@inproceedings{SMTLIB2,
    author = {C. Barrett and 
              A. Stump and 
              C. Tinelli},
    title = {The {SMT-LIB} {S}tandard: {V}ersion 2.0},
    institution = {},
    year = {2010}
}

@inproceedings{quickcheck,
  author    = {K. Claessen and J. Hughes},
  title     = {Speciﬁcation-based testing with QuickCheck},
  booktitle = {Fun of Programming, Cornerstones of Computing},
  year      = {2003}
}

@article{MathSat,
 author = {M. Bozzano and 
           R. Bruttomesso and 
           A. Cimatti and 
           T. Junttila and 
           P. Rossum and 
           S. Schulz and 
           R. Sebastiani},
 title = {{MathSAT}: Tight Integration of {SAT} and Mathematical Decision Procedures},
 journal = {J. Autom. Reason.},
 year = {2005},
} 

@inproceedings{LindleyM13,
  author    = {S. Lindley and
               C. McBride},
  title     = {Hasochism: the pleasure and pain of dependently typed {H}askell
               programming},
  booktitle = {Haskell},
  year      = {2013}
}

@INPROCEEDINGS{Dybjer03,
    author = {Peter Dybjer and Qiao Haiyan and Makoto Takeyama},
    title = {Verifying haskell pro-grams by combining testing and proving},
    booktitle = {In Proceedings of the Third International Conference on Quality Software},
    year = {2003}
}

@article{zipper,
  author    = {G. P. Huet},
  title     = {The {Z}ipper},
  journal   = {J. Funct. Program.},
  year      = {1997},
}


@inproceedings{ConstableS87,
  author    = {R. L. Constable and
               S. F. Smith},
  title     = {Partial Objects In Constructive Type Theory},
  booktitle = {LICS},
  year      = {1987}
}


@article{CookPR11,
  author    = {Byron Cook and
               Andreas Podelski and
               Andrey Rybalchenko},
  title     = {Proving program termination},
  journal   = {Commun. ACM},
  year      = {2011},
}
@inproceedings{vazou13,
  author    = {N. Vazou and
               P. Rondon and
               R. Jhala},
  title     = {Abstract Refinement Types},
  booktitle = {ESOP},
  year      = {2013},
}

@inproceedings{LiquidICFP14,
  author    = {N. Vazou and
               E. L. Seidel and
               R. Jhala and
               D. Vytiniotis and
               S. Peyton-Jones},
  title     = {Refinement Types for Haskell},
  booktitle = {ICFP},
  year      = {2014},
}

@inproceedings{SulzmannCJD07,
  author    = {M. Sulzmann and
               M. M. T. Chakravarty and
               S. L. Peyton-Jones and
               K. Donnelly},
  title     = {System {F} with type equality coercions},
  booktitle = {TLDI},
  year      = {2007},
}


@article{Capretta05,
  author    = {V. Capretta},
  title     = {General recursion via coinductive types},
  journal   = {Logical Methods in Computer Science},
  year      = {2005},
}

@Book{PLC,
author = {S. R. Della Rocca and L. Paolini},
title = {The Parametric Lambda Calculus, A Metamodel for Computation},
year = {2004}
}


@Unpublished{lazytechrep,
author = {N. Vazou and E. L. Seidel and R. Jhala and 
D. Vytiniotis and S. L. Peyton-Jones},
  note		= "\url{http://goto.ucsd.edu/~nvazou/haskell-refinements-techrep.pdf}",
}

@inproceedings{Zombie,
  author    = {C. Casinghino and
               V. Sj{\"o}berg and
               S. Weirich},
  title     = {Combining proofs and programs in a dependently typed language},
  booktitle = {POPL},
  year      = {2014}
}

@inproceedings{AURA,
  author    = {L. Jia and
               J. A. Vaughan and
               K. Mazurak and
               J. Zhao and
               L. Zarko and
               J. Schorr and
               S. Zdancewic},
  title     = {AURA: a programming language for authorization and audit},
  booktitle = {ICFP},
  year      = {2008}
}

	%% Dependent Types in Haskell 


@inproceedings{YorgeyWCJVM12,
  author    = {B. A. Yorgey and
               S. Weirich and
               J. Cretin and
               S.L. Peyton-Jones and
               D. Vytiniotis and
               J. P. Magalh{\~a}es},
  title     = {Giving Haskell a promotion},
  booktitle = {TLDI},
  year      = {2012}
}

@inproceedings{ZENO,
  author    = {W. Sonnex and
               S. Drossopoulou and
               S. Eisenbach},
  title     = {Zeno: An Automated Prover for Properties of Recursive Data
               Structures},
  booktitle = {TACAS},
  year      = {2012}
}



@inproceedings{HALO,
  author    = {D. Vytiniotis and
               S.L. Peyton-Jones and
               K. Claessen and
               D. Ros{\'e}n},
  title     = {HALO: haskell to logic through denotational semantics},
  booktitle = {POPL},
  year      = {2013}
}


@inproceedings{ChakravartyKJ05,
  author    = {M. T. Chakravarty and
               G. Keller and
               S. L. Peyton-Jones},
  title     = {Associated type synonyms},
  booktitle = {ICFP},
  year      = {2005}
}

@inproceedings{GRDC03,
author = "Hongwei Xi and Chiyan Chen and Gang Chen",
title = {Guarded Recursive Datatype Constructors},
booktitle = POPL,
year = 2003,
address = "New Orleans"
}

@inproceedings{SchrijversJSV09,
  author    = {T. Schrijvers and
               S. L. Peyton-Jones and
               M. Sulzmann and
               D. Vytiniotis},
  title     = {Complete and decidable type inference for {GADTs}},
  booktitle = {ICFP},
  year      = {2009}
}

@inproceedings{JonesVWW06,
  author    = {S. L. Peyton-Jones and
               D. Vytiniotis and
               S. Weirich and
               G. Washburn},
  title     = {Simple unification-based type inference for {GADTs}},
  booktitle = {ICFP},
  year      = {2006}
}

@inproceedings{Cheney02,
    author = {James Cheney and Ralf Hinze},
    title = {A Lightweight Implementation of Generics and Dynamics},
    booktitle = {Haskell},
    year = {2002}
}


@inproceedings{Weirich12,
  author    = {R. A. Eisenberg and
               S. Weirich},
  title     = {Dependently typed programming with singletons},
  booktitle = {Haskell},
  year      = {2012}
}




@article{McBride02,
  author    = {C. McBride},
  title     = {Faking it: Simulating dependent types in {H}askell},
  journal   = {J. Funct. Program.},
  year      = {2002},
}



@INPROCEEDINGS{Jia10,
    author = {L. Jia and J. Zhao and V. Sj\"oberg and S. Weirich},
    title = {Dependent types and program equivalence},
    booktitle = {POPL},
    year = {2010}
}

@InCollection{epigram,
  author =	 {James Chapman and Thorsten Altenkirch and Conor McBride},
  title =	 {Epigram Reloaded: A Standalone Typechecker for {ETT}},
  year =	 {2006},
  booktitle = 	 {Trends in Functional Programming Volume 6},
  publisher =	 {Intellect},
  editor =	 {Marko van Eekelen}
}

@inproceedings{Brady06,
  author    = {Edwin Brady},
  title     = {Ivor, a Proof Engine},
  booktitle = {IFL},
  year      = {2006},
}

@inproceedings{Brady13,
  author    = {E. Brady},
  title     = {Idris: general purpose programming with dependent types},
  booktitle = {PLPV},
  year      = {2013}
}

@article{LohMS10,
  author    = {A. L{\"o}h and
               C. McBride and
               W. Swierstra},
  title     = {A Tutorial Implementation of a Dependently Typed Lambda
               Calculus},
  journal   = {Fundam. Inform.},
  year      = {2010},
}


@Unpublished{bytestring,
  author  = { B. O'Sullivan and S. Marlow and D. Roundy and D. Stewart},
  title   = "bytestring-0.9.2.1",
  note    = "\url{http://hackage.haskell.org/package/bytestring-0.9.2.1}",
  key     = "bytestring-hackage"
}

@Unpublished{text,
  author  = { B. O'Sullivan and T. Harper},
  title   = "text-0.11.2.3: An efficient packed Unicode text type.",
  note    = "\url{http://hackage.haskell.org/package/text-0.11.2.3}",
  key     = "text-hackage"
}

@inproceedings{streamfusion,
  author    = {D. Coutts and
               R. Leshchinskiy and
               D. Stewart},
  title     = {Stream fusion: from lists to streams to nothing at all},
  booktitle = {ICFP},
  year      = {2007}
}


@INPROCEEDINGS{Ennals03,
    author = {R. Ennals and S. Peyton-Jones},
    title = {Optimistic Evaluation: An Adaptive Evaluation Strategy for Non-Strict Programs},
    booktitle = {ICFP},
    year = {2003}
}


@inproceedings{BurnM93,
  author    = {G. L. Burn and
               D. Le M{\'e}tayer},
  title     = {Proving the Correctness of Compiler Optimizations Based
               on Strictness Analysis},
  booktitle = {PLILP},
  year      = {1993},
}



@inproceedings{Maessen02,
  author    = {Jan W. Maessen},
  title     = {Eager Haskell: resource-bounded execution yields efficient iteration},
  booktitle = {Haskell},
  year      = {2002},
}



@INPROCEEDINGS{Reynolds72,
    author = {John C. Reynolds},
    title = {Definitional interpreters for higher-order programming languages},
    booktitle = {25th ACM National Conference},
    year = {1972}
}


@inproceedings{XiTerminationLICS01,
  author    = {H. Xi},
  title     = {Dependent Types for Program Termination Verification},
  booktitle = {LICS},
  year      = {2001},
  ee        = {http://doi.ieeecomputersociety.org/10.1109/LICS.2001.932500},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{JonesB04,
  author    = {N. D. Jones and
               N. Bohr},
  title     = {Termination Analysis of the Untyped lamba-Calculus},
  booktitle = {RTA},
  year      = {2004}
}

@inproceedings{Sereni05, 
 author = {D. Sereni and N.D. Jones},
 title = {Termination analysis of higher-order functional programs},
 booktitle = {APLAS},
 year = {2005},
} 

@Unpublished{   bitv,
  author  = {J.-C. Filli{\'a}tre},
  title   = "Bitv: a bit vectors library",
  note    = "\url{http://www.lri.fr/~filliatr/software.en.html}",
  key     = "BitvWebSite"
}

@Unpublished{	  techrep,
  author	= {P. Rondon and M. Kawaguchi and R. Jhala},
  title		= {Recursive Refinements},
  note		= "\url{http://pho.ucsd.edu/rjhala/recursive-refinements-techrep.pdf}",
  key = "techrep"
}

@Unpublished{	  liquidtechrep,
  author = {P. Rondon and M. Kawaguchi and R. Jhala},
  title  = {Liquid Types},
  url	 = {http://pho.ucsd.edu/liquid/liquid_types_techrep.pdf},
  note	 = "Technical Report",
  key 	 = "techrepl"
}

@inproceedings{GulwaniSrivastava08,
  author    = {S. Gulwani and
               S. Srivastava and
               R. Venkatesan},
  title     = {Program analysis as constraint solving},
  booktitle = {PLDI},
  year      = {2008},
  pages     = {281-292},
  ee        = {http://doi.acm.org/10.1145/1375581.1375616},
}

@InProceedings{	  AAT94,
  author	= "R. Alur and H. Attiya and G. Taubenfeld",
  title		= "Time-adaptive algorithms for synchronization",
  booktitle	= "Proceedings of the 26th Annual Symposium on Theory of
		  Computing",
  publisher	= "ACM Press",
  year		= "1994"
}

@PhDThesis{	  Abadi87,
  author	= "M. Abadi",
  title		= "Temporal-Logic Theorem Proving",
  school	= "Stanford University",
  year		= "1987"
}

@Article{	  abadiblanchet05j,
  author	= "Martin Abadi and Bruno Blanchet",
  title		= "Analyzing security protocols with secrecy types and logic
		  programs",
  journal	= "Journal of the ACM",
  volume	= "52",
  number	= "1",
  year		= "2005",
  pages		= "102--146"
}

@InProceedings{	  AbadiLamport88,
  author	= "M. Abadi and L. Lamport",
  title		= "The existence of refinement mappings",
  booktitle	= "Proceedings of the Third Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1988",
  pages		= "165--175"
}

@InCollection{	  AbadiLamport90,
  author	= "M. Abadi and L. Lamport",
  title		= "Composing specifications",
  booktitle	= "Stepwise Refinement of Distributed Systems: Models,
		  Formalism, Correctness",
  editor	= "de Bakker, J.W. and de Roever, W.-P. and G. Rozenberg",
  series	= "LNCS 430",
  publisher	= "Springer-Verlag",
  year		= "1990"
}

@Article{	  PlotkinTCS75,
  author	= "G. Plotkin",
  title		= "Call-by-Name, Call-by-Value and the Lambda Calculus",
  journal	= "Theoretical Computer Science",
  year		= "1975",
}

@inproceedings{GibbonsPOPL06,
 author = {N.A. Danielsson and J. Hughes and P. Jansson and J. Gibbons, Jeremy},
 title = {Fast and loose reasoning is morally correct},
 booktitle = {POPL},
 year = {2006}
} 



@inproceedings{TerauchiPOPL13,
  author    = {H. Unno and
               T. Terauchi and
               N. Kobayashi},
  title     = {Automating relatively complete verification of higher-order
               functional programs},
  booktitle = {POPL},
  year      = {2013}
}



@Article{	  AbadiLamport91,
  author	= "M. Abadi and L. Lamport",
  title		= "The existence of refinement mappings",
  journal	= "Theoretical Computer Science",
  volume	= "82",
  number	= "2",
  year		= "1991",
  pages		= "253--284"
}

@InCollection{	  AbadiLamport92,
  author	= "M. Abadi and L. Lamport",
  title		= "An old-fashioned recipe for real time",
  booktitle	= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "LNCS 600",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "1--27"
}

@Article{	  AbadiLamport93,
  author	= "M. Abadi and L. Lamport",
  title		= "Composing Specifications",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "15",
  number	= "1",
  year		= "1993",
  pages		= "73--132"
}

@Article{	  AbadiLamport94,
  author	= "M. Abadi and L. Lamport",
  title		= "An old-fashioned recipe for real time",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "16",
  number	= "5",
  year		= "1994",
  pages		= "1543--1571"
}

@Article{	  AbadiLamport95,
  author	= "M. Abadi and L. Lamport",
  title		= "Conjoining Specifications",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "17",
  number	= "3",
  year		= "1995",
  pages		= "507--534"
}

@InProceedings{	  AbdullaJonsson93,
  author	= "P. Abdulla and B. Jonsson",
  title		= "Verifying programs with unreliable channels",
  booktitle	= "Proceedings of the Eighth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1993",
  pages		= "160--170"
}

@InProceedings{	  AbdullaJonsson98,
  author	= "P. Abdulla and B. Jonsson",
  title		= "Verifying networks of timed automata",
  booktitle	= "TACAS 98: Tools and Algorithms for Construction and
		  Analysis of Systems",
  series	= "LNCS 1384",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "298--312"
}

@InProceedings{	  ABIKRSSW02,
  author	= "R. Alur and C. Belta and F. Ivancic and V. Kumar and H.
		  Rubin and J. Schug and O. Sokolsky and J. Webb",
  title		= "Visual Programming for Modeling and Simulation of
		  Biomolecular Regulatory Networks",
  booktitle	= "HiPC 2002: High Performance Computing",
  pages		= "702-712",
  year		= "2002"
}

@InCollection{	  ABK97,
  author	= "E. Asarin and M. Bozga and A. Kerbrat and O. Maler and A.
		  Pnueli and A. Rasse",
  title		= "Data structures for the verification of timed automata",
  booktitle	= "HART 97: Hybrid and Real-time Systems",
  editor	= "O. Maler",
  series	= "LNCS 1201",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "346--360"
}

@Article{	  Abramsky87,
  author	= "S. Abramsky",
  title		= "Observation equivalence as a testing equivalence",
  journal	= "Theoretical Computer Science",
  volume	= "53",
  year		= "1987",
  pages		= "225--241"
}

@InProceedings{	  ACD90,
  author	= "R. Alur and C. Courcoubetis and D.L. Dill",
  title		= "Model checking for real-time systems",
  booktitle	= "Proceedings of the Fifth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1990",
  pages		= "414--425"
}

@Article{	  ACD93,
  author	= "R. Alur and C. Courcoubetis and D.L. Dill",
  title		= "Model checking in dense real time",
  journal	= "Information and Computation",
  volume	= "104",
  number	= "1",
  year		= "1993",
  pages		= "2--34"
}

@InCollection{	  ACH92,
  author	= "R. Alur and C. Courcoubetis and N. Halbwachs and D.L. Dill
		  and {Wong-Toi}, H.",
  title		= "Minimization of timed transition systems",
  editor	= "R.J. Cleaveland",
  booktitle	= "CONCUR 92: Theories of Concurrency",
  series	= "LNCS 630",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "340--354"
}

@Article{	  ACHH95,
  author	= "R. Alur and C. Courcoubetis and N. Halbwachs and T.A.
		  Henzinger and P.-H. Ho and X. Nicollin and A. Olivero and
		  J. Sifakis and S. Yovine",
  title		= "The algorithmic analysis of hybrid systems",
  journal	= "Theoretical Computer Science",
  volume	= "138",
  year		= "1995",
  pages		= "3--34"
}

@InProceedings{	  ACJY96,
  author	= "P. A. Abdulla and K. {\v{C}}er\={a}ns and B. Jonsson and
		  Yih-Kuan Tsay",
  title		= "General decidability theorems for infinite-state systems",
  booktitle	= "Proceedings of the Eleventh Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1996",
  pages		= "313--321"
}

@Article{	  ACJY97,
  author	= "P. A. Abdulla and K. \v{C}er\={a}ns and B. Jonsson and
		  Yih-Kuan Tsay",
  title		= "Algorithmic analysis of programs with well quasi-ordered
		  domains",
  journal	= "Journal of Information and Computation",
  note		= "To appear",
  year		= "1999"
}

@Book{		  PalsbergBook,
  title		= {OO Type Systems},
  author	= {Jens Palsberg and Michael I. Schwartzbach},
  publisher	= {Wiley},
  year		= 1994 
}

@Book{		  ACL2,
  title		= "Computer-Aided Reasoning: An Approach",
  author	= "M. Kaufmann and P. Manolios and J.S. Moore",
  publisher	= "Kluwer Academic Publishers",
  year		= "2000"
}

@InCollection{	  AdAHM99,
  author	= "R. Alur and L. de Alfaro and T.A. Henzinger and F.Y.C.
		  Mang",
  title		= "Automating modular verification",
  booktitle	= "CONCUR 99: Concurrency Theory",
  series	= "Lecture Notes in Computer Science 1664",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "82--97"
}

@Article{	  ADS86,
  author	= "B. Alpern and A.J. Demers and F.B. Schneider",
  title		= "Safety without stuttering",
  journal	= "Information Processing Letters",
  volume	= "23",
  number	= "4",
  year		= "1986",
  pages		= "177--180"
}

@Article{	  AFdR80,
  author	= "K.R. Apt and N. Francez and de Roever, W.-P.",
  title		= "A proof system for communicating sequential processes",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "2",
  year		= "1980",
  pages		= "359--385"
}

@Article{	  AFK88,
  author	= "K.R. Apt and N. Francez and S. Katz",
  title		= "Appraising fairness in languages for distributed
		  programming",
  journal	= "Distributed Computing",
  volume	= "2",
  number	= "4",
  year		= "1988",
  pages		= "226--241"
}

@InProceedings{	  AggarwalKurshan83,
  author	= "S. Aggarwal and R.P. Kurshan",
  title		= "Modeling elapsed time in protocol specification",
  booktitle	= "Proceedings of the Third IFIP WG6.1 International Workshop
		  on Protocol Specification, Testing, and Verification",
  editor	= "H. Rudin and C.H. West",
  publisher	= "Elsevier Science Publishers",
  year		= "1983",
  pages		= "51--62"
}

@InProceedings{	  agrawal93,
  author	= "Agrawal, H. and Horgan, J.R. and Krauser, E.W. and London,
		  S.A.",
  title		= "Incremental Regression Testing",
  booktitle	= "ICSM 93: International Conference on Software Maintenance",
  year		= "1993",
  pages		= "348--357",
  publisher	= "IEEE"
}

@InProceedings{	  AH94,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Finitary Fairness",
  booktitle	= "LICS 94: Logic in Computer Science",
  pages		= "52--61",
  publisher	= "IEEE Computer Society Press",
  year		= 1994
}

@Article{	  AH99-reactive-modules,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Reactive modules",
  journal	= "Formal Methods in System Design",
  volume	= "15",
  number	= "1",
  year		= "1999",
  pages		= "7--48"
}

@Article{	  AHH96,
  author	= "R. Alur and T.A. Henzinger and P.-H. Ho",
  title		= "Automatic symbolic verification of embedded systems",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "22",
  number	= "3",
  year		= "1996",
  pages		= "181--201"
}

@Article{	  AHK02,
  author	= "R. Alur and T.A. Henzinger and O. Kupferman",
  title		= "Alternating-time temporal logic",
  journal	= "Journal of the ACM",
  volume	= "49",
  year		= "2002",
  pages		= "672--713"
}

@InCollection{	  AHKV98,
  author	= "R. Alur and T.A. Henzinger and O. Kupferman and M.Y.
		  Vardi",
  title		= "Alternating refinement relations",
  booktitle	= "CONCUR 97: Concurrency Theory",
  editor	= "D. Sangiorgi and R. de Simone",
  series	= "Lecture Notes in Computer Science 1466",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "163--178"
}

@InProceedings{	  AhmedJiaWalker03,
  author	= {Amal J. Ahmed and Limin Jia and David Walker},
  title		= {Reasoning about Hierarchical Storage.},
  booktitle	= {LICS},
  year		= {2003},
  pages		= {33-44},
  ee		= {http://csdl.computer.org/comp/proceedings/lics/2003/1884/00/18840033abs.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InCollection{	  AIKY92,
  author	= "R. Alur and A. Itai and R.P. Kurshan and M. Yannakakis",
  title		= "Timing verification by successive approximation",
  booktitle	= "CAV 92: Computer-aided Verification",
  editor	= "G. von Bochmann and D.K. Probst",
  series	= "LNCS 663",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "137--150"
}

@Article{	  AIKY95,
  author	= "R. Alur and A. Itai and R.P. Kurshan and M. Yannakakis",
  title		= "Timing verification by successive approximation",
  journal	= "Information and Computation",
  volume	= "118",
  number	= "1",
  year		= "1995",
  pages		= "142--157"
}

@Article{	  AJ96,
  author	= "P. Abdulla and B. Jonsson",
  title		= "Verifying Programs with Unreliable Channels",
  journal	= "Information and Computation",
  volume	= "127",
  year		= "1996",
  pages		= "91--101"
}

@Article{	  AL95,
  title		= "Conjoining specifications",
  author	= "M. Abadi and L. Lamport",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "17(3)",
  year		= 1995,
  pages		= "507--534"
}

@InProceedings{	  Aldrich05,
  author	= {Kevin Bierhoff and Jonathan Aldrich},
  title		= {Lightweight Object Specification with Typestates},
  booktitle	= {ESEC/FSE 2005: Foundations of Software Engineering},
  publisher	= {ACM},
  year		= {2005},
  pages		= {217--226}
}

@InProceedings{AliasTypes,
  author	  = "F. Smith and D. Walker and J.G. Morrisett",
  title		  = "Alias Types",
  booktitle = "ESOP",
  year	   	= {2000}
}

@InCollection{AliasTypesRec,
  author	= "D. Walker and J.G. Morrisett",
  title		= "Alias Types for Recursive Data Structures",
  proceedings	= "Types in Compilation 2000",
  year		= 2000
}

@Article{	  AlpernSchneider85,
  author	= "B. Alpern and F.B. Schneider",
  title		= "Defining liveness",
  journal	= "Information Processing Letters",
  volume	= "21",
  number	= "4",
  year		= "1985",
  pages		= "181--185"
}

@PhDThesis{	  Alur91,
  author	= "R. Alur",
  title		= "Techniques for Automatic Verification of Real-time
		  Systems",
  school	= "Stanford University",
  year		= "1991"
}

@InProceedings{	  Alur99,
  author	= "R. Alur",
  title		= "Timed Automata",
  booktitle	= "CAV 99: Computer-Aided Verification",
  pages		= "8--22",
  series	= "Lecture Notes in Computer Science 1633",
  publisher	= "Springer-Verlag",
  year		= "1999"
}

@InCollection{	  AlurDill90,
  author	= "R. Alur and D.L. Dill",
  title		= "Automata for modeling real-time systems",
  booktitle	= "ICALP 90: Automata, Languages, and Programming",
  editor	= "M.S. Paterson",
  series	= "LNCS 443",
  publisher	= "Springer-Verlag",
  year		= "1990",
  pages		= "322--335"
}

@Article{	  AlurDill94,
  author	= "R. Alur and D.L. Dill",
  title		= "A theory of timed automata",
  journal	= "Theoretical Computer Science",
  year		= "1994",
  volume	= "126",
  pages		= "183--235"
}

@Unpublished{	  AlurInterface05,
  author	= "R. Alur and P. Cerny and G. Gupta and P. Madhusudan and W.
		  Nam and A. Srivastava",
  title		= "Synthesis of interface specifications for {Java} classes",
  booktitle	= {POPL 05: Principles of Programming Languages},
  publisher	= "ACM",
  year		= {2005},
  pages		= {49-61}
}

@Article{	  AlurKurshan95,
  author	= "R. Alur and A. Itai and R.P. Kurshan and M. Yannakakis",
  title		= "Timing verification by successive approximation",
  journal	= "Information and Computation",
  volume	= "118(1)",
  year		= 1995,
  pages		= "142--157"
}

@InProceedings{	  AlurKurshan96,
  author	= "R. Alur and R.P. Kurshan",
  title		= "Timing analysis in {\sc {C}ospan}",
  booktitle	= "Hybrid Systems III",
  editor	= "R. Alur and T.A. Henzinger and E.D. Sontag",
  series	= "LNCS 1066",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "220--231"
}

@InProceedings{	  AlurLaTorre,
  author	= "R. Alur and S. La Torre and G. Pappas",
  title		= "Optimal paths in weighted timed automata",
  booktitle	= "HSCC 01: Hybrid Systems: Computation and Control",
  series	= "LNCS 2034",
  publisher	= "Springer-Verlag",
  year		= "2001",
  pages		= "49--62"
}

@InProceedings{	  AlurSTOC04,
  author	= {Rajeev Alur and P. Madhusudan},
  title		= {Visibly pushdown languages.},
  booktitle	= {STOC},
  year		= {2004},
  pages		= {202-211},
  ee		= {http://doi.acm.org/10.1145/1007390},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  ALW89,
  author	= "M. Abadi and L. Lamport and P. Wolper",
  title		= "Realizable and Unrealizable Concurrent Program
		  Specifications",
  booktitle	= "ICALP89: International Colloquium on Automata, Languages
		  and Programming",
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer-Verlag",
  volume	= 372,
  year		= "1989",
  pages		= "1--17"
}

@TechReport{	  AM78,
  author	= {Tilak Agerwala and Jayadev Misra},
  title		= {Assertion Graphs for Verifying and Synthesizing Programs},
  institution	= {University of Texas, Austin},
  year		= 1978,
  number	= {83}
}

@InProceedings{	  Amarasinghe,
  author	= {Mark Stephenson and Jonathan Babb and Saman P.
		  Amarasinghe},
  title		= {Bitwidth analysis with application to silicon
		  compilation.},
  booktitle	= {PLDI},
  year		= {2000},
  pages		= {108-120},
  ee		= {http://doi.acm.org/10.1145/349299.349317},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  AmmonsBodikLarus02,
  author	= {G. Ammons and R. Bodik and J. R. Larus},
  title		= {Mining specifications},
  booktitle	= {POPL 02: Principles of Programming Languages},
  publisher	= {ACM},
  year		= {2002},
  pages		= {4--16}
}

@InProceedings{	  AmmonsLarus98,
  author	= {G. Ammons and J. R. Larus},
  title		= {Improving Data-flow Analysis with Path Profiles},
  booktitle	= {PLDI 98: Programming Language Design and Implementation},
  publisher	= {ACM},
  year		= {1998},
  pages		= {72-84}
}

@Article{	  AMP95,
  author	= "E. Asarin and O. Maler and A. Pnueli",
  title		= "On the analysis of dynamical systems having
		  piecewise-constant derivatives",
  journal	= "Theoretical Computer Science",
  volume	= "238",
  year		= "1995",
  pages		= "35-65"
}

@InCollection{	  AMP96,
  author	= "E. Asarin and O. Maler and A. Pnueli",
  title		= "Symbolic controller synthesis for discrete and timed
		  systems",
  booktitle	= "Hybrid Systems II",
  editor	= "P. Antsaklis and A. Nerode and W. Kohn and S. Sastry",
  series	= "LNCS 999",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "1--20"
}

@PhDThesis{	  Andersen,
  title		= {Program analysis and specialization for the {C}
		  programming language},
  author	= {L.O. Andersen},
  institution	= {DIKU, University of Copenhagen},
  year		= {1994}
}

@PhDThesis{	  Andersen94,
  author	= "L.O. Andersen",
  title		= "Program Analysis and Specialization for the C Programming
		  Language",
  school	= "DIKU, University of Copenhagen",
  year		= "1994"
}

@Book{		  Andrews91,
  author	= "G.R. Andrews",
  title		= "Concurrent Programming: Principles and Practice",
  publisher	= "Benjamin/Cummings",
  year		= "1991"
}

@Book{		  AO91,
  author	= "K.R. Apt and E.-R. Olderog",
  title		= "Verification of sequential and concurrent programs",
  publisher	= "Springer-Verlag",
  year		= "1991"
}

@Book{		  AptOlderog91,
  author	= "K.R. Apt and Olderog, E.-R.",
  title		= "Verification of Sequential and Concurrent Programs",
  publisher	= "Springer-Verlag",
  year		= "1991"
}

@Article{	  ARTS93j,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Real-time system = discrete system + clock variables",
  journal	= "Software Tools for Technology Transfer",
  volume	= "1",
  year		= "1997",
  pages		= "86--109"
}

@InCollection{	  ARTS93p,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Real-time system = discrete system + clock variables",
  booktitle	= "Theories and Experiences for Real-time System Development",
  editor	= "T. Rus and C. Rattray",
  series	= "AMAST Series in Computing 2",
  publisher	= "World Scientific",
  year		= "1994",
  pages		= "1--29"
}

@InProceedings{	  AsarinMaler99,
  author	= "E. Asarin and O. Maler",
  title		= "As soon as possible: Time optimal control for timed
		  automata",
  booktitle	= "HSCC 99: Hybrid Systems: Computation and Control",
  series	= "LNCS 1569",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "19--30"
}

@Book{		  ASU86,
  author	= "A.V. Aho and R. Sethi and J.D. Ullman",
  title		= "Compilers: Principles, Techniques, and Tools",
  publisher	= "Addison-Wesley",
  year		= "1986"
}

@InProceedings{	  AtomCaml05,
  author	= "Michael F. Ringenberg and Dan Grossman",
  title		= "AtomCaml: First-Class Atomicity via Rollback",
  booktitle	= "Proceedings of the 10th Annual Conference on Functional
		  Programming",
  publisher	= "ACM Press",
  year		= "2005"
}

@TechReport{	  Autofocus,
  title		= "Integrated Development of Embedded Systems with
		  {AutoFocus}",
  author	= "F. Huber and B. Schatz",
  number	= "TUM-I0107",
  institution	= "TU Munich, Institut fur Informatik",
  year		= "2001"
}

@InProceedings{	  Avots05,
  author	= {Dzintars Avots and Michael Dalton and V. Benjamin Livshits
		  and Monica S. Lam},
  title		= {Improving software security with a C pointer analysis.},
  booktitle	= {ICSE},
  year		= {2005},
  pages		= {332-341},
  ee		= {http://doi.acm.org/10.1145/1062520},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  bacon98,
  author	= "David F. Bacon and Ravi Konuru and Chet Murthy and
		  Mauricio Serrano",
  title		= "Thin Locks: Featherweight Synchronization for Java",
  booktitle	= {PLDI 98: Programming Language Design and Implementation},
  publisher	= {ACM},
  pages		= "56--67",
  year		= 1993
}

@Article{	  BaetenBergstra91,
  author	= "J.C.M. Baeten and J.A. Bergstra",
  title		= "Real-time process algebra",
  journal	= "Formal Aspects of Computing",
  volume	= "3",
  number	= "2",
  year		= "1991",
  pages		= "142--188"
}

@Book{		  BaetenWeijland90,
  author	= "J.C.M. Baeten and W.P. Weijland",
  title		= "Process Algebra",
  publisher	= "Cambridge University Press",
  year		= "1990"
}

@PhDThesis{	  Baier98,
  author	= "C. Baier",
  title		= "On Algorithmic Verification Methods for Probabilistic
		  Systems",
  school	= "University of Mannheim",
  address	= "Germany",
  year		= "1998"
}

@TechReport{	  Ball,
  author	= {Thomas Ball},
  title		= {A Theory of Predicate-Complete Test Coverage and
		  Generation},
  institution	= {Microsoft Research},
  number	= {MSR-TR-2004-09},
  year		= {2004}
}

