Cindy Eisner
Software and Systems Modeling
We examine the application of symbolic CTL model checking to railway interlocking software. We show that the railway interlocking systems examined exhibit the characteristics of robustness and locality, and that these characteristics allow optimizations to the model checking algorithms not possible in the general case. In order to gain a better understanding of robustness and locality, we examine in detail a small railway interlocking. © 2002 Springer-Verlag.
Cindy Eisner
Software and Systems Modeling
Eli Arbel, Cindy Eisner, et al.
DAC 2009
Cindy Eisner, Amir Nahir, et al.
Formal Methods in System Design
Cindy Eisner
Electronic Notes in Theoretical Computer Science