next up previous contents
Next: About this document ... Up: The FMERail Annotated Rail Previous: The Listing

References

1
Symposium on ``Railway Cybernetics'', 1979.

2
The European Rail Network.
UIC-CCFE, Paris, France, 1995.

3
A. Casaza abd Dario Comini, Agelo Morzenti, Matteo Pradella, Pierluigi San Pietro, and Fabio Schreiber.
Interlocking: Specification and Test Case Generation for the Safety Kernel of the Naples Subway.
In Markus Montigel, editor, FMERail Workshop #3, volume # 3 of FMERail Workshop; St. Pölten. FME: Formal Methods Europe, Fachhochschulstudiengang St. Pölten, Herzogenburgerstr. 68, A-3100 St. Pölten, Austria; Phone: +43 2742 313 228, Fax: +43 2742 313 229, February 17-19 1999.
RaCoSy Repository. Petri Net.

4
P. Abdulla, E. Ciapessoni, P. Marmo, K. Meinke, and E. Ratto.
FAST: An Integrated Tool for Verification and Validation of Real-Time System Requirements.
In Thierry Lecomte and Peter Gorm Larsen, editors, FMERail Workshop #5, volume # 4 of FMERail Workshop; Tolouse, France. FME: Formal Methods Europe, Steria, France, September 22-24 1999.
Prover Techn., Sweden (PA+KM), Ansaldo, Neapels, Italy (EC+ER) and ENEL-SRI, Milano, Italy (PM). RaCoSy Repository. FAST.

1
S. Agerholm, P.-J. Lecoeur, and E. Reichert.
Formal Specification and Validation at Work: A Case Study using VDM-SL.
In Proceedings of Second Workshop on Formal Methods in Software Practice. ACM, Florida, March 1998.
.

6
Sten Agerholm, Pierre Lecoeur, and Etienne Reichert.
Formal Specification at Work: A Case Study using VDM-SL.
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
IFAD, Denmark (SA) and Dassault Electronique, France (PL+ER). RaCoSy Repository. VDM, VDM-SL.

7
P. Alle.
Improving Rail Transit Line Capacity Using Computer Graphics.
Logist. and Transp. Rev. (Canada), 17:429-442, 1981.
.

2
A. M. Amendola, L. Impagliazzo, P. Marmo, and F. Poli.
Experimental Evaluation of Computer-Based Railway Control Systems.
In Proceedings of The Twenty-Seventh Annual International Symposium on Fault-Tolerant Computing (FTCS'97), pages 380-384, Washington - Brussels - Tokyo, June 1997. IEEE.
.

3
A. Anselmi, C. Bernardeschi, A. Fantechi, S. Gnesi, S. Larosa, G. Mongardi, and F. Torielli.
An Experience in Formal Verification of Safety Properties of a Railway Signalling Control System.
In Gerhard Rabe, editor, SAFECOMP'95: 14th International Conference on Computer Safety, Reliability and Security, pages 474-488, Belgirate, Italy, 1995. Springer-Verlag.
.

10
G. Aprea, P. Colantuoni, P. Firpo, R.Lido, D. Pellegrino, M. Rapone, and F. Senesi.
SIGAV, the Italian High Speed Railway Integrated Management System: Safety and Reliability Overview.
In Erwin Schoitsch, editor, SAFECOMP'96: 15th International Conference on Computer Safety, Reliability and Security, page 250, Vienna, Austria, 1996. Springer.
.

11
Railway Industry Association.
Safety Related Software for Railway Signalling.
RIA 23, version 1.0, British Railways Board/London Underground Limited, Railway Industry Association, 6 Buckingham Gate, London SW1E 6JP, UK, 1991.
.

12
W. Atkinson and J. Cunningham.
Proving properties of a safety-critical system.
Software Engineering Journal, 6(2):41-50, March 1991.
FOREST. .

13
C. Bailey, editor.
European Railway Signalling, London, England, 1995. Institution of Railway Signalling Engineers, A&C Black.
Referenced in [153] .

14
T. Basten, R.N. Bol, and M. Voorhoeve.
Simulating and Analyzing Railway Interlocking in ExSpect.
Technical Report 94-37, Department of Computing Science, Eindhoven University of Technology, P.O. Box 513, 5600 MB Eindhoven, The Netherlands, September 1994.
See [15]. ExSpect.

15
T. Basten, R.N. Bol, and M. Voorhoeve.
Simulating and analyzing railway interlockings in ExSpect.
IEEE Parallel & Distributed Technology: Systems & Applications, 3(3):50-62, Fall 1995.
See [14]. ExSpect.

16
M. A. Bayfield.
British rail graphics systems.
Displays Technology and Applications, 1:95-101, July 1979.
.

17
D Beattie.
Should Dangerous Goods be Moved by Rail rather than by Road?
SARSS'89: Reliability on the Move, page 149, 1989.
.

18
A. Bechina, J. Hermle, and M. Siormanolakis.
Using Prolog for a railway control system.
In Fourth International Conference on the Practical Application of Prolog; London, UK, pages 19-30. Practical Application Co., Blackpool, UK, 1996.
Logic Programming, Prolog.

19
P. Behm and J.-M. Meynadier.
Météor: an Industrial Success in Formal Development.
In FMERail Workshop 1. Matra Transport International, a joint Matra and Siemens company, 1998.
In: [185] RaCoSy Repository.

20
M. Russell Bentley and Mark Boggs.
Utilization of GIS in the Decision Making Process of a Transportion Master Plan: The Interstate 4 Multi-Modal Master Plan.
In Proceedings of 1996 ESRI User Conference, Palm Springs, California, 1996.
.

21
Anders Berg.
Adtranz Signal's Formal Verification Process: Safety Verification of Interlocking Functionality.
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
Adtranz, Sweden. RaCoSy Repository. STERNOL.

22
J. Berger, P. Middelraad, and A.J. Smith.
The European railway interlocking specification.
In IRSE, pages 70-82, 1993.
Referenced in [153] .

4
J.A. Bergstra, W.J. Fokkink, W.M.T. Mennen, and S.F.M. van Vlijmen.
Spoorweglogica via EURIS, volume 22 of Quaestiones infinitae.
Universiteit Utrecht, Faculteit Wijsbegeerte, 1997.
In Dutch. .

24
C. Bernardeschi, A. Fantechi, S. Gnesi, and G. Mongardi.
Proving safety properties for embedded control systems.
In A. Hlawiczka, J.G. Silva, and L.Simoncini, editors, Dependable Computing - EDCC-2. Second European Dependable Computing Conference Proceedings; Taormina, Italy, pages 321-32. Springer-Verlag; Berlin, Germany, 1996.
.

25
W. M. Beynon, M. Slade, and Y. P. Yung.
Protocol Specification in Concurrent Systems Software Development.
Research Report CS-RR-163, Department of Computer Science, University of Warwick, Coventry, UK, September 1990.
.

26
D. Bjørner.
A Architecture for Running Map Systems.
Technical Report db/arch/01, UNU/IIST, the UN University's International Institute for Software Technology, P.O.Box 3058, Macau; E-Mail: library@iist.unu.edu, February 1994.

Incomplete draft -- the result of one week's work over Chinese New Year 1994!

FMERail Annotations:

RaCoSy Repository. VDM, VDM-SL.

27
D. Bjørner.
Models of the Railway Infratructure.
In FMERail Workshop 1, Bldg. 344, DK-2800 Lyngby, Denmark, 1998. Dept.IT, Techn. Univ. of Denmark.
Copy of [28]. In: [185] RaCoSy Repository.

28
D. Bjørner, C.W. George, B.S. Hansen, H. Laustrup, and S. Prehn et al.
A Railway System, Coordination `97: Case Study Workshop Example.
Technical Report 93, UNU/IIST, P.O.Box 3058, Macau, Spring 1997 - Fall 1998.

Torso: The report in grossly incomplete.
With contributions from: Jakob Braad, Jon Fuglsang, Karin S. Mogensen and Ulrik Svanlund. RaCoSy Repository. RAISE/RSL.

29
D. Bjørner, C.W. George, and S. Prehn.
Scheduling and rescheduling of trains, page 24 pages.
Academic Press, 1999.

FMERail Annotations:

RaCoSy Repository.

30
D. Bjørner, Dong YuLin, and S. Prehn.
Domain Analysis: A Case Study of Railway Station Management.
Technical Report db/03/01, UNU/IIST, the UN University's International Institute for Software Technology, P.O.Box 3058, Macau; E-Mail: library@iist.unu.edu, November 12 1994.

Presented at KICS'94: The Kunming (Yunnan, PRC) Intl. CASE Symposium, Nov. 1994.

FMERail Annotations:

RaCoSy Repository. RAISE/RSL.

31
Dines Bjørner, Jakob Braad, and Karin S. Moensen (Eds.).
Models of Railway Systems: Domain.
In Thierry Lecomte and Peter Gorm Larsen, editors, FMERail Workshop #5, volume # 4 of FMERail Workshop; Tolouse, France. FME: Formal Methods Europe, Steria, France, September 22-24 1999.
(60 pages) Dept. of IT, Techn. Univ. of Denmark. RaCoSy Repository. RAISE/RSL.

32
Dines Bjørner, Jakob Braad, and Karin S. Moensen (Eds.).
Models of Railway Systems: Requirements.
In Thierry Lecomte and Peter Gorm Larsen, editors, FMERail Workshop #5, volume # 4 of FMERail Workshop; Tolouse, France. FME: Formal Methods Europe, Steria, France, September 22-24 1999.
(62 pages) Dept. of IT, Techn. Univ. of Denmark. RaCoSy Repository. RAISE/RSL.

33
G. Blanke.
Simulation of GSM Data Channels in a Safety Critical Railway Environment.
Lecture Notes in Computer Science, 783:334-??, 1994.
.