@InProceedings{	  ball98limit,
  author	= "T. Ball",
  title		= "On the Limit of Control-Flow Analysis for Regression Test
		  Selection",
  booktitle	= "ISSTA 98: International Symposium on Software Testing and
		  Analysis",
  pages		= "134-142",
  year		= "1998",
  publisher	= "ACM"
}

@InCollection{	  BallRajamaniSpin00,
  author	= "T. Ball and S. K. Rajamani",
  title		= "Bebop: A Symbolic Model Checker for {B}oolean Programs",
  booktitle	= "SPIN 00: SPIN Workshop",
  series	= "LNCS 1885",
  publisher	= "Springer",
  pages		= {113-130},
  year		= "2000"
}

@InProceedings{	  BallRajamaniSpin01,
  title		= {Automatically Validating Temporal Safety Properties of
		  Interfaces},
  author	= {T. Ball and S. K. Rajamani},
  booktitle	= {SPIN 2001: SPIN Workshop},
  series	= {LNCS 2057},
  publisher	= {Springer},
  pages		= {103--122},
  year		= {2001}
}

@InProceedings{	  Bandera,
  title		= {Bandera : Extracting Finite-state Models from {J}ava
		  Source Code},
  author	= {J. Corbett and M. Dwyer and J. Hatcliff and C. Pasareanu
		  and Robby and S. Laubach and H. Zheng},
  booktitle	= {ICSE 00: Software Engineering},
  pages		= {439-448},
  year		= {2000}
}

@InProceedings{	  BanderaAbstraction,
  title		= {Tool-supported Program Abstraction for Finite-state
		  Verification},
  author	= {M. Dwyer and J. Hatcliff and R. Joehanes and S. Laubach
		  and C. Pasareanu and Robby and W. Visser and H. Zheng},
  booktitle	= {ICSE 01: Software Engineering (to appear)},
  year		= {2001}
}

@InProceedings{	  Banerjee,
  author	= "M. Abadi and A. Banerjee and N. Heintze and J.G. Riecke",
  title		= "A Core Calculus of Dependency",
  booktitle	= "POPL 99: Principles of Programming Languages",
  year		= "1999",
  pages		= "147-160",
  publisher	= "ACM"
}

@InCollection{	  Barringer87,
  author	= "H. Barringer",
  title		= "The use of temporal logic in the compositional
		  specification of concurrent systems",
  booktitle	= "Temporal Logics and their Applications",
  editor	= "A. Galton",
  publisher	= "Academic Press",
  year		= "1987",
  pages		= "53--90"
}

@proceedings{Barendregt88,
    author = {H. P. Barendregt and E. Barendregt},
    title = {{Introduction to Lambda Calculus}},
    year = {2000},
    booktitle = {Aspen\aes Workshop on Implementation of Functional Languages, G\"oteborg},
    keywords = {lambda-calculus, lecture-pas},
    publisher = {Programming Methodology Group, University of G\"{o}teborg and Chalmers University of Technology},
}


@Article{	  Barwise89,
  author	= "J. Barwise",
  title		= "Mathematical proofs of computer system correctness",
  journal	= "Notices of the*American Mathematical Society 36",
  pages		= "844--851",
  year		= "1989"
}

@Article{	  Basu99,
  author	= "S. Basu",
  title		= "New Results on Quantifier Elimination over Real Closed
		  Fields and Applications to Constraint D atabases",
  journal	= "Journal of the {ACM}",
  volume	= "46(4)",
  pages		= "537--555",
  year		= 1999
}

@Article{	  BasuPollackRoy96,
  author	= "S. Basu and R. Pollack and M.-F. Roy",
  title		= "On the Combinatorial and Algebraic Complexity of
		  Quantifier Elimination",
  journal	= "Journal of the {ACM}",
  volume	= "43(6)",
  pages		= "1002--1045",
  year		= 1996
}

@InProceedings{	  Batory03,
  author	= {Don S. Batory and Jacob Neal Sarvela and Axel
		  Rauschmayer},
  title		= {Scaling Step-Wise Refinement.},
  booktitle	= {ICSE},
  year		= {2003},
  pages		= {187-197},
  ee		= {http://computer.org/proceedings/icse/1877/18770187abs.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  BB87,
  author	= "B. Banieqbal and H. Barringer",
  title		= "Temporal logic with fixed points",
  booktitle	= "Temporal Logic in Specification",
  editor	= "B. Banieqbal and H. Barringer and A. Pnueli",
  series	= "Lecture Notes in Computer Science",
  volume	= 398,
  publisher	= "Springer-Verlag",
  year		= 1987,
  pages		= "62--74"
}

@InCollection{	  BBC96,
  author	= "N. Bj{\o}rner and A. Browne and E. Chang and M. Col\'on
		  and A. Kapur and Z. Manna and H.B. Sipma and T.E. Uribe",
  title		= "{\sc {S}{T}e{P}}: deductive-algorithmic verification of
		  reactive and real-time systems",
  booktitle	= "CAV 96: Computer-aided Verification",
  editor	= "R. Alur and T.A. Henzinger",
  series	= "LNCS 1102",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "415--418"
}


@inproceedings{RybalchenkoVMCAI07,
  author    = {D. Beyer and
               T. Henzinger and
               R. Majumdar and
               A. Rybalchenko},
  title     = {Invariant Synthesis in Combination Theories},
  booktitle = {VMCAI},
  year      = {2007},
  ee        = {http://dx.doi.org/10.1007/11609773_28},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{RupakPLDI07,
  author    = {D. Beyer and
               T. Henzinger and
               R. Majumdar and
               A. Rybalchenko},
  title     = {Path Invariants},
  booktitle = {PLDI},
  year      = {2007 (to appear)}
}


@inproceedings{BradleyManna06,
  author    = {A. R. Bradley and
               Z. Manna and
               Henny B. Sipma},
  title     = {What's Decidable About Arrays?},
  booktitle = {VMCAI},
  year      = {2006},
  pages     = {427-442},
  ee        = {http://dx.doi.org/10.1007/11609773_28},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}



@InProceedings{	  BBLS92,
  author	= "S. Bensalem and A. Bouajjani and C. Loiseaux and J.
		  Sifakis",
  title		= "Property-preserving simulations",
  booktitle	= "CAV 92: Computer-aided Verification",
  editor	= "G. von Bochmann and D.K. Probst",
  series	= "LNCS 663",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "260--273"
}

@Book{		  BBook,
  author	= "J.-R. Abrial",
  title		= "The {B}~Book: Assigning Programs to Meanings",
  publisher	= "Cambridge University Press",
  year		= 1996
}

@InProceedings{	  BC02,
  author	= "A. Bockmayr and A. Courtois",
  title		= "Using hybrid concurrent constraint programming to model
		  dynamic biological systems",
  booktitle	= "ICLP 02: Logic Programming",
  pages		= "85--99",
  publisher	= "Springer",
  year		= "2002"
}

@InProceedings{	  BC96,
  author	= "G. Bhat and R. Cleaveland",
  title		= "Efficient model checking via the equational
		  $\mu$-calculus",
  booktitle	= "Proceedings of the Eleventh Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1996",
  pages		= "304--312"
}

@Article{	  BCG88,
  author	= "M.C. Browne and E.M. Clarke and O. Grumberg",
  title		= "Characterizing finite {K}ripke structures in propositional
		  temporal logic",
  journal	= "Theoretical Computer Science",
  volume	= "59",
  year		= "1988",
  pages		= "115--131"
}

@Article{	  BCG89,
  author	= "M.C. Browne and E.C. Clarke and O. Grumberg",
  title		= "Reasoning about networks with many identical finite state
		  processes",
  journal	= "Information and Computation",
  volume	= "81",
  year		= "1989",
  pages		= "13--31"
}

@InCollection{	  BCG97,
  author	= "C. Baier and E.M. Clarke and V. Garmhausen-Hartonas and M.
		  Kwiatkowska and M. Ryan",
  title		= "Symbolic model checking for probabilistic processes",
  booktitle	= "ICALP 97: Automata, Languages, and Programming",
  editor	= "P. Degano and R. Gorrieri and A. Marchetti-Spaccamela",
  series	= "Lecture Notes in Computer Science 1256",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "430--440"
}

@InCollection{kuehlmann,
  author    = {Andreas Kuehlmann and Fabio Somenzi},
  title     = {Equivalence Checking},
  booktitle = {Electronic Design Automation for Integrated Circuits
    Handbook Volume 2},
  year = {2006},
  publisher = {CRC Press}
}

@inproceedings{mine06,
  author    = {Antoine Min{\'e}},
  title     = {Field-sensitive value analysis of embedded C programs with
               union types and pointer arithmetics.},
  booktitle = {LCTES},
  year      = {2006},
  pages     = {54-63},
  ee        = {http://doi.acm.org/10.1145/1134650.1134659},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@inproceedings{DistefanoOY06,
  author    = {Dino Distefano and
               Peter W. O'Hearn and
               Hongseok Yang},
  title     = {A Local Shape Analysis Based on Separation Logic.},
  booktitle = {TACAS},
  year      = {2006},
  pages     = {287-302},
  ee        = {http://dx.doi.org/10.1007/11691372_19}
}

@Unpublished{liquidhaskellHIDE,
  author	= {R.Jhala and N. Vazou and E. Seidel},
  title     = {LiquidHaskell},
  note		= "\url{http://goto.ucsd.edu/\~rjhala/liquid/haskell/demo/}"
}

@Unpublished{miniagda,
  author	= {Andreas Abel},
  title     = {Mini Agda},
  note		= "\url{http://www2.tcs.ifi.lmu.de/~abel/miniagda/}"
}


@Unpublished{	  BCHSep04,
  author	= {J. Berdine and C. Calcagno and P. O'Hearn},
  title		= {A Decidable Fragment of Separation Logic},
  note		= "\url{http://www.dcs.qmul.ac.uk/~ohearn/papers/unroll_collapse.pdf}"
		  ,
  key		= "BCHSep04"
}

@Article{	  BCM92,
  author	= "J.R. Burch and E.M. Clarke and K.L. McMillan and D.L. Dill
		  and L.J. Hwang",
  title		= "Symbolic model checking: $10^{20}$ states and beyond",
  journal	= "Information and Computation",
  volume	= "98",
  number	= "2",
  year		= "1992",
  pages		= "142--170"
}

@InProceedings{	  BCR01,
  title		= { Parameterized verification of multithreaded software
		  libraries},
  author	= {T. Ball and S. Chaki and S. K. Rajamani},
  booktitle	= {TACAS 01: Tools and Algorithms for Construction and
		  Analysis of Systems},
  series	= {LNCS 2031},
  publisher	= {Springer},
  year		= {2001}
}

@InProceedings{	  Bentley05,
	title = {Validating a modern microprocessor},
	author = {B. Bentley},
	booktitle = "CAV 05: Computer-Aided Verification",
	series = "LNCS 3576",
	publisher = "Springer",
	pages = "2--4",
	year = 2005
}

@InProceedings{	  BdA95,
  author	= "A. Bianco and L. de Alfaro",
  title		= "Model Checking of Probabilistic and Nondeterministic
		  Systems",
  booktitle	= "FSTTCS 95: Software Technology and Theoretical Computer
		  Science",
  year		= 1995,
  series	= "Lecture Notes in Computer Science",
  volume	= 1026,
  pages		= "499--513",
  publisher	= "Springer-Verlag"
}

@InProceedings{	  Beacon,
  title		= { Parameterized verification of multithreaded software
		  libraries},
  author	= {T. Ball and S. Chaki and S. K. Rajamani},
  booktitle	= {TACAS 01: Tools and Algorithms for Construction and
		  Analysis of Systems},
  series	= {LNCS 2031},
  publisher	= {Springer-Verlag},
  year		= {2001}
}

@inproceedings{AndrausSakallah04,
  author    = {Zaher S. Andraus and
               Karem A. Sakallah},
  title     = {Automatic abstraction and verification of verilog models.},
  booktitle = {DAC},
  year      = {2004},
  pages     = {218-223},
  ee        = {http://doi.acm.org/10.1145/996566.996629},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{AndrausSakallah06,
  author    = {Zaher S. Andraus and
               Mark H. Liffiton and
               Karem A. Sakallah},
  title     = {Refinement strategies for verification methods based on
               datapath abstraction.},
  booktitle = {ASP-DAC},
  year      = {2006},
  pages     = {19-24},
  ee        = {http://doi.acm.org/10.1145/1118299.1118306},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@InProceedings{	  manoliosBAT,
  author	= "Panagiotis Manolios and Sudarshan K. Srinivasan and Daron Vroon",
  title		= "Automatic Memory Reductions for RTL Model Verification",
  booktitle	= "ICCAD 06: International Conference on Computer-Aided
		  Design",
  year		= 2006,
  publisher	= "ACM Press",
  pages		= "(to appear)"
}


@article{manolios06,
  author    = {Panagiotis Manolios and Sudarshan K. Srinivasan},
  title     = {A Framework for Verifying Bit-Level Pipelined Machines Based
    on Automated Deduction and Decision Procedures},
  journal   = {Journal of Automated Reasoning (to appear)},
  year 	    = {2006}
}


@article{hosabettu,
  author    = {Ravi Hosabettu and
               Ganesh Gopalakrishnan and
               Mandayam K. Srivas},
  title     = {Formal Verification of a Complex Pipelined Processor.},
  journal   = {Formal Methods in System Design},
  volume    = {23},
  number    = {2},
  year      = {2003},
  pages     = {171-213},
  ee        = {http://dx.doi.org/10.1023/A:1024716316140},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{GordonRefinement09,
  author    = {J. Bengtson and
               K. Bhargavan and
               C. Fournet and
               A.D. Gordon and
               S. Maffeis},
  title     = {Refinement Types for Secure Implementations},
  booktitle = {CSF},
  year      = {2008},
}

@Book{		  HOL,
  author	= "M. J. C. Gordon and T. F. Melham",
  title		= "Introduction to HOL",
  year		= "1993",
  publisher	= "Cambridge University Press"
}

@Book{		  Beck99,
  author	= "K. Beck",
  title		= "Extreme Programming Explained: Embrace Change",
  year		= "1999",
  publisher	= "Addison-Wesley"
}

@Article{	  Bee80,
  author	= "C. Beeri",
  title		= "On the membership problem for functional and multivalued
		  dependencies in relational databases",
  journal	= "ACM Trans. on Database Systems",
  volume	= 5,
  pages		= "241--259",
  year		= 1980
}

@Article{	  Bellman54,
  author	= "R.E. Bellman",
  title		= "The Theory of Dynamic Programming",
  journal	= "Bull.\ Amer.\ Math.\ Soc.",
  volume	= 60,
  pages		= "503--516",
  year		= 1954
}

@InCollection{	  BEM97,
  author	= "A. Bouajjani and J. Esparza and O. Maler",
  title		= "Reachability analysis of pushdown automata: application to
		  model checking",
  booktitle	= "CONCUR 97: Concurrency Theory",
  series	= "LNCS 1243",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "135--150"
}

@Book{		  BenAri90,
  author	= "{Ben-Ari}, M.",
  title		= "Principles of Concurrent and Distributed Programming",
  publisher	= "Prentice-Hall",
  year		= "1990"
}

@InCollection{	  BER94cav,
  author	= "A. Bouajjani and R. Echahed and R. Robbana",
  title		= "Verification of context-free timed systems using linear
		  hybrid observers",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "118--131"
}

@InCollection{	  BER94ftrtft,
  author	= "A. Bouajjani and R. Echahed and R. Robbana",
  title		= "Verifying invariance properties of timed systems with
		  duration variables",
  booktitle	= "FTRTFT 94: Formal Techniques in Real-time and
		  Fault-tolerant Systems",
  editor	= "H. Langmaack and de Roever, W.-P. and J. Vytopil",
  series	= "LNCS 863",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "193--210"
}

@InProceedings{	  BerkP95,
  author	= "A. Aziz and V. Singhal and F. Balarin and R.K. Brayton and
		  A.L. Sangiovanni-Vincentelli",
  title		= "It Usually Works: The Temporal Logic of Stochastic
		  Systems",
  booktitle	= "CAV95: Computer-Aided Verification",
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer-Verlag",
  volume	= 939,
  year		= 1995,
  summary	= "Introduces pCTL on Markov chains, and then considers more
		  general systems, in which the probabilities are specified
		  by algebrical constraints, and invokes decidability results
		  for these theories to provide (hugely inefficient)
		  model-checking algorithms"
}

@Article{	  Berman80,
  author	= "L. Berman",
  year		= "1980",
  title		= "The complexity of logical theories",
  journal	= "Theoretical Computer Science",
  volume	= "11",
  pages		= "71--77"
}

@InProceedings{	  BernsteinHarter81,
  author	= "A. Bernstein and Harter, Jr., P.K.",
  title		= "Proving real-time properties of programs with temporal
		  logic",
  booktitle	= "Proceedings of the Eighth Annual Symposium on Operating
		  System Principles",
  publisher	= "ACM Press",
  year		= "1981",
  pages		= "1--11"
}

@TechReport{	  BerryGonthier88,
  author	= "G. Berry and G. Gonthier",
  title		= "The Synchronous Programming Language {\sc {E}sterel}:
		  Design, Semantics, Implementation",
  institution	= "INRIA",
  number	= "842",
  year		= "1988"
}

@Article{	  BerthomieuDiaz91,
  author	= "B. Berthomieu and M. Diaz",
  title		= "Modeling and verification of time-dependent systems using
		  time {Petri} nets",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "SE-17",
  number	= "3",
  year		= "1991",
  pages		= "259--273"
}

@Book{		  Bertsekas95,
  author	= "D.P. Bertsekas",
  title		= "Dynamic Programming and Optimal Control",
  year		= 1995,
  note		= "Volumes I and II",
  publisher	= "Athena Scientific"
}

@InProceedings{	  BES93,
  author	= "A. Bouajjani and R. Echahed and J. Sifakis",
  title		= "On model checking for real-time properties with durations",
  booktitle	= "Proceedings of the Eighth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1993",
  pages		= "147--159"
}

@InCollection{	  BFH90,
  author	= "A. Bouajjani and Fernandez, J.-C. and N. Halbwachs",
  title		= "Minimal model generation",
  booktitle	= "CAV 90: Computer-aided Verification",
  editor	= "R.P. Kurshan and E.M. Clarke",
  series	= "LNCS 531",
  publisher	= "Springer-Verlag",
  year		= "1990",
  pages		= "197--203"
}

@Article{	  BG03,
  author	= "D. Bustan and O. Grumberg",
  year		= "2003",
  title		= "Simulation-based minimization",
  journal	= "ACM Transactions on Computational Logic",
  volume	= "4",
  pages		= "181--206"
}

@InCollection{	  BGK96,
  author	= "J. Bengtsson and W.O.D. Griffioen and K.J. Kristoffersen
		  and K.G. Larsen and F. Larsson and P. Pettersson and W. Yi",
  title		= "Verification of an audio protocol with bus collision using
		  {\sc {U}ppaal}",
  booktitle	= "CAV 96: Computer-aided Verification",
  editor	= "R. Alur and T.A. Henzinger",
  series	= "LNCS 1102",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "244--256"
}

@InCollection{	  BGM93,
  author	= "A. Back and J. Guckenheimer and M. Myers",
  title		= "A dynamical simulation facility for hybrid systems",
  booktitle	= "Hybrid Systems",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "LNCS 736",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "255--267"
}

@InProceedings{	  BGP97,
  author	= "T. Bultan and R. Gerber and W. Pugh",
  title		= "Symbolic model checking of infinite systems using
		  Presburger arithmetic",
  booktitle	= "CAV 97: Computer-Aided Verification",
  series	= "LNCS 1254",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "400--411"
}

@InProceedings{	  BGS97,
  title		= {Refining dataflow information using infeasible paths},
  author	= {R. Bodik and R. Gupta and M.L. Soffa},
  booktitle	= {FSE 97: Foundations of Software Engineering},
  series	= {LNCS 1301},
  publisher	= {Springer},
  pages		= {361--377},
  year		= {1997}
}

@InProceedings{	  BhatCleaveland96,
  author	= "G. Bhat and R. Cleaveland",
  title		= "Efficient local model-checking for fragments of the modal
		  $\mu$-calculus",
  booktitle	= "Proceedings of the International Conference on Tools and
		  Algorithms for Construction and Analysis of Systems",
  series	= "LNCS",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "107--126"
}

@InProceedings{	  BI01,
  author	= {Samin S. Ishtiaq and Peter W. O'Hearn},
  title		= {BI as an Assertion Language for Mutable Data Structures.},
  booktitle	= {POPL},
  year		= {2001},
  pages		= {14-26},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  BIM88,
  author	= "B. Bloom and S. Istrail and A.R. Meyer",
  title		= "Bisimulation can't be traced",
  booktitle	= "Proceedings of the 15th Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1988",
  pages		= "229--239"
}

@Article{	  BK98,
  author	= "C. Baier and M. Kwiatkowska",
  title		= "On the Verification of Qualitative Properties of
		  Probabilistic Processes under Fairness Contraints",
  journal	= "Information Processing Letters",
  volume	= 66,
  number	= 2,
  pages		= "71--79",
  year		= 1998,
  summary	= "discusses a new notion of fairness (which may be
		  impractical to represent) that generalizes extreme and
		  alpha fairness for hybrid systems. Fairness is used as a
		  substitute for probability, not nondeterminism as in their
		  KB96 paper"
}

@InProceedings{	  BKP84,
  author	= "H. Barringer and R. Kuiper and A. Pnueli",
  title		= "Now you may compose temporal-logic specifications",
  booktitle	= "Proceedings of the 16th Annual Symposium on Theory of
		  Computing",
  publisher	= "ACM Press",
  year		= "1984",
  pages		= "51--63"
}

@InProceedings{	  BKP86,
  author	= "H. Barringer and R. Kuiper and A. Pnueli",
  title		= "A really abstract concurrent model and its temporal logic",
  booktitle	= "Proceedings of the 13th Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1986",
  pages		= "173--183"
}

@Article{	  BKRW98,
  author	= "A.L. Buchsbaum and H. Kaplan and A. Rogers and J.
		  Westbrook",
  title		= "A New, Simpler Linear-Time Dominators Algorithm",
  journal	= "ACM Trans. Program. Lang. Syst.",
  volume	= "20(6)",
  pages		= "1265-1296",
  publisher	= "ACM",
  year		= "1998"
}

@Article{	  BL99,
  author	= "Saddek Bensalem and Yassine Lakhnech",
  title		= "Automatic Generation of Invariants",
  journal	= "Formal Methods in System Design",
  volume	= "15(1)",
  pages		= "75-92",
  year		= "1999"
}

@Article{	  Blackwell62,
  author	= "D. Blackwell",
  title		= "Discounted dynamic programming",
  journal	= "Annals of Mathematical Statistics",
  volume	= "36",
  pages		= "226--235",
  year		= 1962
}

@InProceedings{	  BLL96,
  author	= "J. Bengtsson and K.G. Larsen and F. Larsson and P.
		  Pettersson and W. Yi",
  title		= "{\sc {U}ppaal}: a tool-suite for automatic verification of
		  real-time systems",
  booktitle	= "Hybrid Systems III",
  editor	= "R. Alur and T.A. Henzinger and E.D. Sontag",
  series	= "LNCS 1066",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "232--243"
}

@PhDThesis{	  Bloom89,
  author	= "B. Bloom",
  title		= "Ready simulation, bisimulation, and the semantics of
		  {CCS}-like languages",
  school	= "MIT",
  year		= "1989"
}

@Article{	  BloomPaige95,
  author	= "B. Bloom and R. Paige",
  title		= "Transformational design and implementation of a new
		  efficient solution to the ready simulation problem",
  journal	= "Science of Computer Programming",
  volume	= "24",
  number	= "3",
  year		= "1995",
  pages		= "189--220"
}

@InProceedings{	  BLV96,
  author	= "N. Buhrke and H. Lescow and J. Voge",
  title		= "Strategy construction in infinite games with Streett and
		  Rabin chain winning conditions",
  booktitle	= "TACAS 96: Tools and Algorithms for Construction and
		  Analysis of Systems",
  series	= "LNCS 1055",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "207--224"
}

@Book{		  BM79,
  author	= "R.S. Boyer and J.S. Moore",
  title		= "A Computational Logic",
  publisher	= "Academic Press, NY",
  year		= "1979"
}


@inproceedings{pvshardware,
  author    = {Mandayam K. Srivas and
               Harald Rue{\ss} and
               David Cyrluk},
  title     = {Hardware Verification Using PVS.},
  booktitle = {Formal Hardware Verification},
  year      = {1997},
  pages     = {156-205},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@inproceedings{Harrison05,
  author    = {John Harrison},
  title     = {Floating-Point Verification.},
  booktitle = {FM},
  year      = {2005},
  pages     = {529-532},
  ee        = {http://dx.doi.org/10.1007/11526841_35},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@article{acl2fdiv,
  author    = {J. Strother Moore and
               Thomas W. Lynch and
               Matt Kaufmann},
  title     = {A Mechanically Checked Proof of the AMD5$_{\mbox{K}}$86$^{\mbox{TM}}$
               Floating Point Division Program.},
  journal   = {IEEE Trans. Computers},
  volume    = {47},
  number    = {9},
  year      = {1998},
  pages     = {913-926},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@InCollection{	  BMC,
  author	= "A. Biere and A. Cimatti and E.M. Clarke and Y. Zhu",
  title		= "Symbolic Model Checking without {BDDs}",
  booktitle	= "TACAS 99: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  series	= "Lecture Notes in Computer Science 1579",
  publisher	= "Springer",
  pages		= "193-207",
  year		= 1999
}

@InProceedings{	  BMMR01,
  title		= {Automatic Predicate Abstraction of {C} Programs},
  author	= {T. Ball and R. Majumdar and T. Millstein and S. K.
		  Rajamani},
  booktitle	= {PLDI},
  year		= {2001}
}

@InProceedings{	  BMP81,
  author	= "{Ben-Ari}, M. and Z. Manna and A. Pnueli",
  title		= "The temporal logic of branching time",
  booktitle	= "Proceedings of the Eighth Annual Symposium on Principles
		  of Programming Languages",
  publisher	= "ACM Press",
  year		= "1981",
  pages		= "164--176"
}

@Article{	  BMR03,
  title		= {Polymorphic predicate abstraction},
  author	= {T. Ball and T. Millstein and S.K. Rajamani},
  journal	= {ACM Transactions on Programming Languages and Systems},
  publisher	= {ACM},
  year		= {2003}
}

@Article{	  Bochmann:1978:CN,
  author	= "Bochmann, {G. V.}",
  title		= "Finite State Description of Communication Protocols",
  journal	= "Computer Networks (and ISDN Systems)",
  volume	= "2",
  pages		= "361--372",
  year		= "1978"
}

@InProceedings{	  BodikAnik98,
  author	= {R. Bodik and S. Anik},
  title		= {Path-Sensitive Value-Flow Analysis},
  booktitle	= {POPL 98: Principles of Programming Languages},
  publisher	= {ACM},
  year		= { 1998 },
  pages		= {237-251}
}

@InProceedings{	  BodikGuptaSarkar00,
  author	= {Rastislav Bodik and Rajiv Gupta and Vivek Sarkar},
  title		= {ABCD: Eliminating Array Bounds Checks on Demand},
  booktitle	= {PLDI 00: Programming Language Design and Implementation},
  publisher	= {ACM},
  year		= {2002},
  pages		= {321--333}
}

@InProceedings{	  BodikGuptaSoffa97,
  author	= {R. Bodik and R. Gupta and M. L. Soffa},
  title		= {Interprocedural Conditional Branch Elimination},
  booktitle	= {PLDI 97: Programming Language Design and Implementation},
  publisher	= {ACM},
  pages		= {146-158},
  year		= { 1997 }
}

@InProceedings{	  BodikStrauss,
  author	= {Glenn Ammons and David Mandelin and Rastislav Bodik and
		  James R. Larus},
  title		= {Debugging temporal specifications with Concept Analysis},
  booktitle	= {PLDI 03: Programming Language Design and Implementation},
  publisher	= {ACM},
  year		= {2003},
  pages		= {182--195}
}

@InProceedings{	  Boigelot:1994:CAV,
  author	= "Boigelot, B. and Wolper, P.",
  title		= "Symbolic Verification with Periodic Sets",
  booktitle	= "CAV 94: Computer-Aided Verification",
  volume	= "818",
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer-Verlag",
  pages		= "55--67",
  year		= "1994"
}

@InProceedings{	  Boigelot:1996:CAV,
  author	= "Boigelot, B. and Godefroid, P.",
  title		= "Symbolic Verification of Communication Protocols with
		  Infinite State Spaces Using QDDs",
  booktitle	= "CAV 96: Computer-Aided Verification",
  volume	= "1102",
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer-Verlag",
  pages		= "1--12",
  year		= "1996"
}

@InProceedings{	  BOON,
  author	= {David Wagner and Jeffrey S. Foster and Eric A. Brewer and
		  Alexander Aiken},
  title		= {A First Step Towards Automated Detection of Buffer Overrun
		  Vulnerabilities.},
  booktitle	= {NDSS},
  year		= {2000},
  ee		= {http://www.isoc.org/isoc/conferences/ndss/2000/proceedings/039.pdf}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Bouajjani:1999:TCS,
  author	= "Bouajjani, A. and Habermehl, P.",
  title		= "Symbolic reachability analysis of {FIFO}-channel systems
		  with nonregular sets of configurations",
  journal	= "Theoretical Computer Science",
  volume	= "221",
  number	= "1--2",
  pages		= "211--250",
  year		= "1999"
}

@InCollection{	  BouajjaniRobbana95,
  author	= "A. Bouajjani and R. Robbana",
  title		= "Verifying $\omega$-regular properties for subclasses of
		  linear hybrid systems",
  booktitle	= "CAV 95: Computer-aided Verification",
  editor	= "P. Wolper",
  series	= "LNCS 939",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "437--450"
}

@InProceedings{	  Bourdoncle93,
  author	= "F. Bourdoncle",
  title		= "Abstract debugging of higher-order imperative languages",
  booktitle	= "Proceedings of the Annual Conference on Programming
		  Language Design and Implementation",
  publisher	= "ACM Press",
  year		= "1993",
  pages		= "46--55"
}

@InProceedings{	  Boyapati02,
  author	= "C. Boyapati and S. Khurshid and D. Marinov",
  title		= "Korat: {A}utomated testing based on {Java} predicates",
  booktitle	= "ISSTA 02: Software Testing and Analysis",
  publisher	= "ACM",
  year		= "2002",
  pages		= "123--133"
}

@InProceedings{	  Boyapati03,
  author	= {Chandrasekhar Boyapati and Alexandru Salcianu and William
		  S. Beebee and Martin C. Rinard},
  title		= {Ownership types for safe region-based memory management in
		  real-time Java.},
  booktitle	= {PLDI},
  year		= {2003},
  pages		= {324-337},
  ee		= {http://doi.acm.org/781131.781168},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  BoyapatiLeeRinard02,
  author	= "C. Boyapati and R. Lee and M. Rinard",
  title		= "Ownership types for safe programming: preventing data
		  races and deadlocks",
  booktitle	= "OOPSLA 02: Object-Oriented Programming, Systems, Languages
		  and Applications",
  pages		= "211--230",
  year		= "2002"
}

@InProceedings{	  BoyapatiRinard,
  author	= {C. Boyapati and R. Lee and M.C. Rinard},
  title		= "Ownership types for safe programming: preventing data
		  races and deadlocks",
  booktitle	= {Proc.\ OOPSLA},
  publisher	= {ACM},
  year		= {2002},
  pages		= {211-230}
}

@InProceedings{	  BoyapatiRinard01,
  author	= "C. Boyapati and M. Rinard",
  title		= "A Parameterized Type System for Race-Free {Java} Programs",
  booktitle	= "OOPSLA 01: Object-Oriented Programming, Systems, Languages
		  and Applications",
  pages		= "56--69",
  year		= "2001"
}

@InCollection{	  BozgaMaler99,
  author	= "M. Bozga and O. Maler",
  title		= "On the representation of probabilities over structured
		  domains",
  booktitle	= "CAV 99: Computer-aided Verification",
  editor	= "N. Halbwachs and D. Peled",
  series	= "Lecture Notes in Computer Science 1633",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "261--273"
}

@InProceedings{	  BPR01,
  title		= {Boolean and cartesian abstractions for model checking {C}
		  programs},
  author	= {T. Ball and A. Podelski and S. K. Rajamani},
  booktitle	= {TACAS 01: Tools and Algorithms for Construction and
		  Analysis of Systems},
  series	= {LNCS 2031},
  pages		= {268--283},
  publisher	= {Springer},
  year		= {2001}
}

@InCollection{	  BPV94,
  author	= "D. Bosscher and I. Polak and F. Vaandrager",
  title		= "Verification of an audio-control protocol",
  booktitle	= "FTRTFT 94: Formal Techniques in Real-time and
		  Fault-tolerant Systems",
  editor	= "H. Langmaack and de Roever, W.-P. and J. Vytopil",
  series	= "LNCS 863",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "170--192"
}

@Book{		  BrinchHansen77,
  author	= "{Brinch Hansen}, P.",
  title		= "The Architecture of Concurrent Programs",
  publisher	= "Prentice-Hall",
  year		= "1977"
}

@TechReport{	  BRNewton,
  author	= {T. Ball and S.K. Rajamani},
  title		= {Generating Abstract Explanations of Spurious
		  Counterexamples in {C} Programs},
  institution	= {Microsoft Research},
  number	= {MSR-TR-2002-09},
  year		= {2002}
}

