Bibliography

1

Linh Hong Vu, Anne E. Haxthausen, and Jan Peleska.
Formal modelling and verification of interlocking systems featuring sequential release.
Science of Computer Programming, 133, Part 2:91 - 115, 2017.
http://dx.doi.org/10.1016/j.scico.2016.05.010.

2

Anne E. Haxthausen and Peter H. Østergaard.
On the Use of Static Checking in the Verification of Interlocking Systems.
In Leveraging Applications of Formal Methods, Verification and Validation: Discussion, Dissemination, Applications, Part II, volume 9953 of Lecture Notes in Computer Science, pages 266-278. Springer International Publishing AG, 2016.

3

Anne E. Haxthausen and Jan Peleska.
Model-checking and Model-based Testing in the Railway Domain.
In Formal Modeling and Verification of Cyber-Physical Systems, pages 82-121. Springer Fachmedien Wiesbaden, 2015.

4

Linh H. Vu, Anne E. Haxthausen, and Jan Peleska.
Formal Verification of the Danish Railway Interlocking Systems.
In Marieke Huisman and Jaco van de Pol, editors, Pre-proceedings of 14th International Workshop on Automated Verification of Critical Systems (AVoCS 2014), CTIT Workshop Proceedings Series WP 14-01, pages 257-258. University of Twente, 2014.

5

Linh H. Vu, Anne E. Haxthausen, and Jan Peleska.
A Domain-Specific Language for Railway Interlocking Systems.
In Eckehard Schnieder and Géza Tarnai, editors, FORMS/FORMAT 2014 - 10th Symposium on Formal Methods for Automation and Safety in Railway and Automotive Systems, pages 200-209. Institute for Traffic Safety and Automation Engineering, Technische Universität Braunschweig, 2014.
Got best-paper-award.

6

Linh H. Vu, Anne E. Haxthausen, and Jan Peleska.
Formal Modeling and Verification of Interlocking Systems Featuring Sequential Release.
In Third International Workshop on Formal Techniques for Safety-Critical Systems (FTSCS 2014) Prelimenary Proceedings, pages 58-73, 2014.

7

Cécile Braunstein, Anne E Haxthausen, Wen-ling Huang, Felix Hübner, Jan Peleska, Uwe Schulze, and Linh Vu Hong.
Complete Model-Based Equivalence Class Testing for the ETCS Ceiling Speed Monitor.
In Formal Methods and Software Engineering, pages 380-395. Springer International Publishing, 2014.

8

Cécile Braunstein, Jan Peleska, Uwe Schulze, Felix Hübner, Wen-Ling Huang, Anne E. Haxthausen, and Linh Vu Hong.
A SysML Test Model and Test Suite for the ETCS Ceiling Speed Monitor.
Technical Report OETCS/WP4/CSM-01/00, openETCS, May 2014.

9

Hugo D. Macedo, Alessandro Fantechi, and Anne E. Haxthausen.
Compositional Verification of Multi-Station Interlocking Systems.
In Leveraging Applications of Formal Methods, Verification and Validation: Discussion, Dissemination, Applications, Part II, volume 9953 of Lecture Notes in Computer Science, pages 279-293. Springer International Publishing AG, 2016.

10

Hugo Daniel Macedo, Alessandro Fantechi, and Anne E. Haxthausen.
Compositional model checking of interlocking systems for lines with multiple stations.
In Clark Barrett, Misty Davies, and Temesghen Kahsai, editors, NASA Formal Methods: 9th International Symposium, NFM 2017, Proceedings, pages 146-162. Springer International Publishing, 2017.

11

Alessandro Fantechi, Anne E. Haxthausen, and Michel B. R. Nielsen.
Model checking geographically distributed interlocking systems using UMC.
In 2017 25th Euromicro International Conference on Parallel, Distributed and Network-based Processing (PDP), pages 278-286, 2017.

12

Alessandro Fantechi, Stefania Gnesi, Anne Haxthausen, Jaco van de Pol, Marco Roveri, and Helen Treharne.
SaRDIn - A Safe Reconfigurable Distributed Interlocking.
In Proceedings of 11th World Congress on Railway Research (WCRR 2016), Milano, 2016. Ferrovie dello Stato Italiane.