34
Maarten Boasson.
Distributed Decisions and Asynchronous Communication.
In Thierry Lecomte and Peter Gorm Larsen, editors, FMERail Workshop #5, volume # 4 of FMERail Workshop; Tolouse, France. FME: Formal Methods Europe, Steria, France, September 22-24 1999.
Holland Signaalapparaten B.V. and Univ. of Amsterdam, The Netherlands. RaCoSy Repository.

35
R.N. Bol, J.W.C. Koorn, L.H. Oei, and S.F.M. van Vlijmen.
Syntax and Static Semantics of the Interlocking Design and Application Language.
Technical Report P9422, Programming Research Group, University of Amsterdam, Kruislaan 403, 1098 SJ Amsterdam, The Netherlands, November 1994.
ExSpect.

36
A. Borälv.
A Fully Automated Approach for Proving Safety Properties in Interlocking Software Using Automatic Theorem-Proving.
In S. Gnesi and D. Latella, editor, Proceedings of the Second International ERCIM Workshop on Formal Methods for Industrial Critical Systems, pages 39-62. Consiglio Nazionale Ricerche, Pisa, July 1997.
.

37
A. Borälv.
The industrial success of verification tools based on Stålmarck's method.
In O. Grumberg, editor, Computer Aided Verification, 9th International Conference, CAV'97, pages 7-10. Springer-Verlag, 1997.
Stålmarck's Method.

38
A. Borälv.
The Industrial Success of Verification Tools Based on Stålmarck's Method.
In Orna Grumberg, editor, Proceedings of the Ninth International Conference on Computer Aided Verification, volume 1254 of Lecture Notes in Computer Science, pages 7-10. Springer Verlag, 1997.
RaCoSy Repository.

39
A. Borälv.
Formal Methods in Computerised Railway Interlocking at ADTranz.
In FMERail Workshop 1, Stockholm, Sweden, 1998. Prover Technology AB.
In: [185]. 11 page OH Foil Presentation RaCoSy Repository.

40
A. Borälv and G. Stålmarck.
Prover Technology in Railways.
In Michael G. Hinchey and Jonathan P. Bowen, editors, Industrial-Strength Formal Methods, International Series in Formal Methods. Academic Press, 1998.
In preparation .

41
A. Borälv and G. Stålmarck.
Prover Technology in Railways.
In FMERail Workshop 1, Stockholm, Sweden, 1998. Prover Technology AB.
In: [185]. Chapter preprint from Industrial Strength Formal Methods, Academic Press, 1998, Eds. J.P. Bowen and M. Hinchey RaCoSy Repository.

42
Arne Borälv and Carl-Johan Block.
Formal Verification Tools in Swedish Railways 1989-1999.
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
Prover Technology, Sweden. RaCoSy Repository. Stålmarck's Method.

43
Jakob Braad and Karin S. Mogensen.
Interlocking: Specification and Test Case Generation for the Safety Kernel of the Naples Subway (Based on: [3]).
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
textslOne of a series of exercise reports re-modelling given example solutions [44,206,208,207,205,45]Dept. of IT, Techn.Univ. of Denmark. RaCoSy Repository. RAISE/RSL.

44
Jakob Braad and Karin S. Mogensen.
Interlocking: The B Method (Draft) (Based on: [257]).
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
One of a series of exercise reports re-modelling given example solutions [43,206,208,207,205,45] Dept. of IT, Techn.Univ. of Denmark. RaCoSy Repository. The B Method.

45
Jakob Braad and Karin S. Mogensen.
The Automatic Railway Case (Based on [103]).
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
textslOne of a series of exercise reports re-modelling given example solutions [44,43,206,208,207,205]Dept. of IT, Techn.Univ. of Denmark. RaCoSy Repository. RAISE/RSL.

46
R. A. Brand.
3-D Colour Graphics for Rail Network Simulation and Control.
In Anonymous, editor, First Australasian Conf. on Computer Graphics, pages 38-48. 1983.
.

47
R. A. Brand.
3-D colour graphics for rail network simulation and control.
In First Australasian Conf. on Computer Graphics, pages 38-48, 1983.
.

48
V. Van Breusegem, G. Campion, and G. Bastin.
Traffic Modelling and State Feedback Control for Metro Rail Lines Based on Linear Discrete-Event State-Space Models.
IEEE Trans. Autom. Control, 36(7):770-784, July 1991.
.

49
British Railways Board Issue SSI8003.
SSI data preparation guide, February 1990.
.

50
Manfred Broy.
Specification of a Railway System.
Technical report, University of Passau, Bavaria, Germany, 1987.
.

51
G. Bruno, G. Ghiani, and G. Improta.
Models and algorithms for the design of rapid transit networks.
In Proc. 7th Int. Special Conf. IFORS, Information Systems in Logistics and Transportation, June 1997.
.

52
A. Bud, A. Nicholson, and B. Chandra.
Scheduling trains with genetic algorithms.
Technical Report 96/250, Dept. Computer Science, Monash University, Australia 3168, October 1996.
http://www.cs.monash.edu.au/ (CSci Monash home) .

53
Michael R. Bussieck, Peter Kreuzer, and Uwe T. Zimmermann.
Optimal Lines for Railway Systems.
Technical Report TR-95-01, MOTUBS, 1995.
.

54
E. Canver, J.T. Gayen, and A. Moik.
Formal specification of the controller software on railway switch example.
Automatiserungs Praxis, 1997.
RaCoSy Repository.

55
L. Ceglowski and A. Lewinski.
Highly Reliable Microcomputer Systems for Railway Control.
SARSS'87: Achieving Safety and Reliability with Computer Systems, page 182, 1987.
.

56
CENELEC European Committee for Electro-technical Standardisation.
CENELEC 50127-1: Railway Applications - Guide to the specification of a guided transport system, Part 1: General.
Referenced in [177] .

57
CENELEC European Committee for Electro-technical Standardisation.
CENELEC 50128: Railway Applications - Software for railway control and protection systems.
Referenced in [177] .

58
CENELEC European Committee for Electro-technical Standardisation.
CENELEC 50129: Railway Applications - Safety related electronic systems for signalling.
Referenced in [177] .

59
CENELEC European Committee for Electro-technical Standardisation.
CENELEC EN 50126: Railway Applications - the specification and demonstration of Reliability, Availability, Maintainability and Safety.
Referenced in [177] .

60
Ján Cerný.
Supply/Demand relation on a single bus route.
In The 9-th International Scientific Conference. 1990.
.

61
Ján Cerný and Pavol Kluvánek.
Foundations of Mathetical Theory of Transport.
Publishing House of the Slovak Academy of Sciences, Bratislava, 1991.
.

62
?? Chapront.
Future of Formal Methods.
In Thierry Lecomte and Peter Gorm Larsen, editors, FMERail Workshop #5, volume # 4 of FMERail Workshop; Tolouse, France. FME: Formal Methods Europe, Steria, France, September 22-24 1999.
??? (Was document distributed ?) Alstom, France.

63
P. Chapront.
Vital coded processor and safety related software design.
In H. H. Frey, editor, Safety of Computer Control Systems 1992 (SAFECOMP 92) Computer Systems in Safety-Critical Applications. Proceedings of the IFAC Symposium, pages 141-145. Div. of Transp., GEC Alsthom, Saint-Ouen, France, Pergamon, Oxford, UK, 29-30 Oct. 1992.
.

64
Tommy W. S. Chow and Oulian Shuai.
Feedforward Neural Networks Based Input-Output Models for Railway Carriage System Identification.
Neural Processing Letters, 5(2):57-67, 1997.
.

65
Morris Chudleigh and James Catmur.
Independent Safety Assessment of Rail Systems in their Operational Environment.
In F. Redmill and T. Anderson, editors, Achievement and Assurance of Safety: Proceedings of the 3rd Safety-critical Systems Symposium, pages 80-89, Brighton, 1995. Springer.
.

66
Tadeusz Cichocki and Janusz Górksi.
Safety Assessment of Computerised Railway Signalling supported by Formal Methods.
In Thierry Lecomte and Peter Gorm Larsen, editors, FMERail Workshop #5, volume # 4 of FMERail Workshop; Tolouse, France. FME: Formal Methods Europe, Steria, France, September 22-24 1999.
Adtranz, Katowice, Poland (TC) and Techn.Univ. of Gdansk, Poland. RaCoSy Repository. Z and Z-variants.

67
M. T. Claessens and N. M. van Dijk.
A mathematical programming model to determine a set of operation lines at minimal costs.
Technical report, University of Amsterdam, 1994.
.

68
Robin Cook.
Management of Dependability: A Railway Perspective.
In Felix Redmill and Tom Anderson, editors, Safety-Critical Systems: The Convergence of High Tech and Human Factors: Proceedings of the 4th Safety-critical Systems Symposium Leeds, UK 6-8 February 1996, pages 61-70, Leeds, UK, 1996. Springer.
.

69
Teodor Gabriel Crainic and Jacques Roy.
OR tools for tactical freight transportation planning.
EUJOR, 33:290-297, 1988.
.

70
A.H. Cribbens.
Solid Sate Interlocking (SSI): An integrated electronuc signalling system for mainline railways.
In IEE Proceedings, volume 134(3), pages 148-158, 1987.
.

71
A.H. Cribbens and I.H. Mitchell.
The Applicaiton of Advanced Computing Techniques to the Generation and Checking of SSI Data.
In IRSE, London, England, 1992.
Referenced in [153] .

72
R.W. Crookes, C.D.M. Oates, D.M. Brooks, and M. Cowen.
A high integrity monitor for signalling interference prevention at 50 Hz.
In International Conference on Electric Railways in a United Europe (Conf. Publ. No.405), pages 143-7. IEE, 1995.
RaCoSy Repository.

73
J. Cullyer and J. Fairclough.
Safety critical systems - when computers might kill.
Information Technology & Public Policy, 11(1):14-19, 1992.
.

74
J. Cullyer and Wong Wai.
Application of formal methods to railway signalling - a case study.
Computing & Control Engineering Journal, 4(1):15-22, Feb. 1993.
RaCoSy Repository. ccs.