@InProceedings{	  BRS93,
  author	= "G. Berry and S. Ramesh and R.K. Shyamasundar",
  title		= "Communicating reactive processes",
  booktitle	= "Proceedings of the 20th Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1993",
  pages		= "85--98"
}

@Article{	  Bryant86,
  author	= "R.E. Bryant",
  title		= "Graph-based algorithms for boolean function manipulation",
  journal	= "IEEE Transactions on Computers",
  volume	= "C-35",
  number	= "8",
  year		= "1986",
  pages		= "677-691"
}
@InProceedings{	  Arvind03,
  author	= "Arvind",
  title		= "Bluespec: A language for hardware design, simulation, synthesis and verification Invited Talk:",
  booktitle	= "MEMOCODE03: Formal Methods and Models for Co-Design, 2003",
  pages		= "249",
  year		= 2003
}

@InProceedings{	  Arvind05,
  author	= "N. Dave and M. C. Ng and Arvind",
  title		= "Automatic synthesis of cache-coherence protocol processors using Bluespec",
  booktitle	= "MEMOCODE05: Formal Methods and Models for Co-Design, 2005",
  pages		= "25--34",
  year		= 2005
}

@InProceedings{	  BrylowDamgaardPalsberg00,
  author	= "Dennis Brylow and Niels Damgaard and Jens Palsberg",
  title		= "Static Checking of Interrupt-driven Software",
  booktitle	= "ICSE 01: International Conference on Software Engineering",
  pages		= "47--56",
  year		= 2001
}

@InCollection{	  BS94,
  author	= "O. Burkart and B. Steffen",
  title		= "Pushdown processes: parallel composition and model
		  checking",
  booktitle	= "CONCUR 94: Concurrency Theory",
  series	= "LNCS 836",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "98--113"
}

@Article{	  Buchi60,
  author	= "J.R. B{\"u}chi",
  title		= "Weak second-order arithmetic and finite automata",
  journal	= "{Zeitschrift f\"ur mathematische Logik und Grundlagen der
		  Mathematik}",
  volume	= "6",
  year		= "1960",
  pages		= "66--92"
}

@InProceedings{	  Buchi62,
  author	= "J.R. B{\"u}chi",
  title		= "On a decision method in restricted second-order
		  arithmetic",
  booktitle	= "Proceedings of the First International Congress on Logic,
		  Methodology, and Philosophy of Science 1960",
  editor	= "E. Nagel and P. Suppes and A. Tarski",
  publisher	= "Stanford University Press",
  year		= "1962",
  pages		= "1--11"
}

@Article{	  Buchi83,
  author	= "J.R. B{\"u}chi",
  title		= "State strategies for games in $F_{\sigma\delta} \cap
		  G_{\delta\sigma}$",
  journal	= "Journal of Symbolic Logic",
  volume	= "48",
  year		= "1983",
  pages		= "1171--1198"
}

@Article{	  BuchiLandweber69,
  author	= "J.R. B{\"u}chi and L.H. Landweber",
  title		= "Solving sequential conditions by finite-state strategies",
  journal	= "Transactions of the AMS",
  volume	= "138",
  year		= "1969",
  pages		= "295--311"
}

@InProceedings{	  BufferOverrun,
  author	= "D. Wagner and J.S. Foster and E.A. Brewer and A. Aiken",
  title		= "A First Step Towards Automated Detection of Buffer Overrun
		  Vulnerabilities",
  booktitle	= "NDSS 00",
  year		= 2000
}

@inproceedings{burchdill94,
  author    = {Jerry R. Burch and
               David L. Dill},
  title     = {Automatic verification of Pipelined Microprocessor Control.},
  booktitle = {CAV},
  year      = {1994},
  pages     = {68-80},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{sawadahunt,
  author    = {Jun Sawada and
               Warren A. Hunt Jr.},
  title     = {Verification of FM9801: An Out-of-Order Microprocessor Model
               with Speculative Execution, Exceptions, and Program-Modifying
               Capability.},
  journal   = {Formal Methods in System Design},
  volume    = {20},
  number    = {2},
  year      = {2002},
  pages     = {187-222},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@InCollection{	  Burch89,
  author	= "J.R. Burch",
  title		= "Combining {CTL}, trace theory, and timing models",
  booktitle	= "CAV 89: Automatic Verification Methods for Finite-state
		  Systems",
  editor	= "J. Sifakis",
  series	= "LNCS 407",
  publisher	= "Springer-Verlag",
  year		= "1989",
  pages		= "334--348"
}

@InCollection{	  Burgess84,
  author	= "J.P. Burgess",
  title		= "Basic tense logic",
  booktitle	= "Handbook of Philosophical Logic",
  volume	= "II",
  editor	= "D. Gabbay and F. Guenthner",
  publisher	= "D. Reidel Publishing Company",
  year		= "1984",
  pages		= "89--133"
}

@InProceedings{	  Burns,
  title		= "A Probabilistic Framework for Schedulability Analysis",
  author	= "A. Burns and G. Bernat and I. Broster",
  booktitle	= "EMSOFT 03: Embedded Software",
  series	= "Lecture Notes in Computer Science",
  pages		= "1--15",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  Butkevich00,
  author	= {Sergey Butkevich and Marco Renedo and Gerald Baumgartner
		  and Michal Young},
  title		= {Compiler and tool support for debugging object
		  protocols.},
  booktitle	= {SIGSOFT FSE},
  year		= {2000},
  pages		= {50-59},
  ee		= {http://portal.acm.org/citation.cfm?id=355045.355052},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Book{		  Buttazzo,
  author	= "G.C. Buttazzo",
  title		= "Hard Real-Time Computing Systems",
  publisher	= "Kluwer",
  year		= "1997"
}

@InCollection{	  BVW94,
  author	= "O. Bernholtz and M.Y. Vardi and P. Wolper",
  title		= "An automata-theoretic approach to branching-time model
		  checking",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "142--155"
}

@TechReport{	  C2bp-tr,
  author	= {T. Ball and T. Millstein and S. K. Rajamani},
  title		= {Polymorphic Predicate Abstraction},
  institution	= {Microsoft Research},
  number	= {MSR Technical Report 2001-10},
  year		= {2000}
}

@Unpublished{	  cameleon,
  author	= "Maxence Guesdon and Dimitri Ara and Alan Schmitt and
		  Sylvain Le Gall and Nadji Gauthier",
  title		= "Cameleon",
  note		= "\url{http://pauillac.inria.fr/~guesdon/Tools/cameleon/cameleon.html}"
		  ,
  year		= "2005"
}

@Book{		  Cassandras93,
  author	= "C.G. Cassandras",
  title		= "Discrete-Event Systems: Modeling and Performance Analysis",
  publisher	= "Aksen Associates",
  year		= "1993"
}

@article{Kahrs01,
  author    = {S. Kahrs},
  title     = {Red-black trees with types},
  journal   = {J. Funct. Program.},
  year      = {2001},
}

@InCollection{	  CAV00,
  author	= "L. de Alfaro and T.A. Henzinger and F.Y.C. Mang",
  title		= "Detecting errors before reaching them",
  booktitle	= "CAV 00: Computer-aided Verification",
  editor	= "E.A. Emerson and A.P. Sistla",
  series	= "Lecture Notes in Computer Science 1855",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "186--201"
}


@inproceedings{SPIN03BLAST,
  author    = {Thomas A. Henzinger and
               Ranjit Jhala and
               Rupak Majumdar and
               Gr{\'e}goire Sutre},
  title     = {Software Verification with BLAST.},
  booktitle = {SPIN},
  year      = {2003},
  pages     = {235-239},
  ee        = {http://link.springer.de/link/service/series/0558/bibs/2648/26480235.htm},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{catch
    ,title          = {Not All Patterns, But Enough - an automatic verifier for partial but sufficient pattern matching}
    ,author         = {N. Mitchell and C. Runciman}
    ,year           = {2008}
    ,booktitle      = {Haskell}
}

@INPROCEEDINGS{Cardelli91,
    author = {Luca Cardelli and Simone Martini and John C. Mitchell and Andre Scedrov},
    title = {An extension of system F with subtyping},
    booktitle = {Information and Computation},
    year = {1991},
    pages = {750--770},
    publisher = {Springer-Verlag}
}

@InCollection{	  CAV02BLAST,
  author	= "T.A. Henzinger and R. Jhala and R. Majumdar and G.C.
		  Necula and G. Sutre and W. Weimer",
  title		= "Temporal-safety proofs for systems code",
  booktitle	= "CAV 02: Computer-Aided Verification",
  series	= "LNCS 2404",
  publisher	= "Springer",
  year		= "2002",
  pages		= "526--538"
}

@InCollection{	  CAV03BLAST,
  author	= "T.A. Henzinger and R. Jhala and R. Majumdar and S. Qadeer",
  title		= "Thread-modular abstraction refinement",
  booktitle	= "CAV 03: Computer-Aided Verification",
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer-Verlag",
  year		= "2003"
}

@InCollection{	  CAV93,
  author	= "R. Alur and C. Courcoubetis and T.A. Henzinger",
  title		= "Computing accumulated delays in real-time systems",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "Lecture Notes in Computer Science 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "181--193"
}

@Article{	  CAV93j,
  author	= "R. Alur and C. Courcoubetis and T.A. Henzinger",
  title		= "Computing accumulated delays in real-time systems",
  journal	= "Formal Methods in System Design",
  volume	= "11",
  number	= "2",
  year		= "1997",
  pages		= "137--156"
}

@InCollection{	  CAV94,
  author	= "R. Alur and L. Fix and T.A. Henzinger",
  title		= "A determinizable class of timed automata",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "Lecture Notes in Computer Science 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "1--13"
}

@InCollection{	  CAV95AH,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Local liveness for compositional modeling of fair reactive
		  systems",
  booktitle	= "CAV 95: Computer-aided Verification",
  editor	= "P. Wolper",
  series	= "Lecture Notes in Computer Science 939",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "166--179"
}

@InCollection{	  CAV95HH,
  author	= "T.A. Henzinger and P.-H. Ho",
  title		= "Algorithmic analysis of nonlinear hybrid systems",
  booktitle	= "CAV 95: Computer-aided Verification",
  editor	= "P. Wolper",
  series	= "Lecture Notes in Computer Science 939",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "225--238"
}

@Article{	  CAV95HHWj,
  author	= "T.A. Henzinger and P.-H. Ho and H. Wong-Toi",
  title		= "Algorithmic analysis of nonlinear hybrid systems",
  journal	= "IEEE Transactions on Automatic Control",
  volume	= "43",
  number	= "4",
  year		= "1998",
  pages		= "540--554"
}

@InCollection{	  CAV97ABHQR,
  author	= "R. Alur and R.K. Brayton and T.A. Henzinger and S. Qadeer
		  and S.K. Rajamani",
  title		= "Partial-order reduction in symbolic state-space
		  exploration",
  booktitle	= "CAV 97: Computer-aided Verification",
  editor	= "O. Grumberg",
  series	= "Lecture Notes in Computer Science 1254",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "340--351"
}

@InCollection{	  CAV97HHW,
  author	= "T.A. Henzinger and P.-H. Ho and H. Wong-Toi",
  title		= "{\sc {H}y{T}ech}: a model checker for hybrid systems",
  booktitle	= "CAV 97: Computer-aided Verification",
  editor	= "O. Grumberg",
  series	= "Lecture Notes in Computer Science 1254",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "460--463"
}

@Article{	  CAV97HHWj,
  author	= "T.A. Henzinger and P.-H. Ho and H. Wong-Toi",
  title		= "{\sc {H}y{T}ech}: a model checker for hybrid systems",
  journal	= "Software Tools for Technology Transfer",
  volume	= "1",
  year		= "1997",
  pages		= "110--122"
}

@InCollection{	  CAV98AHMQRT,
  author	= "R. Alur and T.A. Henzinger and F.Y.C. Mang and S. Qadeer
		  and S.K. Rajamani and S. Tasiran",
  title		= "{\sc {M}ocha}: modularity in model checking",
  booktitle	= "CAV 98: Computer-aided Verification",
  editor	= "A.J. Hu and M.Y. Vardi",
  series	= "Lecture Notes in Computer Science 1427",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "521--525"
}

@InCollection{	  CAV98HKQ,
  author	= "T.A. Henzinger and O. Kupferman and S. Qadeer",
  title		= "From {\em pre\/}historic to {\em post\/}modern symbolic
		  model checking",
  booktitle	= "CAV 98: Computer-aided Verification",
  editor	= "A.J. Hu and M.Y. Vardi",
  series	= "Lecture Notes in Computer Science 1427",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "195--206"
}

@InCollection{	  CAV98HQR,
  author	= "T.A. Henzinger and S. Qadeer and S.K. Rajamani",
  title		= "You assume, we guarantee: methodology and case studies",
  booktitle	= "CAV 98: Computer-aided Verification",
  editor	= "A.J. Hu and M.Y. Vardi",
  series	= "Lecture Notes in Computer Science 1427",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "440--451"
}

@InCollection{	  CAV99HQR1,
  author	= "T.A. Henzinger and S. Qadeer and S.K. Rajamani",
  title		= "Assume-guarantee refinement between different time scales",
  booktitle	= "CAV 99: Computer-aided Verification",
  editor	= "N. Halbwachs and D. Peled",
  series	= "Lecture Notes in Computer Science 1633",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "208--221"
}

@InCollection{	  CAV99HQR2,
  author	= "T.A. Henzinger and S. Qadeer and S.K. Rajamani",
  title		= "Verifying sequential consistency on shared-memory
		  multiprocessor systems",
  booktitle	= "CAV 99: Computer-aided Verification",
  editor	= "N. Halbwachs and D. Peled",
  series	= "Lecture Notes in Computer Science 1633",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "301--315"
}

@Unpublished{	  CavBook,
  author	= "R.~Alur and T.A. Henzinger",
  title		= "Computer-Aided Verification. {A}n Introduction to Model
		  Building and Model Checking for Concurrent Systems",
  note		= "Draft",
  year		= 1998
}

@Unpublished{	  CBG91,
  author	= "E.M. Clarke and J.R. Burch and O. Grumberg and D.E. Long
		  and K.L. McMillan",
  title		= "Automatic verification of sequential circuit designs",
  note		= "Presented at the Royal Society of London",
  year		= "1991"
}

@InCollection{	  CBM89,
  author	= "O. Coudert and C. Berthet and J. Madre",
  title		= "Verification of synchronous sequential machines based on
		  symbolic execution",
  booktitle	= "CAV 89: Automatic Verification Methods for Finite-state
		  Systems",
  editor	= "J. Sifakis",
  series	= "LNCS 407",
  publisher	= "Springer-Verlag",
  year		= "1989",
  pages		= "365--373"
}

@Unpublished{interproc,
  author	= {G. Lalire and M. Argoud and B. Jeannet},
  title		= {Interproc},
  note		= {\url{http://bit.ly/8Y310m}}
}

@Unpublished{	  CBreezeWebPage,
  author	= "C. {Lin {\em et al.}}",
  title		= "C-Breeze: C Compiler Infrastructure",
  note		= "\url{http://www.cs.utexas.edu/users/c-breeze/}"
}

@InProceedings{	  CCM94,
  author	= "S. Campos and E.M. Clarke and W. Marrero and M. Minea and
		  H. Hiraishi",
  title		= "Computing quantitative characteristics of finite-state
		  real-time systems",
  booktitle	= "Proceedings of the 15th Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1994"
}

@InProceedings{	  ccured,
  author	= {Jeremy Condit and Matthew Harren and Scott McPeak and
		  George C. Necula and Westley Weimer},
  title		= {CCured in the real world.},
  booktitle	= {PLDI},
  year		= {2003},
  pages		= {232-244},
  ee		= {http://doi.acm.org/781131.781157},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InCollection{	  CdAHJ+02,
  author	= "A. Chakrabarti and L. de Alfaro and T.A. Henzinger and M.
		  Jurdzi\'{n}ski and F.Y.C. Mang",
  title		= "Interface compatibility checking for software modules",
  booktitle	= "CAV 02: Computer-Aided Verification",
  editor	= "E. Brinksma and K.G. Larsen",
  series	= "Lecture Notes in Computer Science 2404",
  publisher	= "Springer-Verlag",
  year		= "2002",
  pages		= "428--441"
}

@InCollection{	  CdAHM02,
  author	= "A. Chakrabarti and L. de Alfaro and T.A. Henzinger and
		  F.Y.C. Mang",
  title		= "Synchronous and bidirectional component interfaces",
  booktitle	= "CAV 02: Computer-Aided Verification",
  editor	= "E. Brinksma and K.G. Larsen",
  series	= "Lecture Notes in Computer Science 2404",
  publisher	= "Springer-Verlag",
  year		= "2002",
  pages		= "414--427"
}

@InProceedings{	  CdAHS03,
  author	= "A. Chakrabarti and L. de Alfaro and T.A. Henzinger and M.
		  Stoelinga",
  title		= "Resource interfaces",
  booktitle	= "EMSOFT 03: Embedded Software",
  series	= "Lecture Notes in Computer Science",
  pages		= "117-133",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  CDC97,
  author	= "R. Alur and T.A. Henzinger and H. Wong-Toi",
  title		= "Symbolic analysis of hybrid systems",
  booktitle	= "Proceedings of the 36th International Conference on
		  Decision and Control",
  publisher	= "IEEE Press",
  year		= "1997",
  pages		= "702--707"
}

@InProceedings{	  CDHP+00,
  author	= "J. Corbett and M. Dwyer and J. Hatcliff and C. Pasareanu
		  and Robby and S. Laubach and H. Zheng",
  title		= "Bandera: Extracting Finite-state Models from {J}ava Source
		  Code",
  booktitle	= {ICSE 2000: International Conference on Software
		  Engineering},
  publisher	= {ACM},
  pages		= {439-448},
  year		= "2000"
}

@Article{	  CelikkanCleaveland,
  author	= "U. Celikkan and R. Cleaveland",
  title		= "Generating diagnostic information for behavioral
		  preorders",
  journal	= "Distributed Computing",
  year		= "To appear"
}

@InCollection{	  Cerans92,
  author	= "K. {\v{C}er\=ans}",
  title		= "Decidability of bisimulation equivalence for parallel
		  timer processes",
  booktitle	= "CAV 92: Computer-aided Verification",
  editor	= "G. von Bochmann and D.K. Probst",
  series	= "LNCS 663",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "302--315"
}

@PhDThesis{	  Cerans92thesis,
  author	= "K. {\v{C}er\=ans}",
  title		= "Algorithmic Problems in Analysis of Real-time System
		  Specifications",
  school	= "University of Latvia",
  year		= "1992"
}

@Unpublished{	  CERT,
  author	= "{CERT} Advisory CA-2001-19",
  title		= "Code Red Worm Exploiting Buffer Overflow In IIS Indexing
		  Service DLL",
  note		= "\url{http://www.cert.org/advisories/CA-2001-19.html}",
  year		= "2001"
}

@Article{	  CES86,
  author	= "E.M. Clarke and E.A. Emerson and A.P. Sistla",
  title		= "Automatic verification of finite-state concurrent systems
		  using temporal-logic specifications",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "8",
  number	= "2",
  year		= "1986",
  pages		= "244--263"
}

@InProceedings{	  CF03,
  title		= "Symbolic Model Checking of Biochemical Networks",
  author	= "N. Chabrier and F. Fages",
  booktitle	= "CMSB 2003: Computational methods in Systems Biology",
  pages		= "149--162",
  publisher	= "Springer",
  year		= "2003"
}

@InCollection{	  CFJ93,
  author	= "E.M. Clarke and T. Filkorn and S. Jha",
  title		= "Exploiting symmetry in temporal-logic model checking",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "450--462"
}

@Article{	  CFRWZ91,
  author	= "R. Cytron and J. Ferrante and B.K. Rosen and M.N. Wegman
		  and F.K. Zadek",
  title		= "Efficiently computing static single assignment form and
		  the program dependence graph",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "13",
  pages		= "451--490",
  year		= "1991"
}

@InProceedings{	  CGH93,
  author	= "E.M. Clarke and O. Grumberg and H. Hiraishi and S. Jha and
		  D.E. Long and K.L. McMillan and L.A. Ness",
  title		= "Verification of the Futurebus$+$ cache coherence protocol",
  booktitle	= "Proceedings of the 11th Symposium on Computer Hardware
		  Description Languages and their Applications",
  year		= "1993"
}

@InCollection{	  CGJ95,
  author	= "E.C. Clarke and O. Grumberg and S. Jha",
  title		= "Verifying parameterized networks using abstraction and
		  regular languages",
  booktitle	= "CONCUR 95: Concurrency Theory",
  series	= "LNCS 962",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "395--407"
}

@InProceedings{	  CGL92,
  author	= "E. M. Clarke and O. Grumberg and D.E. Long",
  title		= "Model checking and abstraction",
  booktitle	= "POPL 92: Principles of Programming Languages",
  publisher	= "ACM",
  year		= "1992",
  pages		= "343-354"
}

@InCollection{	  CGL93,
  author	= "K. {{\v C}er\=ans} and J.C. Godskesen and K.G. Larsen",
  title		= "Timed modal specification: Theory and tools",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "253--267"
}

@InCollection{	  CGL94,
  author	= "E.M. Clarke and O. Grumberg and D.E. Long",
  title		= "Verification tools for finite-state concurrent systems",
  booktitle	= "A Decade of Concurrency: Reflections and Perspectives",
  series	= "LNCS 803",
  publisher	= "Springer-Verlag",
  year		= "1994"
}

@InProceedings{	  CGMZ95,
  author	= "E.M. Clarke and O. Grumberg and K. Mc{M}illan and X. Zhao",
  title		= "Efficient generation of counterexamples and witnesses in
		  symbolic model checking",
  booktitle	= "DAC 95: Proceedings of the 32nd Design Automation
		  Conference",
  publisher	= "IEEE Computer Society Press",
  pages		= "427--432",
  year		= "1995"
}

@InCollection{	  CGP03,
  author	= "J.M. Cobleigh and D. Giannakopoulou and C.S. Pasareanu",
  title		= "Learning Assumptions for Compositional Verification",
  booktitle	= "TACAS 03: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  pages		= "331-346",
  series	= "Lecture Notes in Computer Science 2619",
  publisher	= "Springer",
  year		= "2003"
}

@TechReport{	  CGR93,
  author	= "D.H. Craigen and S.L. Gerhart and T.J. Ralston",
  title		= "An International Survey of Industrial Applications of
		  Formal Methods",
  institution	= "Naval Research Laboratory",
  number	= "NRL/FR/5546-93-9581",
  address	= "Washington, DC",
  year		= "1993"
}

@InProceedings{	  Chaff,
  author	= "M.W. Moskewicz and C.F. Madigan and Y. Zhao and L. Zhang
		  and S. Malik",
  title		= "Chaff: Engineering an Efficient {SAT} Solver",
  booktitle	= "DAC 01: Design Automation Conference",
  pages		= "530--535",
  year		= "2001"
}

@InProceedings{	  Chaki03,
  author	= {S. Chaki and E.M. Clarke and A. Groce and O. Strichman},
  title		= {Predicate abstraction with minimum predicates},
  booktitle	= {CHARME 03},
  series	= {LNCS 2860},
  publisher	= {Springer},
  pages		= {19--34},
  year		= {2003}
}

@Article{	  MAGIC,
  author	= {Sagar Chaki and Edmund M. Clarke and Alex Groce and Somesh
		  Jha and Helmut Veith},
  title		= {Modular Verification of Software Components in C.},
  journal	= {IEEE Trans. Software Eng.},
  volume	= {30},
  number	= {6},
  year		= {2004},
  pages		= {388-402},
  ee		= {http://doi.ieeecomputersociety.org/10.1109/TSE.2004.22},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  ChakiICSE03,
  title		= {Modular verification of software components in {C}},
  author	= {S. Chaki and E.M. Clarke and A. Groce and S. Jha and H.
		  Veith},
  booktitle	= {ICSE 00: Software Engineering},
  pages		= {385--395},
  publisher	= {IEEE},
  year		= {2003}
}

@Book{		  ChandyMisra88,
  author	= "K.M. Chandy and J. Misra",
  title		= "Parallel Program Design: A Foundation",
  publisher	= "Addison-Wesley Publishing Company",
  year		= "1988"
}

@Book{		  ChangKeisler73,
  author	= "C.C. Chang and H.J. Keisler",
  title		= "Model Theory",
  publisher	= "North Holland",
  edition	= "3rd edition",
  year		= "1990"
}

@inproceedings{changPOPL08,
  author    = {B. E. Chang and
               X. Rival},
  title     = {Relational inductive shape analysis},
  booktitle = {POPL},
  year      = {2008},
  pages     = {247-260}
}

@inproceedings{Chang07,
  author    = {B. E. Chang and
               X. Rival and
               G. C. Necula},
  title     = {Shape Analysis with Structural Invariant Checkers},
  booktitle = {SAS},
  year      = {2007},
  pages     = {384-401},
  ee        = {http://dx.doi.org/10.1007/978-3-540-74061-2_24},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Charon,
  author	= "R. Alur and T. Dang and J.M. Esposito and Y. Hur and F.
		  Ivancic and V. Kumar and P. Mishra and G.J. Pappas and O.
		  Sokolsky",
  title		= "Hierarchical modeling and analysis of embedded systems",
  journal	= "Proceedings of the IEEE",
  volume	= "91",
  pages		= "11--28",
  year		= "2003"
}

@InProceedings{	  ChenWagner02,
  author	= "H. Chen and D. Wagner and D. Dean",
  title		= "Setuid demystified",
  booktitle	= "Usenix Security Symposium",
  publisher	= "Usenix",
  pages		= "171--190",
  year		= "2002"
}

@InProceedings{	  ChenWagnerMOPS,
  author	= "H. Chen and D. Wagner",
  title		= "{MOPS}: an infrastructure for examining security
		  properties of software",
  booktitle	= "ACM CCS 02: Conference on Computer and Communications
		  Security",
  publisher	= "ACM",
  pages		= "235--244",
  year		= "2002"
}

@InProceedings{	  cheon01simple,
  author	= "Y. Cheon and G.T. Leavens",
  title		= "A Simple and Practical Approach to Unit Testing: The {JML}
		  and {JUnit} Way",
  series	= "Lecture Notes in Computer Science 2374",
  year		= "2002",
  booktitle	= "ECOOP 02: European Conference on Object-Oriented
		  Programming",
  publisher	= "Springer-Verlag",
  pages		= "231--255"
}

@inproceedings{ Chlipala11,
  author    = "Adam Chlipala",
  title     = "Mostly-automated verification of low-level programs in computational
               separation logic",
  booktitle	= "PLDI 2011: Programming Languages Design and
		  Implementation",
  publisher	= {ACM},
  year      = {2011},
  pages     = {234-245},
}


@incollection{Hoare71,
  author    = {C. A. R. Hoare},
  title     = {Procedures and parameters: An axiomatic approach},
  booktitle = {Symposium on Semantics of Algorithmic Languages},
  year      = {1971},
}

@inproceedings{Nipkow02,
  author    = {T. Nipkow},
  title     = {Hoare Logics for Recursive Procedures and Unbounded Nondeterminism},
  booktitle = {CSL},
  year      = {2002},
}



@Article{	  CHR91,
  author	= "Z. Chaochen and C.A.R. Hoare and A.P. Ravn",
  title		= "A calculus of durations",
  journal	= "Information Processing Letters",
  volume	= "40",
  number	= "5",
  year		= "1991",
  pages		= "269--276"
}

@InProceedings{	  CHRF00,
  author	= "D.W. Currie and A.J. Hu and S. Rajan and M. Fujita",
  title		= "Automatic formal verification of {DSP} software",
  booktitle	= "DAC 00: Design Automation Conference",
  pages		= "130--135",
  year		= "2000",
  publisher	= "ACM/IEEE"
}

@InProceedings{	  Church62,
  author	= "A. Church",
  title		= "Logic, arithmetic, and automata",
  booktitle	= "Proceedings of the International Congress of
		  Mathematicians",
  publisher	= "Institut Mittag-Leffler",
  year		= "1962",
  pages		= "23--35"
}

@InProceedings{	  CIL,
  title		= {{CIL}: Intermediate Language and Tools for Analysis and
		  Transformation of {C} Programs},
  author	= {G. C. Necula and S. McPeak and S. P. Rahul and W. Weimer},
  booktitle	= "CC 02: Compiler Construction",
  series	= "Lecture Notes in Computer Science 2304",
  pages		= "213--228",
  publisher	= "Springer",
  year		= "2002"
}

@InProceedings{	  CIY95,
  author	= {R. Cleaveland and P. Iyer and D. Yankelevich},
  title		= {Optimality in Abstractions of Model Checking},
  booktitle	= {SAS 95: Static Analysis},
  series	= {LNCS 983},
  publisher	= {Springer},
  pages		= {51-63},
  year		= {1995}
}

@InProceedings{	  CJH04,
  author	= "K.~Chatterjee and M.~Jurdzi{\'{n}}ski and T.A.~Henzinger",
  title		= "Quantitative Stochastic Parity Games",
  booktitle	= "SODA 04: ACM-SIAM Symposium on Discrete Algorithms",
  note		= "(To appear): Technical Report: UCB/CSD-3-1280 (October
		  2003)",
  year		= "2004"
}

@InCollection{	  CKS92,
  author	= "R. Cleaveland and M. Klein and B. Steffen",
  title		= "Faster model checking for the modal {$\mu$}-calculus",
  booktitle	= "CAV 92: Computer-aided Verification",
  editor	= "G.v. Bochmann and D. Probst",
  series	= "LNCS 663",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pag10		= "420--462"
}

@Article{	  Clarke76,
  title		= "A system to generate test data and symbolically execute
		  programs",
  author	= "L. Clarke",
  journal	= "IEEE Transactions in Software Engineering",
  volume	= "2(2)",
  year		= 1976,
  pages		= "215--222"
}

@InProceedings{	  ClarkeBMC99,
  author	= {Armin Biere and Alessandro Cimatti and Edmund M. Clarke
		  and Masahiro Fujita and Yunshan Zhu},
  title		= {Symbolic Model Checking Using SAT Procedures instead of
		  BDDs.},
  booktitle	= {DAC},
  year		= {1999},
  pages		= {317-320},
  ee		= {http://doi.acm.org/10.1145/309847.309942},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Book{		  ClarkeBook,
  author	= "E.M. Clarke and O. Grumberg and D. Peled",
  title		= "Model Checking",
  year		= 1999,
  publisher	= "MIT Press"
}

@InCollection{	  ClarkeCAV00,
  author	= "E. M. Clarke and O. Grumberg and S. Jha and Y. Lu and H.
		  Veith",
  title		= "Counterexample-Guided Abstraction Refinement",
  booktitle	= "CAV 00:",
  series	= "LNCS 1855",
  publisher	= "Springer",
  year		= "2000",
  pages		= "154-169"
}

@InProceedings{	  ClarkeCAV2000,
  author	= {E. Clarke and O. Grumberg and S. Jha and Y. Lu and H.
		  Veith},
  title		= {Counterexample-guided Abstraction Refinement},
  booktitle	= "CAV 00: Computer Aided Verification",
  series	= "LNCS 1855",
  publisher	= {Springer},
  year		= {2000},
  pages		= {154-169}
}

@InProceedings{	  ClarkeEmerson81,
  author	= {E. M. Clarke and E. A. Emerson},
  title		= {Synthesis of synchronization skeletons for branching time
		  temporal logic},
  booktitle	= {Logic of Programs},
  pages		= {52-71},
  series	= {LNCS 131},
  publisher	= {Springer},
  year		= {1981}
}

@InCollection{	  ClarkeGrumberg00,
  author	= "E. M. Clarke and O. Grumberg and S. Jha and Y. Lu and H.
		  Veith",
  title		= "Counterexample-Guided Abstraction Refinement",
  booktitle	= "CAV 00: Computer-Aided Verification",
  series	= "LNCS 1855",
  publisher	= "Springer",
  year		= "2000",
  pages		= "154-169"
}

@InCollection{	  ClarkeGrumberg87,
  author	= "E.M. Clarke and O. Grumberg",
  title		= "Research on automatic verification of finite-state
		  concurrent systems",
  booktitle	= "Annual Review of Computer Science",
  volume	= "II",
  editor	= "J.F. Traub and B.J. Grosz and B.W. Lampson and N.J.
		  Nilsson",
  publisher	= "Annual Reviews",
  year		= "1987",
  pages		= "269--290"
}

@Article{	  ClarkeKurshan96,
  author	= "E.M. Clarke and R.P. Kurshan",
  title		= "Computer-aided verification",
  journal	= "IEEE Spectrum",
  volume	= "33",
  number	= "6",
  year		= "1996",
  pages		= "61--67"
}

@InCollection{	  ClarkeRichardson81,
  author	= "L.A. Clarke and D.J. Richardson",
  title		= "Symbolic evaluation methods for program analysis",
  booktitle	= "Program Flow Analysis: theory and applications",
  publisher	= "Prentice-Hall",
  pages		= "264--300",
  year		= "1981"
}

@Article{	  CleavelandSteffen93,
  author	= "R.J. Cleaveland and B. Steffen",
  title		= "A linear-time model-checking algorithm for the
		  alternation-free modal $\mu$-calculus",
  journal	= "Formal Methods in System Design",
  volume	= "2",
  year		= "1993",
  pages		= "121--147"
}

