![](bgc.png)
VAR
OvenMotorControl: OvenMotorControl(turn,DoorOpenSensor, OvenTimerControl.IsThereTimeLeft);
OvenLightControl: OvenLightControl(turn,DoorOpenSensor, OvenTimerControl.IsThereTimeLeft);
OvenBellControl: OvenBellControl(turn,OvenTimerControl.IsThereTimeLeft, TimerOvenBellControlRingingBellState.finished);
OvenTimerControl: OvenTimerControl(turn DoorOpenSensor, ButtonPushedSensor, TimerOvenTimerControlDecideIncrementDecrementState.finished);
TimerOvenBellControlRingingBellState: Timer(turn, 4,2, 1,OvenBellControl.OvenBellControl RingingBellState active);
TimerOvenTimerControlDecideIncrementDecrementState: Timer(turn, 5,1, 1,OvenTimerControl.OvenTimerControl DecideIncrementDecrementState active);
Figure 8: The instantiation of modules in main for the SMV model of the executable model of Figure 5.
Devadas, S., Keutzer, K., and Krishnakumar, A. S. (1991).
Design verification and reachability analysis using al-
gebraic manipulation. IEEE Int. Conf. Computer De-
sign on VLSI in Computer &Amp; Processors, ICCD
’91, p. 250–258, IEEE Computer Soc.
Drusinsky, D. (2006). Modeling and Verification Us-
ing UML Statecharts: A Working Guide to Reactive
System Design, Runtime Monitoring and Execution-
based Model Checking. Newnes, Newton, MA, USA.
Estivill-Castro, V. and Hexel, R. (2013). Module isola-
tion for efficient model checking and its application to
FMEA in model-driven engineering. ENASE 8th Int.
Conf. on Evaluation of Novel Approaches to Software
Engineering, p. 218–225. SciTePress.
Estivill-Castro, V. and Hexel, R. (2018). Verifiable parame-
terised behaviour models - for robotic and embedded
systems. 6th Int. Conf. on Model-Driven Engineering
and Software Development, MODELSWARD, p. 364–
371. SciTePress.
Estivill-Castro, V. and Hexel, R. (2019). Resolving the
asymmetry of on-exit versus on-entry in executable
models of behaviour. 7th Int. Conf. Model-Driven
Engineering and Software Development, MODEL-
SWARD, p. 49–61. SciTePress.
Estivill-Castro, V., Hexel, R., and Ramirez Regalado, A.
(2016). Architecture for logic programing with ar-
rangements of finite-state machines. 1st CPSWeek
Workshop on Declarative Cyber-Physical Systems,
DCPS, p. 1–8. IEEE Computer Soc..
Estivill-Castro, V., Hexel, R., and Rosenblueth, D. A.
(2012). Efficient modelling of embedded software
systems and their formal verification. 19th Asia-
Pacific Software Engineering Conference, APSEC
2012, p. 428–433. IEEE.
Estivill-Castro, V. and Rosenblueth, D. A. (2011). Model
checking of transition-labeled finite-state machines.
Software Engineering, Business Continuity, and Ed-
ucation - Int. Conf. ASEA, p. 61–73. Springer.
Gansner, E. R., Koutsofios, E., and North, S. (2015). Draw-
ing graphs with dot.
Harel, D., Pnueli, A., Lachover, H., Naamad, A., Politi, M.,
Sherman, R., Shtull-Trauring, A., and Trakhtenbrot,
M. (1990). Statemate: A working environment for
the development of complex reactive systems. IEEE
Trans. Softw. Eng., 16(4):403–414.
ITU-T Study Group 17 (2002). Formal description tech-
niques (FDT) – Specification and Description Lan-
guage (SDL).
Kang, I. and Lee, I. (1993). A state minimization algorithm
for communicating state machines with arbitrary data
space. Tech. Rpt MS-CIS-93-07, Dpt. of Computer &
Information Science, U. of Pennsylvania.
Lamport, L. (1984). Using time instead of timeout for fault-
tolerant distributed systems. ACM T. on Programming
Languages and Systems, 6:254–280.
Mataric, M. (1992). Integration of representation into goal-
driven behavior-based robots. IEEE T. Robotics and
Automation, 8(3):304 –312.
McColl, C. and Estivill-Castro, V. Hexel, R. (2017). An
OO and functional framework for versatile semantics
of logic-labelled finite state machines. ICSEA : 12th
Int. Conf. on Software Engineering Advances, p. 238–
243. IARIA, Curran.
McMillan, K. L. (1992). Symbolic Model Checking — An
approach to the state explosion problem. PhD thesis,
Carnegie Mellon U., Pittsburgh, CMU-CS-92-131.
Meenakshi, B., Bhatnagar, A., and Roy, S. (2006). Tool for
translating Simulink models into input language of a
model checker. Formal Methods and Software Engi-
neering, p. 606–620, . Springer Berlin Heidelberg.
Mellor, S. J. (2000). UML point/counterpoint: Modeling
complex behavior simply. Embedded Systems Pro-
gramming.
Mellor, S. J. (2007). Embedded systems in UML. OMG
White paper. www.omg.org/news/whitepapers/ label:
We can generate Systems Today.
Myers, T. and Dromey, R. G. (2009). From requirements to
embedded software - formalising the key steps. 20th
Australian Software Engineering Conf. (ASWEC), p.
23–33, Gold Cost, Australia. IEEE Computer Soc.
Ozik, J., Collier, N., Combs, T., Macal, C. M., and North,
M. (2015). Repast simphony statecharts. J. Artificial
Societies and Social Simulation, 18(3):11.
Poledna, S. (1996). Fault-Tolerant Real-Time Systems: The
Problem of Replica Determinism. Kluwer, MA, USA.
Rumbaugh, J., Blaha, M., Premerlani, W., Eddy, F., and
Lorensen, W. (1991). Object-oriented Modeling and
Design. Prentice-Hall, NJ, USA.
Samek, M. (2008). Practical UML Statecharts in C/C++,
Second Edition: Event-Driven Programming for Em-
bedded Systems. Newnes, MA, USA.
Selic, B., Gullekson, G., and Ward, P. T. (1994). Real-time
Object-oriented Modeling. Wiley, NY, USA.
Seshia, S. A., Sharygina, N., and Tripakis, S. (2018). Mod-
eling for verification. , Handbook of Model Checking,
p. 1–26, Cham. Springer.
Shlaer, S. and Mellor, S. J. (1992). Object lifecycles: mod-
eling the world in states. Yourdon P., N.J.
von der Beeck, M. (1994). A comparison of statecharts vari-
ants. 3rd Int. Symposium Organized Jointly with the
Working Group Provably Correct Systems on Formal
Techniques in Real-Time and Fault-Tolerant Systems,
ProCoS, p. 128–148, Berlin. Springer.
Winskel, G. (1993). The Formal Semantics of Programming
Languages: An Introduction. MIT, Cambridge, MA.
MODELSWARD 2020 - 8th International Conference on Model-Driven Engineering and Software Development
298