5
W. J. Cullyer and Wong Wai.
A Formal Approach to Railway Signalling.
In Compass '90: 5th Annual Conference on Computer Assurance, pages 102-108, Gaithersburg, Maryland, 1990. National Institute of Standards and Technology.
.

76
W.J. Cullyer and J.W. Wise.
Application of Formal Methods to Railway Signalling.
SARSS'89: Reliability on the Move, page 11, 1989.
.

77
A. Cuppari and F. Zini.
an Agent-based Prototype for Freight Traffic Management.
In Thierry Lecomte and Peter Gorm Larsen, editors, FMERail Workshop #5, volume # 4 of FMERail Workshop; Tolouse, France. FME: Formal Methods Europe, Steria, France, September 22-24 1999.
Italien State Railways (AC) and Univ. of Genoa, Italy (FZ). Logic (Non-Modal)/Logic Programming, Prolog.

78
Jin Danhua.
A Second Math. Model of Train Time Tabling.
Technical Report jdh/math/05, UNU/IIST, the UN University's International Institute for Software Technology, P.O.Box 3058, Macau; E-Mail: library@iist.unu.edu, October 1994.
RAISE/RSL.

79
R. De Lemos, A. Saeed, and T. Anderson.
A train set as a case study for the requirements analysis of safety-critical systems.
The Computer Journal, 35(1):30-40, February 1992.
.

80
Zhao Debin, Zhang Shixiong, and Gao Wen.
The implementation of automatic monitoring network system for trains.
In Proceedings TENCON '93. 1993 IEEE Region 10 Conference on 'Computer, Communication, Control and Power Engineering' (Cat.No.93CH3286-2), volume 4, pages 72-5. IEEE, IEEE, 1993.
RaCoSy Repository.

81
P. Dechering, R. Groenboom, E. de Jong, and J.T. Udding.
Formalisation of a Software Architecture for Embedded Systems: a Process Algebra for SPLICE.
In FMERail Workshop 1, 1st and 3rd author: P.O.Box 42, NL-7550 GD Hengelo, The Netherlands; B.V.; 2nd and 4th author: P.O.Box 800, NL-9700 AV Groningen, The Netherlands, 1998. 1st and 3rd author: Applied Systems Research, Hollandse Signaalapparaten B.V.; 2nd and 4th author: Dept. Comp. Sci., Univ. of Groningen.
In: [185] RaCoSy Repository.

82
Gebhard Decknatel.
Modelling Train Movement with Hybrid Petri Nets.
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
Univ. Braunschweig, Germany. RaCoSy Repository. Petri Net.

6
B. Dehbonei and L.-F. Mejia.
Formal Development of Software in Safety-Critical Railway Systems.
In B. T. K. S. Murthy, C. A. Mellitt, G. Brebbia, and S. Sciutto, editors, Railway Operations, volume 2, pages 213-219. COMPRAIL94, Computational Mechanics Publications, 1994.
.

84
B. Dehbonei and L.-F. Mejia.
Formal methods in the railways signalling industry.
In M. Naftalin, T. Denvir, and M. Bertran, editors, FME '94: Industrial Benefit of Formal Methods. Second International Symposium of Formal Methods Europe. Proceedings; Barcelona, Spain, pages 26-34. Springer-Verlag, Berlin, Germany; Lecture Notes in Computer Science LNCS, 1994.
The B Method.

7
B. Dehbonei and L.-F. Mejia.
Formal Development of Safety-Critical Software Systems in Railway Signaling.
In M. G. Hinchey and J. P. Bowen, editors, Applications of Formal Methods, Series in Computer Science, pages 227-252. Prentice Hall International, 1995.
.

86
Pierre Desforges.
RATP Interlocking System Experience.
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
RATP, Paris, France. RaCoSy Repository. The B Method.

87
Hartmut Dienst.
Linienplanung im spurgeführten Personenfernverkehr mit Hilfe eines heuristischen Verfahrens.
PhD thesis, TU Braunschweig, 1978.
.

8
H. Dierks and C. Dietz.
Graphical Specification and Reasoning: Case Study Generalised Railroad Crossing.
In John Fitzgerald, Cliff B. Jones, and Peter Lucas, editors, FME'97: Industrial Applications and Strengthened Foundations of Formal Methods (Proc. 4th Intl. Symposium of Formal Methods Europe, Graz, Austria, September 1997), volume 1313 of Lecture Notes in Computer Science, pages 20-39. Springer-Verlag, September 1997.
ISBN 3-540-63533-5 .

89
G. Dipoppa and R. Bove.
Modelling a Railway Application in a Geographical and Textual Integrated Fashion.
In FMERail Workshop 2, Via Anguillarese, 301 S.Maria di Galeria, I-00060 Roma, Italy, 1998. ENEA C.R.-CASACCIA.
In: [293].

FMERail Annotations:

RaCoSy Repository.

90
Josef Doppebauer.
Safety Considerations on Railway Signalling Systems -- is there a Future for Formal Methods ?
In Thierry Lecomte and Peter Gorm Larsen, editors, FMERail Workshop #5, volume # 4 of FMERail Workshop; Tolouse, France. FME: Formal Methods Europe, Steria, France, September 22-24 1999.
Alcatel, Austria. RaCoSy Repository.

9
E. Dürr, N. Plat, and M. de Boer.
CombiCom: Tracking and Tracing Rail Traffic using VDM++.
In Michael G. Hinchey and Jonathan P. Bowen, editors, Applications of Formal Methods, pages 203-225. Prentice-Hall International, 1995.
ISBN 0-13-3-366949-1 .

92
Tony R. Eastham.
High-speed rail. Another golden age?
Scientific American, 273(3):100-??, September 1995.
.

93
Lars-Henrik Ericsson.
Formal Verification of Railway Interlockings.
Technical Report 1997:4, Swedish National Rail Administration, Banverket HK, S-781 85 Borlänge, Sweden, December 1 1997.
This is a duplicate listing of [96] ! RaCoSy Repository. Stålmarck's Method.

94
Lars-Henrik Ericsson.
Formalising Railway Interlocking Requirements.
Technical Report 1997:3, Swedish National Rail Administration, Banverket HK, S-781 85 Borlänge, Sweden, December 1 1997.
This is a duplicate listing of [95] ! RaCoSy Repository. Stålmarck's Method.

95
L.-H. Eriksson.
Formal verification of railway interlockings.
Technical Report 1997:4, Swedish National Rail Administration, 1997.
Previously published in Swedish as report 1997:2

Comments: This work was carried out by Prover Technology using NP-Tools (which is based on Stålmarck's method) RaCoSy Repository.

96
L.-H. Eriksson.
Formalising railway interlocking requirements.
Technical Report 1997:3, Swedish National Rail Administration, 1997.
Previously published in Swedish as report 1997:1

Comments: The formal specification in this report was done in a formal specification tool developed by Prover Technology and Ericsson, the tool being based on Stålmarck's method RaCoSy Repository.

97
Lars-Henrik Eriksson.
Adtranz Signal's Formal Verification Process: The STERNOL Specification Tool (SST) (See [94,93]).
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
Industrilogik, Sweden. RaCoSy Repository. STERNOL.

98
Lars-Henrik Eriksson.
Some Technical Aspects of an Interlocking Specification language (See [94,93]).
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
Industrilogik, Sweden. RaCoSy Repository.

99
L.H. Eriksson.
Specifying Railway Interlocking Requirements for Practical Use.
In Erwin Schoitsch, editor, SAFECOMP'96: 15th International Conference on Computer Safety, Reliability and Security, page 243, Vienna, Austria, 1996. Springer.
.

100
Maria Fahlén.
A Unified Language for Railway Signalling Specification (Railway Operating Company Benefits).
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
Banverket, Falun, Sweden. RaCoSy Repository. STERNOL.

101
Maria Fahlén.
CENELEC Norm-based Safety Approvals and Formal Specification.
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
Banverket, Sweden. RaCoSy Repository.

102
L.M.G. Feijs, H.B.M. Jonkers, and C.A. Middelburg.
Notations for Software Design.
FACIT Series. Springer-Verlag, 1994.
See [103]. RaCoSy Repository. COLD-K.

103
L.M.G. Feijs, H.B.M. Jonkers, and C.A. Middelburg.
The Automatic Railway case, chapter 6 in [102].
FACIT Series. RaCoSy Repository. COLD-K. Springer-Verlag, 1994.

104
W.J. Fokkink.
Safety criteria for the vital processor interlocking at Hoorn-Kersenboogerd.
In Proceedings of the 5th Conference on Computers in Railways, COMPRAIL'96, Part I: Railway Systems and Management, pages 101-110, Berlin, 1996. Computational Mechanics Publications.
Extended version is available as: technical report 135, Logic Group Preprint Series of the Department of Philosophy, Utrecht University RaCoSy Repository.

10
W.J. Fokkink, G.P. Kolk, and S.F.M. van Vlijmen.
EURIS, a specification method for distributed interlockings.
In Proceedings of SAFECOMP '98, LNCS. Springer-Verlag, 1998.
.

11
Daniel Fredholm.
Using Formal Methods. A practical compairsion between Z/EVES and PVS.
Technical Report T97-04, Swedish Institute of Computer Science, 1998 1998.
.

107
Daniel Fredholm.
Specifying an Interlocking System: The Alister Project.
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
Industrilogik, Sweden. RaCoSy Repository.

108
Bruno Fringuelli, Evelina Lamma, Paola Mello, and Giovanni Santocchia.
Knowledge-Based Technology for Controlling Railway Stations.
IEEE Expert, 7(6):45-52, December 1992.
.

109
W. Gall.
The Management of Change: A Case Study from the Railway Industry.
In R.F. Cox, editor, Safety and Reliability Society Symposium: Managing Risk in a Changing Organisational Climate, Swindon,UK, 1996. SARS Ltd, Clayton House, 59 Piccadilly, Manchester, M1 2AQ.
.

