",
booktitle="Machine intelligence",
volume=4,
editor="B. Meltzer and D. Michie",
pages="17--43",
year=1969,
publisher="Edinburgh University Press"}

@inproceedings{Bu80,
	author =	{D.W. Bustard},
	booktitle =	{On the construction of programs -- an advanced course},
	year =		1980,
	editor =	{R.M. McKeag and A.M. Macnaghten},
	publisher =	cup,
	pages =		{1--57},
	title =		{An introduction to {Pascal-Plus}}
}

@article{Cam89,
	author=		"J. Camilleri",
	title=		"An Operational Semantics for {OCCAM}",
	journal=	ijpp,
	year=		1989,
	volume=		18,
	number=		5,
	month=		oct,
	pages=		"149--167"
}

@inproceedings{CaWi91,
	author =	{J. Camilleri and G. Winskel},
	title =		{{CCS} with Priority Choice},
	pages =		{246--255},
	crossref =	{LICS6}
}

@inproceedings{CampbellGNSTV05,
  author    = {C, Campbell and W. Grieskamp and L. Nachmanson and W. Schulte and N. Tillmann and
               M. Veanes},
  title     = {Testing Concurrent Object-Oriented Systems with Spec Explorer.},
  year      = {2005},
  pages     = {542-547},
  editor    = {J. Fitzgerald and I.J. Hayes and A. Tarlecki},
  booktitle     = {FM 2005: Formal Methods, International Symposium of Formal
               Methods Europe, Newcastle, UK, July 18-22, 2005, Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {3582}
}

@inproceedings{CCM95,
    	author = 	{S. Caselli and G. Conte and P. Marenzoni},
    	title = 	{Parallel state space exploration for {GSPN} models},
	booktitle =	{Proceedings 16th Int. Conf. on Application and Theory of Petri Nets,
			{\rm Turin, Italy}},
	editor =	{G. De Michelis and M. Diaz},
	pages =		{181--200},
	series =	lncs,
	volume =	935,
	publisher =	springer,
    	month = 	jun,
    	year = 		1995
}

@inproceedings{CDFLL05,
  author    = {F. Cassez and A. David and E. Fleury and K.G. Larsen and D. Lime},
  title     = {Efficient On-the-Fly Algorithms for the Analysis of Timed Games},
  year      = {2005},
  pages     = {66-80},
  ee        = {http://dx.doi.org/10.1007/11539452_9},
  editor    = {Mart\'{\i}n Abadi and Luca de Alfaro},
  booktitle     = {CONCUR 2005 - Concurrency Theory, 16th International Conference,
               CONCUR 2005, San Francisco, CA, USA, August 23-26, 2005,
               Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {3653}
}

@inproceedings{CassezJLRR09,
  author    = {F. Cassez and
               J.J. Jessen and
               K. G. Larsen and
               J.-F. Raskin and
               P.-A. Reynier},
  title     = {Automatic Synthesis of Robust and Optimal Controllers -
               An Industrial Case Study},
  year      = {2009},
  pages     = {90-104},
  ee        = {http://dx.doi.org/10.1007/978-3-642-00602-9_7},
  editor    = {Rupak Majumdar and
               Paulo Tabuada},
  booktitle     = {Hybrid Systems: Computation and Control, 12th International
               Conference, HSCC 2009, San Francisco, CA, USA, April 13-15,
               2009. Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {5469}
}

@article{Ca87,
	author =	{I. Castellani},
	year =		1987,
	journal =	jcss,
	pages =		{210--235},
	title =		{Bisimulations and abstraction homomorphisms},
	volume =	34
}

@phdthesis{Ca87a,
	author =	{I. Castellani},
	year =		1987,
	school =	{Department of Computer Science, University of Edinburgh},
	title =		{Bisimulations for concurrency}
}

@InProceedings{Canetti01,
  author = 	 {R. Canetti},
  title = 	 {Universally composable security: a new paradigm for cryptographic protocols},
  booktitle = 	 {Proceedings of the 42nd IEEE Symposium on Foundations of Computing},
  pages =	 {136--145},
  year =	 2001
}

@inproceedings{CFM83,
	author =	{I. Castellani and P. Franceschi and U. Montanari},
	booktitle =	garmisch,
	year =		1983,
	editor =	{D. Bj\mbox{\o}rner},
	publisher =	nholland,
	pages =		{383--400},
	title =		{Labeled event structures: a model for observable concurrency}
}

@article{CH89,
	author =	{I. Castellani and M. Hennessy},
	year =		1989,
	journal =	jacm,
	number =	4,
	pages =		{887--911},
	title =		{Distributed bisimulations},
	volume =	36
}

@techreport{CZ89,
	author =	{I. Castellani and G.Q. Zhang},
	address =	{Valbonne Cedex},
	year =		1989,
	month =		aug,
	type =		{Report},
	number =	1078,
	institution =	{INRIA, Centre Sophia-Antipolis},
	title =		{Parallel Product of Event Structures}
}

@article{CDP87,
	author =	{L. Castellano and De Michelis, G. and L. Pomello},
	year =		1987,
	journal =	eatcs,
	pages =		{12--15},
	title =		{Concurrency vs interleaving: an instructive example},
	volume =	31
}

@InProceedings{CKdR92,
  author =       "Antonio Cau and Ruurd Kuiper and Willem-Paul de Roever",
  title =        "Formalizing {D}ijkstra's development strategy within
                  {S}tark's formalism",
  editor =       "Cliff B. Jones and  Roger C. Shaw and Tim Denvir",
  booktitle =    "Proc. 5th. BCS-FACS Refinement Workshop",
  year =         1992
}

@article{Cau90,
author="D. Caucal",
title="Graphes Canoniques de Graphes Alg\'{e}briques",
journal="Theoretical Informatics and Applications",
year=1990,
volume=24,
number=4,
pages="339--352"}

@inproceedings{CavinSS02,
  author    = {D. Cavin and Y. Sasson and A. Schiper},
  title     = {On the accuracy of MANET simulators},
  year      = {2002},
  pages     = {38-43},
  booktitle     = {Proceedings of the 2002 Workshop on Principles of Mobile
               Computing, POMC 2002, October 30-31, 2002, Toulouse, France},
  publisher = {ACM}
}

@inproceedings{Cer92,
	title =		{Decidability of Bisimulation Equivalences for
				Parallel Timer Processes},
	author =	{K. {\u{C}}er{\={a}}ns},
	pages =		{302--315},
	crossref =	{CAV4}
}

@phdthesis{Cer92a,
	author =	{K. {\u{C}}er{\={a}}ns},
	year =		1992,
	type =		{Dr.Sc.Comp. Thesis},
	school =	{University of Latvia},
	address =	{R\={\i}ga},
	title =		{Algorithmic Problems in Analysis of Real Time
				System Specifications}
}


@inproceedings{CVI89,
        author =        {W.Y.L. Chan and S.T. Vuong and M.R. Ito},
        booktitle =     sigcomm89,
        publisher =     stocpub,
        year =          1989,
        pages =         {283--294},
        title =         {An improved protocol test generation procedure
                         based on {UIO}s}
}


@article{CM75,
        author=		{A.K. Chandra and Z. Manna},
        title=		{The Power of Programming Features},
        journal=	{J. Computer Languages},
        volume=		1,
        pages=		{219-232},
        year=		1975
}

@article{CL85,
	author =	{K.M. Chandy and L. Lamport},
	year =		1985,
	journal =	tocs,
	number =	1,
	pages =		{63--75},
	title =		{Distributed snapshots: determining the global state
			 of distributed systems},
	volume =	3
}

@book{ChMi88,
author="K.M. Chandy and J. Misra",
title="Parallel Program Design. A Foundation",
publisher=addison,
year=1988}

@book{CK90,
  	author =	{C. C. Chang and H. J. Keisler},
  	title =		{Model Theory},
	year =		1990,
	publisher =	{North-Holland},
	series =	{Studies in Logic and the Foundations of Mathematics},
        volume =	73,
        note =		{Third edition}
}

@inproceedings{CH81,
	author =	{Z. Chaochen and C.A.R. Hoare},
	booktitle =	{Proceedings $2^{nd}$ Intern. Conf. on
			Distributed Comput. Systems, Paris},
	year =		1981,
	title =		{Partial correctness of communicating processes}
}

@article{CHR91,
	author =	{Z. Chaochen and C.A.R. Hoare and A.P. Ravn},
	year =		1991,
	month =		dec,
	journal =	ipl,
	volume =	40,
	pages =		{269--276},
	title =		{A calculus of durations}
}

@misc{CDL07,
	author =	{Th. Chatain and A. David and K.G. Larsen},
	year =		2007,
	note =		{Submitted.},
	title =		{Playing Games with Timed Automata}
}

@article{Che68,
	author =	{N.V. Chernikova},
	year =		1968,
	journal =	{U.S.S.R.\ Computational Mathematics and Mathematical
			Physics},
	volume =	8,
	number =	6,
	pages =		{282--293},
	title =		{Algorithm for discovering the set of all solutions of
			a linear programming problem}
}


@Misc{Che06,
title =         {Personal communication},
author =        {S. Cheshire},
year =          {2006},
month =         {February}
}


@Misc{Zeroconf,
title =         {Dynamic Configuration of {IPv4} Link-Local Addresses {(RFC 3927)}},
author =        { S. Cheshire and B. Aboba and  E. Guttman},
note =          {\texttt{http://www.ietf.org/rfc/rfc3927.txt}},
year =          {2005},
month =         {May}
}

@book{ZeroconfBook,
  author =       {S. Cheshire and D.H. Steinberg},
  title =        {Zero Configuration Networking: The Definite Guide},
  year =         {2005},
  publisher =    {O'Reilly Media, Inc.}
}


@inproceedings{CLSV04,
        author =        {L. Cheung and N.A. Lynch and R. Segala and
				 F.W. Vaandrager},
        title =         {Switched Probabilistic {I/O} Automata},
        url =           {http://www.cs.ru.nl/ita/publications/papers/fvaan/switched.html},
	booktitle =	{Proceedings First International Colloquium on
		 	Theoretical Aspects of Computing (ICTAC2004),
			{\rm Guiyang, China, 20-24 September 2004}},
	year =		2004,
	publisher =	springer,
	series =	lncs
}

@techreport{CLSV04b,
        author =        {L. Cheung and N.A. Lynch and R. Segala and
				 F.W. Vaandrager},
        title =         {Switched Probabilistic {I/O} Automata},
        url =           {http://www.cs.ru.nl/ita/publications/papers/fvaan/switched.html},
        year =          2004,
        type =          {Report},
        institution =   {Institute for Computing and Information Sciences,
			 University of Nijmegen},
        number =        {NIII-R04XX}
}

@inproceedings{CHVTacas03,
   author = {D. Chkliaev and J. Hooman and de Vink, E.},
   title = {Verification and Improvement of the Sliding Window Protocol},
   booktitle = {Proceedings TACAS'03},
   year = {2003},
   pages = {113--127},
   organization = {Lecture Notes in Computer Science 2619},
   publisher = {Springer-Verlag},
}


@techreport{Chou94,
	author =	{C.-T. Chou},
	title =		{Practical Use of the Notions of Events and Causality
			in Reasoning about Distributed Algorithms},
	year =		1994,
	month =		oct,
	institution =	{UCLA},
        type =          {CS Report},
        number =        {\#940035},
	note =		{Available via anonymous ftp at the URL
			ftp://ftp.cs.ucla.edu/pub/chou/nil.ps}
}

@inproceedings{Chou94a,
	author =	{C.-T. Chou},
	title =		{Mechanical Verification of Distributed Algorithms
			in Higher-Order Logic},
	year =		1994,
	booktitle =	{Proceedings $7^{\it th}$ International Workshop on
			Higher-Order Logic and its Applications},
	editor =	{T.F. Melham and J. Camilleri},
	pages =		{158--176},
	series =	lncs,
	volume =	859,
	publisher =	springer
}

@Article{Cho95,
  author =       "C.-T. Chou",
  title =        "Mechanical verification of distributed algorithms in
                 higher-order logic",
  journal =      "The Computer Journal",
  volume =       "38",
  number =       "2",
  pages =        "152--161",
  year =         "1995"
}

@article{Ch78,
        author =        {T.S. Chow},
        year =          1978,
        journal =       ieeese,
        volume =        4,
        number =        3,
        pages =         {178--187},
        title =         {Testing software design modeled by finite-state
                         machines}
}



@manual{CHILL80,
	year =		1980,
	key =		{CHILL},
	title =		{Recommendation Z.200 (CHILL Language Definition)}
}


@phdthesis{Cla96,
        author =        {D. Clarke},
        year =          1996,
        month =         dec,
        school =        {University of Pennsylvania, Department of Computer
                        and Information Science},
        volume =        {Technical Report MS-CIS-96-33},
        title =         {Testing Real-Time Constraints}
}

@inproceedings{ClL95,
        author =        {D. Clarke and I. Lee},
        booktitle =     {Proceedings of the 17th International Conference on
                        Software Engineering {\rm Seattle, Washington}},
        month =         apr,
        year =          1995,
        title =         {Testing Real-Time Constraints in a Process Algebraic
                        Setting}
}


@inproceedings{ClL97,
        author =        {D. Clarke and I. Lee},
        booktitle =     {Proceedings of the Third International
                  Workshop on Object-Oriented Real-Time Dependable Systems,
                  {\rm Newport Beach, California}},
        month =         feb,
        year =          1997,
        title =         {Automatic Generation of Tests for Timing
                         Constraints from Requirements}
}


@article{Cl80,
	author =	{E.M. Clarke},
	year =		1980,
	journal =	acta,
	volume =	13,
	pages =		{169--188},
	title =		{Proving Correctness of Coroutines Without History Variables}
}

@inproceedings{CE81,
	author =	{E.M. Clarke and E.A. Emerson},
	booktitle =	{Proceedings of the Workshop on Logic of Programs,
			{\rm Yorktown Heights}},
	year =		1981,
	editor =	{D. Kozen},
	series =	lncs,
	volume =	131,
	publisher =	springer,
	pages =		{52--71},
	title =		{Design and synthesis of synchronization skeletons
				 using branching-time temporal logic}
}

@article{CES86,
	author =	{E.M. Clarke and E.A. Emerson and A.P. Sistla},
	year =		1986,
	journal =	toplas,
	volume =	8,
	number =	2,
	pages =		{244--263},
	title =		{Automatic verification of finite-state concurrent
				systems using temporal logic specifications}
}


@article{CG87,
	author =	{E.M. Clarke and O. Gr\"{u}mberg},
	year =		1987,
	journal =	{Ann. Rev. Comput. Sci.},
	pages =		{269--290},
	title =		{Research on automatic verification of finite
			 state concurrent systems},
	volume =	2
}

@inproceedings{Clarkeetal93futurebus,
  author =       "E. M. Clarke and O. Grumberg and H. Hiraishi and
                  S. Jha and D. E. Long and K. L. McMillan and
                  L. A. Ness",
  title =        "Verification of the {Futurebus+} Cache Coherence
                  Protocol",
  booktitle =    "Proc. CHDL",
  pages =        {15--30},
  year =         1993
}


@inproceedings{ClarkeGJLV00,
  author    = {E.M. Clarke and O. Grumberg and S. Jha and Y. Lu and H. Veith},
  title     = {Counterexample-Guided Abstraction Refinement.},
  year      = {2000},
  pages     = {154-169},
  editor    = {E.A. Emerson and
               A.P. Sistla},
  booktitle     = {Computer Aided Verification, 12th International Conference,
               CAV 2000, Chicago, IL, USA, July 15-19, 2000, Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {1855}
}

@article{ClarkeGJLV03,
  author    = {E.M. Clarke and O. Grumberg and S. Jha and Y. Lu and H. Veith},
  title     = {Counterexample-guided abstraction refinement for symbolic model checking},
  journal   = {J. ACM},
  volume    = {50},
  number    = {5},
  year      = {2003},
  pages     = {752-794}
}

@article{ClarkeFHKOST03,
  author    = {E.M. Clarke and A. Fehnker and Z. Han and B.H. Krogh and J. Ouaknine and O. Stursberg and M. Theobald},
  title     = {Abstraction and Counterexample-Guided Refinement in Model
               Checking of Hybrid Systems.},
  journal   = {Int. J. Found. Comput. Sci.},
  volume    = {14},
  number    = {4},
  year      = {2003},
  pages     = {583-604}
}


@inproceedings{CGL94,
	author =	{E.M. Clarke and O. Grumberg and D. Long},
	crossref =	{REXdecade},
	pages =		{124--175},
	title =		{Verification tools for finite-state concurrent
			 systems}
}

@book{CGP99,
	author =	{E.M. Clarke and O. Grumberg and D. Peled},
	year =		1999,
	publisher =	mitp,
	address =	{Cambridge, Massachusetts},
	title =		{Model Checking}
}

@inproceedings{CLM89,
	author =	{E.M. Clarke and D.E. Long and K.L. McMillan},
	crossref =	{LICS4},
	pages =		{353--362},
	title =		{Compositional model checking}
}

@techreport{CW96,
	author =	{E. Clarke and J. Wing},
	year =		1996,
	month = 	aug,
	institution =	{Carnegie Mellon University},
	type =		{CMU Computer Science Technical Report},
	number =	{CMU-CS-96-178},
	title =		{Formal Methods: State of the Art and Future
				 Directions},
}

@article{ClarkeW96,
  author    = {E.M. Clarke and J.M. Wing},
  title     = {Formal Methods: State of the Art and Future Directions},
  journal   = {ACM Comput. Surv.},
  volume    = {28},
  number    = {4},
  year      = {1996},
  pages     = {626-643}
}

@incollection{Cle93,
  	author = 	{R. Cleaveland},
  	title = 	{An Operational Semantics of Value Passing},
	crossref =	{NAPAW93}
}

@inproceedings{CH88,
	author =	{R. Cleaveland and M. Hennessy},
	crossref =	{LICS3},
	pages =		{193--202},
	title =		{Priorities in Process Algebra}
}

@article{CPS93,
	author =	{R. Cleaveland and J. Parrow and B. Steffen},
	year =		1993,
	journal =	toplas,
	number =	15,
	volume =	1,
	pages =		{36--72},
	title =		{The Concurrency Workbench: A Semantics Based Tool for
			the Verification of Concurrent Systems}
}

@inproceedings{CZ91,
        author =        {R. Cleaveland and A.E. Zwarico},
        crossref =      {LICS6},
        pages =         {110--119},
        title =         {A theory of testing for real-time}
}


@article{Cl73,
	author =	{M. Clint},
	year =		1973,
	journal =	acta,
	volume =	2,
	pages =		{50--63},
	title =		{Program proving: Coroutines}
}

@book{Cohn80,
        author=         {D.L. Cohn},
        title=          {Measure Theory},
        publisher=      {Birkh\"auser},
        address =       {Stuttgart},
        year =          1980
}

@techreport{CONCUR2,
	author =	{{CONCUR2}},
	year =		1992,
	institution =	{ESPRIT Basic Research Action in Information
				Technology},
	type =		{Technical Annex},
	title =		{Calculi and Algebras of Concurrency: Extensions,
				Tools and Applications}
}

@inproceedings{Cook71a,
author="S.A. Cook",
title="The complexity of theorem-proving procedures",
booktitle=stoc3,
year=1971,
pages="151--158"
}

@inproceedings{CW87,
	author =	{D. Coppersmith and S. Winograd},
	booktitle =	stoc19,
	publisher =	stocpub,
	year =		1987,
	pages =		{1--6},
	title =		{Matrix multiplication via arithmetic progressions}
}

@article{CqH88,
	author =	{T. Coquand and G.P. Huet},
	year =		1988,
	journal =	iandcomp,
	volume =	76,
	pages =		{95--120},
	title =		{The Calculus of Constructions}
}

@inproceedings{CorbettDHLPRZ00,
  author    = {J.C. Corbett and M.B. Dwyer and J. Hatcliff and S. Laubach and C.S. Pasareanu and R. and H. Zheng},
  title     = {Bandera: extracting finite-state models from {J}ava source code.},
  booktitle = {ICSE},
  year      = {2000},
  pages     = {439-448}
}

@book{CLR91,
  	author =        {T.H. Cormen and C.E. Leiserson and R.L. Rivest},
  	year =          1991,
	publisher =	{McGraw-Hill, Inc.},
  	title =         {Introduction to Algorithms}
}

@misc{Cor06,
	author =	{H. Corporaal},
	year =		2006,
	note =		{Progress Mini Symposium White Paper},
	title =		{Embedded System Design}
}

@techreport{CD94,
	author =	{F. Corradini and De Nicola, R.},
	title =		{Locality Based Semantics for Process Algebras},
	year =		1994,
	month =		nov,
	type =		{Rapporto di Ricerca},
	number =	{SI/RR-94/07},
	institution =	{Dipartimento di Scienze dell'Informazione,
			Universit\`{a} di Roma ``La Sapienza''}
}

@techreport{CD94a,
	author =	{F. Corradini and De Nicola, R.},
	title =		{On the Relationships between
				 Four Partial Ordering Semantics},
	year =		1994,
	month =		nov,
	type =		{Rapporto di Ricerca},
	number =	{SI/RR-94/08},
	institution =	{Dipartimento di Scienze dell'Informazione,
			Universit\`{a} di Roma ``La Sapienza''}
}

@article{CS84,
	author =	{G. Costa and C. Stirling},
	year =		1984,
	journal =	acta,
	volume =	21,
	number =	5,
	pages =		{417--441},
	month =		dec,
	title =		{A Fair Calculus of Communicating Systems}
}


@InProceedings{CC77,
  author =       "P. Cousot and R. Cousot",
  title =        "Abstract interpretation: a unified lattice model for
		static analysis of programs by construction or approximation of fixpoints",
  pages =        "238--252",
  booktitle =    "Proceedings of 4th ACM Symposium on Principles of programming Languages",
  year =         "1977"
}

@article{Critchlow-Panangaden91,
	author =	{C. Critchlow and P. Panangaden},
	journal =	acta,
	volume =	28,
	pages =		{447--452},
	year =		1991,
	title =		{The expressive power of delay operators in {SCCS}}
}

@inproceedings{Cz86,
	author =	{L. Czaja},
	booktitle =	{Advances in Petri Nets 1985},
	year =		1986,
	editor =	{G. Rozenberg},
	series =	lncs,
	volume =	222,
	publisher =	springer,
	pages =		{181--202},
	title =		{Making nets abstract and structured}
}

@book{vD83,
title="Logic and Structure",
author="Dalen, {D. van}",
publisher= springer,
year=1983}

@inproceedings{DJHP98,
    author = {Damm, W. and Josko, B. and Hungar, H. and Pnueli, A.},
    title = {A compositional real-time semantics of {STATEMATE} designs},
    editor = {de Roever, W.-P. and Langmaack, H. and Pnueli, A.},
    booktitle = {Compositionality, the significant difference: \ldots{} COMPOS '97},
    address = {Berlin},
    publisher = {Springer},
    year = 1998,
    pages = {186--238},
    series = {LNCS},
    volume = 1536
} 

@misc{DB00,
	title = 	{A Survey of Techniques for Scheduling with Uncertainty},
	author =	{A.J. Davenport and J.C. Beck},
	note  = 	{Unpublished manuscript},
	year =		2000}

@InProceedings{DH01,
  author =       "L. de Alfaro and T.A. Henzinger",
  title =        "Interface Automata",
  pages =        "109--120",
  editor =       "V. Gruhn",
  booktitle =    "Proceedings of the Joint 8th European Software
                 Engineering Conference and 9th {ACM} {SIGSOFT}
                 Symposium on the Foundation of Software Engineering
                 ({ESEC}/{FSE}-01)",
  month =        sep,
  series =       "Software Engineering Notes",
  volume =       26,
  publisher =    "ACM Press",
  address =      "New York",
  year =         "2001"
}

@inproceedings{DHJ01,
	author =	{de Alfaro, L. and T.A. Henzinger and R. Jhala},
	title =		{Compositional Methods for Probabilistic Systems},
	pages =		{351--365},
	crossref =	{CONCUR01}
}

@inproceedings{AlfaroSFLRS05,
  author    = {L. de Alfaro and
               L. Dias da Silva and
               M. Faella and
               A. Legay and
               P. Roy and
               M. Sorea},
  title     = {Sociable Interfaces},
  year      = {2005},
  pages     = {81-105},
  editor    = {B. Gramlich},
  booktitle     = {Frontiers of Combining Systems, 5th International Workshop,
               FroCoS 2005, Vienna, Austria, September 19-21, 2005, Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {3717},
  isbn      = {3-540-29051-6}
}

@Article{Dam-92-Lin,
  author =      "M. Dam",
  title =       "Fixpoints of {B}\mbox{\"u}chi Automata",
  journal =     "{\em To appear in Proc. FST\&TCS'92}",
  year =        "1992",
  OPTvolume =   "",
  OPTnumber =   "",
  OPTpages =    "",
  OPTmonth =    "",
  OPTnote =     ""
}

@Article{Dam-92-RGen,
  author =      "M. Dam",
  title =       "${R}$-generability, and Definability in Branching
                 Time Logics",
  journal =     "Information Processing Letters",
  year =        "1992",
  volume =      "41",
  OPTnumber =   "",
  pages =       "281--287",
  OPTmonth =    "",
  OPTnote =     ""
}


@inproceedings{DGG93,
        author  = "Dams, D. and Gerth, R. and Grumberg, O.",
        title   = "Generation of Reduced Models for Checking Fragments of CTL",
        crossref= "CAV5",
	pages =   "479--490",
        abstract=
                  "In the first part of the paper, we present an
        algorithm for the construction of a quotient model under the
        equivalence induced by ACTL, the universal fragment of CTL. As
        this equivalence coincides with simulation equivalence, the
        achieved reduction is better than reductions achieved by
        methods based on bisimulation. Simulation equivalence is also
        the equivalence that is induced by ACTL*, hence, the reduced
        model allows model checking of any ACTL* formula. Furthermore
        it provides diagnostic information. In the second part, we
        restict our attention to single ACTL formulae. An algorithm is
        given that constructs a model which is reduced w.r.t.  a
        specific formula.

        The reduced models are constructed directly, without
        intermediate need for the full models. The approach, splitting
        of states w.r.t.  formulae, yields a sequence of successively
        more refined models which at any stage preserve truth of
        formulae."
}

@inproceedings{DArgenioHKK01,
  author    = {P.R. D'Argenio and H. Hermanns and J.-P. Katoen and R. Klaren},
  title     = {MoDeST - A Modelling and Description Language for Stochastic Timed Systems.},
  year      = {2001},
  pages     = {87-104},
  editor    = {L. de Alfaro and S. Gilmore},
  booktitle     = {Process Algebra and Probabilistic Methods, Performance Modeling
               and Verification: Joint International Workshop, PAPM-PROBMIV
               2001, Aachen, Germany, September 12-14, 2001, Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {2165}
}

@inproceedings{DKRT97,
        author =        {P.R. D{'A}rgenio and J.-P. Katoen and T.C. Ruys
                        and J. Tretmans},
        crossref =      {TACAS97},
        pages =         {416--431},
        title =         {The Bounded Retransmission Protocol Must Be On Time!}
}


@inproceedings{Da82,
	author =	{P. Darondeau},
	booktitle =	{Proceedings international symposium on programming:
				 $5^{th}$ colloquium, Aarhus},
	year =		1982,
	editor =	{M. Dezani-Ciancaglini and U. Montanari},
	series =	lncs,
	volume =	137,
	publisher =	springer,
	pages =		{47--62},
	title =		{An enlarged definition and complete axiomatisation
			 of observational congruence of finite processes}
}

@inproceedings{Da90,
	author =	{P. Darondeau},
	crossref =	{RochePosay},
	pages =		{223--238},
	title =		{Concurrency and Computability}
}

@techreport{DD88,
	author =	{P. Darondeau and P. Degano},
	year =		1988,
	institution =	{IRISA, Rennes Cedex, France},
	type =		{Publication Interne},
	number =	{No. 442},
	note =		{An extended abstract appeared in:
			 Proceedings ICALP 89, Stresa
			(G. Ausiello, M. Dezani-Ciancaglini \& S. Ronchi Della
			 Rocca), LNCS 372, Springer-Verlag, pp. 234--248},
	title =		{Causal trees}
}

@techreport{DD89,
	author =	{Ph. Darondeau and P. Degano},
	year =		1989,
	institution =	{Dipartimento di Informatica, Universit\`{a} di Pisa},
	number =	{11/89},
	note =		{To appear in {\em Fundamenta Informaticae}},
	title =		{About semantic action refinement}
}

@phdthesis{Da91,
	author =	{J. Davies},
	year =		1991,
	month =		apr,
	school =	{University of Oxford},
	title =		{Specification and Proof in Real-Time Systems},
	other =		{Technical Monograph PRG-93, PRG}
}

@inproceedings{TimedCSP92,
	author =	{J. {Davies~et~al.}},
	crossref =	{REXrealtime},
	pages =		{640--675},
	title =		{Timed {CSP}: Theory and Practice}
}

@techreport{DS89,
	author =	{J. Davies and S. Schneider},
	year =		1989,
	month =		aug,
	institution =	{Oxford University Computing Laboratory,
			 Programming Research Group},
	type =		{Technical Monograph},
	number =	{PRG-75},
	title =		{An Introduction to {Timed CSP}}
}


@article{DS95,
	author =	{J. Davies and S. Schneider},
	year =		1995,
	journal =	tcs,
	volume =	138,
	pages =		{243--271},
	title =		{A brief history of {Timed CSP}}
}

@book{Dav82,
  	author =        {M. Davis},
  	year =          1982,
  	publisher =     dover,
  	title =         {Computability and Unsolvability}
}

@book{Daw76,
        author =        {R. Dawkins},
        year =          1976,
        publisher =     {Oxford University Press},
        title =         {The Selfish Gene}
}

@inproceedings{DOTY96,
	author =	{C. Daws and A. Olivero and S. Tripakis and S. Yovine},
	title =		{The Tool {\sc Kronos}},
	crossref =	{HybridIII},
	pages =		{208--219}
}

@inproceedings{DY95,
        author =        {C. Daws and S. Yovine},
        title =         {Two examples of verification of multirate
                        timed automata with {\sc Kronos}},
	month =		dec,
        year =          1995,
        booktitle =     {Proceedings of the 16th IEEE Real-Time
                        Systems Symposium (RTSS'95), {\rm Pisa, Italy}},
	pages =		{66--75},
        publisher =     ieeepress
}


@inproceedings{DDM85,
	author =	{P. Degano and De Nicola, R. and U. Montanari},
	booktitle =	{International Conference on Foundations of
				 Computation Theory},
	year =		1985,
	editor =	{L. Budach},
	series =	lncs,
	volume =	199,
	publisher =	springer,
	pages =		{520--533},
	title =		{Partial ordering derivations for {CCS}}
}

@inproceedings{DDM87,
	author =	{P. Degano and De Nicola, R. and U. Montanari},
	booktitle =	{Advanced School on Mathematical Models for the
				 Semantics of Parallelism, 1986},
	year =		1987,
	editor =	{M. Venturini Zilli},
	series =	lncs,
	volume =	280,
	publisher =	springer,
	pages =		{144--165},
	title =		{{CCS} is an (augmented) contact free {C/E} system}
}

@inproceedings{DDM87a,
	author =	{P. Degano and De Nicola, R. and U. Montanari},
	year =		1987,
	booktitle =	ebberup,
	editor =	{M. Wirsing},
	publisher =	nholland,
	pages =		{105--129},
	title =		{Observational equivalences for concurrency models}
}

@article{DDM88,
	author =	{P. Degano and De Nicola, R. and U. Montanari},
	year =		1988,
	month =		oct,
	journal =	acta,
	number =	{1/2},
	pages =		{59--91},
	title =		{A Distributed Operational Semantics for {CCS}
				 Based on Condition/Event Systems},
	volume =	26
}

@inproceedings{DDM88a,
	author =	{P. Degano and De Nicola, R. and U. Montanari},
	crossref =	{LICS3},
	pages =		{133--141},
	title =		{On the consistency of `truly concurrent' operational
				 and denotational semantics}
}

@inproceedings{DDM89,
	author =	{P. Degano and De Nicola, R. and U. Montanari},
	crossref =	{REXlinear},
	pages =		{438--466},
	title =		{Partial orderings descriptions and observations of
				 nondeterministic concurrent processes}
}

@article{DDM90,
	author =	{P. Degano and De Nicola, R. and U. Montanari},
	year =		1990,
	journal =	tcs,
	volume =	75,
	pages =		{223--262},
	title =		{A Partial Ordering Semantics for {CCS}}
}

@inproceedings{DDM92,
	author =	{P. Degano and De Nicola, R. and U. Montanari},
	crossref =	{NAPAW92},
	title =		{Observation Trees}
}

@article{DDM93,
	author =	{P. Degano and De Nicola, R. and U. Montanari},
	year =		1993,
	journal =	tcs,
	volume =	{?},
	title =		{Universal Axioms for Bisimulation},
	note =		{To appear.   Available as Internal Report,
			 TR-9/92, of Dipartimento di Informatica,
			 Universita di Pisa}
}

@techreport{DG92,
	author =	{P. Degano and R. Gorrieri},
	year =		1992,
	month =		sep,
	institution =	{Dipartimento di Informatica, Universit\`{a} di Pisa},
	number =	{TR-28/92},
	title =		{An Operational Definition of Action Refinement}
}

@incollection{DGM88,
	author =	{P. Degano and R. Gorrieri and S. Marchetti},
	booktitle =	{Advances in Petri Nets 1988},
	year =		1988,
	editor =	{G. Rozenberg},
	series =	lncs,
	volume =	340,
	publisher =	springer,
	pages =		{85--105},
	title =		{An exercise in concurrency: a {CSP} process as a condition/event system}
}

@unpublished{DM88,
	author =	{P. Degano and S. Marchetti},
	year =		1988,
	note =		{Unpublished manuscript},
	title =		{Partial ordering models for concurrency can be defined operationally}
}

@inproceedings{DM84,
	author =	{P. Degano and U. Montanari},
	booktitle =	stoc16,
	publisher =	stocpub,
	year =		1984,
	title =		{Liveness properties as convergence in metric spaces}
}

@incollection{DM85,
	author =	{P. Degano and U. Montanari},
	booktitle =	{Contol Flow and Data Flow: Concepts of Distributed Programming},
	year =		1985,
	editor =	{M. Broy},
	pages =		{7--106},
	note =		{NATO ASI Series F14},
	publisher =	springer,
	title =		{Distributed systems, partial orderings of events and event structures}
}

@inproceedings{DM85a,
	author =	{P. Degano and U. Montanari},
	booktitle =	tapsoft1v1,
	year =		1985,
	editor =	{H. Ehrig and C. Floyd and M. Nivat and J. Thatcher},
	series =	lncs,
	volume =	185,
	publisher =	springer,
	pages =		{29--51},
	title =		{Specification languages for distributed systems}
}

@article{DM87,
	author =	{P. Degano and U. Montanari},
	year =		1987,
	journal =	jcss,
	number =	{2/3},
	pages =		{442--461},
	title =		{Concurrent histories, a basis for observing distributed systems},
	volume =	34
}

@article{DM87a,
	author =	{P. Degano and U. Montanari},
	year =		1987,
	journal =	jacm,
	number =	2,
	pages =		{411--449},
	title =		{A model for distributed systems based on graph rewriting},
	volume =	34
}

@inproceedings{Gossip87,
 author = {A. Demers and D. Greene and C. Hauser and W. Irish and J. Larson and S. Shenker and H. Sturgis and D. Swinehart and D. Terry},
 title = {Epidemic algorithms for replicated database maintenance},
 booktitle = {PODC '87: Proceedings of the sixth annual ACM Symposium on Principles of distributed computing},
 year = {1987},
 isbn = {0-89791-239-4},
 pages = {1--12},
 location = {Vancouver, British Columbia, Canada},
 doi = {http://doi.acm.org/10.1145/41840.41841},
 publisher = {ACM},
 address = {New York, NY, USA},
 }

@proceedings{DHJR85,
	editor =	{T. Denvir and W. Harwood and M. Jackson and M. Ray},
	year =		1985,
	series =	lncs,
	volume =	207,
	publisher =	springer,
	title =		{{The analysis of concurrent systems, Proceedings of
	 a Tutorial and Workshop, {\rm Cambridge University, 1983}}}
}

@article{Der85,
author="N. Dershowitz",
title="Computing with rewrite systems",
journal=iandcomp,
volume=65,
year=1985,
pages="122--157"
}

@book{DE95,
	author =	{J. Desel and J. Esparza},
	year =		1995,
	publisher =	cup,
	series =	{Cambridge Tracts in Theoretical Computer Science 40},
	title =		{Free Choice Petri Nets},
	crossrefonly =  1
}

@inproceedings{DeMe89,
	author =	{J. Desel and A. Merceron},
	booktitle =	{$10^{th}$ International Conference on Petri Nets, {Bonn}},
	year =		1989,
	pages =		{115--138},
	title =		{Vicinity respecting net morphisms}
}

@phdthesis{Des94,
	author={A. Deshpande},
	title={Control of Hybrid Systems},
	school={University of California at Berkeley},
	year =1994
}

@inproceedings{DesV95,
	author =	{A. Deshpande and P.P. Varaiya},
	title =		{Design and Evaluation Tools for Automated
			Highway Systems},
	booktitle=	{Proceedings Second European Workshop on Real-Time and
		 	Hybrid Systems},
	year=1995,
	month=jun,
	address=	{Grenoble, France},
	editor =	{A. Bouajjani and O. Maler}
}

@article{De88,
	author =	{R. Devillers},
	year =		1988,
	publisher =	{Gesellschaft f\"{u}r Informatik, Bonn},
	journal =	{Petri Net Newsletter},
	pages =		{16--19},
	title =		{On the definition of a bisimulation notion based on partial words},
	volume =	29
}

@InProceedings{DGM97,
  	author        = {M.C.A. Devillers and W.O.D. Griffioen and O.
			M{\"u}ller},
  	title         = {Possibly Infinite Sequences: A Comparative Case
				Study},
  	booktitle     = {10th International Conference on Theorem Proving in
                  	Higher Order Logics (TPHOLs'97)},
  	editor        = {E.L. Gunter and A. Felty},
  	publisher     = springer,
  	series        = lncs,
  	pages         = {89--104},
  	volume        = 1275,
  	year          = 1997
}

@techreport{DGRV97,
  	author        = {M.C.A. Devillers and W.O.D. Griffioen and J.M.T
			Romijn and F.W. Vaandrager},
	title =		{Verification of a Leader Election Protocol
			--- Formal Methods Applied to {IEEE 1394}},
	year =		1997,
	month =		dec,
	number =	{CSI-R9728},
	institution =	{Computing Science Institute, University of Nijmegen}
}

@article{DGRV00,
  	author        = {M.C.A. Devillers and W.O.D. Griffioen and J.M.T
			Romijn and F.W. Vaandrager},
	title =		{Verification of a Leader Election Protocol:
			Formal Methods Applied to {IEEE 1394}},
	journal =	{Formal Methods in System Design},
        year=		2000,
	month =		jun,
	volume =	16,
	number =	3,
	pages = 	{307--320}
}

@incollection{DDPS82,
	author =	{De Cindio , F. and De Michelis, G. and L. Pomello and C. Simone},
	booktitle =	{Application and Theory of Petri Nets},
	year =		1982,
	editor =	{C. Girault and W. Reisig},
	series =	{Informatik Fachberichte},
	number =	52,
	publisher =	springer,
	pages =		{229--279},
	title =		{Superposed automata nets}
}

@incollection{DDPS83,
	author =	{De Cindio , F. and De Michelis, G. and L. Pomello and C. Simone},
	booktitle =	{Application and Theory of Petri Nets},
	year =		1983,
	editor =	{A. Pagnoni and G. Rozenberg},
	series =	{Informatik Fachberichte},
	number =	66,
	publisher =	springer,
	pages =		{40--59},
	title =		{Milner's communicating systems and {Petri} nets}
}

@inproceedings{DeMa85,
author="P. Dembinski and J. Ma{\l}uszynski",
title="And-Parallelism with Intelligent Backtracking for Annotated Logic
Programs",
booktitle="Symposion on Logic Programming, {\rm Boston}",
year=1985,
pages="29--38"
}

@phdthesis{DN85,
	author =	{De Nicola, R.},
	year =		1985,
	school =	{Department of Computer Science, University of Edinburgh},
	title =		{Testing Equivalences and Fully Abstract Models for
				Communicating Processes}
}


@article{DN87,
	author =	{De Nicola, R.},
	year =		1987,
	journal =	acta,
	pages =		{211--237},
	title =		{Extensional equivalences for transition systems},
	volume =	24
}

@inproceedings{DFGR91,
	author =	{De Nicola, R. and A. Fantechi and S. Gnesi and
				 G. Ristori},
	crossref =	{CAV3},
	pages =		{37--47},
	title =		{An Action Based Framework for Verifying Logical and
				Behavioural Properties of Concurrent Systems}
}

@article{DFGR93,
	author =	{De Nicola, R. and A. Fantechi and S. Gnesi and
				 G. Ristori},
	journal =	{Computer Networks and ISDN Systems},	
	volume =	25,
	year =		1993,
	pages =		{761--778},
	title =		{An action based framework for verifying logical and
				behavioural properties of concurrent systems}
}

@techreport{DGV97,
	author =	{De Nicola, R. and U. Goltz and F.W. Vaandrager},
	institution = 	{IBFI GmbH, Schloss Dagstuhl},
	type =		{Dagstuhl-Seminar-Report; 156 16.09.-20.09.96 (9638)},
	address =	{Wadern, Germany},
	year =		1997,
	title =		{Expressiveness in Concurrency}
}

@article{DH84,
	author =	{De Nicola, R. and M. Hennessy},
	year =		1984,
	journal =	tcs,
	pages =		{83--133},
	title =		{Testing equivalences for processes},
	volume =	34
}

@inproceedings{DIN90,
	author =	{De Nicola, R. and P. Inverardi and M. Nesi},
	crossref =	{CAV1},
	pages =		{54--67},
	title =		{Using axiomatic presentation of behavioural
			 equivalences for manipulating {CCS} specifications}
}

@inproceedings{DL94,
	author =	{De Nicola, R. and A. Labella},
	booktitle =	{Proceedings MFCS'94},
	year =		1994,
	series =	lncs,
	volume =	841,
	publisher =	springer,
	title =		{A Completeness Theorem for Nondeterministic {Kleene}
				 Algebras},
	pages =		{536--545}
}

@inproceedings{DMV90,
	author =	{De Nicola, R. and U. Montanari and F.W. Vaandrager},
	crossref =	{CONCUR90},
	pages =		{152--165},
	title =		{Back and forth bisimulations}
}

@techreport{DP94,
	author =	{De Nicola, R. and R. Pugliese},
	title =		{Testing Linda: Observational Semantics for
			 an Asynchronous Language},
	year =		1994,
	month =		nov,
	type =		{Rapporto di Ricerca},
	number =	{SI/RR-94/06},
	institution =	{Dipartimento di Scienze dell'Informazione,
			Universit\`{a} di Roma ``La Sapienza''}
}

@techreport{DS92,
	author =	{De Nicola, R. and R. Segala},
	title =		{A Process Algebraic View of Input/Output Automata},
	year =		1992,
	month =		sep,
	type =		{Rapporto di Ricerca},
	number =	{SI-92/07},
	institution =	{Dipartimento di Scienze dell'Informazione,
			Universit\`{a} degli Studi di Roma ``La Sapienza''}
}

@article{DNS95,
	author =	{De Nicola, R. and R. Segala},
	title =		{A Process Algebraic View of Input/Output Automata},
	year =		1995,
	journal =	tcs,
	pages =		{391--423},
	volume =	138
}

@inproceedings{DV90,
	author =	{De Nicola, R. and F.W. Vaandrager},
	crossref =	{RochePosay},
	pages =		{407--419},
	title =		{Action versus state based logics for
				 transition systems}
}

@inproceedings{DV90a,
	author =	{De Nicola, R. and F.W. Vaandrager},
	title =		{Three Logics for Branching Bisimulation
				 (extended abstract)},
	crossref =	{LICS5},
	pages =		{118--129}
}

@article{DV95,
	author =	{De Nicola, R. and F.W. Vaandrager},
	title =		{Three Logics for Branching Bisimulation},
	year =		1995,
	month =		mar,
	journal =	{Journal of the ACM},
	volume =	42,
	number =	2,
	pages =		{458--487}
}

@article{Dij65,
	author =	{E.W. Dijkstra},
	title =		{Solution of a Problem in Concurrent Programming
			 Control},
	year =		1965,
	journal =	cacm,
	volume =	{8/9}
}

@techreport{Dij79,
  	author        = {E.W. Dijkstra},
	title =		{A Tutorial on the Split Binary Semaphore},
	year =		1979,
	month =		mar,
	institution =	{Burroughs},
	number =	{EWD703 - 0},
	note =		{Available via URL
		{\tt http://www/cs/utexas.edu/users/EWD/index07xx.html}}
}

@techreport{DFMV98,
  	author        = {H. Dierks and A. Fehnker and A. Mader
			and F.W. Vaandrager},
	title =		{Operational and logical semantics for
			 polling real-time systems},
	year =		1998,
	month =		apr,
	number =	{CSI-R9813},
	institution =	{Computing Science Institute, University of Nijmegen}
}

@inproceedings{DFMV98a,
  	author        = {H. Dierks and A. Fehnker and A. Mader
			and F.W. Vaandrager},
	title =		{Operational and logical semantics for
			 polling real-time systems},
	crossref =	{FTRTFT98},
	pages =		{29--40},
	note =		{Extended version available as Report CSI-R9813,
			Computing Science Institute, University of Nijmegen,
			April 1998}
}

@inproceedings{Dij68,
title="Cooperating Sequential Processes",
author="E.W. Dijkstra",
editor="F. Genuys",
year=1968,
booktitle="Programming Languages",
pages="43--112",
address="Academic Press, New York"}

@book{EWD76,
	author =	{E.W. Dijkstra},
	address =	{Englewood Cliffs},
	year =		1976,
	publisher =	prentice,
	title =		{A Discipline of Programming}
}

@article{EWD86,
	author =	{E.W. Dijkstra},
	year =		1986,
	volume =	{26 Juli},
	journal =	{NRC Handelsblad},
	note =		{Ingezonden brief},
	title =		{Wiskundefreaks}
}

@book{DS90,
        author =        {E.W. Dijkstra and C.S. Scholten},
        title = 	{Predicate Calculus and Program Semantics},
        year =          1990,
        publisher =     springer,
        series=		{Texts and Monographs in Computer Science},
        volume =        14,
}

@inproceedings{DasDP99,
  author    = {Satyaki Das and D.L. Dill and S. Park},
  title     = {Experience with Predicate Abstraction},
  year      = {1999},
  pages     = {160-171},
  editor    = {N. Halbwachs and D. Peled},
  booktitle     = {Computer Aided Verification, 11th International Conference,
               CAV '99, Trento, Italy, July 6-10, 1999, Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {1633}
}

@book{Di88,
	author =	{D. Dill},
	year =		1988,
	publisher =	{MIT Press},
	series =	{ACM Distinguished Dissertations},
	title =		{Trace Theory for Automatic Hierarchical
			Verification of Speed-Independent Circuits}
}

@inproceedings{Di89,
	author =	{D. Dill},
	crossref =	{CAV1},
	pages =		{197--212},
	title =		{Timing assumptions and verification of
			finite-state concurrent systems}
}

@inproceedings{DL97,
	author =	{E. Dolginova and N.A. Lynch},
	title =		{Safety Verification for Automated Platoon Maneuvers:
			A Case Study},
	crossref =	{HART97},
	pages =		{154--170}
}

@TECHREPORT{Coq93
, AUTHOR       = "G. Dowek and A. Felty and H. Herbelin and G.P. Huet and
		 C. Murthy and C. Parent and C. {Paulin-Mohring} and B. Werner"
, TITLE        = "The {C}oq Proof Assistant User's Guide. {V}ersion 5.8."
, INSTITUTION  = "INRIA -- Rocquencourt"
, MONTH	       = may
, YEAR         = 1993
}

@article{Edwardsetal97,
	author =	{S. Edwards and  L. Lavagno and  E.A. Lee and A. Sangiovanni-Vincentelli},
	year =		1987,
	journal =	{Proceedings of the IEEE},
	pages =		{366--390},
	title =		{Design of embedded systems: formal models, validation, and synthesis},
	volume =	85,
	number =	3,
	month =		mar
}

@book{EM85,
	author =	{H. Ehrig and B. Mahr},
	year =		1985,
	publisher =	springer,
	series =	{{EATCS Monographs on Theoretical Computer Science}},
	volume =	6,
	title =		{Fundamentals of algebraic specifications {I}}
}

@techreport{El86,
	author =	{A. Eli\"{e}ns},
	year =		1986,
	institution =	cwi,
	type =		{Note},
	number =	{CS-N8606},
	address =	{Amsterdam},
	title =		{Semantics for occam}
}

@article{EF82,
	author =	{Tz. Elrad and N. Francez},
	year =		1982,
	journal =	scp,
	pages =		{155--173},
	title =		{Decomposition of distributed programs into communication--closed layers},
	volume =	2
}

@incollection{Eme90,
	author =	{E.A. Emerson},
	crossref =	{handbook-tcs-b},
	title =		{Temporal and Modal Logic},
	pages =		{995--1072},
	chapter =	16
}

@article{EH86,
	author =	{E.A. Emerson and J.Y. Halpern},
	year =		1986,
	journal =	jacm,
	number =	1,
	pages =		{151--178},
	title =		{{`Sometimes'} and {`Not Never'} revisited: on branching time versus linear time temporal logic},
	volume =	33
}