@InProceedings{	  CLLCSS02,
  author	= "J.-D. Choi and K. Lee and A. Loginov and R. O'Callahan and
		  V. Sarkar and M. Sridharan",
  title		= "Efficient and precise datarace detection for multithreaded
		  object-oriented programs",
  booktitle	= "PLDI 2002: Programming Languages Design and
		  Implementation",
  publisher	= {ACM},
  pages		= {258--269},
  year		= "2002"
}

@InProceedings{	  CLM89,
  author	= "E.M. Clarke and D.E. Long and K.L. McMillan",
  title		= "Compositional model checking",
  booktitle	= "Proceedings of the Fourth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1989",
  pages		= "353--362"
}

@InProceedings{	  CMC,
  author	= "M. Musuvathi and D.Y.W. Park and A. Chou and D.R. Engler
		  and D.L. Dill",
  title		= {{CMC}: {A} pragmatic approach to model checking real
		  code},
  booktitle	= "OSDI 02: Operating Systems Design and Implementation",
  publisher	= "ACM",
  year		= 2002
}

@Article{	  CohenGold77,
  author	= "R.S. Cohen and A.Y. Gold",
  title		= "Theory of $\omega$-languages~{I}: characterizations of
		  $\omega$-context-free Languages",
  journal	= "Journal of Computer and System Sciences",
  volume	= "15",
  year		= "1977",
  pages		= "169--184"
}

@TechReport{	  cohn87,
  author	= "Avra Cohn",
  title		= "A Proof of Correctness of the Viper Microprocessor: the
		  first level",
  institution	= "University of Cambridge, Computer Laboratory, Technical
		  Report",
  number	= "UCAM-CL-TR-104",
  year		= 1987
}

@InProceedings{	  Comon:1998:CAV,
  author	= "Comon, H. and Jurski, Y.",
  title		= "Multiple counters automata, safety analysis and
		  {Presburger} arithmetic",
  booktitle	= "CAV 98: Computer-Aided Verification",
  volume	= "1427",
  series	= "Lecture Notes in Computer Science",
  pages		= "268--279",
  publisher	= "Springer-Verlag",
  year		= "1998"
}

@InCollection{	  CONCUR00,
  author	= "L. de Alfaro and T.A. Henzinger and F.Y.C. Mang",
  title		= "The control of synchronous systems",
  booktitle	= "CONCUR 00: Concurrency Theory",
  editor	= "C. Palamidessi",
  series	= "Lecture Notes in Computer Science 1877",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "458--473"
}

@InCollection{	  CONCUR94,
  author	= "R. Alur and C. Courcoubetis and T.A. Henzinger",
  title		= "The observational power of clocks",
  booktitle	= "CONCUR 94: Concurrency Theory",
  editor	= "B. Jonsson and J. Parrow",
  series	= "Lecture Notes in Computer Science 836",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "162--177"
}

@InCollection{	  CONCUR96HK,
  author	= "T.A. Henzinger and P.W. Kopke",
  title		= "State equivalences for rectangular hybrid automata",
  booktitle	= "CONCUR 96: Concurrency Theory",
  editor	= "U. Montanari and V. Sassone",
  series	= "Lecture Notes in Computer Science 1119",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "530--545"
}

@InCollection{	  CONCUR96HKV,
  author	= "T.A. Henzinger and O. Kupferman and M.Y. Vardi",
  title		= "A space-efficient on-the-fly algorithm for real-time model
		  checking",
  booktitle	= "CONCUR 96: Concurrency Theory",
  editor	= "U. Montanari and V. Sassone",
  series	= "Lecture Notes in Computer Science 1119",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "514--529"
}

@InCollection{	  CONCUR97AH,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Modularity for timed and hybrid systems",
  booktitle	= "CONCUR 97: Concurrency Theory",
  editor	= "A. Mazurkiewicz and J. Winkowski",
  series	= "Lecture Notes in Computer Science 1243",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "74--88"
}

@InCollection{	  CONCUR97HKR,
  author	= "T.A. Henzinger and O. Kupferman and S.K. Rajamani",
  title		= "Fair simulation",
  booktitle	= "CONCUR 97: Concurrency Theory",
  editor	= "A. Mazurkiewicz and J. Winkowski",
  series	= "Lecture Notes in Computer Science 1243",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "273--287"
}

@InCollection{	  CONCUR98AHKV,
  author	= "R. Alur and T.A. Henzinger and O. Kupferman and M.Y.
		  Vardi",
  title		= "Alternating refinement relations",
  booktitle	= "CONCUR 98: Concurrency Theory",
  editor	= "D. Sangiorgi and R. de Simone",
  series	= "Lecture Notes in Computer Science 1466",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "163--178"
}

@InCollection{	  CONCUR98H,
  author	= "T.A. Henzinger",
  title		= "It's about time: real-time logics reviewed",
  booktitle	= "CONCUR 98: Concurrency Theory",
  editor	= "D. Sangiorgi and R. de Simone",
  series	= "Lecture Notes in Computer Science 1466",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "439--454"
}

@InCollection{	  CONCUR98RSH,
  author	= "J.-F. Raskin and P.-Y. Schobbens and T.A. Henzinger",
  title		= "Axioms for real-time logics",
  booktitle	= "CONCUR 98: Concurrency Theory",
  editor	= "D. Sangiorgi and R. de Simone",
  series	= "Lecture Notes in Computer Science 1466",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "219--236"
}

@InCollection{	  CONCUR99ADHM,
  author	= "R. Alur and L. de Alfaro and T.A. Henzinger and F.Y.C.
		  Mang",
  title		= "Automating modular verification",
  booktitle	= "CONCUR 99: Concurrency Theory",
  editor	= "J.C.M. Baeten and S. Mauw",
  series	= "Lecture Notes in Computer Science 1664",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "82--97"
}

@InCollection{	  CONCUR99HHM,
  author	= "T.A. Henzinger and B. Horowitz and R. Majumdar",
  title		= "Rectangular hybrid games",
  booktitle	= "CONCUR 99: Concurrency Theory",
  editor	= "J.C.M. Baeten and S. Mauw",
  series	= "Lecture Notes in Computer Science 1664",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "320--335"
}

@Book{		  Constable86,
  author	= "R.L. Constable",
  title		= "Implementing Mathematics with the Nuprl Proof Development
		  System",
  publisher	= "Prentice-Hall",
  year		= "1986"
}

@Article{	  Cooper72,
  author	= "D.C. Cooper",
  title		= "Theorem proving in arithmetic without multiplication",
  journal	= "Machine Intelligence",
  volume	= "7",
  pages		= "91--100",
  year		= "1972"
}

@InProceedings{	  Corbett94,
  author	= "J.C. Corbett",
  title		= "Modeling and analysis of real-time {Ada} tasking programs",
  booktitle	= "Proceedings of the 15th Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1994"
}

@Article{	  Corbett96,
  author	= "J.C. Corbett",
  title		= "Timing analysis of {{\sc Ada}} tasking programs",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "22",
  number	= "7",
  year		= "1996",
  pages		= "461--483"
}

@InProceedings{	  Cormac03,
  author	= "C. Flanagan",
  title		= "Automatic software model checking using {CLP}",
  booktitle	= "ESOP 03: European Symposium on Programming",
  pages		= "189--203",
  series	= "LNCS 2618",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  CornilsHedin00,
  author	= "A. Cornils and G. Hedin",
  title		= "Statically Checked Documentation with Design Patterns",
  booktitle	= "TOOLS 00: Technology of Object-Oriented Languages and
		  Systems",
  pages		= "419--430",
  year		= "2000"
}

@Book{		  Kurshan,
  author	= "R.P. Kurshan",
  title		= "Computer-Aided Verification of Coordinating Processes: The
		  Automata-Theoretic Approach",
  publisher	= "Princeton University Press",
  year		= 1995
}

@InCollection{	  CourcoubetisYannakakis91,
  author	= "C. Courcoubetis and M. Yannakakis",
  title		= "Minimum and maximum delay problems in real-time systems",
  booktitle	= "CAV 91: Computer-aided Verification",
  editor	= "K.G. Larsen and A. Skou",
  series	= "LNCS 575",
  publisher	= "Springer-Verlag",
  year		= "1991",
  pages		= "399--409"
}

@InProceedings{	  Cousot02,
  author	= "B. Blanchet and P. Cousot and R. Cousot and J. Feret and
		  L. Mauborgne and A. Mine and D. Monniaux and X. Rival",
  title		= "Design and Implementation of a Special-Purpose Static
		  Program Analyzer for Safety-Critical Real-Time Embedded
		  Software",
  booktitle	= "The Essence of Computation, Complexity, Analysis,
		  Transformation: Essays Dedicated to Neil D. Jones",
  series	= "Lecture Notes in Computer Science 2566",
  pages		= "85-108",
  publisher	= "Springer-Verlag",
  year		= "2002"
}

@InProceedings{	  Cousot03,
  author	= "B. Blanchet and P. Cousot and R. Cousot and J. Feret and
		  L. Mauborgne and A. Mine and D. Monniaux and X. Rival",
  title		= "A static analyzer for large safety-critical software",
  booktitle	= "PLDI 03: Programming Languages Design and Implementation",
  pages		= "196-207",
  publisher	= "ACM",
  year		= "2003"
}

@InCollection{	  Cousot81,
  author	= "P. Cousot",
  title		= "Semantics fundations of program analysis",
  booktitle	= "Program Flow Analysis: Theory and Applications",
  editor	= "S.S. Muchnick and N.D. Jones",
  publisher	= "Prentice-Hall",
  year		= "1981",
  pages		= "303--342"
}

@inproceedings{fsoft06,
  author    = {H. Jain and
               F. Ivancic and
               A. Gupta and
               I. Shlyakhter and
               C. Wang},
  title     = {Using Statically Computed Invariants Inside the Predicate
               Abstraction and Refinement Loop},
  booktitle = {CAV},
  year      = {2006},
  pages     = {137-151},
  ee        = {http://dx.doi.org/10.1007/11817963_15},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  CousotCousot00,
  author	= "P. Cousot and R. Cousot",
  title		= "Temporal abstract interpretation",
  booktitle	= "POPL 00: Principles of Programming Languages",
  publisher	= "ACM",
  pages		= {12-25},
  year		= "2000"
}

@InProceedings{	  CousotCousot77,
  author	= "P. Cousot and R. Cousot",
  title		= "Abstract interpretation: a unified lattice model for the
		  static analysis of programs",
  booktitle	= "POPL 77",
  publisher	= "ACM",
  pages		= {238-252},
  year		= "1977"
}

@Article{	  CousotCousot92:jlp,
  author	= "P. Cousot and R. Cousot",
  title		= "Abstract interpretation and application to logic programs",
  journal	= "Journal of Logic Programming",
  volume	= "13",
  number	= "2/3",
  year		= "1992",
  pages		= "103--179"
}

@InCollection{	  CousotCousot92comparison,
  author	= "P. Cousot and R. Cousot",
  title		= "Comparing the {Galois} connection and widening/narrowing
		  approaches to abstract interpretation",
  booktitle	= "PLILP",
  series	= "LNCS 631",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "269--295"
}

@InProceedings {	  Cousot97,
  author	= "P. Cousot",
  title		= "Types as abstract interpretations",
  booktitle	= "POPL 97: Principles of Programming Languages",
  publisher	= "ACM",
  pages		= "316-331",
  year		= "1997"
}

@InProceedings{	  CousotHalbwachs78,
  author	= "P. Cousot and N. Halbwachs",
  title		= "Automatic discovery of linear restraints among variables
		  of a program",
  booktitle	= "POPL", 
  publisher	= "ACM Press",
  year		= "1978"
}

@InProceedings{	  CousotPLDI03,
  author	= {B. Blanchet and P. Cousot and R. Cousot and
		  J. Feret and L. Mauborgne and A.  Min{\'e} 
                  and D. Monniaux and X. Rival},
  title		= {A static analyzer for large safety-critical software.},
  booktitle	= {PLDI},
  year		= {2003},
  pages		= {196-207},
  ee		= {http://doi.acm.org/781131.781153},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  CPS93,
  author	= "R.J. Cleaveland and J. Parrow and B. Steffen",
  title		= "The {C}oncurrency {W}orkbench: a semantics-based tool for
		  the verification of finite-state systems",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "15",
  number	= "1",
  year		= "1993",
  pages		= "36--72"
}

@Article{	  Craig57,
  author	= "W. Craig",
  title		= "Linear reasoning",
  journal	= "J. Symbolic Logic",
  volume	= 22,
  pages		= "250--268",
  year		= 1957
}

@InProceedings{	  Crary99,
  author	= {Karl Crary and David Walker and J. Gregory Morrisett},
  title		= {Typed Memory Management in a Calculus of Capabilities.},
  booktitle	= {POPL},
  year		= {1999},
  pages		= {262-275},
  ee		= {http://doi.acm.org/10.1145/292540.292564},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  CS91,
  author	= "R. Cleaveland and B. Steffen",
  title		= "A Linear-Time Model-Checking Algorithm for the
		  Alternation-Free Modal $\mu$-Calculus",
  booktitle	= "CAV 91: Computer-Aided Verification",
  pages		= "48--58",
  series	= "Lecture Notes in Computer Science",
  volume	= 575,
  publisher	= "Springer-Verlag",
  year		= 1991
}

@Unpublished{	  CuDD,
  author	= "F. Somenzi",
  title		= "Colorado {U}niversity decision diagram package",
  note		= "\url{http://vlsi.colorado.edu/pub/}",
  year		= "1998"
}

@TechReport{	  cunningham,
  author	= "R. Cunningham",
  title		= "{eel}: Tools for debugging, visualization, and
		  verification of event-driven software",
  institution	= "MS Thesis, UC Los Angeles",
  year		= "2005"
}

@inproceedings{CVC4,
  author = {C. Barrett and C. Conway and M. Deters and L. Hadarean and D. Jovanovi\'{c} 
              and T. King and A. Reynolds and C. Tinelli},
  title     = "{CVC4}",
  booktitle = "CAV",
  year      = 2011,
}

@InCollection{	  CVC,
  author	= "A. Stump and C.W. Barrett and D.L. Dill",
  title		= "{CVC}: A Cooperating Validity Checker",
  booktitle	= "CAV 02: Computer-Aided Verification",
  series	= "LNCS 2404",
  publisher	= "Springer",
  pages		= "500--504",
  year		= "2002"
}

@Article{	  CVWY92,
  author	= "C. Courcoubetis and M.Y. Vardi and P. Wolper and M.
		  Yannakakis",
  title		= "Memory-efficient algorithms for the verification of
		  temporal properties",
  journal	= "Formal Methods in System Design",
  volume	= "1",
  year		= "1992",
  pages		= "275--288"
}

@InProceedings{	  CWZ90,
  author	= "D.R. Chase and M.N. Wegman and F.K. Zadeck",
  title		= "Analysis of Pointers and Structures",
  booktitle	= "PLDI 90: Programming Languages Design and Implementation",
  publisher	= "ACM",
  year		= "1990",
  pages		= "296--310"
}

@InProceedings{	  CY88,
  author	= "C. Courcoubetis and M. Yannakakis",
  title		= "Verifying Temporal Properties of Finite-State
		  Probabilistic Programs",
  booktitle	= focs88,
  pages		= "338--354",
  year		= 1988,
  group		= "PR-P1",
  summary	= "proves that verifying LTL with prob 1 on markov chains is
		  singly exponential, and that LTL with prob 1 on concurrent
		  markov chains is doubly exponential. very important paper."
}

@InProceedings{	  CY90,
  author	= "C. Courcoubetis and M. Yannakakis",
  title		= "{Markov} Decision Processes and Regular Events",
  booktitle	= "ICALP 90: Automata, Languages, and Programming",
  series	= "Lecture Notes in Computer Science",
  volume	= 443,
  publisher	= "Springer-Verlag",
  year		= 1990,
  pages		= "336--349"
}

@Article{	  CY95,
  author	= "C. Courcoubetis and M. Yannakakis",
  title		= "The Complexity of Probabilistic Verification",
  journal	= "Journal of the ACM",
  year		= 1995,
  volume	= 42,
  number	= 4,
  pages		= "857--907"
}

@InProceedings{	  CYCHE01,
  title		= {An empirical study of operating system bugs},
  author	= {A. Chou and J. Yang and B. Chelf and S. Hallem and D.
		  Engler},
  booktitle	= "SOSP 01: ACM Symposium on Operating System Principles",
  pages		= "78--81",
  publisher	= "ACM Press",
  year		= "2001"
}

@InProceedings{	  cyclone,
  author	= {Trevor Jim and J. Gregory Morrisett and Dan Grossman and
		  Michael W. Hicks and James Cheney and Yanling Wang},
  title		= {Cyclone: A Safe Dialect of C.},
  booktitle	= {USENIX Annual Technical Conference, General Track},
  year		= {2002},
  pages		= {275-288},
  ee		= {http://www.usenix.org/publications/library/proceedings/usenix02/jim.html}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  dA98,
  author	= "de Alfaro, L.",
  title		= "Stochastic Transition Systems",
  booktitle	= "CONCUR 98: Concurrency Theory",
  series	= "Lecture Notes in Computer Science",
  pages		= "423--438",
  publisher	= "Springer-Verlag",
  year		= 1998
}

@InCollection{	  DAG96,
  author	= "T.A. Henzinger and H. Wong-Toi",
  title		= "Using {{\sc HyTech}} to synthesize control parameters for
		  a steam boiler",
  booktitle	= "Formal Methods for Industrial Applications: Specifying and
		  Programming the Steam Boiler Control",
  editor	= "J.-R. Abrial and E. {B\"orger} and H. Langmaack",
  series	= "Lecture Notes in Computer Science 1165",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "265--282"
}

@InProceedings{	  dAH00,
  author	= "L. de Alfaro and T.A. Henzinger",
  title		= "Concurrent omega-regular games",
  booktitle	= "Proceedings of the 15th Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "2000",
  pages		= "141--154"
}

@InProceedings{	  dAH01,
  author	= "L. de Alfaro and T.A. Henzinger",
  title		= "Interface automata",
  booktitle	= "Proceedings of the Ninth Annual Symposium on Foundations
		  of Software Engineering",
  publisher	= "ACM Press",
  year		= "2001",
  pages		= "109--120"
}

@InCollection{	  dAH01emsoft,
  author	= "L. de Alfaro and T.A. Henzinger",
  title		= "Interface theories for component-based design",
  booktitle	= "EMSOFT 01: Embedded Software",
  series	= "Lecture Notes in Computer Science 2211",
  publisher	= "Springer-Verlag",
  year		= "2001",
  pages		= "148--165"
}

@InProceedings{	  dAHK98,
  author	= "de Alfaro, L. and T.A. Henzinger and O. Kupferman",
  title		= "Concurrent Reachability Games",
  booktitle	= "FOCS 98: Foundations of Computer Science",
  publisher	= "IEEE Computer Society Press",
  pages		= "564--575",
  year		= 1998,
  notes		= "An extended version is available as technical report
		  UCB/ERL M98/33, University of California at Berkeley, 1998"
}

@InCollection{	  dAHM00cav,
  author	= "L. de Alfaro and T.A. Henzinger and F.Y.C. Mang",
  title		= "Detecting errors before reaching them",
  booktitle	= "CAV 00: Computer-Aided Verification",
  series	= "Lecture Notes in Computer Science 1855",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "186--201"
}

@Article{	  DaikonESC,
  author	= "J.W. Nimmer and M.D. Ernst",
  title		= "Static verification of dynamically detected program
		  invariants: Integrating {Daikon} and {ESC/Java}",
  journal	= "Electr. Notes Theor. Comput. Sci.",
  volume	= "55(2)",
  year		= "2001"
}

@InProceedings{	  dAK00,
  author	= "L. de Alfaro and M. Kwiatkowska and G. Norman and D.
		  Parker and R. Segala",
  title		= "Symbolic Model Checking of Concurrent Probabilistic
		  Processes Using {MTBDDs} and the {Kronecker}
		  Representation",
  booktitle	= "{TACAS 00}: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  year		= 2000,
  series	= "Lecture Notes in Computer Science",
  volume	= "1785",
  pages		= "395--410",
  publisher	= "Springer-Verlag"
}

@InCollection{	  Dam92,
  author	= "M. Dam",
  title		= "Fixed points of {B}{\"u}chi automata",
  booktitle	= "Foundations of Software Technology and Theoretical
		  Computer Science",
  editor	= "R. Shyamasundar",
  series	= "LNCS 652",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "39--50"
}

@Article{	  Dam94,
  author	= "M. Dam",
  title		= "{CTL}$^*$ and {ECTL}$^*$ as fragments of the modal
		  $\mu$-calculus",
  journal	= "Theoretical Computer Science",
  volume	= "126",
  publisher	= "Elsevier",
  year		= "1994",
  pages		= "77--96"
}

@InProceedings{	  DanielJackson,
  author	= {Daniel Jackson and Ian Schechter and Ilya Shlyakhter},
  title		= {Alcoa: the alloy constraint analyzer.},
  booktitle	= {ICSE},
  year		= {2000},
  pages		= {730-733},
  ee		= {http://doi.acm.org/10.1145/337180.337616},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InCollection{	  DargenioBrinksma96,
  author	= "P.A. D'Argenio and E. Brinksma",
  title		= "A calculus for timed automata",
  booktitle	= "FTRTFT 96: Formal Techniques in Real-time and
		  Fault-tolerant Systems",
  editor	= "B. Jonsson and J. Parrow",
  series	= "LNCS 1135",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "110--129"
}

@InProceedings{	  DART,
  author	= {Patrice Godefroid and Nils Klarlund and Koushik Sen},
  title		= {DART: directed automated random testing.},
  booktitle	= {PLDI},
  year		= {2005},
  pages		= {213-223},
  ee		= {http://doi.acm.org/10.1145/1065036},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  Das00,
  title		= {Unification-Based Pointer Analysis with Directional
		  Assignments},
  author	= {M. Das},
  booktitle	= {PLDI 00: Programming Language Design and Implementation},
  pages		= {35-46},
  publisher	= {ACM},
  year		= {2000}
}

@InProceedings{	  Das02,
  author	= "M. Das and S. Lerner and M. Seigle",
  title		= "{ESP}: {P}ath-Sensitive Program Verification in Polynomial
		  Time",
  booktitle	= "PLDI 02: Programming Language Design and Implementation",
  pages		= "57-68",
  publisher	= "ACM",
  year		= "2002"
}

@InProceedings{	  DasDillLICS2001,
  author	= "S. Das and D.L. Dill",
  title		= "Successive approximation of abstract transition relations",
  booktitle	= "LICS 01: Logic in Computer Science",
  publisher	= "IEEE Press",
  pages		= "51--60",
  year		= "2001"
}


@inproceedings{HackettAiken06,
  author    = {Brian Hackett and
               Alex Aiken},
  title     = {How is aliasing used in systems software?},
  booktitle = {SIGSOFT FSE},
  year      = {2006},
  pages     = {69-80},
  ee        = {http://doi.acm.org/10.1145/1181775.1181785},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Condit09,
  author    = {Jeremy Condit and
               Brian Hackett and
               Shuvendu K. Lahiri and
               Shaz Qadeer},
  title     = {Unifying type checking and property checking for low-level
               code},
  booktitle = {POPL},
  year      = {2009},
  ee        = {http://doi.acm.org/10.1145/1480881.1480921},
}


@InProceedings{	  DasICSE05,
  author	= "Brian Hackett and Manuvir Das and Daniel Wang and Zhe
		  Yang",
  title		= "Modular Checking for Buffer Overflows in the Large",
  booktitle	= "ICSE 05: Software Engineering",
  publisher	= "ACM",
  pages		= "129--144",
  year		= 2005
}

@InProceedings{	  DasOLF,
  title		= {Unification-Based Pointer Analysis with Directional
		  Assignments},
  author	= {M. Das},
  booktitle	= {PLDI 00: Programming Language Design and Implementation},
  pages		= {35-46},
  publisher	= {ACM},
  year		= {2000}
}

@PhDThesis{	  dAthesis,
  author	= "L. de Alfaro",
  title		= "Formal verification of probabilistic systems",
  school	= "Stanford University",
  year		= "1997"
}

@InProceedings{	  dawnsong,
  author	= "James Newsome and Dawn Song",
  title		= "Dynamic Taint Analysis: Automatic Detection, Analysis, and
		  Signature Generation of Exploit Attacks on Commodity
		  Software",
  booktitle	= "NDSS 05: Networks and Distributed Systems Security",
  year		= "2005",
  pages		= "XXX--XXX"
}


@InProceedings{	  DawsYovine95,
  author	= "C. Daws and S. Yovine",
  title		= "Two examples of verification of multirate timed automata
		  with {K}ronos",
  booktitle	= "Proceedings of the 16th Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1995",
  pages		= "66--75"
}

@InProceedings{	  DBLP:conf/icse/OCallahanJ97,
  author	= {Robert O'Callahan and Daniel Jackson},
  title		= {Lackwit: A Program Understanding Tool Based on Type
		  Inference.},
  booktitle	= {ICSE},
  year		= {1997},
  pages		= {338-348},
  ee		= {http://doi.acm.org/10.1145/253228.253351},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  DBLP:conf/issta/WhaleyML02,
  author	= {John Whaley and Michael C. Martin and Monica S. Lam},
  title		= {Automatic extraction of object-oriented component
		  interfaces.},
  booktitle	= {ISSTA},
  year		= {2002},
  pages		= {218-228},
  ee		= {http://doi.acm.org/566172.566212},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  Milner82,
  author	= {L. Damas and R. Milner},
  title		= {Principal Type-Schemes for Functional Programs.},
  booktitle	= {POPL},
  year		= {1982},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  DBLP:conf/popl/Kildall73,
  author	= {Gary A. Kildall},
  title		= {A Unified Approach to Global Program Optimization.},
  booktitle	= {POPL},
  year		= {1973},
  pages		= {194-206},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Proceedings{	  DBLP:conf/uss/2004,
  title		= {Proceedings of the 13th USENIX Security Symposium, August
		  9-13, 2004, San Diego, CA, USA},
  booktitle	= {USENIX Security Symposium},
  publisher	= {USENIX},
  year		= {2004},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  DBLP:conf/uss/JohnsonW04,
  author	= {Robert Johnson and David Wagner},
  title		= {Finding User/Kernel Pointer Bugs with Type Inference.},
  booktitle	= {USENIX Security Symposium},
  year		= {2004},
  pages		= {119-134},
  ee		= {http://www.usenix.org/publications/library/proceedings/sec04/tech/johnson.html}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  DBLP:journals/jcss/Milner78,
  author	= {Robin Milner},
  title		= {A Theory of Type Polymorphism in Programming.},
  journal	= {J. Comput. Syst. Sci.},
  volume	= {17},
  number	= {3},
  year		= {1978},
  pages		= {348-375},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InCollection{	  DD02,
  author	= "S. Das and D.L. Dill",
  title		= "Counter-example Based Predicate Discovery in Predicate
		  Abstraction",
  booktitle	= "FMCAD 2002: Formal Methods in Computer-Aided Design",
  publisher	= "Springer",
  pages		= "19--32",
  series	= "Lecture Notes in Computer Science 2517",
  year		= "2002"
}

@InProceedings{	  DDHM02,
  author	= "X. Deng and M.B. Dwyer and J. Hatcliff and M. Mizuno",
  title		= "Invariant-based specification, synthesis, and verification
		  of synchronization in concurrent programs",
  booktitle	= "Proceedings of the International Conference on Software
		  Engineering",
  year		= "2002",
  pages		= "???--???"
}

@InProceedings{	  DDP99,
  author	= "S. Das and D. L. Dill and S. Park",
  title		= "Experience with Predicate Abstraction",
  booktitle	= "CAV 99: Computer-Aided Verification",
  series	= "LNCS 1633",
  pages		= "160-171",
  publisher	= "Springer",
  year		= 1999
}

@Book{		  deBakkerVink96,
  author	= "J.W. de Bakker and E. de Vink",
  title		= "Control flow semantics",
  publisher	= "MIT Press",
  year		= "1996"
}

@Article{	  DederichsWeber90,
  author	= "F. Dederichs and R. Weber",
  title		= "Safety and liveness from a methodological point of view",
  journal	= "Information Processing Letters",
  volume	= "36",
  number	= "1",
  year		= "1990",
  pages		= "25--30"
}

@InProceedings{	  DelineFahndrich,
  title		= {Enforcing high-level protocols in low-level software},
  author	= {R. DeLine and M.A. F{\"a}hndrich},
  booktitle	= {PLDI 01: Programming Language Design and Implementation},
  publisher	= {ACM},
  pages		= {???--???},
  year		= {2001}
}

@InProceedings{	  DelzannoPodelski99,
  author	= "G. Delzanno and A. Podelski",
  title		= "Model checking in {CLP}",
  booktitle	= "TACAS 99: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  pages		= "223--239",
  publisher	= "Springer",
  year		= "1999"
}

@Article{	  DEP02,
  author	= "J. Desharnais and A. Edalat and P. Panangaden",
  title		= "Bisimulation for Labelled Markov Processes",
  journal	= "Information and Computation",
  volume	= 179,
  number	= 2,
  pages		= "163--193",
  year		= 2002
}

@Book{		  Derman,
  author	= "C. Derman",
  title		= "Finite State {Markovian} Decision Processes",
  year		= 1970,
  publisher	= "Academic Press"
}

@InProceedings{	  deRoever85,
  author	= "de Roever, W.-P.",
  title		= "The quest for compositionality: a survey of
		  assertion-based proof systems for concurrent programs,
		  part~I",
  booktitle	= "Proceedings of the IFIP Working Conference on Formal
		  Models in Programming",
  editor	= "E.J. Neuhold and G. Chroust",
  publisher	= "Elsevier Science Publishers",
  year		= "1985",
  pages		= "181--205"
}

@InCollection{	  DES94,
  author	= "R. Alur and C. Courcoubetis and T.A. Henzinger and P.-H.
		  Ho and X. Nicollin and A. Olivero and J. Sifakis and S.
		  Yovine",
  title		= "The algorithmic analysis of hybrid systems",
  booktitle	= "Proceedings of the 11th International Conference on
		  Analysis and Optimization of Systems: Discrete-event
		  Systems",
  editor	= "G. Cohen and J.-P. Quadrat",
  series	= "Lecture Notes in Control and Information Sciences 199",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "331--351"
}

@Article{	  DES94j,
  author	= "R. Alur and C. Courcoubetis and N. Halbwachs and T.A.
		  Henzinger and P.-H. Ho and X. Nicollin and A. Olivero and
		  J. Sifakis and S. Yovine",
  title		= "The algorithmic analysis of hybrid systems",
  journal	= "Theoretical Computer Science",
  volume	= "138",
  year		= "1995",
  pages		= "3--34"
}

@InCollection{	  DGG93,
  author	= "D.R. Dams and O. Grumberg and R. Gerth",
  title		= "Generation of reduced models for checking fragments of
		  {CTL}",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "479--490"
}

@InCollection{	  DGG94,
  author	= "D.R. Dams and O. Grumberg and R. Gerth",
  title		= "Abstract interpretation of reactive systems: abstractions
		  preserving {ACTL}$^*$, {ECTL}$^*$, and {CTL}$^*$",
  booktitle	= "PROCOMET 94: Programming Concepts, Methods, and Calculi",
  publisher	= "Elsevier Science Publishers",
  pages		= "561-581",
  year		= "1994"
}

@Article{	  DGG97,
  author	= "D.R. Dams and R. Gerth and O. Grumberg",
  title		= "Abstract Interpretation of reactive systems",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "19",
  number	= "2",
  pages		= "253--291",
  year		= "1997"
}

@Article{	  DGJP01,
  author	= "J. Desharnais and A. Edalat and P. Panangaden",
  title		= "Bisimulation for Labelled Markov Processes",
  journa	= "Information and Computation",
  year		= 2001
}

@InProceedings{	  DGJP02,
  author	= "J. Desharnais and V. Gupta and R. Jagadeesan and P.
		  Panangaden",
  title		= "The metric analogue of weak bisimulation for probabilistic
		  processes",
  booktitle	= "LICS 02: Logic in Computer Science",
  pages		= "413--422",
  publisher	= "{IEEE} Press",
  year		= 2002
}

@InCollection{	  DGJP99,
  author	= "J. Desharnais and V. Gupta and R. Jagadeesan and P.
		  Panangaden",
  title		= "Metrics for Labelled Markov Systems",
  booktitle	= "CONCUR 99: Concurrency Theory",
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer",
  volume	= 1664,
  year		= 1999,
  pages		= "258--273",
  group		= "Y"
}

@Article{	  Dijkstra65,
  author	= "E.W. Dijkstra",
  title		= "Solution of a problem in concurrent programming control",
  journal	= "Communications of the ACM",
  volume	= "8",
  number	= "9",
  year		= "1965",
  pages		= "569"
}

@Article{	  Dijkstra75,
  author	= "E.W. Dijkstra",
  title		= "Guarded commands, nondeterminacy, and formal derivation of
		  programs",
  journal	= "Communications of the ACM",
  volume	= "18",
  number	= "8",
  year		= "1975",
  pages		= "453--457"
}

@Book{		  Dijkstra76,
  author	= "E.W. Dijkstra",
  title		= "A Discipline of Programming",
  publisher	= "Prentice-Hall",
  year		= "1976"
}