110
M. Geerling.
Modelling and Simulation for Innovative Train Protection and Control: Light Rail Perspective.
In FMERail Workshop 1. Origin Nederland, 1998.
In: [185] RaCoSy Repository.

111
C.W. George.
Specification and Development of An Automatic Train System.
Internal Research Note LACOS/CRI/CWG/38, CRI A/S, 1995.
RAISE/RSL.

112
C.W. George.
A Theory of Distributed Train Rescheduling.
In Marie-Claude Gaudel and Jim Woodcock, editors, FME'96: Industrial Benefit and Advances in Formal Methods, pages 499-517. Springer-Verlag, March 1996.
.

113
A.M. Godber.
A European interlocking specification -- the work of the ERRI A201 Committee.
In ASPECT-95, IRSE Intl. Conf. on Advanced Railway Control, volume 10, pages 19-26, September 1995.
Referenced in [153] .

114
B. Godziejewski.
Applying Formal Methods in a Changing Railway Environment.
In FMERail Workshop 2, Utrecht, The Netherlands, 1998. European Rail Research Institute.
In: [293] RaCoSy Repository.

115
B. Godziejewski and Y. Hirao.
ERRI A 201 work to harmonise functional conditions for signalling interlocking.
In FMERail Workshop 1. ERRI, Utrecht, The Netherlands and Railway Technical Research Inst., Tokyo, Japan, 1998.
In: [185] RaCoSy Repository.

116
Bogdan Godziejewski.
On Formal Notation to Express Requirements Specifications -- Phase 1 of the Euro-Interlocking Project.
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
ERRI, The Netherlands. RaCoSy Repository.

117
Frits Goebel.
Railsway nets.
Available from UB Göttingen, ZB: 560.01712 .

118
C.A. Grimes.
Application of Genetic Techniques to the Planning of Railway Track Maintenance Work.
In A.M.S. Zalzala, editor, First International Conference on Genetic Algorithms in Engineering Systems: Innovations and Applications, GALESIA, volume 414, pages 467-472, Sheffield, UK, 12-14 September 1995. IEE.
12-14 September 1995, Halifax Hall, University of Sheffield, UK see also http://www.iee.org.uk/LSboard/Conf/program/galprog.htm .

119
J.F. Groote.
A Language for Railway Interlocking Specification.
In FMERail Workshop 1, Amsterdam, NL, 1998. CWI.
In: [185] RaCoSy Repository.

120
J.F. Groote, J.W.C. Koorn, and S.F.M. van Vlijmen.
The Safety Guaranteeing System at Station Hooen-Kersenboogerd.
Technical Report 121, Utrecht University, Utrecht University, Department of Philosophy, Heidelberglaan 8, Utrecht The Netherlands, October 1994.
See [121].

Comments: The analysis of this station was based on a Prover developed by Jan Frison Groote. The prover in question is based on Stålmarck's method $\mu$CRL.

121
J.F. Groote, S.F. van Vlijmen, and J.W.C. Koorn.
The safety guaranteeing system at station Hoorn-Kersenboogerd.
In COMPASS '95. Proceedings of the Tenth Annual Conference on Computer Assurance (Cat. No.95CH35802); Gaithersburg, MD, USA, pages 57-68. IEEE, New York, N.Y., USA, 1995.
See [120].

Comments: The analysis of this station was based on a Prover developed by Jan Frison Groote. The prover in question is based on Stålmarck's method $\mu$CRL.

122
G. Guiho and L.-F. Mejia.
Operational safety critical software methods in railways.
In Anon, editor, IFIP Transactions A (Computer Science and Technology),, pages 262-9. IFIP World Congress, Hamburg, Germany, 1984.
The B Method.

123
F. Guldan.
Maximization of distances of regular polygons on a circle.
APLMA, 25:182-195, 1980.
.

124
Shigeru Haga.
Prevention of Accidents at Road-Rail Level Crossings Protected with Automatic Barriers.
In Proceedings of the Human Factors Society 32nd Annual Meeting, volume 1 of Safety: Transportation Safety, pages 933-937, 1988.
.

125
G. Hagelin.
ERICSSON Safety systems for railway control.
In U. Voges, editor, Software diversity in computerized control systems, pages 11-21. Springer, 1988.
.

126
K. M. Hansen.
Validation of a Railway Interlocking Model.
Lecture Notes in Computer Science, 873:582-??, 1994.
.

127
Kirsten Mark Hansen.
Validation of a Railway Interlocking Model.
In M. Bertran M. Naftalin, T. Denvir, editor, FME'94: Industrial Benefit of Formal Methods, pages 582-601. Springer-Verlag, October 1994.
.

128
K.M. Hansen.
Formalising Railway Interlocking Systems.
In Nordic Seminar on Dependable Computing Systems, pages 83-94, Technical University of Denmark, August 1994. Department of Computer Science.
.

129
K.M. Hansen.
Validation of a railway interlocking model.
In M. Naftalin, T. Denvir, and M. Bertran, editors, FME '94: Industrial Benefit of Formal Methods. Second International Symposium of Formal Methods Europe. Proceedings; Barcelona, Spain, pages 582-601. Springer-Verlag, Berlin, Germany; Lecture Notes in Computer Science LNCS, 1994.
RaCoSy Repository. VDM, VDM-SL.

130
K.M. Hansen.
Modelling Railway Interlocking Systems.
Technical Report ID-TR: 1996-167, Department of Computer Science, Technical University of Denmark, Building 344, DK-2800 Lyngby, Denmark, September 1995.
RaCoSy Repository.

131
K.M. Hansen.
Linking Safety Analysis to Safety Requirements.
PhD thesis, Department of Computer Science, Technical University of Denmark, Building 344, DK-2800 Lyngby, Denmark, August 1996.
RaCoSy Repository.

132
K.M. Hansen.
Formalising Railway Interlocking Systems.
In FMERail Workshop 2, ScanRail Consult, Signalling Assessment, Pilestræde 58/6, DK-1112 Copenhagen K, Denmark, 1998. Danish National Railway Agency.
In: [293].

FMERail Annotations:

RaCoSy Repository.

133
S. Hanzel.
Electronic Data Interchange in Railway Traffic.
In J. Gricar, editor, EDI: Business Strategy For 90's The 4th Electronic Data Interchange Conference, pages 309-317, Bled, Slovenia,Yugoslavia, June 10-12 1991.
.

134
A.J. Harrison and I.D.R. Shannon.
The application of formal methods to railway signalling systems specification and the Esprit III project CASCADE.
In SAFECOMP 95. 14th International Conference on Computer Safety, Reliability and Security, pages 101-12. Springer-Verlag, 1995.
RaCoSy Repository.

135
V. Hartonas-Garmhausen, T. Kurfess, E.M. Clarke, and D. Long.
Automatic verification of industrial designs.
In Workshop on Industrial-Strength Formal Specification Techniques (Cat. No.95TH8051); Boca Raton, FL, USA. IEEE Comput. Soc. Press, Los Alamitos, CA, USA, 1995.
Model Checking.

136
A.E. Haxthausen and J. Peleska.
Formal Development and Verification of a Distributed Railway Control System.
In FMERail Workshop 2, DK-2800 Lyngby Denmark; P.O.Box 340440, D-28334 Bremen, Germany, 1998. Dept. of IT, Techn. Univ. of Denmark; BISS, Bremen Univ.
A repeat [137]. In: [293]. 15 pages.

FMERail Annotations:

RaCoSy Repository.

137
A.E. Haxthausen and J. Peleska.
Formal Development and Verification of a Distributed Railway Control System.
In FMERail Workshop 1, DK-2800 Lyngby Denmark; P.O.Box 340440, D-28334 Bremen, Germany, 1998. Dept. of IT, Techn. Univ. of Denmark; BISS, Bremen Univ.
See also: [136]. In: [185].

FMERail Annotations:

RaCoSy Repository.

138
I. Hayashi, K. Itoh, and S. Suzuki.
Man-machine interactive guidance for urban railway networks passenger information system.
Computers and Graphics, 7(1):59-72, 1983.
.

139
U. Heinrichs and C. Moll.
On the scheduling of one-dimensional transport systems.
Technical report, Mathematisches Institut, Universität zu Köln, 1997.
.

140
A. Hidden.
Investigation into the Clapham Junction railway accident.
HMSO Cm 820, UK Department of Transport, 1989.
.

141
Yuji Hirao, Takahiko Ogino, Mitsuyoshi Fukuda, and Ikuo Watanabe.
Interest in Formal Methods from Japanese Perspective.
In Thierry Lecomte and Peter Gorm Larsen, editors, FMERail Workshop #5, volume # 4 of FMERail Workshop; Tolouse, France. FME: Formal Methods Europe, Steria, France, September 22-24 1999.
Railway Technical Researhc Inst., Tokyo, Japan. RaCoSy Repository.

142
G. Hoffmann, S. Balemi, and U. Brunner.
Design of a Discrete Event Controller for a Model Railway.
In D. Franke and F. Kraus, editors, Proc. of 1st IFAC Symposium on Design Methods of Control Systems, pages 451-456, Zurich, Switzerland, September 1991. Pergamon Press, Oxford, UK.
.

143
M. Hollenberg, J.F. Groote, and S.F.M. van Vlijmen.
Laris 1.0 Language for Railway Interlocking Specifications.
Utrecht.
Referenced in [177] RaCoSy Repository.

144
A.A. Holzbacher, M. Perin, and M. Sudholt.
Modeling railway control systems using graph grammars: a case study.
In D. Garlan and D. Le Metayer, editors, Coordination Languages and Models. Second International Conference COORDINATION '97, pages 172-86. Springer-Verlag, 1997.
RaCoSy Repository. Graph Grammars.

145
A.A. Holzbacher, M. Perin, and M. Suedholt.
Modeling railway control systems using graph grammars: A case study.
Lecture Notes in Computer Science, 1282:172-??, 1997.
.

146
C Horellou, C Rossi, and G Sissa.
An AI/Real Time Solution for Expert Scheduling of Underground Rail Traffic.
SARSS'89: Reliability on the Move, page 47, 1989.
.

