| Model-based dynamic distribution of user interfaces of critical interactive systems | 0 | 0.34 | 2013 |
| Understanding Functional Resonance through a Federation of Models: Preliminary Findings of an Avionics Case Study | 1 | 0.36 | 2013 |
| Formal tasks and systems models as a tool for specifying and assessing automation designs | 8 | 0.57 | 2011 |
| A critical view of severity classification in risk assessment methods | 3 | 0.66 | 2011 |
| Applying Code Coverage Approach to an Infinite Failure Software Reliability Model | 1 | 0.36 | 2009 |
| A binomial software reliability model based on coverage of structural testing criteria | 2 | 0.37 | 2008 |
| The Wrong Question to the Right People. A Critical View of Severity Classification Methods in ATM Experimental Projects | 1 | 0.53 | 2008 |
| Evaluation of air traffic management procedures—safety assessment in an experimental environment | 6 | 0.82 | 2005 |
| Contradictions and critical issues during system evolution | 2 | 0.56 | 2002 |
| Analysis of Incidents Involving Interactive Systems | 1 | 0.41 | 2001 |
| Interface Mutation Test Adequacy Criterion: An Empirical Evaluation | 9 | 0.73 | 2001 |
| Dependability Evaluation: Model and Method Based on Activity Theory | 3 | 0.44 | 2000 |
| Computer Safety, Reliability and Security, 18th International Conference, SAFECOMP'99, Toulouse, France, September, 1999, Proceedings | 38 | 18.39 | 1999 |
| A method for software quality planning, control, and evaluation | 27 | 3.43 | 1999 |
| Applying testability to reliability estimation | 2 | 0.38 | 1998 |
| The SQUID approach to defining a quality model | 31 | 3.15 | 1997 |
| Test set size minimization and fault detection effectiveness: a case study in a space application | 75 | 7.60 | 1997 |
| Software Reliability Models and Test Coverage | 1 | 0.37 | 1996 |
| An Holistic Approach to Dependability? | 0 | 0.34 | 1996 |