@Book{		  Dill89book,
  author	= "D.L. Dill",
  title		= "Trace Theory for Automatic Hierarchical Verification of
		  Speed-independent Circuits",
  publisher	= "The MIT Press",
  year		= "1989"
}

@InCollection{	  Dill89cav,
  author	= "D.L. Dill",
  title		= "Timing assumptions and verification of finite-state
		  concurrent systems",
  booktitle	= "CAV 89: Automatic Verification Methods for Finite-state
		  Systems",
  editor	= "J. Sifakis",
  series	= "LNCS 407",
  publisher	= "Springer-Verlag",
  year		= "1989",
  pages		= "197--212"
}

@InCollection{	  DillHu93,
  author	= "D.L. Dill and A.J. Hu",
  title		= "Efficient verification with {BDD}s using implicitly
		  conjoined invariants",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "3--14"
}

@InCollection{	  DillWongToi95,
  author	= "D.L. Dill and {Wong-Toi}, H.",
  title		= "Verification of real-time systems by successive over- and
		  underapproximation",
  booktitle	= "CAV 95: Computer-aided Verification",
  editor	= "P. Wolper",
  series	= "LNCS 939",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "409--422"
}

@PhDThesis{	  DISS91,
  author	= "T.A. Henzinger",
  title		= "The Temporal Specification and Verification of Real-time
		  Systems",
  school	= "Stanford University",
  year		= "1991"
}

@InProceedings{	  DJW97,
  author	= "S. Dziembowski and M. Jurdzinski and I. Walukiewicz",
  title		= "How much memory is needed to win infinite games?",
  booktitle	= "LICS 97: Logic in Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1997",
  pages		= "99--110"
}

@inproceedings{Ramalingam99,
  author    = {G. Ramalingam and
               John Field and
               Frank Tip},
  title     = {Aggregate Structure Identification and Its Application to
               Program Analysis.},
  booktitle = {POPL},
  year      = {1999},
  pages     = {119-132},
  ee        = {http://doi.acm.org/10.1145/292540.292553},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}




@inproceedings{Komondoor05,
  author    = {Raghavan Komondoor and
               Ganesan Ramalingam and
               Satish Chandra and
               John Field},
  title     = {Dependent Types for Program Understanding.},
  booktitle = {TACAS},
  year      = {2005},
  pages     = {157-173},
  ee        = {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3440{\&}spage=157},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@inproceedings{Lipton,
  author    = {Richard J. Lipton},
  title     = {Reduction: A New Method of Proving Properties of Systems of Processes.},
  booktitle = {POPL 75: Principles of Programming Languages},
  year      = {1975},
  pages     = {78-86},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@Article{	  DLP79,
  author	= "R.A. De Millo and R.J. Lipton and A.J. Perlis",
  title		= "Social Processes and Proofs of Theorems and Programs",
  journal	= "Communications of the ACM",
  volume	= "22",
  publisher	= "ACM Press",
  pages		= "271--280",
  year		= "1979"
}

@InProceedings{	  Dor03,
  author	= {Nurit Dor and Michael Rodeh and Shmuel Sagiv},
  title		= {CSSV: towards a realistic tool for statically detecting
		  all buffer overflows in C.},
  booktitle	= {PLDI},
  year		= {2003},
  pages		= {155-167},
  ee		= {http://doi.acm.org/781131.781149},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InCollection{	  DOTY96,
  author	= "C. Daws and A. Olivero and S. Tripakis and S. Yovine",
  title		= "The tool {\sc {K}ronos}",
  booktitle	= "Hybrid Systems III",
  editor	= "R. Alur and T.A. Henzinger and E.D. Sontag",
  series	= "LNCS 1066",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "208--219"
}

@InProceedings{	  DRvB02,
  author	= "G. Delzanno and J.-F. Raskin and L. Van Begin",
  title		= "Towards the Automated Verification of Multithreaded {Java}
		  Programs",
  booktitle	= "TACAS 02: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  pages		= "173--187",
  publisher	= "Springer",
  year		= "2002"
}

@InProceedings{	  DS91,
  author	= "Annette Dinning and Edith Schonberg",
  title		= "Detecting Access Anomalies in Programs with Critical
		  Sections",
  booktitle	= " ACM/ONR Workshop on Parallel and Distributed Debugging",
  year		= "1991"
}

@InCollection{	  DT98,
  author	= "C. Daws and S. Tripakis",
  title		= "Model checking of real-time reachability properties using
		  abstractions",
  booktitle	= "TACAS98: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  editor	= "B. Steffen",
  series	= "LNCS 1384",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "313--329"
}

@InProceedings{Dunfield07,
  author =     {J. Dunfield},
  title =      {Refined typechecking with {Stardust}},
  booktitle =  {PLPV},
  year =       2007
}

@InProceedings{	  EarlyBird,
  author	= {Sumeet Singh and Cristian Estan and George Varghese and
		  Stefan Savage},
  title		= {Automated Worm Fingerprinting},
  booktitle	= {OSDI},
  year		= {2004},
  pages		= {45-60},
  ee		= {http://www.usenix.org/events/osdi04/tech/singh.html},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Book{		  EF99,
  author	= "H.D. Ebbinghaus and J. Flum",
  title		= "Finite Model Theory",
  publisher	= "Springer",
  year		= "1999"
}

@InProceedings{	  EFM99,
  author	= "J. Esparza and A. Finkel and R. Mayr",
  title		= "On the Verification of Broadcast Protocols",
  booktitle	= "LICS 99: Logic in Computer Science",
  publisher	= "IEEE Press",
  year		= "1999",
  pages		= "352--359"
}

@Article{	  EH85a,
  author	= "E.A. Emerson and J.Y. Halpern",
  title		= "Decision Procedures and Expressiveness in the Temporal
		  Logic of Branching Time",
  journal	= "Journal of Computer and System Sciences",
  volume	= "30",
  pages		= "1-24",
  year		= 1985
}

@Book{		  Eiffel,
  title		= "Eiffel: The Language",
  author	= "B. Meyer",
  publisher	= "Prentice-Hall",
  year		= "1991"
}

@InCollection{	  Eiriksson98,
  author	= "Asgeir P. Eiriksson",
  title		= "The formal design of 1M-gate asics",
  booktitle	= "FMCAD 98: Formal Methods in Computer-Aided Design",
  series	= "LNCS 1522",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "49--63"
}

@Article{	  Emerson83,
  author	= "E.A. Emerson",
  title		= "Alternative semantics for temporal logics",
  journal	= "Theoretical Computer Science",
  volume	= "26",
  number	= "1",
  year		= "1983",
  pages		= "121--130"
}

@InCollection{	  Emerson90,
  author	= "E.A. Emerson",
  title		= "Temporal and modal logic",
  booktitle	= "Handbook of Theoretical Computer Science",
  volume	= "B",
  editor	= "van Leeuwen, J.",
  publisher	= "Elsevier Science Publishers",
  year		= "1990",
  pages		= "995--1072"
}

@InCollection{	  Emerson92,
  author	= "E.A. Emerson",
  title		= "Real time and the $\mu$-calculus",
  booktitle	= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "LNCS 600",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "176--194"
}

@InCollection{	  EmersonClarke80,
  author	= "E.A. Emerson and E.M. Clarke",
  title		= "Characterizing correctness properties of parallel programs
		  as fixpoints",
  booktitle	= "ICALP 83: Automata, Languages, and Programming",
  series	= "LNCS 85",
  publisher	= "Springer-Verlag",
  year		= "1980",
  pages		= "169--181"
}

@Article{	  EmersonClarke82,
  author	= "E.A. Emerson and E.M. Clarke",
  title		= "Using branching-time temporal logic to synthesize
		  synchronization skeletons",
  journal	= "Science of Computer Programming",
  volume	= "2",
  number	= "3",
  year		= "1982",
  pages		= "241--266"
}

@Article{	  EmersonHalpern86,
  author	= "E.A. Emerson and J.Y. Halpern",
  title		= "{``Sometimes''} and {``Not never''} revisited: on
		  branching versus linear-time temporal logic",
  journal	= "Journal of the ACM",
  volume	= "33",
  number	= "1",
  year		= "1986",
  pages		= "151--178"
}

@InProceedings{	  EmersonJutla88,
  author	= "E.A. Emerson and C. Jutla",
  title		= "The complexity of tree automata and logics of programs",
  booktitle	= "Proceedings of the 29th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1988",
  pages		= "328--337"
}

@InProceedings{	  EmersonJutla91,
  author	= "E.A. Emerson and C. Jutla",
  title		= "Tree automata, mu-calculus and determinacy",
  booktitle	= "Proceedings of the 32th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1991",
  pages		= "368--377"
}

@Article{	  EmersonJutlaSistla01,
  author	= "E.A. Emerson and C.S. Jutla and A.P. Sistla",
  title		= "On model checking for the $\mu$-calculus and its
		  fragments",
  journal	= "Theoretical Computer Science",
  volume	= "258",
  year		= "2001",
  pages		= "491--522"
}

@InProceedings{	  EmersonJutlaSistla93,
  author	= "E.A. Emerson and C.S. Jutla and A.P. Sistla",
  title		= "On model checking for fragments of $\mu$-calculus",
  booktitle	= "CAV 93: Computer-aided Verification",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "385--396"
}

@InProceedings{	  EmersonLei86,
  author	= "E.A. Emerson and C. Lei",
  title		= "Efficient model checking in fragments of the propositional
		  $\mu$-calculus",
  booktitle	= "Proceedings of the First Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1986",
  pages		= "267--278"
}

@InCollection{	  EmersonSistla93,
  author	= "E.A. Emerson and A.P. Sistla",
  title		= "Symmetry and model checking",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "463--478"
}

@InCollection{	  EMSS90,
  author	= "E.A. Emerson and A.K. Mok and A.P. Sistla and J.
		  Srinivasan",
  title		= "Quantitative temporal reasoning",
  booktitle	= "CAV 90: Computer-aided Verification",
  editor	= "R.P. Kurshan and E.M. Clarke",
  series	= "LNCS 531",
  publisher	= "Springer-Verlag",
  year		= "1990",
  pages		= "136--145"
}

@Book{		  Enderton72,
  author	= "H.B. Enderton",
  title		= "A Mathematical Introduction to Logic",
  publisher	= "Academic Press",
  year		= "1972"
}

@InProceedings{	  Engler00,
  author	= {D. Engler and B. Chelf and A. Chou and S. Hallem},
  title		= {Checking System Rules Using System-Specific,
		  Programmer-Written Compiler Extensions},
  booktitle	= {OSDI 00: Operating System Design and Implementation},
  publisher	= {Usenix Association},
  year		= {2000}
}

@InProceedings{	  EnglerNSDI,
  author	= {Madanlal Musuvathi and Dawson R. Engler},
  title		= {Model Checking Large Network Protocol Implementations.},
  booktitle	= {NSDI},
  year		= {2004},
  pages		= {155-168},
  ee		= {http://www.usenix.org/events/nsdi04/tech/musuvathi.html},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  EnglerNSDI03,
  author	= {D. Engler and M. Musuvathi},
  title		= {Model Checking network system implementations},
  booktitle	= {NSDI 04: Network System Design and Implementation},
  publisher	= {Usenix Association},
  year		= {2003}
}

@InProceedings{	  EnglerOSDI04,
  author	= {J. Yang and P. Twohey and D. Engler and M. Musuvathi},
  title		= {Using Model Checking to Find Serious File System Errors},
  booktitle	= {OSDI 04: Operating System Design and Implementation},
  publisher	= {Usenix Association},
  year		= {2004}
}

@Article{	  EnglerSoftMC03,
  author	= {D. Engler and M. Musuvathi},
  title		= {Some lessons from using static analysis and software model
		  checking for bug finding},
  journal	= {Electronic Notes in Theoretical Computer Science},
  volume	= 89,
  year		= {2003}
}

@Article{	  Eraser,
  author	= "S. Savage and M. Burrows and C.G. Nelson and P. Sobalvarro
		  and T.A. Anderson",
  title		= "Eraser: {A} dynamic data race detector for multithreaded
		  programs",
  journal	= "ACM Transactions on Computer Systems",
  volume	= "15",
  number	= "4",
  publisher	= "ACM",
  pages		= "391--411",
  year		= "1997"
}

@Article{	  Ernst01,
  title		= "Dynamically Discovering Likely Program Invariants to
		  Support Program Evolution",
  author	= "M.D. Ernst and J. Cockrell and W. G. Griswold and D.
		  Notkin",
  journal	= "IEEE Transactions in Software Engineering",
  volume	= "27(2)",
  year		= 2001,
  pages		= "1-25"
}

@InProceedings{	  Ernst03,
  author	= "M. Harder and J. Mellen and M.D. Ernst",
  title		= "Improving Test Suites via Operational Abstraction",
  booktitle	= "ICSE 03: Software Engineering",
  publisher	= "ACM",
  pages		= "60--73",
  year		= 2003
}

@InCollection{	  Ernst04,
  author	= "S. McCamant and M.D. Ernst",
  title		= "Early Identification of Incompatibilities in
		  Multi-component Upgrades",
  booktitle	= "ECOOP 04: Object-oriented programming",
  series	= "Lecture Notes in Computer Science 3086",
  publisher	= "Springer",
  pages		= "440--464",
  year		= 2004
}

@InProceedings{	  Ernst99,
  author	= "M. Ernst",
  title		= "Research Summary for Dynamic Detection of Program
		  Invariants",
  booktitle	= "ICSE 99: International Conference on Software Engineering",
  pages		= "718--719",
  year		= 1999
}

@PhDThesis{	  ErnstDiss,
  author	= "M. D. Ernst",
  title		= "Dynamically Discovering Likely Program Invariants",
  school	= "University of Washington, Seattle",
  year		= "2000"
}

@InProceedings{	  ErnstMockObjects,
  author	= {David Saff and Michael D. Ernst},
  title		= {Mock object creation for test factoring.},
  booktitle	= {PASTE},
  year		= {2004},
  pages		= {49-51},
  ee		= {http://doi.acm.org/10.1145/996838},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  ESCJava,
  title		= "Extended static checking for {Java}",
  author	= {C. Flanagan and K.R.M. Leino and M. Lillibridge and G.
		  Nelson and J. B. Saxe and R. Stata},
  booktitle	= {PLDI},
  year		= {2002}
}

@InProceedings{	  ESCModula,
  author	= { K. R. M. Leino and G. Nelson },
  title		= { An Extended Static Checker for {M}odula-3},
  booktitle	= {Compiler Construction},
  year		= { 1998 },
}

@TechReport{	  ESCtr,
  author	= {D. L. Detlefs and K. R. M. Leino and G. Nelson and J. B.
		  Saxe},
  title		= {Extended Static Checking},
  institution	= {Compaq Systems Research Center},
  number	= {Research Report 159},
  month		= {December},
  year		= {1998}
}

@InProceedings{	  ESP,
  title		= {{ESP}: Path-Sensitive Program Verification in Polynomial
		  Time},
  author	= {M. Das and S. Lerner and M. Seigle},
  booktitle	= {PLDI 02: Programming Language Design and Implementation},
  pages		= {57--68},
  publisher	= {ACM},
  year		= {2002}
}

@Article{	  Esparza97,
  author	= "J. Esparza",
  title		= "Decidability of model-checking for infinite-state
		  concurrent systems",
  journal	= "Acta Informatica",
  volume	= "34",
  year		= "1997",
  pages		= "85--107"
}

@InProceedings{	  Evans96,
  author	= {D. Evans},
  title		= {Static Detection of Dynamic Memory Errors.},
  booktitle	= {PLDI},
  year		= {1996},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  Everett57,
  author	= "H. Everett",
  title		= "Recursive Games",
  booktitle	= "Contributions to the Theory of Games {III}",
  volume	= 39,
  series	= "Annals of Mathematical Studies",
  pages		= "47--78",
  year		= 1957,
  summary	= "Proves the existence of supinf stationary strategies for
		  many types of recursive games"
}

@InCollection{	  Extreme,
  author	= "T.A. Henzinger and R. Jhala and R. Majumdar and M.A.A.
		  Sanvido",
  title		= "Extreme model checking",
  booktitle	= "International Symposium on Verification",
  series	= "LNCS",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  FASE05,
  author	= {D. Beyer and T. A. Henzinger and R. Jhala and
		  R. Majumdar},
  title		= {Checking Memory Safety with {Blast}},
  booktitle	= {Proceedings of the 8th International Conference on
		  Fundamental Approaches to Software Engineering (FASE~2005,
		  Edinburgh, April 2-10)},
  editor	= {M.~Cerioli},
  series	= {LNCS~3442},
  pages		= {2-18},
  publisher	= {Springer-Verlag, Berlin},
  year		= {2005},
  isbn		= {3-540-25420-X},
  keyword	= {Software Model Checking},
  pdf		= {../../2005-FASE.Checking_Memory_Safety_with_Blast.pdf},
  url		= {http://www.springer.de/cgi-bin/search_book.pl?isbn=3-540-25420-X}
		  ,
  annote	= {FASE 2005, Edinburgh, April 2-10 Maura Cerioli, editor}
}

@InProceedings{	  FD02,
  author	= {M. Fahndrich and R. DeLine},
  title		= "Adoption and Focus: Practical Linear Types for Imperative
		  Programming",
  booktitle	= {PLDI},
  publisher	= {ACM},
  year		= {2002},
  pages		= {13-24}
}

@InProceedings{	  FD04,
  author	= "M.A. Fahndrich and R. DeLine",
  title		= "Typestates for objects",
  booktitle	= "ECOOP 04: Object-Oriented Programming",
  pages		= "465--490",
  series	= "LNCS 3086",
  publisher	= "Springer",
  year		= "2004"
}

@InProceedings{	  Feaver,
  author	= "G.J. Holzmann",
  title		= "Logic Verification of {ANSI-C} Code with {SPIN}",
  booktitle	= "SPIN 00: Spin Model Checking and Software Verification",
  series	= "LNCS 1885",
  publisher	= "Springer",
  pages		= "131--147",
  year		= 2000
}

@Article{	  FerranteRackoff75,
  author	= "J. Ferrante and C. Rackoff",
  title		= "A decision procedure for the first-order theory of real addition with order",
  journal	= "SIAM Journal on Computing",
  volume	= "4",
  number	= "1",
  year		= "1975",
  pages		= "69--76"
}

@inproceedings{sif,
  author    = {Ravi Chugh and
               Jeffrey A. Meister and
               Ranjit Jhala and
               Sorin Lerner},
  title     = {Staged information flow for javascript},
  booktitle = {Proceedings of PLDI 2009},
  year      = {2009},
  pages     = {50-62},
  ee        = {http://doi.acm.org/10.1145/1542476.1542483},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@InProceedings{	  FFA99,
  author	= "J. Foster and M. Fahndrich and A. Aiken",
  title		= "A Theory of type qualifiers",
  booktitle	= "PLDI",
  publisher	= "ACM",
  year		= "1999"
}

@Article{	  FFQS05,
  author	= "Cormac Flanagan and Stephen Freund and Shaz Qadeer and
		  Sanjit Seshia",
  title		= "Modular verification of multithreaded programs",
  journal	= "Theoretical Computer Science",
  volume	= "338",
  year		= "2005",
  pages		= "153--183"
}

@Book{		  FilarVrieze97,
  author	= "J. Filar and K. Vrieze",
  title		= "Competitive {Markov} Decision Processes",
  publisher	= "Springer-Verlag",
  year		= 1997
}

@Unpublished{	  FindBugs,
  author	= {Bill Pugh and David Hovemeyer and Phil Crosby and Peter
		  Freise and David Brosius and Brian Goetz and Rohan Lloyd},
  title		= {FindBugs},
  note		= "\url{http://findbugs.sourceforge.net}",
  key		= "FindBugs"
}

@InProceedings{	  Findler01,
  author	= {R. B. Findler and M. Felleisen},
  title		= {Contract Soundness for Object-Oriented Languages.},
  booktitle	= {OOPSLA},
  year		= {2001},
  pages		= {1-15},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}



@InProceedings{	  HTT,
  author	= {A. Nanevski and G. Morrisett and A. Shinnar and P. Govereau and L. Birkedal},
  title		= {Ynot: Reasoning with the Awkward Squad},
  booktitle	= {ICFP},
  year		= {2008}
}


@InProceedings{	  Findler02,
  author	= {R. B. Findler and M. Felleisen},
  title		= {Contracts for higher-order functions.},
  booktitle	= {ICFP},
  year		= {2002},
  pages		= {48-59},
  ee		= {http://doi.acm.org/10.1145/581478.581484},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@PhDThesis{	  FindlerThesis,
  author	= "Robert Bruce Findler",
  title		= "Behavioral Software Contracts",
  school	= "Rice University",
  year		= "2002"
}

@InProceedings{	  Finkel:2000:CONCUR,
  author	= "Finkel, A. and Iyer, {S. P.} and Sutre, G.",
  title		= "Well-Abstracted Transition Systems",
  booktitle	= "CONCUR 00: Concurrency Theory",
  series	= "Lecture Notes in Computer Science 1877",
  publisher	= "Springer-Verlag",
  pages		= "566--580",
  year		= "2000"
}

@TechReport{	  FinkelSchnoebelen98,
  author	= "A. Finkel and Ph. Schnoebelen",
  title		= "Well-structured transition systems everywhere",
  institution	= "Laboratoire Sp\'ecification et V\'erification",
  number	= "LSV-98-4",
  year		= "1998"
}

@Book{		  Fitting83,
  author	= "M. Fitting",
  title		= "Proof Methods for Modal and Intuitionistic Logics",
  publisher	= "D. Reidel Publishing Company",
  year		= "1983"
}

@InProceedings{	  FJM05,
  author	= {Jeffrey Fischer and Ranjit Jhala and Rupak Majumdar},
  title		= {Joining Dataflow with Predicates},
  booktitle	= {ESEC/FSE 2005: Foundations of Software Engineering},
  publisher	= {ACM},
  year		= {2005},
  pages		= {to appear}
}

@Article{	  FL79,
  author	= "M.J. Fischer and R.E. Ladner",
  title		= "Propositional dynamic logic of regular programs",
  journal	= "Journal of Computer and Systems Sciences",
  volume	= "18",
  year		= "1979",
  pages		= "194-211"
}

@InProceedings{	  flanagan06,
  author	= {C. Flanagan},
  title		= {Hybrid Type Checking},
  booktitle	= {POPL},
  year		= {2006},
}

@InProceedings{	  FlanaganAbadi99,
  author	= "C. Flanagan and M. Abadi",
  title		= "Types for safe locking",
  booktitle	= "ESOP 99: European Symposium on Programming",
  series	= "LNCS 1576",
  publisher	= {Springer},
  year		= {1999},
  pages		= {91--108}
}

@InProceedings{	  FlanaganFreund00,
  author	= "C. Flanagan and S.N. Freund",
  title		= "Type-based race detection for {Java}",
  booktitle	= {PLDI 00: Programming Languages Design and Implementation},
  publisher	= {ACM},
  year		= {2000},
  pages		= "219--232"
}

@InProceedings{	  FlanaganFreund01,
  author	= "C. Flanagan and S.N. Freund",
  title		= "Detecting race conditions in large programs",
  booktitle	= "PASTE 01: Program Analysis for Software Tools and
		  Engineering",
  publisher	= {ACM},
  year		= {2001},
  pages		= "90--96"
}

@inproceedings{FlanaganFreund04,
  author    = {Cormac Flanagan and Stephen N. Freund},
  title     = {Atomizer: a dynamic atomicity checker for multithreaded programs.},
  booktitle = {POPL},
  year      = {2004},
  pages     = {256-267},
  ee        = {http://doi.acm.org/10.1145/964001.964023},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{WangStoller06,
  author    = {Liqiang Wang and
               Scott D. Stoller},
  title     = {Runtime Analysis of Atomicity for Multithreaded Programs.},
  journal   = {IEEE Trans. Software Eng.},
  volume    = {32},
  number    = {2},
  year      = {2006},
  pages     = {93-110},
  ee        = {http://doi.ieeecomputersociety.org/10.1109/TSE.2006.18},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Knowles09,
  author    = {K. W. Knowles and
               C. Flanagan},
  title     = {Compositional reasoning and decidable checking for dependent
               contract types},
  booktitle = {PLPV},
  year      = {2009},
}


@InProceedings{	  FlanaganFreund05,
  author	= {Cormac Flanagan and Stephen N. Freund and Marina Lifshin},
  title		= {Type inference for atomicity.},
  booktitle	= {TLDI},
  year		= {2005},
  pages		= {47-58},
  ee		= {http://doi.acm.org/10.1145/1040299},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  FlanaganFreundQadeer02,
  author	= "C. Flanagan and S.N. Freund and S. Qadeer",
  title		= "Thread-modular verification for shared-memory programs",
  booktitle	= "ESOP 02: European Symposium on Programming",
  series	= "LNCS 2305",
  publisher	= {Springer},
  year		= {2002},
  pages		= {262--277}
}

@InProceedings{	  FlanaganQadeer02,
  author	= "C. Flanagan and S. Qadeer",
  title		= "Predicate abstraction for software verification",
  booktitle	= {POPL},
  publisher	= {ACM},
  year		= {2002},
}

@InProceedings{	  FlanaganQadeer03,
  author	= "C. Flanagan and S. Qadeer",
  title		= "Thread-modular model checking",
  booktitle	= "SPIN 03: Model Checking Software",
  pages		= "213-224",
  series	= "LNCS 2648",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  FlanaganQadeerSeshia02,
  author	= "C. Flanagan and S. Qadeer and S.A. Seshia",
  title		= "A modular checker for multithreaded programs",
  booktitle	= "CAV 02: Computer-Aided Verification",
  series	= "LNCS 2404",
  publisher	= {Springer},
  year		= {2002},
  pages		= {180--194}
}

@InProceedings{	  FlanaganSaxe00,
  author	= "C. Flanagan and J.B. Saxe",
  title		= {Avoiding exponential explosion: generating compact
		  verification conditions},
  booktitle	= {POPL 00: Principles of Programming Languages},
  publisher	= {ACM},
  year		= {2000},
  pages		= "193-205"
}

@InProceedings{	  FLAVERS,
  author	= {M. Dwyer and L. Clarke},
  title		= {Data flow analysis for verifying properties of concurrent
		  programs},
  booktitle	= {FSE 94: Foundations of Software Engineering},
  publisher	= {ACM},
  year		= {1994},
  pages		= {62-75}
}

@InCollection{	  Floyd67,
  author	= {R.W. Floyd},
  title		= {Assigning meanings to programs},
  booktitle	= "Mathematical Aspects of Computer Science",
  year		= 1967,
}

@InCollection{	  FMCAD98,
  author	= "T.A. Henzinger and S. Qadeer and S.K. Rajamani and S.
		  Tasiran",
  title		= "An assume-guarantee rule for checking simulation",
  booktitle	= "FMCAD 98: Formal Methods in Computer-aided Design",
  editor	= "G. Gopalakrishnan and P. Windley",
  series	= "Lecture Notes in Computer Science 1522",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "421--432"
}

@Article{	  FMJJ92,
  author	= "Fernandez, J.-C. and L. Mounier and C. Jard and T. Jeron",
  title		= "On-the-fly verification of finite transition systems",
  journal	= "Formal Methods in System Design",
  volume	= "1",
  year		= "1992",
  pages		= "251--273"
}

@InProceedings{	  FOCS89,
  author	= "R. Alur and T.A. Henzinger",
  title		= "A really temporal logic",
  booktitle	= "Proceedings of the 30th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1989",
  pages		= "164--169"
}

@Article{	  FOCS89j,
  author	= "R. Alur and T.A. Henzinger",
  title		= "A really temporal logic",
  journal	= "Journal of the ACM",
  volume	= "41",
  number	= "1",
  year		= "1994",
  pages		= "181--204"
}

@InProceedings{	  FOCS92,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Back to the future: towards a theory of timed regular
		  languages",
  booktitle	= "Proceedings of the 33rd Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1992",
  pages		= "177--186"
}

@InProceedings{	  FOCS95,
  author	= "M.R. Henzinger and T.A. Henzinger and P.W. Kopke",
  title		= "Computing simulations on finite and infinite graphs",
  booktitle	= "Proceedings of the 36rd Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1995",
  pages		= "453--462"
}

@InProceedings{	  FOCS97,
  author	= "R. Alur and T.A. Henzinger and O. Kupferman",
  title		= "Alternating-time temporal logic",
  booktitle	= "Proceedings of the 38th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1997",
  pages		= "100--109"
}

@InProceedings{	  FOCS98,
  author	= "L. de Alfaro and T.A. Henzinger and O. Kupferman",
  title		= "Concurrent reachability games",
  booktitle	= "Proceedings of the 39th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1998",
  pages		= "564--575"
}

@InProceedings{	  foster05,
  author	= {Michael Furr and Jeffrey S. Foster},
  title		= {Checking type safety of foreign function calls.},
  booktitle	= {PLDI},
  year		= {2005},
  pages		= {62-72},
  ee		= {http://doi.acm.org/10.1145/1065019},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  FosterPLDI05,
  author	= {M. Furr and J. Foster},
  title		= {Checking type safety of foreign function calls},
  booktitle	= {PLDI},
  year		= {2005},
}

@InProceedings{	  LiquidPLDI08,
  author	= {P. Rondon and M. Kawaguchi and R. Jhala},
  title		= {Liquid Types},
  booktitle	= {PLDI},
  year		= 2008,
}

@InProceedings{	  LiquidPLDI09,
  author	= {M. Kawaguchi and P. Rondon and R. Jhala},
  title		= {Type-based Data Structure Verification},
  booktitle	= {PLDI},
  year		= {2009}
}

@InProceedings{LiquidPOPL10,
  author	= {P. Rondon and M. Kawaguchi and R. Jhala},
  title		= {Low-Level Liquid Types},
  booktitle	= {POPL},
  year		= {2010},
}

@InProceedings{	  FQ02,
  author	= "C. Flanagan and S. Qadeer",
  title		= "Predicate abstraction for software verification",
  booktitle	= "POPL 02: Principles of Programming Languages",
  publisher	= {ACM},
  year		= {2002},
  pages		= "191--202"
}

@InProceedings{	  FQ03,
  author	= "Cormac Flanagan and Shaz Qadeer",
  title		= "A Type and Effect System for Atomicity",
  booktitle	= {PLDI 03: Programming Language Design Implementation},
  publisher	= {ACM},
  year		= {2003},
  pages		= "191--202"
}

@Book{		  Francez86,
  author	= "N. Francez",
  title		= "Fairness",
  publisher	= "Springer-Verlag",
  year		= "1986"
}

@Book{		  Francez92,
  author	= "N. Francez",
  title		= "Program Verification",
  publisher	= "Addison-Wesley Publishing Company",
  year		= "1992"
}

@InProceedings{ FreemanPfenningDONTCITE91,
  author	= {T. Freeman and F. Pfenning},
  title		= {Refinement Types for {ML}},
  booktitle	= {PLDI},
  year		= {1991},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  FS01,
  author	= "C. Flanagan and J.B. Saxe",
  title		= {Avoiding exponential explosion: generating compact
		  verification conditions},
  booktitle	= {POPL 01: Principles of Programming Languages},
  publisher	= {ACM},
  year		= {2001},
  pages		= "193-205"
}

@InProceedings{	  FSE01,
  author	= "L. de Alfaro and T.A. Henzinger",
  title		= "Interface automata",
  booktitle	= "Foundations of Software Engineering",
  publisher	= "ACM Press",
  year		= "2001",
  pages		= "??--??"
}


@InProceedings{	  FSE06bits,
  author	= {Ranjit Jhala and Rupak Majumdar},
  title		= {Bit-level Types for High-level Reasoning},
  booktitle	= {FSE 2006: Foundations of Software Engineering},
  publisher	= {ACM},
  year		= {2006},
  pages		= {to appear}
}

@inproceedings{cayenne,
  author    = {L. Augustsson},
  title     = {Cayenne - a Language with Dependent Types.},
  booktitle = {ICFP},
  year      = {1998},
  ee        = {http://doi.acm.org/10.1145/289423.289451},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}



@InProceedings{	  FSE06ds,
  author	= {Deepak Kapoor and Rupak Majumdar and Calagero Zarba},
  title		= {Interpolants for Data Structures},
  booktitle	= {FSE 2006: Foundations of Software Engineering},
  publisher	= {ACM},
  year		= {2006},
  pages		= {to appear}
}

@InProceedings{	  fsoft05,
  author	= {H. Jain and F. Ivancic and A. Gupta and M.
		  K. Ganai},
  title		= {Localization and Register Sharing for Predicate
		  Abstraction.},
  booktitle	= {TACAS},
  year		= {2005}
}

@InProceedings{	  FTA02,
  author	= {J.S. Foster and T. Terauchi and A. Aiken},
  title		= {Flow-sensitive type qualifiers},
  booktitle	= "PLDI",
  year		= 2002
}

@InCollection{	  FTRTFT94HK,
  author	= "T.A. Henzinger and P.W. Kopke",
  title		= "Verification methods for the divergent runs of clock
		  systems",
  booktitle	= "FTRTFT 94: Formal Techniques in Real-time and
		  Fault-tolerant Systems",
  editor	= "H. Langmaack and de Roever, W.-P. and J. Vytopil",
  series	= "Lecture Notes in Computer Science 863",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "351--372"
}