147
P. D. Horne.
A hybrid test rig with real time rail vehicle modelling.
In T. S. Durrani, W. A. Sandham, J. J. Soraghan, and J. Hulskamp, editors, Applications of Transputer 3, pages 20-25, Amsterdam, 1991. IOS Press.
.

148
G. Howarth, B.C. Ashcroft, and N.R. Jenkins.
Computer graphics as a tool for a consultation (in railway projects) -- Computer Applications in Railway Planning and Management.
In T.K.S. Murthy, R.E. Rivier, G.F. List, and J. Mikolaj, editors, Proceedings of the Second International Conference on Computer Aided Design, Manufacture and Operation in the Railway and Other Advanced Mass Transit Systems, pages 63-73. Comput. Mech. Publications, 1990.
RaCoSy Repository.

149
IEEE.
Proceedings of 1995 IEEE Workshop on Industrial-Strength Formal Specification Techniques. IEEE Comput. Soc. Press, 1995.
RaCoSy Repository.

150
J. A. Profeta III, N. P. Andrianos, Bing Yu, B. W. Johnson, T. A. DeLong, D. Guaspart, and D. Jamsck.
Safety-critical systems built with COTS.
IEEE Computer, 29(11):54-60, November 1996.
.

151
M. Ingleby.
Safety properties of a control network: local and global reasoning in machine proof.
In Proceedings of Real Time Systems. Paris, January 1994.
.

152
M. Ingleby.
A Galois theory of local reasoning in control systems with compositionality.
In Proceedings of Mathematics of Dependable Systems. Oxford UP (UK), 1995.
.

153
M. Ingleby.
A predicate logic for harmonised interlocking functions.
In FMERail Workshop 1, Huddersfield HD1 3DH, UK, 1998. School of Computing and Mathematics, University of Huddersfield.
In: [185] RaCoSy Repository.

154
M. Ingleby and D.J. Mee.
A calculus of hazard for railway signalling.
In Workshop on Industrial-Strength Formal Specification Techniques (Cat. No.95TH8051); Boca Raton, FL, USA, pages 146-58. IEEE Comput. Soc. Press, Los Alamitos, CA, USA, 1995.
Logic (Non-Modal).

155
M. Ingleby and I. Mitchell.
Proving Safety of a Railway Signalling System Incorporating Geographic Data.
SAFECOMP '92: Safety of Computer Control Systems1992, pages 129-134, 1992.

12
M. Ingleby and I.H. Mitchell.
Proving Safety of a Railway Signaling System Incorporating Geographic Data.
In H.H. Frey, editor, SAFECOM'92 Conference Proceedings of IFAC, pages 129-134, Zürich (CH), November 1992. Pergamon Press.
.

157
Michael Ingleby.
Galois Connections in Railway Formalisation.
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
Univ. of Huddersfield, England. RaCoSy Repository. Mathematics (Galois Connections).

158
Dave Jackson.
Verification of BR Interlocking.
In FMERail Workshop 2, Bath, England, 1998. Praxis Critical Systems.
In: [293]

FMERail Annotations:

RaCoSy Repository.

159
J. Jarmulak, E. J. H. Kerckhoffs, and P. P. Van't Veen.
Case-Based Reasoning in an Ultrasonic Rail-Inspection System.
Lecture Notes in Computer Science, 1266:43-??, 1997.
.

13
Jacek Jarmulak, Eugene J. H. Kerckhoffs, and Peter Paul van't Veen.
Case-Based Reasoning in an Ultrasonic Rail-Inspection System.
In David B. Leake and Enric Plaza, editors, Proceedings of the 2nd International Conference on Case-Based Reasoning (ICCBR-97), volume 1266 of LNAI, pages 43-52, Berlin, July25-27 1997. Springer.
.

14
M. Jelaska.
Computer Elaboration of Time-Table for Single Railway Line.
In Jean Cea, editor, Proceedings of the 7th IFIP Conference on Optimization Techniques: Modeling and Optimization in the Service of Man - Part 1, volume 41 of LNCS, pages 657-675, Nice, France, September 1975. Springer.
.

162
Li-Min Jia and Xi-Di Zhang.
Distributed Intelligent Railway Traffic Control Based on Fuzzy Decision Making.
Fuzzy Sets and Systems, 62(3):255-265, 1994.
.

15
R. M. J. Jose, G. vom Scheidt, and J. F. Boyce.
Application of Connectionist Local Search to Line Management Rail Traffic Control.
In Proceedings of the 3rd International Conference on the Practical Application of Constraint Technology, pages 193-212, Blackpool, April23-25 1997. The Practical Application Ltd.
.

164
F. Piriard & J. J. Kalker.
Curve squeal noise by trams; Part II: Wheel/rail interaction.
Technical Report DUT-TWI-95-119, Delft University of Technology, Department of Technical Mathematics and Informatics, Delft, The Netherlands, 1995.
.

165
J. J. Kalker.
Computational contact mechanics of the wheel-rail system.
Technical Report DUT-TWI-92-28, Delft University of Technology, Department of Technical Mathematics and Informatics, Delft, The Netherlands, 1992.
.

166
J. J. Kalker.
Considerations on rail corrugation.
Technical Report DUT-TWI-92-26, Delft University of Technology, Department of Technical Mathematics and Informatics, Delft, The Netherlands, 1992.
(telephone +31 15 78 4568) (hardcopy only) .

167
J. J. Kalker.
A railway rail on irregular, discrete supports.
Technical Report DUT-TWI-94-11, Delft University of Technology, Department of Technical Mathematics and Informatics, Delft, The Netherlands, 1994.

168
J. J. Kalker.
Wheel-rail contact; Theory, algorithms, applications.
Technical Report DUT-TWI-96-69, Delft University of Technology, Department of Technical Mathematics and Informatics, Delft, The Netherlands, 1996.
.

169
J.J. Kalker.
The railway track response function.
Technical Report DUT-TWI-93-40, Delft University of Technology, Department of Technical Mathematics and Informatics, Delft, The Netherlands, 1993.
.

16
H. Kantz and C. Koza.
The ELEKTRA Railway Signalling-System: Field Experience with an Actively Replicated System with Diversity.
In The Twenty-Fifth International Symposium on Fault-Tolerant Computing (FTCS '95), pages 453-458, Los Alamitos, June 1995. IEEE Computer Society Press.
.

171
T. King.
Formalising British Rail's Signalling Rules.
In M. Bertran M. Naftalin, T. Denvir, editor, FME'94: Industrial Benefit of Formal Methods, pages 45-54. Springer-Verlag, October 1994.
.

172
T. King.
Formalising British Rail's Signalling Rules.
Lecture Notes in Computer Science, 873:45-??, 1994.
.

173
F. Kitahara, H. Katano, T. Ono, Y. Kakumoto, K. Kikuchi, and M. Shinomoto.
Distributed management for software maintenance in a wide-area railway system.
In Proceedings - ISADS 97 - Third International Symposium on Autonomous Decentralized Systems (Cat. No. 97TB100111), pages 311-18. IEEE Comput. Soc. Press, 1997.
RaCoSy Repository.

174
Salomon Klaczko, Jörg Fiebelkorn, and Jan Philip Porschke.
Formal Modelling and Graphical Representation of Intermodal Transit Points.
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
Lopos, Hamburg, Germany. RaCoSy Repository.

17
R. Knigge, H. Eilers, and V. Freitag.
New Generation of Microcomputer-Based Operations Control Systems for High-Speed Rail and Guided Transportation as Demonstrated by TRANSRAPID.
In IFIP World Computer Congress, Hamburg, pages 174-179. IFIP, 1994.
.

176
J. Knight, M. Elder, J. Flinn, and P. Marx.
Summaries of Three Critical Infrastructure Applications.
Technical Report CS-97-27, Department of Computer Science, University of Virginia, November 14 1997.

.

177
G. Kolk.
Formal Methods: Possibilities and difficulties in a Railway environment from a user perspective.
In FMERail Workshop 1. Holland Railconsult, 1998.
In: [185] RaCoSy Repository.

178
N. König.
uro-Interlocking, a UIC Project.
In Thierry Lecomte and Peter Gorm Larsen, editors, FMERail Workshop #5, volume # 4 of FMERail Workshop; Tolouse, France. FME: Formal Methods Europe, Steria, France, September 22-24 1999.
SBB (Swiss Federal Railways), Switzerland. RaCoSy Repository.

179
Carsten Krabiell.
Analyse des Problems der Linienoptimierung im öffentlichen Personennahverkehr.
Master's thesis, TU Braunschweig, 1995.
.

180
Peter Kreuzer.
Linienoptimierung im schienengebundenen Personenverkehr.
Diplomarbeit an der Abt. für Mathematische Optimierung, TU Braunschweig, 1994.
.

181
Leo G. Kroon, H. Edwin Romeijn, and Peter J. Zwanefeld.
Routing Trains through railway stations: complexity issues.
European Jounral of Operational Research, Elsevier Science B.V., The Netherlands, 98:485-498, 1997.

182
M. Kuby, Z. Y. Xu, and X. D. Xie.
A minimax method for finding the k best ``differentiated'' paths.
Geographical Analysis, 29(4):298-313, October 1997.
.

183
Gao Lan.
Human-Computer Interaction System in Railway Management Administration Network.
In Proceedings of the Fifth International Conference on Human-Computer Interaction - Poster Sessions: Abridged Proceedings, volume 3 of Case Studies and Applications, page 103, 1993.
.

184
Peter Gorm Larsen.
Abstract Metro Specifications in VDM++.
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
IFAD, Denmark. RaCoSy Repository. VDM++.

185
P.G. Larsen, editor.
FMERail Workshop, volume 1 of 1st FMERail Seminar, Forskerparken, DK-6000 Odense, Denmark, 8-9 June 1998. IFAD.
ESSI Project 26538.
Workshop venue: Breukelen, The Netherlands.
Organised by Origin Nederland, a member of the Philips group of companies, P.O.Box 1444, NK-3430 BK Nieuwegein, The Netherlands.