@Article{Eme-Jut-91,
  author =      "E. A. Emerson and C. S. Jutla",
  title =       "Tree Automata, Mu-Calculus and Determinacy",
  journal =     "{\em In} Proc. 32nd Symp.
                 Foundations of Computer Science",
  year =        "1991",
  OPTvolume =   "",
  OPTnumber =   "",
  OPTpages =    "",
  OPTmonth =    "",
  OPTnote =     ""
}

@article{EFT93,
	title =		{Generating {BDD}s for Symbolic Model Checking in {CCS}},
	author =	{R. Enders and T. Filkorn and D. Taubner},
	year =		1993,
	journal =	discomp,
	volume =	6,
	number =	3,
	pages =		{155--164}
}

@inproceedings{EGL92,
	title =		{Mechanical Verification of Concurrent Systems
						 with {TLA}},
	author =	{U. Engberg and P. Gr{\o}nning and L. Lamport},
	pages =		{44--55},
	crossref =	{CAV4}
}

@misc{En84,
	author =	{J. Engelfriet},
	year =		1984,
	howpublished =	{Department of Computer Science,
			 State University of Leiden},
	note =		{Lecture notes (in Dutch)},
	title =		{Formele talen en automaten 2}
}

@article{En85,
	author =	{J. Engelfriet},
	year =		1985,
	journal =	tcs,
	number =	1,
	pages =		{21--25},
	title =		{Determinacy $\rightarrow$
 				 (observation equivalence $=$ trace equivalence)},
	volume =	36
}

@techreport{EFJ90,
author="P. Ernberg and L. Fredlund and B. Jonsson",
title="Specification and Validation of a Simple Overtaking Protocol
Using {LOTOS}",
type="Technical report",
year=1990,
institution="SICS",
number="T90006",
address="Stockholm"}

@misc{EFP91,
	author =	{P. Ernberg and L. Fredlund and J. Parrow},
	title =		{An extended bibliography of case studies},
	year =		1991,
	note =		{Part of deliverable 1.4 from the Esprit
			Basic Research Action CONCUR,
			Swedish Institute of Computer Science}
}

@book{Eyk74,
	title =		{System Identification: Parameter and State Estimation},
	author =	{P. Eykhoff},
	year =		1974,
	publisher =	{Wiley \& Sons}
}

@proceedings{OPODIS04,
   editor    = {T. Higashino},
   title     = {OPODIS 2004, 8th International Conference on Principles
                       of Distributed Systems, Grenoble, France, December 15-17, 2004, Proceedings},
   booktitle = {Principles of Distributed Systems},
   publisher = {Springer},
   series    = {Lecture Notes in Computer Science},
   volume    = {3544},
   year      = {2005},
   isbn      = {978-3-540-27324-0}
}

@inproceedings{FCL04,
       author =        {R. Fan and I. Chakraborty and N. Lynch},
       title =         {Clock Synchronization for Wireless Networks},
       crossref =      {OPODIS04},
       pages =         {400-414}
}

@article{FL06,
	author =	{R. Fan and N.A. Lynch},
	title =		{Gradient Clock Synchronization},
	year =		2006,
	journal =	{Distributed Computing},
	volume =	18,
	number =	4,
	pages =		{255-266}
}

@article{Fa87,
	author =	{H. Fauconnier},
	year =		1987,
	journal =	tcs,
	pages =		{277--298},
	title =		{Semantique asynchrone et comportements infinis en {CSP}},
	volume =	54
}

@inproceedings{FL90,
	author =	{A. Fekete and N. Lynch},
	crossref =	{CONCUR90},
	pages =		{199--215},
	title =		{The Need for Headers: an Impossibility Result
			for Communication over Unreliable Channels}
}


@article{FLMW90
, author = {Fekete, A. and Lynch, N. and Merritt, M. and Weihl, W.}
, title  = {Commutativity-Based Locking for Nested Transactions}
, journal = jcss
, month = aug
, year   = 1990
, volume = 41
, number = 1
, pages = {65-156}
}

@book{FLMW94,
	author =	{N.A. Lynch and M. Merritt and W. Weihl and A. Fekete},
	title =		{Atomic Transactions},
	year =		1994,
	publisher =	{Morgan Kaufmann Publishers}
}

@inproceedings{Fel90,
        author=		{M. Felleisen},
        title=		{On the Expressive Power of Programming Languages},
        booktitle = 	{Proc. of the European Symposium on Programming},
        publisher = 	springer,
        series=		lncs,
        volume = 	432,
        editor = 	{N. Jones},
        pages = 	{134 - 151},
        year=		1990,
        note=		{Full version to appear in
				 {\it Science of Computer Programming}}
}

@article{Fe90,
	author =	{J.-C. Fernandez},
	year =		{1989/1990},
	journal =	scp,
	volume =	13,
	pages =		{219--236},
	title =		{An implementation of an efficient algorithm for
				 bisimulation equivalence}
}


@inproceedings{FJJV96,
        author =        {J.-C. Fernandez and C. Jard and Th. J\'{e}ron
                         and C. Viho},
        crossref =      {CAV8},
        year =          1996,
        pages =         {348--359},
        title =         {Using on-the-fly verification techniques for the
                         generation of test suites}
}

@article{Fet88,
	author =	{J.H. Fetzer},
	year =		1988,
	month =		sep,
	journal =	cacm,
	pages =		{1048--1063},
	title =		{Program verification: the very idea},
	volume =	31,
	number =	9
}

@book{FJM94,
	author =        {L.G.M. Feijs and H.B.M. Jonkers and
					 C.A. Middelburg},
	year =		1994,
	title =		{Notations for Software Design},
	series =	{FACIT Series},
	publisher =	springer
}

@techreport{FJOKRR86,
	author =	{L.G.M. Feijs and H.B.M. Jonkers and J.H. Obbink and
	 		C.P.J. Koymans and Renardel de Lavalette, G.R. and
			P.H. Rodenburg},
	year =		1986,
	institution =	{METEOR},
	number =	{METEOR/t7/PRLE/3},
	title =		{A survey of the design language {COLD}}
}

@inproceedings{Feh98,
	author =	{A. Fehnker},
	title =		{Automotive Control Revisited ---
			Linear Inequalities as Approximation of Reachable Sets},
	crossref =	{Hybrid98},
	pages =		{110--125}
}

@InProceedings{Feh99b,
 author =        {A. Fehnker},
 title =         {Scheduling a Steel Plant with Timed Automata},
 booktitle =     {Sixth International Conference on Real-Time Computing
                 Systems and Applications (RTCSA'99), {\rm Hong Kong, China}},
 pages =	 {280--287},
 year =          1999,
 publisher =     {IEEE Computer Society Press}
}

@techreport{Feh00,
 	author =        {A. Fehnker},
 	title =         {Bounding and Heuristics in Forward Reachability
			 Algorithms},
	year =		2000,
	month =		feb,
	number =	{CSI-R0002},
	institution =	{Computing Science Institute, University of Nijmegen}
}

@techreport{Feh01,
 	author =        {A. Fehnker},
 	title =         {Heuristic Reachability Analysis of Hybrid Systems},
	year =		2001,
	number =	{CSI-R01XX},
	institution =	{Computing Science Institute, University of Nijmegen},
	note =		{To appear}
}

@phdthesis{Feh02,
 	author =        {A. Fehnker},
	year =		2002,
	month =		apr,
	school =	{University of Nijmegen},
	title =		{Citius, Vilius, Melius: Guiding and Cost-Optimality
			 in Model Checking of Timed and Hybrid Systems}
}

@incollection{FehnkerFM09,
  author    = {A. Fehnker and M. Fruth and A. McIver},
  title     = {Graphical Modelling for Simulation and Formal Analysis of
               Wireless Network Protocols},
  year      = {2009},
  pages     = {1-24},
  editor    = {M. Butler and C.B. Jones and A. Romanovsky and E. Troubitsyna},
  booktitle = {Methods, Models and Tools for Fault Tolerance},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {5454}
}

@inproceedings{FehnkerHM07,
  author    = {A. Fehnker and L. van Hoesel and A. Mader},
  title     = {Modelling and Verification of the LMAC Protocol for Wireless Sensor Networks},
  year      = {2007},
  pages     = {253-272},
  ee        = {http://dx.doi.org/10.1007/978-3-540-73210-5_14},
  editor    = {J. Davies and J. Gibbons},
  booktitle     = {Integrated Formal Methods, 6th International Conference,
               IFM 2007, Oxford, UK, July 2-5, 2007, Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {4591},
  isbn      = {978-3-540-73209-9},
}

@inproceedings{FVZ03,
	title =		{Modeling and Verifying a {L}ego Car Using Hybrid {I/O} Automata},
	author =	{A. Fehnker and F.W. Vaandrager and M. Zhang},
	year =		2003,
	booktitle =	{Models, Algebras, and Logic of Engineering Software},
	editors =	{M. Broy and M. Pizka},
	series =	{NATO ASI Series III},
	volume =	191,
	pages =		{385--402},
	publisher =	{IOS Press},
	url =		{http://www.cs.ru.nl/ita/publications/papers/fvaan/LEGO.html}
}

@inproceedings{FVZ03a,
	title =		{Modeling and Verifying a {L}ego Car Using
			 Hybrid {I/O} Automata},
	author =	{A. Fehnker and F.W. Vaandrager and M. Zhang},
	year =		2003,
	booktitle =	{Third International Conference on Quality Software
			 (QSIC 2003), {\rm Dallas, Texas, USA, November 6 - 7}},
        pages =		{280--289},
	publisher =	{IEEE Computer Society Press},
	url =		{http://www.cs.ru.nl/ita/publications/papers/fvaan/LEGO.html}
}


@techreport{FVZ03b,
	title =		{Modeling and Verifying a {L}ego Car Using
			 Hybrid {I/O} Automata},
	author =	{A. Fehnker and F.W. Vaandrager and M. Zhang},
        year =          2003,
        month =         mar,
        type =          {Report},
        institution =   {Nijmegen Institute for Computing and Information
                        Sciences, University of Nijmegen},
        number =        {NIII-R0308},
        url =           {http://www.cs.ru.nl/ita/publications/papers/fvaan/LEGO.html}
}

@article{FLP85,
	author =	{M.J. Fischer and N.A. Lynch and M.S. Paterson},
	year =		1985,
	journal =	jacm,
	number =	2,
	pages =		{374-382},
	title =		{Impossibility of Distributed Consensus with One
				Faulty Process},
	volume =	32
}

@inproceedings{Flanagan-Et-Al02,
  AUTHOR =   "Cormac Flanagan and K. Rustan M. Leino and Mark
                  Lillibridge and Greg Nelson and James B. Saxe and
                  Raymie Stata",
  TITLE =    "Extended Static Checking for {J}ava",
  BOOKTITLE =    "ACM SIGPLAN 2002 Conference on Programming Language
                  Design and Implementation (PLDI'2002)",
  omitVOLUME =   "37",
  omitNUMBER =   "5",
  YEAR =     "2002",
  PAGES =    "234--245",
}

@article{FFL94,
	author =	{R. Fokkink and W.J. Fokkink and Lune, J. van de},
	title =		{Fast Computation of an Alternating Sum},
	journal =	{Nieuw Archief voor Wiskunde},
	year =		1994,
	month =		{March/July},
	number =	12,
	volume =	{1/2},
	pages =		{13--18}
}

@techreport{Fo91,
        author =        {W.J. Fokkink},
        year =          1991,
	month =		oct,
        institution =   cwi,
        type =          {Report},
        number =        {CS-R9149},
        address =       {Amsterdam},
        title =         {Normal forms in real time process algebra}
}

@techreport{Fo92a,
	author =	{W.J. Fokkink},
	title =		{A simple specification language combining processes,
			 time and data},
	year =		1992,
	month =		feb,
	institution = 	cwi,
	type =		{Report},
	number =	{CS-R9209},
	address =	{Amsterdam}
}


@techreport{Fo92b,
        author =        {W.J. Fokkink},
        year =          1992,
	month =		jul,
        institution =   cwi,
        type =          {Report},
        number =        {CS-R9231},
        address =       {Amsterdam},
        title =         {Regular processes with relative time and silent steps}
}

@inproceedings{Fok93,
	author =	{W.J. Fokkink},
	title =		{An elimination theorem for regular behaviours with
				integration},
	crossref =	{CONCUR93},
	pages =		{432--446}
}

@article{Fo94,
        author =        {W.J. Fokkink},
        year =          1994,
        title =         {A complete equational axiomatization for
				 prefix iteration},
        journal =	ipl,
	volume =	52,
	pages =		{333--337}
}

@inproceedings{Fo94b,
        author =        {W.J. Fokkink},
	crossref =	{TACS94},
        pages =         {440--453},
        title =         {The tyft/tyxt format reduces to tree rules}
}

@techreport{Fo94c,
        author =        {W.J. Fokkink},
        year =          1994,
	month =		jul,
        institution =   cwi,
        type =          {Report},
        number =        {CS-R9442},
        address =       {Amsterdam},
        title =         {Idempotent most general unifiers for infinite sets}
}

@techreport{Fo94e,
	author =	{W.J. Fokkink},
	title =		{A complete equational axiomatisation for prefix
			 iteration},
	year =		1994,
	month =		feb,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R9415},
	address =	{Amsterdam}
}

@phdthesis{Fo94d,
	author =	{W.J. Fokkink},
	year =		1994,
	month =		dec,
	school =	{University of Amsterdam},
	title =		{Clocks, Trees and Stars in Process Theory}
}

@techreport{FvG95,
        author =        {W.J. Fokkink and Glabbeek, R.J. van},
        year =          1995,
	month =		feb,
        institution =   cwi,
        type =          {Report},
        number =        {CS-R9508},
        address =       {Amsterdam},
        title =         {Ntyft/ntyxt rules reduce to ntree rules}
}

@inproceedings{FH98,
	author =	{W.J. Fokkink and P.R. Hollingshead},
	booktitle =	{Proceedings 3rd Workshop on Formal Methods for
			 Industrial Critical Systems (FMICS'98)},
	title =		{Verification of interlockings: from control
			 tables to ladder logic diagrams},
	year =		1998,
	editor =	{J.F. Groote and S.P. Luttik and J.J. van Wamel},
	publisher =	{Stichting Mathematisch Centrum},
	pages =		{171--185}
}

@techreport{FK92,
        author =        {W.J. Fokkink and A.S. Klusener},
        year =          1992,
	month =		jun,
        institution =   cwi,
        type =          {Report},
        number =        {CS-R9219},
        address =       {Amsterdam},
        title =         {Real time process algebra with prefixed integration}
}

@techreport{FK95,
        author =        {W.J. Fokkink and A.S. Klusener},
        year =          1995,
	month =		jun,
        institution =   cwi,
        type =          {Report},
        number =        {CS-R9542},
        address =       {Amsterdam},
        title =         {An effective axiomatization for real time {ACP}},
	note =		{To appear in {\em Information and Computation}}
}

@techreport{FW92,
        author =        {W.J. Fokkink and Wamel, J.J. van},
        year =          1992,
	month =		sep,
        institution =   {Programming Research Group, University of Amsterdam},
        type =          {Report},
        number =        {CR-9201},
        title =         {An algebraic specification of interest products},
        note =          {Confidential}
}

@article{FZ94,
	author =	{W.J. Fokkink and H. Zantema},
	title =		{Basic Process Algebra with Iteration:
			 Completeness of its Equational Axioms},
	year = 		1994,
	journal =	{The Computer Journal},
 	volume =	37,
	number =	4,
	pages =		{259--267}
}

@book{Fr86,
	author =	{N. Francez},
	address =	{New York},
	year =		1986,
	publisher =	springer,
	title =		{Fairness}
}

@article{FL87,
	author =	{G.N. Frederickson and N.A. Lynch},
	year =		1987,
	journal =	jacm,
	volume = 	34,
	number =	1,
	pages =		{98--115},
	title =		{Electing a leader in a synchronous ring}
}


@phdthesis{Frehse05,
   author = {G. Frehse},
   title = {Compositional Verification of Hybrid Systems using Simulation Relations},
   school = {Radboud University Nijmegen},
   year = {2005},
   month = {October},
   category = {ext pre - Dissertation external preprint},
   pdf = {http://www.cs.ru.nl/ita/publications/papers/goranf/frehse_thesis_a4.pdf},
}

@article{FBKAG91,
        author =        {S. Fujiwara and G. v. Bochmann and F. Khendek
                         and M. Amalou and A. Ghedamsi},
        year =          1991,
        journal =       ieeese,
        volume =        17,
        number =        6,
        pages =         {591--603},
        title =         {Test selection based on finite state models}
}


@inproceedings{GP87,
	author =	{H. Gaifman and V.R. Pratt},
	crossref =	{LICS2},
	pages =		{72--88},
	title =		{Partial order models of concurrency and the
			 computation of functions}
}

@article{GAS83,
	author =	{R. Gallager, P. Humblet and P. Spira},
	year =		1983,
	month =		jan,
	journal =	toplas,
	volume =	5,
	number =	1,
	pages =		{66--77},
	title =		{A distributed algorithm for minimum-weight
			spanning trees}
}

@phdthesis{Gar89,
	author =	{H. Garavel},
	year =		1989,
	month =		nov,
	school =	{l' Universit\'{e} Joseph Fourier -- Grenoble I},
	title =		{Compilation et v\'{e}rification de programmes {LOTOS}}
}

@article{GM93,
	author =	{P.H.B. Gardiner and C.C. Morgan},
	year =		1993,
	journal =	fac,
	volume =	5,
	pages =		{367--382},
	title =		{A Single Complete Rule for Data Refinement}
}

@techreport{GG91,
	author =	{S.J. Garland and J.V. Guttag},
	year =		1991,
	type =		{Research Report},
	number =	82,
	institution =	{Digital Systems Research Center},
	title =		{A Guide to {LP}, the {L}arch {P}rover}
}


@misc{IOA-LANG,
 	title = 	{{IOA}: A Language for Specifiying, Programming,
			 and Validating Distributed Systems},
 	author = 	{S.J. Garland and N.A. Lynch and M. Vaziri},
 	institution = 	{MIT Laboraty for Computer Science},
 	year = 		1997,
 	month = 	sep,
 	note = 		{Available through URL
   	{\tt  http://larch.lcs.mit.edu:8001/\verb+~+garland/ioaLanguage.html}}
}

@techreport{GSSL93,
	author =	{R. Gawlick and R. Segala and {J.F.}
			{S{\o}gaard-Andersen} and N.A. Lynch},
	year =		1993,
	month =		dec,
	title =		{Liveness in Timed and Untimed Systems},
	number =	{MIT/LCS/TR-587},
	institution =	{Laboratory for Computer Science, MIT, Cambridge, MA}
}

@inproceedings{GSSL94,
     AUTHOR="R. Gawlick and R. Segala and {J.F.}
     {S{\o}gaard-Andersen} and N.A. Lynch",
     TITLE="Liveness in Timed and Untimed Systems",
     crossref="ICALP21",
     YEAR="1994",
     NOTE="A full version appears as MIT Technical Report number
     MIT/LCS/TR-587"}

@techreport{GeV03,
        author =        {B. Gebremichael and F.W. Vaandrager},
        title =         {Control Synthesis for a Smart Card Personalization
                                 System Using Symbolic Model Checking},
        year =          2003,
        month =         may,
        type =          {Report},
        institution =   {Nijmegen Institute for Computing and Information
                        Sciences, University of Nijmegen},
        number =        {NIII-R0312},
        url =           {http://www.cs.ru.nl/ita/publications/papers/fvaan/smart.html}
}
 
@inproceedings{GeV04,
        author =        {B. Gebremichael and F.W. Vaandrager},
        title =         {Control Synthesis for a Smart Card Personalization
                                 System Using Symbolic Model Checking},
        year =          2003,
	booktitle =	{Proceedings First International Workshop on Formal
			 Modeling and Analysis of Timed Systems (FORMATS 2003),
			{\rm  September 6-7 2003, Marseille, France}},
	series =	lncs,
        url =   {http://www.cs.ru.nl/ita/publications/papers/fvaan/smart.html},
	publisher =	springer,
	volume =	2791,
	editors =	{K.G. Larsen and P. Niebert}
}
 
@inproceedings{GeV05,
        author =        {B. Gebremichael and F.W. Vaandrager},
        title =         {Specifying Urgency in Timed {I/O} Automata},
        year =          2005,
	booktitle =	{Proceedings of the  3rd IEEE International Conference on Software Engineering and Formal Methods (SEFM 2005),
			{\rm Koblenz, Germany, September 5-9, 2005}},
        url =   	{http://www.cs.ru.nl/ita/publications/papers/fvaan/urgency.html},
	publisher =	{IEEE Computer Society},
	editors =	{B.K. Aichernig and B. Beckert},
	pages =		{64--73}
}

@techreport{GVZ06,
	title =		{Analysis of a Protocol for Dynamic Configuration of {IPv4} Link Local Addresses using {U}ppaal},
	author =	{B. Gebremichael and F.W. Vaandrager and M. Zhang},
        year =          2006,
        type =          {Report},
        institution =   {Institute for Computing and Information Sciences, Radboud University Nijmegen},
        number =        {ICIS-R06016},
        url =           {http://www.cs.ru.nl/ita/publications/papers/fvaan/zeroconf.html}
}
 
@inproceedings{GVZ06a,
        author =        {B. Gebremichael and F.W. Vaandrager and M. Zhang},
        title =         {Analysis of the {Z}eroconf Protocol using {U}ppaal},
        year =          2006,
	booktitle =	{Proceedings 6th Annual ACM \& IEEE Conference on Embedded Software (EMSOFT 2006), {\rm Seoul, South Korea, October 22-25, 2006}},
	pages =		{242-251},
	publisher =	{ACM Press},
}

@inproceedings{Getal05,
   author = {Biniam Gebremichael and Frits Vaandrager and Miaomiao Zhang and Kees Goossens and Edwin Rijpkema and Andrei R\u{a}dulescu},
   title = {Deadlock Prevention in {\sc {\AE}thereal} Protocol},
   booktitle = {Proceedings 13th IFIP Advanced Research Working Conference on Correct Hardware Design and Verification Methods {(CHARME05)}},
   year = {2005},
   editor = {D. Borrione and W. Paul},
   volume = {3725},
   series = {Lecture Notes in Computer Science},
   pages = {345--348},
   publisher = {Springer-Verlag},
   category = {wet - artikel in bundel - proceedings},
   url = {http://www.cs.ru.nl/ita/publications/papers/fvaan/noc.html},
}

@inproceedings{GRS88,
author="Gelder, {A. van} and K. Ross and J.S. Schlipf",
title="Unfounded Sets and Well--Founded Semantics for General Logic
Programs",
booktitle=pods7,
pages="221-230",
year=1988
}

@inproceedings{GL88,
author="M. Gelfond and V. Lifschitz",
title="The stable model semantics for logic programming",
booktitle="Proceedings $5^{th}$ International Conference on Logic Programming",
pages="1070--1080",
year=1988,
editor="R. Kowalski and K. Bowen",
address ="Cambridge, Massachusetts",
publisher=mitp
}

@inproceedings{GS80,
	author =	{H.J. Genrich and E. Stankiewicz--Wiechno},
	booktitle =	{Advanced course on general net theory of processes and systems, {Hamburg 1979}},
	year =		1980,
	editor =	{W. Brauer},
	series =	lncs,
	volume =	84,
	publisher =	springer,
	title =		{A dictionary of some basic notions of {Petri} nets}
}

@inproceedings{GL89,
	author =	{R. Gerber and I. Lee},
	booktitle =	{Proceedings 6th IEEE Workshop on Real-Time Software and Operating Systems},
	year =		1989,
	title =		{The Formal Treatment of Priorities in Real-Time Computation}
}

@inproceedings{Ger90,
	author =	{R. Gerth},
	crossref =	{REXrefinement},
	pages =		{777--808},
	title =		{Foundations of Compositional Program Refinement
				 (first version)}
}

@inproceedings{GB87,
	author =	{R. Gerth and A. Boucher},
	crossref =	{ICALP14},
	pages =		{95--114},
	title =		{A timed failures model for extended communicating processes}
}

@article{Gibbs94,
	author =	{W.W. Gibbs},
	title =		{Software's Chronic Crisis},
	year =		1994,
	month =		sep,
	journal =	{Scientific American},
	pages =		{72--81}
}

@book{Gin68,
	author =	{A. Ginzburg},
	year =		1968,
	publisher =	{Academic Press},
	address =	{New York -- London},
	title =		{Algebraic Theory of Automata}
}

@article{Gir87,
	author =	{J.-Y. Girard},
	year =		1987,
	journal =	tcs,
	pages =		{1--102},
	title =		{Linear Logic},
	volume =	50,
	number =	1
}

@book{GLT89,
        author =        {J-Y. Girard and P. Taylor and Y.  Lafont},
        year =          1989,
        publisher =     cup,
        series =        {Cambridge Tracts in Theoretical Computer Science 7},
        title =         {Proofs and Types}
}

@phdthesis{Gi84,
	author =	{J.L. Gischer},
	year =		1984,
	school =	{Stanford University},
	title =		{Partial orders and the axiomatic theory of shuffle}
}

@article{Gi88,
	author =	{J.L. Gischer},
	year =		1988,
	journal =	tcs,
	pages =		{199--224},
	title =		{The equational theory of pomsets},
	volume =	61
}

@techreport{vG86,
	author =	{Glabbeek, R.J. van},
	year =		1986,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R8624},
	address =	{Amsterdam},
	title =		{Notes on the methodology of {CCS} and {CSP}}
}

@inproceedings{vG87,
	author =	{Glabbeek, R.J. van},
	booktitle =	{Proceedings STACS 87},
	year =		1987,
	editor =	{F.J. Brandenburg and G. Vidal--Naquet and M. Wirsing},
	series =	lncs,
	volume =	247,
	publisher =	springer,
	pages =		{336--347},
	title =		{Bounded nondeterminism and the approximation
			 induction principle in process algebra}
}

@inproceedings{vG90,
	author =	{Glabbeek, R.J. van},
	year =		1990,
	editor =	{M. Broy and C.B. Jones},
	booktitle = 	gallilea,
	publisher =	nholland,
	title =		{The refinement theorem for {ST}-bisimulation semantics}
}

@inproceedings{vG90a,
	author =	{Glabbeek, R.J. van},
	crossref =	{CONCUR90},
	pages =		{278--297},
	title =		{The Linear Time -- Branching Time Spectrum}
}

@phdthesis{vG90b,
	author =	{Glabbeek, R.J. van},
	address =	{Amsterdam},
	year =		1990,
	school =	{Free University},
	title =		{Comparative Concurrency Semantics and Refinement
					 of Actions}
}

@inproceedings{vG93,
	author =	{Glabbeek, R.J. van},
	title =		{The Linear Time -- Branching Time Spectrum {II}
		(The semantics of sequential systems with silent moves)},
	crossref =	{CONCUR93},
	pages =		{66--81}
}

@inproceedings{vG93a,
	author =	{Glabbeek, R.J. van},
	title =		{Full abstraction in structural operational semantics},
	crossref =	{AMAST93},
	pages =		{77--84}
}

@incollection{vG01,
	author =	{Glabbeek, R.J. van},
	crossref =	{HandbookPA},
	title =		{The linear time --- branching time spectrum {I}.
			{T}he semantics of concrete, sequential processes},
	pages =		{3--99}
}

@techreport{GG89,
	author =	{Glabbeek, R.J. van and U. Goltz},
	institution = 	gmd,
	type =		{Arbeitspapiere der GMD},
	number =	366,
	address =	{Sankt Augustin},
	year =		1989,
	note =		{An extended abstract appeared in: Proceedings $14^{th}$ Symposium on Mathematical Foundations of Computer Science, Por\c{a}bka-Kozubnik, Poland, August/September 1989 (A. Kreczmar and G. Mirkowska), LNCS 379, Springer-Verlag, pp. 237--248},
	title =		{Equivalence notions for concurrent systems and refinement of actions}
}

@article{GG89a,
	author =	{Glabbeek, R.J. van and U. Goltz},
	year =		1989,
	month =		jun,
	journal =	eatcs,
	pages =		{154--163},
	title =		{Partial order semantics for refinement of actions -- neither necessary nor always sufficient but appropriate when used with care},
	volume =	38
}

@inproceedings{GG90,
	author =	{Glabbeek, R.J. van and U. Goltz},
	crossref =	{REXrefinement},
	pages =		{267--300},
	title =		{Refinement of actions in causality based models}
}

@techreport{GG90a,
	author =	{Glabbeek, R.J. van and U. Goltz},
	year =		1990,
	month =		nov,
	institution =	tum,
	type =		{SFB-Bericht},
	number =	{Nr.\ 342/23/90 A},
	title =		{A Deadlock-sensitive Congruence for Action Refinement}
}

@incollection{vGR89,
	author =	{Glabbeek, R.J. van and J.J.M.M. Rutten},
	booktitle =	{J.W. de Bakker, 25 jaar semantiek, liber amicorum},
	year =		1989,
	publisher =	cwi,
	address =	{Amsterdam},
	pages =		{243--246},
	title =		{The processes of {De Bakker and Zucker} represent bisimulation equivalence classes}
}


@article{GSS95,
	author =	{Glabbeek, R.J. van and S.A. Smolka and B. Steffen},
	title =		{Reactive, generative, and stratified models
				 of probabilistic processes},
        year =          1995,
        journal=        iandc,
        volume=         121,
        number=         1,
        pages=          {59--80}
}

@inproceedings{GSST90,
	author =	{Glabbeek, R.J. van and S.A. Smolka and B. Steffen
				 and C.M.N. Tofts},
	crossref =	{LICS5},
	pages =		{130--141},
	title =		{Reactive, generative, and stratified models
				 of probabilistic processes}
}

@inproceedings{GV87,
	author =	{Glabbeek, R.J. van and F.W. Vaandrager},
	booktitle =	{Proceedings PARLE conference, {\rm Eindhoven},
			 Vol. II (Parallel Languages)},
	year =		1987,
	editor =	{Bakker, J.W. de and A.J. Nijman and P.C. Treleaven},
	series =	lncs,
	volume =	259,
	publisher =	springer,
	pages =		{224--242},
	title =		{Petri net models for algebraic theories of concurrency}
}

@inproceedings{GV89,
	author =	{Glabbeek, R.J. van and F.W. Vaandrager},
	booktitle =	{Algebraic Methods: Theory, Tools and Applications,
				 Workshop Passau 1987},
	year =		1989,
	editor =	{M. Wirsing and J.A. Bergstra},
	series =	lncs,
	volume =	394,
	publisher =	springer,
	pages =		{465--506},
	title =		{Modular specifications in process algebra
			 -- with curious queues (extended abstract)}
}

@article{GV93,
	author =	{Glabbeek, R.J. van and F.W. Vaandrager},
	year =		1993,
	journal =	tcs,
	volume =	113,
	number =	2,
	pages =		{293--348},
	title =		{Modular Specification of Process Algebras}
}

@inproceedings{GV91,
	author =	{Glabbeek, R.J. van and F.W. Vaandrager},
	title =		{The Difference Between Splitting in $n$ and $n+1$},
	booktitle =	{Proceedings $3^{rd}$ Workshop on Concurrency and
		Compositionality, {\rm Goslar, {GMD}-Studien Nr.\ 191}},
	year =		1991,
	month =		may,
	editor =	{E. Best and G. Rozenberg},
	pages =		{117--121},
	publisher =	{Universit{\"{a}}t Hildesheim}
}

@techreport{GV95,
	author =	{Glabbeek, R.J. van and F.W. Vaandrager},
	title =		{The Difference Between Splitting in $n$ and $n+1$},
	year =		1995,
	month =		jul,
	institution =	{CWI},
	address =	{Amsterdam},
	type =		{Report},
	number =	{CS-R9553}
}



@article{GV97,
	author =	{Glabbeek, R.J. van and F.W. Vaandrager},
	title =		{The Difference Between Splitting in $n$ and $n+1$},
	journal =	iandcomp,
	volume =	136,
	number =	2,
	year =		1997,
	month =		aug,
	pages =		{109--142}
}

@inproceedings{GV03,
	author =	{Glabbeek, R.J. van and F.W. Vaandrager},
	title =		{Bundle Events Structures and {CCSP}},
	booktitle =	{Proceedings of the 14th International Conference
			 on Concurrency Theory, (CONCUR 2003),
			{\rm September 3-5, Marseille, France}},
	year =		2003,
	editor =	{R. Amadio and D. Lugiez},
	pages =		{52--72},
	publisher =	springer,
	series =	lncs,
	volume =	2761,
	url =		{http://www.cs.ru.nl/ita/publications/papers/fvaan/Bundle.html}
}

@inproceedings{GW89,
	author =	{Glabbeek, R.J. van and W.P. Weijland},
	booktitle =	{Information Processing 89},
	year =		1989,
	editor =	{G.X. Ritter},
	publisher =	nholland,
	pages =		{613--618},
	note =		{Full version available as Report CS-R9120,
			CWI, Amsterdam, 1991},
	title =		{Branching Time and Abstraction in Bisimulation
			 Semantics (extended abstract)}
}

@techreport{GW89a,
	author =	{Glabbeek, R.J. van and W.P. Weijland},
	year =		1989,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R8922},
	address =	{Amsterdam},
	note =		{Also appeared in: Proceedings AMAST Conference,
				 May 1989, Iowa, USA, pp. 197--201},
	title =		{Refinement in Branching Time Semantics}
}

@article{GW96,
        author =        {Glabbeek, R.J. van and W.P. Weijland},
        title =         {Branching Time and Abstraction in Bisimulation
                         Semantics},
        journal =       {Journal of the ACM},
        year =          1996,
        volume =        43,
        number =        3,
        pages =         {555-600}
}

@inproceedings{GW91,
	author =	{P. Godefroid and P. Wolper},
	crossref =	{LICS6},
	pages =		{406--416},
	title =		{A Partial Approach to Model Checking}
}

@techreport{Gm89,
	author =	{H.J.M. Goeman},
	year =		1989,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R8924},
	address =	{Amsterdam},
	title =		{Towards a theory of (self) applicative communicating
				 processes: a short note}
}

@article{GoldbergT88,
    author    = {Goldberg, A.V. and Tarjan, R.E.},
    title     = {A new approach to the maximum-flow problem},
    journal   = {Journal of the ACM},
    volume    = {35},
    number    = {4},
    year      = {1988},
    pages     = {921-940},
} 

@inproceedings{GolV89,
	author =	{A. G\"{o}ll\"{u} and P.P. Varaiya},
	booktitle =	{Proceedings of the IEEE Conference on Decision
				and Control, {\rm Tampa}},
	pages =		{2708--2712},
	month =		dec,
	year =		1989,
	title =		{Hybrid dynamical systems}
}


@techreport{Go86,
	author =	{U. Goltz},
	institution =	gmd,
	type =		{Arbeitspapiere der GMD},
	number =	223,
	address =	{Sankt Augustin},
	year =		1986,
	title =		{Building structured {P}etri nets}
}

@techreport{Go88,
	author =	{U. Goltz},
	institution = 	gmd,
	type =		{Arbeitspapiere der GMD},
	number =	290,
	address =	{Sankt Augustin},
	year =		1988,
	title =		{On representing {CCS} programs by finite {P}etri nets}
}

@techreport{GL85,
	author =	{U. Goltz and R. Loogen},
	year =		1985,
	institution =	{RWTH Aachen},
	type =		{Schriften zur Inform. und Angew. Math.},
	number =	105,
	title =		{Towards a non-interleaving semantics model for
				 {CSP}-like languages}
}

@inproceedings{GM84,
	author =	{U. Goltz and A. Mycroft},
	crossref =	{ICALP11},
	pages =		{196--208},
	title =		{On the relationship of {CCS} and {Petri} nets}
}

@inproceedings{GR85,
	author =	{U. Goltz and W. Reisig},
	booktitle =	{Advances in Petri Nets 1984},
	year =		1985,
	editor =	{G. Rozenberg},
	series =	lncs,
	volume =	188,
	publisher =	springer,
	pages =		{169--196},
	title =		{{CSP}--programs as nets with individual tokens}
}

@misc{GoRe91,
	author =	{U. Goltz and A. Rensink},
	title =		{Finite {P}etri nets as models for recursive causal
				 behaviour},
	year =		1991,
	note =		{Submitted to TCS}
}

@phdthesis{Gon88,
	author =	{G. Gonthier},
	year =		1988,
	type =		{Th\`{e}se d'Informatique},
	school =	{Universit\'{e} d'Orsay},
	title =		{S\'{e}mantiques et Mod\`{e}les d'Ex\'{e}cution des
	Langages R\'{e}actifs Synchrone; Application \`{a} {{\bf Esterel}}}
}

@book{Gor79,
	author="M. Gordon",
	title="The Denotational Description of Programming Languages",
	year="1979",
	publisher=springer
}

@inproceedings{Gor88,
	author =	{M.J.C. Gordon},
	crossref =	{BS88},
	booktitle =	{VLSI Specification, Verification and Synthesis},
	title =		{{HOL}: a proof generating system for
				 higher-order logic}
}

@BOOK{GMW79
, AUTHOR       = "M.H. Gordon and R.M. Milner and C. Wadsworth"
, TITLE        = "Edinburgh LCF"
, SERIES       = lncs
, VOLUME       = 78
, PUBLISHER    = springer
, YEAR         = 1979
}

@phdthesis{Gor90,
	author =	{R. Gorrieri},
	year =		1990,
	title =		{Refinement, Atomicity and Transactions for
				Process Description Languages},
	type =		{Dissertazione per il Titolo di Dottore di Ricerca
				 in Informatica (Terzo Ciclo)},
	school =	{Dipartimento di Informatica, Universit\`{a} di Pisa}
}

@Article{GL95,
title={Split and {ST} Bisimulation Semantics},
author={R. Gorrieri and C. Laneve},
pages={272--288},
journal=iandcomp,
month={1~} # may,
year=1995,
volume=118,
number=2
}

@inproceedings{GMM88,
	author =	{R. Gorrieri and S. Marchetti and U. Montanari},
	booktitle =	caap88,
	year =		1988,
	editor =	{M. Daughet and M. Nivat},
	series =	lncs,
	volume =	299,
	publisher =	springer,
	pages =		{258--270},
	title =		{{$A^{2}CCS$}: a simple extension of {CCS} for
				 handling atomic actions}
}

@misc{GV07,
	author =	{C. Grabmeyer and A. Visser},
	year =		2007,
	title =		{Axiomatization of Generalized Boolean Algebras},
	note =		{Personal communication}
}

@article{Gr81,
	author =	{J. Grabowski},
	year =		1981,
	journal =	funinf,
	number =	2,
	pages =		{427--498},
	title =		{On partial languages},
	volume =	{IV}
}

@inproceedings{GrafS97,
  author    = {S. Graf and H. Sa\"{\i}di},
  title     = {Construction of Abstract State Graphs with PVS},
  year      = {1997},
  pages     = {72-83},
  editor    = {O. Grumberg},
  booktitle     = {Computer Aided Verification, 9th International Conference,
               CAV '97, Haifa, Israel, June 22-25, 1997, Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {1254}
}


@inproceedings{GS87,
	author =	{S. Graf and J. Sifakis},
	crossref =	{ICALP14},
	pages =		{115--125},
	title =		{Readiness semantics for regular processes with
				 silent actions}
}

@inproceedings{Gri89,
	author =	{E.P. Gribomont},
	booktitle =	{Mathematics of program construction},
	year =		1989,
	editor =	{J.L.A. van de Snepscheut},
	publisher =	springer,
	pages =		{219--238},
	series =	lncs,
	volume =	375,
	title =		{Stepwise refinement and concurrency: a small exercise}
}

@phdthesis{Gri94,
	author =	{W.O.D. Griffioen},
	year =		1994,
	type =		{Master Thesis},
	school =	{Programming Research Group,
			University of Amsterdam},
	title =		{Analysis of an Audio Control Protocol
			 with Bus Collision}
}

@techreport{Gri95,
	author =	{W.O.D. Griffioen},
	title =		{Proof-checking an audio control protocol with {LP}},
	year=		1995,
	month =		nov,
	institution =	cwi,
	type =		{Report},
	number=		{CS-R9570},
	address=	{Amsterdam}
}

@phdthesis{Gri00,
	author =	{W.O.D. Griffioen},
	year =		2000,
	month =		may,
	school =	{University of Nijmegen},
	title =		{Studies in Computer Aided Verification of Protocols},
	note =		{Postscript and PVS sources available via
			{\tt http://www.cs.ru.nl/ita/group/former\_members/davidg/}}
}

@inproceedings{GH98,
  	author        = {W.O.D. Griffioen and M. Huisman},
	title =		{A Comparison of {PVS} and {Isabelle/HOL}},
	crossref =	{TPHOL11},
	pages =		{123--142}
}

@techreport{GK95,
	author =	{W.O.D. Griffioen and H.P. Korver},
	title =		{The bakery protocol:
			 A comparative case-study in formal verification},
	year=		1995,
	month =		nov,
	institution =	cwi,
	type =		{Report},
	number=		{CS-R9569},
	address=	{Amsterdam}
}

@inproceedings{GK95CSN,
title={The Bakery Protocol: A Comparative Case-Study in Formal
                  Verification},
author={W.O.D. Griffioen and H.P. Korver},
booktitle={CSN'95 (Computer Science in the Netherlands)},
editor={J.C. van Vliet},
publisher={Stichting Mathematisch Centrum},
year=1995,
pages={109--121}
}

@inproceedings{GV98a,
  	author        = {W.O.D. Griffioen and F.W. Vaandrager},
	title =		{Normed simulations},
	crossref =	{CAV10},
	pages =		{332--344}
}

@techreport{GV00,
  	author        = {W.O.D. Griffioen and F.W. Vaandrager},
	title =		{A Theory of Normed simulations},
	year =		2000,
	month =		jul,
	number =	{CSI-R0013},
	institution =	{Computing Science Institute, University of Nijmegen}
}

@article{GV04,
  	author = 	{W.O.D. Griffioen and F.W. Vaandrager},
	title =		{A Theory of Normed simulations},
        year =          2004,
	volume =	5,
        number =	4,
	pages =		{577--610},
        journal=	{ACM Transactions on Computational Logic},
	url =		{http://www.cs.ru.nl/ita/publications/papers/fvaan/normed.html}
}

@techreport{Gr87,
	author =	{R.A. Groenveld},
	year =		1987,
	type =		{Report},
	institution =	{Programming Research Group, University of Amsterdam},
	number =	{P8701},
	title =		{Verification of a sliding window protocol by means
				 of process algebra}
}

@phdthesis{deGroot08,
	author =	{Groot, A.L. de},
	year =		2008,
	school =	{Radboud University Nijmegen},
	title =		{Practical Automaton Proofs in {PVS}}
}

@techreport{dGW02,
	author =	{Groot, A.L. de and H. Wupper},
	title =		{A Taxonomy of Reactive Systems},
	year =		2002,
	type =		{Report},
        institution =   {Nijmegen Institute for Computing and Information
			Sciences, University of Nijmegen},
        number =        {NIII-R0210},
	url =		{http://www.cs.ru.nl/research/reports/info/NIII-R0210.html}
}

@techreport{Gro88,
    author={J.F. Groote},
    title="Implementations of events in {LOTOS}-specifications",
    number="009/88EN",
    year="1988",
    type="Technical Report",
    address="Eindhoven",
    institution="Philips CFT"}

@techreport{Gr89,
	author =	{J.F. Groote},
	year =		1989,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R8950},
	address =	{Amsterdam},
	note="An extended abstract appeared in J.C.M. Baeten and J.W. Klop,
		 editors, {\em Proceedings CONCUR 90}, Amsterdam, LNCS 458,
		 pages 332--341. Springer-Verlag, 1990.",
	title =		{Transition System Specifications with
				 Negative Premises}
}

@inproceedings{Gr90,
	author =	{J.F. Groote},
	crossref =	{CONCUR90},
	pages =		{314--331},
	title =		{A new strategy for proving $\omega$--completeness
				 with applications in process algebra}
}

@techreport{Gr90a,
author="J.F. Groote",
title="Specification and Verification of Real Time Systems in {ACP}",
institution=cwi,
year=1990,
type="Report",
number="CS-R9015",
address="Amsterdam",
note="An extended abstract appeared in
L. Logrippo, R.L. Probert and H. Ural, editors,
{\em Protocol Specification, Testing and Verification, X},
Ottawa, Canada pages 261--274, 1990."
}

@phdthesis{Gr91,
	author =	{J.F. Groote},
	year =		1991,
	month =		nov,
	school =	{University of Amsterdam},
	title =		{Process Algebra and Structured Operational Semantics}
}

@article{Gro92,
author="Groote, J.F.",
title="A Short Proof of the Decidability of Bisimulation for
Normed {BPA}-Processes",
journal=ipl,
year=1992,
volume=42,
pages="167--171"}

@article{Gr93,
        author =        {J.F. Groote},
        year =          1993,
        journal=	tcs,
        volume=		118,
        number=		2,
        pages=		"263--299",
        title =         {Transition System Specifications with
                                 Negative Premises}}

@techreport{Gr94,
    author=		{J.F. Groote},
    title=		{Hiding propositional constants in {BDDs}},
    year=		1994,
    type=		{Logic Group Preprint Series},
    number=		120,
    institution=	{Utrecht University},
    note =		{Available by ftp from {\tt ftp.phil.ruu.nl} as
			{\tt logic/PREPRINTS/preprint120.ps.Z}}
}

@techreport{GrHu91,
    author={J.F. Groote and H. H\"{u}ttel},
    title="Undecidable equivalences for Basic Process Algebra",
    number="ECS-LFCS-91-169",
    year="1991",
    type="Technical Report",
    institution="University of Edinburgh"}


@article{GrHu94,
    	author =	{J.F. Groote and H. H\"{u}ttel},
    	title =		{Undecidable equivalences for Basic Process Algebra},
        year =          1994,
        journal=        iandc,
        volume=         115,
        number=         2,
        pages=          {354--371}
}

@techreport{GKV94,
        author =        {J.F. Groote and J.W.C. Koorn and Vlijmen, S.F.M. van},
        year =          1994,
	month =		oct,
        title =         {The Safety Guaranteeing System at Station
			{Hoorn-Kersenboogerd}},
        type =		{Logic Group Preprint Series},
        number =	121,
        institution =	{Dept. of Philosophy, Utrecht University},
}

@inproceedings{GKV95,
        author =        {J.F. Groote and J.W.C. Koorn and Vlijmen, S.F.M. van},
        year =          1995,
        title =         {The Safety Guaranteeing System at Station
			{Hoorn-Kersenboogerd} (extended abstract)},
	booktitle =	{Proceedings 10th Annual Conference on
			 Computer Assurance (COMPASS'95),
			{\rm Gaithersburg, Maryland}},
        pages=          {57--68}
}

@article{GKV95b,
        author =        {J.F. Groote and J.W.C. Koorn and Vlijmen, S.F.M. van},
        year =          1995,
    	title =		{Formele analyse van het veiligheids\-systeem op
			het station van {Hoorn-Kersenboogerd}},
        journal=        {Informatie},
        volume=         36,
        number=         6,
        pages=          {397--404}
}

@techreport{GK92,
        author =        {J.F. Groote and H.P. Korver},
        year =          1992,
	month =		oct,
        title =         {A Correctness Proof of the Bakery Protocol in
                                {$\mu$-CRL}},
        type =		{Logic Group Preprint Series},
        number =	80,
        institution =	{Dept. of Philosophy, Utrecht University},
}

@inproceedings{GK94,
        author =        {J.F. Groote and H.P. Korver},
        title =         {A Correctness Proof of the Bakery Protocol in
                                {$\mu$CRL}},
	crossref =	{ACP94},
	pages =		{63--86}
}

@techreport{GK94a,
        author =        {J.F. Groote and H.P. Korver},
        year =          1994,
	month =		dec,
        title =         {A Correctness Proof of the Bakery Protocol in
                                {$\mu$-CRL}},
	institution =	cwi,
	type =		{Report},
	number =	{CS-R9473},
	address =	{Amsterdam}
}

@inproceedings{GrMo92,
	author =	{Groote, J.F. and Moller, F.},
	title =		{Verification of Parallel Systems via Decomposition},
	crossref =	{CONCUR92},
	pages =		{62--76}
}

@article{GrootePW03,
  author    = {J.F. Groote and J. Pang and A.G. Wouters},
  title     = {Analysis of a distributed system for lifting trucks.},
  journal   = {J. Log. Algebr. Program.},
  volume    = {55},
  number    = {1-2},
  year      = {2003},
  pages     = {21-56}
}

@techreport{GP93,
        author =        {J.F. Groote and J. van de Pol},
        year =          1993,
	month =		oct,
        title =         {A Bounded Retransmission Protocol for
			Large Data Packets},
        type =		{Logic Group Preprint Series},
        number =	100,
        institution =	{Dept. of Philosophy, Utrecht University},
}

@techreport{GrPo90a,
	title="The Syntax and Semantics of $\mu${CRL}",
	author="J.F. Groote and A. Ponse",
	institution=cwi,
	year=1990,
	number="CS-R9076",
	type="Report",
	address="Amsterdam"}

@inproceedings{GrPo90b,
title="Process Algebra with Guards. {C}ombining {H}oare Logic
and Process
Algebra ({E}xtended Abstract)",
author="J.F. Groote and A. Ponse",
crossref ="CONCUR91",
pages="235--249",
note="Full version appeared as Technical Report CS-R9069, CWI,
Amsterdam, 1990; and is to appear in {\em Formal Aspects of Computing}"}

@inproceedings{GrPo91a,
	author =	{J.F. Groote and A. Ponse},
	title =		{$\mu${CRL}: {A} Base for Analysing Processes
				 with Data},
	booktitle =	{Proceedings $3^{rd}$ Workshop on Concurrency and
		Compositionality, Goslar, {GMD}-Studien Nr.\ 191},
	year =		1991,
	month =		may,
	editor =	{E. Best and G. Rozenberg},
	pages =		{125--130},
	publisher =	{Universit{\"{a}}t Hildesheim}
}