@InCollection{	  FTRTFT94KHMP,
  author	= "A. Kapur and T.A. Henzinger and Z. Manna and A. Pnueli",
  title		= "Proving safety properties of hybrid systems",
  booktitle	= "FTRTFT 94: Formal Techniques in Real-time and
		  Fault-tolerant Systems",
  editor	= "H. Langmaack and de Roever, W.-P. and J. Vytopil",
  series	= "Lecture Notes in Computer Science 863",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "431--454"
}

@InCollection{	  FTRTFT98,
  author	= "J. Preu{\ss}ig and S. Kowalewski and H. {Wong-Toi} and
		  T.A. Henzinger",
  title		= "An algorithm for the approximative analysis of rectangular
		  automata",
  booktitle	= "FTRTFT 98: Formal Techniques in Real-time and
		  Fault-tolerant Systems",
  editor	= "A.P. Ravn and H. Rischel",
  series	= "Lecture Notes in Computer Science 1486",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "228--240"
}

@TechReport{	  Fugue,
  author	= {Robert DeLine and Manuel Fahndrich},
  title		= {The Fugue protocol checker: Is your software Baroque ?},
  institution	= "Microsoft Research",
  number	= "MSR-TR-2004-07",
  year		= {2004}
}

@Article{	  GabrielianFranklin91,
  author	= "A. Gabrielian and M.K. Franklin",
  title		= "Multi-level specification and verification of real-time
		  software",
  journal	= "Communications of the ACM",
  volume	= "34",
  number	= "5",
  year		= "1991",
  pages		= "50--60"
}

@Book{		  Gamma,
  title		= "Design Patterns",
  author	= "E. Gamma and R. Helm and R. Johnson and J. Vlissides",
  publisher	= "Addison Wesley",
  year		= "1995"
}

@Book{		  GarlanShaw,
  title		= "Software Architecture: Perspectives on an Emerging
		  Discipline",
  author	= "M. Shaw and D. Garlan",
  publisher	= "Pearson Education",
  year		= "1996"
}

@InCollection{	  Garson84,
  author	= "J.W. Garson",
  title		= "Quantification in modal logic",
  booktitle	= "Handbook of Philosophical Logic",
  volume	= "II",
  editor	= "D. Gabbay and F. Guenthner",
  publisher	= "D. Reidel Publishing Company",
  year		= "1984",
  pages		= "249--307"
}

@TechReport{	  GBD94,
  author	= "A. Geist and A. Beguelin and J. Dongarra and W. Jiang and
		  R. Manchek and V. Sunderam",
  title		= "{PVM~3} User's Guide and Reference Manual",
  institution	= "Oak Ridge National Laboratory",
  number	= "12187",
  address	= "Oak Ridge, Tennessee",
  year		= "1994"
}

@InProceedings{	  GD00,
  author	= "S.G. Govindaraju and D.L. Dill",
  title		= "Counterexample-guided Choice of Projections in Approximate
		  Symbolic Model Checking",
  booktitle	= "ICCAD 00: International Conference on Computer-Aided
		  Design",
  year		= 2000,
  publisher	= "ACM Press",
  pages		= "??--??"
}

@InProceedings{	  GerberLee89,
  author	= "R. Gerber and I. Lee",
  title		= "{Communicating Shared Resources}: a model for distributed
		  real-time systems",
  booktitle	= "Proceedings of the Tenth Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1989",
  pages		= "68--78"
}

@InCollection{	  GHJ,
  author	= "V. Gupta and T.A. Henzinger and R. Jagadeesan",
  title		= "Robust timed automata",
  booktitle	= "HART 97: Hybrid and Real-Time Systems",
  editor	= "O. Maler",
  series	= "Lecture Notes in Computer Science 1201",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "331--345"
}

@InProceedings{	  GHJ01,
  author	= {P. Godefroid and M. Huth and R. Jagadeesan},
  title		= {Abstraction-based model checking using modal transition
		  systems},
  booktitle	= "CONCUR 01: Concurrency Theory",
  series	= "LNCS",
  publisher	= {Springer},
  year		= {2001},
  pages		= {???-???}
}

@Article{	  GiacobazziACM00,
  author	= {R. Giacobazzi and F. Ranzato and F. Scozzari},
  title		= {Making Abstract Interpretations Complete},
  journal	= {Journal of the ACM},
  year		= 2000,
  volume	= {47(2)},
  pages		= {361-416},
  month		= {March}
}

@Book{		  GKP89,
  title		= "Concrete Mathematics: A Foundation for Computer Science",
  author	= "R.L. Graham and D.E. Knuth and O. Patashnik",
  publisher	= "Addison-Wesley Publishing Company",
  year		= "1989"
}

@InProceedings{	  GodefroidWolper91,
  author	= "P. Godefroid and P. Wolper",
  title		= "A partial approach to model checking",
  booktitle	= "Proceedings of the Sixth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1991",
  pages		= "406--415"
}

@Book{		  Goldblatt87,
  author	= "R. Goldblatt",
  title		= "Logics of Time and Computation",
  series	= "CSLI Lecture Notes 7",
  publisher	= "Center for the Study of Language and Information",
  address	= "Stanford, California",
  year		= "1987"
}

@InProceedings{	  Gopan05,
  author	= {D. Gopan and T. W. Reps and S. Sagiv},
  title		= {A framework for numeric analysis of array operations.},
  booktitle	= {POPL},
  year		= {2005},
  pages		= {338-350},
  ee		= {http://doi.acm.org/10.1145/1040333},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}


@InProceedings{	  Gotlieb98,
  author	= "A. Gotlieb and B. Botella and M. Rueher",
  title		= "Automatic test data generation using constraint solving
		  techniques",
  booktitle	= "ISSTA 98: Software Testing and Analysis",
  publisher	= "ACM",
  year		= "2002",
  pages		= "53--62"
}

@InProceedings{	  Gottlob95,
  author	= "G. Gottlob and N. Leone and H. Veith",
  title		= "Second Order Logic and the Weak Exponential Hierarchies",
  booktitle	= "MFCS 95: Mathematical Foundations of Compuer Science",
  pages		= "66-81",
  series	= lncs,
  publisher	= springer,
  year		= 1995
}

@InProceedings{	  GPB02,
  author	= "D. Giannakopoulou and C.S. Pasareanu and H. Barringer",
  title		= "Assumption Generation for Software Component Verification",
  booktitle	= "ASE 02: Automated Software Engineering",
  pages		= "3--12",
  publisher	= "IEEE Press",
  year		= "2002"
}

@InProceedings{	  GPSS80,
  author	= "D. Gabbay and A. Pnueli and S. Shelah and J. Stavi",
  title		= "On the temporal analysis of fairness",
  booktitle	= "Proceedings of the Seventh Annual Symposium on Principles
		  of Programming Languages",
  publisher	= "ACM Press",
  year		= "1980",
  pages		= "163--173"
}

@InCollection{	  Graf94,
  author	= "S. Graf",
  title		= "Verification of a distributed cache memory by using
		  abstractions",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "207--219"
}

@InCollection{	  GrafSaidi97,
  author	= "S. Graf and H. Sa{\"\i}di",
  title		= "Construction of abstract state graphs with {PVS}",
  booktitle	= "CAV",
  series	= "LNCS 1254",
  publisher	= "Springer",
  year		= "1997",
  pages		= "72-83"
}

@InProceedings{	  GraphTypes,
  author	= "N. Klarlund and M.I. Schwartzbach",
  title		= "Graph Types",
  booktitle	= "POPL 93: Principlesof Programming Languages",
  pages		= "196-205",
  year		= 1993
}

@inproceedings{Greenberg11,
  author    = {J. F. Belo and
               M. Greenberg and
               A. Igarashi and
               B. C. Pierce},
  title     = {Polymorphic Contracts},
  booktitle = {ESOP},
  year      = {2011},
  ee        = {http://dx.doi.org/10.1007/978-3-642-19718-5_2},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@article{Greenberg12,
  author = {M. Greenberg and B. C. Pierce and S. Weirich},
  title = {Contracts Made Manifest},
  year = {2012},
  journal = {JFP},
}

@Book{		  Gries81,
  author	= "D. Gries",
  title		= "The Science of Programming",
  publisher	= "Springer",
  year		= "1981"
}

@InProceedings{	  Grossman05,
  author	= {Michael F. Ringenburg and Dan Grossman},
  title		= {Types for describing coordinated data structures.},
  booktitle	= {TLDI},
  year		= {2005},
  pages		= {25-36},
  ee		= {http://doi.acm.org/10.1145/1040297},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@INPROCEEDINGS{Gronski06,
    author = {Jessica Gronski and Kenneth Knowles and Aaron Tomb and Stephen N. Freund and Cormac Flanagan},
    title = {Sage: Hybrid checking for flexible specifications},
    booktitle = {Scheme and Functional Programming Workshop},
    year = {2006},
    pages = {93--104}
}

@INPROCEEDINGS{Gronski07,
    author = {Jessica Gronski and Cormac Flanagan},
    title = {Unifying hybrid types and contracts},
    booktitle = {In Eighth Symposium on Trends in Functional Programming},
    year = {2007}
}

@Article{	  GrumbergLong94,
  author	= "O. Grumberg and D.E. Long",
  title		= "Model checking and modular verification",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "16",
  number	= "3",
  year		= "1994",
  pages		= "843--871"
}

@Article{	  GS92,
  author	= "S.M. German and A.P. Sistla",
  title		= "Reasoning about systems with many processes",
  journal	= "Journal of the ACM",
  volume	= "39",
  year		= "1992",
  pages		= "675--735"
}

@InCollection{	  GS97,
  author	= "S. Graf and H. Sa{\"\i}di",
  title		= "Construction of Abstract State Graphs with {PVS}",
  booktitle	= "CAV",
  series	= "LNCS 1254",
  publisher	= "Springer",
  year		= "1997",
  pages		= "72--83"
}

@InCollection{	  GSSL94,
  author	= "R. Gawlick and R. Segala and J.F. Sogaard-Andersen and
		  N.A. Lynch",
  title		= "Liveness in timed and untimed systems",
  booktitle	= "ICALP 94: Automata, Languages, and Programming",
  editor	= "S. Abiteboul and E. Shamir",
  series	= "LNCS 820",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "166--177"
}

@Unpublished{	  GTK,
  title		= {The GIMP Toolkit},
  note		= "\url{http://www.gtk.org/}",
  key		= "GTK"
}

@InProceedings{	  GTT03,
  author	= "R. Ghosh and A. Tiwari and C. Tomlin",
  title		= "Automated Symbolic Reachability Analysis; with Application
		  to Delta-Notch Signaling Automata",
  booktitle	= "HSCC 03: Hybrid Systems Computation and Control",
  series	= "Lecture Notes in Computer Science",
  pages		= "233--248",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  gulwani06,
  author	= "S. Gulwani and A. Tiwari",
  title		= "Combining Abstract Interpreters",
  booktitle	= "PLDI 2006: Programming Languages Design and
		  Implementation",
  publisher	= {ACM},
  pages		= {To Appear},
  year		= "2006"
}

@InProceedings{	  GunterPeled02,
  author	= "E. Gunter and D. Peled",
  title		= "Temporal Debugging for Concurrent Systems",
  booktitle	= "TACAS 02: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  publisher	= "Springer",
  series	= "LNCS",
  volume	= "2280",
  pages		= "431--444",
  year		= "2002"
}

@InProceedings{	  Gupta98,
  title		= {Generating test data for branch coverage},
  author	= {N. Gupta and A. Mathur and M.L. Soffa},
  booktitle	= {ASE 00: Automated Software Engineering},
  pages		= {219--228},
  publisher	= {IEEE},
  year		= {1998}
}

@InProceedings{	  GuptaBit02,
  author	= {Rajiv Gupta and Eduard Mehofer and Youtao Zhang},
  title		= {A Representation for Bit Section Based Analysis and
		  Optimization.},
  booktitle	= {CC},
  year		= {2002},
  pages		= {62-77},
  ee		= {http://link.springer.de/link/service/series/0558/bibs/2304/23040062.htm},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  GurevichHarrington82,
  author	= "Y. Gurevich and L. Harrington",
  title		= "Trees, automata, and games",
  booktitle	= "Proc. Symposium on Theory of Computing",
  publisher	= "ACM Press",
  year		= "1982",
  pages		= "60--65"
}

@InProceedings{	  Guyer03,
  author	= {Samuel Z. Guyer and Calvin Lin},
  title		= {Client-Driven Pointer Analysis.},
  booktitle	= {SAS},
  year		= {2003},
  pages		= {214-236},
  ee		= {http://link.springer.de/link/service/series/0558/bibs/2694/26940214.htm},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Haase81,
  author	= "V.H. Haase",
  title		= "Real-time behavior of programs",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "SE-7",
  number	= "5",
  year		= "1981",
  pages		= "494--501"
}

@Book{		  Halbwachs93book,
  author	= "N. Halbwachs",
  title		= "Synchronous Programming of Reactive Systems",
  publisher	= "Kluwer Academic Publishers",
  year		= "1993"
}

@InCollection{	  Halbwachs93cav,
  author	= "N. Halbwachs",
  title		= "Delay analysis in synchronous programs",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "333--346"
}

@InCollection{	  Halpern87,
  author	= "J.Y. Halpern",
  title		= "Using reasoning about knowledge to analyze distributed
		  systems",
  booktitle	= "Annual Review of Computer Science",
  volume	= "II",
  editor	= "J.F. Traub and B.J. Grosz and B.W. Lampson and N.J.
		  Nilsson",
  publisher	= "Annual Reviews",
  year		= "1987",
  pages		= "37--68"
}

@Article{	  Halpern91,
  author	= "J.Y. Halpern",
  title		= "Presburger arithmetic with unary predicates is
		  {$\Pi^1_1$}-complete",
  journal	= "The Journal of Symbolic Logic",
  volume	= "56",
  number	= "2",
  year		= "1991",
  pages		= "637--642"
}

@InProceedings{	  HalpernZuck87,
  author	= "J.Y. Halpern and L.D. Zuck",
  title		= "A little knowledge goes a long way: simple knowledge-based
		  derivations and correctness proofs for a family of
		  protocols",
  booktitle	= "Proceedings of the Sixth Annual Symposium on Principles of
		  Distributed Computing",
  publisher	= "ACM Press",
  year		= "1987",
  pages		= "269--280"
}

@InProceedings{	  Hao02,
  title		= {Setuid Demystified},
  author	= {H. Chen and D. Wagner and D. Dean},
  booktitle	= {USENIX Security Symposium},
  pages		= {171-190},
  year		= {2002}
}
@article{Eiriksson00,
  author    = {{\'A}sgeir Th. Eir\'{\i}ksson},
  title     = {The Formal Design of 1M-gate ASICs.},
  journal   = {Formal Methods in System Design},
  volume    = {16},
  number    = {1},
  year      = {2000},
  pages     = {7-22},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{segerbryant95,
  author    = {Carl-Johan H. Seger and
               Randal E. Bryant},
  title     = {Formal Verification by Symbolic Evaluation of Partially-Ordered
               Trajectories.},
  journal   = {Formal Methods in System Design},
  volume    = {6},
  number    = {2},
  year      = {1995},
  pages     = {147-189},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@article{futurebus,
  author    = {Edmund M. Clarke and
               Orna Grumberg and
               Hiromi Hiraishi and
               Somesh Jha and
               David E. Long and
               Kenneth L. McMillan and
               Linda A. Ness},
  title     = {Verification of the Futurebus+ Cache Coherence Protocol.},
  journal   = {Formal Methods in System Design},
  volume    = {6},
  number    = {2},
  year      = {1995},
  pages     = {217-232},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@InProceedings{	  Hao04,
  title		= {Model checking one million lines of C code},
  author	= {H. Chen and D. Dean and D. Wagner},
  booktitle	= {NDSS 04: Annual Network and Distributed System Security
		  Symposium},
  pages		= {171-185},
  year		= {2004}
}

@InProceedings{	  Harel,
  author	= "N. Kam and D. Harel and H. Kugler and R. Marelly and A.
		  Pnueli and E.J.A. Hubbard and M.J. Stern",
  title		= "Formal Modeling of {C}. elegans Development: A
		  Scenario-Based Approach",
  booktitle	= "CMSB 2003: Computational methods in Systems Biology",
  pages		= "4--20",
  publisher	= "Springer",
  year		= "2003"
}

@InCollection{	  Harel84,
  author	= "D. Harel",
  title		= "Dynamic Logic",
  booktitle	= "Handbook of Philosophical Logic",
  volume	= "II",
  editor	= "D. Gabbay and F. Guenthner",
  publisher	= "D. Reidel Publishing Company",
  year		= "1984",
  pages		= "497--604"
}

@Article{	  Harel87,
  author	= "D. Harel",
  title		= "Statecharts: a visual formalism for complex systems",
  journal	= "Science of Computer Programming",
  volume	= "8",
  year		= "1987",
  pages		= "231--274"
}

@MastersThesis{	  Harel88,
  author	= "E. Harel",
  title		= "Temporal Analysis of Real-time Systems",
  school	= "The Weizmann Institute of Science",
  address	= "Rehovot, Israel",
  year		= "1988"
}

@InProceedings{	  Harris03,
  author	= {Tim Harris and Keir Fraser},
  title		= {Language support for lightweight transactions.},
  booktitle	= {OOPSLA},
  year		= {2003},
  pages		= {388-402},
  ee		= {http://doi.acm.org/10.1145/949340},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  harrold01,
  author	= {Harrold, M.J. and Jones, J. and Li, T. and Liang, D. and
		  Orso, A. and Pennings, M. and Sinha, S. and Spoon, S. and
		  Gujarathi, A.},
  title		= {Regression Test Selection for Java Software},
  booktitle	= {OOPSLA 01: Object-Oriented Programming, Systems,
		  Languages, and Applications},
  year		= {2001},
  pages		= {312--326},
  publisher	= {ACM}
}

@InCollection{	  HART97GHJ,
  author	= "V. Gupta and T.A. Henzinger and R. Jagadeesan",
  title		= "Robust timed automata",
  booktitle	= "HART 97: Hybrid and Real-time Systems",
  editor	= "O. Maler",
  series	= "Lecture Notes in Computer Science 1201",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "331--345"
}

@InCollection{	  HART97HK,
  author	= "T.A. Henzinger and O. Kupferman",
  title		= "From quantity to quality",
  booktitle	= "HART 97: Hybrid and Real-time Systems",
  editor	= "O. Maler",
  series	= "Lecture Notes in Computer Science 1201",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "48--62"
}

@InProceedings{	  HCL03,
  author	= "H.S. Hong and S.D. Cha and I. Lee and O. Sokolsky and H.
		  Ural",
  title		= "Data Flow Testing as Model Checking",
  booktitle	= "ICSE 2003: Software Engineering",
  publisher	= "ACM",
  pages		= "232--243",
  year		= "2003"
}

@InProceedings{	  Heintze94,
  author	= {N. Heintze},
  title		= {Set-based analysis of {ML} programs},
  pages		= { 306-317 },
  booktitle	= {LFP 94: LISP and Functional Programming},
  publisher	= {ACM},
  year		= {1994}
}

@InProceedings{	  Hendren96,
  author	= {Rakesh Ghiya and Laurie J. Hendren},
  title		= {Is it a Tree, a DAG, or a Cyclic Graph? A Shape Analysis
		  for Heap-Directed Pointers in C.},
  booktitle	= {POPL},
  year		= {1996},
  pages		= {1-15},
  ee		= {http://doi.acm.org/10.1145/237721.237724},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Henkin49,
  author	= "L. Henkin",
  title		= "The completeness of the first-order functional calculus",
  journal	= "The Journal of Symbolic Logic",
  volume	= "14",
  number	= "3",
  year		= "1949",
  pages		= "159--166"
}

@Book{		  Hennessy88,
  author	= "M.C.B. Hennessy",
  title		= "Algbraic Theory of Processes",
  publisher	= "The MIT Press",
  year		= "1994"
}

@Article{	  HennessyMilner85,
  author	= "M.C.B. Hennessy and R. Milner",
  title		= "Algebraic laws for nondeterminism and concurrency",
  journal	= "Journal of the ACM",
  volume	= "32",
  number	= "1",
  year		= "1985",
  pages		= "137--161"
}

@InCollection{	  Henzinger95,
  author	= "T.A. Henzinger",
  title		= "Hybrid automata with finite bisimulations",
  booktitle	= "ICALP 95: Automata, Languages, and Programming",
  editor	= "Z. F{\"u}l{\"o}p and F. G{\'e}cseg",
  series	= "Lecture Notes in Computer Science 944",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "324--335"
}

@InProceedings{	  Henzinger96,
  author	= "T.A. Henzinger",
  title		= "The theory of hybrid automata",
  booktitle	= "Proceedings of the 11th Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1996",
  pages		= "278--292"
}

@InProceedings{	  Henzinger:2000:STACS,
  author	= "Henzinger, {T. A.} and Majumdar, R.",
  title		= "A Classification of Symbolic Transition Systems",
  booktitle	= lncs1770,
  series	= "LNCS 1770",
  publisher	= sv,
  pages		= "13--34",
  year		= "2000"
}

@InProceedings{	  HHK95,
  author	= "M.R. Henzinger and T.A. Henzinger and P.W. Kopke",
  title		= "Computing simulations on finite and infinite graphs",
  booktitle	= "Proceedings of the 36rd Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1995",
  pages		= "453--462"
}

@InProceedings{	  HHK96,
  author	= "R.H. Hardin and Z. Har'el and R.P. Kurshan",
  title		= "{COSPAN}",
  booktitle	= "Computer Aided Verification, Proc. 8th International
		  Conference",
  pages		= "423--427",
  series	= "Lecture Notes in Computer Science",
  volume	= "1102",
  publisher	= "Springer-Verlag",
  year		= "1996"
}

@Article{	  HHP93,
  author	= {R. Harper and F. Honsell and G. Plotkin},
  title		= {A framework for defining logics},
  journal	= {Journal of the ACM},
  year		= 1993,
  volume	= {40(1)},
  pages		= {143-184}
}

@InProceedings{	  HHW95rtss,
  author	= "T.A. Henzinger and P.-H. Ho and H. Wong-Toi",
  title		= "{{\sc HyTech}}: The next generation",
  booktitle	= "Proceedings of the 16th Annual Real-Time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1995",
  pages		= "56--65"
}

@Article{	  Higman52,
  author	= "G. Higman",
  title		= "Ordering by divisibility in abstract algebras",
  journal	= "Proc. London Math. Society",
  volume	= "2",
  number	= "7",
  year		= "1952",
  pages		= "326--336"
}

@Book{		  HirschSmale74,
  author	= "M.W. Hirsch and S. Smale",
  title		= "Differential Equations, Dynamical Systems, and Linear
		  Algebra",
  publisher	= "Academic Press",
  year		= "1974"
}

@InProceedings{	  HJL93,
  author	= "C.L. Heitmeyer and R.D. Jeffords and B.G. Labaw",
  title		= "A benchmark for comparing different approaches for
		  specifying and verifying real-time systems",
  booktitle	= "Proceedings of the Tenth International Workshop on
		  Real-time Operating Systems and Software",
  year		= "1993"
}

@InProceedings{	  HJM04,
  author	= "Thomas A. Henzinger and Ranjit Jhala and Rupak Majumdar",
  title		= "Race Checking by Context Inference",
  booktitle	= "PLDI 2004: Programming Languages Design and
		  Implementation",
  publisher	= {ACM},
  pages		= {1--12},
  year		= "2004"
}

@InProceedings{	  HJM05,
  author	= {Thomas A. Henzinger and Ranjit Jhala and Rupak Majumdar},
  title		= {Permissive Interfaces},
  booktitle	= {ESEC/FSE 2005: Foundations of Software Engineering},
  publisher	= {ACM},
  year		= {2005}
}

@InProceedings{	  EFJM07,
  author	= {Michael Emmi and Jeffrey Fischer and Ranjit Jhala and Rupak Majumdar},
  title		= {Lock Allocation},
  booktitle	= {POPL 07: Principles of Programming Languages},
  publisher	= {ACM},
  year		= {2007}
}

@InProceedings{	  JM07a,
  author	= {Ranjit Jhala and Rupak Majumdar},
  title		= {Interprocedural Analysis of Asynchronous Programs},
  booktitle	= {POPL 07: Principles of Programming Languages},
  publisher	= {ACM},
  year		= {2007}
}


@InProceedings{	  HJMM04,
  author	= "T.A. Henzinger and R. Jhala and R. Majumdar and K.L.
		  McMillan",
  title		= "Abstractions from Proofs",
  booktitle	= "POPL 04",
  publisher	= "ACM",
  year		= "2004"
}

@InProceedings{	  HJMS02,
  author	= "T.A. Henzinger and R. Jhala and R. Majumdar and G. Sutre",
  title		= "Lazy abstraction",
  booktitle	= "POPL",
  year		= "2002"
}

@InProceedings{	  HK02,
  author	= {T.A. Henzinger and C.M. Kirsch},
  title		= {The embedded machine: predictable, portable real-time
		  code},
  booktitle	= {Proc. ACM SIGPLAN Conference on Programming Languages
		  Design and Implementation (PLDI)},
  publisher	= {ACM Press},
  pages		= {315--326},
  year		= {2002}
}

@InCollection{	  HK96,
  author	= "T.A. Henzinger and P.W. Kopke",
  title		= "State equivalences for rectangular hybrid automata",
  booktitle	= "CONCUR 96: Concurrency Theory",
  editor	= "U. Montanari and V. Sassone",
  series	= "Lecture Notes in Computer Science 1119",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "530--545"
}

@Article{	  HKPV98,
  author	= "T.A. Henzinger and P.W. Kopke and A. Puri and P. Varaiya",
  title		= "What's decidable about hybrid automata?",
  journal	= "Journal of Computer and System Sciences",
  volume	= "57",
  year		= "1998",
  pages		= "94--124"
}

@InProceedings{	  HLP90,
  author	= "E. Harel and O. Lichtenstein and A. Pnueli",
  title		= "Explicit-clock temporal logic",
  booktitle	= "Proceedings of the Fifth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1990",
  pages		= "402--413"
}

@InProceedings{	  HLQR99,
  author	= "T.A. Henzinger and X. Liu and S. Qadeer and S.K. Rajamani",
  title		= "Formal specification and verification of a dataflow
		  processor array",
  booktitle	= "Proceedings of the International Conference on
		  Computer-aided Design",
  publisher	= "IEEE Computer Society Press",
  year		= "1999",
  pages		= "494--499"
}

@InProceedings{	  HLS00,
  author	= "J. Hu and J. Lygeros and S.S. Sastry",
  title		= "Towars a Theory of Stochastic Hybrid Systems",
  booktitle	= "HSCC 00: Hybrid Systems Computation and Control",
  series	= "Lecture Notes in Computer Science 1790",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "160--173"
}

@InCollection{	  HLW91,
  author	= "U. Holmer and K.G. Larsen and W. Yi",
  title		= "Deciding properties of regular real timed processes",
  booktitle	= "CAV 91: Computer-aided Verification",
  editor	= "K.G. Larsen and A. Skou",
  series	= "LNCS 575",
  publisher	= "Springer-Verlag",
  year		= "1991",
  pages		= "443--453"
}

@Article{	  HNSY94,
  author	= "T.A. Henzinger and X. Nicollin and J. Sifakis and S.
		  Yovine",
  title		= "Symbolic model checking for real-time systems",
  journal	= "Information and Computation",
  volume	= "111",
  number	= "2",
  year		= "1994",
  pages		= "193--244"
}

@PhDThesis{	  Ho95,
  author	= "P.-H. Ho",
  title		= "Automatic Analysis of Hybrid Systems",
  school	= "Cornell University",
  year		= "1995"
}

@Article{	  Hoare69,
  author	= "C.A.R. Hoare",
  title		= "An Axiomatic Basis for Computer Programming",
  journal	= "Communications of the {ACM}",
  volume	= 12,
  pages		= "576--580",
  year		= 1969
}

@Article{	  Hoare78,
  author	= "C.A.R. Hoare",
  title		= "Communicating sequential processes",
  journal	= "Communications of the ACM",
  volume	= "21",
  number	= "8",
  year		= "1978",
  pages		= "666--677"
}

@Book{		  Hoare85,
  author	= "C.A.R. Hoare",
  title		= "Communicating Sequential Processes",
  publisher	= "Prentice-Hall",
  year		= "1985"
}

@InProceedings{	  HOB,
  author	= {P. Lam and V. Kuncak and M.C. Rinard},
  title		= {Hob: A Tool for Verifying Data Structure Consistency},
  booktitle	= {CC 2005: Compiler Construction},
  series	= "LNCS 3443",
  publisher	= "Springer-Verlag",
  year		= { 2005 },
  pages		= {237--241}
}

@InProceedings{	  HoffmannWongToi92,
  author	= "G. Hoffmann and {Wong-Toi}, H.",
  title		= "The input-output control of real-time discrete-event
		  systems",
  booktitle	= "Proceedings of the 13th Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1992",
  pages		= "256--265"
}

@Article{	  HofKar66,
  author	= "A.J. Hoffman and R.M. Karp",
  title		= "On Nonterminating Stochastic Games",
  journal	= mansci,
  volume	= 12,
  number	= 5,
  mese		= jan,
  year		= 1966,
  pages		= "359--370",
  group		= "GT"
}

@Book{		  Holzmann91,
  author	= "G.J. Holzmann",
  title		= "Design and Validation of Computer Protocols",
  publisher	= "Prentice-Hall",
  year		= "1991"
}

@InProceedings{	  HolzmannSpin2000,
  author	= {G.J. Holzmann},
  title		= {Logic Verification of {ANSI-C} Code with {S}pin},
  booktitle	= "SPIN 00: SPIN Workshop",
  series	= "LNCS 1885",
  publisher	= "Springer",
  year		= {2000},
  pages		= {131-147}
}

@PhDThesis{	  Hooman91,
  author	= "J. Hooman",
  title		= "Specification and Compositional Verification of Real-time
		  Systems",
  school	= "Technische Universiteit Eindhoven",
  address	= "The Netherlands",
  year		= "1991"
}

@InCollection{	  Hooman92,
  author	= "J. Hooman",
  title		= "Compositional verification of real-time systems using
		  extended {Hoare} triples",
  booktitle	= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "LNCS 600",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "252--290"
}

@InCollection{	  HoomanWidom89,
  author	= "J. Hooman and J. Widom",
  title		= "A temporal-logic-based compositional proof system for
		  real-time message passing",
  booktitle	= "PARLE 89: Parallel Architectures and Languages Europe",
  editor	= "E. Odijk and M. Rem and J.-C. Syre",
  series	= "vol.~II, LNCS 366",
  publisher	= "Springer-Verlag",
  year		= "1989",
  pages		= "424--441"
}

@Book{		  HopcroftUllman79,
  author	= "J.E. Hopcroft and J.D. Ullman",
  title		= "Introduction to Automata Theory, Languages, and
		  Computation",
  publisher	= "Addison-Wesley Publishing Company",
  year		= "1979"
}

@Article{	  horwitz-toplas97,
  author	= {S. Horwitz},
  title		= {Precise flow-insensitive may-alias analysis is {NP}-hard},
  journal	= {ACM Trans. on Programming Languages and Systems},
  year		= 1997,
  volume	= {19(1)},
  pages		= {1-6},
  month		= {January}
}

@Article{	  Houdini,
  author	= "C. Flanagan and R. Joshi and K. R. M. Leino",
  title		= "Annotation inference for modular checkers",
  journal	= "Information Processing Letters",
  year		= "2001"
}

@InCollection{	  HoWongToi95,
  author	= "P.-H. Ho and {Wong-Toi}, H.",
  title		= "Automated analysis of an audio control protocol",
  booktitle	= "CAV 95: Computer-aided Verification",
  editor	= "P. Wolper",
  series	= "Lecture Notes in Computer Science 939",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "381--394"
}

@Article{	  HPS83,
  author	= "D. Harel and A. Pnueli and J. Stavi",
  title		= "Propositional dynamic logic of regular programs",
  journal	= "Journal of Computer and System Sciences",
  volume	= "26",
  number	= "2",
  year		= "1983",
  pages		= "222--243"
}

@InCollection{	  HQR99,
  author	= "T.A. Henzinger and S. Qadeer and S.K. Rajamani",
  title		= "Assume-guarantee refinement between different time scales",
  booktitle	= "CAV 99: Computer-aided Verification",
  editor	= "N. Halbwachs and D. Peled",
  series	= "Lecture Notes in Computer Science 1633",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "208--221"
}

@InCollection{	  HR,
  author	= "T.A. Henzinger and J.-F. Raskin",
  title		= "Robust undecidability of timed and hybrid systems",
  booktitle	= "HSCC 00: Hybrid Systems---Computation and Control",
  editor	= "N.A. Lynch and B. Krogh",
  series	= "Lecture Notes in Computer Science 1790",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "145--159"
}

@Article{	  HR01,
  title		= "Monitoring {Java} Programs with {Java PathExplorer}",
  author	= "K. Havelund and G. Rosu",
  journal	= "Electronic Notes in Theoretical Computer Science",
  volume	= "55(2)",
  year		= 2001
}

@InProceedings{	  HR02,
  title		= "Synthesizing Monitors for Safety Properties",
  author	= "K. Havelund and G. Rosu",
  booktitle	= "TACAS 02: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  series	= "Lecture Notes in Computer Science 2280",
  pages		= "342-356",
  publisher	= "Springer",
  year		= "2002"
}

@Article{	  HRB90,
  author	= "S. Horwitz and T. Reps and D. Binkley",
  title		= "Interprocedural slicing using dependence graphs",
  journal	= "ACM TOPLAS",
  volume	= 12,
  pages		= "26--61",
  year		= 1990
}

