![](bg7.png)
ACKNOWLEDGEMENTS
This research was partly funded by the German
Federal Ministry of Education and Research
(BMBF), grant “SPES XTCore” (01IS12005C).
REFERENCES
Abdelrabi, Z., Cantone, E., Ciolkowski, M. & Rombach,
D. (2004), Comparing code reading techniques applied
to objectoriented software frameworks with regard to
effectiveness and defect detection rate. Proc. of the
ISESE, pp. 239-248.
Abi-Antoun, M., Aldrich, J., Nahas, N., Schmerl, B. &
Garlan, D. (2008), Differencing and Merging of archi-
tectural views. ASE Journal, pp. 35-74.
Alfaro, L. & Henzinger, T. (2001), Interface Automata.
Proc. of the ESEC/FSE, pp. 109-120.
Arthur, J., Göner, M., Hayhurst, K. & Holloway, C.
(1999), Evaluating the effectiveness of independent
verification and validation. IEEE Computer, October
pp. 79-83.
Basili, V., Green, S., Lanubile, O., Laitenberger, F., Shull,
F., Sorumgard, S. & Zelkowski, M. (1996), The em-
pirical investigation of perspective-based reading. Intl.
J. Emp. SW. Eng., pp. 133-164.
Beeck, M. (2007), Development of logical and technical
architectures for automotive systems. Software Sys-
tems Modelling, pp. 205-219.
Blanc, X., Mounier, I., Mougenot, A. & Mens, T. (2008),
Detecting model inconsistency through operation-
based model construction. Proc. of ICSE, pp. 511-520.
Boehm, B.& Basili, V. (2001), Software Defect Reduction
Top 10 List." IEEE Computer, January, pp. 135-137.
Borges, R., Garcez, A. & Lamb, L. (2010), Integrating
Model Verification and Self-Adaptation. Proc. of the
ASE, pp. 317-320.
Brinkkemper, S. & Pachidi, S. (2010), Functional Archi-
tecture Modeling for the Software Product Industry.
Proc. of the ECSA, pp. 198-213.
Broy, M., Gleirscher, M., Merenda, S., Kluge, D., Wild,
P., & Krenzer, W. (2009), Toward a Hollistic and
Standardized Automotive Architecture Description.
IEEE Computer, pp. 98-101.
Clarke, E., Emerson, E. & Sifakis, J. (2009), Model check-
ing: algorthmic verification and debugging. Commun.
ACM, pp. 74-84.
Cox, L., Delugach, H. & Skipper, D. (2001), Dependency
Analysis Using Conceptual Graphs. Proc. of the ICCS,
pp. 117-130.
Damas, C., Lambeau, B., Roucoux, F. & van Lamsweerde,
A. (2009), Analyzing Critical Process Models through
Behaviour Model Synthesis. Proc. of the ICSE, pp.
441-451.
Fagan, M. (1986), Advances in Software Inspections. TSE,
pp. 744-751.
Fradet, P., Le Métayer, D. & Périn, M. (1999), Consisten
cy Checking for Multiple View. Proc. of the
ESEC/FSE, pp. 410-428.
Gilb, T. & Graham, D. (1993), Software Inspection. Addi-
son-Wesley.
Grundy, J., Hosking, J. & Mugridge, W. (1998), Incon-
sistency Management for Multiple-View Software
Development Environments.
TSE, pp. 960-981.
Hélouët, L., & Maigat, P. (2001), Decomposition of Mes-
sage Sequence Charts. SDL Forum, pp. 348-364.
Holzmann, G. (1997), "The Model Checker SPIN." TSE,
May, pp. 279-295.
ITU. (2011), Recommendation Z.120.
Kupferman, O., & Vardi, M. (2001), Model Checking of
Safety Properties. Formal Methods in System Design,
pp. 291-314.
Larsen, K. (1993), Efficient Local Correctness Checking.
Computer Aided Verification, pp. 30-43.
Leveson, N. (1995), Safeware: System Safety and Com-
puters. Addison Wesley, Reading.
Margaria, T., & Steffen, B. (2009), Continuous Model-
Driven Engineering. IEEE Comp., Oct., pp. 106-109.
Mauw, S., & Reniers, M. (1999), Operational Semantics
for MSC'96. Journal of Computer Networks, June pp.
1785–1799.
Milicev, D. (2002), Automatic Model Transformations
Using Extended UML Object Diagrams in Modeling
Environments. TSE, April, pp. 413-431.
Porter, A., Votta, L. & Basili, V. (1995), Comparing De-
tection Methods for Software Requirement Inspection:
a Replicated Experiment. TSE, June pp. 563-575.
Pretschner, A., Broy, M., Kruger, I. & Stauner, T. (2007),
Software Engineering for Automotive Systems: A
Roadmap. Proc. of FOSE, pp. 55-71.
Sabetzadeh, M. & Easterbrook, S. (2006), View merging
in the presence of incompleteness and inconsistency.
RE Journal, pp. 174-193.
Shull, F. et al. (2002), "What we have learned about
fighting defects." Proc. of the Intl. Conf. SW Metrics,
pp. 133-154.
Uchitel, S., Brunet, G. & Chechik, M. (2009), Synthesis of
Partial Behavior Models from Properties and Scenari-
os. TSE, May/June pp. 384-406.
Uchitel, S., Kramer, J. & Magee, J. (2001), Detecting
Implied Scenarios in Message Sequence Chart Speci-
fications. Proc. of the ESEC/FSE, pp. 74-82.
Weber, M. & Weisbrod, J. (2002), "Requirements Engi-
neering in Automotive Development - Experiences
and Challenges." Proc. of the RE.
Whittle, J. & Jayaraman, P. (2010), "Synthesizing Hierar-
chical State Machines from Expressive Scenario De-
scriptions." TOSEM, January, pp. 8:1-8:45.
ValidatingtheFunctionalDesignofEmbeddedSystemsagainstStakeholderIntentions
339