13

Anne E. Haxthausen, Hoang Nga Nguyen, and Markus Roggenbach.
Comparing Formal Verification Approaches of Interlocking Systems.
In Thierry Lecomte, Ralf Pinger, and Alexander Romanovsky, editors, Reliability, Safety, and Security of Railway Systems. Modelling, Analysis, Verification, and Certification: First International Conference, RSSRail Proceedings, pages 160-177. Springer International Publishing, 2016.

14

Anne E. Haxthausen, Marie Le Bliguet, and Andreas A. Kjær.
Modelling and Verification of Relay Interlocking Systems.
In 15th Monterey Workshop: Foundations of Computer Software, Future Trends and Techniques for Development, pages 47-55, 2008.
Invited paper.

15

Anne E. Haxthausen.
Developing a Domain Model for Relay Circuits.
International Journal of Software and Informatics, 3(2-3):241-272, 2009.

16

Anne E. Haxthausen, Marie Le Bliguet, and Andreas A. Kjær.
Modelling and Verification of Relay Interlocking Systems.
In Christine Choppy and Oleg Sokolsky, editors, Foundations of Computer Software, Future Trends and Techniques for Development, number 6028 in Lecture Notes in Computer Science. Springer, 2010.
Invited paper. Extended version of [14].

17

Anne E. Haxthausen.
Towards a Framework for Modelling and Verification of Relay Interlocking Systems.
In 16th Monterey Workshop: Modelling, Development and Verification of Adaptive Systems: the Grand Challenge for Robust Software, 2010.
Invited paper.

18

Anne E. Haxthausen.
Towards a Framework for Modelling and Verification of Relay Interlocking Systems.
In Radu Calinescu and Ethan Jackson, editors, Foundations of Computer Software. Modeling, Development, and Verification of Adaptive Systems, number 6662 in Lecture Notes in Computer Science, pages 176-192. Springer, 2011.
Invited paper. Extended version of [17].

19

Anne E. Haxthausen, Andreas A. Kjær, and Marie Le Bliguet.
Formal Development of a Tool for Automated Modelling and Verification of Relay Interlocking Systems.
In 17th International Symposium on Formal Methods (FM 2011), number 6664 in Lecture Notes in Computer Science, pages 118-132. Springer, 2011.

20

Anne E. Haxthausen.
Automated Generation of Safety Requirements from Railway Interlocking Tables.
In 5th International Symposium On Leveraging Applications of Formal Methods, Verification and Validation (ISOLA'2012), Part II, number 7610 in Lecture Notes in Computer Science, pages 261-275. Springer, 2012.
Invited.

21

Anne E. Haxthausen.
Automated Generation of Formal Safety Conditions from Railway Interlocking Tables.
International Journal on Software Tools for Technology Transfer (STTT), Special Issue on Formal Methods for Railway Control Systems, 16(6):713-726, 2014.

22

Morten P. Lindegaard, Peter Viuf, and Anne E. Haxthausen.
Modelling Railway Interlocking Systems.
In E. Schnieder and U. Becker, editors, Proceedings of the 9th IFAC Symposium on Control in Transportation Systems 2000, June 13-15, 2000, Braunschweig, Germany, pages 211-217, 2000.

23

Torben Gjaldbæk and Anne E. Haxthausen.
Modelling and Verification of Interlocking Systems for Railway Lines.
In Proceedings of the 10th IFAC Symposium on Control in Transportation Systems. Elsevier Science Ltd, Oxford, 2003.
ISBN 0-08-044059-2.

24

Jan Peleska, Alexander Baer, and Anne E. Haxthausen.
Towards Domain-Specific Formal Specification Languages for Railway Control Systems.
In E. Schnieder and U. Becker, editors, Proceedings of the 9th IFAC Symposium on Control in Transportation Systems 2000, June 13-15, 2000, Braunschweig, Germany, pages 147-152, 2000.

25

Anne E. Haxthausen and Jan Peleska.
A Domain Specific Language for Railway Control Systems.
In Proceedings of the Sixth Biennial World Conference on Integrated Design and Process Technology, (IDPT2002), Pasadena, California, pages 23-28, June 23-28 2002.