@InProceedings{	  HRP94,
  author	= "N. Halbwachs and P. Raymond and Y.-E. Proy",
  title		= "Verification of linear hybrid systems by means of convex
		  approximation",
  booktitle	= "SAS 94: Static Analysis Symposium",
  editor	= "B. {LeCharlier}",
  series	= "LNCS 864",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "223--237"
}

@InCollection{	  HS92pACHH,
  author	= "R. Alur and C. Courcoubetis and T.A. Henzinger and P.-H.
		  Ho",
  title		= "Hybrid automata: an algorithmic approach to the
		  specification and verification of hybrid systems",
  booktitle	= "Hybrid Systems I",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "Lecture Notes in Computer Science 736",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "209--229"
}

@InCollection{	  HS92pHMP,
  author	= "T.A. Henzinger and Z. Manna and A. Pnueli",
  title		= "Towards refining temporal specifications into hybrid
		  systems",
  booktitle	= "Hybrid Systems I",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "Lecture Notes in Computer Science 736",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "60--76"
}

@TechReport{	  HS94HK,
  author	= "T.A. Henzinger and P.W. Kopke",
  title		= "Undecidability results for hybrid systems",
  note		= "Presented at the Workshop on Hybrid Systems and Autonomous
		  Control (Ithaca, NY)",
  institution	= "Cornell University",
  number	= "CSD-TR-95-1483",
  year		= "1994"
}

@Unpublished{	  HS94HPV,
  author	= "T.A. Henzinger and A. Puri and P. Varaiya",
  title		= "Clock transformation of hybrid automata with rectangular
		  differential inclusions",
  note		= "Presented at the Workshop on Hybrid Systems and Autonomous
		  Control (Ithaca, NY)",
  year		= "1994"
}

@InCollection{	  HS94p1,
  author	= "T.A. Henzinger and P.-H. Ho",
  title		= "{\sc {H}y{T}ech}: {T}he {C}ornell {H}ybrid {T}echnology
		  {T}ool",
  booktitle	= "Hybrid Systems II",
  editor	= "P. Antsaklis and A. Nerode and W. Kohn and S. Sastry",
  series	= "Lecture Notes in Computer Science 999",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "265--293"
}

@InCollection{	  HS94p2,
  author	= "T.A. Henzinger and P.-H. Ho",
  title		= "A note on abstract-interpretation strategies for hybrid
		  automata",
  booktitle	= "Hybrid Systems II",
  editor	= "P. Antsaklis and A. Nerode and W. Kohn and S. Sastry",
  series	= "Lecture Notes in Computer Science 999",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "252--264"
}

@InCollection{	  HS95,
  author	= "T.A. Henzinger and H. Wong-Toi",
  title		= "Linear phase-portrait approximations for nonlinear hybrid
		  systems",
  booktitle	= "Hybrid Systems III",
  editor	= "R. Alur and T.A. Henzinger and E.D. Sontag",
  series	= "Lecture Notes in Computer Science 1066",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "377--388"
}

@InCollection{	  HSCC00HHMW,
  author	= "T.A. Henzinger and B. Horowitz and R. Majumdar and H.
		  {Wong-Toi}",
  title		= "Beyond {{\sc HyTech}}: hybrid systems analysis using
		  interval numerical methods",
  editor	= "N.A. Lynch and B. Krogh",
  booktitle	= "HSCC 00: Hybrid Systems---Computation and Control",
  series	= "Lecture Notes in Computer Science 1790",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "130--144"
}

@InCollection{	  HSCC00HR,
  author	= "T.A. Henzinger and J.-F. Raskin",
  title		= "Robust undecidability of timed and hybrid systems",
  booktitle	= "HSCC 00: Hybrid Systems---Computation and Control",
  editor	= "N.A. Lynch and B. Krogh",
  series	= "Lecture Notes in Computer Science 1790",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "145--159"
}

@InCollection{	  HSCC98,
  author	= "T.A. Henzinger and V. Rusu",
  title		= "Reachability Verification for Hybrid Automata",
  booktitle	= "HSCC 98: Hybrid Systems---Computation and Control",
  editor	= "T.A. Henzinger and S. Sastry",
  series	= "Lecture Notes in Computer Science 1386",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "190--204"
}

@InProceedings{	  HughesParetoSabry96,
  author	= "J. Hughes and L. Pareto and A. Sabry",
  title		= "Proving the Correctness of Reactive Systems using Sized
		  Types",
  booktitle	= "POPL",
  year		= 1996
}

@InCollection{	  Hungar93,
  author	= "H. Hungar",
  title		= "Combining model checking and theorem proving to verify
		  parallel processes",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "154--165"
}

@PhDThesis{	  hunt85,
  author	= "Warren Alva Hunt",
  title		= "FM8501: A Verified Microprocessor",
  school	= "University of Texas, Austin",
  year		= "1985"
}

@Article{	  HyTech,
  author	= "T.A. Henzinger and P.-H. Ho and H. Wong-Toi",
  title		= "{\sc {H}y{T}ech}: a model checker for hybrid systems",
  journal	= "Software Tools for Technology Transfer",
  volume	= "1",
  year		= "1997",
  pages		= "110--122"
}

@InCollection{	  ICALP02,
  author	= "F.Y.C. Mang and T.A. Henzinger and O. Kupferman and S.
		  Krishnan",
  title		= "The synthesis of uninitialized systems",
  booktitle	= "ICALP 02: Automata, Languages, and Programming",
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer-Verlag",
  year		= "2002",
  pages		= "???--???"
}

@InCollection{	  ICALP92,
  author	= "T.A. Henzinger and Z. Manna and A. Pnueli",
  title		= "What good are digital clocks?",
  booktitle	= "ICALP 92: Automata, Languages, and Programming",
  editor	= "W. Kuich",
  series	= "Lecture Notes in Computer Science 623",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "545--558"
}

@InCollection{	  ICALP95H,
  author	= "T.A. Henzinger",
  title		= "Hybrid automata with finite bisimulations",
  booktitle	= "ICALP 95: Automata, Languages, and Programming",
  editor	= "Z. F{\"u}l{\"o}p and F. G{\'e}cseg",
  series	= "Lecture Notes in Computer Science 944",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "324--335"
}

@InCollection{	  ICALP95HKW,
  author	= "T.A. Henzinger and P.W. Kopke and H. Wong-Toi",
  title		= "The expressive power of clocks",
  booktitle	= "ICALP 95: Automata, Languages, and Programming",
  editor	= "Z. F{\"u}l{\"o}p and F. G{\'e}cseg",
  series	= "Lecture Notes in Computer Science 944",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "417--428"
}

@InCollection{	  ICALP97,
  author	= "T.A. Henzinger and P.W. Kopke",
  title		= "Discrete-time control for rectangular hybrid automata",
  booktitle	= "ICALP 97: Automata, Languages, and Programming",
  editor	= "P. Degano and R. Gorrieri and A. Marchetti-Spaccamela",
  series	= "Lecture Notes in Computer Science 1256",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "582--593"
}

@Article{	  ICALP97j,
  author	= "T.A. Henzinger and P.W. Kopke",
  title		= "Discrete-time control for rectangular hybrid automata",
  journal	= "Theoretical Computer Science",
  volume	= "221",
  year		= "1999",
  pages		= "369--392"
}

@InCollection{	  ICALP98,
  author	= "T.A. Henzinger and J.-F. Raskin and P.-Y. Schobbens",
  title		= "The regular real-time languages",
  booktitle	= "ICALP 97: Automata, Languages, and Programming",
  editor	= "K.G. Larsen and S. Skyum and G. Winskel",
  series	= "Lecture Notes in Computer Science 1443",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "580--591"
}

@InProceedings{	  ICCAD00,
  author	= "T.A. Henzinger and S. Qadeer and S.K. Rajamani",
  title		= "Decomposing refinement proofs using assume-guarantee
		  reasoning",
  booktitle	= "Proceedings of the International Conference on
		  Computer-aided Design",
  publisher	= "IEEE Computer Society Press",
  year		= "2000",
  pages		= "245--252"
}

@InProceedings{	  ICCAD99,
  author	= "T.A. Henzinger and X. Liu and S. Qadeer and S.K. Rajamani",
  title		= "Formal specification and verification of a dataflow
		  processor array",
  booktitle	= "Proceedings of the International Conference on
		  Computer-aided Design",
  publisher	= "IEEE Computer Society Press",
  year		= "1999",
  pages		= "494--499"
}

@ARTICLE{Rushby98,
    author = {J. Rushby and S. Owre and N. Shankar},
    title = {Subtypes for Specifications: Predicate Subtyping in PVS},
    journal = {IEEE TSE},
    year = {1998},
}


@InCollection{	  ICS,
  author	= "J.-C. {Filli\^atre} and S. Owre and H. Ruess and N.
		  Shankar",
  title		= "{ICS}: Integrated canonizer and solver",
  booktitle	= "CAV 01: Computer-aided verification",
  series	= "LNCS",
  publisher	= "Springer",
  pages		= {???-???},
  year		= "2001"
}

@InProceedings{	  ICSE04BLAST,
  title		= { Generating Tests from Counterexamples},
  author	= {D. Beyer and A. J. Chlipala and T. A. Henzinger
		  and R. Jhala and R. Majumdar},
  booktitle	= {ICSE 04: Software Engineering},
  pages		= {326-335},
  year		= {2004}
}

@TechReport{	  IEA94,
  author	= "T.A. Henzinger and P.-H. Ho",
  title		= "Model-checking strategies for linear hybrid systems",
  note		= "Presented at the Seventh International Conference on
		  Industrial and Engineering Applications of Artificial
		  Intelligence and Expert Systems (Austin, TX)",
  institution	= "Cornell University",
  number	= "CSD-TR-94-1437",
  year		= "1994"
}

@Book{		  IEEE,
  title		= "IEEE Standard Dictionary of Electrical and Electronics
		  Terms",
  editor	= "F. Jay",
  edition	= "fourth",
  publisher	= "The Institute of Electrical and Electronics Engineers",
  address	= "Piscataway, New Jersey",
  year		= "1988"
}

@Article{	  IEEE00,
  author	= "R. Alur and T.A. Henzinger and G. Lafferriere and G.J.
		  Pappas",
  title		= "Discrete abstractions of hybrid systems",
  journal	= "Proceedings of the IEEE",
  volume	= "88",
  number	= "7",
  year		= "2000",
  pages		= "971--984"
}

@InProceedings{	  IeFiCe05,
  author	= {R. Ierusalimschy and L. H. de Figueiredo and W. Celes},
  title		= {The Implementation of Lua 5.0},
  booktitle	= {Proceedings of IX Brazilian Symposium on Programming
		  Languages},
  publisher	= {ACM},
  pages		= {63--75}
}

@InProceedings{	  IH01,
  author	= "S. Ishtiaq and P. O'Hearn",
  title		= "{BI} as an assertion language for mutable data structures",
  booktitle	= "POPL 01: Principles of Programming Languages",
  publisher	= "ACM",
  year		= "2001",
  pages		= "14-26"
}

@Article{	  Immerman81,
  author	= "N. Immerman",
  title		= "Number of quantifiers is better than number of tape cells",
  journal	= "Journal of Computer and System Sciences",
  volume	= "22",
  year		= "1981",
  pages		= "384--406"
}

@Article{	  IPL92,
  author	= "T.A. Henzinger",
  title		= "Sooner Is Safer Than Later",
  journal	= "Information Processing Letters",
  volume	= "43",
  number	= "3",
  year		= "1992",
  pages		= "135--141"
}

@InProceedings{	  Jackson00,
  author	= {Daniel Jackson},
  title		= {Enforcing Design Constraints with Object Logic.},
  booktitle	= {SAS},
  year		= {2000},
  pages		= {1-21},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  JacksonVaziri00,
  author	= "D. Jackson and M. Vaziri",
  title		= "Finding bugs with a constraint solver",
  booktitle	= "ISSTA 00: Software Testing and Analysis",
  publisher	= "ACM",
  year		= "2000",
  pages		= "14--25"
}

@InProceedings{	  jaffar06,
  author	= "Joxan Jaffar and Andrew Santosa and Razvan Voicu",
  title		= "A CLP Method for Compositional and Intermittent Predicate
		  Abstraction",
  booktitle	= "VMCAI 2006: Verification Model Checking and Abstract
		  Interpretation",
  publisher	= "Springer-Verlag",
  year		= "2006",
  pages		= "17--32"
}

@Article{	  JahanianMok86,
  author	= "F. Jahanian and A.K. Mok",
  title		= "Safety analysis of timing properties in real-time systems",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "SE-12",
  number	= "9",
  year		= "1986",
  pages		= "890--904"
}

@Article{	  JahanianMok87,
  author	= "F. Jahanian and A.K. Mok",
  title		= "A graph-theoretic approach for timing analysis and its
		  implementation",
  journal	= "IEEE Transactions on Computers",
  volume	= "C-36",
  number	= "8",
  year		= "1987",
  pages		= "961--975"
}

@InProceedings{	  JahanianStuart88,
  author	= "F. Jahanian and D.A. Stuart",
  title		= "A method for verifying properties of {M}odechart
		  specifications",
  booktitle	= "Proceedings of the Ninth Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1988",
  pages		= "12--21"
}

@InProceedings{	  Jasper94,
  author	= "R. Jasper and M. Brennan and K. Williamson and B. Currier
		  and D. Zimmerman",
  title		= "Test data generation and infeasible path analysis",
  booktitle	= "ISSTA 94: Software Testing and Analysis",
  publisher	= "ACM",
  year		= "1994",
  pages		= "95--107"
}

@Book{		  JAVA,
  title		= "The Java Language Specification",
  author	= "James Gosling and Willam Joy and Guy Steele Jr.",
  publisher	= "Addison-Wesley",
  year		= "1996"
}

@InProceedings{	  JavaMAC,
  author	= {Moonjoo Kim and Sampath Kannan and Insup Lee and Oleg
		  Sokolsky},
  title		= {Java-MaC: a Run-time Assurance Tool for Java},
  booktitle	= {Runtime Verification 01},
  year		= {2001},
  pages		= {XXX-XXX}
}

@PhDThesis{	  Jayasimha88,
  author	= "D.N. Jayasimha",
  title		= "Communication and Synchronization in Parallel Computation",
  school	= "University of Illinois at Urbana-Champaign",
  year		= "1988"
}

@InProceedings{	  JCIT90,
  author	= "T.A. Henzinger and Z. Manna and A. Pnueli",
  title		= "An interleaving model for real time",
  booktitle	= "Proceedings of the Fifth Jerusalem Conference on
		  Information Technology",
  publisher	= "IEEE Computer Society Press",
  year		= "1990",
  pages		= "717--730"
}

@InProceedings{	  jcrasher,
  author	= {Christoph Csallner and Yannis Smaragdakis},
  title		= {Check 'n' crash: combining static checking and testing.},
  booktitle	= {ICSE},
  year		= {2005},
  pages		= {422-431},
  ee		= {http://doi.acm.org/10.1145/1062533},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@TechReport{	  JeffFoster,
  author	= {J.S. Foster and T. Terauchi and A. Aiken},
  title		= {{Flow-Sensitive Type Qualifiers}},
  institution	= {University of California, Berkeley},
  year		= 2001,
  number	= {CSD-01-1162}
}


@InCollection{	  JhalaMcMillanCAV01,
  author	= "R. Jhala and K. L. McMillan",
  title		= "Microarchitecture Verification by Compositional Model
		  Checking",
  booktitle	= "CAV 01: Computer Aided Verification",
  series	= "LNCS 2102",
  publisher	= "Springer",
  year		= "2001",
  pages		= "396--410"
}

@InCollection{	  JM05,
  author	= "R. Jhala and K. L. McMillan",
  title		= "Interpolant-based transition relation approximation",
  booktitle	= "CAV 05",
  series	= "LNCS",
  publisher	= "Springer",
  year		= "2005",
  pages		= "39--51"
}

@InProceedings{	  JM05a,
  author	= {Ranjit Jhala and Rupak Majumdar},
  title		= {Path Slicing},
  booktitle	= "PLDI 05: Programming Language Design and Implementation",
  publisher	= "ACM",
  pages		= "38--47",
  year		= 2005
}

@InProceedings{	  jhalamcmillan06,
  author	= "R. Jhala and K.L. McMillan",
  title		= "A Practical and Complete Approach to Predicate Refinement",
  booktitle	= "TACAS 06",
  series	= "LNCS 2987",
  publisher	= "Springer-Verlag",
  year		= "2006",
  pages		= "298--312"
}

@unpublished{JMLQuantifiers,
   author = {G. T. Leavens and E. Poll and C. Clifton and Y. Cheon and C.
	Ruby and D. Cok and P. M{\"u}ller and J. Kiniry and P. Chalin and
	D. M. Zimmerman and W. Dietl},
   title = {{JML Reference Manual}},
   month = jun,
   year = {2008},
   note = {Available from \url{http://www.jmlspecs.org/}}
}

@Article{	  JML,
  author	= "L. Burdy and Y. Cheon and D.R. Cok and M.D. Ernst and J.
		  Kiniry and G.T. Leavens and K.R.M. Leino and E. Poll",
  title		= "An overview of {JML} tools and applications",
  journal	= "Electr. Notes Theor. Comput. Sci.",
  volume	= 80,
  year		= 2003
}

@InProceedings{	  jml00,
  author	= "Leavens, G.T. and Leino, K.R.M. and Poll, E. and Ruby, C.
		  and Jacobs, B.",
  title		= "{JML}: {N}otations and tools supporting detailed design in
		  {J}ava",
  booktitle	= {OOPSLA 00: Object-Oriented Programming, Systems,
		  Languages, and Applications},
  year		= "2000",
  pages		= "105--106",
  publisher	= "ACM"
}

@Book{		  JNI,
  title		= "The Java Native Interface: Programmer's Guide and
		  Specification",
  author	= "S. Liang",
  publisher	= "Addison-Wesley",
  year		= "1999"
}

@InProceedings{	  JohnsonW04,
  author	= {Robert Johnson and David Wagner},
  title		= {Finding User/Kernel Pointer Bugs with Type Inference.},
  booktitle	= {USENIX Security Symposium},
  year		= {2004},
  pages		= {119-134},
  ee		= {http://www.usenix.org/publications/library/proceedings/sec04/tech/johnson.html}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Jones,
  title		= "Tentative steps toward a development method for
		  interfering programs",
  author	= "C.B. Jones",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "5(4)",
  year		= 1983,
  pages		= "596--619"
}

@Article{	  Jones02,
  author	= {Robert B. Jones and Jens U. Skakkeb{\ae}k and David L.
		  Dill},
  title		= {Formal Verification of Out-of-Order Execution with
		  Incremental Flushing.},
  journal	= {Formal Methods in System Design},
  volume	= {20},
  number	= {2},
  year		= {2002},
  pages		= {139-158},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Jones83,
  title		= "Tentative steps toward a development method for
		  interfering programs",
  author	= "C.B. Jones",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "5(4)",
  year		= 1983,
  pages		= "596--619"
}

@InProceedings{	  JonPincusPC,
  author	= {J. Pincus},
  title		= {personal communication, {O}ctober 2000}
}

@InCollection{	  Jonsson91,
  author	= "B. Jonsson",
  title		= "Simulations between specifications of distributed systems",
  booktitle	= "CONCUR 91: Theories of Concurrency",
  editor	= "J.C.M. Baeten and J.F. Groote",
  series	= "LNCS 527",
  publisher	= "Springer-Verlag",
  year		= "1991",
  pages		= "346--360"
}

@InProceedings{	  JouSmol90,
  author	= "C.-C. Jou and S.A. Smolka",
  title		= "Equivalences, Congruences and Complete Axiomatizations for
		  Probabilistic Processes",
  booktitle	= "CONCUR 90: Concurrency Theory",
  series	= "Lecture Notes in Computer Science",
  volume	= 458,
  pages		= "367--383",
  publisher	= "Springer-Verlag",
  year		= 1990,
  summary	= "Studies trace, failure, ready, and bisimulation
		  equivalences of probabilistic systems. Propose PCCS for
		  communicating probabilistic processes."
}

@Article{	  junit,
  author	= "E. Gamma and K. Beck",
  title		= "{JUnit}: A cook's tour",
  journal	= "Java Report",
  year		= "1999",
  volume	= 4,
  number	= 5,
  pages		= "27--38"
}

@InProceedings{	  Jur00,
  author	= {Marcin Jurdzinski},
  title		= {Small Progress Measures for Solving Parity Games},
  booktitle	= {STACS 00: Theoretical Aspects of Computer Science},
  pages		= {290--301},
  year		= {2000},
  volume	= {1770},
  series	= {Lecture Notes in Computer Science},
  publisher	= {Springer-Verlag}
}

@Article{	  Jur98,
  author	= "M. Jurdzinski",
  title		= "Deciding the Winner in Parity Games is in {UP} $\cap$
		  co-{UP}",
  journal	= "Information Processing Letters",
  volume	= 68,
  number	= 3,
  pages		= "119-124",
  year		= 1998
}

@InProceedings{	  JW95,
  author	= "D. Janin and I. Walukiewicz",
  title		= "Automata for the modal $\mu$-calculus and related results",
  booktitle	= "Proc. 20th International Symp. on Mathematical Foundations
		  of Computer Science",
  pages		= "552-562",
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer-Verlag",
  year		= 1995
}

@InProceedings{	  JW96,
  author	= "D. Janin and I. Walukiewicz",
  title		= "On the expressive completeness of the propositional
		  $\mu$-calculus with respect to the monadic second order
		  logic",
  booktitle	= "Proc. 7th Conference on Concurrency Theory",
  series	= "Lecture Notes in Computer Science",
  volume	= "1119",
  pages		= "263--277",
  publisher	= "Springer-Verlag",
  year		= 1996
}

@InProceedings{	  Kahn74,
  author	= "G. Kahn",
  title		= "The semantics of a simple language for parallel
		  programming",
  booktitle	= "Information Processing 74: Proceedings of the Sixth IFIP
		  World Computer Congress",
  editor	= "J.L. Rosenfeld",
  publisher	= "Elsevier Science Publishers",
  year		= "1974",
  pages		= "471--475"
}

@PhDThesis{	  Kamp68,
  author	= "J.A.W. Kamp",
  title		= "Tense Logic and the Theory of Linear Order",
  school	= "University of California at Los Angeles",
  year		= "1968"
}

@Article{	  KanellakisSmolka90,
  author	= "P.C. Kanellakis and S.A. Smolka",
  title		= "{CCS} expressions, finite-state processes, and three
		  problems of equivalence",
  journal	= "Information and Computation",
  volume	= "86",
  year		= "1990",
  pages		= "43--68"
}

@InCollection{	  Kapur,
  author	= "J. Giesl and D. Kapur",
  title		= "Decidable Classes of Inductive Theorems",
  booktitle	= "IJCAR 2001: International Joint Conference on Automated
		  Reasoning",
  pages		= "469--484",
  year		= "2001",
  series	= "Lecture Notes in Computer Science 2083",
  publisher	= "Springer"
}

@Book{		  Kechris94,
  author	= "A.S. Kecrhis",
  title		= "Classical Descriptive Set Theory",
  publisher	= "Springer-Verlag",
  year		= "1994"
}

@Article{	  Keller76,
  author	= "R.M. Keller",
  title		= "Formal verification of parallel programs",
  journal	= "Communications of the ACM",
  volume	= "19",
  number	= "7",
  year		= "1976",
  pages		= "371--384"
}

@Book{		  Kelley55,
  author	= "J.L. Kelley",
  title		= "General Topology",
  publisher	= "Springer-Verlag",
  year		= "1955"
}

@Article{	  KF72,
  author	= {J.C. King and R.W. Floyd},
  title		= {An interpretation oriented theorem prover over integers},
  journal	= {Journal of Computer and System Sciences},
  year		= 1972,
  volume	= {6(4)},
  pages		= {305-323}
}

@article{Kfoury93,
 author = {A. J. Kfoury and J. Tiuryn and P. Urzyczyn},
 title = {Type reconstruction in the presence of polymorphic recursion},
 journal = {TOPLAS},
 volume = {15},
 number = {2},
 year = {1993},
 pages = {290--311},
 publisher = {ACM}
}


@InProceedings{	  Kiczales97,
  author	= {Gregor Kiczales and John Lamping and Anurag Mendhekar and
		  Chris Maeda and Cristina Videira Lopes and Jean-Marc
		  Loingtier and John Irwin},
  title		= {Aspect-Oriented Programming.},
  booktitle	= {ECOOP},
  year		= {1997},
  pages		= {220-242},
  ee		= {http://link.springer.de/link/service/series/0558/bibs/1241/12410220.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  King76,
  author	= {J.C. King},
  title		= {Symbolic Execution and Program Testing},
  journal	= "Communications of the ACM",
  year		= 1976,
  volume	= {19(7)},
  pages		= {385--394}
}

@Article{	  KM69,
  author	= "R.M. Karp and R.E. Miller",
  title		= "Parallel Program Schemata",
  journal	= "J. Comput. Syst. Sci.",
  volume	= "3",
  number	= "2",
  year		= "1969",
  pages		= "147--195"
}

@InCollection{	  KMOS95,
  author	= "R.P. Kurshan and M. Merritt and A. Orda and S.R. Sachs",
  title		= "Modeling asynchrony with a synchronous model",
  booktitle	= "CAV 95: Computer-aided Verification",
  editor	= "P. Wolper",
  series	= "LNCS 939",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "339--352"
}

@InProceedings{	  KMTV00,
  author	= "O. Kupferman and P. Madhusudan and P.S. Thiagarajan and
		  M.Y. Vardi",
  title		= "Open Systems in Reactive Environments: Control and
		  Synthesis",
  booktitle	= "Proc. 11th International Conference on Concurrency Theory",
  series	= "Lecture Notes in Computer Science",
  volume	= "1877",
  pages		= "92--107",
  publisher	= "Springer-Verlag",
  year		= 2000
}

@InProceedings{	  KN02,
  author	= "M.Z. Kwiatkowska and G. Norman",
  title		= "Verifying Randomized Byzantine Agreement",
  booktitle	= "FORTE 02: Formal Techniques for Networked and Distributed
		  Systems",
  pages		= "194--209",
  series	= "Lecture Notes in Computer Science 2529",
  publisher	= "Springer-Verlag",
  year		= "2002"
}

@InProceedings{	  KNP02,
  author	= "M.Z. Kwiatkowska and G. Norman and D. Parker",
  title		= "Probabilistic Symbolic Model Checking with {PRISM}: {A}
		  hybrid approach",
  booktitle	= "TACAS 02: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  pages		= "169--187",
  series	= "Lecture Notes in Computer Science 2280",
  publisher	= "Springer-Verlag",
  year		= "2002"
}

@InProceedings{	  KNS02,
  author	= "M.Z. Kwiatkowska and G. Norman and J. Sproston",
  title		= "Probabilistic Model Checking of the {IEEE} 802.11 Wireless
		  Local Area Network Protocol",
  booktitle	= "PAPM/PROBMIV 02: Process Algebra and Probabilistic
		  Methods, Performance Modeling and Verification",
  pages		= "169--187",
  series	= "Lecture Notes in Computer Science 2399",
  publisher	= "Springer-Verlag",
  year		= "2002"
}

@Book{		  Kopetz1997,
  author	= {H. Kopetz},
  title		= {Real-Time Systems: Design Principles for Distributed
		  Embedded Applications},
  publisher	= {Kluwer},
  year		= {1997}
}

@PhDThesis{	  Kopke96,
  author	= "P.W. Kopke",
  title		= "The Theory of Rectangular Hybrid Automata",
  school	= "Cornell University",
  year		= "1996"
}

@Article{	  Koymans90,
  author	= "R. Koymans",
  title		= "Specifying real-time properties with metric temporal
		  logic",
  journal	= "Real-time Systems",
  volume	= "2",
  number	= "4",
  year		= "1990",
  pages		= "255--299"
}

@InCollection{	  KoymansDeRoever85,
  author	= "R. Koymans and de Roever, W.-P.",
  title		= "Examples of a real-time temporal specification",
  booktitle	= "The Analysis of Concurrent Systems",
  editor	= "B.D. Denvir and W.T. Harwood and M.I. Jackson and M.J.
		  Wray",
  series	= "LNCS 207",
  publisher	= "Springer-Verlag",
  year		= "1985",
  pages		= "231--252"
}

@InProceedings{	  Kozen83,
  author	= "D. Kozen",
  title		= "A Probabilistic {PDL}",
  booktitle	= "STOC 83: Theory of Computing",
  year		= 1983,
  pages		= "291--297",
  summary	= "Gives a very nice dynamic logic to be used on Markovian
		  models - but the models are richer than this. In the end,
		  one gets a probabilistic model for programs but cannot
		  really use it for reliability or performance"
}

@Article{	  Kozen83mu,
  author	= "D. Kozen",
  title		= "Results on the propositional $\mu$-calculus",
  journal	= "Theoretical Computer Science",
  volume	= "27",
  number	= "3",
  year		= "1983",
  pages		= "333--354"
}

@InProceedings{	  KPB95,
  author	= "S.C. Krishnan and A. Puri and R.K. Brayton",
  title		= "Structural Complexity of $\omega$-Automata",
  booktitle	= "Symposium on Theoretical Aspects of Computer Science",
  series	= "Lecture Notes in Computer Science",
  volume	= 900,
  publisher	= "Springer-Verlag",
  year		= 1995
}

@InCollection{	  KPBV95,
  author	= "S.C. Krishnan and A. Puri and R.K. Brayton and P. Varaiya",
  title		= "The Rabin index and chain automata, with applications to
		  automata and games",
  booktitle	= "CAV 95: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 939",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "253--266"
}

@InCollection{	  KPSY93,
  author	= "Y. Kesten and A. Pnueli and J. Sifakis and S. Yovine",
  title		= "Integration graphs: a class of decidable hybrid systems",
  booktitle	= "Hybrid Systems",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "LNCS 736",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "179--208"
}

@InCollection{	  KR01,
  author	= "S. Kremer and J.-F. Raskin",
  title		= "A Game-Based Verification of Non-repudiation and Fair
		  Exchange Protocols",
  booktitle	= "CONCUR 01: Concurrency Theory",
  series	= "Lecture Notes in Computer Science 2154",
  publisher	= "Springer-Verlag",
  year		= "2001",
  pages		= "551--565"
}

@InProceedings{	  KR92,
  author	= "E. Kushilevitz and M.O. Rabin",
  title		= "Randomized Mutual Exclusion Algorithms Revisited",
  booktitle	= "PODC 92: Principles of Distributed Computing",
  pages		= "275--283",
  publisher	= "ACM Press",
  year		= "1992"
}

@Article{	  Kraj,
  author	= "J. Kraj\'{i}\u{c}ek",
  title		= "Interpolation theorems, lower bounds for proof systems,
		  and independence results for bounded arithmetic",
  journal	= "J. Symbolic Logic",
  volume	= 62,
  pages		= "457--486",
  year		= 1997
}

@InProceedings{	  Krishnamurthi02,
  author	= {Harry C. Li and Shriram Krishnamurthi and Kathi Fisler},
  title		= {Interfaces for Modular Feature Verification.},
  booktitle	= {ASE},
  year		= {2002},
  pages		= {195-204},
  ee		= {http://csdl.computer.org/comp/proceedings/ase/2002/1736/00/17360195abs.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  Krishnamurthi04,
  author	= {Colin Blundell and Kathi Fisler and Shriram Krishnamurthi
		  and Pascal Van Hentenryck},
  title		= {Parameterized Interfaces for Open System Verification of
		  Product Lines.},
  booktitle	= {ASE},
  year		= {2004},
  pages		= {258-267},
  ee		= {http://csdl.computer.org/comp/proceedings/ase/2004/2131/00/21310258abs.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}
@inproceedings{KroeningTACAS06,
  author    = {Daniel Kroening and
               Natasha Sharygina},
  title     = {Approximating Predicate Images for Bit-Vector Logic.},
  booktitle = {TACAS},
  year      = {2006},
  pages     = {242-256},
  ee        = {http://dx.doi.org/10.1007/11691372_16},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{JainKroening05,
  author    = {Himanshu Jain and
               Daniel Kroening and
               Natasha Sharygina and
               Edmund M. Clarke},
  title     = {Word level predicate abstraction and refinement for verifying
               RTL verilog.},
  booktitle = {DAC},
  year      = {2005},
  pages     = {445-450},
  ee        = {http://doi.acm.org/10.1145/1065579.1065697}
}

@article{bryantgermanvelev01,
  author    = {Randal E. Bryant and
               Steven M. German and
               Miroslav N. Velev},
  title     = {Processor verification using efficient reductions of the
               logic of uninterpreted functions to propositional logic.},
  journal   = {ACM Trans. Comput. Log.},
  volume    = {2},
  number    = {1},
  year      = {2001},
  pages     = {93-134},
  ee        = {http://doi.acm.org/10.1145/371282.371364},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{VelevBryant03,
  author    = {Miroslav N. Velev and
               Randal E. Bryant},
  title     = {Effective use of Boolean satisfiability procedures in the
               formal verification of superscalar and VLIW microprocessors.},
  journal   = {J. Symb. Comput.},
  volume    = {35},
  number    = {2},
  year      = {2003},
  pages     = {73-106},
  ee        = {http://dx.doi.org/10.1016/S0747-7171(02)00091-3},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  Kroening,
  author	= "D. Kroening and E. Clarke and K. Yorav",
  title		= "Behavioral consistency of {C} and {Verilog} programs using
		  bounded model checking",
  pages		= "368--371",
  booktitle	= "DAC 03: Design Automation Conference",
  publisher	= "ACM",
  year		= "2003"
}