@techreport{GrPo91b,
	author="J.F. Groote and A. Ponse",
	title="Proof Theory for $\mu${CRL}",
	institution=cwi,
	address="Amsterdam",
	year=1991,
	month=aug,
	type="Report",
	number="CS-R9138"
}

@inproceedings{GrPo93,
	author =	{J.F. Groote and A. Ponse},
	title =		{Proof theory for $\mu${CRL}:
			A language for processes with data},
	booktitle =	{Proceedings of the International Workshop
			 on Semantics of Specification Languages},
	editor =	{D.J. Andrews and J.F. Groote and C.A. Middelburg},
	pages =		{231--250},
	series =	{Workshops in Computer Science},
	publisher =	springer,
	year =		1993
}

@article{GP94a,
author =        {J.F. Groote and A. Ponse},
year =          1994,
journal =       {Formal Aspects of Computing},
volume =        6,
pages =         {115--164},
title =         {Process Algebra with Guards. {C}ombining {H}oare Logic with Process Algebra}
}

@inproceedings{GP94b,
title={Proof Theory for $\mu${CRL}: a Language for Processes with Data},
author={J.F. Groote and A. Ponse},
booktitle={Proceedings of the International Workshop on Semantics of
Specification Languages},
editor={D.J. Andrews and J.F. Groote and C.A. Middelburg},
publisher={Workshops in Computing, Springer-Verlag},
year=1994,
pages={232--251}
}

@inproceedings{GP95,
   author       = {Groote, J.F. and Ponse, A.},
   title        = {The syntax and semantics of $\mu${CRL}},
   editor       = {Ponse, A. and C. Verhoef and Vlijmen, S.F.M. van},
   booktitle    = {Algebra of Communicating Processes '94},
   series       = {Workshops in Computing Series},
   publisher    = {Springer-Verlag},
   pages        = {26--62},
   year         = 1995
}

@techreport{GS95,
	author =	{J.F. Groote and J.S. Springintveld},
	title =		{Focus points and convergent process operators
			--- A proof strategy for protocol verification},
	year =		1995,
	month =		nov,
	institution =	{Department of Software Technology, CWI},
	address =	{Amsterdam},
	type =		{Report},
	number =	{CS-R9566}
}

@inproceedings{GrV89,
	author =	{J.F. Groote and F.W. Vaandrager},
	crossref =	{ICALP16},
	pages =		{423--438},
	title =		{Structured operational semantics and bisimulation
				 as a congruence (extended abstract)}
}

@inproceedings{GrV90,
	author =	{J.F. Groote and F.W. Vaandrager},
	crossref =	{ICALP17},
	pages =		{626--638},
	title =		{An efficient algorithm for branching bisimulation
				 and stuttering equivalence}
}

@article{GrV92,
	author =	{J.F. Groote and F.W. Vaandrager},
	year =		1992,
	month =		oct,
	journal =	iandcomp,
	volume =	100,
	number =	2,
	pages =		{202--260},
	title =		{Structured Operational Semantics and Bisimulation
				 as a Congruence}
}

@article{GL94,
 author = {O. Grumberg and D.E. Long},
 title = {Model checking and modular verification},
 journal = {ACM Trans. Program. Lang. Syst.},
 volume = {16},
 number = {3},
 year = {1994},
 issn = {0164-0925},
 pages = {843--871},
 doi = {http://doi.acm.org/10.1145/177492.177725},
 publisher = {ACM Press},
 address = {New York, NY, USA},
 }


@techreport{GBBG85,
	author =	{Guernic, P. le and A. Beneviste and P. Bournal and T. Ganthier},
	institution =	{ISERA},
	type =		{Report},
	number =	246,
	address =	{Rennes, France},
	year =		1985,
	title =		{{SIGNAL}: a data flow oriented language for signal processing}
}

@book{Gun92,
	author =	{C.A. Gunter},
	year =		1992,
	publisher =	mitp,
	address =	{Cambridge, Massachusetts},
	title =		{Semantics of Programming Languages:
				Structures and Techniques}
}

@inproceedings{GHJ97,
	author =	{V. Gupta and T.A. Henzinger and R. Jagadeesan},
	title =		{Robust Timed Automata},
	pages = 	{331--345},
	booktitle =	{Proceedings International Workshop HART'97},
	editor =	{O. Maler},
	series =	lncs,
	volume =	1201,
	year =		1997,
	publisher =	springer
}

@incollection{GKP93,
	author =	{J. Gustafsson and H.P. Korver and A. Ponse},
	booktitle =	{SPECS --- Specification and Programming Environment
			for Communicating Software},
	publisher =	{Elsevier Science Publishers},
	address =	{Amsterdam},
	year =		1993,
	title =		{Chapter 3: Analysis},
	editor =	{W. Bouma and M. Dauphin and G.D. Evans and M. Michel
			 and R. Reed},
	pages =		{105--122}
}

@book{GH93,
	author =	{J.V. Guttag and J.J. Horning},
	year =		1993,
	publisher =	springer,
	title =		{Larch: Languages and Tools for Formal Specification}
}

@techreport{MH72,
	author =	{M. Hack},
	address =	{Cambridge, Mass.},
	institution =	mit,
	number =	{Project MAC, TR-94},
	year =		1972,
	note =		{See also {\em Corrections to `Analysis of production schemata by Petri nets'}, MIT, Project MAC, Computation Structures Note 17, 1974},
	title =		{Analysis of production schemata by {Petri} nets}
}

@inproceedings{Hal93,
	author =	{N. Halbwachs},
	crossref =	{CAV5},
	title =		{Delay analysis in synchronous programs},
	pages = 	{333--346}
}

@inproceedings{HPR94,
	author =	{N. Halbwachs and Y.-E. Proy and P. Raymond},
	title =		{Verification of linear hybrid systems
			by means of convex approximations},
	pages = 	{223--237},
	booktitle =	{Proceedings International Symposium on
			Static Analysis},
	series =	lncs,
	volume =	818,
	year =		1994,
	publisher =	springer
}

@book{Hal50,
	author =	{P.R. Halmos},
	title =		{Measure Theory},
	year =		1950,
	publisher =	{Van Nostrand Reinhold Company Inc},
	address =	{New York}
}

@incollection{Ha87,
	author =	{J.Y. Halpern},
	booktitle =	{Annual Review of Computer Science, Vol. 2},
	publisher =	{Annual Reviews Inc.},
	year =		1987,
	title =		{Using reasoning about knowledge to analyze distributed systems}
}

@inproceedings{HZ87,
	author =	{J.Y. Halpern and L.D. Zuck},
	crossref =	{PODC6},
	pages =		{269--280},
	title =		{A little knowledge goes a long way: simple
			 knowledge--based derivations and correctness proofs
			 for a family of protocols (extended abstract)}
}

@techreport{HV07,
  author		= "{Hamberg}, R. and {Vaandrager}, F.W.",
  title			= "{Using Model Checkers in an Introductory Course on Operating Systems}",
  number		= "ICIS--R07031",
  month			= "December",
  institution		= "Radboud University Nijmegen",
  year			= "2007",
  research_group	= "ita",
  class			= "Report"
}

@article{HV08,
  	author		= {R. Hamberg and F.W. Vaandrager},
  	title		= {Using Model Checkers in an Introductory Course on Operating Systems},
	year 		= 2008,
	month  		= oct,
	volume  	= 42,
        number 		= 6,
	journal  	= {Operating Systems Review},
	pages 		= {101--111},
	url 		= {http://www.ita.cs.ru.nl/publications/papers/fvaan/MCinEdu/},
	doi 		= {http://doi.acm.org/10.1145/1453775.1453793},
	category 	= {wet - artikel in wet tijdschrift}
}

@article{HV96,
        author =        {D.K. Hammer and F.W. Vaandrager},
	year =		1996,
	month =		apr,
	volume =	17,
	journal =	{Automatisering Gids},
	title =		{Ingebouwde systemen nog verre van feilloos}
}

@phdthesis{Ha91,
	author =	{H.A. Hansson},
	year =		1991,
	school =	{Department of Computer Systems, Uppsala University},
	note =		{DoCS 91/27},
	title =		{Time and Probability in Formal Design of Distributed
					Systems}
}

@article{Har87,
	author =	{D. Harel},
	year =		1987,
	journal =	scp,
	number =	3,
	pages =		{231--274},
	title =		{Statecharts: a visuel approach to complex systems},
	volume =	8
}

@inproceedings{Har95,
	author =	{D. Harel},
	crossref =	{CONCUR95},
	pages =		{264--268},
	title =		{Will {I} be pretty, Will {I} be Rich?:
			Some Thoughts on Theory vs.\ Practice in Systems
			Engineering}
}

@inproceedings{HPPS87,
	author =	{D. Harel and A. Pnueli and J. Pruzan--Schmidt
				 and R. Sherman},
	crossref =	{LICS2},
	pages =		{54--64},
	title =		{On the formal semantics of statecharts}
}

@article{HavelundP00,
  author    = {K. Havelund and T. Pressburger},
  title     = {Model Checking JAVA Programs using JAVA PathFinder.},
  journal   = {STTT},
  volume    = {2},
  number    = {4},
  year      = {2000},
  pages     = {366-381}
}

@inproceedings{HL93,
	author =	{K. Havelund and K.G. Larsen},
	crossref =	{ICALP20},
	title =		{The Fork Calculus}
}

@inproceedings{HavelundSLL97,
  author    = {K. Havelund and A. Skou and K.G. Larsen and K. Lund},
  title     = {Formal modeling and analysis of an audio/video protocol:
               an industrial case study using UPPAAL},
  year      = {1997},
  pages     = {2-13},
  booktitle     = {Proceedings of the 18th IEEE Real-Time Systems Symposium
               (RTSS '97), December 3-5, 1997, San Francisco, CA, USA},
  publisher = {IEEE Computer Society}
}

@inproceedings{HBB99,
	author =	{B.R. Haverkort and A. Bell and H.C. Bohnenkamp},
	booktitle =	{Proceedings of the 8th International Workshop on
			Petri Nets and Performance Models (PNPM'99),
			{\rm Zaragoza, Spain}},
	year =		1999,
	publisher =	{IEEE Computer Society Press},
	title =		{On the Efficient Sequential and Distributed
			 Generation of Very Large {M}arkov Chains from
			 Stochastic {P}etri Nets},
	pages =		{12--21}
}

@article{He89,
	author =	{J. He},
	title =		{Process Simulation and Refinement},
	year =		1989,
	journal =	fac,
	volume =	1,
	pages =		{229--241}
}

@inproceedings{He90,
	author =	{J. He},
	crossref =	{REXrefinement},
	pages =		{340--360},
	title =		{Various Simulations and Refinements}
}

@article{HeHo87,
	author =	{J. He and C.A.R. Hoare},
	year =		1987,
	journal =	discomp,
	number =	1,
	pages =		{1--12},
	title =		{Algebraic specification and proof of a distributed recovery algorithm},
	volume =	2
}

@article{Hee86,
author="J. Heering",
title="Partial evaluation and $\omega$-completeness of algebraic
specifications",
journal=tcs,
year=1986,
volume=43,
pages="149-167"
}

@article{HHKR89,
author="J. Heering and P.R.H. Hendriks and P. Klint and J. Rekers",
title="The Syntax Definition Formalism {SDF} -- reference manual --",
year=1989,
pages="43--75",
volume=24,
number=11,
journal=sigplan}


@inproceedings{HeerinkB95,
  author    = {L. Heerink and E. Brinksma},
  title     = {Validation in context.},
  pages     = {221-236},
  editor    = {P. Dembinski and M. Sredniawa},
  booktitle     = {Protocol Specification, Testing and Verification XV, Proceedings
               of the Fifteenth IFIP WG6.1 International Symposium on Protocol
               Specification, Testing and Verification, Warsaw, Poland,
               June 1995},
  publisher = {Chapman {\&} Hall},
  series    = {IFIP Conference Proceedings},
  volume    = {38},
  year      = {1996}
}

@inproceedings{HSV09,
  	author    = {F. Heidarian and J. Schmaltz and F.W. Vaandrager},
  	title     = {Analysis of a Clock Synchronization Protocol for Wireless Sensor Networks},
  	year      = {2009},
  	booktitle = {Proceedings 16th International Symposium of Formal Methods (FM2009), Eindhoven, the Netherlands, November 2-6, 2009},
  	publisher = {Springer},
  	series    = {Lecture Notes in Computer Science},
  	volume    = {5850},
  	pages     = {516--531},
  	editor    = {A. Cavalcanti and D. Dams},
  	funding   = {QUASIMODO D5.7,ARTS},
        category  = {wet - artikel in bundel - proceedings},
        url       = {http://www.mbsd.cs.ru.nl/publications/papers/fvaan/HSV09/},
 	doi       = {http://dx.doi.org/10.1007/978-3-642-05089-3_33}
}

@inproceedings{HL94,
	author =	{C. Heitmeyer and N.A. Lynch},
	title =		{The Generalized Railroad Crossing --- a Case Study
			 in Formal Verification of Real-Time Systems},
	booktitle =	{Proceedings 15th IEEE Real-Time Systems Symposium,
			{\rm San Juan, Puerto Rico}},
	year =		1994,
	month =		dec,
	pages =		{120-131}
}

@phdthesis{Hel93,
	author =	{L. Helmink},
	year =		1993,
	month =		mar,
	school =	{University of Amsterdam},
	title =		{Tools for Proofs and Programs}
}

@inproceedings{HSV94,
	author =	{L. Helmink and M.P.A. Sellink and F.W. Vaandrager},
	booktitle =	{Proceedings International Workshop TYPES'93,
			 {\rm Nijmegen, The Netherlands, May 1993}},
	year =		1994,
	series =	lncs,
	volume = 	806,
	editor =	{H. Barendregt and T. Nipkow},
	publisher =	springer,
	title =		{Proof-checking a data link protocol},
	pages =		{127--165}
}

@phdthesis{Hendriks91,
title="Implementation of Modular Algebraic Specifications",
author="P.R.H. Hendriks",
year=1991,
school="University of Amsterdam"
}

@techreport{Hen02,
       author =        {M. Hendriks},
       title =         {Enhancing {U}ppaal by Exploiting Symmetry},
       year =          2002,
       month =         oct,
       type =          {Report},
       institution =   {Nijmegen Institute for Computing and Information
                        Sciences, University of Nijmegen},
       number =        {NIII-R0208},
       url =           {http://www.cs.ru.nl/ita/publications/papers/martijnh/NIII-R0208.pdf},
       abstract =       {
Efficiency is one of the major concerns in the world of model checking.
Consequently, many techniques to optimize the time and space usage of
model checking algorithms have been invented.  One of these techniques is
reduction of the searchable state space through arguments of symmetry.
This technique can be very profitable and has been implemented in various model
checkers, but not yet in UPPAAL, a model checker for timed systems. This paper
proposes an enhancement of UPPAAL with symmetry reduction.  We adopt the theory
of symmetry of Ip and Dill and their scalarset data type, as implemented in
the model checker Murphi.  The main result of this paper is a soundness proof
of our symmetry enhancement, which does not follow trivially from the work of
Ip and Dill since the description languages of UPPAAL and Murphi, which are
used to detect the symmetries, are quite different.  A secondary result is a
proof of the computational difficulty of space-optimal exploitation of full
symmetry in a setting with DBM technology.
}
}

@article{HL02,
        author =        {M. Hendriks and K.G. Larsen},
        year =          2002,
        month =         apr,
        journal =       {Electronic Notes in Theoretical Computer Science},
        volume =        65,
        number =        6,
        title =         {Exact Acceleration of Real-Time Model Checking},
        publisher =     {Elsevier Science Publishers},
        url =           {http://www.cs.ru.nl/ita/publications/papers/martijnh/T
PTS02.pdf},
        abstract =      {
Different time scales do often occur in real-time systems, e.g., a polling
real-time system samples the environment many times per second, whereas the
environment may only change a few times per second.  When these systems are
modeled as (networks of) timed automata, the validation using symbolic model
checking techniques can significantly be slowed down by unnecessary
fragmentation of the symbolic state space. This paper introduces a syntactical
adjustment to a subset of timed automata that addresses this fragmentation
problem and can speed-up forward symbolic reachability analysis in a
significant way.  We prove that this syntactical adjustment does not alter
reachability properties and that it indeed is effective.  We illustrate our
exact acceleration tehnique with run-time date obtained with the model
checkers UPPAAL and KRONOS.
Moreover, we demonstrate that automated application of our exact
acceleration technique can significantly speed-up the verification of the
run-time behavior of LEGO Mindstorms programs.
}
}
 
@inproceedings{HBLNV04,
        author =        {M. Hendriks and G. Behrmann and K.G. Larsen
                                 and P. Niebert and F.W. Vaandrager},
        title =         {Adding Symmetry Reduction to {U}ppaal},
        url =           {http://www.cs.ru.nl/ita/publications/papers/fvaan/symmetry.html},
        year =          2004,
	booktitle =	{Proceedings First International Workshop on Formal
			 Modeling and Analysis of Timed Systems (FORMATS 2003),
			{\rm  September 6-7 2003, Marseille, France}},
	series =	lncs,
	volume =	2791,
	editors =	{K.G. Larsen and P. Niebert},
	publisher =	springer
}

@techreport{HBLNV04a,
        author =        {M. Hendriks and G. Behrmann and K.G. Larsen
                                 and P. Niebert and F.W. Vaandrager},
        title =         {Adding Symmetry Reduction to {U}ppaal},
        url =           {http://www.cs.ru.nl/ita/publications/papers/fvaan/symmetry.html},
        year =          2004,
        type =          {Report},
        institution =   {Nijmegen Institute for Computing and Information
                        Sciences, University of Nijmegen},
        number =        {NIII-R0407}
}

@inproceedings{HNV03,
        author =        {M. Hendriks and N.J.M. van den Nieuwelaar and
                                F.W. Vaandrager},
        year =          2003,
        month =         aug,
        title =         {Recognizing Finite Repetitive Scheduling Patterns
                         in Manufacturing Systems},
        booktitle =     {Proceedings of the 1st Multidisciplinary
                         International Conference on Scheduling:
                        Theory and Applications (MISTA 2003),
                        {\rm Nottingham, UK}, Volume I},
        editor =        {G. Kendall and E. Burke and S. Petrovic},
        url =           {http://www.cs.ru.nl/ita/publications/papers/fvaan/HNV03.html},
        pages =         {291--319},
        publisher =     {The University of Nottingham},
        note =          {ISBN 0-9545821-0-1}
}

@article{HNV06,
    	author = {Hendriks, M. and van den Nieuwelaar, N. J. M. and Vaandrager, F. W.},
	title = {Model Checker Aided Design of a Controller for a Wafer Scanner},
	journal = {Software Tools for Technology Transfer},
        volume = 8,
        number = 6,
	year = {2006},
	note =	{Special Section on Quantitative Analysis of Real-time Embedded Systems},
	pages =	{633--647}
}

@inproceedings{HV06,
   author = {Hendriks, M. and Verhoef, M.},
   title = {Timed Automata Based Analysis of Embedded System Architectures},
   booktitle = {Workshop on Parallel and Distributed Real-Time Systems 2006},
   year = {2006},
   publisher = {IEEE},
   doi = {10.1109/IPDPS.2006.1639422 },
   url = {http://ieeexplore.ieee.org/search/wrapper.jsp?arnumber=1639422},
}

@article{He81,
        author =        {M. Hennessy},
        year =          1981,
        journal =       i&c,
        number =        1,
        pages =         {58--75},
        title =         {A term model for synchronous processes},
        volume =        51
}

@article{He84,
        author =        {M. Hennessy},
        year =          1984,
        journal =       acta,
        volume =        21,
        title =         {Axiomatising finite delay operators},
        pages =         {61-88}
}

@article{He85,
	author =	{M. Hennessy},
	year =		1985,
	journal =	jacm,
	number =	4,
	pages =		{896--928},
	title =		{Acceptance trees},
	volume =	32
}

@article{He86,
	author =	{M. Hennessy},
	year =		1986,
	journal =	toplas,
	number =	3,
	pages =		{344--387},
	title =		{Proving systolic systems correct},
	volume =	8
}

@article{He88,
	author =	{M. Hennessy},
	year =		1988,
	journal =	sicomp,
	number =	5,
	pages =		{997--1017},
	title =		{Axiomatising finite concurrent processes},
	volume =	17
}

@book{He88a,
	author =	{M. Hennessy},
	year =		1988,
	publisher =	mitp,
	address =	{Cambridge, Massachusetts},
	title =		{Algebraic Theory of Processes}
}

@incollection{Hen93,
  	author = 	{M. Hennessy},
  	title = 	{A Fully Abstract Denotational Model for Higher-Order
           		Processes (Extended Abstract)},
	crossref =	{LICS8},
  	pages = 	{397--408},
  	note = 		{Full version in Sussex TR 6/92}
}

@inproceedings{HeIn90,
        author =        {M. Hennessy and A. Ing\'{o}lfsd\'{o}ttir},
	crossref =	{ICALP17},
        pages =         {209--219},
        title =         {A Theory of Communicating Processes with
                            Value-passing}
}

@inproceedings{HM80,
	author =	{M. Hennessy and R. Milner},
	crossref =	{ICALP7},
	note =		{This is a preliminary version of:
			Algebraic laws for nondeterminism and concurrency.
			{\em JACM}, 32(1):137--161, 1985},
	pages =		{299--309},
	title =		{On observing nondeterminism and concurrency}
}

@article{HM85,
	author =	{M. Hennessy and R. Milner},
	year =		1985,
	journal =	jacm,
	number =	1,
	pages =		{137--161},
	title =		{Algebraic laws for nondeterminism and concurrency},
	volume =	32
}

@inproceedings{HP79,
	author =	{M. Hennessy and G.D. Plotkin},
	booktitle =	mfcs8,
	year =		1979,
	editor =	{J. Be\v{c}v\'{a}\v{r}},
	publisher =	springer,
	pages =		{108--120},
	series =	lncs,
	volume =	74,
	title =		{Full abstraction for a simple programming language}
}

@inproceedings{HP80,
	author =	{M. Hennessy and G.D. Plotkin},
	booktitle =	mfcs9,
	year =		1980,
	editor =	{P. Dembi\'{n}ski},
	publisher =	springer,
	pages =		{261--274},
	series =	lncs,
	volume =	88,
	title =		{A term model for {CCS}}
}

@techreport{HR90,
	title =		{A Temporal Process Algebra},
	author =	{M. Hennessy and T. Regan},
	year =		1990,
	institution =	{Computer Science Department, University of Sussex},
	type =		{Report},
	number =	{2/90}
}

@techreport{HR91,
	title =		{A Process Algebra for Timed Systems},
	author =	{M. Hennessy and T. Regan},
	year =		1991,
	month =		apr,
	institution =	{Computer Science Department, University of Sussex},
	type =		{Report},
	number =	{5/91}
}

@article{HS85,
	author =	{M. Hennessy and C. Stirling},
	year =		1985,
	journal =	i&comp,
	pages =		{23--52},
	title =		{The power of the future perfect in program logics},
	volume =	67
}

@phdthesis{Hen91,
	author =	{T.A. Henzinger},
	year =		1991,
	school =	{Dept. of Computer Science, Stanford University},
	title  =	{The Temporal Specification and Verification of
			Real-time Systems}
}

@article{Hen92,
     author =       	{T.A. Henzinger},
     title =        	{Sooner is Safer than Later},
     journal =      	ipl,
     volume =       	43,
     pages =	    	{135--141},
     year =         	1992
}

@article{Hen08,
     author =       	{T.A. Henzinger},
     title =        	{Two Challenges in Embedded Systems Design: Predictability and Robustness},
     journal =      	{Philosophical Transactions of the Royal Society A},
     volume =       	366,
     pages =	    	{3727-3736},
     year =         	2008
}

@inproceedings{HenzingerJMS02,
  author    = {T.A. Henzinger and R. Jhala and R. Majumdar and G. Sutre},
  title     = {Lazy abstraction},
  booktitle = {POPL},
  year      = {2002},
  pages     = {58-70}
}

@misc{HH94,
	author =	{T.A. Henzinger and P.-H. Ho},
	year =		1994,
	title =		{On the Verification of Hybrid Systems:
			Abstract Interpretation Strategies and Case Studies},
	note =		{Manuscript}
}

@inproceedings{HH95,
	author =	{T.A. Henzinger and P.-H. Ho},
	title =		{{HyTech: The Cornell HYbrid TECHnology Tool}},
	crossref =	{TACAS95},
	pages =		{29--43}
}

@inproceedings{HH95a,
	author =	{T.A. Henzinger and P.-H. Ho},
	crossref =	{CAV7},
	title =		{Algorithmic Analysis of Nonlinear Hybrid Systems}
}

@misc{HHW95,
	author =	{T.A. Henzinger and P.-H. Ho and H. Wong-Toi},
	year =		1995,
	title =		{{HyTech}: The Next Generation},
	note =		{Manuscript}
}

@InProceedings{hhw:cav97,
  author =       {T. A. Henzinger and P.-H. Ho and H. Wong-Toi},
  title =        {{{\sc HyTech}: A Model Checker for Hybrid Systems}},
  crossref =	 {CAV9},
  pages =        {460--463}
}

@article{hhw:sttt97,
  author =       {T. A. Henzinger and P.-H. Ho and H. Wong-Toi},
  title =        {{{\sc HyTech}: A Model Checker for Hybrid Systems}},
  journal =       {Springer International Journal on Software Tools for
                Technology Transfer (STTT)},
  volume =		1,
  year =		1997,
  pages =        {110--122}
}

@inproceedings{HKW95,
	author =	{T.A. Henzinger and P.W. Kopke and H. Wong-Toi},
	crossref =	{ICALP22},
	pages =		{417--428},
	title =		{The Expressive Power of Clocks}
}

@inproceedings{HMP92,
	author =	{T.A. Henzinger and Z. Manna and A. Pnueli},
	crossref =	{REXrealtime},
	pages =		{226--251},
	title =		{Timed Transition Systems}
}

@inproceedings{HMP01,
	author =	{T.A. Henzinger and M. Minea and V. Prabhu},
	title =		{Assume-guarantee reasoning for hierarchical
				hybrid systems},
	crossref =	{Hybrid01},
	pages =		{275--290}
}

@inproceedings{HNSY92,
	author =	{T.A. Henzinger and X. Nicollin and J. Sifakis and
				 S. Yovine},
	title =		{Symbolic Model Checking for Real-Time Systems},
	crossref =	{LICS7},
	pages =		{394--406}
}

@article{HNSY94,
	author =	{T.A. Henzinger and X. Nicollin and J. Sifakis and
				 S. Yovine},
	title =		{Symbolic Model Checking for Real-Time Systems},
        journal =       iandcomp,
     	volume =       	111,
     	year =          1994,
	pages =		{193--244}
}

@inproceedings{Her88,
	author =	{M.P. Herlihy},
	crossref =	{PODC7},
	pages =		{276--290},
	title =		{Impossibility and Universality Results for Wait-Free
				Synchronization}
}

@ARTICLE{HermidaJ95a,
AUTHOR       = "C. Hermida and B. Jacobs",
TITLE        = "Fibrations with Indeterminates: Contextual and Functional
                Completeness for Polymorphic Lambda Calculi",
JOURNAL      = "Math. Struct. Comp. Sci.",
VOLUME       = "5",
PAGES        = "501--531",
YEAR         = 1995}


@INPROCEEDINGS{HermidaJ95b,
AUTHOR       = "C. Hermida and B. Jacobs",
TITLE        = "An algebraic view of structural induction",
BOOKTITLE    = "Computer Science Logic 1994",
EDITOR       = "L. Pacholski and J. Tiuryn",
PUBLISHER    = "Springer, Berlin",
SERIES       = LNCS,
NUMBER       = 933,
YEAR         = 1995,
PAGES        = "412--426"}

@article{Hes97a,
        author =        {W.H. Hesselink},
        title =         {A Mechanical Proof of {S}egall's {PIF} Algorithm},
        journal =       {Formal Aspects of Computing},
        volume =        {9},
        pages =         {208--226},
        year =          {1997}
}

@misc{Hes97b,
        author =        {W.H. Hesselink},
        title =         {The verified incremental design of a distributed
                spanning tree algorithm - extended abstract},
        note =          {To appear in {\em Formal Aspects of Computing}},
        year =          {1997},
        month =         nov
}


@TECHREPORT{Hil93
, ADDRESS      = {Edinburgh, Scotland}
, AUTHOR       = {J. Hillston}
, TYPE         = {Technical Report}
, INSTITUTION  = {University of Edinburgh}
, NUMBER       = {CSR-24-93}
, TITLE        = {{PEPA}: Performance enhanced process algebra}
, YEAR         = 1993
}

@inproceedings{HM94,
	author=		{Y. Hirshfeld and F. Moller},
	year=		1994,
	title=		{Decidability Results in Automata and Process Theory},
	booktitle=	{Proceedings of Logics for Concurrency: Automata vs
			 Structure.  The VIII Banff Higher Order Workshop},
	editor =	{G. Birtwistle and F. Moller},
	series =	lncs,
	publisher=	springer,
	note =		{To appear}
}

@inproceedings{HW95,
	author =	{P.-H. Ho and H. Wong-Toi},
	crossref =	{CAV7},
	title =		{Automated analysis of an audio control protocol}
}

@techreport{HZFH92,
	title =		{{PARTY: A process algebra with real-time from York}},
	author =	{C. Ho-Stuart and H.S.M. Zedan and M. Fang and
			 C.M. Holt},
	year =		1992,
	institution =	{University of York},
	type =		{Report},
	number =	{YCS 177}
}

@article{Ho69,
author = "C.A.R. Hoare",
title = "An Axiomatic Basis for Computer Programming",
journal = cacm,
volume = 12,
number = 10,
year = 1969,
month = oct}

@inproceedings{Ho72,
title="Towards a Theory of Parallel Programming",
author="C.A.R. Hoare",
year=1972,
pages="61--71",
booktitle="Operating System Techniques",
editor="C.A.R. Hoare and R.H. Perrott",
publisher="Academic Press"}

@article{Hoare72,
        author = {C.A.R. Hoare},
        title = {Proof of correctness of data representations},
        journal = acta,
        volume = 1,
        pages = {271-281},
        year = 1972
}

@article{Ho78,
	author =	{C.A.R. Hoare},
	year =		1978,
	journal =	cacm,
	number =	8,
	pages =		{666--677},
	title =		{Communicating sequential processes},
	volume =	21
}

@inproceedings{Ho80,
	author =	{C.A.R. Hoare},
	booktitle =	{On the construction of programs -- an advanced course},
	year =		1980,
	editor =	{R.M. McKeag and A.M. Macnaghten},
	publisher =	cup,
	pages =		{229--254},
	title =		{Communicating sequential processes}
}

@book{Ho85,
	author =	{C.A.R. Hoare},
	year =		1985,
	address =	{Englewood Cliffs},
	publisher =	prentice,
	title =		{Communicating {S}equential {P}rocesses}
}

@misc{Ho94,
	author =	{C.A.R. Hoare},
	year =		1994,
	month =		jul,
	howpublished =	{Oxford University Computing Laboratory},
	title =		{Unified Theories of Programming}
}

@article{HH93,
	author =	{He Jifeng and C.A.R. Hoare},
	title =		{From Algebra to Operational Semantics},
	year =		1993,
	journal =	ipl,
	volume =	45,
	number =	2,
	pages =		{75--80}
}

@article{HH87,
title="Laws of Programming",
author="C.A.R. Hoare and I.J. Hayes and He Jifeng and C.C. Morgan and
A.W. Roscoe and J.W. Sanders and I.H. Sorensen and J.M. Spivey and B.A.
Sufrin",
journal=cacm,
year=1987,
month=aug,
volume=30,
number=8,
pages="672--686"}

@article{HHS87,
	author =	{C.A.R. Hoare and J. He and J.W. Sanders},
	title =		{Prespecification in Data Refinement},
	journal =	ipl,
	volume =	25,
	year =		1987,
	pages =		{71--76}
}

@article{HoLa74,
title="Consistent and Complementary Formal Theories of the Semantics of
Programming Languages",
author="C.A.R. Hoare and P.E. Lauer",
year=1974,
publisher=springer,
journal=acta,
volume=3,
pages="135--153"}

@incollection{Hoa95,
	author =	{J. Hoare},
	crossref =	{HB95},
	title =		{Formal Development of {CICS} with {B}}
}

@phdthesis{Hof94,
	author =	{M. Hofmann},
	year =		1994,
	school =	{University of Edinburgh},
	title =		{Extensional Concepts in Intensional Type Theory},
	note =		{Forthcoming}
}

@inproceedings{Hol93,
	author =	{U. Holmer},
	title =		{Interpreting Broadcast Communication in {SCCS}},
	crossref =	{CONCUR93},
	pages =		{188--201}
}

@inproceedings{HLY92,
	author =	{U. Holmer and K.G. Larsen and W. Yi},
	crossref =	{CAV3},
	pages =		{443--453},
	title =		{Deciding Properties of Regular Real Timed Processes}
}

@book{Holz91,
	author="G.J. Holzmann",
	title="Design and Validation of Computer Protocols",
	year=1991,
	publisher=prentice
}

@article{Holzmann94e,
   	author = {G.J. Holzmann},
   	title = {The Theory and Practice of a Formal Method:  NewCoRe},
   	booktitle = {Proc. IFIP World Computer Congress},
   	address = {Hamburg, Germany},
   	month = {August},
   	year = {1994},
   	note = {(invited paper)}
}

@article{Holzmann92,
   	author = {G.J. Holzmann},
   	title = {Practical Methods for the Formal Validation of {SDL}
			 Specifications},
   	journal = {Computer Communications},
   	month = {March},
   	year = {1992},
   	note = {(invited paper - special issue on Practical Uses of FDT's)}
}

@inproceedings{Holzmann89a,
   	author = {G.J. Holzmann and J. Patti},
   	editor = {C. Vissers and E. Brinksma},
   	title = {Validating {SDL} Specifications: An Experiment},
   	booktitle = {Proc. 9th Int. Conf on Protocol Testing, INWG/IFIP},
   	address = {Twente, Neth.},
   	month = {June},
   	year = {1989}
}


@inproceedings{Holzmann91a,
   	author = {G.J. Holzmann},
   	editor = {B. Pehrson and B. Jonsson and J. Parrow},
   	title = {Tutorial: Design and Validation of Protocols},
   	booktitle = {Proc. 11th Int. Conf on Protocol Testing, INWG/IFIP},
   	address = {Stockholm, Sweden},
   	month = {June},
   	year = {1991},
   	note = {reprinted in:
		Computer Networks and ISDN Systems, 1993, Vol. 25, No. 9,
		pp. 981-1017.}
}

@article{Holzmann94b,
   author = {G.J. Holzmann and Doron Peled},
   title = {An Improvement in Formal Verification},
   booktitle = {Proc. FORTE94},
   address = {Berne, Switzerland},
   month = {October},
   year = {1994}
}

@book{Holz04,
	author="G.J. Holzmann",
	title="The {SPIN} Model Checker: Primer and Reference Manual",
	year=2004,
	publisher={Addison Wesley}
}

@inproceedings{Huangetal05,
   author = {J. Huang and J.P.M. Voeten and O. Florescu and Putten, P.H.A. van der and H. Corporaal},
   title = {Predictability in Real-Time System Development},
   booktitle = {Advances in Design and Specification Languages for SoCs},
   publisher = {Kluwer Academic Publishers},
   address =	{Dordrecht (The Netherlands)},
   year =	2005
}

@inproceedings{HNS03,
  author    = {H. Hungar and O. Niese and B. Steffen},
  title     = {Domain-Specific Optimization in Automata Learning},
  year      = {2003},
  pages     = {315-327},
  editor    = {W.A. Hunt Jr. and F. Somenzi},
  booktitle = {Computer Aided Verification, 15th International Conference,
               CAV 2003, Boulder, CO, USA, July 8-12, 2003, Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {2725}
}

@inproceedings{Goderfroid93,
   author = {P. Goderfroid and G.J. Holzmann},
   title = {On the verification of temporal properties},
   booktitle = {Proc. 13th Int. Conf on Protocol Testing, INWG/IFIP},
   address = {Liege, Belgium},
   month = {May},
   year = {1993}
}

@article{Holzmann88,
   author = {G.J. Holzmann},
   title = {An Improved Protocol Reachability Analysis Technique},
   journal = {Software, Practice \& Experience},
   volume = {18},
   number = {2},
   pages = {137--161},
   month = {February},
   year = {1988}
}

@inproceedings{Hoo93,
	author =	{J. Hooman},
	title =		{A compositional approach to the design of
				hybrid systems},
	crossref =	{Hybrid93},
	pages =		{121--148}
}

@article{Hooetal06,
   author = {J. Hooman and H. Kugler and I. Ober and A. Votintseva and Y. Yushtein},
   title = {Supporting {UML}-based Development of Embedded Systems by Formal Techniques},
   journal = {Software and Systems Modelling},
   year = {2006},
   note = {To appear}
}

@book{HU79,
	author =	{J.E. Hopcroft and J.D. Ullman},
	year =		1979,
	publisher =	addison,
	title =		{Introduction to Automata Theory, Languages and Computation}
}

@inproceedings{HL92,
	author =	{G. Huet and J.J. L\'{e}vy},
	year =		1992,
	booktitle =	{Computational Logic -- Essays in Honor of Alan Robinson},
	editor =	{J.L. Lassez and G.D. Plotkin},
	pages =		{395--443},
	title =		{Computations in Orthogonal Rewriting Systems,
				 {Part I + II}}
}

@inproceedings{HuOp80,
author="G. Huet and D.C. Oppen",
title="Equations and Rewrite Rules: {A} Survey",
booktitle="Formal Language Theory: Perspectives and Open Problems",
editor="R. Book",
year=1980,
pages="349--405",
publisher="Academic Press"
}

@inproceedings{HGR87,
	author =	{C. Huizing and R. Gerth and Roever, W.P. de},
	crossref =	{POPL14},
	pages =		{223--237},
	title =		{Full abstraction of a real-time denotational semantics
				 for an {OCCAM}-like language}
}

@inproceedings{HGR88,
	author =	{C. Huizing and R. Gerth and Roever, W.P. de},
	booktitle =	caap88,
	year =		1988,
	editor =	{M. Dauchet and M. Nivat},
	publisher =	springer,
	pages =		{271--294},
	series =	lncs,
	volume =	299,
	title =		{Modelling statechart behaviour in a fully abstract way}
}

@inproceedings{HRSV01,
	author =	{T.S. Hune and J.M.T. Romijn and M.I.A. Stoelinga
			and F.W. Vaandrager},
	crossref =	{TACAS01},
	pages =		{189--203},
	title =		{Linear Parametric Model Checking of Timed Automata}
}

@techreport{HRSV01b,
       author =        {T.S. Hune and J.M.T. Romijn and M.I.A. Stoelinga
                       and F.W. Vaandrager},
       title =         {Linear Parametric Model Checking of Timed Automata},
       year =          2001,
       month =         jan,
       type =          {Report},
       institution =   {Computing Science Institute, University of Nijmegen},
       number =        {CSI-R0102}
}

@article{HRSV02,
	author =	{T.S. Hune and J.M.T. Romijn and M.I.A. Stoelinga
			and F.W. Vaandrager},
	journal =	{Journal of Logic and Algebraic Programming},
	year =		2002,
	volume =	{52-53},
	pages =		{183--220},
	title =		{Linear Parametric Model Checking of Timed Automata},
	url =		{http://www.cs.ru.nl/ita/publications/papers/fvaan/PTA.html}
}

@inproceedings{Hung98,
	author =	{D.V. Hung},
	booktitle =	{Proceedings of the International Conference on
			Applications of Concurrency to System Design (CSD'98),
			{\rm Aizu-wakamatsu, Fukushima, Japan, March 1998}},
	year =		1998,
	publisher =	{IEEE Computer Society Press},
	pages =		{88--98},
	title =		{Modelling and Verification of Biphase Mark Protocols
				Using {PVS}}
}

@inproceedings{HK96,
	author =	{D.V. Hung and Ko Kwang II},
	booktitle =	{Proceedings Asia-Pacific Software Engineering
				Conference (APSEC'96)},
	year =		1996,
	publisher =	{IEEE Computer Society Press},
	pages =		{4--15},
	title =		{Verification via Digitized Models of Real-Time
				Hybrid Systems}
}

@article{Hur00,
	author =	{C.A.J. Hurkens},
	title =		{Spreading Gossip Efficiently},
	journal =	{Nieuw Archief voor Wiskunde},
	year =		2000,
	month =		{June},
	volume =	{5/1},
	number =	{2},
	pages =		{208--210}
}

@techreport{HuL93,
	author =	{H. H{\"{u}}ttel and K.G. Larsen},
	year =		1993,
        number =	{R93-2003},
	title =		{A dynamic type system for higher-order processes},
	institution =	{Aalborg University}
}

@inproceedings{HuSt91,
	author	=	{H. H{\"{u}}ttel and C. Stirling},
	title =		{Actions Speak louder than Words:
			 Proving Bisimilarity for Context-Free Processes},
	crossref =	{LICS6},
	pages =		{376--386}
}

@techreport{HuTi90,
title="On Deciding Readiness and Failure Equivalences for Processes",
author="D.T. Huynh and L. Tian",
year=1990,
institution="The University of Texas at Dallas",
type="Technical Report",
number="UTDCS-31-90"}

@techreport{HuTi92,
author="Huynh, D.T. and Tian, L.",
title="Deciding Bisimilarity of Normed Context-Free Processesis in
$\Sigma^p_2$",
institution="University of Texas at Dallas",
year=1992,
type="Technical Report",
number="UTDCS--1--92"}

@techreport{HYBRID,
	author =	{{HYBRID}},
	year =		1993,
	institution =	{Esprit-NSF Proposal EC-US-043},
	type =		{Technical Annex},
	title =		{Tools for the Analysis of Hybrid Systems}
}

@article{Hyman66,
  author    = {H. Hyman},
  title     = {Comments on a problem in concurrent programming control},
  journal   = {Commun. ACM},
  volume    = {9},
  number    = {1},
  year      = {1966},
  pages     = {45},
  ee        = {http://doi.acm.org/10.1145/365153.365167}
}

@inproceedings{IYK90,
	title =		{Incremental Specifications in {LOTOS}},
	author =	{H. Ichikawa and K. Yamanaka and J. Kato},
	crossref =	{PSTV10},
	pages =		{183--196}
}

@Misc{ieee:glossary,
  author        = "{IEEE}",
  title         = "{IEEE Standard Glossary of Software Engineering Terminology}",
  howpublished  = {Std 610.12-1990},
  year          = 1990,
  month         = sep
}

@Misc{ieee:1394,
  author        = "{IEEE~Computer~Society}",
  title         = "{IEEE Standard for a High Performance Serial Bus}",
  howpublished  = {Std 1394-1995},
  year          = 1996,
  month         = aug
}

@Misc{ieee:P1394a,
  author        = "{IEEE~Computer~Society}",
  title         = "{P1394a Draft Standard for a High Performance Serial Bus
			(Supplement)}",
  howpublished  = {Draft 2.0},
  year          = 1998,
  month         = mar
}

@inproceedings{Octopus08,
        author = 	{G. Igna and V. Kannan and Y. Yang and T. Basten and M. Geilen and F. Vaandrager and M. Voorhoeve and Smet, S. de and L. Somers},
        title = 	{Formal Modeling and Scheduling of Datapaths of Digital Document Printers},
        year =          2008,
	booktitle =	{Proceedings Sixth International Conference on Formal
			 Modeling and Analysis of Timed Systems (FORMATS 2008),
			{\rm  September 15-17, 2008, Saint-Malo, France}},
	series =	{Lecture Notes in Computer Science},
        url =   	{http://www.cs.ru.nl/ita/publications/papers/fvaan/Octopus08.html},
        pages =		{169-186},
	publisher =	{Springer Berlin / Heidelberg},
	volume =	5215,
	editors =	{F. Cassez and C. Jard},
        category = 	{wet - artikel in bundel - proceedings},
 	doi = 		{http://dx.doi.org/10.1007/978-3-540-85778-5_13}
}

@book{INMOS84,
	author =	{{INMOS, Ltd.}},
	year =		1984,
	address =	{Englewood Cliffs},
	publisher =	prentice,
	title =		{The occam programming manual}
}

@article{IS93,
	author =	{A. Ingolfsdottir and B. Steffen},
	title =		{Characteristic formulae},
	journal =	iandc,
	year =		1994,
	volume =	110,
	number =	1,
	pages =		{149--163},
	month =		apr
}


@inproceedings{ID93,
  author    = {C.N. Ip and
               D.L. Dill},
  title     = {Better Verification Through Symmetry},
  pages     = {97-111},
  editor    = {David Agnew and
               Luc J. M. Claesen and
               Raul Camposano},
  booktitle     = {Proceedings of the 11th IFIP WG10.2 International Conference
               on Computer Hardware Description Languages and their Applications
               - CHDL '93, {\rm Ottawa, Ontario, Canada, 26-28 April, 1993}},
  publisher = {North-Holland},
  series    = {IFIP Transactions},
  volume    = {A-32},
  year      = {1993}
}

@manual{ISO86,
        organization =  {ISO},
        year =          1986,
        note =          {ISO/TC97/SC21/WG16--1 DP9074},
	title =         {Estelle: a formal description technique based
	                 on an extended state transition model
                         {\rm ISO/TC97/SC21/WG16--1 DP9074}}
}

@manual{ISO87,
        organization =  {ISO},
        year =          1987,
        title =         {Information processing systems -- open systems
        interconnection -- {LOTOS} -- a formal description technique
        based on the temporal ordering of observational behaviour
        {\rm ISO/TC97/SC21/N DIS8807}}}

@techreport{IG99,
	author =	{S. Ivanov and W.O.D. Griffioen},
	title =		{Verification of a Biphase Mark Protocol},
	year =		1999,
	month =		aug,
	type =		{Report},
	institution =	{Computing Science Institute, University of Nijmegen},
	number =	{CSI-R9915}
}

@INPROCEEDINGS{JacobsM93,
AUTHOR       = "B. Jacobs and T. Melham",
TITLE        = "Translating Dependent Type Theory into Higher Order Logic",
BOOKTITLE    = "Typed Lambda Calculi and Applications",
EDITOR       = "M. Bezem and J.F. Groote",
PAGES        = "209--229",
PUBLISHER    = "Springer, Berlin",
SERIES       = LNCS,
NUMBER       = "664",
YEAR         = 1993}

@ARTICLE{Jacobs93a,
AUTHOR       = "B. Jacobs",
TITLE        = "Comprehension categories and the semantics of type
dependency",
JOURNAL      = "Theor. Comp. Sci.",
VOLUME       = "107",
YEAR         = 1993,
PAGES        = "169--207"}

@ARTICLE{Jacobs94a,
AUTHOR       = "B. Jacobs",
TITLE        = "Semantics of Weakening and Contraction",
JOURNAL      = "Ann. Pure \& Appl. Logic",
VOLUME       = "69(1)",
YEAR         = 1994,
PAGES        = "73--106"}

@INPROCEEDINGS{Jacobs94b,
AUTHOR       = "B. Jacobs",
TITLE        = "Coalgebras and Approximation",
BOOKTITLE    = "Logical Foundations of Computer Science",
EDITOR       = "A. Nerode and Yu. V. Matiyasevich",
PAGES        = "173--183",
PUBLISHER    = "Springer, Berlin",
SERIES       = LNCS,
NUMBER       = "813",
YEAR         = 1994}

@ARTICLE{Jacobs95c,
AUTHOR       = "B. Jacobs",
TITLE        = "Parameters and Parametrization in Specification using
                distributive categories",
JOURNAL      = "Fund. Informaticae",
VOLUME       = "24(3)",
PAGES        = "209--250",
YEAR         = "1995"}

@INCOLLECTION{Jacobs96c,
AUTHOR       = "B. Jacobs",
TITLE        = "Objects and Classes, Co-algebraically",
BOOKTITLE    = "Object-Orientation with Parallelism and Persistence",
EDITOR       = "B. Freitag and C.B. Jones and C. Lengauer and H.-J. Schek",
PAGES        = "",
PUBLISHER    = "Kluwer Acad. Publ.",
YEAR         = "1996"}


@INPROCEEDINGS{Jacobs96b,
AUTHOR       = "B. Jacobs",
TITLE        = "Coalgebraic specifications and models of deterministic
                hybrid systems",
BOOKTITLE    = "Algebraic Methods and Software Technology",
EDITOR       = "M. Wirsing and M. Nivat",
PAGES        = "520--535",
PUBLISHER    = "Springer, Berlin",
SERIES       = LNCS,
NUMBER       = "1101",
YEAR         = "1996"}

@article{JLHM91,
	author =	{M. Jaffe and N. Leveson and M. Heimdahl and
				B. Melhart},
	title =		{Software Requirements Analysis for Real-Time
			Process Control Systems},
	journal =	{IEEE Transactions on Software Engineering},
	year =		1991,
	volume =	17,
	number =	3,
	pages =		{241--258}
}

@inproceedings{Ja80,
	author =	{R. Janicki},
	booktitle =	{International Symposium on Programming},
	year =		1980,
	editor =	{B. Robinet},
	publisher =	springer,
	pages =		{177--192},
	series =	lncs,
	volume =	83,
	title =		{An algebraic structure of {P}etri nets}
}

@article{Ja84,
	author =	{R. Janicki},
	year =		1984,
	journal =	tcs,
	pages =		{87--121},
	title =		{Nets, sequential components and concurrency relations},
	volume =	29
}

@article{Ja87,
title="A Formal Semantics for Concurrent Systems with a Priority
Relation",
author="R. Janicki",
year="1987",
journal=acta,
volume=24,
pages="33--55"
}

@inproceedings{JPXZ94,
	author =	{W. Janssen and M. Poel and Qiwen Xu and J. Zwiers},
	title =		{Layering of Real-Time Distributed Processes},
	crossref =	{FTRTFT94},
	pages =		{393--417}
}

