1 "The synthesis of sequential switching circuits Journal of Franklin Institute" 1954
2 "Synthesis of behavioral models from scenarios" 29 (29): 99-115, 2003
3 "Software safety analysis of a flight management system vertical navigation function- a status report" 2003
4 "Software intensive systems safety analysis" 19 (19): 21-26, 2004
5 "Safeware : System Safety and Computers" Addison-Wesley Publishing Company 1995
6 "Safety property verification using sequential SAT and bounded modeling checking" 21 (21): 132-143, 2004
7 "Safety models : an analytical tool for risk analysis of medical device systems" 445-451, 2001
8 "Proving properties of a safety-critical system" 41-50, 1991
9 "Methodology of independent software nuclear safety analysis of 5th International Symposium on Software Reliability Engineering" (v) : 76-83, 1994
10 "Communication and Concurrency" Prentice Hall
1 "The synthesis of sequential switching circuits Journal of Franklin Institute" 1954
2 "Synthesis of behavioral models from scenarios" 29 (29): 99-115, 2003
3 "Software safety analysis of a flight management system vertical navigation function- a status report" 2003
4 "Software intensive systems safety analysis" 19 (19): 21-26, 2004
5 "Safeware : System Safety and Computers" Addison-Wesley Publishing Company 1995
6 "Safety property verification using sequential SAT and bounded modeling checking" 21 (21): 132-143, 2004
7 "Safety models : an analytical tool for risk analysis of medical device systems" 445-451, 2001
8 "Proving properties of a safety-critical system" 41-50, 1991
9 "Methodology of independent software nuclear safety analysis of 5th International Symposium on Software Reliability Engineering" (v) : 76-83, 1994
10 "Communication and Concurrency" Prentice Hall
11 "Checking safety properties using compositional reachability analysis" 4978-, 1999
12 "A visual formalism for complex systems" 231-274, 1987