![](bga.png)
2. Hollnagel, E.: Human reliability analysis: context and control. Academic Press, London
(1993)
3. Leveson, N.: Safeware: System Safety and Computers. Addison-Wesley Publishing Com-
pany, Inc. (1995)
4. Nielsen, J.: Usability Engineering. Academic Press, Inc (1993)
5. Lewis, C., Polson, P., Wharton, C., Rieman, J.: Testing a walkthrough methodology for
theory-based design of walk-up-and-use interfaces. In: CHI ’90 Proceedings, New York,
ACM Press (1990) 235–242
6. Duke, D.J., Harrison, M.D.: Abstract interaction objects. Computer Graphics Forum 12
(1993) 25–36
7. Ryan, M., Fiadeiro, J., Maibaum, T.: Sharing actions and attributes in modal action logic. In
Ito, T., Meyer, A.R., eds.: Theoretical Aspects of Computer Software. Volume 526 of Lecture
Notes in Computer Science. Springer-Verlag (1991) 569–593
8. Clarke, E.M., Emerson, E.A., Sistla, A.P.: Automatic verification of finite-state concurrent
systems using temporal logic specifications. ACM Transactions on Programming Languages
and Systems 8 (1986) 244–263
9. Campos, J.C., Harrison, M.D.: Model checking interactor specifications. Automated Soft-
ware Engineering 8 (2001) 275–310
10. McMillan, K.L.: Symbolic Model Checking. Kluwer Academic Publishers (1993)
11. Loer, K.: Model-based Automated Analysis for Dependable Interactive Systems. PhD thesis,
Department of Computer Science, University of York (2003)
12. Schaad, A.: A Framework for Organisational Control Principles. PhD thesis, Department of
Computer Science, The University of York, UK (2003)
13. Loer, K., Harrison, M.: Towards usable and relevant model checking techniques for the
analysis of dependable interactive systems. In Emmerich, W., Wile, D., eds.: Proceedings of
Automated Systems Engineering: ASE’02, IEEE Press (2002)
14. Campos, J.C., Harrison, M.D.: Using automated reasoning in the design of an audio-visual
communication system. In Duke, D.J., Puerta, A., eds.: Design, Specification and Verifica-
tion of Interactive Systems ’99. Springer Computer Science. Springer-Verlag/Wien (1999)
167–188
15. Honeywell Inc.: SAS MD-80: Flight Management System Guide. Honeywell Inc., Sperry
Commercial Flight Systems Group, Air Transport Systems Division, P.O. Box 21111,
Phoenix, Arizona 85036, USA. (1988) Pub. No. C28-3642-22-01.
16. Campos, J.C.: Using task knowledge to guide interactor specifications analysis. In Jorge,
J.A., Nunes, N.J., e Cunha, J.F., eds.: Interactive Systems. Volume 2844 of Lecture Notes in
Computer Science., Springer (2003) 171–186
17. Vicente, K.: Cognitive Work Analysis. Lawrence Erlbaum Associates (1999)
18. Hildebrandt, M., Harrison, M.: The temporal dimension of dynamic function allocation.
In S. Bagnara, S. Pozzi, A.R., Wright, P., eds.: 11th European Conference on Cognitive Er-
gonomics (ECCE 11), Istituto di Scienze e Tecnologie della Cognizione Consiglio Nazionale
delle Ricerche (2002) 283–292
19. Havelund, K., Pressburger, T.: Model checking java programs using java pathfinder. Inter-
national Journal on Software Tools for Technology Transfer 2 (2000) 366–381
20. Holzmann, G.J., Smith, M.H.: Automating software feature verification. Bell Labs Technical
Journal 5 (2000) 72–87
96