Contents: [110,153,110,279,220,27,199,19,177,119,81,137,41,39,115,213] RaCoSy Repository.

186
Thierry Lecomte.
Dwarf Signal Formalisation in B.
In Thierry Lecomte and Peter Gorm Larsen, editors, FMERail Workshop #5, volume # 5 of FMERail Workshop; Tolouse, France. FME: Formal Methods Europe, Steria, France, September 22-24 1999.
Atelier B, Steria, France. RaCoSy Repository. The B Method.

187
Neil D. Lerner and Donna J. Ratte.
Drivers as Decision Makers at Rail-Highway Grade Crossings.
In Proceedings of the Human Factors Society 34th Annual Meeting, volume 2 of Safety: Risk Perception, pages 1042-1046, 1990.
.

188
Benjamin G. Lewis and James P. Cowan.
A holistic approach to modeling outdoor acoustical environments.
In Proceedings of the Eighth Annual Symposium on Geographic Information Systems for Transportation (GIS-T), pages 435-440, Sparks, Nevada, 1995.
.

189
J. N. K. Liu and K. Y. Sin.
Fuzzy Neural Networks for Machine Maintenance in Mass Transit Railway Systems.
IEEE Transactions on Neural Networks, 8(4):932-941, July 1997.
.

190
S. Liu, M. Asuka, K. Komaya, and Y. Nakamura.
An approach to specifying and verifying safety-critical systems with practical formal method SOFL.
In , Fourth IEEE International Conference on Engineering of Complex Computer Systems (Cat. No.98EX193), pages 100-14. IEEE Comput. Soc, 1998.
.

191
Lorna Love and Chris Johnson.
Using Diagrams to Support the Analysis of System `Failure' and Operator `Error'.
In Proceedings of the HCI'97 Conference on People and Computers XII, pages 245-261, 1997.
.

192
Pawel Lubonski.
Natural language interface for a Polish railway expert system.
In Veronica Dahl and Patrick Saint-Dizier, editors, Natural Language Understanding and Logic Programming, pages 21-31. North-Holland, Amsterdam, 1985.
.

193
David J. Maguire, Robert C. Smith, and Suzanne Jones.
GIS on the Move: Some Transportation Applications of GIS.
In Proceedings of the Thirteenth Annual ESRI User Conference, volume 3, pages 39-46, Palm Springs, CA, 1993.
.

194
Gabriele Malavassi and Stefano Ricci.
Petri Nets in the Railway Signalling Model.
In Thierry Lecomte and Peter Gorm Larsen, editors, FMERail Workshop #5, volume # 5 of FMERail Workshop; Tolouse, France. FME: Formal Methods Europe, Steria, France, September 22-24 1999.
Univ. of Rome, Italy. RaCoSy Repository. Petri Net.

195
V C Marshall.
Modes and Consequences of the Failure of Road and Rail Tankers Carrying Liquefied Gases and Other Hazardous Liquids.
SARSS'89: Reliability on the Move, page 136, 1989.
.

196
J. Meertens.
Verifying the safety guaranteeing system at railway station Heerhugowaard.
Master's thesis, Utrecht University, Department of Philosophy, Faculteit Wijsbegeerte, August 1996.
Referenced in [279].

Comments: The analysis of this station was based on a Prover developed by Jan Frison Groote. The prover in question is based on Stålmarck's method. .

197
Karl Meinke.
Introduction to FAST.
In Thierry Lecomte and Peter Gorm Larsen, editors, FMERail Workshop #5, volume # 4 of FMERail Workshop; Tolouse, France. FME: Formal Methods Europe, Steria, France, September 22-24 1999.
Prover Technology, Sweden. RaCoSy Repository. FAST.

198
L.-F. Mejia.
Formalizing existing safety-critical software.
In FMERail Workshop 2, 33, rue des Bateliers, F-93400 Saint-Ouen, France, 1998. Alstom Transport.
In: [293] RaCoSy Repository.

199
L.-F. Mejia.
Formalizing existing safety-critical software.
In FMERail Workshop 1, 33, rue des Bateliers, F-93400 Saint-Ouen, France, 1998. Alstom Transport.
Paper was not presented due to transport strike in France! See [198]. In: [185] RaCoSy Repository.

200
F.H. Mertens.
A traffic system compatible with trams on the Bahnhofsplatz in Zurich.
Strassenverkehrstechnik, 17(2):37-42, 1973.
RaCoSy Repository.

201
?? Meynadier.
Future of Formal Methods.
In Thierry Lecomte and Peter Gorm Larsen, editors, FMERail Workshop #5, volume # 4 of FMERail Workshop; Tolouse, France. FME: Formal Methods Europe, Steria, France, September 22-24 1999.
??? (Was document distributed ?) Matra Transport, France.

202
P. Middelraad.
Euris: European Railway Interlocking Specifications.
UIC 7A/16, Utrecht, 1992.
Referenced in [177] .

203
S. Mitra and I.D.R. Shannon.
Assessment and Certification Requirements in the European Railway Industry.
In Erwin Schoitsch, editor, SAFECOMP'96: 15th International Conference on Computer Safety, Reliability and Security, page 276, Vienna, Austria, 1996. Springer.
.

204
M.J. Morley.
Safety in Railway Signaling Data: A Behavioural Analysis.
In J.J. Joyce and C.-J.H. Seger, editors, International Workshop on Higher Order Logic Theorem Proving and its Applications, volume 780 of Lecture Notes in Computer Science, pages 465-476, Vancouver, Canada, August 1993. University of British Columbia, Springer-Verlag, published 1994.
.

205
Karin S. Mogensen and Jakob Braad.
Control Process for Dwarf Signal (Based on: [214]).
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
textslOne of a series of exercise reports re-modelling given example solutions [44,43,206,208,207,45]Dept. of IT, Techn.Univ. of Denmark. RaCoSy Repository.

206
Karin S. Mogensen and Jakob Braad.
Interlocking: Harmonised Interlocking Functions and Railway Signalling (Based on: [154,153]).
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
textslOne of a series of exercise reports re-modelling given example solutions [44,43,208,207,205,45]Dept. of IT, Techn.Univ. of Denmark. RaCoSy Repository. RAISE/RSL.

207
Karin S. Mogensen and Jakob Braad.
Modelling Railway Interlocking Systems (Based on: [132]).
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
textslOne of a series of exercise reports re-modelling given example solutions [44,43,206,208,205,45]Dept. of IT, Techn.Univ. of Denmark. RaCoSy Repository. RAISE/RSL.

208
Karin S. Mogensen and Jakob Braad.
SIST: A System for Checking Safety in Interlocking (Based on: [254]).
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
textslOne of a series of exercise reports re-modelling given example solutions [44,43,206,207,205,45]Dept. of IT, Techn.Univ. of Denmark. RaCoSy Repository. RAISE/RSL.

209
M. Montigel.
Elemente eines computergestützten Werkzeugs zur Entwicklung von Eisenbahnsicherungsanlagen mit Petri-Netzen.
Technical Report Schriftenreihe des IVT Nr. 92, IVT: Institut für Verkerhrsplanung, Transporttechnik, Strassen- und Eisenbahnbau, ETH, Zürich, Dezember 1992.
In German RaCoSy Repository.

210
M. Montigel.
Formal Representation of Track Topologies by Double Vertex Graphs.
In Proceedings of Railcomp 92 held in Washington DC, Computers in Railways 3, volume 2: Technology. Computational Mechanics Publications, 1992.
RaCoSy Repository.

18
M. Montigel.
Modelling and enforcement of dependencies in railway safety systems.
Technical Report 1995DI-th10776, Swiss Federal Institute of Technology, Zurich, August 21 1995.
.

212
Markus Montigel.
Modellierung und Gewährleistung von Abhängigkeiten in Eisenbahnsicherungsanlagen.
PhD thesis, ETH: Swiss Federal Institute of Technology, ETH Honggerberg, CH-8093 Zürich, Swtizerland, June 1994.
RaCoSy Repository. Petri Net.

213
Markus Montigel.
A Formal Model of Dependencies in Railway Interlockings (Abstract).
In FMERail Workshop 1, Now: Fachhochschulstudiengang St. Pölten, Herzogenburgerstr. 68, A-3100 St. Pölten, Austria; Phone: +43 2742 313 228, Fax: +43 2742 313 229, 1998. Then: Alcatel Austria, AG, Systems Engineering, Scheydgasse 41, A-1211 Vienna, Austria.
In: [185] RaCoSy Repository.

214
Markus Montigel.
Formal Methods in Computer-based Safety Systems: Design of a Control Process for an Alcatel-like Dwarf Signal.
In Markus Montigel, editor, FMERail Workshop #3, volume # 3 of FMERail Workshop; St. Pölten. FME: Formal Methods Europe, Fachhochschulstudiengang St. Pölten, Herzogenburgerstr. 68, A-3100 St. Pölten, Austria; Phone: +43 2742 313 228, Fax: +43 2742 313 229, February 17-19 1999.
RaCoSy Repository.

215
Markus Montigel.
Specification of the Control Process for a Dwarf Signal (See also [214]).
In Thierry Lecomte and Peter Gorm Larsen, editors, FMERail Workshop #5, volume # 5 of FMERail Workshop; Tolouse, France. FME: Formal Methods Europe, February 17-19 1999.
Fachhochschulstudiengang St. Pölten, Herzogenburgerstr. 68, A-3100 St. Pölten, Austria; Phone: +43 2742 313 228, Fax: +43 2742 313 229. RaCoSy Repository.

216
M.J. Morley.
Modelling British Rail's Interlocking Logic: Geographic Data Correctness.
Technical Report ECS-LFCS-91-186, University of Edinburgh, 1991.
.