@inproceedings{Jef92,
	author =	{A. Jeffrey},
	crossref =	{CAV3},
	pages =		{432--442},
	title =		{A Linear Time Process Algebra}
}

@techreport{JSV93,
	author =	{A.S.A. Jeffrey and S.A. Schneider and F.W. Vaandrager},
	title =		{A Comparison of Additivity Axioms in Timed
				Transition Systems},
	year =		1993,
	month =		nov,
	institution =	{CWI},
	address =	{Amsterdam},
	type =		{Report},
	number =	{CS-R9366}
}

@phdthesis{Jen99,
	author =	{H.E. Jensen},
	year =		1999,
	month =		jun,
	school =	{Department of Computer Science,
			Aalborg University, Denmark},
	title =		{Abstraction-Based Verification of Distributed Systems}
}

@inproceedings{JLS00,
  author    = {H.E. Jensen and K.G. Larsen and A. Skou},
  title     = {Scaling up {U}ppaal: Automatic Verification of Real-Time Systems
               Using Compositionality and Abstraction},
  year      = {2000},
  pages     = {19-30},
  ee        = {http://link.springer.de/link/service/series/0558/bibs/1926/19260019.htm},
  editor    = {M. Joseph},
  booktitle     = {Formal Techniques in Real-Time and Fault-Tolerant Systems,
               6th International Symposium, FTRTFT 2000, {\rm Pune, India, September 20-22}, Proceedings},
  publisher = {Springer},
  series =	lncs,
  volume    = {1926},
}

@book{BoJens92,
  	author =	{K. Jensen},
  	title =		{Coloured {P}etri Nets. Basic Concepts, Analysis Methods and Practical Use},
	year =		1992,
	publisher =	springer,
	series =	{EATCS Monographs on Theoretical Computer Science}
}

@phdthesis{JJL93,
	author =	{O.H. Jensen and C. Jeppesen and J. Lang},
	year =		1993,
	type =		{Master Thesis},
	school =	{Department of Mathematics and Computer Science,
			Aalborg University, Denmark},
	title =		{Model construction for hybrid implicit specifications}
}

@inproceedings{JJLL93,
        author =        {O.H. Jensen and C. Jeppesen and J.T. Lang
				 and K.G. Larsen},
        crossref =      {CONCUR93},
        title =         {Model construction for implicit specifications
				 in modal logic},
	pages =		{247--261}
}

@inproceedings{JessenRLD07,
  author    = {J.J. Jessen and
               J. Rasmussen and
               K.G. Larsen and
               A. David},
  title     = {Guided Controller Synthesis for Climate Controller Using Uppaal Tiga},
  year      = {2007},
  pages     = {227-240},
  editor    = {Jean-Fran\c{c}ois Raskin and
               P. S. Thiagarajan},
  booktitle     = {Formal Modeling and Analysis of Timed Systems, 5th International
               Conference, FORMATS 2007, Salzburg, Austria, October 3-5,
               2007, Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {4763}
}


@book{Jon86,
	author =	{C.B. Jones},
	year =		1986,
	address =	{Englewood Cliffs},
	publisher =	prentice,
	title =		{Systematic Software Development using {VDM}}
}

@inproceedings{Jonkers00,
  author    = {H.B.M. Jonkers},
  title     = {ISpec: Towards Practical and Sound Interface Specifications},
  year      = {2000},
  pages     = {116-135},
  editor    = {W. Grieskamp and
               Th. Santen and
               B. Stoddart},
  booktitle  = {Integrated Formal Methods, Second International Conference,
               IFM 2000, Dagstuhl Castle, Germany, November 1-3, 2000,
               Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {1945}
}

@inproceedings{Jonkers04,
  author    = {H.B.M. Jonkers},
  title     = {Interface Specification: A Balancing Act (Extended Abstract).},
  year      = {2004},
  pages     = {5-6},
  editor    = {Ivica Crnkovic and
               Judith A. Stafford and
               Heinz W. Schmidt and
               Kurt C. Wallnau},
  booktitle     = {Component-Based Software Engineering, 7th International
               Symposium, CBSE 2004, Edinburgh, UK, May 24-25, 2004, Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {3054}
}

@inproceedings{Jo85,
	author =	{B. Jonsson},
	year =		1985,
	booktitle =	podc4,
	pages =		{49--58},
	title =		{A Model and Proof System for Asynchronous Networks}
}

@phdthesis{Jo87,
	author =	{B. Jonsson},
	year =		1987,
	school =	{Department of Computer Systems, Uppsala University},
	note =		{DoCS 87/09},
	title =		{Compositional Verification of Distributed Systems}
}

@inproceedings{Jo87a,
	author =	{B. Jonsson},
	crossref =	{PODC6},
	pages =		{152--166},
	title =		{Modular Verification of Asynchronous Networks}
}

@inproceedings{Jo90,
	author =	{B. Jonsson},
	crossref =	{REXrefinement},
	pages =		{361--387},
	title =		{On Decomposing and Refining Specifications of Distributed Systems}
}

@inproceedings{Jo91,
	author =	{B. Jonsson},
	year =		1991,
	crossref =	{CONCUR91},
	pages =		{346--360},
	title =		{Simulations between Specifications of Distributed
				 Systems}
}

@article{Jo94,
	author =	{B. Jonsson},
	year =		1994,
	month =		mar,
	journal =	toplas,
	volume =	16,
	number =	2,
	pages =		{259--303},
	title =		{Compositional Specification and Verification
			of Distributed Systems}
}

@inproceedings{JKP90,
	author =	{B. Jonsson and A.H. Khan and J. Parrow},
	booktitle =	{Automatic Verification Methods for Finite State Systems},
	year =		1990,
	editor =	{J. Sifakis},
	publisher =	springer,
	pages =		{179--188},
	series =	lncs,
	volume =	407,
	title =		{Implementing a model checking algorithm by
				 adapting existing automated tools}
}

@inproceedings{JL91,
author=        {B. Jonsson and K.G. Larsen},
title =        {Specification and Refinement of Probabilistic Processes},
crossref =     {LICS6},
pages =        {266--277}
}

@inproceedings{JP89,
	author =	{B. Jonsson and J. Parrow},
	booktitle =	{Proceedings STACS 89, {\rm Paderborn}},
	month =		feb,
	year =		1989,
	editor =	{B. Monien and R. Cori},
	publisher =	springer,
	series =	lncs,
	volume =	347,
	pages =		{421--433},
	title =		{Deciding bisimulation equivalences for a class of
				 non-finite-state programs}
}

@article{Jo88,
	author =	{M.B. Josephs},
	title =		{A State-Based Approach to Communicating Processes},
	journal =	discomp,
	volume =	3,
	year =		1988,
	pages =		{9--18}
}

@article{Jo92,
	author =	{M.B. Josephs},
	title =		{Receptive process theory},
	journal =	acta,
	volume =	29,
	number =	1,
	year =		1992,
	month =		feb,
	pages =		{17--31}
}

@inproceedings{JS92,
	author =	{Y.-J. Joung and S.A. Smolka},
	crossref =	{POPL19},
	title =		{A comprehensive study of the complexity of multiparty
				 interaction},
	note =		{Accepted, subject to revision, to the
				 {\it Journal of the ACM}}
}

@inproceedings{Kahn74,
	author =	{G. Kahn},
	booktitle =	{Information Processing 74},
	year =		1974,
	editor =	{J.L. Rosenfeld},
	publisher =	nholland,
	pages =		{471--475},
	title =		{The semantics of a simple language for parallel
				 programming}
}

@inproceedings{Kahn-MacQueen77,
	author =	{G. Kahn and D.B. MacQueen},
	booktitle =	{Information Processing 77},
	year =		1977,
	editor =	{B. Gilchrist},
	publisher =	nholland,
	pages =		{993--998},
	title =		{Coroutines and networks of parallel processes}
}

@techreport{Kahn-Plotkin78,
	author =	{G. Kahn and G. Plotkin},
	year =		1978,
        number =	336,
	title =		{Structures de donn\'{e}es concr\`{e}tes},
	institution =	{INRIA-LABORIA}
}

@misc{Kahrs92,
	author =	{S. Kahrs},
	year =		1992,
	title =		{Context-Rewriting},
	note =		{To appear in {\em Proceedings CTRS 92}}
}

@inproceedings{Ka87,
	author =	{A. Kaldewaij},
	booktitle =	{Proceedings PARLE Conference, {\rm Eindhoven}, Volume I (Parallel Architectures)},
	year =		1987,
	editor =	{Bakker, J.W. de and A.J. Nijman and P.C. Treleaven},
	publisher =	springer,
	pages =		{195--212},
	series =	lncs,
	volume =	258,
	title =		{The translation of processes into circuits}
}

@inproceedings{KS83,
	author =	{P.C. Kanellakis and S.A. Smolka},
	booktitle =	podc2,
	pages =		{228--240},
	year =		1983,
	title =		{{CCS} expressions, finite state processes,
				 and three problems of equivalence}
}

@article{KaSm88,
title="On the Analysis of Cooperation and Antagonism in Networks of
Communicating Processes",
author="P.C. Kanellakis and S.A. Smolka",
journal=algor,
volume=3,
year=1988,
pages="421--450"}

@article{KS90,
	author =	{P.C. Kanellakis and S.A. Smolka},
	year =		1990,
	journal =	i&c,
	pages =		{43--68},
	title =		{{CCS} expressions, finite state processes,
				 and three problems of equivalence},
	volume =	86
}

@inproceedings{KHMP94,
	author =	{A. Kapur and T.A. Henzinger and Z. Manna
				 and A. Pnueli},
	title =		{Proving Safety Properties of Hybrid Systems},
	crossref =	{FTRTFT94},
	pages =		{431--454}
}

@article{KaMu87,
author="D. Kapur and D.R. Musser",
title="Proof by Consistency",
journal=ai,
year=1987,
volume=31,
pages="125--157"
}

@inproceedings{KZHHJ09,
   	author = 	{J.-P. Katoen and I.S. Zapreev and E.M. Hahn and H. Hermanns and D.N. Jansen},
   	title = 	{The Ins and Outs of the Probabilistic Model Checker {MRMC}},
   	booktitle = 	{Sixth International Conference on the Quantitative Evaluation of SysTems (QEST 2009),
					 {\rm 11-13 September 2009, Budapest, Hungary}},
   	year = 		{2009},
   	pages = 	{167--176},
   	publisher = 	{IEEE Computer Society},
   	doi = 		{http://dx.doi.org/10.1109/QEST.2009.11},
   	url = 		{http://dx.doi.org/10.1109/QEST.2009.11},
	category = 	{wet - artikel in wet tijdschrift},
  	funding   = 	{QUASIMODO D5.9,ROCKS}
}

@inproceedings{KP87,
	author =	{S. Katz and D. Peled},
	crossref =	{PODC6},
	note =		{See also Technical Report \#505, Technion --
			 Israel Institute of Technology, Department of Computer
			 Science, Haifa, Israel, March 1988},
	pages =		{178--190},
	title =		{Interleaving set temporal logic}
}

@inproceedings{KLSV03,
	author =	{D.K. Kaynar and N.A. Lynch and R. Segala and
				 F.W. Vaandrager},
	title =		{A Framework for Modelling Timed Systems with
				Restricted Hybrid Automata},
        booktitle =     {Proceedings of the 24th International IEEE Real-Time
                        Systems Symposium (RTSS03),
			{\rm December 3-5, 2003, Cancun, Mexico}},
	year =		2003,
        publisher =     ieeepress,
	pages =		{166--178},
	url =		{http://www.cs.ru.nl/ita/publications/papers/fvaan/RTSS03.html},
	note =		{Full version available as \cite{KLSV03a}}
}

@techreport{KLSV03a,
	author =	{D.K. Kaynar and N.A. Lynch and R. Segala and
				 F.W. Vaandrager},
	year =		2003,
	institution =	{MIT Laboratory for Computer Science, Cambridge, MA},
	number =	{MIT-LCS-TR-917},
	title =		{The Theory of Timed {I/O} Automata},
	url =		{http://theory.lcs.mit.edu/tds/papers/Kirli/TIOA-TR.ps}
}


@book{KLSV06,
	author =	{D.K. Kaynar and N.A. Lynch and R. Segala and
				 F.W. Vaandrager},
	title =		{The Theory of Timed {I/O} Automata},
	year =		2006,
	publisher =	{Morgan \& Claypool Publishers},
	note = 		{Synthesis Lecture on Computer Science, 101pp, ISBN 159829010X}
}

@inproceedings{KKLS00,
	author =	{I. Keidar and R. Khazan and N. Lynch and
				 A. Shvartsman},
	title =		{An Inheritance-Based Technique for Building
				 Simulation Proofs Incrementally},
	booktitle =	{Proceedings 22nd International Conference on
			 Software Engineering (ICSE), {\rm Limerick,
			 Ireland}},
	year =		2000,
	month =		jun,
	note =		{Full version submitted to a journal.  Available via
	{\tt http://theory.lcs.mit.edu/\verb+~+roger/Research/research.html}}
}


@article{Ke76,
	author =	{R.M. Keller},
	year =		1976,
	journal =	cacm,
	number =	7,
	pages =		{371--384},
	title =		{Formal verification of parallel programs},
	volume =	19
}

@phdthesis{Ke81,
	author =	{J.K. Kennaway},
	year =		1981,
	school =	{University of Oxford},
	title =		{Formal semantics of nondetermism and parallelism}
}


@article{KS07,
 	author = {A.-M. Kermarrec and Steen, M. van},
 	title = {Gossiping in distributed systems},
 	journal = {SIGOPS Oper. Syst. Rev.},
 	volume = {41},
 	number = {5},
 	year = {2007},
 	issn = {0163-5980},
 	pages = {2--7},
 	doi = {http://doi.acm.org/10.1145/1317379.1317381},
 	publisher = {ACM},
 	address = {New York, NY, USA},
}

@inproceedings{KMP98,
	author =	{Y. Kesten and Z. Manna and A. Pnueli},
        title =         {Verification of Clocked and Hybrid Systems},
	crossref =	{Embedded98},
	pages =		{4--73}
}

@inproceedings{KP92,
	author =	{Y. Kesten and A. Pnueli},
	title =		{Timed and Hybrid Statecharts and their
				Textual Representation},
	crossref =	{FTRTFT92},
	pages =		{591--619}
}

@article{Ki88,
	author =	{A. Kiehn},
	year =		1988,
	journal =	eik,
	number =	{1/2},
	pages =		{3--18},
	title =		{On the interrelation between synchronized and non-synchronized behaviour of {Petri} nets},
	volume =	24
}

@misc{Ki88a,
	author =	{A. Kiehn},
	year =		1988,
	note =		{Draft},
	title =		{Petri net systems and their closure properties}
}

@techreport{KS89,
	author =	{N. Klarlund and F.B. Schneider},
	number =	{89-1039},
	year =		1989,
	institution =	{Department of Computer Science, Cornell University},
	address =	{Ithaca, New York},
	title =		{Verifying Safety Properties Using Infinite-state
			 Automata}
}

@article{KS93,
	author =	{N. Klarlund and F.B. Schneider},
	journal =	iandcomp,
	year =		1993,
	month =		nov,
	volume =	107,
	number =	1,
	pages =		{151--170},
	title =		{Proving Nondeterministically Specified Safety
				Properties Using Progress Measures}
}

@incollection{Kl56,
	author="S.C. Kleene",
	title="Representation of events in nerve nets and finite automata",
	booktitle="Automata Studies",
	year=1956,
	pages="3--41",
	publisher="Princeton University Press"
}

@phdthesis{Kl80,
	author =	{J.W. Klop},
	year =		1980,
	school =	{Mathematical Centre Tracts Nr. 127. CWI},
	title =		{Combinatory Reduction Systems}
}

@article{Kl87,
	author =	{J.W. Klop},
	year =		1987,
	journal =	eatcs,
	pages =		{143--182},
	title =		{Term rewriting systems: a tutorial},
	volume =	32
}

@incollection{Kl92,
	author =	{J.W. Klop},
	title =		{Term Rewriting Systems},
	crossref = 	{HandLICS2},
	pages = 	{1--116}
}

@inproceedings{Klu91,
	author =	{A.S. Klusener},
	crossref =	{CONCUR91},
	pages =		{376--392},
	title =		{Completeness in Real Time Process Algebra}
}

@techreport{Klu91a,
	author =	{A.S. Klusener},
	year =		1991,
	month =		oct,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R9144},
	address =	{Amsterdam},
	title =		{Abstraction in real time process algebra}
}

@inproceedings{Klu92,
	author =	{A.S. Klusener},
	crossref =	{REXrealtime},
	pages =		{325--352},
	title =		{Completeness in Real Time Process Algebra}
}

@inproceedings{Klu92a,
	author =	{A.S. Klusener},
	crossref =	{CONCUR92},
	pages =		{421--435},
	title =		{The Silent Step in Time}
}

@phdthesis{Klu93,
	author =	{A.S. Klusener},
	year =		1993,
	month =		dec,
	school =	{Department of Mathematics and Computing Science,
				 Technical University of Eindhoven},
	title =		{Models and axioms for a fragment of
				real time process algebra}
}

@inproceedings{KVW93,
	author =	{A.S. Klusener and Vlijmen, B. van and Waveren, A. van},
	year =		1993,
	month =		nov,
	title =		{Service independent building blocks-{I};
			 concepts, examples and formal specifications},
	booktitle =	{Proceedings RACE IS\&N Conference, {\rm Paris, France}}
}

@article{Kn68,
	author =	{D.E. Knuth},
	year =		1968,
	journal =	mst,
	note =		{Correction: Mathematical Systems Theory 5, 1971, pp. 95--96},
	pages =		{127--145},
	title =		{Semantics of context-free languages},
	volume =	2
}

@book{Kn97,
	author =	{D.E. Knuth},
	title =		{Fundamental Algorithms},
	year =		1997,
	publisher =	{Addison-Wesley},
	address =	{Reading, Massachusetts},
	series =	{The Art of Computer Programming},
	volume =	1,
	note = 		{Third edition}
}

@inproceedings{KB70,
author="D.E. Knuth and P.B. Bendix",
title="Simple Word Problems in Universal Algebra",
editor="J. Leech",
booktitle="Computational Problems in Abstract Algebra",
year=1970,
pages="263--297",
publisher="Pergamon Press"
}

@techreport{KO94,
	title =		{A Real Time $\mu$CRL Specification of a System for
			Traffic Regulation at Signalized Intersections},
	author =	{M.J. Koens and L.H. Oei},
	year =		1994,
	month =		apr,
	institution =	{Programming Research Group, University of Amsterdam},
	type =		{Report},
	number =	{P9305}
}

@book{Koh70,
	author =	{Z. Kohavi},
	year =		1970,
	publisher =	{McGraw-Hill, Inc.},
	title =		{Switching and Finite Automata Theory}
}


@book{Koh78,
        author =        {Z. Kohavi},
        year =          1978,
        edition =       {{S}econd},
        publisher =     {McGraw-Hill, Inc.},
        title =         {Switching and Finite Automata Theory}
}


@inproceedings{Koh90,
	author =	{W. Kohn},
	year =		1990,
	booktitle =	{Proceedings 5th IEEE International Symposium
			on Intelligent Control},
	pages =		{794--803},
	title =		{Declarative Multiplexed Rational Controllers}
}

@article{Ko85,
	author =	{C.J. Koomen},
	year =		1985,
	journal =	scp,
	number =	1,
	pages =		{1--36},
	title =		{Algebraic specification and verification of communication protocols},
	volume =	5
}

@article{Ko88,
	author =	{W. Korczy\'{n}ski},
	year =		1988,
	journal =	funinf,
	number =	2,
	pages =		{171--194},
	title =		{An algebraic characterization of concurrent systems},
	volume =	11
}

@inproceedings{Kor91,
	author =	{H.P. Korver},
	crossref =	{CAV3},
	pages =		{13--23},
	title =		{Computing Distinguishing Formulas for Branching					Bisimulation}
}

@techreport{Kor91a,
	author =	{H.P. Korver},
	year =		1991,
	month =		jan,
	institution =	{Programming Research Group, University of Amsterdam},
	type =		{Report},
	number =	{P9101},
	title =		{The Current State of Bisimulation Tools}
}

@phdthesis{Kor94,
	author =	{H.P. Korver},
	year =		1994,
	month =		jun,
	school =	{University of Amsterdam},
	title =		{Protocol verification in $\mu$CRL}
}

@techreport{Kor94a,
	author =	{H.P. Korver},
	title =		{Mechanised reasoning with alphabets in process
			algebra},
	year =		1994,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R93XX},
	address =	{Amsterdam}
}

@article{Kor94b,
	author =	{H.P. Korver},
	title =		{A Theory for Simulators},
	year =		1994,
	journal =	{The Computer Journal},
	volume =	37,
	number =	4,
	pages =		{279--287}
}

@inproceedings{KS94,
	author =	{H.P. Korver and J. Springintveld},
	crossref =	{TACS94},
	pages =		{161--178},
	title =		{A Computer-Checked Verification of {M}ilner's
			Scheduler}
}

@techreport{KW87,
	author =	{L. Kossen and W.P. Weijland},
	year =		1987,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R8734},
	address =	{Amsterdam},
	title =		{Verification of a systolic algorithm for string
			 comparison}
}

@incollection{KW90,
	author =	{L. Kossen and W.P. Weijland},
	crossref =	{Ba90},
	pages =		{89--125},
	title =		{Correctness proofs for systolic algorithms: palindromes and sorting}
}

@inproceedings{Ko78,
	author =	{V.E. Kotov},
	booktitle =	mfcs,
	year =		1978,
	publisher =	springer,
	pages =		{39--54},
	series =	lncs,
	volume =	64,
	title =		{An algebra for parallelism based on {Petri} nets}
}

@inproceedings{KC81,
	author =	{V.E. Kotov and L.A. Cherkasova},
	booktitle =	mfcs,
	year =		1981,
	editor =	{J. Gruska and M. Chytil},
	pages =		{244--251},
	series =	lncs,
	volume =	118,
	publisher =	springer,
	title =		{Structured nets}
}

@article{Ko91,
	author =	{M. Koutny},
	year =		1991,
	month =		feb,
	journal =	funinf,
	volume =	{XIV},
	number =	2,
	pages =		{235--253},
	title =		{Axiom system induced by {$CTL^{\ast}$} logic}
}

@incollection{KM90,
	author =	{C.P.J. Koymans and J.C. Mulder},
	crossref =	{Ba90},
	pages =		{261--306},
	title =		{A modular approach to protocol verification using process algebra}
}

@techreport{KV85,
	author=		"C.P.J. Koymans and J.L.M. Vrancken",
	title=		"Extending process algebra with the empty process $\epsilon$",
	institution =	{CIF, State University of Utrecht},
	type =		{Logic Group Preprint Series},
	number =	{Nr. 1},
	year=		1985
}

@techreport{Ko86,
	author =	{R. Koymans},
	year =		1986,
	type =		{Computing Science Notes},
	institution =	{Technische Universiteit Eindhoven},
	number =	{86/14},
	title =		{Specifying message passing systems requires extending temporal logic}
}

@article{KSRGA88,
author="R. Koymans and  R.K. Shyamasundar and Roever, W.P. de and R.
Gerth and S.  Arun-Kumar",
title="Compositional Semantics for Real-Time Distributed Computing",
year=1988,
journal=i&c,
volume=79,
pages="210--256"
}

@article{Koz83,
	author =	{D. Kozen},
	year =		1983,
	journal =	tcs,
	pages =		{333--354},
	title =		{Results on the propositional mu-calculus},
	volume =	27
}

@article{Kr87,
	author =	{E. Kranakis},
	year =		1987,
	journal =	i&c,
	number =	3,
	pages =		{264--288},
	title =		{Fixed point equations with parameters in the
				 projective model},
	volume =	75
}

@phdthesis{Kra99,
	author =	{Jeroen Kratz},
	year =		1999,
	month =		nov,
	type =		{Master Thesis},
	school =	{Department of Computing Science,
			University of Nijmegen},
	title =		{A case study in {PLC} control: two ways of
			verifying {PLC} control software for a {LEGO} plant}
}

@InCollection{KBPoth96,
  author =       {B.~Krieg-Br{\"u}ckner and J.~Peleska and E.-R.~Olderog and D.~Balzer and A.~Baer},
  title =        {{UniForM --- Universal Formal Methods Workbench}},
  booktitle =    {{Statusseminar des BMBF Softwaretechnologie}},
  OPTcrossref =  {},
  OPTkey =       {},
  publisher =    {{BMBF}},
  year =         {1996},
  editor =       {U.~Grote and G.~Wolf},
  OPTvolume =    {},
  OPTnumber =    {},
  OPTseries =    {},
  OPTchapter =   {},
  OPTtype =      {},
  address =      {Berlin},
  OPTedition =   {},
  month =        Mar,
  pages =        {357--378},
  OPTnote =      {},
  OPTannote =    {}
}

@inproceedings{Ketal97,
	author =	{K.J. Kristoffersen and F. Laroussinie and K.G. Larsen and P. Pettersson and W. Yi},
	title =		{A Compositional Proof of a Real-Time Mutual Exclusion Protocol},
	crossref =	{TAPSOFT97},
	pages =		{565--579}
}

@misc{KCB02,
	title=		{Cost Effective Use of Formal Methods in Verification and Validation},
	author=		{D.R. Kuhn and R. Chandramouli and R.W. Butler},
	note=		{Paper presented at Workshop on Foundations for Modeling and Simulation (M\&S) Verification and Validation (V\&V)
			 in the 21st Century (Foundations ’02), October 22-24, 2002, Johns Hopkins University Applied Physics Laboratory,
			 Laurel, Maryland (USA)},
	year =		2002
}

@inproceedings{KHdR97,
	author =	{L. K{\"u}hne and J. Hooman and Roever, W.P. de},
        editor =        {I. Lovrek},
        booktitle =     {Proceedings of the 2nd International Workshop on
                Applied Formal Methods in System Design, {\rm Zagreb}},
	year =		1997,
	pages =		{73--85},
	title =		{Towards Mechanical Verification of Parts of
			the {IEEE P1394} Serial Bus},
	publisher =	{University of Zagreb,
                     	Faculty of Electrical Engineering and Computing}
}

@book{Kur94,
	author =	{R.P. Kurshan},
	year =		1994,
	publisher =	{Princeton University Press},
	title =		{Computer-Aided Verification of Coordinating Processes}
}

@inproceedings{KL93,
	author =	{R.P. Kurshan and L. Lamport},
	crossref =	{CAV5},
	title =		{Verification of a Multiplier: 64 Bits and Beyond},
	pages = 	{166--179}
}


@inproceedings{PRISM2,
  author =       " M.Z. Kwiatkowska and G. Norman and D. Parker",
  title =        "{PRISM} 2.0: A Tool for Probabilistic Model
                  Checking",
  booktitle =    { Proceedings of the 1st International Conference on
                  Quantitative Evaluation of Systems (QEST04)},
  year =         {2004},
  publisher =    {IEEE Computer Society},
  pages =        {322--323}
}

@InProceedings{KNPS03,
author={M. Kwiatkowska and G. Norman and D. Parker and J. Sproston},
title={Performance Analysis of Probabilistic Timed Automata using Digital Clocks},
booktitle={Proc. Formal Modeling and Analysis of Timed Systems (FORMATS'03)},
year={2003},
editor={K. Larsen and P. Niebert},
pages={105--120},
publisher={Springer-Verlag},
series={LNCS},
volume={2791},
_month={September}
}

@inproceedings{KNP06,
  author    = {M.Z. Kwiatkowska and G. Norman and D. Parker},
  title     = {Game-based Abstraction for Markov Decision Processes},
  pages     = {157-166},
  booktitle = {Third International Conference on the Quantitative Evaluaiton
               of Systems (QEST 2006), 11-14 September 2006, Riverside, California, USA},
  publisher = {IEEE Computer Society},
  year      = {2006}
}

@inproceedings{LBBO01,
	author =	{Y. Lakhnech and S. Bensalem and S. Berezin and
				 S. Owre},
	crossref =	{TACAS01},
	title =		{Incremental Verification by Abstraction}
}

@article{LS84,
        author =        {S.S. Lam and A.U. Shankar},
        title =         {Protocol Verification via Projections},
        year =          1984,
        month =         jul,
        volume =        10,
        number =        4,
        pages =         {325--342},
        journal =       ieeese
}

@article{Lam74,
	author =	{L. Lamport},
	year =		1974,
	month =		aug,
	journal =	cacm,
	volume =	17,
	number =	8,
	pages =		{453--455},
	title =		{A New Solution of {D}ijkstra's Concurrent
				 Programming Problem}
}

@article{Lam78,
	author =	{L. Lamport},
	year =		1978,
	journal =	cacm,
	number =	7,
	pages =		{558--564},
	title =		{Time, clocks and the ordering of events in
				 distributed systems},
	volume =	21
}

@article{Lam80,
        author =        {L. Lamport},
        year =          1980,
        journal =       acta,
        pages =         {21--37},
        title =         {The `{H}oare logic' of concurrent programs},
        volume =        14
}

@inproceedings{Lam83,
	author =	{L. Lamport},
	booktitle =	{Information Processing 83},
	year =		1983,
	editor =	{R.E. Mason},
	publisher =	nholland,
	pages =		{657--668},
	title =		{What good is temporal logic?}
}

@article{Lam83a,
	author =	{L. Lamport},
	year =		1983,
	journal =	toplas,
	pages =		{190--222},
	title =		{Specifying Concurrent Program Modules},
	volume =	5,
	number =	2
}

@article{Lam86,
	author =	{L. Lamport},
	year =		1986,
	journal =	discomp,
	volume =	1,
	number =	2,
	pages =		{77--101},
	title =		{On interprocess communication, {Parts I and II}}
}

@article{Lam87,
	author =	{L. Lamport},
	year =		1987,
	month =		feb,
	journal =	tocs,
	pages =		{1--11},
	title =		{A Fast Mutual Exclusion Algorithm},
	volume =	5,
	number =	1
}

@techreport{Lam91,
	author =	{L. Lamport},
	year =		1991,
	month =		dec,
	type =		{Research Report},
	number =	79,
	institution =	{Digital Equipment Corporation, Systems Research Center},
	title =		{A Temporal Logic of Actions}
}

@article{Lam92,
	author =	{L. Lamport},
	year =		1992,
	journal =	discomp,
	volume =	6,
	number =	1,
	pages =		{65--71},
	title =		{Critique of the Lake Arrowhead Three}
}

@techreport{Lam93,
	author =	{L. Lamport},
	year =		1993,
	month =		feb,
	type =		{Research Report},
	number =	94,
	institution =	{Digital Equipment Corporation,
			 Systems Research Center},
	title =		{How to Write a Proof}
}

@inproceedings{Lam93a,
	author =	{L. Lamport},
	title =		{Hybrid Systems in {$\rm TLA^+$}},
	crossref =	{Hybrid93},
	pages =		{77-102}
}

@techreport{Lam93b,
	author =	{L. Lamport},
	year =		1993,
	month =		dec,
	type =		{Research Report},
	number =	119,
	institution =	{Digital Equipment Corporation,
			 Systems Research Center},
	title =		{How to Write a Long Formula}
}

@article{Lam94,
	author =	{L. Lamport},
	year =		1994,
	month =		may,
	journal =	toplas,
	volume =	16,
	number =	3,
	pages =		{872--923},
	title =		{The Temporal Logic of Actions}
}

@article{Lam94a,
	author =	{L. Lamport},
	year =		1994,
	journal =	fac,
	volume =	6,
	number =	5,
	pages =		{580--584},
	title =		{How to Write a Long Formula}
}

@article{Lam95,
	author =	{L. Lamport},
	year =		1995,
	journal =	{IEEE Transactions on Software Engineering},
	volume =	21,
	number =	9,
	pages =		{768--775},
	title =		{{TLA} in Pictures}
}

@inproceedings{Lam99,
	author =	{L. Lamport},
        booktitle =     {Calculational System Design},
	year =		1999,
	editors =	{M. Broy and R. Steinbr\"uggen},
	title =		{Specifying Concurrent Systems with {TLA+}},
	publisher =	{IOS Press},
	address =	{Amsterdam}
}

@inproceedings{Lam06,
  author    = {L. Lamport},
  title     = {Checking a Multithreaded Algorithm with $^{\mbox{+}}$CAL},
  year      = {2006},
  pages     = {151-163},
  editor    = {S. Dolev},
  booktitle     = {Distributed Computing, 20th International Symposium, DISC
               2006, Stockholm, Sweden, September 18-20, 2006, Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {4167},
}

@article{LSP82,
	author =	{L. Lamport and R.Shostak and M. Pease},
	year =		1982,
	journal =	toplas,
	volume =	4,
	number =	3,
	pages =		{382--401},
	title =		{The {B}yzantine generals problem}
}

@inproceedings{LLS93,
	author =	{B.W. Lampson and N.A. Lynch and
				 J.F. S{\o}gaard-Andersen},
        booktitle =     {FORTE'93 - Sixth International Conference on Formal
                        Description Techniques, {\rm Boston, MA, October 1993}},
        pages =         {387-402},
	year =		1993,
	title =		{Correctness of At-Most-Once Message Delivery Protocols}
}

@article{Lan65,
title="A Correspondence Between {ALGOL} 60 and {C}hurch's Lambda-Notation:
{P}art {I}",
author="P.J. Landin",
journal=cacm,
pages="89--101",
year=1965,
volume=8,
number=2}

@inproceedings{Lk90,
	author =	{R. Langerak},
	crossref =	{PSTV9},
	title =		{A testing theory for {LOTOS} using deadlock detection},
	pages =		{87--98}
}

@phdthesis{Lk92,
	author =	{R. Langerak},
	year =		1992,
	month =		nov,
	school =	{Department of Computer Science, University of Twente},
	title =		{Transformations and Semantics for LOTOS}
}

@InProceedings{LRG03,
  author =       {Langevelde, I. van and J.M.T. Romijn and N. Goga},
  title =        {Founding {FireWire} Bridges through {Promela} Prototyping},
  booktitle =    {$8^{th}$ International Workshop on Formal Methods
                  for Parallel Programming: Theory and Applications
                  ({FMPPTA})},
  year =         {2003},
  month =        {April},
  publisher =    {IEEE Computer Society Press}
}

@phdthesis{La86,
	author =	{K.G. Larsen},
	year =		1986,
	school =	{Department of Computer Science, University of Edinburgh},
	title =		{Context-dependent bisimulation between processes}
}

@techreport{La89,
	author =	{K.G. Larsen},
	year =		1989,
	month =		feb,
	institution = 	{Institute for Electronic Systems,
			 The University of Aalborg},
	number =	{R 89-09},
	title =		{Modal Specifications}
}


@inproceedings{LBBetal01,
        author =        {K.G. Larsen and G. Behrmann and E. Brinksma and
                A. Fehnker and T.S. Hune and P. Petterson and J.M.T. Romijn},
        title =         {As Cheap as Possible: Efficient Cost-Optimal
                        Reachability for priced Timed Automata},
        booktitle =     {Proceedings CAV'01},
        year =          2001
}


@inproceedings{LLPW97,
	author = {K.G. Larsen and F. Larsson and P. Pettersson and Wang Yi},
	booktitle =	{Proceedings of the 18th IEEE Real-Time Systems
			Symposium},
	title =		{Efficient Verification of Real-Time Systems:
			Compact Data Structures and State-Space Reduction},
	pages =		{14--24},
	publisher =	{IEEE Computer Society press},
	year =		1997
}

@inproceedings{LLW95,
	author =	{K.G. Larsen and F. Laroussinie and C. Weise},
	booktitle =	{Proceedings 20th International Symposium on
			Mathematical  Foundations  of Computer Science
			(MFCS'95), {\rm Prague,  Czech  Republic}},
	year =		1995,
	series =	lncs,
	volume =	969,
	publisher =	springer,
	title =		{From Timed Automata to Logic --- and Back}
}


@InProceedings{emsoft:05,
  author =       {K.G. Larsen and M. Mikucionis and B. Nielsen},
  title =        {Testing real-time embedded software using {UPPAAL-TRON}: an industrial case study},
  booktitle =    {the 5th ACM International Conference on Embedded Software},
  pages =        {299 - 306},
  year =         {2005},
  month =        {September 18--22},
  publisher =    {ACM Press New York, NY, USA},
  url =          {http://doi.acm.org/10.1145/1086228.1086283}
}


@inproceedings{LM87,
	author =	{K.G. Larsen and R. Milner},
	crossref =	{ICALP14},
	pages =		{126--135},
	title =		{A complete protocol verification using
				 relativized bisimulation}
}

@article{lpw:sttt97,
  author =       {K. G.\ Larsen and P. Pettersson and W. Yi},
  title =        {{{\sc Uppaal}\ in a Nutshell}},
  journal =      {Int.\ Journal on Software Tools for Technology Transfer},
  publisher =    {Springer--Verlag},
  volume =       1,
  number =       {1--2},
  pages =        {134-152},
  month =        Oct,
  year =         {1997}
}

@inproceedings{LS89,
	author =	{K.G. Larsen and A. Skou},
	crossref =	{POPL16},
	pages =		{344--352},
	title =		{Bisimulation through probabilistic testing}
}

@article{LS91,
	author =	{K.G. Larsen and A. Skou},
	year =		1991,
	title =		{Bisimulation through probabilistic testing},
	journal =	iandcomp,
	volume =	94
}
@inproceedings{LaTh88,
	author =	{K.G. Larsen and B. Thomsen},
	crossref =	{LICS3},
	pages =		{203--210},
	title =		{A Modal Process Logic}
}

@inproceedings{LX90,
	author =	{K.G. Larsen and L. Xinxin},
	crossref =	{LICS5},
	pages =		{108--117},
	title =		{Equation Solving Using Modal Transition Systems}
}

@inproceedings{LX90a,
	author =	{K.G. Larsen and L. Xinxin},
	crossref = 	{ICALP17},
	pages =		{526--539},
	note =		{An extended version appeared as: Report R89-13,
			 The University of Aalborg, Dept.\ of Mathematics and
			 Computer Science, Aalborg, Denmark, May 1989},
	title =		{Compositionality Through an Operational Semantics of Contexts}
}

@phdthesis{La88,
	author =	{K.{\bf S}. Larsen},
	year =		1988,
	type =		{Master Thesis},
	school =	{Aarhus University, Denmark},
	title =		{A fully abstract model for a process algebra with refinements}
}

@techreport{Lau68,
title="Formal Definition of {A}lgol 60",
type="Technical Report",
number="TR.25.088",
institution="{IBM} Lab. Vienna",
year=1968,
author="L.P. Lauer"}

@article{LC75,
	author =	{P.E. Lauer and R.H. Campbell},
	year =		1975,
	journal =	acta,
	pages =		{297--332},
	title =		{Formal semantics of a class of high level primitives for coordinating concurrent processes},
	volume =	5
}


@article{LSKP96,
        author =        {D. Lee and K.K. Sabnani and D.M. Kristol and
                         S. Paul},
        year =          1996,
        journal =       ieeecomm,
        volume =        44,
        number =        5,
        pages =         {631--640},
        title =         {Conformance testing of protocols specified as
                         communicating finite state machines - a guided
                         random walk based approach}
}



@article{LYa94,
        author =        {D. Lee and M. Yannakakis},
        year =          1994,
        journal =       ieeetc,
        volume =        43,
        number =        3,
        pages =         {306--320},
        title =         {Testing finite-state machines: {S}tate identification
                         and verification}
}


@article{LeeY96,
        author =        {D. Lee and M. Yannakakis},
        year =          1996,
        journal =       {Proceedings of the IEEE},
        volume =        84,
        number =        8,
        pages =         {1090--1123},
        title =         {Principles and methods of testing finite state machines --- a survey}
}

@article{LLT90,
author="Lazrek, A. and Lescanne, P. and Thiel, J.-J.",
title="Tools for Proving Inductive Equalities, Relative Completeness,
and $\omega$-completeness",
journal=i&c,
year=1990,
pages="47--70",
volume="84"
}

@inproceedings{Led91,
	author =	{G. Leduc},
	title =		{An upward compatible timed extension to {LOTOS}},
	crossref =	{FORTE4}
}

@inproceedings{LL92,
	author =	{G. Leduc and L. Leonard},
	title =		{A timed {LOTOS} supporting a dense time domain
			 and including new timed operators},
	crossref =	{FORTE5}
}

@article{Lee00,
  author    = {E.A. Lee},
  title     = {What's Ahead for Embedded Software?},
  journal   = {IEEE Computer},
  volume    = {33},
  number    = {9},
  year      = {2000},
  pages     = {18-26}
}

@inproceedings{LenzenLW08,
  author    = {C. Lenzen and T. Locher and R. Wattenhofer},
  title     = {Clock Synchronization with Bounded Global and Local Skew},
  pages     = {509-518},
  ee        = {http://dx.doi.org/10.1109/FOCS.2008.10},
  booktitle = {49th Annual IEEE Symposium on Foundations of Computer Science,
               FOCS 2008, October 25-28, 2008, Philadelphia, PA, USA},
  publisher = {IEEE Computer Society},
  year      = {2008}
}


@techreport{Lin93,
	author =	{H. Lin},
	address =	{Brighton},
	year =		1993,
	month =		feb,
	institution =	{Computer Science, University of Sussex},
	type =		{Report},
	number =	{4/93},
	title =		{{PAM: A Process Algebra Manipulator (Version 1.0)}}
}
 
@inproceedings{LMMS98,
    author = "P. Lincoln and J.C. Mitchell and M. Mitchell and A. Scedrov",
    title = "A Probabilistic Poly-Time Framework for Protocol Analysis",
    booktitle = "{ACM} Conference on Computer and Communications Security",
    pages = "112-121",
    year = "1998",
    url = "citeseer.ist.psu.edu/lincoln98probabilistic.html" }
 
@book{GuttagL86,
	author =	{B.L. Liskov and J.V. Guttag},
	year =		1986,
	publisher =	{MIT Press and McGraw Hill},
	title =		{Abstraction and Specification in Program Development}
}

@phdthesis{Liv97,
	author =	{C. Livadas},
	type =		{Master's Thesis},
	year =		1997,
	month =		sep,
	school =	{Department of Electrical Engineering and Computer
  			Science, Massachusetts Institute of Technology,
			Cambridge},
	title =		{Formal verification of safety-critical hybrid systems},
	note =		{Also, MIT/LCS/TR-730}
}

@inproceedings{LivL98,
	author =	{C. Livadas and N.A. Lynch},
	title =		{Formal verification of safety-critical hybrid systems},
	crossref =	{Hybrid98},
	pages =		{253--272}
}

@inproceedings{LLL99,
	author =	{C. Livadas and J. Lygeros and N.A. Lynch},
	title =		{High-Level Modelling and Analysis of TCAS},
        booktitle =     {Proceedings of the IEEE Real-Time
                        Systems Symposium (RTSS'99)},
	year =		1999,
        publisher =     ieeepress
}

@inproceedings{LW01,
       author =        {T. Locher and R. Wattenhofer},
       title =         {Oblivious Gradient Clock Synchronization},
       crossref =      {DISC06},
       pages =         {520-533}
}

@inproceedings{LD91,
	author =	{P. Loewenstein and D.L. Dill},
	crossref =	{CAV2},
	title =		{Verification of a Multiprocessor Cache Protocol using
			Simulation Relations and Higher-Order Logic (Summary)},
	pages =		{302--311}
}

@article{LSh92,
        author =        {F. Lombardi and Y.-N. Shen},
        year =          1992,
        journal =       ieeecomm,
        volume =        40,
        number =        8,
        pages =         {1288--1293},
        title =         {Evaluation and improvement of fault coverage of
                         Conformance testing by {UIO} sequences}
}

@techreport{LG87,
	author =	{R. Loogen and U. Goltz},
	year =		1987,
	institution =	{RWTH Aachen},
	type =		{Aachener Informatik-Berichte},
	number =	{87--15},
	title =		{A non-interleaving semantic model for nondeterministic concurrent processes}
}

@article{LG91,
	author =	{R. Loogen and U. Goltz},
	year =		1991,
	month =		jan,
	journal =	funinf,
	volume =	{XIV},
	number =	1,
	pages =		{39--74},
	title =		{Modelling Nondeterministic Concurrent Processes with Event Structures}
}

@book{Ll87,
title="Foundations of Logic Programming, Second Edition",
author="J.W. Lloyd",
publisher=springer,
year=1987
}

@techreport{Lucas68,
	author =	{P. Lucas},
	address =	{Vienna},
	year =		1968,
	month =		jun,
	institution =	{IBM Laboratory},
	type =		{Technical Report},
	number =	{25.085},
	title =		{Two Constructive Realizations of the Block Concept
				and their Equivalence}
}

@inproceedings{Lucas72,
	author="Lucas, P.",
	title="Formal Definition of Programming Languages and Systems",
	booktitle="Proceedings of the IFIP Congress 1971",
	publisher="North Holland",
	year=1972,
	pages="291--297"
}

@inproceedings{Lucas73,
	author="Lucas, P.",
	title="On Program Correctness and the Stepwise Development of
		Implementations",
	booktitle="Proceedings of the Convegno di Informatica Teorica,
		University of Pisa, March 1973",
	pages="219--251",
	year=1973
}

@inproceedings{Luc87,
title="{VDM}: {O}rigins, Hopes, and Achievements",
author="P. Lucas",
pages="1--18",
booktitle="{VDM} -- {A} Formal Method at Work",
year=1987,
series=lncs,
volume=252,
publisher=springer}


@mastersthesis{Luc94,
author={V. Luchangco},
school={{MIT E}lectrical {E}ngineering and {C}omputer {S}cience},
title={Using Simulation Techiniques to Prove Timing Properties},
year=1994
}

@inproceedings{LSGL94,
author={V. Luchangco and E. S\"{o}ylemez and S. Garland and N.A. Lynch},
title={Verifying Timing Properties of Concurrent Algorithms},
booktitle={Proceedings of the Seventh International Conference on
Formal Description Techniques for Distributed Systems and
Communications Protocols},
publisher={Elsevier Science Publishers B. V. (North Holland)},
organization={IFIP WG6.1},
month=oct,
pages={239-259},
address={Berne, Switzerland},
year=1994,
note={Preliminary version.  Final version to be published by Chapman and Hall}
}

@TECHREPORT{LPT89
, ADDRESS      = {Edinburgh, Scotland}
, AUTHOR       = {Z. Luo and R. Pollack and P. Taylor}
, TYPE         = {Technical Report}
, INSTITUTION  = {University of Edinburgh}
, MONTH        = oct
, NUMBER       = {LFCS-TN-27}
, TITLE        = {How to use {LEGO}}
, YEAR         = 1989
}

@InProceedings{sta:ftrtft98,
  author =       {R.F. {Lutje Spelberg} and W.J.\ Toetenel and
			 M.\ Ammerlaan},
  title =        {Partition Refinement in Real-Time Model Checking},
  year =         1998,
  crossref =     {FTRTFT98},
  pages =        {143--157}
}

@inproceedings{Lut97,
        author =        {S.P. Luttik},
        title =         {Description and Formal Specification
                of the {Link} Layer of {P1394}},
        editor =        {I. Lovrek},
        booktitle =     {Proceedings of the 2nd International Workshop on
                Applied Formal Methods in System Design, {\rm Zagreb}},
        year =          1997,
        pages =         {43--56},
        note =          {Also available as Report SEN-R9706, CWI, Amsterdam.
        See URL
        {\tt  http://www.cwi.nl/\verb+~+luttik/}}
}


@inproceedings{LygL97,
	author =	{J. Lygeros and N.A. Lynch},
	title =		{On the formal verification of the {TCAS}
			 conflict resolution algorithms},
	booktitle =	{Proceedings 36th IEEE Conference on Decision and
			 Control, {\rm San Diego, CA}},
	pages = 	{1829--1834},
	year =		1997,
	month =		dec,
	note =		{Extended abstract}
}

@inproceedings{LygL98,
	author =	{J. Lygeros and N.A. Lynch},
	title =		{Strings of Vehicles: Modeling and Safety Conditions},
	crossref =	{Hybrid98},
	pages =		{273--288}
}

@techreport{Ly83,
	author =	{N.A. Lynch},
	year =		1983,
	month =		feb,
	institution =	{MIT},
	type =		{Report},
	number =	{TR-285},
	title =		{Concurrency Control for Resilient Nested Transactions}
}

@inproceedings{Ly90,
	author =	{N.A. Lynch},
	crossref =	{REXrefinement},
	pages =		{519--543},
	title =		{Multivalued Possibilities Mappings}
}

@inproceedings{Ly94,
	author =	{N.A. Lynch},
	crossref =	{REXdecade},
	pages =		{375--424},
	title =		{Simulation Techniques for Proving Properties
			 of Real-Time Systems}
}

@inproceedings{Lynch96,
	author =	{N.A. Lynch},
	title =		{Modelling and Verification of Automated Transit
			 Systems, Using Timed Automata, Invariants and
			 Simulations},
	crossref =	{HybridIII},
	pages =		{449--463}
}

@inproceedings{Lynch96a,
	author =	{N.A. Lynch},
	title =		{A three-level analysis of a simple acceleration
			 maneuver, with uncertainties},
	booktitle =	{Proceedings of the Third AMAST Workshop on Real-Time
  			Systems, {\rm Salt Lake City, Utah}},
	year =		1996,
	month =		mar,
	pages =		{1--22}
}

@book{Ly96,
	author=		{N.A. Lynch},
	title=		{Distributed Algorithms},
	publisher=	{Morgan Kaufmann Publishers, Inc.},
	address =	{San Fransisco, California},
	year =		1996
}

@article{LA92,
	author =	{N.A. Lynch and H. Attiya},
	year =		1992,
	journal =	discomp,
	volume =	6,
	number =	2,
	pages =		{121--139},
	title =		{Using Mappings to Prove Timing Properties}
}

