Using model checking to help discover mode confusions and other automation surprises

John Rushby. Using model checking to help discover mode confusions and other automation surprises. Rel. Eng. & Sys. Safety, 75(2):167-177, 2002. [doi]

Abstract

Abstract is missing.