217
M.J. Morley.
Safety in Railway Signalling Data: A Behavioural Analysis.
In J. Joyce and C. Seger, editors, Proc. 6th annual workshop on higher order logic and its applications, Vancouver, 4-6 August, pages 465-474. Springer-Varlag Lecture Notes in Computer Science, Vol.780, 1993-4.
.

218
M.J. Morley.
Safety Assurance in Interlocking Design.
PhD thesis, University of Edinburgh, 1996.
.

219
M.J. Morley.
Safety-level Communication in Railway Interlockings.
Science of Computer Programming, 29(1-2):147-170, July 1997.
.

220
M.J. Morley.
Semantics of geographic data languages.
In FMERail Workshop 1, Leeds LS2 9JT UK, 1998. School of Computer Studies, Univ. of Leeds.
In: [185] RaCoSy Repository.

221
Rudolf G. Mortimer.
Visual Factors in Rail-Highway Grade Crossing Accidents.
In Proceedings of the Human Factors Society 35th Annual Meeting, volume 1 of Forensics Professional: Real-World Problems and Practices in Forensics, pages 600-602, 1991.
.

222
Rudolf G. Mortimer.
Oh! Say, Can You Hear that Train Coming to the Crossing?
In Proceedings of the Human Factors and Ergonomics Society 38th Annual Meeting, volume 2 of SAFETY: Safety Potpourri II [Lecture], pages 898-902, 1994.
.

223
Paul Mukherjee.
A VDM++ Specification of a Metro Door Management System.
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
IFAD, Denmark. RaCoSy Repository. VDM++.

19
Kathleen Murphy, Elizabeth Ralston, David Friedlander, Rodney Swab, and Paul Steege.
The Scheduling of Rail at Union Pacific Railroad.
In Proceedings of the 14th National Conference on Artificial Intelligence and 9th Innovative Applications of Artificial Intelligence Conference (AAAI-97/IAAI-97), pages 903-912, Menlo Park, July27-31 1997. AAAI Press.
.

225
T. K. S. Murthy, L. S. Lawrence, and R. E. Rivier, editors.
Computers in Railway Management, Computational Mechanics Publications. Springer Verlag, 1987.
.

226
T.K.S. Murthy et al., editors.
Computers in railways IV: Fourth International Conference on Computer Aided Design, Manufacture, and Operation in the Railway and Other Mass Transit Systems, COMPRAIL '94, Madrid, Spain, 7-9 September 1994, volume 4, Southampton; Boston, 1994. Computational Mechanics Publications.
.

227
Karl Nachtigall.
Exact solution methods for periodic programs.
Technical Report 14, Universität Hildesheim, 1993.
.

228
Karl Nachtigall.
Time periodic network optimization.
Technical Report 8, Universität Hildesheim, 1993.
.

229
Karl Nachtigall and Stefan Voget.
A genetic algorithm approach to periodic programs.
Technical Report 14, Universität Hildesheim, 1993.
.

20
H. Nakamura and K. Takeshi.
Fault-Tolerant Microcomputer Design and Application for Railway Train Control.
In Jan van Leeuwen, editor, Proceedings of the IFIP 12th World Computer Congress. Volume 1: Algorithms, Software, Architecture, pages 652-658, Amsterdam, The Netherlands, September 1992. Elsevier Science Publishers.
.

231
M. Nelli, A. Bondavalli, and L. Simoncini.
Dependability Modeling and Analysis of Complex Control Systems: An Application to Railway Interlocking.
Lecture Notes in Computer Science, 1150:93-??, 1996.
.

232
J. Nievergelt.
Thoughts on Traffic Scheduling and Time Table Design.
Technical Report dyl/9/2, ETH, Zürich, Switzerland, Informatik, ETH, CH-8092 Zurich, Switzerland, January 1994.
.

233
A. Norcliffe and S. Valentine.
Z Readers Video Course.
PAVIC Publications, 1992.
.

234
L.H. Oei.
Pruning the Search Tree of Interlocking Design and Application Language Operational Semantics.
Technical Report P9418, University of Amsterdam, Programming Research Group, Kruislaan 403, 1098 SJ Amsterdam, The Netherlands, November 1994.
Petri Net.

235
Takahiko Ogino and Yuji Hirao.
Formal methods and their applications to safety-critical systems of railways.
Quarterly Report of RTRI. Ken-yusha for Railway Technical Research Institute of Japan, Tokyo, 36(4), 1995.
RaCoSy Repository.

236
Christine Oltrogge.
Linienplanung für mehrstufige Bedienungssyteme im öffentlichen Personenverkehr.
PhD thesis, TU Braunschweig, 1994.
.

237
J. Padget, P. Broadbery, and D. Hutchinson.
Mixing Concurrency Abstractions and Classes.
In Workshop on Research Directions in High Level Parallel Programming Languages, Lecture Notes in Computer Science., Berlin, DE, 1991. Springer-Verlag.
.

238
G. Parkin.
Complex systems proved.
RAIL BULLETIN, pages 49-51, June/July 1995.
.

239
A. Patz.
Die richtige Auswahl von Verkehrslinien bei großen Straßenbahnnetzen.
Verkehrstechnik, 50/51, 1925.
.

240
Jan Storbank Pedersen.
Specifying Aspects of a Dwarf Signal System Using RAISE.
In Thierry Lecomte and Peter Gorm Larsen, editors, FMERail Workshop #5, volume # 5 of FMERail Workshop; Tolouse, France. FME: Formal Methods Europe, Steria, France, September 22-24 1999.
Terma Electronics, Denmark. RaCoSy Repository. RAISE/RSL.

241
J. Peleska.
Test Automation for Safety-Critical Systems: Industrial Application and Future Developments.
In Marie-Claude Gaudel and Jim Woodcock, editors, FME'96: Industrial Benefit and Advances in Formal Methods, pages 39-59. Springer-Verlag, March 1996.
.

242
J. Peleska and M. Siegel.
From testing theory to test driver implementation.
In M.-C. Gaudel and J. Woodcock, editors, FME '96: Industrial Benefit and Advances in Formal Methods. Third International Symposium of Formal Methods Europe. Proceedings; Oxford, UK, pages 538-56. Springer-Verlag; Berlin, Germany, 1996.
CSP.

21
Jakob Lyng Petersen.
Automatic Verification of Railway Interlocking Systems: A Case Study.
In Mark Ardis, editor, Proceedings of the 2nd Workshop on Formal Methods in Software Practice (FMSP-98), pages 1-6, New York, March4-5 1998. ACM Press.
.

244
Jakob Lyng Petersen.
Mathematical Methods for validating Railway Interlocking Systems.
PhD thesis, Dept. of IT, Techn. Univ. of Denmark, Bldg. 344, DK-2800 Lyngby, February, November 1998.

Comments: Uses Prover Technology RaCoSy Repository.

245
J.L. Petersen.
Formal Requirement Verification of a Swedish Railway Interlocking System.
Technical Report IT-TR: 1997-005, Technical University of Denmark, Department of Information Technology, April 1997.

Comments: This work was carried out by Petersen when he was at an internship at Prover Technology, and the verifiation was based on NP-Tools (based on Stålmarck's method) RaCoSy Repository.

246
J. Piotrowski and J. J. Kalker.
A non-linear mathematical model for finite, periodic rail corrugations.
Technical Report DUT-TWI-93-49, Delft University of Technology, Department of Technical Mathematics and Informatics, Delft, The Netherlands, 1993.
.

247
S. Prehn.
Distributed Train Time-tables and Dispatching.
Technical Report SP/13/2, UNU/IIST, the UN University's International Institute for Software Technology, P.O.Box 3058, Macau; E-Mail: library@iist.unu.edu, July 1994.
RAISE/RSL.

248
C. Proctor and S. Young.
Dialogue Control in Conversational Speech Interfaces.
In M. M. Taylor, F. Neel, and D. G. Bouwhuis, editors, The Structure of Multimodal Dialogue, number 29 in Part 5: Applications and Architectures, pages 385-398. North-Holland, Elsevier Science Publishers, Amsterdam, 1989.
.

249
Javier Gutierrez Puebla and Rafael E. Gonzalez Aguayo.
Transport in Europe: A study of train accessibility using GIS.
In Fifteenth Annual ESRI User Conference Proceedings, Palm Springs, California, 1995.
.

250
Emile Quinet.
Issues in Building the European High-Speed Train Network.
Journal of Infrstructure Systems, pages 49-54, March 1997.
RaCoSy Repository.

22
S. M. Reddy, I. Pomeranz, and R. Jain.
On Codeword Testing of Two-Rail and Parity TSC Checkers.
In Proceedings of the 24th Annual International Symposium on Fault-Tolerant Computing, pages 116-127, Los Alamitos, CA, USA, June 1994. IEEE Computer Society Press.
.

252
S. Dillon Ripley.
On the long, long trail of the rail.
Smithsonian, 19(5):38-??, August 1988.
.

253
E. Roanes-Lozano, L. M. Laita, and E. Roanes-Macias.
An Application of an AI Methodology to Railway Interlocking Systems Using Computer Algebra.
Lecture Notes in Computer Science, 1416:687-??, 1998.
.

254
Eugenio Roanes-Lozano, Luis M. Laita, and Eugenio Roanes-Macias.
An Algebraic Model for Decision-taking in Railway Interlocking.
In Markus Montigel, editor, FMERail Workshop #3, volume # 3 of FMERail Workshop; St. Pölten. FME: Formal Methods Europe, Fachhochschulstudiengang St. Pölten, Herzogenburgerstr. 68, A-3100 St. Pölten, Austria; Phone: +43 2742 313 228, Fax: +43 2742 313 229, February 17-19 1999.
RaCoSy Repository. Mathematics(Category Theory).

255
B. Ropke, W. Seibel, and A. Wozniak.
Verification and function test of electronic interlockings in the system test centre (rail traffic control).
Signal und Draht, 87(4):120-2, 1995.
RaCoSy Repository.