@misc{LamportL89,
	title=		{Distributed Computing},
	author=		{Lamport, L. and Lynch, N.A.},
	publisher=	{North-Holland},
	note=		{Chapter of Handbook on Theoretical Computer Science.
			Also available as Technical Memo MIT/LCS/TM-384,
			Laboratory for Computer Science, Massachusetts
			Institute of Technology, Cambridge, MA, 1989}
}

@article{LF81,
	author =	{N.A. Lynch and M.J. Fischer},
	year =		1981,
	journal =	tcs,
	volume =	13,
	number =	1,
	pages =		{17--43},
	title =		{On describing the behavior and implementation of
			distributed systems},
	note =		{Special Issue on Semantics of Concurrent Computation}
}

@techreport{LynchS92,
author={Lynch, N. and Saias, I.},
title={Distributed Algorithms},
type={MIT/LCS/RSS 16},
institution= {MIT},
year=1990,
note={Lecture notes for 6.852}
}

@inproceedings{LSS94,
	author={N.A. Lynch and I. Saias and R. Segala},
	title={Proving Time Bounds for Randomized Distributed Algorithms},
	booktitle={Proceedings of the 13th Annual ACM Symposium on the
		 Principles of Distributed Computing},
	year={1994},
	month={August},
	pages={314-323},
	address={Los Angeles, CA}
}

@techreport{LSVW95,
	author =	{N.A. Lynch and R. Segala and F.W. Vaandrager and
				H.B. Weinberg},
	title =		{Hybrid {I/O} Automata},
	year =		1995,
	month =		dec,
	institution =	{CWI},
	address =	{Amsterdam},
	type =		{Report},
	number =	{CS-R9578}
}

@inproceedings{LSVW96,
	author =	{N.A. Lynch and R. Segala and F.W. Vaandrager and
				H.B. Weinberg},
	title =		{Hybrid {I/O} Automata},
	crossref =	{HybridIII},
	pages =		{496--510}
}

@techreport{LSVW99,
	author =	{N.A. Lynch and R. Segala and F.W. Vaandrager and
				H.B. Weinberg},
	title =		{Hybrid {I/O} Automata},
	year =		1999,
	month =		apr,
	type =		{Report},
	institution =	{Computing Science Institute, University of Nijmegen},
	number =	{CSI-R9907}
}

@inproceedings{LSV01,
	author =	{N.A. Lynch and R. Segala and F.W. Vaandrager},
	title =		{Hybrid {I/O} Automata Revisited},
	crossref =	{Hybrid01},
	pages =		{403--417}
}

@techreport{LSV02,
	author =	{N.A. Lynch and R. Segala and F.W. Vaandrager},
	title =		{Hybrid {I/O} Automata},
	year =		2002,
	month =		feb,
	type =		{Report},
        institution =   {Nijmegen Institute for Computing and Information
			Sciences, University of Nijmegen},
        number =        {NIII-R0201},
	url =		{http://www.cs.ru.nl/research/reports/info/NIII-R0201.html}
}

@article{LSV03,
	author =	{N.A. Lynch and R. Segala and F.W. Vaandrager},
	title =		{Hybrid {I/O} Automata},
	year =		2003,
	journal =	{Information and Computation},
	volume =	185,
	number =	1,
	pages =		{105-157},
	url =		{http://www.cs.ru.nl/ita/publications/papers/fvaan/HIOA.html}
}

@techreport{LSV03a,
	author =	{N.A. Lynch and R. Segala and F.W. Vaandrager},
	year =		2003,
	institution =	{MIT, Laboratory for Computer Science},
	number =	{MIT-LCS-TR-907},
	title =		{Compositionality for Probabilistic Automata},
	note =		{To appear}
}

@techreport{LSV03b,
	author =	{N.A. Lynch and R. Segala and F.W. Vaandrager},
	year =		2003,
	month =		jan,
	institution =	{MIT, Laboratory for Computer Science},
	number =	{MIT-LCS-TR-827d},
	title =		{Hybrid {I/O} Automata},
	url =		{http://theory.lcs.mit.edu/tds/papers/Lynch/HIOA-final.ps}
}

@inproceedings{LSV03c,
	author =	{N.A. Lynch and R. Segala and F.W. Vaandrager},
	title =		{Compositionality for Probabilistic Automata},
	booktitle =	{Proceedings 14th International Conference on
		 Concurrency Theory (CONCUR 2003), {\rm Marseille, France}},
	year =		2003,
	month =		sep,
	editor =	{R. Amadio and D. Lugiez},
	series =	lncs,
	volume =	2761,
	publisher =	springer,
	pages =		{208--221},
	url =		{http://www.cs.ru.nl/ita/publications/papers/fvaan/CPA.html}
}


@article{LSV07,
author = {N.A. Lynch and R. Segala and F.W. Vaandrager},
collaboration = {},
title = {Observing Branching Structure through Probabilistic Contexts},
publisher = {SIAM},
year = {2007},
journal = {SIAM Journal on Computing},
volume = {37},
number = {4},
pages = {977-1013},
keywords = {probabilistic automata; trace distributions; compositionality; simulation preorder; concurrency theory},
url = {http://link.aip.org/link/?SMJ/37/977/1},
doi = {10.1147/S0097539704446487},
category = {wet - artikel in wet tijdschrift}
}

@article{LySt89,
	author =	{N.A. Lynch and E.W. Stark},
	year =		1989,
	month = 	jul,
	journal =	i&c,
	volume =	82,
	number =	1,
	pages =		{81--92},
	title =		{A Proof of the {Kahn} Principle for Input/Output
				 Automata}
}

@inproceedings{LT87,
	author =	{N.A. Lynch and M.R. Tuttle},
	crossref =	{PODC6},
	pages =		{137--151},
	title =		{Hierarchical correctness proofs for distributed
			 algorithms},
	note =		{A full version is available as
			 MIT Technical Report MIT/LCS/TR-387}
}

@article{LT89,
	author =	{N.A. Lynch and M.R. Tuttle},
	journal =	cwiq,
	volume =	2,
	number =	3,
	year =		1989,
	month =		sep,
	pages =		{219--246},
	title =		{An Introduction to Input/Output Automata}
}

@inproceedings{LV92,
	author =	{N.A. Lynch and F.W. Vaandrager},
	crossref =	{REXrealtime},
	pages =		{397--446},
	title =		{Forward and Backward Simulations for Timing-Based
				 Systems}
}

@techreport{LV93a,
	author =	{N.A. Lynch and F.W. Vaandrager},
	year =		1994,
	month =		aug,
	institution =	{Laboratory for Computer Science,
                        Massachusetts Institute of Technolog},
	type =		{Technical Memo},
	number =	{MIT/LCS/TM-486.b (new version of TM-486)},
	address =	{Cambridge, MA},
	title =		{Forward and Backward Simulations --
				 Part {I}: Untimed Systems}
}

@techreport{LV93b,
	author =	{N.A. Lynch and F.W. Vaandrager},
	year =		1993,
	month =		mar,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R9314},
	address =	{Amsterdam},
	title =		{Forward and Backward Simulations --
				 Part {II}: Timing-Based Systems},
        note = 		{Also, MIT/LCS/TM-487.b,
			Laboratory for Computer Science,
                        Massachusetts Institute of Technology, Cambridge, MA}
}

@techreport{LV95b,
	author =	{N.A. Lynch and F.W. Vaandrager},
	year =		1995,
	month =		apr,
	institution =	{Laboratory for Computer Science,
                        Massachusetts Institute of Technology},
	number =	{MIT/LCS/TM-487.c},
	address =	{Cambridge, MA, USA},
	title =		{Forward and Backward Simulations --
				 Part {II}: Timing-Based Systems}
}

@article{LV95,
	author =	{N.A. Lynch and F.W. Vaandrager},
	title =		{Forward and Backward Simulations,
				 {I}: Untimed Systems},
	journal =	iandcomp,
	volume =	121,
	number =	2,
	year =		1995,
	month =		sep,
	pages =		{214--233}
}

@article{LV96,
	author =	{N.A. Lynch and F.W. Vaandrager},
	title =		{Forward and Backward Simulations,
				 {II}: Timing-based Systems},
	journal =	iandcomp,
	volume =	128,
	number =	1,
	year =		1996,
	month =		jul,
	pages =		{1--25}
}

@article{LV96b,
	author =	{N.A. Lynch and F.W. Vaandrager},
	year =		1996,
	journal =	fac,
	volume =	8,
	number =	5,
	pages =		{499--538},
	title =		{Action Transducers and Timed Automata}
}

@inproceedings{VL92,
	author =	{F.W. Vaandrager and N.A. Lynch},
	crossref =	{CONCUR92},
	pages =		{436--455},
	title =		{Action Transducers and Timed Automata}
}

@techreport{LV94,
	author =	{N.A. Lynch and F.W. Vaandrager},
	year =		1994,
	month =		nov,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R9460},
	address =	{Amsterdam},
	title =		{Action Transducers and Timed Automata},
        note = 		{Also, Technical Memo MIT/LCS/TM-480.b,
			Laboratory for Computer Science,
                        Massachusetts Institute of Technology, Cambridge,
                        MA, October 1994}
}

@inproceedings{LW95,
	author=		{N.A. Lynch and H.B. Weinberg},
	title=		{Proving Correctness of a Vehicle Maneuver:
			 Deceleration},
	crossref =	{HybridGrenoble}
}

@book{Mac71,
	title =		{Categories for the Working Mathematician},
	author =	{S. Mac Lane},
	year =		1971,
	publisher =	springer,
	address =	{New York, Heidelberg, Berlin}
}

@misc{Ma03,
        author =        {A. Mader},
        year =          2003,
        title =         {Deriving Schedules for the Cybernetix Case Study},
        url =          {http://ametist.cs.utwente.nl/INTERNAL/PUBLICATIONS/UTPub
lications/mader-axxom2003.ps.gz},
  note =	 {Available through URL {\tt
                  http://ametist.cs.utwente.nl}},
        tasks =         {3.1},
        funding =       {Ametist, MoMS(NWO)}

}

@misc{MBWB01,
	author =	{A. Mader and E. Brinksma and H. Wupper and N. Bauer},
	year =		2001,
	title =		{Design of a {PLC} Control Program for a Batch Plant
				--- {VHS} Case Study 1},
	note =		{To appear in {\em European Journal of Control}}
}

@techreport{MWB07,
  author =       {A. Mader and H. Wupper and M. Boon},
  year =         2007,
  institution =  {Centre for Telematics and Information Technology, University of Twente, The Netherlands},
  number =       {TR-CTIT-07-02},
  title =        {The Construction of Verification Models for Embedded Systems}
}

@book{MC06,
	title="Concurrency: State Models and Java Programs",
	author="J. Magee and J. Kramer",
	year=2006,
	publisher="John Wiley and Sons Ltd",
	address="Chichester, England"
}

@inproceedings{MMP92,
	author =	{O. Maler and Z. Manna and A. Pnueli},
	crossref =	{REXrealtime},
	pages =		{447--484},
	title =		{From Timed to Hybrid Systems}
}

@inproceedings{MPS95,
	author =	{O. Maler and A. Pnueli and J. Sifakis},
	booktitle =	{Proceedings STACS'95},
	year =		1995,
	editor =	{E.W. Mayr and C. Puech},
	series =	lncs,
	volume =	900,
	publisher =	springer,
	pages =		{229--242},
	title =		{On the Synthesis of Discrete Controllers for Timed Systems}
}

@article{MMM95,
        author =        {D. Mandrioli and S. Morasca and A. Morzenti},
        year =          1995,
        journal =       tocs,
        volume =        13,
        number =        4,
        pages =         {365--398},
        title =         {Generating test cases for real-time systems from
                         logic specifications}
}

@book{MA86,
title="Algebraic Approaches to Program Semantics",
author="E.G. Manes and M.A. Arbib",
year=1986,
publisher=springer,
series="Texts and Monographs in Computer Science"
}

@book{Ma74,
        author =        {Z. Manna},
        year =          1974,
        publisher =     mcgraw,
        title =         {Mathematical Theory of Computation}
}

@inproceedings{MBSU98,
	author =	{Z. Manna and A. Browne and H.B. Sipma and T.E. Uribe},
	title =		{Visual Abstraction for Temporal Verification},
	booktitle =	{Proceedings AMAST'98},
	year =		1998,
	publisher =	springer,
	editor = 	{A.M. Haeberer},
	series =	lncs,
	volume =	1548,
	pages =		{28--41}
}

@inproceedings{MP89,
	author =	{Z. Manna and A. Pnueli},
	crossref =	{REXlinear},
	pages =		{201--284},
	title =		{The anchored version of the temporal framework}
}

@book{MP92,
        author =        {Z. Manna and A. Pnueli},
	title =		{The Temporal Logic of Reactive and Concurrent Systems: Specification},
	year =		1992,
	publisher =	springer
}

@book{MP95,
        author =        {Z. Manna and A. Pnueli},
	title =		{Temporal Verification of Reactive Systems: Safety},
	year =		1995,
	publisher =	springer
}

@inproceedings{MP93,
	author =	{Z. Manna and A. Pnueli},
	title =		{Verifying Hybrid Systems},
	crossref =	{Hybrid93},
	pages =		{4--35}
}

@misc{MSV06,
	author =	{T. Margaria and B. Sch\"atz and M. Verhoef},
	year =		2006,
	note =		{Report on the ForTIA Industry Day at FM 2005},
	title =		{Formal Methods Going Mainstream --- Cost, Benefits and Experiences}
}

@BOOK{Mar80
, AUTHOR       = {P. Martin-{L}\"{o}f}
, TITLE        = {Intuitionistic type theory}
, PUBLISHER    = {Bibliopolis}
, ADDRESS      = {Napoli}
, YEAR         = 1980
}

@techreport{Ma87,
	author =	{S. Mauw},
	year =		1987,
	institution =	{Dept. of Computer Science, University of Amsterdam},
	type =		{Report},
	number =	{FVI 87-06},
	note =		{An extended abstract appeared in: Algebraic Methods:
			 Theory, Tools and Applications
			 (M. Wirsing \& J.A. Bergstra), LNCS 394,
			 Springer-Verlag, pp. 507--554},
	title =		{An algebraic specification of process algebra,
				 including two examples}
}

@incollection{Ma90,
	author =	{S. Mauw},
	crossref =	{Ba90},
	pages =		{53--80},
	title =		{Process algebra as a tool for the specification and
				 verification of {CIM}--architectures}
}

@phdthesis{Ma91,
	author =	{S. Mauw},
	year =		1991,
	month =		dec,
	school =	{University of Amsterdam},
	title =		{{PSF -- A Process Specification Formalism}}
}

@techreport{MaMa90,
	author =	{S. Mauw and Gy. Max},
	year =		1990,
	month =		nov,
	institution =	{Programming Research Group, University of Amsterdam},
	type =		{Report},
	number =	{P9007},
	title =		{A Formal Specification of the Ethernet Protocol}
}

@inproceedings{MV89,
	author =	{S. Mauw and G.J. Veltink},
	booktitle =	tapsoft89v2,
	year =		1989,
	editor =	{J. D\'{\i}az and F. Orejas},
	publisher =	springer,
	pages =		{272--285},
	series =	lncs,
	volume =	352,
	title =		{An introduction to {$PSF_{d}$}}
}

@article{MaVe90,
	author =	{S. Mauw and G.J. Veltink},
	year =		1990,
	journal =	funinf,
	pages =		{85--139},
	title =		{A process specification formalism},
	volume =	{XIII}
}

@inproceedings{MV92,
	author =	{S. Mauw and G.J. Veltink},
	crossref =	{CAV3},
	title =		{A proof assistant for {PSF}}
}

@book{MV93,
	editor =	{S. Mauw and G.J. Veltink},
	year =		1993,
	publisher =	cup,
	series =	{Cambridge Tracts in Theoretical Computer Science 36},
	booktitle =	{Algebraic Specification of Communication Protocols},
	title =		{Algebraic Specification of Communication Protocols},
	crossrefonly =  1
}

@techreport{Maz77,
	author =	{A. Mazurkiewicz},
	year =		1977,
	type =		{Report},
	institution =	{Computer Science Department, Aarhus University},
	number =	{DAIMI PB--78},
	title =		{Concurrent program schemes and their interpretation}
}

@inproceedings{Maz84,
	author =	{A. Mazurkiewicz},
	booktitle =	mfcs,
	year =		1984,
	editor =	{M.P. Chytil and V. Koubek},
	publisher =	springer,
	pages =		{115--133},
	series =	lncs,
	volume =	176,
	title =		{Traces, histories, graphs: instances of a process monoid}
}

@incollection{Maz85,
	author =	{A. Mazurkiewicz},
	booktitle =	{Advances in Petri Nets 1984},
	year =		1985,
	editor =	{G. Rozenberg},
	series =	lncs,
	volume =	188,
	publisher =	springer,
	pages =		{353--375},
	title =		{Semantics of concurrent systems: a modular fixed-point trace approach}
}

@techreport{Maz86,
	author =	{A. Mazurkiewicz},
	year =		1986,
	institution =	{Vakgroep Informatica, Rijksuniversiteit Leiden},
	type =		{Report},
	number =	{86-06},
	title =		{Complete processes and inevitability}
}

@inproceedings{Maz87,
	author =	{A. Mazurkiewicz},
	crossref =	{advances-in-Petri-nets-87-2},
	pages =		{279--324},
	title =		{Trace theory}
}

@inproceedings{McAllester-Panangaden-Shanbhogue88,
	title =		{Nonexpressibility of fairness and signaling},
	author =	{D. McAllester and P. Panangaden and V. Shanbhogue},
	booktitle =	{Foundations of Computer Science},
	year =		1988,
	publisher =	{IEEE}
}


@techreport{Mel92,
	author =	{T. F. Melham},
	year =		1992,
	month =		jan,
	institution =	{University of Cambridge Computer Laboratory},
	number =	{244},
	title =		{A Mechanized Theory of the pi-calculus in HOL},
	note =		{To appear in the {\em Nordic Journal of Computing}}
}

@inproceedings{MC63,
title="Towards a Mathematical Science of Computation",
author="J. McCarthey",
pages="21--28",
booktitle="Information Processing 1962",
editor="C.M. Popplewell",
year=1963}

@article{MSB98,
	author =	{K.N. McKay and F.R. Safayeni and J.A. Buzacott},
	year =		1998,
	journal =	{Interfaces},
	volume =	18,
	number =	4,
	pages =		{84--90},
	title =		{Job-shop scheduling theory: What is relevant?}
}

@article{MW99,
	author =	{K.N. McKay and V.C.S. Wiers},
	year =		1999,
	journal =	{Journal of Manufacturing Systems},
	volume =	18,
	number =	4,
	pages =		{241--255},
	title =		{Unifying the Theory and Practice of Production Scheduling}
}

@incollection{MBS89,
	author =	{K.N. McKay and J.A. Buzacott and F.R. Safayeni},
	booktitle =	{Knowledge Based Production Management Systems},
	year =		1989,
	editor =	{J. Browne},
	publisher =	{Elsevier Science, New York},
	pages =		{171--189},
	title =		{The Scheduler's Knowledge of Uncertainty: The Missing Link}
}

@inproceedings{MV94,
	author =	{J. McManis and P. Varaiya},
	crossref =	{CAV6},
	title =		{Suspension Automata: A Decidable Class of
				Hybrid Automata},
	pages = 	{105--117}
}

@book{McM93,
	author =	{K.L. McMillan},
	year =		1993,
	publisher =	{Kluwer Academic Publishers},
	title =		{Symbolic Model Checking: An Approach to the
			State Explosion Problem}
}

@techreport{MT05,
	author =	{L. Meier and L. Thiele},
	year =		2005,
	institution =	{Computer Engineering and Networks Laboratory, ETH Zurich},
	number =	{219},
	title =		{Gradient Clock Synchronization in Sensor Networks}
}

@inproceedings{Mer90,
	author =	{M. Merritt},
	crossref =	{REXrefinement},
	pages =		{544--560},
	title =		{Completeness Theorems for Automata}
}

@inproceedings{MMT91,
	author =	{M. Merritt and F. Modugno and M. Tuttle},
	year =		1991,
	crossref =	{CONCUR91},
	pages =		{408--423},
	title =		{Time Constrained Automata}
}

@inproceedings{MeMo88,
	author =	{J. Meseguer and U. Montanari},
	crossref =	{LICS3},
	pages =		{155--164},
	title =		{Petri nets are monoids: a new algebraic foundation for net theory}
}

@article{Mey85,
	author =	{A.R. Meyer},
	year =		1985,
	journal =	eatcs,
	pages =		{83--84},
	title =		{Report on the $5^{th}$ international workshop on the semantics of programming languages in {Bad Honnef}},
	volume =	27
}

@article{Mne85,
	author =	{G.J. Milne},
	year =		1985,
	journal =	toplas,
	number =	2,
	pages =		{270--298},
	title =		{{CIRCAL} and the Representation of Communication,
				 Concurrency, and Time},
	volume =	7
}

@article{MM79,
author="G. Milne and R. Milner",
title="Concurrent processes and their syntax",
journal=jacm,
volume=26,
number=2,
pages="302--321",
year=1979}

@inproceedings{Mi71,
	author =	{R. Milner},
	title =		{An Algebraic Definition of Simulation between Programs},
	pages =		{481--489},
	booktitle =	{Proceedings $2^{nd}$ Joint Conference on Artificial
				 Intelligence},
	year = 		1971,
	publisher =	{British Computer Society Press, London},
	note =		{Also available as Report No.\ CS-205,
			 Computer Science Department, Stanford University,
			 February 1971}
}

@inproceedings{Mi73,
author="R. Milner",
title="Processes: A Mathematical Model of Computing Agents",
pages="158--173",
booktitle="Proceedings Logic Colloquium 1973",
editor="H.E. Rose and J.C. Shepherdson",
year=1973,
publisher=nholland}

@inproceedings{Mi73a,
author="R. Milner",
title="An approach to the semantics of parallel programs",
booktitle="Proceedings Convegno di Informatica Teorica, Pisa",
year=1973,
pages="283--302"}

@article{Mi77,
	author =	{R. Milner},
	title =		{Fully abstract models of typed $\lambda$-calculi},
	journal =	tcs,
	volume =	4,
	pages =		{1--22},
	year =		1977
}

@inproceedings{Mi78,
title="Synthesis of Communicating Behaviour",
author="R. Milner",
booktitle="Proceedings of MFCS, {\rm LNCS 64}",
year=1978,
editor="J. Winkowski",
pages="71--83"}

@article{Mi79,
author="R. Milner",
title="Flowgraphs and flow algebras",
journal=jacm,
volume=26,
number=4,
pages="794--818",
year=1979}

@book{Mi80,
	author =	{R. Milner},
	year =		1980,
	publisher =	springer,
	series =	lncs,
	volume =	92,
	title =		{A Calculus of Communicating Systems}
}

@inproceedings{Mi81,
	author =	{R. Milner},
	booktitle =	caap81,
	year =		1981,
	series =	lncs,
	volume =	112,
	editor =	{G. Astesiano and C. Bohm},
	publisher =	springer,
	pages =		{25--34},
	title =		{Modal characterisation of observable machine behaviour}
}

@article{Mi83,
	author =	{R. Milner},
	year =		1983,
	journal =	tcs,
	pages =		{267--310},
	title =		{Calculi for synchrony and asynchrony},
	volume =	25
}

@article{Mi84,
	author =	{R. Milner},
	year =		1984,
	journal =	jcss,
	pages =		{439--466},
	title =		{A complete inference system for a class of regular behaviours},
	volume =	28
}

@inproceedings{Mi85,
	author =	{R. Milner},
	crossref =	{seminar-on-concurrency},
	volume =	197,
	pages =		{197--220},
	title =		{Lectures on a Calculus for Communicating Systems}
}

@inproceedings{Mi86,
	author =	{R. Milner},
	booktitle =	{IFIP Information processing 86},
	year =		1986,
	editor =	{H.--J. Kugler},
	publisher =	nholland,
	pages =		{507--514},
	title =		{Process constructors and interpretations}
}

@techreport{Mi86a,
	author =	{R. Milner},
	year =		1986,
	institution =	lfcs,
	number =	{ECS-LFCS-86-8},
	title =		{A complete axiomatisation for observational
			 congruence of finite-state behaviours}
}

@inproceedings{Mi88,
	author =	{R. Milner},
	booktitle =	{Fifth Generation Computer Systems 1988 (FGCS'88),
				 {\rm Tokyo, Japan}},
	year =		1988,
	pages =		{321--326},
	title =		{Interpreting one concurrent calculus in another}
}

@book{Mi89,
	author =	{R. Milner},
	year =		1989,
	address =	{Englewood Cliffs},
	publisher =	prentice,
	title =		{Communication and Concurrency}
}


@inproceedings{Mi90,
	author =	{R. Milner},
	title =		{Functions as Processes},
	crossref = 	{ICALP17},
	pages =		{167--180}
}

@techreport{Mi90a,
	author =	{R. Milner},
	title =		{Functions as Processes},
	year =		1990,
	type =		{Res. Report},
	number =	1154,
	institution =	{INRIA},
	note =		{To appear in {\em Journal of Mathematical Structures
			in Computer Science}}
}

@article{MM90,
	author =	{R. Milner and F. Moller},
	year =		1990,
	journal =	eatcs,
	pages =		{226--232},
	title =		{Unique decomposition of processes},
	volume =	41
}

@article{MPW92,
	author =	{R. Milner and J. Parrow and D. Walker},
	year =		1992,
	title =		{A Calculus of Mobile Processes, {Part I + II}},
	journal =	iandcomp,
	volume =	100,
	number =	1,
	pages =		{1--77}
}

@book{Mind98,
	author =	{{MindShare, Inc,} and D. Anderson},
	year =		1998,
	publisher =	{Addison Wesley},
	title =		{{FireWire} System Architecture: {IEEE} 1394}
}

@misc{Defense91,
	author =	{U.K. {Ministry of Defence}},
	year =		1991,
	month =		apr,
	title =		{{Interim Defence Standard 00-55:
			The procurement of safety critical software in
			defence equipment, Part I, Issue I: Requirements;
			Part 2, Issue 1: Guidance}}
}

@inproceedings{MWLF03,
author={Sayan Mitra and Yong Wang and Nancy Lynch and Eric Feron},
title={Safety Verification of Model Helicopter Controller
using Hybrid Input/Output Automata},
booktitle={Hybrid Systems: Computation and Control (HSCC'03),
{\rm Prague, the Czech Republic}},
publisher={Lecture Notes in Computer Science, Springer-Verlag},
pages={259-273},
year={2003}
}

@phdthesis{Mo89,
        author =        {F. Moller},
        year =          1989,
        school =        {Report CST-59-89, Department of Computer
Science, University of Edinburgh},
        title =         {Axioms for concurrency}
}

@inproceedings{Mo90,
	author =	{F. Moller},
	crossref =	{ICALP17},
	pages =		{752--764},
	title =		{The importance of the left merge operator in process algebras}
}

@inproceedings{Mo90a,
	author =	{F. Moller},
	crossref =	{LICS5},
	pages =		{142--153},
	title =		{The nonexistence of finite axiomatisations for {CCS} congruences}
}

@manual{Mo92,
	author =	{F. Moller},
	title =		{{The Edinburgh Concurrency Workbench (Version 6.1)}},
	year =		1992,
	month =		oct,
	organization =	{Department of Computer Science,
			 University of Edinburgh}
}

@article{MollerRS02,
  author    = {M.O. M{\"o}ller and H. Rue{\ss} and M. Sorea},
  title     = {Predicate Abstraction for Dense Real-Time System.},
  journal   = {Electr. Notes Theor. Comput. Sci.},
  volume    = {65},
  number    = {6},
  year      = {2002}
}

@misc{MS94,
	author =	{F. Moller and S.A. Smolka},
	year =		1994,
	title =		{On the Computational Complexity of Bisimulation},
	note =		{To appear in {\em Computing Surveys}}
}

@inproceedings{MoTo90,
	author =	{F. Moller and C. Tofts},
	crossref =	{CONCUR90},
	pages =		{401--415},
	title =		{A Temporal Calculus of Communicating Systems}
}

@inproceedings{MoTo92,
	author =	{F. Moller and C. Tofts},
	crossref =	{ICALP19},
	title =		{Behavioural abstraction in {TCCS}}
}

@book{Mo76,
	author =	{J.D. Monk},
	year =		1976,
	publisher =	springer,
	title =		{Mathematical Logic}
}

@incollection{MS89,
	author =	{U. Montanari and M. Sgamma},
	booktitle =	{Resolution Of Equations In Algebraic Structures, Vol. I, Algebraic Techniques},
	year =		1989,
	editor =	{H. A\"{\i}t--Kaci and M. Nivat},
	publisher =	{Academic Press},
	pages =		{293--319},
	title =		{Canonical representatives for observational equivalence classes}
}

@inproceedings{MS81,
	author =	{U. Montanari and C. Simonelli},
	booktitle =	{Proceedings \'{E}cole de Printemps on Concurrency and Petri Nets, {\rm Colleville, 1980}},
	year =		1981,
	note =		{Available as Technical Report PFI-Cnet 7, Dip. Informatica, Univ. Pisa},
	title =		{On distinguishing concurrency from nondeterminism}
}

@article{Metal97,
	author =	{J.R. Moonen and J.M.T. Romijn and O. Sies
			and J.G. Springintveld and L.M.G. Feijs and R.L.C.
     			Koymans},
	journal =	{Testing of Communicating Systems},
	publisher =	{Chapman \& Hall},
	year =		1997,
	pages =		{432--447},
	title =		{A two-level approach to automated conformance
			 testing of VHDL designs}
}

@article{Moo94,
	author =	{J.S. Moore},
	year =		1994,
	journal =	fac,
	volume =	6,
	number =	1,
	pages =		{60--91},
	title =		{A Formal Model of Asynchronous Communication and
			its Use in Mechanically Verifying a Biphase
			Mark Protocol}
}

@incollection{Mu90,
	author =	{J.C. Mulder},
	crossref =	{Ba90},
	pages =		{147--171},
	title =		{On the {Amoeba} protocol}
}

@incollection{MW90,
	author =	{J.C. Mulder and W.P. Weijland},
	crossref =	{Ba90},
	pages =		{127--145},
	title =		{Verification of an algorithm for log-time sorting by square comparison}
}

@phdthesis{Mu85,
	author =	{S.J. Mullender},
	address =	{Amsterdam},
	year =		1985,
	school =	{Free University},
	title =		{Distributed operating system design}
}

@article{Muller85,
	author =	{K. M\"{u}ller},
	year =		1985,
	journal =	eik,
	pages =		{171--199},
	title =		{Constructable {Petri} nets},
	volume =	21
}

@phdthesis{Mul98,
	author =	{O. Mueller},
	month =		sep,
	year =		1998,
	school =	{Technical University of Munich},
	title =		{A Verification Environment for I/O Automata Based
			on Formalized Meta-Theory}
}

@inproceedings{MN97,
	author =	{O. Mueller and T. Nipkow},
	title =		{Traces of {I/O}-Automata in {Isabelle/HOLCF}},
	crossref =	{TAPSOFT97},
	pages =		{580--594}
}

@article{Mu65,
author="V.L. Murski\v{i}",
title="The existence in three-valued logic of a closed class with finite
basis, not having a finite complete system of identities",
journal="Doklady Akademii Nauk SSSR",
year=1965,
volume=163,
pages="815-818",
note="English translation in: {\it Soviet Mathematics Doklady}, 6:1020-1024,
1965."
}

@inproceedings{Mus80,
author="D.L. Musser",
title="On Proving Inductive Properties of Abstract Data Types",
crossref="POPL7",
pages="154--162",
}

@phdthesis{NaT94,
	author =	{S. Nadjm-Tehrani},
	year =		1994,
	school =	{Link\"{o}ping University, Link\"{o}ping, Sweden},
	title =		{Reactive Systems in Physical Environments:
			Compositional Modelling and Framework
			for Verification},
	note =		{Dissertation no.~338}
}

@inproceedings{Nam97,
	author =	{K.S. Namjoshi},
	booktitle =	{Proceedings 17th Conference on Foundations of
			 Software Technology and Theoretical Computer Science,
				{\rm Kharagpur, India}},
	year =		1997,
	month =		dec,
	editor =	{S. Ramesh and G. Sivakumar},
	series =	lncs,
	volume =	1346,
	publisher =	springer,
	pages =		{284--296},
	title =		{A Simple Characterization of Stuttering Bisimulation}
}

@inproceedings{NK93,
	title =		{Models for hybrid systems: Automata,
			topologies, controllability, observability},
	author =	{A. Nerode and W. Kohn},
	crossref =	{Hybrid93},
	pages =		{317--356}
}

@inproceedings{NY92,
	author =	{A. Nerode and A. Yakhnis},
	year =		1992,
	title =		{Concurrent Programs as Strategies in Games},
	booktitle =	{Logic from Computer Science},
	editor =	{Y. Moscho\-vakis},
	publisher =	springer
}

@inproceedings{Ne92,
	author =	{M. Nesi},
	title =		{Formalizing a Modal Logic for {CCS} in the {HOL}
				Theorem Prover},
	booktitle =	{Proceedings International Workshop on Higher-Order
			Logic Theorem Proving and Its Applications,
				{\rm Leuven, Belgium}},
	year =		1992,
	pages =		{495--507}
}

@article{Newman04,
	author=		"M.E.J. Newman",
	title=		"Detecting community structure in networks",
	journal=	"The European Physical Journal B",
	year=		2004,
	volume=		38,
	pages= 		"321--330",
        doi =		{10.1140/epjb/e2004-00124-y}
}

@article{New42,
author="M.H.A. Newman",
title="On Theories with a Combinatorial Definition of Equivalence",
journal="Annals of Mathematics",
year=1942,
volume=43,
number=2,
pages= "223--243"}


@inproceedings{NOSY93,
	title =		{An approach to the description and analysis of
			hybrid systems},
	author =	{X. Nicollin and A. Olivero and J. Sifakis
				and S. Yovine},
	crossref =	{Hybrid93},
	pages =		{149--178}
}

@inproceedings{NRSV90,
	title =		{{ATP}: An Algebra for Timed Processes},
	author =	{X. Nicollin and J.-L. Richier and J. Sifakis and
				 J. Voiron},
	year =		1990,
	editor =	{M. Broy and C.B. Jones},
	booktitle = 	gallilea,
	pages =		{402--429}
}

@inproceedings{NS91a,
	author =	{X. Nicollin and J. Sifakis},
	crossref =	{CAV3},
	pages =		{376--398},
	title =		{An Overview and Synthesis on Timed Process Algebras}
}

@article{NS94,
        author =        {X. Nicollin and J. Sifakis},
        year =          1994,
	journal =	iandcomp,
        pages =         {131--178},
        title =         {The Algebra of Timed Processes {ATP}:
			 Theory and Application},
        volume =        114,
        number =        1
}

@article{NSY93,
	author =	{X. Nicollin and J. Sifakis and S. Yovine},
	year =		1993,
	journal =	acta,
	volume =	30,
	number =	2,
	pages =		{181--202},
	title =		{From {ATP} to Timed Graphs and Hybrid Systems}
}

@article{NSY92a,
	author =	{X. Nicollin and J. Sifakis and S. Yovine},
	title =		{Compiling Real-Time Specifications into
				Extended Automata},
	journal =	{IEEE Transactions on Software Engineering},
	volume =	18,
	number =	9,
	year =		1992,
	month =		sep,
	pages =		{794--804}
}

@inproceedings{Ni87,
	author =	{M. Nielsen},
	crossref =	{advances-in-Petri-nets-87-2},
	pages =		{393--415},
	title =		{{CCS} -- and its relationship to net theory}
}

@inproceedings{NEL89,
	author =	{M. Nielsen and U. Engberg and K.{\bf S}. Larsen},
	crossref =	{REXlinear},
	pages =		{523--548},
	title =		{Fully abstract models for a process language with refinement}
}

@article{NPW81,
	author =	{M. Nielsen and G.D. Plotkin and G. Winskel},
	year =		1981,
	journal =	tcs,
	number =	1,
	pages =		{85--108},
	title =		{Petri nets, event structures and domains, part {I}},
	volume =	13
}

@inproceedings{NT84,
	author =	{M. Nielsen and P.S. Thiagarajan},
	booktitle =	fsttcs5,
	year =		1984,
	editor =	{M. Joseph and R. Shyamasundar},
	series =	lncs,
	volume =	181,
	publisher =	springer,
	pages =		{89--118},
	title =		{Degrees of non-determinism and concurrency: a {Petri} net view}
}

@phdthesis{Nie03,
	author =	{O. Niese},
	year =		2003,
	school =	{University of Dortmund},
	title =		{An Integrated Approach to Testing Complex Systems}
}

@incollection{Ni90,
	author =	{E.R. Nieuwland},
	crossref =	{Ba90},
	pages =		{45--51},
	title =		{Proving mutual exclusion with process algebra}
}

@inproceedings{Nip90,
	author =	{T. Nipkow},
	crossref =	{REXrefinement},
	pages =		{561--591},
	title =		{Formal Verification of Data Type Refinement ---
				Theory and Practice}
}

@inproceedings{Nip91,
	author =	{T. Nipkow},
	crossref =	{LICS6},
	pages =		{342--349},
	title =		{Higher-Order Critical Pairs}
} 

@book{NPW02,
  author    = {T. Nipkow and L.C. Paulson and M. Wenzel},
  title     = {Isabelle/HOL - A Proof Assistant for Higher-Order Logic},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {2283},
  year      = {2002}
}

@inproceedings{NipS94,
	author =	{T. Nipkow and K. Slind},
	title=		{{I/O} Automata in {Isabelle/HOL}},
	booktitle=	{Types for Proofs and Programs},
	editor=		{P. Dybjer and B. Nord\-str\"om and J. Smith},
	publisher=	springer,
	series=		lncs,
	volume=		996,
	year=		1995,
	pages=		{101--119}
}

@misc{IDC95,
	author =	{IDC},
	year =		1995,
	month =		may,
	title =		{Software in industrie en diensten},
	howpublished =	{In Dutch. Published on the occasion of the conference
			``Software in Nederland: Motor voor nieuwe
			produkten en Diensten?'', Ministerie van
			Economische Zaken, Den Haag.  IDC Benelux}
}
@misc{NWO95,
	author =	{NWO},
	year =		1995,
	month =		may,
	title =		{Kennis verrijkt: Beleidsnota {NWO} 1996-2001},
	howpublished =	{Nederlandse Organisatie voor Wetenschappelijk
			Onderzoek, Den Haag}
}

@book{ODo85,
	author =	{M.J. O'Donell},
	year =		1985,
	publisher =	mitp,
	address =	{Cambridge, Massachusetts},
	title =		{Equational Logic as a Programming Language}
}

@inproceedings{Ol86,
	author =	{E.-R. Olderog},
	crossref =	{current-trends},
	pages =		{442--509},
	title =		{Process theory: semantics, specification and verification}
}

@inproceedings{Ol87,
	author =	{E.-R. Olderog},
	booktitle =	{Advances in Petri Nets 1987},
	year =		1987,
	editor =	{G. Rozenberg},
	series =	lncs,
	volume =	266,
	publisher =	springer,
	pages =		{196--223},
	title =		{Operational {Petri} net semantics for {CCSP}}
}

@book{Ol91,
	author =	{E.-R. Olderog},
	year =		1991,
	publisher =	cup,
	series =	{Cambridge Tracts in Theoretical Computer Science 23},
	title =		{Nets, Terms and Formulas:
		 Three Views of Concurrent Processes and Their Relationship}
}

@techreport{OGG88,
	author =	{E.-R. Olderog and U. Goltz and Glabbeek, R.J. van},
	institution = 	gmd,
	type =		{Arbeitspapiere der GMD},
	number =	320,
	address =	{Sankt Augustin},
	year =		1988,
	title =		{Combining compositionality and concurrency,
			 summary of a {GMD}-workshop,
			 {K}\"{o}nigswinter, {M}arch 1988}
}

@article{OH86,
	author =	{E.-R. Olderog and C.A.R. Hoare},
	year =		1986,
	journal =	acta,
	pages =		{9--66},
	title =		{Specification-oriented semantics for communicating
				 processes},
	volume =	23
}

@inproceedings{OSY94,
	author =	{A. Olivero and J. Sifakis and S. Yovine},
	crossref =	{CAV6},
	title =		{Using Abstractions for the Verification of
				Linear Hybrid Systems},
	pages = 	{81--94}
}

@book{OvdH89,
	author =	{A. Ollongren and H.J. van den Herik},
	title =		{Filosofie van de Informatica},
	year =		1989,
	publisher =	{Serie wetenschapsfilosofie, Martinus Nijhoff}
}

@inproceedings{Oetal03,
	author =	{C.M. Otero P\'erez and L. Steffens and Stok, P. van der
			and Loo, S. van and A. Alonso and J.F. Ru\'{\i}z and
			R.J. Bril and M.G. Valls},
	booktitle =	{Ambient Intelligence: Impact on embedded-system
				 design},
	year =		2003,
	editor =	{T. Basten and M. Geilen and Groot, H. de},
	publisher =	{Kluwer Academic Publishers},
	title =		{{QoS}-based Resource management for Ambient
			Intelligence},
	note =		{To appear}
}

@incollection{OvS94,
	author =	{A. Overkamp and Schuppen, J.J. van},
	booktitle =	{From Universal Morphisms to Megabytes -- a Baayen
			Space Odyssey},
	year =		1994,
	editor =	{K.R. Apt and A. Schrijver and N.M. Temme},
	publisher =	{CWI},
	address =	{Amsterdam},
	pages =		{453--467},
	title =		{Control of Discrete Event Systems -- Research at the
			Interface of Control Theory and Computer Science}
}

@article{OG76,
	author = 	{S. Owicki and D. Gries},
	title = 	{An axiomatic proof technique for parallel programs},
	journal = 	acta,
	volume = 	6,
	number = 	4,
	year = 		1976,
	pages = 	{319--340}
}

@article{ORSH95,
	author =	{S. Owre and J. Rushby and N. Shankar and
				 Henke, F. von},
	title = 	{Formal verification for fault-tolerant architectures:
			Prolegomena to the design of {PVS}},
	journal = 	{IEEE Transactions on Software Engineering},
	volume = 	21,
	number = 	2,
	year = 		1995,
	month =		feb,
	pages = 	{107--125}
}

@article{PT87,
	author =	{R. Paige and R. Tarjan},
	year =		1987,
	journal =	sicomp,
	number =	6,
	pages =		{973--989},
	title =		{Three partition refinement algorithms},
	volume =	16
}

@techreport{PP94,
        author = 	{C. Palamidessi and E. Pimentel},
	year =		1994,
	institution =	{Universita di Genova, DISI},
	number =	{DISI-TR-94-11},
	title =		{Embedding $\pi$-calculus into Concurrent
				Constraint Languages}
}

@article{Panangaden-Shanbhogue92,
	author =	{P. Panangaden and V. Shanbhogue},
	journal =	iandcomp,
	volume =	98,
	number =	1,
	pages =		{99--131},
	year =		1992,
	title =		{The expressive power of indeterminate dataflow
				 primitives}
}

@inproceedings{Panangaden-Shanbhogue-Stark90,
	author =	{P. Panangaden and V. Shanbhogue and E.W. Stark},
	pages =		{308--321},
	title =		{Stability and sequentiality in dataflow networks},
	crossref =	{ICALP17}
}

@inproceedings{Panangaden-Stark88,
	author =	{P. Panangaden and E.W. Stark},
	pages =		{439--454},
	title =		{Computations, residuals, and the power of
				 indeterminacy},
	crossref =	{ICALP15}
}

@inproceedings{PangFHV03,
  author    = {J. Pang and W. Fokkink and R.F.H. Hofman and R. Veldema},
  title     = {Model Checking a Cache Coherence Protocol for a {Java DSM} Implementation},
  year      = {2003},
  pages     = {238},
  booktitle     = {17th International Parallel and Distributed Processing Symposium
               (IPDPS 2003), 22-26 April 2003, Nice, France, CD-ROM/Abstracts
               Proceedings},
  publisher = {IEEE Computer Society}
}


@phdthesis{Pan97,
	author =	{F. Panken},
	year =		1997,
	school =	{University of Nijmegen},
	title =		{Design and Performance Evaluation of Multiple-Access Protocols
			for {ATM-based} Passive Optical Networks},
	note =		{Promotor: F.W. Vaandrager}
}

@book{PS82,
	author =	{C.H. Papadimitriou and K. Steiglitz},
	year =		1982,
	address =	{Englewood Cliffs},
	publisher =	prentice,
	title =		{Combinatorial Optimization -- Algorithms and
				Complexity}
}

@incollection{Par95,
	author =	{D.L. Parnas},
	crossref =	{HB95},
	title =		{Using Mathematical Descriptions in the Inspection
			of Safety-Critical Software}
}

@inproceedings{Pa81,
	author =	{D.M.R. Park},
	booktitle =	{$5^{th}$ GI Conference},
	year =		1981,
	editor =	{P. Deussen},
	series =	lncs,
	volume =	104,
	publisher =	springer,
	pages =		{167--183},
	title =		{Concurrency and automata on infinite sequences}
}

@phdthesis{Pa85,
	author =	{J. Parrow},
	year =		1985,
	school =	{Department of Computer Systems, Uppsala University},
	note =		{DoCS 85/03},
	title =		{Fairness Properties in Process Algebra --
		 With Applications in Communication Protocol Verification}
}


@techreport{Pa87,
  	author = 	{J. Parrow},
  	title = 	{Synchronization Flow Algebra},
  	institution = 	lfcs,
  	year =	 	1987,
  	number = 	{ECS-LFCS-87-35}
}

@inproceedings{Pa89,
	author =	{J. Parrow},
	booktitle =	{Proceedings PARLE'89, {\rm Eindhoven}, Vol. II
				 (Parallel Languages)},
	year =		1989,
	editor =	{E. Odijk and M. Rem and J.-C. Syre},
	publisher =	springer,
	series =	lncs,
	volume =	366,
	pages =		{389--405},
	title =		{The Expressive Power of Simple Parallelism},
	note =		{A revised and extended version is available as
			SICS Research Report R90016 and will appear in
			{\em Future Generation Computer Systems}}
}

@article{Pa90,
	author =	{J. Parrow},
	title =		{The Expressive Power of Parallelism},
	journal =	{Future Generation Computer Systems},
	volume =	6,
	pages =		{271--285},
	year =		1990
}

@misc{PS93,
	author =	{J. Parrow and P. Sj\"{o}din},
	year =		1993,
	title =		{The Complete Axiomatization of {Cs}-congruence}
}

@inproceedings{PH70,
        author =	{M.S. Paterson and C.E. Hewitt},
        title =		{Comparative Schematology},
        booktitle =	{Conf. Rec. ACM Conference on
                		Concurrent Systems and Parallel Computation},
        pages = 	{119-127},
        year =		1970
}

@inproceedings{Paul84,
author="E. Paul",
title="Proof by induction in equational theories with relations between
constructors",
booktitle="$9^{th}$ Coll. on Trees in Algebra and Programming,
{\rm Bordeaux, France}",
year=1984,
editor="B. Courcelle",
pages="211--225",
publisher=cup,
address="London"
}

@inproceedings{Pau93,
	author =	{C. Paulin-Mohring},
	crossref =	{TLCA93},
	pages =		{328-345},
	title =		{Inductive definitions in the system {C}oq.
				 {R}ules and properties}
}

@inproceedings{Pau89,
	author =	{L.C. Paulson},
	title =		{Isabelle: The next 700 Theorem Provers},
	booktitle =	{Logic and Computer Science},
	year =		1989,
	editor =	{P. Odifreddi},
	publisher =	{Academic Press}
}

@incollection{PHH95,
	author =	{J. Peleska and U. Hamer and H.-M. Hoercher},
	crossref =	{HB95},
	title =		{The Airbus {A330/340} Cabin Communication System
			--- A {Z} Application}
}

@misc{PED86,
	year =		1986,
	key =		{Penguin Books},
	publisher =	{Penguin Books},
	title =		{The new {P}enguin {E}nglish dictionary}
}

@inproceedings{PerathonerEtAl07,
 author = {S. Perathoner and E. Wandeler and L. Thiele and A. Hamann and S. Schliecker and R. Henia and R. Racu and R. Ernst and M. Gonz\'{a}lez Harbour},
 title = {Influence of different system abstractions on the performance analysis of distributed real-time systems},
 booktitle = {EMSOFT '07: Proceedings of the 7th ACM \& IEEE international conference on Embedded software},
 year = {2007},
 isbn = {978-1-59593-825-1},
 pages = {193--202},
 location = {Salzburg, Austria},
 doi = {http://doi.acm.org/10.1145/1289927.1289959},
 publisher = {ACM},
 address = {New York, NY, USA},
 }

@article{Peterson81,
  author    = {G.L. Peterson},
  title     = {Myths About the Mutual Exclusion Problem},
  journal   = {Inf. Process. Lett.},
  volume    = {12},
  number    = {3},
  year      = {1981},
  pages     = {115-116}
}

@article{Pet82,
	author =	{G.L. Peterson},
	year =		1982,
	month =		oct,
	journal =	toplas,
	volume =	4,
	number =	4,
	pages =		{758--762},
	title =		{An {$O(n \log n)$} Unidirectional Algorithm for
				the Circular Extrema Problem}
}

@book{Pet95,
	author =	{I. Peterson},
	title =		{Fatal Defect: Chasing Killer Computer Bugs},
	address =	{New York},
	publisher =	{Random House, Inc.},
	year =		1995
}


@inproceedings{PHK95,
        author =        {A. Petrenko and T. Higashino and T. Kaji},
        booktitle =     {Proceedings of the 8th International Workshop
                  	on Protocol Test Systems  {IWPTS} '95,
                        {\rm Paris, France}},
        editor =        {A. Cavalli and S. Budkowski},
        year =          1995,
        pages =         {307--322},
        title =         {Handling redundant and additional states in
                  	protocol testing}
}