26

Anne E. Haxthausen and Jan Peleska.
Generation of Executable Railway Control Components from Domain-Specific Descriptions.
In Proceedings of the Symposium on Formal Methods for Railway Operation and Control Systems (FORMS'2003), pages 83-90. L'Harmattan Hongrie, 2003.

27

Anne E. Haxthausen and Jan Peleska.
Automatic Verification, Validation and Test for Railway Control Systems based on Domain-Specific Descriptions.
In Proceedings of the 10th IFAC Symposium on Control in Transportation Systems. Elsevier Science Ltd, Oxford, 2003.
ISBN 0-08-044059-2.

28

Jan Peleska, Daniel Große, Anne E. Haxthausen, and Rolf Drechsler.
Automated Verification for Train Control Systems.
In Proceedings of Formal Methods for Automation and Safety in Railway and Automotive Systems (FORMS/FORMAT 2004), Braunschweig, Germany, 2004.

29

Anne E. Haxthausen, Nikolaj Christensen, and Rasmus Dyhrberg.
From Domain Model to Domain-specific Language for Railway Control Systems.
In Proceedings of Formal Methods for Automation and Safety in Railway and Automotive Systems (FORMS/FORMAT 2004), Braunschweig, Germany, 2004.

30

Jan Peleska and Anne E. Haxthausen.
Object Code Verification for Safety-Critical Railway Control Systems.
In Proceedings of Formal Methods for Automation and Safety in Railway and Automotive Systems (FORMS/FORMAT 2007), Braunschweig, Germany. GZVB e.V., 2007.
ISBN 13:978-3-937655-09-3.

31

Anne E. Haxthausen and Jan Peleska.
A Domain-oriented, Model-based Approach for Construction and Verification of Railway Control Systems.
In Cliff B. Jones, Zhiming Liu, and Jim Woodcock, editors, Formal Methods and Hybrid Real-Time Systems : Essays in Honour of Dines Bjørner and Zhou Chaochen on Occasion of their 70th Birthdays, number 4700 in Lecture Notes in Computer Science, pages 320-348. Springer, 2007.
Invited paper.

32

Anne E. Haxthausen.
A Domain-specific Framework for Automated Construction and Verification of Railway Control Systems.
In B. Buth, G. Rabe, and T. Seyfarth, editors, Proceedings of 28th International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2009, number 5775 in Lecture Notes in Computer Science, pages 1-3. Springer, 2009.
Invited paper.

33

Anne E. Haxthausen, Jan Peleska, and Sebastian Kinder.
A Formal Approach for the Construction and Verification of Railway Control Systems.
Formal Aspects of Computing, 23(2):191-219, 2011.
Special issue in Honour of Dines Bjørner and Zhou Chaochen on Occasion of their 70th Birthdays.

34

Anne E. Haxthausen and Jan Peleska.
Formal Development and Verification of a Distributed Railway Control System.
IEEE Transaction on Software Engineering, 26(8):687-701, 2000.

35

Stefan Gruner, Anne E. Haxthausen, Tom Maibaum, and Markus Roggenbach (editors).
Towards a Formal Methods Body of Knowledge for Railway Control and Safety Systems.
Technical Report DTU Compute Technical Report-2013-20, Technical University of Denmark, November 2013.
ISBN 978-87-643-1303-1.

36

Anne E. Haxthausen, Jan Peleska, and Ralf Pinger.
Applied Bounded Model Checking for Interlocking System Designs.
In Stefan Gruner, Anne E. Haxthausen, Tom Maibaum, and Markus Roggenbach, editors, Towards a Formal Methods Body of Knowledge for Railway Control and Safety Systems. Proceedings of FM-RAIL-BOK Workshop 2013., number DTU Compute Technical Report-2013-20 (ISBN 978-87-643-1303-1), pages 21-26. 2013.

37

Anne E. Haxthausen, Jan Peleska, and Ralf Pinger.
Applied Bounded Model Checking for Interlocking System Designs.
In Steve Counsell and Manuel Núñez, editors, Software Engineering and Formal Methods, volume 8368 of Lecture Notes in Computer Science, pages 205-220. Springer, 2014.