| Building high assurance human-centric decision systems | 6 | 0.49 | 2015 |
| Obtaining Trust in Autonomous Systems: Tools for Formal Model Synthesis and Validation | 0 | 0.34 | 2015 |
| High assurance human-centric decision systems | 5 | 0.45 | 2013 |
| Idea: writing secure c programs with secprove | 1 | 0.41 | 2013 |
| Direct generation of invariants for reactive models. | 4 | 0.41 | 2012 |
| Model-based construction and verification of critical systems using composition and partial refinement | 4 | 0.40 | 2010 |
| On the Role of Formal Methods in Software Certification: An Experience Report | 3 | 0.46 | 2009 |
| Applying infinite state model checking and other analysis techniques to tabular requirements specifications of safety-critical systems | 3 | 0.42 | 2008 |
| Re Theory Meets Software Practice: Lessons From The Software Development Trenches | 3 | 0.40 | 2007 |
| Formal Methods for Specifying, Validating, and Verifying Requirements | 7 | 0.79 | 2007 |
| On the utility of formal methods in the development and certification of software | 0 | 0.34 | 2007 |
| Analyzing tabular requirements specifications using infinite state model checking | 2 | 0.47 | 2006 |
| Formal specification and verification of data separation in a separation kernel for an embedded system | 27 | 1.33 | 2006 |
| Tools for constructing requirements specifications: the SCR Toolset at the age of nine | 37 | 2.11 | 2005 |
| Panel: given that hardware verification has been an uphill battle, what is the future of software verification? | 0 | 0.34 | 2004 |
| A strategy for efficiently verifying requirements | 13 | 0.73 | 2003 |
| Program Synthesis from Formal Requirements Specifications Using APTS | 17 | 0.80 | 2003 |
| Applying Practical Formal Methods to the Specification and Analysis of Security Properties | 13 | 1.28 | 2001 |
| An Algorithm for Strengthening State Invariants Generated from Requirements Specifications | 15 | 0.81 | 2001 |
| Transferring Research Results in Requirements to Practice: Obstacles and Incentives | 0 | 0.34 | 2000 |
| Panel Discussion: Future Directions | 0 | 0.34 | 2000 |
| Applying the SCR Requirements Method to the Light Control Case Study | 16 | 0.99 | 2000 |
| Applying Formal Methods to an Information Security Device: An Experience Report | 8 | 0.78 | 1999 |
| Model Checking Complete Requirements Specifications Using Abstraction | 75 | 5.92 | 1999 |
| Formal Methods For Developing High Assurance Computer Systems: Working Group Report | 7 | 1.03 | 1998 |
| On the Need for Practical Formal Methods | 30 | 1.66 | 1998 |
| SCR*: A Toolset for Specifying and Analyzing Software Requirements | 88 | 6.49 | 1998 |
| Human-Style Theorem Proving Using PVS | 12 | 0.94 | 1997 |
| Verifying Hybrid Systems Modeled as Timed Automata: A Case Study | 15 | 1.28 | 1997 |
| Formal Methods: A Panacea or Academic Poppycock? | 4 | 0.49 | 1997 |
| A. Software Environment for Custom Simulation and Monitoring of Real-Time Specifications | 0 | 0.34 | 1997 |
| Automated consistency checking of requirements specifications | 348 | 27.61 | 1996 |
| Future Distributed Embedded and Real-Time Applications Will Be Adaptive: Meanings, Challenges and Research Paradigms (Panel) | 0 | 0.34 | 1995 |
| Mt - A Toolset For Specifying And Analyzing Real-Time Systems | 30 | 1.89 | 1993 |
| A Toolset for Developing Real-Time Systems | 0 | 0.34 | 1992 |
| Evaluating two aspects of direct manipulation in advanced cockpits | 18 | 20.37 | 1992 |
| A security model for military message systems | 82 | 54.33 | 1984 |
| A Formal Statement of the MMS Security Model | 5 | 13.46 | 1984 |