@techreport{Pe62,
	author =	{C.A. Petri},
	address =	{Bonn},
	year =		1962,
	institution =	{Institut f\"{u}r Instrumentelle Mathematik},
	type =		{Schriften des IIM Nr.},
	number =	2,
	title =		{Kommunikation mit {A}utomaten}
}

@techreport{Pe77,
	author =	{C.A. Petri},
	address =	{Sankt Augustin},
	year =		1977,
	institution =	gmd,
	type =		{Interner Bericht},
	number =	{ISF-77-05},
	title =		{Non-sequential processes}
}

@incollection{Pe87,
	author =	{C.A. Petri},
	booktitle =	{Advances in Petri Nets 1986, Part I, Petri Nets: Central Models and Their Properties},
	year =		1987,
	editor =	{W. Brauer and W. Reisig and G. Rozenberg},
	series =	lncs,
	volume =	254,
	publisher =	springer,
	pages =		{4--24},
	title =		{Concurrency theory}
}

@misc{Phil,
author="I.C.C. Phillips",
title="{CCS} with Broadcast Stability",
note="Unpublished manuscript"}

@article{Ph87,
	author =	{I.C.C. Phillips},
	year =		1987,
	journal =	tcs,
	pages =		{241--284},
	title =		{Refusal testing},
	volume =	50
}

@misc{FME_Applications_Database,
	author =	{N. Plat},
	title =		{The {F}ormal {M}ethods {E}urope applications database},
	note =		{URL {\tt http://www.csr.ncl.ac.uk/projects/FME/InfRes/applications/}}
}

@techreport{PL/I68,
title="Formal Definition of {PL/I} Version 1",
author="PL/I definition Group",
type="Report",
number="TR25.071",
year=1986,
institution="American Nat. Standards Institute"}

@article{Pl75,
author="G.D. Plotkin",
title="Call-by-Name, Call-by-value and The Lambda-Calculus",
journal=tcs,
volume=1,
year=1975,
pages="125--159"}

@article{Pl77,
author="G.D. Plotkin",
title="{LCF} Considered as a Programming Language",
journal=tcs,
year=1977,
volume=5,
pages="223--256"}

@techreport{Pl81,
	author =	{G.D. Plotkin},
	year =		1981,
	institution =	{Computer Science Department, Aarhus University},
	type =		{Report},
	number =	{DAIMI FN-19},
	title =		{A structural approach to operational semantics}
}

@inproceedings{Pl83,
	author =	{G.D. Plotkin},
	booktitle =	garmisch,
	address =	{Amsterdam},
	year =		1983,
	editor =	{D. Bj\mbox{\o}rner},
	publisher =	nholland,
	pages =		{199--225},
	title =		{An operational semantics for {CSP}}
}


@Misc{rfc826,
title =         {An {E}thernet Address Resolution Protocol {(RFC 826)}},
author =        {D.C. Plummer},
note =          {\texttt{http://www.ietf.org/rfc/rfc826.txt}},
year =          {1982},
month =         {November}
}


@inproceedings{Pn85,
	author =	{A. Pnueli},
	crossref =	{ICALP12},
	pages =		{15--32},
	title =		{Linear and branching structures in the semantics
				 and logics of reactive systems}
}

@inproceedings{Pn94,
	author =	{A. Pnueli},
	title =		{Development of Hybrid Systems},
	crossref =	{FTRTFT94},
	pages =		{77--85}
}

@inproceedings{PSL97,
	author =	{A. Pogosyants and R. Segala and N.A. Lynch},
	booktitle =	{Proceedings of 11th International Workshop on
			Distributed Algorithms (WDAG'97),
			{\rm Saarbrucken, Germany, September 1997}},
	year =		1997,
	editor =	{M. Mavronicolas and Ph. Tsigas},
	series =	lncs,
	volume =	1320,
	publisher =	springer,
	pages =		{111--125},
	title =		{Verification of the Randomized Consensus Algorithm
			of {A}spnes and {H}erlihy: a Case Study},
	note =		{Also, Technical Memo MIT/LCS/TM-555, Laboratory for
		Computer Science, Massachusetts Institute of Technology}
}

@article{PSL00,
	author =	{A. Pogosyants and R. Segala and N.A. Lynch},
	year =		2000,
        journal =       discomp,
	volume =	13,
        number =        3,
	pages =		{155--186},
	title =		{Verification of the Randomized Consensus Algorithm
			of {A}spnes and {H}erlihy: a Case Study}
}

@book{PW98,
	title =		{Introduction to Mathematical Systems Theory:
			A Behavioural Approach},
	author =	{J.W. Polderman and J.C. Willems},
	publisher = 	springer,
	year = 		1998,
	series =	{Texts in Applied Mathematics},
	volume =	26
}

@inproceedings{Pm86,
	author =	{L. Pomello},
	booktitle =	{Advances in Petri Nets 1985},
	year =		1986,
	editor =	{G. Rozenberg},
	series =	lncs,
	volume =	222,
	publisher =	springer,
	pages =		{381--400},
	title =		{{Some equivalence notions for concurrent systems
					 -- An overview}}
}

@phdthesis{Pm88,
	author =	{L. Pomello},
	type =		{Tesi di Dottorato in Informatica},
	school =	{University of Milano},
	year =		1988,
	title =		{Osservatore, reti di {Petri}, processi}
}

@article{Po91,
  	author=         {A. Ponse},
  	journal =       i&c,
  	pages =         {192--217},
  	title=          {Process Expressions and {H}oare's Logic},
  	year=           1991,
  	volume =        95,
  	number=         2
}

@techreport{Po92,
	author =	{A. Ponse},
	year =		1992,
	month =		jan,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R9207},
	address =	{Amsterdam},
	title =		{Computable Processes and Bisimulation Equivalence}
}

@techreport{Po92b,
author =        {A. Ponse},
year =          1992,
type =          {Report},
institution =   {Programming Research Group, University of Amsterdam},
number =        {P9217},
title =         {Process Algebra and Dynamic Logic}}

@incollection{Pon94,
        author =        {A. Ponse},
        year =          1994,
        publisher =     {MIT Press},
        pages =         {125--148},
        title =         {Process Algebra and Dynamic Logic},
        editor =        {Eijck, J. van and A. Visser},
        booktitle =     {Logic and Information Flow}
}

@techreport{PoV89,
	author =        {A. Ponse and Vries, F.J. de},
	year =          1989,
	institution =   cwi,
	type =          {Report},
	number =        {CS-R8957},
	address =       {Amsterdam},
	title =         {Strong completeness for {H}oare logics of
				recursive processes: an infinitary approach}
}

@book{Pop63,
	author=		"K.R. Popper",
	title=		"Conjectures and Refutations",
	year=		1963,
	publisher=	"Routledge and Kegan Paul"
}

@techreport{Pot90,
	author =	{L. Pottier},
	address =	{Sophia Antipolis},
	year =		1990,
	month =		oct,
	type =		{Rapports de Recherche},
	number =	1292,
	institution =	{INRIA},
	title =		{Solutions Minimales des Syst\`{e}mes Diophantiens
				 Lin\'{e}aires: Bornes et Algorithmes}
}

@inproceedings{Pr81,
	author =	{V.R. Pratt},
	booktitle =	focs22,
	address =	{New York},
	year =		1981,
	publisher =	{IEEE},
	pages =		{421--427},
	title =		{A decidable mu-calculus}
}

@inproceedings{Pr82,
	author =	{V.R. Pratt},
	crossref =	{POPL9},
	pages =		{213--223},
	title =		{On the composition of processes}
}

@inproceedings{Pr85,
	author =	{V.R. Pratt},
	crossref =	{seminar-on-concurrency},
	pages =		{180--196},
	title =		{The pomset model of parallel processes:
				 unifying the temporal and the spatial}
}

@article{Pr86,
	author =	{V.R. Pratt},
	year =		1986,
	journal =	ijpp,
	number =	1,
	pages =		{33--71},
	title =		{Modeling concurrency with partial orders},
	volume =	15
}

@unpublished{Pr90,
	author =	{V.R. Pratt},
	title =		{{DO} the great debate {CONTINUE}},
	month =		{13 November},
	year =		1990,
	note =		{On: Concurrency electronic forum,
			A.R. Meyer moderator,
			{\sf concurrency@theory.lcs.mit.edu}}
}

@inproceedings{Pretschner05,
  author    = {A. Pretschner},
  title     = {Model-Based Testing in Practice},
  year      = {2005},
  pages     = {537-541},
  editor    = {J. Fitzgerald and
               I.J. Hayes and
               A. Tarlecki},
  booktitle     = {FM 2005: Formal Methods, International Symposium of Formal
               Methods Europe, Newcastle, UK, July 18-22, 2005, Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {3582}
}

@inproceedings{PP88,
title="Weakly Perfect Model Semantics for Logic Programs",
author="H. Przymusinska and T.C. Przymusinski",
pages="1106--1120",
booktitle="Proceedings $5^{th}$ Logic Programming Symposium",
year=1988,
editor="R. Kowalski and K. Bowen",
publisher="MIT press"
}

@incollection{Prz87,
	author =	{T.C. Przymusinski},
	booktitle =	{Foundations of Deductive Databases and Logic Programming},
	year =		1987,
	editor =	{Jack Minker},
	publisher =	{Morgan Kaufmann Publishers, Inc.},
	address =	{Los Altos, California},
	pages =		{193--216},
	title =		{On the declarative semantics of deductive databases and logic programs}
}

@inproceedings{Prz89,
author="T.C. Przymusinski",
title="Every Logic Program has a Natural Stratification and an Iterated
Least Fixed Point Model",
booktitle=pods8,
year=1989,
pages="11--21"
}

@inproceedings{PV94,
	author =	{A. Puri and P. Varaiya},
	crossref =	{CAV6},
	title =		{Decidability of Hybrid Systems with
				Rectangular Differential Inclusions},
	pages = 	{95--104}
}

@article{Pussente09,
	title = "An algorithm for clock synchronization with the gradient property in sensor networks",
	journal = "Journal of Parallel and Distributed Computing",
	volume = "69",
	number = "3",
	pages = "261 - 265",
	year = "2009",
	issn = "0743-7315",
	doi = "DOI: 10.1016/j.jpdc.2008.11.001",
	url = "http://www.sciencedirect.com/science/article/B6WKJ-4TYJTY5-1/2/38716d7d9f37c51edb8ba05e508fa2ce",
	author = "R.M. Pussente and V.C. Barbosa",
	keywords = "Distributed computing",
	keywords = "Sensor networks",
	keywords = "Clock synchronization",
	keywords = "Gradient property in clock synchronization"
}



@inproceedings{Qin91,
	author =	{H. Qin},
	title =		{Efficient Verification of Determinate Processes},
	crossref =	{CONCUR91},
	pages =		{471--494}
}

@misc{del52,
  author = {QUASIMODO},
  title = {Preliminary description of case studies},
  year = {2009},
  month = jan,
  note = {Deliverable 5.2 from the FP7 ICT STREP project 214755 (QUASIMODO)},
  url = {http://www.quasimodo.aau.dk/safe_html/internal/Deliverables/Final/Deliverable-5.2.pdf}
}


@misc{del55,
  author = {QUASIMODO},
  title = {Case Studies: Models},
  year = {2009},
  month = jan,
  note = {Deliverable 5.5 from the FP7 ICT STREP project 214755 (QUASIMODO)},
  url = {http://www.quasimodo.aau.dk/safe_html/internal/Deliverables/Final/Deliverable-5.5.pdf}
}


@inproceedings{QAF89,
	author =	{J. Quemada and A. Azcorra and A. Fernandez},
	crossref =	{FORTE2},
	title =		{{TIC: A timed calculus for LOTOS}}
}

@inproceedings{QF87,
	author =	{J. Quemada and A. Fernandez},
	crossref =	{PSTV7},
	title =		{Introduction of quantitative relative time
				 into {LOTOS}},
	pages =		{105--121}
}

@inproceedings{RSS95,
	author =	{S. Rajan and N. Shankar and M.K. Srivas},
	crossref =	{CAV7},
	title =		{An integration of model-checking with automated
			proof checking},
	pages =		{84--97}
}

@inproceedings{Ram87,
     	author =        {S. Ramesh},
        publisher =     springer,
        pages =         {387--401},
        series =        lncs,
        volume =        259,
        title =         {A New and Efficient Implementation of
          			Multiprocess Synchronization},
	booktitle =     {Proceedings PARLE conference, {\rm Eindhoven}, Vol. II
			 	(Parallel Architectures)},
        year =          1987,
        editor =        {J.W. de Bakker and A.J. Nijman and P.C. Treleaven}
}

@article{Ra87,
	author =	{A. Rabinovich},
	year =		1987,
	journal =	eatcs,
	title =		{Pomset semantics is consistent with
				 data flow semantics},
	volume =	32
}

@unpublished{Rab91,
author="A. Rabinovich",
title="Checking Equivalences Between Concurrent Systems of Finite Agents
(Draft of Extended Abstract)",
note="Unpublished report",
year="1991"}

@article{BT88,
	author =	{A. Rabinovich and B.A. Trakhtenbrot},
	year =		1988,
	journal =	funinf,
	number =	4,
	pages =		{357--404},
	title =		{Behavior Structures and Nets},
	volume =	11
}

@inproceedings{RT90,
	author =	{A. Rabinovich and B.A. Trakhtenbrot},
	crossref =	{ICALP17},
	pages =		{294--307},
	title =		{Communication among Relations}
}

@article{RSBM09,
  author    = {H. Raffelt and B. Steffen and T. Berg and T. Margaria},
  title     = {LearnLib: a framework for extrapolating behavioral models},
  journal   = {STTT},
  volume    = {11},
  number    = {5},
  year      = {2009},
  pages     = {393-407}
}

@book{Rai86,
	author =	{M.H. Raibert},
	title =		{Legged Robots that Balance},
	address =	{Cambridge, MA},
	publisher =	{MIT Press},
	year =		1986
}

@article{RW89,
	author =	{P.J.G. Ramadge and W.M. Wonham},
	title =		{The control of discrete event systems},
	journal = 	{Proceedings of the IEEE},
	volume =	77,
	year =		1989,
	pages =		{81--98}
}	

@book{RRW94,
	editor =	{B. Randell and G. Ringland and B. Wulf},
	title =		{Software 2000: a View of the Future},
	publisher =	{ICL and the Commission of the European
				Communities},
	address =	{Brussels},
	year =		1994
}

@article{RRH93,
	author =	{A.P. Ravn and H. Rischel and K.M. Hansen},
	title =		{Specifying and Verifying Requirements of
				Real-Time Systems},
	journal = 	ieeese,
	volume =	19,
	number =	1,
	year =		1993,
	month =		jan,
	pages =		{41--55}
}	

@unpublished{Reed91,
	author =	{G.M. Reed},
	year =		1991,
	title =		{A Hierarchy of Domains for Real-Time Distributed
				 Computing},
	note =		{In {\em Proceedings MFPLS '89}, LNCS}
}

@article{RR88,
	author =	{G.M. Reed and A.W. Roscoe},
	year = 		1988,
	title =		{A Timed Model for Communicating Sequential Processes},
	journal =	tcs,
	volume =	58,
	pages =		{249--261}
}

@inproceedings{RWZ92,
	author =	{N. Reingold and D.-W. Wang and L.D. Zuck},
	crossref =	{CONCUR92},
	pages =		{325--339},
	title =		{Games {I/O} Automata Play}
}

@inproceedings{Re84,
	author =	{W. Reisig},
	crossref =	{ICALP11},
	pages =		{403--413},
	title =		{Partial order semantics versus interleaving semantics
			 for {CSP}-like languages and its impact on fairness}
}

@book{Re85,
	author =	{W. Reisig},
	year =		1985,
	publisher =	springer,
	series =	{EATCS Monographs on Theoretical Computer Science, Volume 4},
	title =		{Petri Nets -- An Introduction}
}

@techreport{Re87,
	author =	{W. Reisig},
	institution =	gmd,
	type =		{Arbeitspapiere der GMD},
	number =	277,
	address =	{Sankt Augustin},
	year =		1987,
	title =		{Towards a temporal logic for true concurrency part {I}: linear time propositional logic}
}

@inproceedings{Re87a,
	author =	{W. Reisig},
	crossref =	{advances-in-Petri-nets-87-2},
	publisher =	springer,
	pages =		{63--96},
	title =		{Petri nets in software engineering}
}

@article{Reiter80,
author="R. Reiter",
title="A logic for default reasoning",
journal=ai,
year=1980,
volume="13",
pages="81--132"
}

@inproceedings{Rem83,
	author =	{M. Rem},
	booktitle =	{$4^{th}$ Advanced Course on Found. of Comp. Sci., part 2},
	address =	{Amsterdam},
	year =		1983,
	editor =	{de Bakker, J.W. and van Leeuwen, J.},
	pages =		{1--44},
	series =	{MC Tract 159},
	title =		{Partially ordered computations, with applications to {VLSI} design}
}

@inproceedings{Rem87,
	author =	{M. Rem},
	booktitle =	{Proceedings PARLE conference, {\rm Eindhoven},
			 Vol. I (Parallel Architectures)},
	year =		1987,
	editor =	{Bakker, J.W. de and A.J. Nijman and P.C. Treleaven},
	series =	lncs,
	volume =	258,
	publisher =	springer,
	pages =		{14--33},
	title =		{Trace theory and systolic computations}
}

@InProceedings{Ren94,
  Author="A. Rensink",
  Title="Extraordinals: An Equational Theory of Posets",
  Editor="Maarten de Rijke",
  Booktitle="Combining Structures, Logics and Theories",
  Publisher="Copenhagen Business School",
  Month=Aug, Year=1994,
  Note="Workshop of the European Summer School on Logic,
    Language and Information", Pages="149--169"}

@TechReport{Ren94a,
  Author="A. Rensink",
  Title="Deterministic Pomsets",
  Institution="Institut f{\"u}r Informatik, Universit{\"a}t Hildesheim",
  Type="Hildesheimer Informatik-Berichte", Number="94/30",
  Month=Nov, Year=1994}

@inproceedings{RW94,
        author =        {A. Rensink and H. Wehrheim},
        title =         {Weak Sequential Composition in Process Algebras},
        crossref =      {CONCUR94},
        pages =         {226--241}
}

@book{Re81,
	author =	{J.C. Reynolds},
	year =		1981,
	address =	{Englewood Cliffs},
	publisher =	prentice,
	title =		{The Craft of Programming}
}

@misc{RSV87,
author="J.L. Richier and J. Sifakis and J. Voiron",
year=1987,
title="Une alg\`{e}bre des processus temporis\'{e}s",
note="In A. Arnold, editor, {\em Actes du deuxi\`{e}me colloque C$ ^3$},
Angoul\'{e}me, 1987"}

@book{Rod88,
	author =	{R.S. Roden},
	year =		1988,
	title =		{Digital Communication Systems Design},
        publisher =     {Prentice Hall}
}

@techreport{RG88,
	author =	{P.H. Rodenburg and Glabbeek, R.J. van},
	year =		1988,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R8838},
	address =	{Amsterdam},
	title =		{An interpolation theorem in equational logic}
}

@inproceedings{dR85,
	author =	{Roever, W.P. de},
	booktitle =	{IFIP working group on the role of abstract models
				 in Computer Science},
	year =		1985,
	editor =	{E.J. Neuhold},
	publisher =	nholland,
	title =		{The quest for compositionality --
			 a survey of proof systems for concurrency, part 1}
}

@article{dR91,
	author =	{Roever, W.P. de},
	journal =	eatcs,
	year =		1991,
	month =		jun,
	title =		{Foundations of Computer Science:
				Leaving the Ivory Tower}
}

@book{dRE98,
	author =	{Roever, W.P. de and K. Engelhardt},
	year =		1998,
	publisher =	cup,
	series =	{Cambridge Tracts in Theoretical Computer Science 47},
	title =		{Data Refinement: Model-Oriented Proof Methods and
				their Comparison}
}

@book{Rog67,
	author =	{H. Rogers},
	year =		1967,
	title =		{Theory of Recursive Functions and Effective
				Computability},
        publisher =     mcgraw
}

@techreport{Rom99a,
        author =        {J.M.T. Romijn},
        title =         {Model checking the {HAVi} leader election protocol},
        year =          1999,
        number =        {SEN-R9915},
        institution =   {CWI},
        address =       {Amsterdam}
}

@inproceedings{Rom99b,
        author =        {J.M.T. Romijn},
        title =         {A Timed Verification of the {IEEE} 1394 Leader
                Election Protocol},
        editor =        {S. Gnesi and D. Latella},
        year =          1999,
        pages =         {pages 3--29},
        booktitle =     {Proceedings of the Fourth International ERCIM Workshop
on Formal Methods for Industrial Critical Systems (FMICS'99)},
        note =          {Full version to appear in
			 {\em Formal Methods in System Design}}
}

@phdthesis{Rom99c,
        author =        {J.M.T. Romijn},
	year =		1999,
	month =		oct,
	school =	{University of Twente},
	title =		{Analyzing Industrial Protocols with
				Formal Methods}
}

@article{Rom01,
  	author        = {J.M.T Romijn},
	title =		{A Timed Verification of the {IEEE} 1394 Leader Election Protocol},
	journal =	{Formal Methods in System Design},
	volume =	{19},
	number =	{2},
	pages =		{165--194},
        year=		2001,
	note =		{Special issue on {\em FMICS'99}.}
}

@techreport{RV95,
	author =	{J.M.T. Romijn and F.W. Vaandrager},
	title =		{A note on fairness in {I/O} automata},
	year =		1995,
	month =		dec,
	institution =	{CWI},
	address =	{Amsterdam},
	type =		{Report},
	number =	{CS-R9579}
}

@article{RV96,
	author =	{J.M.T. Romijn and F.W. Vaandrager},
	title =		{A note on fairness in {I/O} automata},
	journal =	ipl,
	volume =	59,
	number =	5,
	year =		1996,
	pages =		{245--250}
}

@inproceedings{Rom96,
	author =	{J.M.T. Romijn},
	booktitle =	{Proceedings Dagstuhl-Seminar on the
				 RPC-Memory Specification Problem},
	year =		1996,
	publisher =	springer,
	title =		{{Tackling the RPC-Memory specification
				 problem with I/O automata}},
	series =	lncs,
	note =		{To appear}
}


@article{Rom04,
  author =       {J.M.T. Romijn},
  title =        {Improving the Quality of Protocol Standards: Correcting {IEEE 1394.1 FireWire} Net Update},
  journal =      {Nieuwsbrief van de Nederlandse Vereniging voor Theoretische Informatica},
  year =         2004,
  volume =       8,
  pages =        {23-30},
  note =         {Available at {\tt http://www.win.tue.nl/oas/index.html?iqps/}}
}


@article{Ross05,
	author =	{P.E. Ross},
	title =		{The Exterminators},
	journal =	{IEEE Spectrum},
	year =		2005,
 	month =		sep,
	pages =		{36--41}
}

@inproceedings{Ro85,
	author =	{A.W. Roscoe},
	crossref =	{seminar-on-concurrency},
	note =		{Revised version to appear as Technical Monograph PRG--.., Programming Research Group, Oxford University Computing Laboratory},
	pages =		{306--329},
	title =		{Denotational semantics for occam}
}

@article{RH88,
	author =	{A.W. Roscoe and C.A.R. Hoare},
	year =		1988,
	journal =	tcs,
	pages =		{177--229},
	title =		{The laws of occam programming},
	volume =	60
}

@inproceedings{Ross89,
title="A Procedural Semantics for Well Founded Negation in Logic
Programs",
author="K. Ross",
booktitle=pods8,
year=1989,
pages="22--33"
}

@article{RoubtsovaGKJ02,
  author    = {E.E. Roubtsova and L.C.M. van Gool and R. Kuiper and H.B.M. Jonkers},
  title     = {Consistent specification of interface suites in UML.},
  journal   = {Software and System Modeling},
  volume    = {1},
  number    = {2},
  year      = {2002},
  pages     = {98-112}
}

@inproceedings{RB81,
	author =	{W.C. Rounds and S.D. Brookes},
	booktitle =	focs22,
	address =	{New York},
	year =		1981,
	publisher =	{IEEE},
	pages =		{140--149},
	title =		{Possible futures, acceptances, refusals and communicating processes}
}

@inproceedings{RT86,
	author =	{G. Rozenberg and P.S. Thiagarajan},
	crossref =	{current-trends},
	pages =		{585--668},
	title =		{Petri nets: basic notions, structure, behaviour}
}

@inproceedings{RSS96,
        author =        {H. Ruess and N. Shankar and M.K. Srivas},
        crossref =      {CAV8},
        year =          1996,
        pages =         {123--134},
        title =         {Modular Verification of SRT Division}
}


@article{RH93,
	title = 	{Formal Verification of Algorithms for Critical
				Systems},
	author = 	{J.M. Rushby and Henke, F. von},
	volume =	19,
	number =	1,
	year = 		1993,
	pages =		{13--23},
	journal =	ieeese
}

@inproceedings{Rushby94,
 author = {J. Rushby},
 title = {A formally verified algorithm for clock synchronization under a hybrid fault model},
 booktitle = {PODC '94: Proceedings of the thirteenth annual ACM symposium on Principles of distributed computing},
 year = {1994},
 pages = {304--313},
 location = {Los Angeles, California, United States},
 doi = {http://doi.acm.org/10.1145/197917.198115},
 publisher = {ACM},
 address = {New York, NY, USA},
 }

@inproceedings{Ru90,
	author =	{J.J.M.M. Rutten},
	year =		1990,
	editor =	{M. Broy and C.B. Jones},
	booktitle = 	{Proceedings IFIP Working Conference on Programming
			 Concepts and Methods, {\rm Sea of Gallilea, Israel}},
	pages =		{155--177},
	publisher =	nholland,
	title =		{Deriving denotational models for bisimulation from
				 structured operational semantics}
}

@InProceedings{Ru03,
    Author = "Theo Ruys",
    Title = "{Optimal Scheduling Using Branch and Bound with SPIN 4.0}",
    BookTitle = "{Model Checking Software -- Proceedings of the
                  10th International SPIN Workshop (SPIN 2003)}",
    Editor = "Thomas Ball and Sriram K. Rajamani",
    Address = "{Portland, OR, USA}",
    Series = "{Lecture Notes in Computer Science}",
    Volume = 2648,
    Publisher = "{Springer-Verlag, Berlin}",
    Month = "May",
    Year = 2003,
    Pages = "1--17",
    URL = "http://ametist.cs.utwente.nl/INTERNAL/PUBLICATIONS/UTPublications/ruy
s-spin2003.pdf"
}

@Article{SabMye2003,
  author =       "A. Sabelfeld and A.C. Myers",
  title =        "Language-Based Information-Flow Security",
  URL =          "http://www.cs.cornell.edu/andru/papers/jsac/sm-jsac03.pdf",
  journal =      "{IEEE} Journal on Selected Areas in Communications",
  volume =       "21",
  year =         "2003",
  pages =        "5--19",
  number =       "1",
  month =        jan
}

@incollection{Sade84,
        author =        {Sade},
        title =         {Smooth operator},
        booktitle =     {Diamond Life},
        publisher =     {Epic},
        year =          1984
}

@misc{Sak,
	author =	{A. Sakharov},
	year =		2008,
	title =		{Equational logic},
        note =		{From MathWorld - A Wolfram Web Resource, {\tt http://mathworld.wolfram.com/EquationalLogic.html}}
}

@article{SSLST95,
	author =	{M. Sampath and R. Sengupta and S. Lafortune and
			K. Sinnamohideen and D. Teneketzis},
	year =		1995,
	month =		sep,
	journal =	{IEEE Transactions on Automatic Control},
	pages =		{1555--1575},
	title =		{Diagnosability of Discrete Event Systems},
	volume =	40,
	number = 	9
}

@inproceedings{Sa92,
	author =	{D. Sangiorgi},
	title =		{The Lazy Lambda Calculus in a Concurrency Scenario
				(extended abstract)},
	crossref =	{LICS7},
	pages =		{102--109}
}

@misc{Sa92a,
	author =	{D. Sangiorgi},
	year =		1992,
	address =	{University of Edinburgh},
	title =		{Forthcoming {PhD} Thesis}
}


@inproceedings{ST85,
	author =	{D.T. Sannella and A. Tarlecki},
	year =		1985,
	booktitle =	tapsoft1v1,
	editor =	{H. Ehrig and C. Floyd and M. Nivat and J. Thatcher},
	series =	lncs,
	volume =	185,
	publisher =	springer,
	pages =		{308--322},
	title =		{On observational equivalence and algebraic specification}
}

@article{ST88,
	author =	{D.T. Sannella and A. Tarlecki},
	year =		1988,
	journal =	acta,
	pages =		{233--281},
	title =		{Toward formal development of programs from algebraic
			 specifications: implementations revisited},
	volume =	25
}

@inproceedings{SW83,
	author =	{D.T. Sannella and M. Wirsing},
	booktitle =	{International Conference on Foundations of Computation Theory, {\rm Borgholm}},
	year =		1983,
	editor =	{M. Karpinski},
	note =		{Long version: Report CSR-131-83, Dept. of Computer Science, Univ. of Edinburgh, 1983},
	pages =		{413--427},
	series =	lncs,
	volume =	158,
	publisher =	springer,
	title =		{A kernel language for algebraic specification
			 and implementation (extended abstract)}
}

@article{SastrySBG03,
  author    = {S. Sastry and
               J. Sztipanovits and
               R. Bajcsy and
               H. Gill},
  title     = {Scanning the issue - special issue on modeling and design
               of embedded software.},
  journal   = {Proceedings of the IEEE},
  volume    = {91},
  number    = {1},
  year      = {2003},
  pages     = {3-10}
}

@INPROCEEDINGS{JulienFMCAD07,
  author = {J. Schmaltz},
  title = {A formal model of clock domain crossing and automated verification of time-triggered hardware},
  booktitle = {Formal methods in computer aided design},
  year = {2007},
  editor = {J. Baumgartner and M. Sheeran},
  pages = {223--230},
  publisher = {IEEE Computer Society},
  category = {wet - artikel in bundel - proceedings},
  url = { http://doi.ieeecomputersociety.org/10.1109/FMCAD.2007.2}
}

@incollection{SBM92,
  	author = 	{F.B. Schneider and B. Bloom and K. Marzullo},
  	title = 	{Putting Time into Proof Outlines},
	pages =		{618--639},
	crossref =	{REXrealtime}
}

@inproceedings{Schn92,
	author =	{S.A. Schneider},
	booktitle =	{Proceedings Chalmers Workshop on Concurrency, 1991},
	year =		1992,
	title =		{An Operational Semantics for Timed {CSP}},
	publisher =	{Report PMG-R63, Chalmers University of Technology
			 	and University of G\"{o}teborg},
	pages =		{428--456},
	note =		{Appeared in {\em Information and Computation},
				116(2), February 1995, pp 193--213}
}

@inproceedings{Sch93,
	author =	{S.A. Schneider},
	title =		{Timed Refinement for Communicating Processes},
	booktitle =	{Proceedings Mathematical Foundations of Programming
				Semantics (MFPS 9)},
	year =		1993,
	month =		apr
}

@inproceedings{SZHV09,
  	author    = {M. Schuts and F. Zhu and F. Heidarian and F.W. Vaandrager},
  	title     = {Modelling Clock Synchronization in the {Chess gMAC WSN} Protocol},
  	year      = {2009},
  	booktitle = {Proceedings Workshop on Quantitative Formal Methods: Theory and Applications (QFM'09)},
  	series    = {Electronic Proceedings in Theoretical Computer Science},
  	volume    = {13},
        pages     = {41-54},
  	editor    = {S. Andova et.al},
  	funding   = {QUASIMODO D5.7,ARTS,ROCKS},
        category  = {wet - artikel in bundel - proceedings},
        url   	  = {http://www.mbsd.cs.ru.nl/publications/papers/fvaan/chess09/},
        doi	  = {http://dx.doi.org/10.4204/EPTCS%2E13%2E4}
}

@inproceedings{Scott70,
title = "Outline of a Mathematical Theory of Computation",
author = "D. Scott",
year = 1970,
booktitle ="Proceedings of the 4$^th$ Annual Princeton Conference on
Information Sciences and Systems",
pages="169--176"}

@inproceedings{ScSt71,
author="D.S. Scott and C. Strachey",
year=1971,
title="Towards a Mathematical Semantics for Computer Languages",
booktitle="Proceedings of the Symposium on Computers and Automata",
series="Microwave Research Institute Symposia Series",
volume=21,
institution="Polytechnique Institute of Brooklyn"}

@manual{SDL87,
	year =		1987,
	organization =	{CCITT Working Party X/1},
	title =		{Recommendation Z.100 (SDL)}
}

@inproceedings{Seg93,
	author =	{R. Segala},
	title =		{Quiescence, fairness, testing, and the notion of
				 implementation},
	crossref =	{CONCUR93},
	pages =		{324--338}
}

@phdthesis{Seg95,
	author =	{R. Segala},
	title =		{Modeling and Verification of Randomized Distributed
			Real-Time Systems},
	school =	miteecs,
	month = 	jun,
	year =		1995,
	note =		{Available as Technical Report MIT/LCS/TR-676}
}

@inproceedings{Seg95b,
	author=        	{R. Segala},
	title =        	{Compositional trace-based semantics for Probabilistic Automata},
       	crossref =      {CONCUR95},
	pages =         {234--248}
}

@inproceedings{Seg96,
	author=         {R. Segala},
        title =         {Testing Probabilistic Automata},
        crossref =      {CONCUR96},
        pages =         {299--314}
}

@article{SGSL98,
	author =	{R. Segala and R. Gawlick and {J.F.}
			{S{\o}gaard-Andersen} and N.A. Lynch},
	year =		1998,
	month =		mar,
	title =		{Liveness in Timed and Untimed Systems},
	journal =	{Information and Computation},
	volume =	141,
	number =	2,
	pages =		{119--171}
}

@inproceedings{SL94,
title =		{Probabilistic Simulations for Probabilistic Processes},
author =	{R. Segala and N.A. Lynch},
year =		1994,
booktitle =     {Proc.~CONCUR'94},
series  =	lncs,
volume =	836,
pages =	        {481--496},
}

@article{SL95,
	author =	{R. Segala and N.A. Lynch},
	year =		1995,
	journal =	{Nordic Journal of Computing},
	volume =	2,
	number =	2,
	pages =		{250--273},
	title =		{Probabilistic Simulations for Probabilistic
				 Processes}
}

@article{Seg83,
        author = 	{A. Segall},
        title = 	{Distributed Network Protocols},
        year = 		1983,
	month =		jan,
        Journal = 	{IEEE Transactions on Information Theory},
        volume = 	{IT-29},
        number = 	2,
        pages = 	{23--35}
}

@TECHREPORT{Sel93
, AUTHOR       = {M.P.A. Sellink}
, TITLE        = {Verifying Process Algebra Proofs in Type Theory}
, INSTITUTION  = {Utrecht University}
, TYPE         = {Logic Group Preprint Series}
, NUMBER       = {No. 87}
, YEAR         = 1993
}

@phdthesis{Seu94,
	author =	{M. Seutter},
	year =		1994,
	month =		jan,
	school =	{University of Nijmegen},
	title =		{The Development of Semantic Functions for a
			System Description Language with
			Multiple Interpretations}
}

@article{SZ98,
        author =        {C. Shankland and Zwaag, M.B. van der},
        title =         {The Tree Identify Protocol of {IEEE 1394} in {$\mu$CRL}},
        journal =       {Formal Aspects of Computing},
        volume =        {10},
        pages =         {509-531},
        year =          1998
}

@article{Sh89,
        author = 	{E. Shapiro},
        title = 	{The Family of Concurrent Logic Programming Languages},
        year = 		1989,
        Journal = 	{ACM Computing Surveys},
        volume = 	21,
        number = 	3,
        pages = 	{412-510}
}

@inproceedings{Sh91,
	author =	{E. Shapiro},
	year =		1991,
	booktitle =	stoc23,
	publisher =	stocpub,
	pages =		{198--208},
	title =		{Separating Concurrenct Languages with Categories
			of Language Embeddings}
}

@inproceedings{Sh92,
	author =	{E. Shapiro},
	crossref =	{CONCUR92},
	pages =		{486--503},
	title =		{Embeddings Among Concurrent Programming Languages}
}

@techreport{Sh82,
	author =	{M.W. Shields},
	year =		1982,
	institution =	{Department of Computer Science, University of Edinburgh},
	number =	{CSR-120-82},
	title =		{Non sequential behaviour: 1}
}

@book{Sch67,
	author =	{J.R. Shoenfield},
	title =		{Mathematical Logic},
	year =		1967,
	publisher =	addison
}

@inproceedings{Si84,
	author =	{J. Sifakis},
	booktitle =	{Logics of Programs, 1983},
	year =		1984,
	editor =	{E. Clarke and D. Kozen},
	series =	lncs,
	volume =	164,
	publisher =	springer,
	pages =		{458--473},
	title =		{Property-preserving homomorphisms of transition systems}
}

@inproceedings{Sif99,
    author = "J. Sifakis",
    title = "The Compositional Specification of Timed Systems - A Tutorial",
    crossref =	{CAV11},
    pages = "2--7"
}

@inproceedings{SY96,
    author = "J. Sifakis and S. Yovine",
    title = "Compositional Specification of Timed Systems (Extended Abstract)",
    crossref ={STACS96},
    pages = "347--359"
}

@article{SM98,
author =        {M. Sighireanu and R. Mateescu},
title =         {Verification of the Link Layer Protocol of the {IEEE-1394}
                Serial Bus {(FireWire)}: an Experiment with {E-LOTOS}},
journal =       {Springer International Journal on Software Tools for
                Technology Transfer (STTT)},
year =          {1998},
volume =        {2},
number =        {1},
pages =         {68--88},
month =         dec,
annote =        {etude de cas avec TRAIAN et XTL}
}

@phdthesis{dS84,
	author =	{Simone, R. de},
	type =		{Th\`{e}se de $3^e$ cycle},
	year =		1984,
	school =	{Univ. Paris 7},
	title =		{Calculabilit\'{e} et Expressivit\'{e} dans l'Algebra de Processus Parall\`{e}les {\sc Meije}}
}

@article{dS84a,
	author =	{Simone, R. de},
	year =		1984,
	journal =	tcs,
	pages =		{133--138},
	title =		{{On Meije and SCCS: infinite sum operators vs. non-guarded definitions}},
	volume =	30
}

@article{dS85,
	author =	{Simone, R. de},
	year =		1985,
	journal =	tcs,
	pages =		{245--267},
	title =		{Higher-level synchronising devices in {\sc Meije}--{SCCS}},
	volume =	37
}

@inproceedings{dSR91,
	author =	{Simone, R. de and V. Roy},
	crossref =	{CAV2},
	title =		{Auto/{A}utograph},
	pages =		{65--75}
}

@techreport{SV89,
	author =	{Simone, R. de and D. Vergamini},
	address =	{Valbonne Cedex},
	year =		1989,
	institution =	{INRIA, Centre Sophia-Antipolis},
	number =	111,
	title =		{Aboard {AUTO}}
}

@book{SS90,
	editor =	{B. Simons and A. Spector},
	year =		1990,
	publisher =	springer,
	series =	lncs,
	title =		{Fault-Tolerant Distributed Computing},
	volume =	448
}

@techreport{SS00,
  	author        = {D.P.L. Simons and M.I.A. Stoelinga},
	title =		{Mechanical Verification of the {IEEE} 1394a
			Root Contention Protocol using {U}ppaal2k},
	year =		2000,
	month =		may,
	number =	{CSI-R0009},
	institution =	{Computing Science Institute, University of Nijmegen},
	note =		{To appear in {\em Springer
			 International Journal on Software Tools for
                	Technology Transfer (STTT)}}
}

@article{SS01,
  	author        = {D.P.L. Simons and M.I.A. Stoelinga},
	title =		{Mechanical Verification of the {IEEE} 1394a
			Root Contention Protocol using {U}ppaal2k},
	year =		2001,
	journal =	{International Journal on Software Tools for
                	Technology Transfer (STTT)},
	volume =	3,
	number =	4,
	publisher =	springer,
	month = 	sep,
	pages =		{469--485}
}

@misc{SION95,
	author =	{SION},
	year =		1995,
	month =		jul,
	title =		{Beleidsplan 1996--2001},
	howpublished =	{Stichting informatica-onderzoek in Nederland,
			Amsterdam}
}

@article{Si64,
author = "F.M. Sioson",
title = "Equational Bases of {B}oolean Algebras",
journal = jsl,
year = 1964,
volume = 29,
pages = "115--124",
number = 3,
month = sep}

@inproceedings{SM94,
	author =	{H.B. Sipma and Z. Manna},
	title =		{Specification and Verification of Controlled Systems},
	crossref =	{FTRTFT94},
	pages =		{641--659}
}

@article{Sis91,
	author =	{A.P. Sistla},
	title =		{Proving Correctness with Respect to Nondeterministic
				Safety Specifications},
	journal =	ipl,
	volume =	39,
	number =	1,
	year =		1991,
	month =		jul,
	pages =		{45--49}
}

@inproceedings{SmSt90,
  	author = 	{S.A. Smolka and B. Steffen},
  	title = 	{Priority as Extremal Probability},
  	crossref = 	{CONCUR90},
  	pages = 	{456--466}
}

@inproceedings{SS87,
	author =	{S.A. Smolka and R.E. Strom},
	booktitle =	ebberup,
	address =	{Amsterdam},
	year =		1987,
	editor =	{M. Wirsing},
	publisher =	nholland,
	pages =		{347--373},
	title =		{A {CCS} semantics for {NIL}}
}

@book{Setal96,
	author =	{M. Snir and S.W. Otto and S. Huss-Lederman and D. Walker and J.J. Dongarra},
	year =		1996,
	publisher =	mitp,
	address =	{Cambridge, Massachusetts},
	title =		{{MPI}:The Complete Reference}
}

@phdthesis{Sog93,
author={J. S{\o}gaard-Andersen},
title={Correctness of Protocols in Distributed Systems},
school={Technical University of Denmark, Lyngby, Denmark},
month=dec,
year=1993,
note={ID-TR: 1993-131.  Also, \cite{SLL93}}
}

@inproceedings{SGGLP93,
	author =	{J. S{\o}gaard-Andersen and S. Garland
			and J. Guttag and N.A. Lynch and A. Pogosyants},
	crossref =	{CAV5},
	title =		{Computer-Assisted Simulation Proofs},
	pages =		{305--319}
}

@techreport{SLL93,
	author =	{J.F. S{\o}gaard-Andersen and N.A. Lynch and
				 B.W. Lampson},
	year =		1993,
	month =		nov,
	title =		{Correctness of Communication Protocols --
				A Case Study},
	number =	{MIT/LCS/TR-589},
	institution =	{Laboratory for Computer Science, MIT, Cambridge, MA}
}

@InProceedings{SdV04,
  author = 	 {A. Sokolova and Vink, E.P. de},
  title = 	 {Probabilistic automata: system types, parallel composition and comparison}, 
  booktitle = 	 {Validation of Stochastic Systems},
  editor =       {C. Baier et al.},
  pages =	 {1--43},
  year =	 2004,
  publisher =	 springer,
  series =	 lncs,
  volume =	 2925
}

@book{Som96,
	author="I. Sommerville",
	title="Software Engineering, 5/e",
	year=1996,
	publisher={Addison-Wesley Publishing Company}
}

@book{Son90,
	author="E.D. Sontag",
	title="Mathematical Control Theory --- Deterministic Finite Dimensional Systems",
	year=1990,
	volume=6,
	series="Texts in Applied Mathematics",
	publisher=springer
}

@mastersthesis{Soy94,
	author=		{E. S\"{o}ylemez},
	title=		{Automatic Verification of the Timing Properties
			 of {MMT} Automata},
	school=		miteecs,
	year=		1994,
	month=		feb
}

@misc{SdS94,
	author =	{Souza, M.L. de and Simone, R. de},
	year =		1994,
	howpublished =	{INRIA Sophia Antipolis, France},
	title =		{Partial (-Order) automata and Behavioural Equivalences}
}

@techreport{SPECS87,
	author =	{{SPECS}},
	year =		1987,
	institution =	{European project RACE 1046: Specification Environment
				 for Communication Software (SPECS)},
	type =		{Document},
	number =	{D.5},
	title =		{A feasible {IBC} software specification environment}
}

@techreport{SPECS92,
	author =	{{SPECS}},
	year =		1992,
	institution =	{European project RACE 1046: Specification Environment
				 for Communication Software (SPECS)},
	type =		{Document},
	number =	{D5.19},
	title =		{Intermediate Report on Methods and Tools in {CRL/MR}}
}

@manual{CRL90,
	author =	{{SPECS}-semantics},
	institution =	{European project RACE 1046: Specification Environment
				 for Communication Software (SPECS)},
	title =		{Definition of MR and CRL Version 2.1},
	year =		1990
}

@book{Spi88,
	author =	{J.M. Spivey},
	year =		1988,
	publisher =	cup,
	series =	{Cambridge Tracts in Theoretical Computer Science 3},
	title =		{Understanding {Z}: a specification language and
			its formal semantics}
}

@book{Spi89,
	editor =	{J.M. Spivey},
	year =		1989,
	publisher =	prentice,
	title =		{The {Z} notation: a reference manual}
}

@inproceedings{Spr93,
        author =        {J.G.~Springintveld},
        year =          1993,
        title =         {Lower and upper bounds for reductions of types
                         in $\lambda\underline{\omega}$ and $\lambda {P}$
                         ({E}xtended abstract)},
        editor =        {J.F.~Groote and M.A.~Bezem},
        booktitle = {Proceedings of the First International Conference
                     on Typed Lambda Calculi and Applications
                     (TLCA '93), {U}trecht, {T}he {N}etherlands},
        series = {Lecture Notes in Computer Science},
        volume = 664,
        pages =  {391--406},
        publisher = {Springer-Verlag}
}

@inproceedings{Spr95a,
        author =        {J.G.~Springintveld},
        year =          1995,
        title =         {Third-order matching in the presence of type
                         constructors ({E}xtended abstract)},
        editor =        {M.~Dezani-Ciancaglini and G.~Plotkin},
        booktitle = {Proceedings of the Second International Conference
                     on Typed Lambda Calculi and Applications
                     (TLCA '95), {E}dinburgh, {UK}},
        series = {Lecture Notes in Computer Science},
        volume = 902,
        pages =  {428--443},
        publisher = {Springer-Verlag}
}

@PhdThesis{Spr95b,
        author =        {J.G.~Springintveld},
        year =          1995,
        school = 	{Department of Philosophy, Utrecht University},
        title =         {{A}lgorithms for {T}ype {T}heory}
}

@inproceedings{Spr96a,
        author =        {J.G.~Springintveld},
        year =          1996,
        title =         {Third-order matching in the polymorphic
                         lambda calculus},
        editor =        {G.~Dowek and J.~Heering and K.~Meinke and
                         B.~M\"{o}ller},
        booktitle = {Proceedings of the Second International Workshop
                     on  Higher-Order Algebra, Logic, and Term Rewriting
                     (HOA '95)},
        series = {Lecture Notes in Computer Science},
        volume = 1074,
        pages =         {221--238},
        publisher = {Springer-Verlag}
}

@inproceedings{SV96,
	author =	{J.G. Springintveld and F.W. Vaandrager},
	title =		{Minimizable timed automata},
	crossref =	{FTRTFT96},
	pages =		{130--147}
}

@techreport{SVA97,
	author =	{J.G. Springintveld and F.W. Vaandrager and
				P.R. D{'A}rgenio},
	title =		{Testing Timed Automata},
	year =		1997,
	month =		aug,
	institution =	{Computing Science Institute, University of Nijmegen},
	number =	{CSI-R9712}
}

@article{Sta89,
	author =	{G. St{\aa}lmarck},
	year =		1989,
	journal =	ipl,
	volume =	31,
	pages =		{277--278},
	title =		{A note on the computational complexity of the
			pure classical implication calculus}
}

@article{Sta91,
	author =	{G. St{\aa}lmarck},
	year =		1991,
	journal =	{Journal of Symbolic Logic},
	volume =	56,
	pages =		{129--149},
	title =		{Normalization theorems for full first order classical
			natural deduction}
}

@inproceedings{StS90,
	author =	{G. St{\aa}lmarck and M. S\"{a}flund},
	booktitle =	{Proceedings 9th Conference on Computer Safety,
			Reliability and Security (SAFECOMP'90)},
	year =		1990,
	publisher =	{Pergamon Press},
	pages =		{31--36},
	title =		{Modelling and verifying systems and software
			in propositional logic},
}

@misc{Stan97,
	author =	{J.A. Stankovic},
	year =		1997,
	title =		{Real-time and Embedded Systems},
	note =		{ACM Strategic Directions in Computing Research,
			Group Report, accessible via
			{\tt http://www.medg.lcs.mit.edu/sdcr/}}
}

@phdthesis{Sta84,
	author =	{E.W. Stark},
	year =		1984,
	month =		aug,
	school =	miteecs,
	title =		{Foundations of a Theory of Specification for
				 Distributed Systems},
	note =		{Available as Technical Report MIT/LCS/TR-342}
}

@inproceedings{Sta87,
	author =	{E.W. Stark},
	crossref =	{POPL14},
	title =		{Concurrent transition system semantics of process networks}
}

@article{Sta88,
	author =	{E.W. Stark},
	year =		1988,
	journal =	tcs,
	volume =	56,
	pages =		{135--154},
	title =		{Proving Entailment Between Conceptual State Specifications}
}

@inproceedings{Stark90,
	author =	{E.W. Stark},
	crossref =	{POPL17},
	pages =		{329--340},
	title =		{On the relations computed by a class of concurrent
				 automata}
}