256
N. Rowden.
A Safe, Reliable Control and Supervisory System for Railway Networks.
In Erwin Schoitsch, editor, SAFECOMP'96: 15th International Conference on Computer Safety, Reliability and Security, page 266, Vienna, Austria, 1996. Springer.
.

257
Denis Sabatier.
The B Method in Railways.
In Markus Montigel, editor, FMERail Workshop #3, volume # 3 of FMERail Workshop; St. Pölten. FME: Formal Methods Europe, Fachhochschulstudiengang St. Pölten, Herzogenburgerstr. 68, A-3100 St. Pölten, Austria; Phone: +43 2742 313 228, Fax: +43 2742 313 229, February 17-19 1999.
Steria, France. RaCoSy Repository. The B Method.

258
M. Säflund.
Modelling and Formally Verifying Systems and Software in Industrial Applications.
In Xu Furong, editor, Proceedings of the second International Conference on Reliability, Maintainability and Safety (ICRMS '94), Beijing, pages 169-174. International Academic Publishers, June 1994.
ISBN 7-80003-303-1/TB.25 .

259
M. J. Savage.
Junction optimisation technique.
The Computer Journal, 12(3):268-272, August 1969.
.

260
Andreas Sethy.
Connection between reliability and signalling-safety in railway technology.
In Reliability and Maintainability Symposium, pages 75-79, Las Vegas, Nevada USA, 1992.
.

261
T. Shimazoe, N. Omokawa, and O. Yoshida.
Development of a scheme design and verification tool based on software design diversity for solid state interlocking systems.
In Transactions of the Institute of Electrical Engineers of Japan, Part C; vol.115-C, no.5, pages 665-71. Kyosan Electric Manuf. Co., Japan, May 1995.
In Japanese. .

262
R.C. Short.
Software validation for a railway signalling system.
In SAFECOMP'83, pages 183-193. Pergamon Press, 1983.
.

263
R.C. Short.
Railway Safety Cases: Control of Risk in a Changing Industry.
In R.F. Cox, editor, Safety and Reliability Society Symposium: Managing Risk in a Changing Organisational Climate, Swindon,UK, 1996. SARS Ltd, Clayton House, 59 Piccadilly, Manchester, M1 2AQ.
.

264
Thomas H. Short.
An Algorithm for the Detection and Measurement of Rail Surface Defects.
Journal of the American Statistical Association, 88(422):436-??, June 1993.
.

265
A. Simpson.
A Formal Specification of an Automatic Train Protection System.
In M. Bertran M. Naftalin, T. Denvir, editor, FME'94: Industrial Benefit of Formal Methods, pages 602-617. Springer-Verlag, October 1994.
.

266
A.C. Simpson.
Model Checking for Interlocking Safety.
In FMERail Workshop 2, Parks Road, Oxford OX1 3QG, UK, 1998. Oxford Univ., Computing Lab.
In: [293].

FMERail Annotations:

RaCoSy Repository.

267
A.C. Simpson, J.C.P. Woodcock, and J.W. Davies.
The mechanical verification of Solid State Interlocking geographic data.
In L. Groves and S. Reeves, editors, Proceedings of Formal Methods Pacific, pages 223-242, Wellington, New Zealand, 9-11 July 1997. Springer-Verlag.
.

268
Stuart Sirota and Victor Henry.
Using GIS to identify locations with the greatest potential increased light rail ridership.
In Proceedings of the Eighth Annual Symposium on Geographic Information Systems for Transportation (GIS-T), pages 371-382, Sparks, Nevada, 1995.
.

269
R. Smokvina.
EDIFACT Standard in Communication Between Seaport and its Business Surroundings.
In J. Gricar, editor, EDI: Business Strategy For 90's The 4th Electronic Data Interchange Conference, pages 318-322, Bled, Slovenia,Yugoslavia, June 10-12 1991.
.

270
B. Stamm, R. Baumann, and M. Kündig-Herzog.
A Safety Critical Computer System in a Railway Application.
In Janusz Gorski, editor, SAFECOMP'93: 12th International Conference on Computer Safety, Reliability and Security, pages 182-194, Poznan-Kiekrz, Poland, 1993. Springer-Verlag.
.

271
Bengt J. Sterner.
A Geographical Model for Computerised Interlocking and Dispatching.
In Symposium on ``Railway Cybernetics'' [1], pages 125-135.
RaCoSy Repository. STERNOL.

272
R. G. Stone.
Points recurring. The history of a railway problem.
ACM SIGPLAN Notices, 17(9):88-94, September 1982.
.

273
L. Szten and R. Ninard.
Microcomputer Dispatcher System MSD-Busz.
Techniki Komputerowe Biuletyn Informacyjny, 30(1):27-40, 1995.
In Polish. .

274
Lajos Takács.
On a probability problem connected with railway traffic.
Journal of Applied Mathematics and Stochastic Analysis, 4(1):1-27, 1991.
.

23
K. Tsiflakos and S. C. Mathewson.
A Rapid Railway Simulation Model Development System Incorporating Automatic Model Generation.
In Winter Simulation Conference, pages 792-801. IEEE Computer Society Press, December 1991.
.

276
K. Tsiflakos and D. B. Owen.
A graphical sytem for the interactive visual modelling of railway transportation layouts.
In COMPUGRAPHICS '91, volume I, pages 409-418, 1991.
.

277
Arun G. Vaidya.
When information is everyone's business.
In Business Geographics, volume 2, pages 24-26. 1994.
.

278
S.F.M. van Vlijmen.
Algebraic Specification in Action.
Quaestiones infinitae. Universiteit Utrecht, Faculteit Wijsbegeerte, 1998.
.

279
S.F.M. van Vlijmen.
Verification of the Vital Processor Interlocking.
In FMERail Workshop 1. Utrecht University, Faculty of Philosophy, 1998.
In: [185] RaCoSy Repository.

280
M. C. Van Wezel, J. N. Kok, J. Van den Berg, and W. Van Kampen.
Genetic Improvement of Railway Timetables.
Lecture Notes in Computer Science, 866:566-??, 1994.
.

281
M. C. VanWezel, J. N. Kok, J. VanDenBerg, and W. VanKampen.
Genetic Improvement of Railway Timetables.
In Y. Davidor and H.-P. Schwefel, editors, Parallel Problem Solving From Nature - PPSN III, volume 866 of Lecture Notes in Computer Science, pages 566-575, Berlin, 1994. Springer Verlag.
.

282
Reinhard von Hanxleden.
Robustness Analysis: A Light-weight Approach to the Formal Analysis of Safety-Critical Systems.
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
DaimlerChrysler Research, Berlin, Germany. ESPRESS.

283
Reinhard von Hanxleden, Ali Botorabi, and Slawomir Kupczyk.
A Co-Design Approach for Safety-Critical Automotive Applications.
In Dines Bjørner and Maria Fahlén, editors, FMERail Workshop #4, volume # 4 of FMERail Workshop; Stockholm, Sweden. FME: Formal Methods Europe, Banverket, Falun, Sweden, May 12-14 1999.
DaimlerChrysler Research, Berlin, Germany. RaCoSy Repository. ESPRESS.

284
M.A. Watson-Walker and R.J. Gray.
The Institution of Railway Sigalling Engineers' Licensing Scheme - Promoting Competence in the Workplace.
In Felix Redmill and Tom Anderson, editors, Safety-Critical Systems: The Convergence of High Tech and Human Factors: Proceedings of the 4th Safety-critical Systems Symposium Leeds, UK 6-8 February 1996, pages 124-138, Leeds, UK, 1996. Springer.
.

285
S.J. Westerman, N.M. Shryane, and J. Sauer.
Task Analysis of the Solid-State Interlocking Design Process.
Department of Psychology, 1994.
.

286
F. Widebäck.
Logical Foundations of CVT.
Technical report, formerly: Logikkonsult NP AB, now: Prover Technology, 1993.
NP-RES-CVT-1.

Comments: CVT was our first tool in the railway domain, and it is based on Stålmarck's method .

287
R. Wilkinson.
Electronic Data Interchange and its Relevance to Australian Railway Organisations.
Westrail position paper, June 1989.
.

288
G. Wirthumer and H. Lutnik.
Fault Tolerance for Railway Signalling - VOTRICS in Practice.
SARSS'89: Reliability on the Move, page 29, 1989.
.

289
Wong Wai.
A Formal Theory of Railway Track Networks in Higher-order Logic and its Applications in Interlocking Design.
PhD thesis, University of Warwick, 1991.
.

290
Wong Wai.
A Simple Graph Theory and its Application in Railway Signaling.
In M. Archer, J.J. Joyce, K.N. Levitt, and P.J. Windley, editors, International Workshop on Higher Order Logic Theorem Proving and its Applications, pages 395-410, Davis, California, August 1991. IEEE Computer Society, ACM SIGDA, IEEE Computer Society Press.
.

291
T. Wood.
Living with complexity (in railway software engineering).
In Living with Microprocessor Controlled Traction Systems, IEE Colloquium (Digest No.056), pages 3/1-4, 32 pages. IEE, 1990.
.

292
J. Woodcock.
A CSP Model of the Alcatel Dwarf Case Study.
In Thierry Lecomte and Peter Gorm Larsen, editors, FMERail Workshop #5, volume # 4 of FMERail Workshop; Tolouse, France. FME: Formal Methods Europe, Steria, France, September 22-24 1999.
No copy ?? CSP.

293
J.C.P. Woodcock, editor.
FMERail Workshop, volume 2 of 2nd FMERail Seminar, Parks Road, Oxford OX1 3QD, England, October 1998. Oxford Univ., Computing Lab.
ESSI Project 26538.
Workshop venue: Canary Wharf, London Docklands, England.
Organised by Formal Systems Ltd., Oxford. Hosted by London Underground.

Contents: [136,266,132,158,89,198,114] as well as: A Tutorial: The RAISE Development Method (D. Bjørner based on 1994 material by A.E. Haxthausen), A Tutorial: CSP -- Communicating Sequential Processes (Jim Woodcock) RaCoSy Repository.


Dines Bjorner
10/25/1999