@inproceedings{Sta92,
	author =	{E.W. Stark},
	title =		{A Calculus of Dataflow Networks},
	crossref =	{LICS7},
	pages =		{125--136}
}

@article{StaunstrupAHLLBKSLT00,
  author    = {J. Staunstrup and
               H.R. Andersen and
               H. Hulgaard and
               J. Lind-Nielsen and
               K.G. Larsen and
               G. Behrmann and
               K.J. Kristoffersen and
               A. Skou and
               H. Leerberg and
               N.B. Theilgaard},
  title     = {Practical Verification of Embedded Software},
  journal   = {IEEE Computer},
  volume    = {33},
  number    = {5},
  year      = {2000},
  pages     = {68-75}
}

@PROCEEDINGS{SMB92
, TITLE        = {Theorem Provers in Circuit Design}
, YEAR         = 1992
, EDITOR       = {V. Stavridou and T.F. Melham and R.T. Boute}
, PUBLISHER    = nholland
, CROSSREFONLY = 1
}

@proceedings{St66,
title="Formal Language Description Languages for Computer Programming.
Proceedings of the IFIP Working Conference on Formal Language
Description Languages",
editor="T.B. Steel",
year=1966,
publisher=nholland}

@inproceedings{St66a,
title="A Formalization of Semantics for Programming Language Description",
author="T.B. Steel",
pages="25--36",
booktitle="Formal Language Description Languages for Computer Programming.
Proceedings of the IFIP Working Conference on Formal Language
Description Languages",
editor="T.B. Steel",
year=1969}

@article{Sti88,
        author =        {C. Stirling},
        year =          1988,
        journal =       tcs,
        pages =         {34--359},
        title =         {A generalization of {O}wicki-{G}ries's {H}oare
				 logic for a concurrent while-language},
        volume =        58
}

@incollection{Sti92,
	author =	{C. Stirling},
	crossref =	{HandLICS2},
	title =		{Modal and temporal logics},
	pages =		{477--563}
}

@techreport{Sto99,
  	author        = {M.I.A. Stoelinga},
	title =		{Gambling for Leadership:
			Root Contention in {IEEE 1394}},
	year =		1999,
	number =	{CSI-R9904},
	institution =	{Computing Science Institute, University of Nijmegen}
}

@inproceedings{Sto01,
        author =        {M.I.A. Stoelinga},
        title =         {Fun with {FireWire}: Experiences with Verifying
                         the {IEEE1394} {R}oot {C}ontention {P}rotocol},
        year =          2001,
        pages =         {35--38},
        editor =        {S. Maharaj, C. Shankland, J.M.T. Romijn},
        booktitle =     {Proceedings of the International Workshop on
                         Application of Formal Methods to the IEEE1394
                         Standard {\rm Berlin, March 2001}},
        note =          {Also, Technical Rapport CSI-R0107,
                         Computing Science Institute, University of
                         Nijmegen, March 2001}
}

@phdthesis{Sto02,
 	author =        {M.I.A. Stoelinga},
	year =		2002,
	month =		apr,
	school =	{University of Nijmegen},
	title =		{Alea Jacta Est: Verification of Probabilistic,
			 Real-Time and Parametric Systems}
}

@article{Sto02b,
 	author =        {M.I.A. Stoelinga},
	journal =	eatcs,
	year =		2002,
	month =		oct,
	pages =		{176--198},
	title =		{An introduction to probabilistic automata},
	volume =	78
}


@article{Sto03,
  author    = {M. Stoelinga},
  title     = {Fun with {FireWire}: A Comparative Study of Formal Verification
               Methods Applied to the {IEEE 1394} Root Contention Protocol},
  journal   = {Formal Aspects of Computing Journal},
  volume    = {14},
  number    = {3},
  year      = {2003},
  pages     = {328-337}
}


@techreport{SV99,
  	author        = {M.I.A. Stoelinga and F.W. Vaandrager},
	title =		{Root Contention in {IEEE 1394}},
	year =		1999,
	month =		mar,
	number =	{CSI-R9905},
	institution =	{Computing Science Institute, University of Nijmegen}
}

@inproceedings{SV99a,
        author=         {M.I.A. Stoelinga and F.W. Vaandrager},
        title=          {Root Contention in {IEEE} 1394},
        crossref =      {ARTS99},
	pages =		{53--74}
}

@techreport{SV01,
  	author        = {M.I.A. Stoelinga and F.W. Vaandrager},
	title =		{Gambling Together in {M}onte {C}arlo:
			Step Refinements for Probabilistic Automata},
	year =		2001,
	number =	{CSI-R01xx},
	institution =	{Computing Science Institute, University of Nijmegen},
	note =		{To appear}
}

@inproceedings{SV03,
  	author        = {M.I.A. Stoelinga and F.W. Vaandrager},
	crossref =	{ICALP30},
	title =		{A Testing Scenario for Probabilistic Automata},
	pages =		{407--418},
	url =		{http://www.cs.ru.nl/ita/publications/papers/fvaan/SV03.html}
}

@article{Stone35,
	author =	{M.H. Stone},
	year =		1935,
	journal =	{Proc. Nat. Acad, Sci. U.S.A.},
	volume =	21,
	pages =		{103--105},
	title =		{Subsumption of Boolean algebras under the theory of rings},
}

@book{Stoy77,
title="Denotational Semantics: the {S}cott-{S}trachey approach to
Programming Language Theory",
author="J. Stoy",
publisher="MIT press",
year=1977}

@techreport{St87,
	author =	{T. Streicher},
	year =		1987,
	institution =	passau,
	type =		{Report},
	number =	{MIP 8706},
	title =		{A verification method for finite dataflow networks
			 with constraints applied to the verification of the
			 alternating bit protocol}
}

@phdthesis{Str94,
	author =	{J.E. Str\"{o}mberg},
	year =		1994,
	school =	{Link\"{o}ping University, Link\"{o}ping, Sweden},
	title =		{A mode switching modelling philosophy},
	note =		{Dissertation no.~353}
}

@article{Sun05,
	title = "Clock synchronization for wireless sensor networks: a survey",
	journal = "Ad Hoc Networks",
	volume = "3",
	number = "3",
	pages = "281 - 323",
	year = "2005",
	issn = "1570-8705",
	doi = "DOI: 10.1016/j.adhoc.2005.01.002",
	url = "http://www.sciencedirect.com/science/article/B7576-4FDMVS4-1/2/63ed40b032c6bf3ad5fca7fdcbe9e35a",
	author = "B. Sundararaman and U. Buy and A. D. Kshemkalyani",
	keywords = "Synchronization protocol",
	keywords = "Sensor network",
	keywords = "Wireless network",
	keywords = "Comparative evaluation"
}


@article{SM83,
	author =	{I. Suzuki and T. Murata},
	year =		1983,
	journal =	jcss,
	number =	1,
	pages =		{51--76},
	title =		{A method for stepwise refinement and
				 abstraction of {Petri} nets},
	volume =	27
}

@book{Sz69,
         author =        {M.E. Szabo},
         title =         {The Collected Papers of Gerhard Gentzen},
         year =          1969,
         publisher =     nholland
}

@book{Ta81,
	author =	{A.S. Tanenbaum},
	year =		1981,
	address =	{Englewood Cliffs},
	publisher =	prentice,
	title =		{Computer networks}
}

@techreport{Ta85,
	author =	{D.A. Taubner},
	year =		1985,
	institution =	{Fachbereich Informatik, Univ. Hamburg},
	type =		{Bericht},
	number =	{FBI-HH-B-116/85},
	title =		{Two net-oriented semantics for {TCSP}}
}

@techreport{Ta87,
	author =	{D.A. Taubner},
	year =		1987,
	institution =	tum,
	type =		{Bericht},
	number =	{TUM-I8706},
	title =		{Theoretical {CSP} and formal languages}
}

@book{Ta89,
	author =	{D.A. Taubner},
	year =		1989,
	series =	lncs,
	volume =	369,
	publisher =	springer,
	title =		{{Finite representation of CCS and TCSP programs by
			 automata and Petri nets}}
}

@inproceedings{TV87,
	author =	{D.A. Taubner and W. Vogler},
	booktitle =	{Proceedings STACS 87},
	year =		1987,
	editor =	{F.J. Brandenburg and G. Vidal-Naquet and M. Wirsing},
	series =	lncs,
	volume =	247,
	publisher =	springer,
	pages =		{348--359},
	title =		{The step failure semantics}
}

@article{TV89,
	author =	{D.A. Taubner and W. Vogler},
	year =		1989,
	month =		nov,
	journal =	acta,
	pages =		{125--156},
	title =		{Step Failure Semantics and a Complete Proof System},
	volume =	27,
	number =	2
}

@article{Tav87,
	author =	{L. Tavernini},
	title =		{Differential automata and their discrete simulators},
	journal =	{Nonlinear Analysis, Theory, Methods,
				 and Applications},
	volume =	11,
	number =	6,
	year =		1987,
	pages =		{665--683}
}

@book{Tel91,
        author =        {G. Tel},
        year =          1991,
	publisher =	cup,
        series =        {Cambridge International Series on Parallel
			Computation 1},
        title =         {Topics in Distributed Algorithms}
}

@phdthesis{vTh94,
	author =	{Thienen, H. van},
	year =		1994,
	month =		jan,
	school =	{University of Nijmegen},
	title =		{It's About Time: Using Funmath for Specification
			and Analysis of Discrete Dynamic Systems}
}

@Article{Tho-89,
  author =      "W. Thomas",
  title =       "Automata on Infinite Objects",
  journal =     "{\em In} Handbook of Theoretical Computer Science
                 {\em (J. van Leeuwen, ed.), North-Holland}",
  year =        "1989",
  OPTvolume =   "",
  OPTnumber =   "",
  OPTpages =    "",
  OPTmonth =    "",
  OPTnote =     ""
}

@inproceedings{Th89,
	author =	{B. Thomsen},
	crossref =	{POPL16},
	pages =		{143--154},
	title =		{A Calculus of Higher Order Communicating Systems}
}

@inproceedings{Tjoa04,
	author =	{Tjoa, R. and   Chee, K.L. and   Sivaprasad, P.K. and   Rao, S.V. and  Lim, J.G},
	title =	{Clock drift reduction for relative time slot TDMA-based sensor networks},
	year =		2004,
	month =		sep,
	pages =		{1042--1047},
	booktitle=	{Proceedings of the $15^{th}$ IEEE International
			 Symposium on Personal, Indoor and Mobile Radio Communications (PIMRC2004)}
}


@techreport{TRH88,
	author =	{B.A. Trakhtenbrot and A. Rabinovich and J. Hirshfeld},
	year =		1988,
	institution =	{Tel Aviv University},
	number =	{104/88},
	title =		{Discerning causality in the behaviour of automata}
}

@phdthesis{Tret92,
	author =	{J. Tretmans},
	year =		1992,
	month =		dec,
	school =	{University of Twente},
	title =		{A Formal Approach to Conformance Testing}
}


@techreport{Tret95,
        author =        {J. Tretmans},
        year =          1995,
        institution =   {University of Twente},
        type =          {Memoranda Informatica},
        number =        {95-26},
        title =         {Testing labelled transition systems with
                        inputs and outputs}
}

@article{Tret96,
        author =        {J. Tretmans},
        year =          1996,
        journal =       {Software--Concepts and Tools},
        volume =        17,
        pages =         {103--120},
        title =         {Test generation with inputs, outputs, and
                        repetitive quiescence}
}


@inproceedings{Tret96b,
        author =        {J. Tretmans},
        crossref =      {TACAS96},
        pages =         {127--146},
        title =         {Test generation with inputs, outputs, and quiescence}
}

@inproceedings{Tret08,
  author    = {J. Tretmans},
  title     = {Model Based Testing with Labelled Transition Systems},
  year      = {2008},
  pages     = {1-38},
  editor    = {R.M. Hierons and
               J.P. Bowen and
               M. Harman},
  booktitle     = {Formal Methods and Testing, An Outcome of the FORTEST Network,
               Revised Selected Papers},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {4949}
}

@INPROCEEDINGS{TKB92,
AUTHOR = "Tretmans, J. and Kars, P. and Brinksma, E.",
TITLE = "Protocol Conformance Testing :
         A Formal Perspective on {ISO IS-9646}",
BOOKTITLE = {Fourth International Workshop on Protocol Test Systems},
SERIES = "IFIP Transactions",
NUMBER = "C-3",
YEAR = "1992",
EDITOR = "Kroon, J. and Heijink, R. J. and Brinksma, E.",
PAGES = "131--142",
PUBLISHER = "North-Holland",
NOTE = "Extended abstract of Memorandum INF-91-32,
        University of Twente, The Netherlands, 1991"
}

@inproceedings{TrVe92b,
	author=		{J. Tretmans and L. Verhaard},
	year=		1992,
	title=		{A queue model relating synchronous and
				 asynchronous communication},
	booktitle=	{Proceedings of the $12^{th}$ International
			 Conference on Protocol Specification,
				 Testing and Verification},
	publisher=	nholland
}

@article{tretmans2003tam,
  title={{TorX: Automated model based testing}},
  author={Tretmans, J. and Brinksma, E.},
  journal={1st European Conference on Model Driven Software Engineering},
  pages={31--43},
  year={2003}
}


@book{TvD88,
         author =        {A.S. Troelstra and Dalen, D. van},
         title =         {Constructivism in Mathematics,
				 An Introduction (vol I)},
         year =          1988,
         publisher =     nholland
}

@inproceedings{TschirnerXY08,
  author    = {S. Tschirner and L. Xuedong and W. Yi},
  title     = {Model-based validation of QoS properties of biomedical sensor networks},
  year      = {2008},
  pages     = {69-78},
  editor    = {L. de Alfaro and J. Palsberg},
  booktitle     = {Proceedings of the 8th ACM {\&} IEEE International conference
               on Embedded software, EMSOFT 2008, Atlanta, GA, USA, October
               19-24, 2008},
  publisher = {ACM},
  isbn      = {978-1-60558-468-3}
}

@article{Tu37,
	author =	{A. Turing},
	title =		{On Computable Numbers, with an Application to the
				Entscheidungsproblem},
	journal =	{Proc.\ Lond.\ Math.\ Soc.\ Ser. 2},
	volume =	42,
	year =		1937,
	pages =		{230--265},
	note =		{Corrections: {\em ibid} 43:544--546, 1937}
}

@phdthesis{Uijen09,
	author =	{J. Uijen},
	year =		2009,
  	month =		nov,
	type =		{Master Thesis},
	school =	{Radboud University Nijmegen and Uppsala University},
	title =		{Learning Models of Communication Protocols using Abstraction Techniques},
}

@inproceedings{Ul92,
	author =	{I. Ulidowski},
	title =		{Equivalences on Observable Processes},
	crossref =	{LICS7},
	pages =		{148--159}
}

@inproceedings{Umeno08,
  author    = {S. Umeno},
  title     = {Event order abstraction for parametric real-time system verification},
  booktitle = {EMSOFT},
  year      = {2008},
  pages     = {1-10},
  editor    = {L. de Alfaro and J. Palsberg},
  publisher = {ACM},
}

@manual{UNIX86,
	address =	{Berkeley},
	year =		1986,
	organization =	{Computer Systems Research Group, University of California},
	title =		{Unix Programmer's Reference Manual},
	edition =	{4.3 {BSD}}
}

@Misc{uppaalweb,
        author = 	{Basic Research in Computer Science at Aalborg
                         University and Department
                         of Computer Systems (DoCS) at Uppsala
                         University},
	howpublished = 	{{\tt http://www.docs.uu.se/docs/rtmv/uppaal/}}
}

@Misc{uppaaldistribution,
        key = 		{Uppaal distribution},
        howpublished =	{Available via {\tt http://www.uppaal.com}}
}

@techreport{Va86,
	author =	{F.W. Vaandrager},
	year =		1986,
	month =		jan,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R8608},
	address =	{Amsterdam},
	title =		{Verification of Two Communication Protocols
				 by Means of Process Algebra}
}

@techreport{Va89,
	author =	{F.W. Vaandrager},
	year =		1989,
	month =		mar,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R8903},
	address =	{Amsterdam},
	title =		{A Simple Definition for Parallel Composition
				 of Prime Event Structures}
}

@misc{Va89a,
	author=		{F.W. Vaandrager},
	title=		{Specificatie en Verificatie van
				 Communicatieprotocollen met Procesalgebra},
	year =		1989,
	howpublished =	{Dept. of Computer Science, University of Amsterdam},
	note=		{Lecture notes, in Dutch}
}

@incollection{Va90,
	author =	{F.W. Vaandrager},
	crossref =	{Ba90},
	pages =		{173--236},
	title =		{Process algebra semantics of {POOL}}
}

@incollection{Va90a,
	author =	{F.W. Vaandrager},
	crossref =	{Ba90},
	pages =		{237--260},
	title =		{Some observations on redundancy in a context}
}

@incollection{Va90b,
	author =	{F.W. Vaandrager},
	crossref =	{Ba90},
	pages =		{23--44},
	title =		{Two simple protocols}
}

@phdthesis{Va90c,
	author =	{F.W. Vaandrager},
	year =		1990,
	month =		feb,
	school =	{University of Amsterdam},
	title =		{Algebraic Techniques for Concurrency and Their Application}
}

@inproceedings{Va91a,
	author =	{F.W. Vaandrager},
	crossref =	{LICS6},
	pages =		{387--398},
	title =		{On the Relationship between Process Algebra and
			 Input/Output Automata (extended abstract)}
}

@article{Va91b,
	author =	{F.W. Vaandrager},
	year =		1991,
	journal =	tcs,
	volume =	79,
	pages =		{275--294},
	title =		{Determinism $\rightarrow$ (event structure
				 isomorphism $=$ step sequence equivalence)}
}

@inproceedings{Va93,
	author =	{F.W. Vaandrager},
	crossref =	{REXsemantics},
	title =		{Expressiveness Results for Process Algebras},
	pages =		{609--638}
}

@incollection{Va93b,
	author =	{F.W. Vaandrager},
	title =		{Informatica en rationalisme},
	booktitle =	{Liber Amicorum voor A. Ollongren},
	year =		1993,
	month =		dec,
	editor =	{H.J.M. Goeman and W.A. Kosters},
	publisher =	{Department of Computer Science, Leiden University},
	note =		{In Dutch}
}

@misc{Va94,
	author =	{F.W. Vaandrager},
	title =		{Lamports's bakkerij algoritme},
	note =		{Handout},
	address =	{University of Amsterdam},
	year =		1994,
	month =		oct
}

@misc{Va94b,
	author =	{F.W. Vaandrager},
	title =		{Take-home Tentamen Protocolverificatie},
	address =	{University of Amsterdam},
	year =		1994,
	month =		aug
}

@incollection{Va94c,
	author =	{F.W. Vaandrager},
	title =		{Verification of a distributed summation algorithm},
	booktitle =	{From Universal Morphisms to Megabytes -- a Baayen
			Space Odyssey},
	year =		1994,
	month =		dec,
	editor =	{K.R. Apt and A. Schrijver and N.M. Temme},
	publisher =	{CWI},
	address =	{Amsterdam},
	pages =		{593--608}
}

@techreport{Va95,
	author =	{F.W. Vaandrager},
	year =		1995,
	month =		jan,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R9505},
	address =	{Amsterdam},
	title =		{Verification of a distributed summation algorithm}
}

@inproceedings{Va95a,
	author =	{F.W. Vaandrager},
	crossref =	{CONCUR95},
	title =		{Verification of a distributed summation algorithm},
	pages =		{190--203},
	note =		{A full version is available as CWI Report
			CS-R9505, Amsterdam, January 1995}
}

@incollection{Va96,
	author =	{F.W. Vaandrager},
	booktitle =	{Images of SMC Research 1996},
	year =		1996,
	publisher =	{Stichting Mathematisch Centrum},
	address =	{Amsterdam},
	pages =		{305--316},
	title =		{Hybrid Systems}
}

@book{Va96a,
	author =	{F.W. Vaandrager},
	year =		1996,
	month =		dec,
	publisher =	{Katholieke Universiteit Nijmegen},
	title =		{De Ingebouwde Informatica},
	note =		{Inaugural speech, ISBN 90-9010201-9}
}

@misc{Va96b,
	author =	{F.W. Vaandrager},
	year =		1996,
	title =		{Stepwise Refinement of Hybrid Systems},
	note =		{SION proposal available at
			{\tt http://www.cs.ru.nl/\verb+~+fvaan/PROJECTS/hybrid.ps.Z}}
}

@article{Va98,
        author =        {F.W. Vaandrager},
	year =		1998,
	month =		mar,
	volume =	32,
	number =	13,
	pages =		17,
	journal =	{Automatisering Gids},
	title =		{Logica is prachtig hulpmiddel bij oplossen
				 informaticaproblemen}
}

@article{Va00a,
        author =        {F.W. Vaandrager},
	year =		2000,
	month =		feb,
	volume =	34,
	number =	8,
	pages =		19,
	journal =	{Automatisering Gids},
	title =		{Nieuwe Citatie-Index Voorkomt Dubbel Werk}
}

@article{Va00b,
        author =        {F.W. Vaandrager},
	year =		2000,
	month =		may,
	volume =	34,
	number =	19,
	pages =		23,
	journal =	{Automatisering Gids},
	title =		{De Verleidingen van het Hitlijstdenken}
}

@InCollection{Vaa06,
        author =        {F.W. Vaandrager},
  	booktitle =   	{PROGRESS White papers 2006},
  	title =       	{Does it Pay Off? Model-Based Verification and Validation of Embedded Systems!},
  	year =        	2006,
  	editor =      	{F.A. Karelse},
	publisher =	{STW, the Netherlands},
  	note =		{ISBN-10: 90-73461-00-6, ISBN-13: 978-90-73461-00-0}
}

@article{Vaa06a,
        author =        {F.W. Vaandrager},
  	title =       	{Modelgebaseerde verificatie en validatie loont},
  	year =        	2006,
	journal =	{Bits \& Chips},
	volume =	8,
	number =	15,
	pages =		{53--55},
	month =		{September}
}

@article{VG06,
   	author = 	{F.W. Vaandrager and Groot, A.L. de},
   	title = 	{Analysis of a Biphase Mark Protocol with {U}ppaal and {PVS}},
   	journal = 	{Formal Aspects of Computing Journal},
   	year = 		{2006},
   	volume = 	{18},
   	number = 	{4},
   	pages = 	{433--458},
   	month = 	{December},
   	doi = 		{http://dx.doi.org/10.1007/s00165-006-0008-1},
   	url = 		{http://www.ita.cs.ru.nl/publications/papers/fvaan/BMP.html},
   	category = 	{wet - artikel in wet tijdschrift},
}

@inproceedings{VJK09,
        author =        {F.W. Vaandrager and D.N. Jansen and E. Koopmans},
  	booktitle =   	{Proceedings NIOC 2009, {\rm Utrecht, 7-8 April 2009}},
	editors =	{F. Vodegel and M. Loots},
  	title =       	{Een Module over Model Checking voor het {VWO}},
  	year =        	2009,
	category = 	{vak - vakpublicatie},
        url =		{http://www.mbsd.cs.ru.nl/publications/papers/fvaan/NIOC.html},
	pages =		{135--137},
	publisher =	{Hogeschool Utrecht}
}

@article{Vl79,
	author =	{R. Valette},
	year =		1979,
	journal =	jcss,
	pages =		{35--46},
	title =		{Analysis of {Petri} nets by stepwise refinements},
	volume =	18
}

@article{Var93,
	author =	{P.P. Varaiya},
	year =		1993,
	month =		feb,
	journal =	{IEEE Transactions on Automatic Control},
	pages =		{195--207},
	title =		{Smart cars on smart roads: Problems of control},
	volume =	38,
	number =	2
}

@inproceedings{Ver95,
	author={J.J. Vereijken},
	title={A Process Algebra for Hybrid Systems},
	booktitle={Proceedings Second European Workshop on Real-Time and
		 Hybrid Systems},
	year=1995,
	month=jun,
	address={Grenoble, France},
	editor =	{A. Bouajjani and O. Maler}
}

@techreport{Ve86,
	author =	{D. Vergamini},
	address =	{Valbonne Cedex},
	year =		1986,
	type =		{Report},
	institution =	{INRIA, Centre Sophia-Antipolis},
	number =	501,
	title =		{Verification by means of observational equivalence on automata}
}

@techreport{Ver93,
	author =	{C. Verhoef},
	title =		{A Congruence Theorem for Structured Operational
			Semantics with Predicates and Negative Premises},
	year =		1993,
	type =		{Report},
	institution =	{Eindhoven University of Technology},
	number =	{CSN 93/18},
	note =		{To appear in {\em Proceedings CSL'93}, Swansea 1993}
}

@article{Verhoeff88,
  author    = {T. Verhoeff},
  title     = {Delay-Insensitive Codes - an Overview},
  journal   = {Distributed Computing},
  volume    = {3},
  number    = {1},
  year      = {1988},
  pages     = {1-8}
}

@article{Vi89,
title="Recursive Query Processing: the Power of Logic",
author="L. Vieille",
year=1989,
number=1,
volume=69,
pages="1--53",
journal=tcs
}

@article{Vit88,
	author =	{P.M.B. Vit\'anyi},
	title =		{Locality, communication and interconnect length
			in multicomputers},
	journal =	{SIAM J. on Computing},
	volume =	17,
	year =		1988,
	pages =		{659-672}
}

@techreport{vVvW93,
	title =		{Algebraic Specification of a System for
			Traffic Regulation at Signalized Intersections},
	author =	{Vlijmen, S.F.M. van and Waveren, A. van},
	year =		1993,
	month =		jun,
	institution =	{Programming Research Group, University of Amsterdam},
	type =		{Report},
	number =	{P9313}
}

@inproceedings{Vo87,
	author =	{W. Vogler},
	booktitle =	{$12^{th}$ International Workshop on Graph-Theoretic Concepts in Computer Science, {\rm Bernried, 1986}},
	year =		1987,
	editor =	{G.Tinhofer and G. Schmidt},
	series =	lncs,
	volume =	246,
	publisher =	springer,
	pages =		{82--93},
	title =		{Behaviour preserving refinements of {Petri} nets}
}

@inproceedings{Vo90,
	author =	{W. Vogler},
	booktitle =	{Proceedings STACS 90, {\rm Rouen}},
	year =		1990,
	editor =	{C. Choffrut, T. Lengauer},
	series =	lncs,
	volume =	415,
	publisher =	springer,
	pages =		{285--297},
	title =		{Failures semantics based on interval semiwords is a congruence for refinement}
}

@phdthesis{Vos00,
        author =        {T.E.J. Vos},
        year =          2000,
        school =        {Utrecht University},
        title =         {{UNITY} in Diversity: A Stratified Approach to
        		the Verification of Distributed Algorithms},
        note =          {In preparation}
}

@incollection{Vs87,
	author =	{K. Voss},
	booktitle =	{Concurrency and Nets, Advances in Petri Nets},
	year =		1987,
	editor =	{K. Voss and H. Genrich and G. Rozenberg},
	publisher =	springer,
	note =		{Extended version: Arbeitspapiere der GMD 211, 1986},
	title =		{Interface as a basic concept for systems specification and verification}
}

@techreport{Vr86,
	author =	{J.L.M. Vrancken},
	year =		1986,
	institution =	{Dept. of Computer Science, University of Amsterdam},
	type =		{Report},
	number =	{FVI 86-01},
	title =		{The algebra of communicating processes with empty process}
}

@techreport{Vr88,
	author =	{J.L.M. Vrancken},
	year =		1988,
	type =		{Report},
	institution =	{Programming Research Group, University of Amsterdam},
	number =	{P8807},
	title =		{The implementation of process algebra specifications in {POOL--T}}
}

@INPROCEEDINGS{WW07,
  AUTHOR = {B. Wachter and B. Westphal},
  TITLE = {The {S}potlight {P}rinciple: {O}n {P}rocess-{S}ummarizing {S}tate {A}bstractions},
  BOOKTITLE = {Verification, Model Checking and Abstract Interpretation},
  YEAR = {2007},
  EDITOR = {A. Podelski and B. Cook},
  VOLUME = {4349},
  SERIES = {Lecture Notes in Computer Science},
  PUBLISHER = {Springer},
  NOTE = {Nice, France},
}

@techreport{Wa87,
	author =	{D. Walker},
	year =		1987,
	institution =	lfcs,
	number =	{ECS-LFCS-87-29},
	title =		{Bisimulation equivalence and divergence in {CCS}}
}

@article{Wa89,
	author =	{D.J. Walker},
	year =		1989,
	journal =	fac,
	pages =		{273--292},
	title =		{Automated Analysis of Mutual Exclusion Algorithms
				using {CCS}},
	volume =	1
}

@article{Wa90,
	author =	{D.J. Walker},
	year =		1990,
	journal =	i&c,
	number =	2,
	pages =		{202--241},
	title =		{Bisimulation and divergence},
	volume =	85
}

@article{Wang04,
	author =	{F. Wang},
	year =		2004,
	journal =	{Proceedings of the IEEE},
	volume =	92,
	number =	8,
	pages =		{1283--1305},
	title =		{Formal Verification of Timed Systems: A Survey and Perspective},
}

@article{Wang04a,
  author    = {F. Wang},
  title     = {Efficient verification of timed automata with BDD-like data structures},
  journal   = {STTT},
  volume    = {6},
  number    = {1},
  year      = {2004},
  pages     = {77-97}
}

@inproceedings{Wan90,
	author =	{Wang Yi},
	crossref =	{CONCUR90},
	pages =		{502--520},
	title =		{Real-Time Behaviour of Asynchronous Agents}
}

@inproceedings{WBB92,
  	author = 	{S. Weber and B. Bloom and G. Brown},
  	title = 	{Compiling Joy to Silicon: a verified silicon
				 compilation scheme},
	booktitle =	{Proceedings of the Advanced Research in {VLSI} and
          			VLSI and Parallel Systems Conference,
				{\rm Providence, RI}},
  	year = 		1992
}

@InProceedings{Weh94,
  Author="H. Wehrheim",
  Title="Parametric Action Refinement",
  Editor="E.-R. Olderog",
  Booktitle="Programming Concepts, Methods and Calculi",
  Series="IFIP Transactions", Volume="A--56",
  Organization="IFIP", Publisher="North-Holland Publishing Company", Year=1994,
  Pages="247--266"}

@misc{Wei93,
	author =	{M. Weichert},
	title =		{Algebra of Broadcasting Systems},
	year =		1993,
	institution =	{Department of Computer Sciences,
			Chalmers University of Technology}
}

@techreport{We87,
	author =	{W.P. Weijland},
	year =		1987,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R8747},
	address =	{Amsterdam},
	note =		{To appear in {\em Theoretical Foundations of
			 VLSI design} (K. McEvoy \& J.V. Tucker)},
	title =		{Correctness proofs for systolic algorithms:
			 a palindrome recognizer}
}

@inproceedings{W87a,
	author =	{W.P. Weijland},
	booktitle =	{Proceedings SION Conference CSN 87},
	address =	{Amsterdam},
	year =		1987,
	publisher =	cwi,
	pages =		{143--160},
	title =		{A systolic algorithm for matrix-vector multiplication}
}

@techreport{We88,
	author =	{W.P. Weijland},
	year =		1988,
	institution =	cwi,
	type =		{Report},
	number =	{CS-R8832},
	address =	{Amsterdam},
	title =		{Synchrony with empty process}
}

@phdthesis{We89,
	author =	{W.P. Weijland},
	year =		1989,
	school =	{University of Amsterdam},
	title =		{Synchrony and asynchrony in process algebra}
}

@article{W89a,
	author =	{W.P. Weijland},
	year =		1989,
	journal =	funinf,
	pages =		{139--162},
	title =		{The algebra of synchronous processes},
	volume =	{XII}
}

@phdthesis{Wei96,
	author =	{H.B. Weinberg},
	type =		{Master's Thesis},
	year =		1996,
	month =		feb,
	school =	{Department of Electrical Engineering and Computer
  			Science, Massachusetts Institute of Technology,
			Cambridge},
	title =		{Correctness of vehicle control systems: A case study},
	note =		{Also, MIT/LCS/TR-685}
}

@inproceedings{WL96,
        author =        {H.B. Weinberg and N.A. Lynch},
        title =         {Correctness of vehicle control systems: A case study},
	month =		dec,
        year =          1996,
        booktitle =     {Proceedings of the 17th IEEE Real-Time
                        Systems Symposium (RTSS'96), {\rm Washington, D.C.}},
	pages =		{62--72},
        publisher =     ieeepress
}

@inproceedings{WLD96,
	author =	{H.B. Weinberg and N.A. Lynch and N. Delisle},
	title =		{Verification of Automated Vehicle Protection Systems},
	crossref =	{HybridIII},
	pages =		{101--113}
}

@inproceedings{WL97,
        author =        {C. Weise and D. Lenzkes},
        booktitle =     {Proceedings of the 14th Symposium on
                         Theoretical Aspects of Computer Science
                         {STACS} '97,
                        {\rm L\"{u}beck, Germany}},
        editor =        {R. Reischuk and M. Morvan},
        series =        lncs,
        volume =        1200,
        publisher =     springer,
        month =         feb,
        year =          1997,
        pages =         {177--188},
        title =         {Efficient Scaling-Invariant Checking of Timed
                         Bisimulation}
}

@TECHREPORT{We03,
  AUTHOR      = {Gera Weiss},
  TITLE       = {{Modeling smart-card personalization machine with LSCs}},
  INSTITUTION = {{Weizmann}},
  TYPE        = {Research report},
  YEAR        = {2003},
  URL         = {http://ametist.cs.utwente.nl/INTERNAL/PUBLICATIONS/WISPublicati
ons/cybernetix.zip}
}

@inproceedings{WLL88,
	author =	{J. Welch and L. Lamport and N.A. Lynch},
	crossref =	{PODC7},
	pages =		{28--43},
	title =		{A lattice-structured proof of a minimum spanning
				tree algorithm}
}

@misc{Wie09,
	author =	{F. Wiedijk},
	title =		{The ``de {B}ruijn factor''},
	note =		{Webpage accessed September 2009, {\tt http://www.cs.ru.nl/\verb+~+freek/factor/}},
 	year =		2009
}

@techreport{Wil99,
  	author        = {H.X. Willems},
	title =		{Compact Timed Automata for {PLC} Programs},
	year =		1999,
	month =		dec,
	number =	{CSI-R9925},
	institution =	{Computing Science Institute, University of Nijmegen}
}

@incollection{Wil89,
	author =	{J.C. Willems},
	title =		{Models for Dynamics},
	booktitle =	{Dynamics Reported, Volume 2},
	year =		1989,
	editor =	{U. Kirchgraber and H.O. Walther},
	publisher =	{John Wiley \& Sons Ltd and B.G. Teubner},
	pages =		{171--269}
}

@techreport{Ww87,
	author =	{J. Winkowski},
	address =	{Warsaw},
	year =		1987,
	institution =	{Institute of Computer Science, Polish Academy of Sciences},
	type =		{ICS PAS Report},
	number =	604,
	title =		{An algebraic model for communicating processes}
}

@phdthesis{Wi80,
	author =	{G. Winskel},
	year =		1980,
	school =	{Department of Computer Science, University of Edinburgh},
	title =		{Events in Computation}
}

@inproceedings{Wi82,
	author =	{G. Winskel},
	crossref =	{ICALP9},
	note =		{See also DAIMI Report PB-159, Computer Science Department, Aarhus University, 1983},
	pages =		{561--576},
	title =		{Event structure semantics for {CCS} and related languages}
}

@inproceedings{Wi84,
	author =	{G. Winskel},
	booktitle =	{Proceedings STACS 84},
	year =		1984,
	editor =	{M. Fontet and K. Mehlhorn},
	series =	lncs,
	volume =	166,
	publisher =	springer,
	pages =		{140--150},
	title =		{A new definition of morphism on {Petri} nets}
}

@inproceedings{Wi85,
	author =	{G. Winskel},
	crossref =	{seminar-on-concurrency},
	pages =		{246--267},
	title =		{Categories of models for concurrency}
}

@article{Wi87,
	author =	{G. Winskel},
	year =		1987,
	journal =	i&c,
	pages =		{197--238},
	title =		{Petri nets, algebras, morphisms, and compositionality},
	volume =	72
}

@inproceedings{Wi87a,
	author =	{G. Winskel},
	booktitle =	{Petri Nets: Applications and Relationships to Other Models of Concurrency, Advances in Petri Nets 1986, Part II; Proceedings of an Advanced Course, {\rm Bad Honnef, September 1986}},
	year =		1987,
	editor =	{W. Brauer and W. Reisig and G. Rozenberg},
	series =	lncs,
	volume =	255,
	publisher =	springer,
	pages =		{325--392},
	title =		{Event structures}
}

@inproceedings{Wi89,
	author =	{G. Winskel},
	crossref =	{REXlinear},
	pages =		{364--397},
	title =		{An introduction to event structures}
}

@book{Wi93,
	author =	{G. Winskel},
	year =		1993,
	publisher =	{MIT Press},
	title =		{The Formal Semantics of Programming Languages --- An Introduction},
 	note =		{Foundations of Computing Series}
}

@article{Wit66,
        author =        {H.S. Witsenhausen},
        year =          1966,
        journal =       {IEEE Transactions on Automatic Control},
        volume =        11,
	number =	2,
        title =         {A class of hybrid-state continuous-time dynamic
			systems},
        pages =         {161--167}
}

@inproceedings{WoehrleLT09,
  author    = {M. Woehrle and K. Lampka and L. Thiele},
  title     = {Exploiting Timed Automata for Conformance Testing of Power Measurements},
  year      = {2009},
  pages     = {275-290},
  ee        = {http://dx.doi.org/10.1007/978-3-642-04368-0_21},
  crossref  = {Formats09},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@Article{Wol96b,
        title       =  "The Meaning of ``Formal''",
        author      =  "Pierre Wolper",
        journal     =  "ACM Computing Surveys",
        pages       =   "127",
        month       =   dec,
        year        =   1996,
        volume      =   28,
        number      =   "4es",
        note        =   "(Electronic Supplement to Computing Surveys)"
}

@article{Wol97,
        author =        "P. Wolper",
        title =         "The meaning of formal: from weak to strong formal methods",
        journal         = "Springer International Journal on Software Tools for Technology Transfer",
        year            = 1997,
        volume      =     1,
        number      =     "1-2",
        pages       =    "6--8"
}

@INPROCEEDINGS{tcm,
  author = {Chun Wong and Paul Marchal and Peng Yang and Aggeliki Prayati and Francky Catthoor and Rudy Lauwereins and Diederik Verkest and Hugo De Man},
  title = {Task concurrency management methodology to schedule the MPEG4 1M1 player on a highly parallel processor platform},
  booktitle = {Proc.\ 9th Int. Symposium on Hardware/Software Codesign, CODES},
  year = {2001},
  pages = {170-177},
  publisher = {ACM}
} 

@techreport{WH92,
	author =	{H. Wong-Toi and G. Hoffmann},
	year =		1992,
	institution =	{Department of Computer Science, Stanford University},
	number =	{STAN-CS-92-1411},
	title =		{The Control of Dense Real-Time Discrete Event
			Systems}
}

@book{WD96,
	author =	{J. Woodcock and J. Davies},
	year =		1996,
	publisher =	prentice,
	title =		{Using {Z}: Specification, Refinement, and Proof}
}

@techreport{Wright-Felleisen-91,
  author = {A.K. Wright and M. Felleisen},
  title = {A syntactic approach to type soundness},
  institution = {Rice University},
  year = 1991,
  number = {TR91-160}
}

@article{vW94,
        author =        {Wright, J. von},
        year =          1994,
        journal =       acta,
        volume =        31,
        title =         {The lattice of data refinement},
        pages =         {105--135}
}

@incollection{Wu:94,
  AUTHOR = {S.-H. Wu and S. A. Smolka and E. W. Stark},
  TITLE = {Composition and Behaviors of Probabilistic I/O Automata},
  crossref =	{CONCUR94},
  PAGES = {513-528}
}

@manual{X25,
	title =		{{CCITT Recommendation X.25.
			Interface between DTE and DCE for Terminals Operating
			in the Packet Mode on Public Data Networks}},
	year =		1988,
	organization =	{CCITT Fascicle VIII.3}
}

@inproceedings{YL93,
	author =	{M. Yannakakis and D. Lee},
	crossref =	{CAV5},
	title =		{An efficient algorithm for minimizing real-time
				transition systems},
	pages = 	{210--224}
}


@article{YL95,
        author =        {M. Yannakakis and D. Lee},
        year =          1995,
        journal =       jcss,
        volume =        50,
        number =        2,
        pages =         {209--227},
        title =         {Testing finite state machines: {F}ault detection}
}

@phdthesis{Yor00,
  author =       {K. Yorav},
  title =        {Exploiting Syntactic Structure for Automatic Verification},
  school =       {The Technion, Israel Insitute of Technology},
  month =        {June},
  year =        2000
}

@inproceedings{Yo98,
	author =	{S. Yovine},
        title =         {Model Checking Timed Automata},
	crossref =	{Embedded98},
	pages =		{114--152}
}

@phdthesis{Zu90,
	author =	{J. Zuidweg},
	year =		1990,
	school =	{University of Leiden},
	title =		{Concurrent System Verification with Process Algebra}
}

@phdthesis{Zwa02,
	author =	{Zwaag, M.B. van der},
	year =		2002,
	month =		oct,
	school =	{University of Amsterdam},
	title =		{Models and Logics for Process Algebra}
}


@phdthesis{Zwa88,
	author =	{A. Zwarico},
	year =		1988,
	school =	{Department of Computer and Information Science,
				University of Pennsylvania},
	title =		{Timed Acceptance: An Algebra of Time Dependent Computing}
}

@book{Zw89,
	author =	{J. Zwiers},
	year =		1989,
	series =	lncs,
	volume =	321,
	publisher =	springer,
	title =		{Compositionality, Concurrency and Partial Correctness
-- Proof Theories for Networks of Processes and Their Relationship}
}

%%%% Crossreferenced proceedings and books %%%%

@Proceedings{ACP94,
  	title = 	{Algebra of Communicating Processes,
				{\rm Utrecht, 1994}},
  	booktitle = 	{Algebra of Communicating Processes,
				{\rm Utrecht, 1994}},
  	editor = 	{A. Ponse and C. Verhoef and Vlijmen, S.F.M. van},
  	series = 	{Workshops in Computing},
  	publisher = 	springer,
	year =		1995,
  	crossrefonly = 1
}

@book{HB95,
	editor =	{M.G. Hinchey and J.P. Bowen},
	year =		1995,
	publisher =	prentice,
	address =	{Englewood Cliffs},
	booktitle =	{Applications of Formal Methods},
	title =		{Applications of Formal Methods},
	note =		{To appear},
	crossrefonly =  1
}

@book{Ba90,
	editor =	{J.C.M. Baeten},
	year =		1990,
	publisher =	cup,
	series =	{Cambridge Tracts in Theoretical Computer Science 17},
	booktitle =	{Applications of Process Algebra},
	title =		{Applications of Process Algebra},
	crossrefonly =  1
}

@Proceedings{BS88,
	editor =	{G. Birtwistle and P.A. Subrahmanyam},
	title =		{VLSI Specification, Verification and Synthesis},
	booktitle =	{VLSI Specification, Verification and Synthesis},
	year =		1988,
	publisher =	{Kluwer Academic Publishers},
	crossrefonly =  1
}

@Proceedings{BS89,
	editor =	{G. Birtwistle and P.A. Subrahmanyam},
	title =		{Current Trends in Hardware Verification and Automated
				Theorem Proving},
	booktitle =	{Current Trends in Hardware Verification and Automated
				Theorem Proving},
	year =		1989,
	publisher =	springer,
	crossrefonly =  1
}

@Proceedings{Botik89,
  	title = {Logic at {B}otik '89: Symposium on Logical Foundations of
		Computer Science},
  	booktitle = {Logic at {B}otik '89: Symposium on Logical Foundations of
		Computer Science},
  	editor = {A. R. Meyer and M. A. Taitslin},
  	series = lncs,
  	volume = 363,
  	year = 1989,
  	publisher = springer,
  	crossrefonly = 1
}

@Proceedings{CAAP81,
  	title = {CAAP'81: Trees in Algebra and Programming, 6th Colloquium},
  	booktitle = {CAAP'81: Trees in Algebra and Programming, 6th
		Colloquium},
  	editor = {E. Astesiano and C. B{\"o}hm},
  	key = {CAAP'81},
  	series = lncs,
  	volume = 112,
  	year = 1981,
  	publisher = springer,
  	crossrefonly = 1
}

@Proceedings{CAV1,
	title =		{Proceedings of the International Workshop on
			Automatic Verification Methods for Finite State Systems,
			{\rm Grenoble, France}},
	booktitle =	{Proceedings of the International Workshop on
			Automatic Verification Methods for Finite State Systems,
			{\rm Grenoble, France}},
	year =		1990,
	key =		{CAV'89},
	editor =	{J. Sifakis},
	series =	lncs,
	volume =	407,
	publisher =	springer,
        crossrefonly =  1
}

@Proceedings{CAV2,
	year =		1991,
	key =		{CAV'90},
	title =		{Proceedings of the 2nd International Conference on
			Computer-Aided Verification,
			{\rm New Brunswick, NJ, USA}},
	booktitle =	{Proceedings of the 2nd International Conference on
			Computer-Aided Verification,
			{\rm New Brunswick, NJ, USA}},
	editor =	{E.M. Clarke and R.P. Kurshan},
	series =	lncs,
	volume =	531,
	publisher =	springer,
        crossrefonly =  1
}

@Proceedings{CAV3,
        title =         {Proceedings of the 3rd International Workshop on
			 Computer Aided Verification, {\rm Aalborg, Denmark}},
        booktitle =     {Proceedings of the 3rd International Workshop on
			 Computer Aided Verification, {\rm Aalborg, Denmark}},
	key =		{CAV'91},
        year =          1992,
        editor =        {K.G. Larsen and A. Skou},
	series =	lncs,
	volume =	575,
	publisher =	springer,
        crossrefonly =  1
}

@Proceedings{CAV4,
        title =         {Proceedings of the 4th International Workshop on
			 Computer Aided Verification, {\rm Montreal, Canada}},
        booktitle =     {Proceedings of the 4th International Workshop on
			 Computer Aided Verification, {\rm Montreal, Canada}},
	editor =	{Bochmann, G. v. and D.K. Probst},
	key =		{CAV'92},
        year =          1992,
	series =	lncs,
	volume =	663,
	publisher =	springer,
        crossrefonly =  1
}

@Proceedings{CAV5,
        title =         {Proceedings of the 5th International Conference
			on Computer Aided Verification, {\rm Elounda, Greece}},
        booktitle =     {Proceedings of the 5th International Conference
			on Computer Aided Verification, {\rm Elounda, Greece}},
	key =		{CAV'93},
        year =          1993,
        editor =        {C. Courcoubetis},
	series =	lncs,
	volume =	697,
	publisher =	springer,
        crossrefonly =  1
}

@Proceedings{CAV6,
        title =         {Proceedings of the 6th International Conference
			on Computer Aided Verification, {\rm Stanford, USA}},
        booktitle =     {Proceedings of the 6th International Conference
			on Computer Aided Verification, {\rm Stanford, USA}},
	key =		{CAV'94},
        year =          1994,
        editor =        {D.L. Dill},
	series =	lncs,
	volume =	818,
	publisher =	springer,
        crossrefonly =  1
}

@Proceedings{CAV7,
        title =         {Proceedings of the 7th International Conference on
			Computer Aided Verification, {\rm Li\`{e}ge, Belgium}},
        booktitle =     {Proceedings of the 7th International Conference on
			Computer Aided Verification, {\rm Li\`{e}ge, Belgium}},
	key =		{CAV'95},
	editor =	{P. Wolper},
        year =          1995,
	month =		jun,
	series =	lncs,
	volume =	939,
	publisher =	springer,
        crossrefonly =  1
}

@Proceedings{CAV8,
        title =         {Proceedings of the 8th International Conference on
		Computer Aided Verification, {\rm New Brunswick, NJ, USA}},
        booktitle =         {Proceedings of the 8th International Conference on
		Computer Aided Verification, {\rm New Brunswick, NJ, USA}},
	key =		{CAV'96},
	editor =	{R. Alur and T.A. Henzinger},
        year =          1996,
	month =		{July/August},
	series =	lncs,
	volume =	1102,
	publisher =	springer,
        crossrefonly =  1
}

@Proceedings{CAV9,
        title =         {Proceedings of the 9th International Conference on
		Computer Aided Verification},
        booktitle =     {Proceedings of the 9th International Conference on
		Computer Aided Verification},
	key =		{CAV'97},
	editor =	{O. Grumberg},
        year =          1997,
	series =	lncs,
	volume =	1254,
	publisher =	springer,
        crossrefonly =  1
}

@Proceedings{CAV10,
        title =         {Proceedings of the 10th International Conference on
		Computer Aided Verification, {\rm Vancouver, BC, Canada}},
        booktitle =     {Proceedings of the 10th International Conference on
		Computer Aided Verification, {\rm Vancouver, BC, Canada}},
	key =		{CAV'98},
	editor =	{A.J. Hu and M.Y. Vardi},
        year =          1998,
	month =		{June/July},
	series =	lncs,
	volume =	1427,
	publisher =	springer,
        crossrefonly =  1
}

@Proceedings{CAV11,
        title =         {Proceedings of the 11th International Conference on
		Computer Aided Verification, {\rm Trento, Italy}},
        booktitle =        {Proceedings of the 11th International Conference on
		Computer Aided Verification, {\rm Trento, Italy}},
	key =		{CAV'99},
	editor =	{N. Halbwachs and D. Peled},
        year =          1999,
	month =		{July},
	series =	lncs,
	volume =	1633,
	publisher =	springer,
        crossrefonly =  1
}

@Proceedings{CAV12,
        title =         {Proceedings of the 12th International Conference on
		Computer Aided Verification},
        booktitle =     {Proceedings of the 12th International Conference on
		Computer Aided Verification},
	key =		{CAV'00},
	editor =	{E.A. Emerson and A.P. Sistla},
        year =          2000,
	series =	lncs,
	volume =	1855,
	publisher =	springer,
        crossrefonly =  1
}

@Proceedings{CONCUR90,
	title =		{Proceedings CONCUR 90, {\rm Amsterdam}},
	booktitle =	{Proceedings CONCUR 90, {\rm Amsterdam}},
	year =		1990,
	editor =	{J.C.M. Baeten and J.W. Klop},
	series =	lncs,
  	key = 		{CONCUR'90},
	volume =	458,
	publisher =	springer,
  	crossrefonly = 	1
}

@Proceedings{CONCUR91,
	title =		{Proceedings CONCUR 91, {\rm Amsterdam}},
	booktitle =	{Proceedings CONCUR 91, {\rm Amsterdam}},
	year =		1991,
	editor =	{J.C.M. Baeten and J.F. Groote},
	series =	lncs,
	volume =	527,
  	key = 		{CONCUR'91},
	publisher =	springer,
  	crossrefonly = 	1
}

@Proceedings{CONCUR92,
	title =		{Proceedings CONCUR 92, {\rm Stony Brook, NY, USA}},
	booktitle =	{Proceedings CONCUR 92, {\rm Stony Brook, NY, USA}},
	year =		1992,
	editor =	{W.R. Cleaveland},
	series =	lncs,
	volume =	630,
  	key = 		{CONCUR'92},
	publisher =	springer,
  	crossrefonly = 	1
}

@Proceedings{CONCUR93,
	title =		{Proceedings CONCUR 93, {\rm Hildesheim, Germany}},
	booktitle =	{Proceedings CONCUR 93, {\rm Hildesheim, Germany}},
	year =		1993,
	editor =	{E. Best},
	series =	lncs,
	volume =	715,
  	key = 		{CONCUR'93},
	publisher =	springer,
  	crossrefonly = 	1,
}

@Proceedings{CONCUR94,
	title =		{Proceedings CONCUR 94, {\rm Uppsala, Sweden}},
	booktitle =	{Proceedings CONCUR 94, {\rm Uppsala, Sweden}},
	year =		1994,
	editor =	{B. Jonsson and J. Parrow},
	series =	lncs,
	volume =	836,
  	key = 		{CONCUR'94},
	publisher =	springer,
  	crossrefonly = 	1,
}

@Proceedings{CONCUR95,
	title =		{Proceedings CONCUR 95, {\rm Philadelphia, PA, USA}},
	booktitle =	{Proceedings CONCUR 95, {\rm Philadelphia, PA, USA}},
	year =		1995,
	editor =	{I. Lee and S.A. Smolka},
	series =	lncs,
	volume =	962,
  	key = 		{CONCUR'95},
	publisher =	springer,
  	crossrefonly = 	1,
}

@proceedings{CONCUR96,
  editor    = {U. Montanari and V. Sassone},
  title     = {Proceedings CONCUR 96, {\rm Pisa, Italy, August 26-29, 1996}},
  booktitle = {Proceedings CONCUR 96, {\rm Pisa, Italy, August 26-29, 1996}},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {1119},
  crossrefonly = 	1,
  year      = {1996}
}

@proceedings{CONCUR01,
  editor    = {K.G. Larsen and M. Nielsen},
  title     = {Proceedings CONCUR 01, {\rm Aalborg, Denmark, August 20-25, 2001}},
  booktitle = {Proceedings CONCUR 01, {\rm Aalborg, Denmark, August 20-25, 2001}},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {2154},
  year      = {2001}
}

@Proceedings{FOCS18,
  	title = 	{Proceedings $\it 18^{th}$ Annual Symposium on
				 Foundations of Computer Science},
  	booktitle = 	{Proceedings $\it 18^{th}$ Annual Symposium on
				 Foundations of Computer Science},
  	year = 		1977,
  	publisher = 	{IEEE},
  	key = 		{FOCS'77},
  	crossrefonly = 	1
}

@Proceedings{FORTE2,
	title =		{Proceedings of the $\it 2^{nd}$ International Conference
			on Formal Description Techniques, FORTE'89},
	booktitle =	{Proceedings of the $\it 2^{nd}$ International Conference
			on Formal Description Techniques, FORTE'89},
	year =		1990,
	editor =	{Son T. Vuong},
  	key = 		{FORTE'89},
	publisher =	nholland
}

@Proceedings{FORTE3,
	title =		{Proceedings of the $\it 3^{rd}$ International Conference
			on Formal Description Techniques, FORTE'90},
	booktitle =	{Proceedings of the $\it 3^{rd}$ International Conference
			on Formal Description Techniques, FORTE'90},
	year =		1990,
	month =		nov,
	editor =	{J. Quemada and J.A. Manas and E. V\'{a}zquez},
  	key = 		{FORTE'90},
	publisher =	nholland
}

@Proceedings{FORTE4,
	title =		{Proceedings of the $\it 4^{th}$ International Conference
			on Formal Description Techniques, FORTE'91},
	booktitle =	{Proceedings of the $\it 4^{th}$ International Conference
			on Formal Description Techniques, FORTE'91},
	editor =	{K. Parker and G. Rose},
	year =		1992,
  	key = 		{FORTE'91},
	publisher =	nholland
}

@Proceedings{FORTE5,
	title =		{Proceedings of the $\it 5^{th}$ International Conference
			on Formal Description Techniques, FORTE'92},
	booktitle =	{Proceedings of the $\it 5^{th}$ International Conference
			on Formal Description Techniques, FORTE'92},
	year =		1993,
  	key = 		{FORTE'92},
	publisher =	nholland
}

@Proceedings{ICALP5,
	title = 	{Proceedings $5^{th}$ ICALP},
	booktitle = 	{Proceedings $5^{th}$ ICALP},
	year =		1978,
	publisher =	springer,
	series =	lncs,
	volume =	62,
  	key = 		{ICALP'78},
  	crossrefonly = 	1
}

@Proceedings{ICALP7,
	title = 	{Proceedings $7^{th}$ ICALP, {\em Noordwijkerhout}},
	booktitle = 	{Proceedings $7^{th}$ ICALP, {\em Noorwijkerhout}},
	year =		1980,
	editor =	{de Bakker, J.W. and van Leeuwen, J.},
	publisher =	springer,
	series =	lncs,
	volume =	85,
  	month = 	jul,
  	key = 		{ICALP'80},
  	crossrefonly = 	1
}

@Proceedings{ICALP9,
	title = 	{Proceedings $9^{th}$ ICALP, {\em Aarhus}},
	booktitle = 	{Proceedings $9^{th}$ ICALP, {\em Aarhus}},
	year =		1982,
	editor =	{M. Nielsen and E.M. Schmidt},
	publisher =	springer,
	series =	lncs,
	volume =	140,
  	key = 		{ICALP'82},
  	crossrefonly = 	1
}

@Proceedings{ICALP10,
	title = 	{Proceedings $10^{th}$ ICALP, {\em Barcelona}},
	booktitle = 	{Proceedings $10^{th}$ ICALP, {\em Barcelona}},
  	editor = 	{J. D{\'\i}az},
  	series = 	lncs,
  	volume = 	154,
  	year = 		1983,
  	month = 	jul,
  	publisher = 	springer,
  	key = 		{ICALP'83},
  	crossrefonly = 	1
}

@Proceedings{ICALP11,
  	title = 	{Proceedings $\it 11^{th}$ ICALP, {\em Antwerpen}},
  	booktitle = 	{Proceedings $\it 11^{th}$ ICALP, {\em Antwerpen}},
	year =		1984,
	editor =	{J. Paredaens},
	series =	lncs,
	volume =	172,
  	publisher = 	springer,
  	key = 		{ICALP'84},
  	crossrefonly = 	1
}

@Proceedings{ICALP12,
  	title = 	{Proceedings $\it 12^{th}$ ICALP, {\em Nafplion}},
  	booktitle = 	{Proceedings $\it 12^{th}$ ICALP, {\em Nafplion}},
  	editor = 	{W. Brauer},
  	series = 	lncs,
  	volume = 	194,
  	year = 		1985,
  	month = 	jul,
  	publisher = 	springer,
	c-note = 	{Proceedings of the $12^{th}$ ICALP},
  	key = 		{ICALP'85},
  	crossrefonly = 	1
}

@Proceedings{ICALP13,
  	title = 	{Proceedings $\it 13^{th}$ ICALP, {\em Rennes}},
  	booktitle = 	{Proceedings $\it 13^{th}$ ICALP, {\em Rennes}},
  	editor = 	{L. Kott},
  	series = 	lncs,
  	volume = 	226,
  	year = 		1986,
  	month = 	jul,
  	publisher = 	springer,
	c-note = 	{Proceedings of the $13^{th}$ ICALP},
  	key = 		{ICALP'86},
  	crossrefonly = 	1
}

@Proceedings{ICALP14,
  	title = 	{Proceedings $\it 14^{th}$ ICALP, {\em Karlsruhe}},
  	booktitle = 	{Proceedings $\it 14^{th}$ ICALP, {\em Karlsruhe}},
  	editor = 	{Th. Ottmann},
  	series = 	lncs,
  	volume = 	267,
  	year = 		1987,
  	month = 	jul,
  	publisher = 	springer,
  	key = 		{ICALP'87},
  	crossrefonly = 	1
}

@Proceedings{ICALP15,
        title =         {Proceedings $15^{th}$ ICALP, {\rm Tampere}},
        booktitle =     {Proceedings $15^{th}$ ICALP, {\rm Tampere}},
  	editor = 	{Timo Lepist{\"o} and Arta Salomaa},
        series =        lncs,
        volume =        317,
        year =          1988,
        publisher =     springer,
  	key = 		{ICALP'88},
        crossrefonly =  1
}

@Proceedings{ICALP16,
	title = 	{Proceedings $16^{th}$ ICALP, {\rm Stresa}},
	booktitle = 	{Proceedings $16^{th}$ ICALP, {\rm Stresa}},
  	editor = 	{G. Ausiello and M. Dezani-Ciancaglini and
				 S. Ronchi Della Rocca},
  	series = 	lncs,
  	volume = 	372,
  	year = 		1989,
  	publisher = 	springer,
  	key = 		{ICALP'89},
  	crossrefonly = 	1
}

@Proceedings{ICALP17,
	title = 	{Proceedings $17^{th}$ ICALP, {\rm Warwick}},
	booktitle = 	{Proceedings $17^{th}$ ICALP, {\rm Warwick}},
  	editor = 	{M. Paterson},
  	series = 	lncs,
  	volume =	443,
  	year =		1990,
  	month =		jul,
  	publisher = 	springer,
  	key = 		{ICALP'90},
  	crossrefonly = 	1
}

@Proceedings{ICALP18,
	title = 	{Proceedings $18^{th}$ ICALP, {\rm Madrid}},
	booktitle = 	{Proceedings $18^{th}$ ICALP, {\rm Madrid}},
  	editor = 	{Leach Albert, J. and B. Monien and M. Rodr\'{\i}guez},
  	series = 	lncs,
  	volume =	510,
  	year =		1991,
  	publisher = 	springer,
  	key = 		{ICALP'91},
  	crossrefonly = 	1
}

@Proceedings{ICALP19,
	title = 	{Proceedings $19^{th}$ ICALP, {\rm Vienna}},
	booktitle = 	{Proceedings $19^{th}$ ICALP, {\rm Vienna}},
  	editor = 	{W. Kuich},
  	series = 	lncs,
  	volume =	623,
  	year =		1992,
  	publisher = 	springer,
  	key = 		{ICALP'92},
  	crossrefonly = 	1
}

@Proceedings{ICALP20,
	title = 	{Proceedings $20^{th}$ ICALP},
	booktitle = 	{Proceedings $20^{th}$ ICALP},
	editor =	{A. Lingas and R. Karlsson and S. Carlsson},
  	series = 	lncs,
	volume =	700,
  	year =		1993,
  	publisher = 	springer,
  	key = 		{ICALP'93},
  	crossrefonly = 	1
}

@Proceedings{ICALP21,
        title =         {Proceedings $21^{th}$ ICALP, {\rm Jerusalem}},
        booktitle =     {Proceedings $21^{th}$ ICALP, {\rm Jerusalem}},
        editor =        {S. Abiteboul and E. Shamir},
        series =        lncs,
        volume =        820,
        year =          1994,
        publisher =     springer,
        key =           {ICALP'94},
        crossrefonly =  1
}

@Proceedings{ICALP22,
        title =         {Proceedings $22^{nd}$ ICALP},
        booktitle =     {Proceedings $22^{nd}$ ICALP},
        series =        lncs,
        volume =        944,
        year =          1995,
        publisher =     springer,
        key =           {ICALP'95},
        crossrefonly =  1
}

@Proceedings{ICALP23,
        title =         {Proceedings $23^{nd}$ ICALP},
        booktitle =     {Proceedings $23^{nd}$ ICALP},
        series =        lncs,
        volume =        1099,
        year =          1996,
        publisher =     springer,
        key =           {ICALP'96},
        crossrefonly =  1
}

@Proceedings{ICALP30,
        title =         {Proceedings $30^{th}$ ICALP},
        booktitle =     {Proceedings $30^{th}$ ICALP},
        editor =        {J.C.M. Baeten and J.K. Lenstra and J. Parrow
			and G.J. Woeginger},
        series =        lncs,
	volume =	2719,
        year =          2003,
        publisher =     springer,
        key =           {ICALP'03},
        crossrefonly =  1
}

@Proceedings{LICS2,
  	title = 	{Proceedings $2^{nd}$ Annual Symposium on Logic in
				 Computer Science, {\rm Ithaca, New York}},
  	booktitle = 	{Proceedings $2^{nd}$ Annual Symposium on Logic in
				 Computer Science, {\rm Ithaca, New York}},
  	year = 		1987,
	publisher =	licspub,
	key =		{LICS'87},
  	crossrefonly = 	1
}

@Proceedings{LICS3,
  	title = 	{Proceedings $3^{th}$ Annual Symposium on Logic in
				 Computer Science, {\rm Edinburgh}},
  	booktitle = 	{Proceedings $3^{th}$ Annual Symposium on Logic in
				 Computer Science, {\rm Edinburgh}},
  	year = 		1988,
	publisher =	licspub,
	key =		{LICS'88},
  	crossrefonly = 	1
}

@Proceedings{LICS4,
  	title = 	{Proceedings $4^{th}$ Annual Symposium on Logic in
				 Computer Science, {\rm Asilomar, California}},
  	booktitle = 	{Proceedings $4^{th}$ Annual Symposium on Logic in
				 Computer Science, {\rm Asilomar, California}},
  	year = 		1989,
	publisher =	licspub,
	key =		{LICS'89},
  	crossrefonly = 	1
}

@Proceedings{LICS5,
  	title = 	{Proceedings $5^{th}$ Annual Symposium on Logic in
				 Computer Science, {\rm Philadelphia, USA}},
  	booktitle = 	{Proceedings $5^{th}$ Annual Symposium on Logic in
				 Computer Science, {\rm Philadelphia, USA}},
  	year = 		1990,
	publisher =	licspub,
	key =		{LICS'90},
  	crossrefonly = 	1
}

@Proceedings{LICS6,
  	title =		{Proceedings $6^{th}$ Annual Symposium on Logic in
				 Computer Science, {\rm Amsterdam}},
  	booktitle =	{Proceedings $6^{th}$ Annual Symposium on Logic in
				 Computer Science, {\rm Amsterdam}},
  	year = 		1991,
	publisher =	{IEEE Press},
	key =		{LICS'91},
  	crossrefonly = 	1
}

@Proceedings{LICS7,
  	title =		{Proceedings $7^{th}$ Annual Symposium on Logic in
				Computer Science, {\rm Santa Cruz, California}},
  	booktitle =	{Proceedings $7^{th}$ Annual Symposium on Logic in
				Computer Science, {\rm Santa Cruz, California}},
  	year = 		1992,
	publisher =	licspub,
	key =		{LICS'92},
  	crossrefonly = 	1
}

@Proceedings{LICS8,
  	title =		{Proceedings $8^{th}$ Annual Symposium on Logic in
				Computer Science, {\rm Montreal, Canada}},
  	booktitle =	{Proceedings $8^{th}$ Annual Symposium on Logic in
				Computer Science, {\rm Montreal, Canada}},
  	year = 		1993,
	publisher =	licspub,
	key =		{LICS'93},
  	crossrefonly = 	1
}

@Proceedings{NAPAW92,
  	title =		{Proceedings $1^{st}$ North American Process Algebra
				Workshop, {\rm Stony Brook}},
  	booktitle =	{Proceedings $1^{st}$ North American Process Algebra
				Workshop, {\rm Stony Brook}},
	editor =	{S. Purushothaman and A. Zwarico},
  	year = 		1992,
	publisher =	{Workshops in Computing, Springer-Verlag},
	key =		{NAPAW'92},
  	crossrefonly = 	1
}

@Proceedings{NAPAW93,
  	title =		{Proceedings $2^{nd}$ North American Process Algebra
				Workshop, {\rm Ithaca, NY}},
  	booktitle =	{Proceedings $2^{nd}$ North American Process Algebra
				Workshop, {\rm Ithaca, NY}},
	editor =	{B. Bloom},
  	year = 		1993,
	publisher =	{Cornell Technical Report},
	key =		{NAPAW'93},
  	crossrefonly = 	1
}

@Proceedings{PODC6,
  	title = 	{Proceedings of the $6^{th}$ Annual ACM Symposium on
				 Principles of Distributed Computing},
  	booktitle = 	{Proceedings of the $6^{th}$ Annual ACM Symposium on
				 Principles of Distributed Computing},
  	year = 		1987,
	month =		aug,
  	key = 		{PODC'87},
  	crossrefonly = 	1
}

@Proceedings{PODC7,
  	title = 	{Proceedings of the $7^{th}$ Annual ACM Symposium on
				 Principles of Distributed Computing,
				{\em Toronto, Canada}},
  	booktitle = 	{Proceedings of the $6^{th}$ Annual ACM Symposium on
				 Principles of Distributed Computing,
				{\em Toronto, Canada}},
  	year = 		1988,
	month =		aug,
  	key = 		{PODC'88},
  	crossrefonly = 	1
}

@Proceedings{PODC10,
  	title = 	{Proceedings of the $10^{th}$ Annual ACM Symposium on
				 Principles of Distributed Computing},
  	booktitle = 	{Proceedings of the $10^{th}$ Annual ACM Symposium on
				 Principles of Distributed Computing},
  	year = 		1991,
  	key = 		{PODC'91},
  	crossrefonly = 	1
}

@Proceedings{POPL7,
  	title = 	{Conference Record of the $7^{th}$ ACM Symposium on
				 Principles of Programming Languages,
				{\rm New York}},
  	booktitle = 	{Conference Record of the $7^{th}$ ACM Symposium on
				 Principles of Programming Languages,
				{\rm New York}},
  	year = 		1980,
	c-organization = {ACM},
  	key = 		{POPL'80},
  	crossrefonly = 	1
}

@Proceedings{POPL9,
  	title = 	{Conference Record of the $9^{th}$ ACM Symposium on
				 Principles of Programming Languages},
  	booktitle = 	{Conference Record of the $9^{th}$ ACM Symposium on
				 Principles of Programming Languages},
  	year = 		1982,
	c-organization = {ACM},
  	key = 		{POPL'82},
  	crossrefonly = 	1
}

@Proceedings{POPL10,
  	title = 	{Conference Record of the $10^{th}$ ACM Symposium on
				 Principles of Programming Languages},
  	booktitle = 	{Conference Record of the $10^{th}$ ACM Symposium on
				 Principles of Programming Languages},
  	year = 		1983,
	c-organization = {ACM},
  	key = 		{POPL'83},
  	crossrefonly = 	1
}

@Proceedings{POPL11,
  	title = 	{Conference Record of the $11^{th}$ ACM Symposium on
				 Principles of Programming Languages},
  	booktitle = 	{Conference Record of the $11^{th}$ ACM Symposium on
				Principles of Programming Languages},
  	year = 		1984,
	c-organization = {ACM},
  	key = 		{POPL'84},
  	crossrefonly = 	1
}

@Proceedings{POPL12,
  	title = 	{Conference Record of the $12^{th}$ ACM Symposium on
				Principles of Programming Languages},
  	booktitle = 	{Conference Record of the $12^{th}$ ACM Symposium on
				Principles of Programming Languages},
  	year = 		1985,
	c-organization = {ACM},
  	key = 		{POPL'85},
  	crossrefonly = 	1
}

@Proceedings{POPL13,
  	title = 	{Conference Record of the $13^{th}$ ACM Symposium on
				Principles of Programming Languages,
				 {\rm St. Petersburg, Florida}},
  	booktitle = 	{Conference Record of the $13^{th}$ ACM Symposium on
				Principles of Programming Languages,
				{\rm St. Petersburg, Florida}},
  	year = 		1986,
	c-organization = {ACM},
  	key = 		{POPL'86},
  	crossrefonly = 	1
}

@Proceedings{POPL14,
  	title = 	{Conference Record of the $14^{th}$ ACM Symposium on
				Principles of Programming Languages,
				{\rm Munich}},
  	booktitle = 	{Conference Record of the $14^{th}$ ACM Symposium on
				Principles of Programming Languages,
				{\rm Munich}},
  	year = 		1987,
	c-organization = {ACM},
  	key = 		{POPL'87},
  	crossrefonly = 	1
}

@Proceedings{POPL15,
  	title = 	{Conference Record of the $15^{th}$ ACM Symposium on
				Principles of Programming Languages,
				{\rm San Diego, California}},
  	booktitle = 	{Conference Record of the $15^{th}$ ACM Symposium on
				Principles of Programming Languages,
				{\rm San Diego, California}},
  	year = 		1988,
	c-organization = {ACM},
  	key =  		{POPL'88},
  	crossrefonly = 	1
}

@Proceedings{POPL16,
  	title = 	{Conference Record of the $16^{th}$ ACM Symposium on
				Principles of Programming Languages,
				{\rm Austin, Texas}},
  	booktitle = 	{Conference Record of the $16^{th}$ ACM Symposium on
				Principles of Programming Languages,
				{\rm Austin, Texas}},
  	year = 		1989,
	c-organization = {ACM},
  	key = 		{POPL'89},
  	crossrefonly = 	1
}

@Proceedings{POPL17,
  	title = 	{Conference Record of the $17^{th}$ ACM Symposium on
				Principles of Programming Languages},
  	booktitle = 	{Conference Record of the $17^{th}$ ACM Symposium on
				Principles of Programming Languages},
  	year = 		1990,
	c-organization = {ACM},
  	key = 		{POPL'90},
  	crossrefonly = 	1
}

@Proceedings{POPL19,
  	title = 	{Conference Record of the $19^{th}$ ACM Symposium on
				Principles of Programming Languages},
  	booktitle = 	{Conference Record of the $19^{th}$ ACM Symposium on
				Principles of Programming Languages},
  	year = 		1992,
	c-organization = {ACM},
  	key = 		{POPL'92},
  	crossrefonly = 	1
}

@Proceedings{current-trends,
	title =		{Current Trends in Concurrency},
	booktitle =	{Current Trends in Concurrency},
	year =		1986,
	editor =	{de Bakker, J.W. and Roever, W.P. de and G. Rozenberg},
	publisher =	springer,
	series =	lncs,
	volume =	224,
        crossrefonly =  1
}

@Proceedings{REXlinear,
        title =  	{REX School and Workshop on Linear Time, Branching Time
			and Partial Order in Logics and Models for Concurrency,
			{\rm Noordwijkerhout, The Netherlands, May/June 1988}},
        booktitle =  	{REX School and Workshop on Linear Time, Branching Time
			and Partial Order in Logics and Models for Concurrency,
			{\rm Noordwijkerhout, The Netherlands, May/June 1988}},
	year =		1989,
	editor =	{de Bakker, J.W. and Roever, W.P. de and G. Rozenberg},
	series =	lncs,
	volume =	354,
	publisher =	springer,
        crossrefonly =  1
}

@Proceedings{REXrefinement,
	title = 	{Proceedings REX Workshop on Stepwise Refinement of
			 Distributed Systems: Models, Formalism, Correctness,
			 {\rm Mook, The Netherlands, May/June 1989}},
	booktitle = 	{Proceedings REX Workshop on Stepwise Refinement of
			 Distributed Systems: Models, Formalism, Correctness,
			 {\rm Mook, The Netherlands, May/June 1989}},
	year =		1990,
	editor =	{de Bakker, J.W. and Roever, W.P. de and G. Rozenberg},
	series =	lncs,
	volume =	430,
	publisher =	springer,
  	crossrefonly = 	1
}

@Proceedings{REXoo,
	title = 	{REX Workshop on Foundations of Object-Oriented
				Languages},
	booktitle = 	{REX Workshop on Foundations of Object-Oriented
				Languages},
	year =		1991,
	editor =	{de Bakker, J.W. and Roever, W.P. de and G. Rozenberg},
	series =	lncs,
	volume =	489,
	publisher =	springer,
  	crossrefonly = 	1
}

@Proceedings{REXrealtime,
	title =		{Proceedings REX Workshop on Real-Time: Theory in Practice,
			{\rm Mook, The Netherlands, June 1991}},
	booktitle =	{Proceedings REX Workshop on Real-Time: Theory in Practice,
			{\rm Mook, The Netherlands, June 1991}},
	editor =	{de Bakker, J.W. and C. Huizing and Roever, W.P. de and
				 G. Rozenberg},
	year =		1992,
	series =	lncs,
	volume =	600,
	publisher =	springer,
  	crossrefonly = 	1
}

@Proceedings{REXsemantics,
	title =		{Proceedings REX Workshop on
			 Semantics: Foundations and Applications,
			{\rm Beekbergen, The Netherlands, June 1992}},
	booktitle =	{Proceedings REX Workshop on
			 Semantics: Foundations and Applications,
			{\rm Beekbergen, The Netherlands, June 1992}},
	editor =	{de Bakker, J.W. and Roever, W.P. de and G. Rozenberg},
	year =		1993,
	series =	lncs,
	volume =	666,
	publisher =	springer,
  	crossrefonly = 	1
}

@Proceedings{REXdecade,
	title =		{Proceedings REX School/Symposium:
			 A Decade of Concurrency,
			{\rm Noordwijkerhout, The Netherlands, June 1993}},
	booktitle =	{Proceedings REX School/Symposium:
			 A Decade of Concurrency,
			{\rm Noordwijkerhout, The Netherlands, June 1993}},
	editor =	{de Bakker, J.W. and Roever, W.P. de and G. Rozenberg},
	year =		1994,
	series =	lncs,
	volume =	803,
	publisher =	springer,
  	crossrefonly = 	1
}

@Proceedings{Embedded98,
	title =		{Lectures on Embedded Systems},
	booktitle =	{Lectures on Embedded Systems},
	editor =	{G. Rozenberg and F.W. Vaandrager},
	year =		1998,
	month =		oct,
	series =	lncs,
	volume =	1494,
	publisher =	springer,
  	crossrefonly = 	1
}

@Proceedings{RochePosay,
	title =		{Semantics of Systems of Concurrent Processes,
		Proceedings LITP Spring School on Theoretical Computer Science,
		{\rm La Roche Posay, France}},
	booktitle =	{Semantics of Systems of Concurrent Processes,
		Proceedings LITP Spring School on Theoretical Computer Science,
		{\rm La Roche Posay, France}},
	year =		1990,
	editor =	{I. Guessarian},
	series =	lncs,
	volume =	469,
	publisher =	springer,
  	crossrefonly = 	1
}

@book{handbook-tcs-b,
	editor =	{van Leeuwen, J.},
	year =		1990,
	publisher =	{Elsevier},
	booktitle =	{Handbook of Theoretical Computer Science, Volume B:
			Formal Models and Semantics},
	title =		{Handbook of Theoretical Computer Science, Volume B:
			Formal Models and Semantics},
	crossrefonly =  1
}

@Proceedings{seminar-on-concurrency,
	title =		{Seminar on Concurrency},
	booktitle =	{Seminar on Concurrency},
	year =		1984,
	editor =	{S.D. Brookes and A.W. Roscoe and G. Winskel},
	series =	lncs,
	volume =	197,
	publisher =	springer,
	crossrefonly =  1
}

@Proceedings{advances-in-Petri-nets-87-2,
	title =	{Petri Nets: Applications and Relationships to Other Models of
		 Concurrency, Advances in Petri Nets 1986, Part II;
		 Proceedings of an Advanced Course,	
		 {\rm Bad Honnef, September 1986}},
	booktitle ={Petri Nets: Applications and Relationships to Other Models of
		 Concurrency, Advances in Petri Nets 1986, Part II;
		 Proceedings of an Advanced Course,	
		 {\rm Bad Honnef, September 1986}},
	year =		1987,
	editor =	{W. Brauer and W. Reisig and G. Rozenberg},
	series =	lncs,
	volume =	255,
	publisher =	springer,
        crossrefonly =  1
}

@Proceedings{advances-in-Petri-nets-92,
	title =		{Advances in Petri Nets 1992},
	booktitle =	{Advances in Petri Nets 1992},
	year =		1992,
	editor =	{G. Rozenberg},
	series =	lncs,
	volume =	609,
	publisher =	springer,
        crossrefonly =  1
}

@Proceedings{PSTV7,
	title =		{Protocol Specification, Testing, and Verification, VII,
			{\rm Z\"{u}rich, Switserland}},
	booktitle =	{Protocol Specification, Testing, and Verification, VII,
			{\rm Z\"{u}rich, Switserland}},
	editor =	{H. Rudin and C.H. West},
	publisher =	nholland,
	year =		1987,
	month =		may,
        crossrefonly =  1
}

@Proceedings{PSTV8,
	title =		{Protocol Specification, Testing, and Verification,
			 VIII,
			{\rm Atlantic City, NJ, USA}},
	booktitle =	{Protocol Specification, Testing, and Verification,
			 VIII,
			{\rm Atlantic City, NJ, USA}},
	editor =	{S. Aggarwal and K. Sabnani},
	publisher =	nholland,
	year =		1988,
	month =		jun,
        crossrefonly =  1
}

@Proceedings{PSTV9,
	title =		{Protocol Specification, Testing, and Verification,
			 IX,
			{\rm Enschede The Netherlands, June 6-9, 1989}},
	booktitle =	{Protocol Specification, Testing, and Verification,
			 IX,
			{\rm Enschede The Netherlands, June 6-9, 1989}},
	editor =	{E. Brinksma and G. Scollo and C.A. Vissers},
	publisher =	nholland,
	year =		1990,
        crossrefonly =  1
}


@Proceedings{PSTV10,
	title = 	{Protocol Specification, Testing and
			 Verification, X, {\rm Ottawa, Canada, 1990}},
	booktitle = 	{Protocol Specification, Testing and
			 Verification, X, {\rm Ottawa, Canada, 1990}},
	editor =	{L. Logrippo and R.L. Probert and H. Ural},
	publisher =	nholland,
        crossrefonly =  1
}

@Proceedings{PSTV11,
	title =		{Protocol Specification, Testing, and Verification,
			 XI,
			{\rm Stockholm, Sweden}},
	booktitle =	{Protocol Specification, Testing, and Verification,
			 XI,
			{\rm Stockholm, Sweden}},
	editor =	{B. Jonsson and J. Parrow and B. Pehrson},
	publisher =	nholland,
	year =		1991,
	month =		jun,
        crossrefonly =  1
}

@Proceedings{PSTV12,
	title =		{Protocol Specification, Testing, and Verification,
			 XII,
			{\rm Lake Buena Vista, Florida, USA}},
	booktitle =	{Protocol Specification, Testing, and Verification,
			 XII,
			{\rm Lake Buena Vista, Florida, USA}},
	editor =	{R.J. Linn and M.U. Uyar},
	publisher =	nholland,
	year =		1992,
	month =		jun,
        crossrefonly =  1
}

@Proceedings{TACS94,
	title =		{Proceedings of the International Symposium on
			 Theoretical Aspects of Computer Software (TACS'94),
			{\rm Sendai, Japan}},
	booktitle =	{Proceedings of the International Symposium on
			 Theoretical Aspects of Computer Software (TACS'94),
			{\rm Sendai, Japan}},
        editor =        {M. Hagiya and J.C. Mitchell},
	year =		1994,
	series =	lncs,
	volume =	789,
	publisher =	springer,
        crossrefonly =  1
}


@Proceedings{TLCA93,
	title =		{Proceedings of the $1^{st}$ International Conference on
			Typed Lambda Calculi and Applications, {TCLA'93},
			{\rm Utrecht, The Netherlands}},
	booktitle =	{Proceedings of the $1^{st}$ International Conference on
			Typed Lambda Calculi and Applications, {TCLA'93},
			{\rm Utrecht, The Netherlands}},
	year =		1993,
	editor =	{M. Bezem and J.F. Groote},
	series =	lncs,
	volume =	664,
	publisher =	springer,
        crossrefonly =  1
}

@Proceedings{AMAST93,
        title =         {Proceedings of the $3^{rd}$ AMAST Conference,
			{\rm Twente, The Netherlands, June l993,
			Workshops in Computing}},
        booktitle =     {Proceedings of the $3^{rd}$ AMAST Conference,
			{\rm Twente, The Netherlands, June l993}},
        year =          1993,
        editor =        {M. Nivat and C. Rattray and T. Rus and G. Scollo},
        series =        {Workshops in Computing},
        publisher =     springer,
        crossrefonly =  1
}

@Proceedings{AMASTrealtime,
	title =		{Theories and Experiences for Real-Time System
			Development --- Papers presented at First
			AMAST Workshop on Real-Time System Development,
			{\rm Iowa City, Iowa, November 1993}},
	booktitle =	{Theories and Experiences for Real-Time System
			Development --- Papers presented at First
			AMAST Workshop on Real-Time System Development,
			{\rm Iowa City, Iowa, November 1993}},
	editor =	{T. Rus and C. Rattray},
	publisher =	{World Scientific},
	year =		1994,
  	crossrefonly = 	1
}

@proceedings{AMASTrealtime97,
        title =         {Proceedings of the 4th {AMAST} Workshop on
                        Real-Time System Development,
                        {\rm Palma, Mallorca, Spain, 1997}},
        booktitle =     {Proceedings of the 4th {AMAST} Workshop on
                        Real-Time System Development,
                        {\rm Palma, Mallorca, Spain, 1997}},
        editor =        {M. Bertran and T. Rus},
        publisher =     springer,
        series =        lncs,
        volume =        1231,
        year =          1997,
        crossrefonly =  1
}

@proceedings{ARTS99,
        title =         {Proceedings 5th International {AMAST} Workshop on
                        Formal Methods for Real-Time and Probabilistic Systems,
                        {\rm Bamberg, Germany}},
        booktitle =     {Proceedings 5th International {AMAST} Workshop on
                        Formal Methods for Real-Time and Probabilistic Systems,
                        {\rm Bamberg, Germany}},
        editor =        {J.-P. Katoen},
        publisher =     springer,
        series =        lncs,
        volume =        1601,
        year =          1999,
        crossrefonly =  1
}

@Proceedings{Hybrid93,
        title =         {Hybrid Systems},
	booktitle =	{Hybrid Systems},
        crossrefonly =  1,
	editor =	{R.L. Grossman and A. Nerode and A.P. Ravn and
					H. Rischel},
	series =	lncs,
	volume =	736,
	publisher =	springer,
	year =		1993
}

@Proceedings{HybridIII,
        title =         {Hybrid Systems III},
	booktitle =	{Hybrid Systems III},
        crossrefonly =  1,
	editor =	{R. Alur and T.A. Henzinger and E.D. Sontag},
	series =	lncs,
	volume =	1066,
	publisher =	springer,
	year =		1996
}

@Proceedings{HybridIV,
        title =         {Hybrid Systems IV (Fourth International Conference
			 on Hybrid Systems, Ithaca, NY, October 1996)},
        booktitle =     {Hybrid Systems IV (Fourth International Conference
			 on Hybrid Systems, Ithaca, NY, October 1996)},
        crossrefonly =  1,
	editor =	{P. Antsaklis and W. Kohn and A. Nerode and S. Sastry},
	series =	lncs,
	volume =	1273,
	publisher =	springer,
	year =		1997
}

@Proceedings{FTRTFT92,
        title =         {Formal Techniques in
			Real-Time and  Fault-Tolerant Systems},
        booktitle =     {Formal Techniques in
			Real-Time and  Fault-Tolerant Systems},
        crossrefonly =  1,
	editor =	{J. Vytopil},
        key =           {FTRTFT'92},
	series =	lncs,
	volume =	571,
	publisher =	springer,
	year =		1992
}

@Proceedings{FTRTFT94,
        title =         {Proceedings of the Third International
			School and Symposium on Formal Techniques in
			Real-Time and  Fault-Tolerant Systems (FTRTFT'94),
			{\rm L\"{u}beck, Germany, September 1994} },
        booktitle =     {Proceedings of the Third International
			School and Symposium on Formal Techniques in
			Real-Time and  Fault-Tolerant Systems (FTRTFT'94),
			{\rm L\"{u}beck, Germany, September 1994} },
        crossrefonly =  1,
	editor =	{H. Langmaack and Roever, W.-P. de and J. Vytopil},
        key =           {FTRTFT'94},
	series =	lncs,
	volume =	863,
	publisher =	springer,
	year =		1994
}

@Proceedings{FTRTFT96,
        title =         {Proceedings of the Fourth International
			Symposium on Formal Techniques in
			Real-Time and  Fault-Tolerant Systems (FTRTFT'96),
			{\rm Uppsala, Sweden}},
        booktitle =     {Proceedings of the Fourth International
			Symposium on Formal Techniques in
			Real-Time and  Fault-Tolerant Systems (FTRTFT'96),
			{\rm Uppsala, Sweden}},
        crossrefonly =  1,
	editor =	{B. Jonsson and J. Parrow},
        key =           {FTRTFT'96},
	series =	lncs,
	volume =	1135,
	publisher =	springer,
	year =		1996
}

@Proceedings{FTRTFT98,
        title =         {Proceedings of the Fifth International
			Symposium on Formal Techniques in
			Real-Time and  Fault-Tolerant Systems (FTRTFT'98),
			{\rm Lyngby, Denmark}},
        booktitle =     {Proceedings of the Fifth International
			Symposium on Formal Techniques in
			Real-Time and  Fault-Tolerant Systems (FTRTFT'98),
			{\rm Lyngby, Denmark}},
        crossrefonly =  1,
	editor =	{A.P. Ravn and H. Rischel},
        key =           {FTRTFT'98},
	series =	lncs,
	volume =	1486,
	publisher =	springer,
	year =		1998
}

@Proceedings{TACAS95,
        title =         {Proceedings of the Workshop on Tools and Algorithms
			for the Construction and Analysis of Systems,
			{\rm Aarhus, Denmark}},
        booktitle =     {Proceedings of the Workshop on Tools and Algorithms
			for the Construction and Analysis of Systems,
			{\rm Aarhus, Denmark}},
        crossrefonly =  1,
	editor =	{U.H. Engberg and K.G. Larsen and A. Skou},
        key =           {TACAS'95},
	series =	{BRICS Notes Series},
	volume =	{NS-95-2},
	publisher =	{Department of Computer Science, University of Aarhus},
	year =		1995,
	month =		may
}


@proceedings{TACAS96,
        title =         {Proceedings of the Workshop on Tools and Algorithms
                        for the Construction and Analysis of Systems,
                        {\rm Passau, Germany}},
        booktitle =     {Proceedings of the Workshop on Tools and Algorithms
                        for the Construction and Analysis of Systems,
                        {\rm Passau, Germany}},
        crossrefonly =  1,
        editor =        {T. Margaria and B. Steffen},
        key =           {TACAS'96},
        series =        lncs,
        volume =        1055,
        publisher =     springer,
        year =          1996,
        month =         apr
}

@proceedings{TACAS97,
        title =         {Proceedings of the Third Workshop on Tools and
                        Algorithms for the Construction and Analysis of Systems,
                        {\rm Enschede, The Netherlands}},
        booktitle =     {Proceedings of the Third Workshop on Tools and
                        Algorithms for the Construction and Analysis of Systems,
                        {\rm Enschede, The Netherlands}},
        crossrefonly =  1,
        editor =        {E. Brinksma},
        key =           {TACAS'97},
        series =        lncs,
        volume =        1217,
        publisher =     springer,
        year =          1997,
        month =         apr
}

@proceedings{TACAS01,
        title =         {Proceedings of the International Conference
			on Tools and Algorithms for the Construction
			and Analysis of Systems, {\rm Genova, Italy}},
        booktitle =     {Proceedings of the International Conference
			on Tools and Algorithms for the Construction
			and Analysis of Systems, {\rm Genova, Italy}},
        crossrefonly =  1,
        editor =        {T. Margaria and W. Yi},
        key =           {TACAS'01},
        series =        lncs,
	volume =	2031,
        publisher =     springer,
        year =          2001,
	month =		apr
}


@book{HandLICS1,
	title =		{Handbook of Logic in Computer Science, Vol 1},
	booktitle =	{Handbook of Logic in Computer Science, Vol 1},
	editor =	{S. Abramsky and D. Gabbay and T.S.E. Maibaum},
	year =		1992,
	publisher =	{Oxford University Press},
	crossrefonly =  1
}

@book{HandLICS2,
	title =		{Handbook of Logic in Computer Science, Vol 2},
	booktitle =	{Handbook of Logic in Computer Science, Vol 2},
	editor =	{S. Abramsky and D. Gabbay and T.S.E. Maibaum},
	year =		1992,
	publisher =	{Oxford University Press},
	crossrefonly =  1
}

@book{HandLICS4,
	title =		{Handbook of Logic in Computer Science, Vol 4},
	booktitle =	{Handbook of Logic in Computer Science, Vol 4},
	editor =	{S. Abramsky and D. Gabbay and T.S.E. Maibaum},
	year =		1994,
	publisher =	{Oxford University Press},
	crossrefonly =  1
}

@book{TCShybrid,
	title =		{Special Issue on Hybrid Systems of Theoretical
				Computer Science, {\rm 138(1)}},
	booktitle =	{Special Issue on Hybrid Systems of Theoretical
				Computer Science, {\rm 138(1)}},
	editor =	{A. Pnueli and J. Sifakis},
	year =		1995,
	month =		feb,
	publisher =	{Elsevier Science Publishers},
	crossrefonly =  1
}

@proceedings{HybridGrenoble,
	title=		{Proceedings Second European Workshop on Real-Time and
		 	Hybrid Systems},
	booktitle=	{Proceedings Second European Workshop on Real-Time and
		 	Hybrid Systems},
	year=		1995,
	month=		jun,
	address=	{Grenoble, France},
	editor =	{A. Bouajjani and O. Maler},
	crossrefonly =  1
}

@proceedings{HART97,
	title=		{Proceedings International Workshop on
			Hybrid and Real-Time Systems (HART'97),
		 	{\rm Grenoble, France}},
	booktitle=	{Proceedings International Workshop on
			Hybrid and Real-Time Systems (HART'97),
		 	{\rm Grenoble, France}},
	year=		1997,
	month=		mar,
	editor =	{O. Maler},
	crossrefonly =  1,
        key =           {HART'97},
        series =        lncs,
        volume =        1201,
        publisher =     springer
}

@proceedings{Hybrid98,
	title=		{Proceedings First International Workshop on
			Hybrid Systems: Computation and Control (HSCC'98),
		 	{\rm Berkeley, California}},
	booktitle=	{Proceedings First International Workshop on
			Hybrid Systems: Computation and Control (HSCC'98),
		 	{\rm Berkeley, California}},
	year=		1998,
	month=		apr,
	editor =	{T.A. Henzinger and S. Sastry},
	crossrefonly =  1,
        key =           {HSCC'98},
        series =        lncs,
	volume =	1386,
        publisher =     springer
}

@proceedings{Hybrid99,
	title=		{Proceedings Second International Workshop on
			Hybrid Systems: Computation and Control (HSCC'99),
		 	{\rm Berg en Dal, The Netherlands}},
	booktitle=	{Proceedings Second International Workshop on
			Hybrid Systems: Computation and Control (HSCC'99),
		 	{\rm Berg en Dal, The Netherlands}},
	year=		1999,
	month=		mar,
	editor =	{F.W. Vaandrager and J.H. van Schuppen},
	crossrefonly =  1,
        key =           {HSCC'99},
        series =        lncs,
	volume =	1569,
        publisher =     springer
}

@proceedings{Hybrid00,
	title=		{Proceedings Third International Workshop on
			Hybrid Systems: Computation and Control (HSCC 2000),
		 	{\rm Pittsburgh, PA, USA}},
	booktitle=	{Proceedings Third International Workshop on
			Hybrid Systems: Computation and Control (HSCC 2000),
		 	{\rm Pittsburgh, PA, USA}},
	year=		2000,
	month=		mar,
	editor =	{N.A. Lynch and B.H. Krogh},
	crossrefonly =  1,
        key =           {HSCC'00},
        series =        lncs,
	volume =	1790,
        publisher =     springer
}

@proceedings{Hybrid01,
	title=		{Proceedings Fourth International Workshop on
			Hybrid Systems: Computation and Control (HSCC'01),
		 	{\rm Rome, Italy}},
	booktitle=	{Proceedings Fourth International Workshop on
			Hybrid Systems: Computation and Control (HSCC'01),
		 	{\rm Rome, Italy}},
	year=		2001,
	month=		mar,
	editor =	{Di Benedetto, M.D. and A.L. Sangiovanni-Vincentelli},
	crossrefonly =  1,
        key =           {HSCC'01},
        series =        lncs,
	volume = 	2034,
        publisher =     springer
}

@proceedings{Steam96,
	title=		{Formal Methods for Industrial Applications
			(Specifying and Programming the Steam Boiler Control)},
	year=		1996,
	editor =	{J.-R. Abrial, E. Boerger, H. Langmaack},
	crossrefonly =  1,
        key =           {Steam96},
        series =        lncs,
	volume =	1165,
        publisher =     springer
}

@Proceedings{TPHOL11,
        title =         {Proceedings of the 11th International Conference on
	Theorem Proving in Higher Order Logics, {\rm Canberra, Australia}},
        booktitle =     {Proceedings of the 11th International Conference on
	Theorem Proving in Higher Order Logics, {\rm Canberra, Australia}},
	key =		{TPHOL'98},
	editor =	{J. Grundy and M. Newey},
        year =          1998,
	month =		{September/October},
	series =	lncs,
	volume =	1479,
	publisher =	springer,
        crossrefonly =  1
}

@Proceedings{TAPSOFT97,
        title =         {Proceedings TAPSOFT'97: Theory and Practice of
			 Software Development, {\rm Lille, France}},
        booktitle =     {Proceedings TAPSOFT'97: Theory and Practice of
			 Software Development, {\rm Lille, France}},
	key =		{TAPSOFT'97},
	editor =	{M. Bidoit and M. Dauchet},
        year =          1997,
	month =		{April},
	series =	lncs,
	volume =	1214,
	publisher =	springer,
        crossrefonly =  1
}

@book{HandbookPA,
	title =		{Handbook of Process Algebra},
	booktitle =	{Handbook of Process Algebra},
	editor =	{J.A. Bergstra and A. Ponse and S.A. Smolka},
	year =		2001,
	publisher =	{North-Holland},
	crossrefonly =  1
}

@proceedings{STACS96,
  editor    = {Claude Puech and R{\"u}diger Reischuk},
  title     = {STACS 96, 13th Annual Symposium on Theoretical Aspects of Computer
               Science, Grenoble, France, February 22-24, 1996, Proceedings},
  booktitle = {STACS},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {1046},
  year      = {1996},
  isbn      = {3-540-60922-9}
}

@proceedings{DISC06,
   editor    = {S. Dolev},
   title     = {DISC 2006, 20th International Symposium on Distributed
                               Computing, Stockholm, Sweden, September 18-20, 2006, Proceedings},
   booktitle = {DISC 2006, 20th International Symposium on Distributed
                               Computing, Stockholm, Sweden, September 18-20, 2006, Proceedings},
   publisher = {Springer},
   series    = {Lecture Notes in Computer Science},
   volume    = {4167},
   year      = {2006},
   isbn      = {978-3-540-44624-8}
}

@misc{Yices,
   	author = 	{Yices},
	title =		{{\tt http://yices.csl.sri.com}}
}

@misc{Mace4,
   	author = 	{Prover9/Mace4},
	title =		{{\tt http://www.cs.unm.edu/\verb+~+mccune/} {\tt prover9/}}
}

@book{DaveyPriestley90,
    	author = {Davey, B. A. and Priestley, H. A.},
    	title = {Introduction to Lattices and Order},
    	publisher = {Cambridge University Press},
    	address = {Cambridge, UK},
    	year = 1990
}

@book{Post41,
    author 	= {Post, Emil L.},
    title 	= {The two-valued iterative systems of mathematical logic},
    publisher 	= {Princeton University Press},
    address 	= {Princeton},
    series 	= {Annals of mathematics studies},
    number 	= 5,
    year 	= 1941
} 

@proceedings{Formats09,
  editor    = {J. Ouaknine and F. W. Vaandrager},
  title     = {Formal Modeling and Analysis of Timed Systems, 7th International
               Conference, FORMATS 2009, Budapest, Hungary, September 14-16, 2009. Proceedings},
  booktitle     = {Formal Modeling and Analysis of Timed Systems, 7th International
               Conference, FORMATS 2009, Budapest, Hungary, September 14-16, 2009. Proceedings},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {5813},
  year      = {2009},
  isbn      = {978-3-642-04367-3},
  doi       = {http://dx.doi.org/10.1007/978-3-642-04368-0},
  url       = {http://dx.doi.org/10.1007/978-3-642-04368-0},
  funding   = {QUASIMODO D5.6,ROCKS,ARTS},
  category  = {wet monograph}
}