@InCollection{	  kroening06,
  author	= "Georg Weissenbacher and Daniel Kroening",
  title		= "Abstraction Refinement for Counterexamples with Loops",
  booktitle	= "CAV 2006: Computer-Aided Verification",
  editor	= "T. Ball and R. Jones",
  series	= "LNCS",
  publisher	= "Springer-Verlag",
  year		= "2006",
  pages		= "XXX--YYY"
}

@InProceedings{	  KroeningCBMC,
  author	= {Edmund M. Clarke and Daniel Kroening and Natasha Sharygina
		  and Karen Yorav},
  title		= {SATABS: SAT-Based Predicate Abstraction for ANSI-C.},
  booktitle	= {TACAS},
  year		= {2005},
  pages		= {570-574},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3440{\&}spage=570}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{KroeningFiniteMaps,
  author = "Daniel Kr{\"o}ning and Philipp R{\"u}mmer and Georg Weissenbacher",
  title = "A Proposal for Theory of Finite Sets, Lists, and Maps for the SMT-Lib Standard",
  booktitle = "SMT",
  year = "2009"
}

@InProceedings{	  kruger05,
  author	= {Russell A. McClure and Ingolf H. Kr{\"u}ger},
  title		= {SQL DOM: compile time checking of dynamic SQL
		  statements.},
  booktitle	= {ICSE},
  year		= {2005},
  pages		= {88-96},
  ee		= {http://doi.acm.org/10.1145/1062487},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  KSdR88,
  author	= "R. Koymans and R.K. Shyamasundar and de Roever, W.-P. and
		  R. Gerth and S. Arun-Kumar",
  title		= "Compositional semantics for real-time distributed
		  computing",
  journal	= "Information and Computation",
  volume	= "79",
  number	= "3",
  year		= "1988",
  pages		= "210--256"
}

@Article{	  Kumar81,
  author	= "P.R. Kumar and T.H. Shiau",
  title		= "Existence of Value and Randomized Strategies in Zero-sum
		  Discrete-Time Stochastic Dynamic Games",
  journal	= "{SIAM} J. Control and Optimization",
  volume	= 19,
  number	= 5,
  year		= 1981,
  pages		= "617--634",
  group		= "GT",
  summary	= "Analyzes two-player zero-sum games with randomized
		  strategies, over general state spaces, and shows existence
		  of values and of epsilon-optimal strategies for different
		  cases. In particular, it shows that sometimes there are
		  epsilon-optimal but not optimal strategies, equal to our
		  result of cone subset climit. It discusses also the
		  existence of series of optimal and epsilon-optimal
		  stationary strategies."
}

@INPROCEEDINGS{kuncak07,
  author = {Thomas Wies and Viktor Kuncak and Karen Zee and
A. Podelski and M. Rinard},
  title = {Verifying Complex Properties using Symbolic Shape Analysis},
  booktitle = {Workshop on Heap Abstraction and Verification 
(collocated with ETAPS)},
  year = 2007,
  localurl = {http://lara.epfl.ch/~kuncak/papers/WiesETAL07VerifyingComplexPropertiesSymbolicShapeAnalysis.pdf}
}

@inproceedings{LahiriCAV05,
  author    = {Shuvendu K. Lahiri and
               Thomas Ball and
               Byron Cook},
  title     = {Predicate Abstraction via Symbolic Decision Procedures.},
  booktitle = {CAV},
  year      = {2005},
  pages     = {24-38},
  ee        = {http://dx.doi.org/10.1007/11513988_5},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{LahiriCAV06,
  author    = {Shuvendu K. Lahiri and
               Robert Nieuwenhuis and
               Albert Oliveras},
  title     = {SMT Techniques for Fast Predicate Abstraction.},
  booktitle = {CAV},
  year      = {2006},
  pages     = {424-437},
  ee        = {http://dx.doi.org/10.1007/11817963_39},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@inproceedings{LahiriBryantIndexPA,
  author    = {Shuvendu K. Lahiri and
               Randal E. Bryant},
  title     = {Indexed Predicate Discovery for Unbounded System Verification.},
  booktitle = {CAV},
  year      = {2004},
  pages     = {135-147},
  ee        = {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3114{\&}spage=135},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{kuncak08,
  author    = {K. Zee and
               V. Kuncak and
               M. C. Rinard},
  title     = {Full functional verification of linked data structures},
  booktitle = {PLDI},
  year      = {2008},
  pages     = {349-361}
}


@inproceedings{LahiriQadeer08,
  author    = {S. K. Lahiri and
               S. Qadeer},
  title     = {Back to the future: revisiting precise program verification
               using SMT solvers},
  booktitle = {POPL},
  year      = {2008}
}

@inproceedings{LahiriQadeer06,
  author    = {Shuvendu K. Lahiri and
               Shaz Qadeer},
  title     = {Verifying properties of well-founded linked lists.},
  booktitle = {POPL},
  year      = {2006},
  pages     = {115-126},
  ee        = {http://doi.acm.org/10.1145/1111037.1111048},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Reps93,
  author    = {Thomas W. Reps},
  title     = {Demand Interprocedural Program Analysis Using Logic Databases.},
  booktitle = {Workshop on Programming with Logic Databases},
  year      = {1993},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Lerner05,
  author    = {Sorin Lerner and
               Todd D. Millstein and
               Erika Rice and
               Craig Chambers},
  title     = {Automated soundness proofs for dataflow analyses and transformations
               via local rules.},
  booktitle = {POPL},
  year      = {2005},
  pages     = {364-377},
  ee        = {http://doi.acm.org/10.1145/1040305.1040335},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}



@inproceedings{Whaley04,
  author    = {John Whaley and
               Monica S. Lam},
  title     = {Cloning-based context-sensitive pointer alias analysis using
               binary decision diagrams.},
  booktitle = {PLDI},
  year      = {2004},
  pages     = {131-144},
  ee        = {http://doi.acm.org/10.1145/996841.996859},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{RakamaricTACAS07,
  author    = {Shaunak Chatterjee and Shuvendu Lahiri and  Shaz Qadeer and Zvonimir Rakamaric},
  title     = {A Reachability Predicate for Analyzing Low-Level Software},
  booktitle = {TACAS},
  year      = {2007},
  pages     = {(to appear)}
}

@inproceedings{RakamaricVMCAI07,
  author    = {Z. Rakamaric and J. D. Bingham and A. J. Hu},
  title     = {An Inference-Rule-Based Decision Procedure for Verification of 
               Heap-Manipulating Programs with Mutable Data and Cyclic Data Structures},
  booktitle = {VMCAI},
  year      = {2007},
  pages     = {}
}

@inproceedings{RakamaricVMCAI06,
  author    = {J. D. Bingham and Z. Rakamaric},
  title     = {A Logic and Decision Procedure for Predicate Abstraction
               of Heap-Manipulating Programs.},
  booktitle = {VMCAI},
  year      = {2006},
  pages     = {207-221},
  ee        = {http://dx.doi.org/10.1007/11609773_14},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@article{Knowles10,
  author    = {K.W. Knowles and
               C. Flanagan},
  title     = {Hybrid type checking},
  journal   = {ACM TOPLAS},
  year      = {2010},
  ee        = {http://doi.acm.org/10.1145/1667048.1667051},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{    Knowles07,
  title		 = "Type Reconstruction for General Refinement Types",
  author	 = "K. Knowles and C. Flanagan",
  booktitle	 = "ESOP",
  year		 = 2007,
  url		 = "http://kenn.frap.net/publications/knowles-flanagan.esop.07.type.pdf"
}

@TechReport{	  Kuncak,
  author	= "P. Lam and V. Kuncak and M. Rinard",
  title		= "On Modular Pluggable Analyses Using Set Interfaces",
  number	= "TR 933",
  institution	= "MIT Computer Science and Artificial Intelligence
		  Laboratory",
  year		= "2003"
}

@INPROCEEDINGS{KuncakSYMBOLIC,
  author = {Charles Bouillaguet and Viktor Kuncak and Thomas Wies and Karen Zee and Martin Rinard},
  title = {Using First-Order Theorem Provers in the {J}ahob Data Structure Verification System},
  booktitle = {Verification, Model Checking and Abstract Interpretation},
  year = 2007,
  month = {November}
}
@InCollection{	  KuncakFS,
  author	= "K. Arkoudas and K. Zee and V. Kuncak and M. Rinard",
  title		= "Verifying a File System Implementation",
  booktitle	= "ICFEM 04: International Conference on Formal Engineering
		  Methods",
  publisher	= "Springer",
  series	= "LNCS 3308",
  year		= 2004
}

@InProceedings{	  KuncakHob05,
  author	= {P. Lam and V. Kuncak and M. C. Rinard},
  title		= {Hob: A Tool for Verifying Data Structure Consistency.},
  booktitle	= {CC},
  year		= {2005},
  pages		= {237-241},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3443{\&}spage=237}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@PhDThesis{	  Kupferman95,
  author	= "O. Kupferman",
  title		= "Model Checking for Branching-time Temporal Logics",
  school	= "The Technion",
  year		= "1995"
}

@InCollection{	  KupfermanVardi99,
  author	= "O. Kupferman and M.Y. Vardi",
  title		= "Robust satisfaction",
  booktitle	= "CONCUR 99: Concurrency Theory",
  editor	= "J.C.M. Baeten and S. Mauw",
  series	= "Lecture Notes in Computer Science 1664",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "383--398"
}

@InProceedings{	  Kur94b,
  author	= "R.P. Kurshan",
  title		= "The Complexity of Verification",
  booktitle	= "Proc. 26th ACM Symp. on Theory of Computing",
  address	= "Montreal",
  pages		= "365--371",
  year		= "1994"
}

@Book{		  Kur98,
  author	= "R.P. Kurshan",
  title		= "FormalCheck User's Manual",
  year		= 1998,
  publisher	= {Cadence Design, Inc.}
}

@InCollection{	  Kurshan90,
  author	= "R.P. Kurshan",
  title		= "Analysis of discrete-event coordination",
  series	= "LNCS 430",
  publisher	= "Springer-Verlag",
  year		= "1990",
  pages		= "414--453"
}

@Book{		  Kurshan94,
  author	= "R.P. Kurshan",
  title		= "Computer-aided Verification of Coordinating Processes",
  publisher	= "Princeton University Press",
  year		= "1994"
}

@InCollection{	  KurshanLamport93,
  author	= "R.P. Kurshan and L. Lamport",
  title		= "Verification of a multiplier: 64 bits and beyond",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "166--179"
}

@InProceedings{	  KV00a,
  author	= "O. Kupferman and M.Y. Vardi",
  title		= "Synthesis with incomplete informatio",
  booktitle	= "Advances in Temporal Logic",
  pages		= "109--127",
  publisher	= "Kluwer Academic Publishers",
  month		= "January",
  year		= "2000"
}

@InProceedings{	  KV00b,
  author	= "O. Kupferman and M.Y. Vardi",
  title		= "$\mu$-calculus Synthesis",
  booktitle	= "Proc. 25th International Symp. on Mathematical Foundations
		  of Computer Science",
  series	= "Lecture Notes in Computer Science",
  volume	= "1893",
  pages		= "497--507",
  publisher	= "Springer-Verlag",
  year		= "2000"
}

@InProceedings{	  KV00c,
  author	= "O. Kupferman and M.Y. Vardi",
  title		= "An automata-theoretic approach to reasoning about
		  infinite-state systems",
  booktitle	= "Computer Aided Verification, Proc. 12th International
		  Conference",
  pages		= "36--52",
  series	= "Lecture Notes in Computer Science",
  volume	= "1855",
  publisher	= "Springer-Verlag",
  year		= "2000"
}

@Article{	  KV00d,
  author	= "O. Kupferman and M.Y. Vardi",
  title		= "An Automata-Theoretic Approach to Modular Model Checking",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= 22,
  pages		= "87-128",
  year		= "2000"
}

@InProceedings{	  KV03,
  author	= "O. Kupferman and M.Y. Vardi",
  title		= "Safraless decision procedures",
  booktitle	= "FOCS 03: Foundations of Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "2003"
}

@InProceedings{	  KVdR83,
  author	= "R. Koymans and J. Vytopil and de Roever, W.-P.",
  title		= "Real-time programming and asynchronous message passing",
  booktitle	= "Proceedings of the Second Annual Symposium on Principles
		  of Distributed Computing",
  publisher	= "ACM Press",
  year		= "1983",
  pages		= "187--197"
}

@Article{	  KVW00,
  author	= "O. Kupferman and M.Y. Vardi and P. Wolper",
  title		= "An Automata-Theoretic Approach to Branching-Time Model
		  Checking",
  journal	= "Journal of the ACM",
  volume	= 47,
  number	= 2,
  pages		= "312-360",
  month		= "March",
  year		= "2000"
}

@Article{	  KVW01,
  author	= "O. Kupferman and M.Y. Vardi and P. Wolper",
  title		= "Module Checking",
  journal	= "Information and Computation",
  volume	= 164,
  pages		= "322-344",
  year		= "2001"
}

@Article{	  Kwiat89,
  author	= "M. Kwiatkowska",
  title		= "Survey of Fairness Notions",
  journal	= "Information and Software Technology",
  volume	= 31,
  number	= 7,
  pages		= "371--386",
  year		= 1989
}

@InProceedings{	  Kwiatkowska03,
  author	= "M. Kwiatkowska",
  title		= "Model Checking for Probability and Time: From Theory to
		  Practice",
  booktitle	= "LICS 03: Logic in Computer Science",
  pages		= "351--360",
  publisher	= "IEEE Press",
  year		= "2003"
}

@InProceedings{	  Lackwit,
  author	= "R. O'Callahan and D. Jackson",
  title		= "Lackwit: A Program-Understanding Tool Based on Type
		  Inference",
  booktitle	= {ICSE},
  publisher	= {ACM/IEEE},
  pages		= {338-348},
  year		= "1997"
}

@InProceedings{	  Lahiri03,
  author	= {Shuvendu K. Lahiri and Randal E. Bryant},
  title		= {Deductive Verification of Advanced Out-of-Order
		  Microprocessors.},
  booktitle	= {CAV},
  year		= {2003},
  pages		= {341-353},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=2725{\&}spage=341}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  LahiriBryantCook03,
  author	= {Shuvendu K. Lahiri and Randal E. Bryant and Byron Cook},
  title		= {A Symbolic Approach to Predicate Abstraction.},
  booktitle	= {CAV},
  year		= {2003},
  pages		= {141-153},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=2725{\&}spage=141}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  LaLuz03,
  title		= "Energy-Conscious Memory Allocation and Deallocation for
		  Pointer-Intensive Applications",
  author	= "V. De La Luz and M. Kandemir and G. Chen and I. Kolcu",
  booktitle	= "EMSOFT 03: Embedded Software",
  series	= "Lecture Notes in Computer Science",
  pages		= "156--172",
  publisher	= "Springer",
  year		= "2003"
}

@Article{	  Lamport74,
  author	= "L.~Lamport",
  title		= "A new solution of Dijkstra's concurrent programming
		  problem",
  journal	= "Communications of the ACM",
  volume	= "17",
  pages		= "453--455",
  year		= "1974"
}

@Article{	  Lamport77,
  author	= "L. Lamport",
  title		= "Proving the correctness of multiprocess programs",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "SE-3",
  number	= "2",
  year		= "1977",
  pages		= "125-143"
}

@InProceedings{	  Lamport80,
  author	= "L. Lamport",
  title		= "Sometimes is sometimes ``Not never'' - on the temporal
		  logic of programs",
  year		= "1980",
  booktitle	= "POPL 80: {ACM} Symp. on Principles of Programming
		  Languages",
  pages		= "174-185",
  publisher	= "ACM Press"
}

@InProceedings{	  Lamport83ifip,
  author	= "L. Lamport",
  title		= "What good is temporal logic?",
  booktitle	= "Information Processing 83: Proceedings of the Ninth IFIP
		  World Computer Congress",
  editor	= "R.E.A. Mason",
  publisher	= "Elsevier Science Publishers",
  year		= "1983",
  pages		= "657--668"
}

@Article{	  Lamport83toplas,
  author	= "L. Lamport",
  title		= "Specifying concurrent program modules",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "5",
  number	= "2",
  year		= "1983",
  pages		= "190--222"
}

@Article{	  Lamport87,
  author	= "L. Lamport",
  title		= "A fast mutual exclusion algorithm",
  journal	= "ACM Transactions on Computer Systems",
  volume	= "5",
  number	= "1",
  year		= "1987",
  pages		= "1--11"
}

@Article{	  Lamport94,
  author	= "L. Lamport",
  title		= "The {T}emporal {L}ogic of {A}ctions",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "16",
  number	= "3",
  year		= "1994",
  pages		= "872--923"
}

@InProceedings{	  landi:93,
  author	= "W. Landi and B. G. Ryder and S. Zhang",
  title		= "Interprocedural Side Effect Analysis With Pointer
		  Aliasing",
  booktitle	= {PLDI 93: Programming Language Design and Implementation},
  publisher	= {ACM},
  pages		= "56--67",
  year		= 1993
}

@InProceedings{	  Larsen,
  title		= "As Cheap as Possible: Efficient Cost-Optimal Reachability
		  for Priced Timed Automata",
  author	= "K.G. Larsen and G. Behrmann and E. Brinksma and A. Fehnker
		  and T. Hune and P. Pettersson and J. Romijn",
  booktitle	= "CAV 2001: Computer-Aided Verification",
  series	= "Lecture Notes in Computer Science",
  pages		= "493--505",
  publisher	= "Springer",
  year		= "2001"
}

@InProceedings{	  Larsen03,
  author	= "K.G. Larsen",
  title		= "Resource-efficient scheduling for real time systems",
  booktitle	= "EMSOFT 03: Embedded Software",
  series	= "Lecture Notes in Computer Science",
  pages		= "16--19",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  LBCJM94,
  author	= "D. Long and A. Brown and E. Clarke and S. Jha and W.
		  Marrero",
  title		= "An improved algorithm for the evaluation of fixpoint
		  expressions",
  booktitle	= "CAV 94: Computer-Aided Verification",
  series	= "Lecture Notes in Computer Science",
  volume	= "818",
  year		= "1994",
  publisher	= "Springer-Verlag",
  pages		= "338--350"
}

@InProceedings{	  LeeDavidson92,
  author	= "I. Lee and S. Davidson",
  title		= "An overview of an integrated toolset under development for
		  the {CSR} paradigm",
  booktitle	= "Proceedings of the Workshop on Responsive Computer
		  Systems",
  year		= "1992"
}

@InProceedings{	  LeeYannakakis92,
  author	= "D. Lee and M. Yannakakis",
  title		= "Online minimization of transition systems",
  booktitle	= "Proceedings of the 24th Annual Symposium on Theory of
		  Computing",
  publisher	= "ACM Press",
  year		= "1992",
  pages		= "264--274"
}

@Article{	  Lemmon66,
  author	= "E.J. Lemmon",
  title		= "Algebraic semantics for modal logics",
  journal	= "The Journal of Symbolic Logic",
  volume	= "31",
  number	= "2",
  year		= "1966",
  pages		= "191--218"
}

@Article{	  lengauertarjan79,
  author	= {Thomas Lengauer and Robert E. Tarjan},
  title		= {A fast algorithm for finding dominators in a flowgraph},
  journal	= {ACM Trans. on Programming Languages and Systems},
  year		= 1979,
  volume	= {1(1)},
  pages		= {121-141},
  month		= {July}
}

@Book{		  Leveson95,
  author	= "Nancy Leveson",
  title		= "System safety and computers",
  publisher	= "Addison-Wesley",
  year		= "1995"
}

@InCollection{	  LevesonStolzy85,
  author	= "N. Leveson and J. Stolzy",
  title		= "Analyzing safety and fault tolerance using timed {P}etri
		  Nets",
  booktitle	= "Proceedings of International Joint Conference on Theory
		  and Practice of Software Development",
  series	= "LNCS 186",
  publisher	= "Springer-Verlag",
  year		= "1985",
  pages		= "339--355"
}

@InProceedings{	  Lewis90,
  author	= "H.R. Lewis",
  title		= "A logic of concrete time intervals",
  booktitle	= "Proceedings of the Fifth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1990",
  pages		= "380--389"
}

@Article{	  LGSBB95,
  author	= "C. Loiseauxc and S. Graf and J. Sifakis and A. Bouajjani
		  and S. Bensalem",
  year		= "1995",
  title		= "Property-preserving abstractions for the verification of
		  concurrent systems",
  journal	= "Formal Methods in System Design",
  volume	= "6",
  pages		= "11--44"
}

@InProceedings{	  LichtensteinPnueli85,
  author	= "O. Lichtenstein and A. Pnueli",
  title		= "Checking that finite-state concurrent programs satisfy
		  their linear specification",
  booktitle	= "Proceedings of the 12th Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1985",
  pages		= "97--107"
}

@InProceedings{	  LICS00,
  author	= "L. de Alfaro and T.A. Henzinger",
  title		= "Concurrent omega-regular games",
  booktitle	= "Proceedings of the 15th Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "2000",
  pages		= "141--154"
}

@InProceedings{	  LICS90,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Real-time logics: complexity and expressiveness",
  booktitle	= "Proceedings of the Fifth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1990",
  pages		= "390--401"
}

@Article{	  LICS90j,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Real-time logics: complexity and expressiveness",
  journal	= "Information and Computation",
  volume	= "104",
  number	= "1",
  year		= "1993",
  pages		= "35--77"
}

@InProceedings{	  LICS92,
  author	= "T.A. Henzinger and X. Nicollin and J. Sifakis and S.
		  Yovine",
  title		= "Symbolic model checking for real-time systems",
  booktitle	= "Proceedings of the Seventh Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1992",
  pages		= "394--406"
}

@Article{	  LICS92j,
  author	= "T.A. Henzinger and X. Nicollin and J. Sifakis and S.
		  Yovine",
  title		= "Symbolic model checking for real-time systems",
  journal	= "Information and Computation",
  volume	= "111",
  number	= "2",
  year		= "1994",
  pages		= "193--244"
}

@InProceedings{	  LICS94,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Finitary fairness",
  booktitle	= "Proceedings of the Ninth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1994",
  pages		= "52--61"
}

@InProceedings{	  LICS96AH,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Reactive modules",
  booktitle	= "Proceedings of the 11th Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1996",
  pages		= "207--218"
}

@Article{	  LICS96AHj,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Reactive modules",
  journal	= "Formal Methods in System Design",
  volume	= "15",
  number	= "1",
  year		= "1999",
  pages		= "7--48"
}

@InProceedings{	  LICS96H,
  author	= "T.A. Henzinger",
  title		= "The theory of hybrid automata",
  booktitle	= "Proceedings of the 11th Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1996",
  pages		= "278--292"
}

@InCollection{	  LinearTypes,
  author	= "P. Wadler",
  title		= "Linear types can change a world!",
  booktitle	= "Programming Concetps and Methods",
  year		= 1990
}

@Book{		  LinProg,
  author	= "A. Schrijver",
  title		= "Theory of Linear and Integer Programming",
  year		= 1987,
  publisher	= "J. Wiley \& Sons"
}

@Misc{collatzWiki,
  title		= "{Collatz Conjecture}",
  note		= "\url{http://en.wikipedia.org/wiki/Collatz\_conjecture}"
}

@Misc{HaskellWiki,
  title		= "{HaskellWiki}",
  note		= "\url{http://www.haskell.org/haskellwiki}"
}


@Misc{WNFWiki,
  title		= "{Weak Head Normal Form}",
  note		= "\url{http://www.haskell.org/haskellwiki/Weak\_head\_normal\_form}"
}

@Misc{StrictnessLimitationsWiki,
  title		= "{Limitations of Strictness Analysis}",
  note		= "\url{http://www.haskell.org/haskellwiki/Performance/Strictness}"
}

@Misc{		  linussparse03,
  author	= "Linus Torvalds",
  title		= "Linus \& the Lunatics, Part {I}",
  howpublished	= "Transcript by Doc Searls of a talk during the Linux Lunacy Geek Cruise",
  year		= 2003,
  month		= nov,
  note		= "\url{http://www.linuxjournal.com/comment/reply/7272}, as
		  of November 2004"
}

@Article{	  LiskovWing94,
  title		= "A Behavioral Notion of Subtyping",
  author	= "Barbara Liskov and Jeannette Wing",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "16(6)",
  year		= 1994,
  pages		= "1811--1841"
}

@Article{	  LiuLayland1973,
  author	= {C. Liu and J. Layland},
  title		= {Scheduling Algorithms for Multiprogramming in a
		  Hard-Real-Time Environment},
  journal	= {Journal of the ACM},
  year		= {1973},
  volume	= {20},
  number	= {1}
}

@InProceedings{	  Livshits03,
  author	= {V. Benjamin Livshits and Monica S. Lam},
  title		= {Tracking pointers with path and context sensitivity for
		  bug detection in C programs.},
  booktitle	= {ESEC / SIGSOFT FSE},
  year		= {2003},
  pages		= {317-326},
  ee		= {http://doi.acm.org/10.1145/940114},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Book{		  LNCS1066,
  title		= "Hybrid Systems III: Verification and Control",
  editor	= "R. Alur and T.A. Henzinger and E.D. Sontag",
  series	= "Lecture Notes in Computer Science 1066",
  publisher	= "Springer-Verlag",
  year		= "1996",
  note		= "Proceedings of the Third International Workshop"
}

@Book{		  LNCS1102,
  title		= "CAV 96: Computer-aided Verification",
  editor	= "R. Alur and T.A. Henzinger",
  series	= "Lecture Notes in Computer Science 1102",
  publisher	= "Springer-Verlag",
  year		= "1996",
  note		= "Proceedings of the Eighth International Conference"
}

@Book{		  LNCS1386,
  title		= "HSCC 98: Hybrid Systems---Computation and Control",
  editor	= "T.A. Henzinger and S. Sastry",
  series	= "Lecture Notes in Computer Science 1386",
  publisher	= "Springer-Verlag",
  year		= "1998",
  note		= "Proceedings of the First International Workshop"
}

@Book{		  LNCS354,
  title		= "Linear Time, Branching Time, and Partial Order in Logics
		  and Models for Concurrency",
  editor	= "de Bakker, J.W. and de Roever, W.-P. and G. Rozenberg",
  series	= "LNCS 354",
  publisher	= "Springer-Verlag",
  year		= "1988"
}

@Book{		  LNCS600,
  title		= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "LNCS 600",
  publisher	= "Springer-Verlag",
  year		= "1992"
}

@Book{		  LNCS736,
  title		= "Hybrid Systems I",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "LNCS 736",
  publisher	= "Springer-Verlag",
  year		= "1993"
}

@Book{		  LNCS999,
  title		= "Hybrid Systems II",
  editor	= "P. Antsaklis and A. Nerode and W. Kohn and S. Sastry",
  series	= "LNCS 999",
  publisher	= "Springer-Verlag",
  year		= "1995"
}

@Article{	  Loewe02,
  author	= "B. L{\"o}we",
  title		= "Playing with mixed strategies on infinite sets",
  journal	= "International Journal of Game Theory",
  volume	= "31",
  year		= "2002",
  pages		= "137--150"
}

@Article{	  LosieauxGraf95,
  author	= {C. Loiseaux and S. Graf and J. Sifakis and A. Bouajjani
		  and S. Bensalem},
  title		= {Property Preserving Abstractions for the Verification of
		  Concurrent Systems},
  journal	= {Formal Methods in System Design Volume},
  volume	= {6(1)},
  pages		= {11-44},
  year		= {1995}
}

@InCollection{	  LPS82,
  author	= "D. Lehman and A. Pnueli and J. Stavi",
  title		= "Impartiality, justice, and fairness: the ethics of
		  concurrent termination",
  booktitle	= "ICALP 82: Automata, Languages, and Programming",
  series	= "LNCS 115",
  publisher	= "Springer-Verlag",
  year		= "1982",
  pages		= "264--277"
}

@InProceedings{	  LPY95,
  author	= "K.G. Larsen and P. Pettersson and W. Yi",
  title		= "Compositional and symbolic model checking of real-time
		  systems",
  booktitle	= "Proceedings of the 16th Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1995",
  pages		= "76--87"
}

@InCollection{	  LPZ85,
  author	= "O. Lichtenstein and A. Pnueli and L.D. Zuck",
  title		= "The glory of the past",
  booktitle	= "Logics of Programs",
  editor	= "R. Parikh",
  series	= "LNCS 193",
  publisher	= "Springer-Verlag",
  year		= "1985",
  pages		= "196--218"
}

@InCollection{	  LSVW96,
  author	= "N.A. Lynch and R. Segala and F. Vaandrager and H.B.
		  Weinberg",
  title		= "Hybrid {I/O} {A}utomata",
  booktitle	= "Hybrid Systems III",
  editor	= "R. Alur and T.A. Henzinger and E.D. Sontag",
  series	= "LNCS 1066",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "496--510"
}

@Article{	  Lub84,
  author	= {B.D. Lubachevsky},
  title		= "An Approach to Automating the Verification of Compact
		  Parallel Coordination Programs {I}",
  journal	= "Acta Informatica",
  volume	= {21},
  pages		= {125--169},
  year		= {1984}
}


@inproceedings{ATS,
  author    = {S. Cui and
               K. Donnelly and
               H. Xi},
  title     = {ATS: A Language That Combines Programming with Theorem Proving},
  booktitle = {FroCos},
  year      = {2005},
  ee        = {http://dx.doi.org/10.1007/11559306_19}
}

@inproceedings{Chen05,
 author = {Chen, Chiyan and Xi, Hongwei},
 title = {Combining programming with theorem proving},
 booktitle = {Proceedings of the tenth ACM SIGPLAN international conference on Functional programming},
 series = {ICFP '05},
 year = {2005},
 isbn = {1-59593-064-7},
 location = {Tallinn, Estonia},
 pages = {66--77},
 numpages = {12},
 url = {http://doi.acm.org/10.1145/1086365.1086375},
 doi = {10.1145/1086365.1086375},
 acmid = {1086375},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {ATS, applied type system, dependent types, proof erasure, theorem proving},
} 


@TechReport{	  LX01,
  author	= "Edward A. Lee and Yuhong Xiong",
  title		= "System-level types for component-based design",
  institution	= "UC Berkeley",
  number	= "UCB/ERL M00/8",
  year		= "2000"
}

@Misc{		  Lynchalsoprob,
  author	= "N. Lynch",
  title		= "Proving Performance Properties (even Probabilistic Ones)",
  year		= 1994,
  summary	= "Surveys quickly work done in Lynch's group. Not suitable
		  as a basic reference"
}

@InProceedings{	  LynchAttiya90,
  author	= "N.A. Lynch and H. Attiya",
  title		= "Using mappings to prove timing properties",
  booktitle	= "Proceedings of the Ninth Annual Symposium on Principles of
		  Distributed Computing",
  publisher	= "ACM Press",
  year		= "1990",
  pages		= "265--280"
}

@InProceedings{	  LynchTuttle87,
  author	= "N.A. Lynch and M.R. Tuttle",
  title		= "Hierarchical correctness proofs for distributed
		  algorithms",
  booktitle	= "Proceedings of the Sixth Annual Symposium on Principles of
		  Distributed Computing",
  publisher	= "ACM Press",
  year		= "1987",
  pages		= "137--151"
}

@InCollection{	  LynchVaandrager92concur,
  author	= "N.A. Lynch and F. Vaandrager",
  title		= "Action transducers and timed automata",
  booktitle	= "CONCUR 92: Theories of Concurrency",
  editor	= "R.J. Cleaveland",
  series	= "LNCS 630",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "436-455"
}

@InCollection{	  LynchVaandrager92rex,
  author	= "N.A. Lynch and F. Vaandrager",
  title		= "Forward and backward simulations for timing-based systems",
  booktitle	= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "LNCS 600",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "397--446"
}

@Article{	  LynchVaandrager96,
  author	= "N.A. Lynch and F. Vaandrager",
  title		= "Forward and Backward Simulations, Part II: Timing-based
		  Systems",
  journal	= "Information and Computation",
  volume	= "128",
  number	= "1",
  year		= "1996",
  pages		= "1--25"
}

@PhDThesis{	  Ma04,
  author	= "D. Ma",
  title		= "Bounding the stack size of interrupt-driven programs",
  school	= "Purdue University",
  year		= 2004
}

@InCollection{	  MalerPnueli93,
  author	= "O. Maler and A. Pnueli",
  title		= "Reachability analysis of planar multi-linear systems",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "194--209"
}

@InCollection{	  MalerPnueli95,
  author	= "O. Maler and A. Pnueli",
  title		= "Timing analysis of asynchronous circuits using timed
		  automata",
  booktitle	= "CHARME 95",
  editor	= "P.E. Camurati and H. Eveking",
  series	= "Lecture Notes in Computer Science 987",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "189--205"
}

@InProceedings{	  Malik,
  author	= "M.W. Moskewicz and C.F. Madigan and Y. Zhao and L. Zhang
		  and S. Malik",
  title		= "Chaff: Engineering an Efficient {SAT} Solver",
  booktitle	= "DAC 01: Design Automation Conference",
  pages		= "530--535",
  year		= "2001"
}
@inproceedings{millstein06,
  author    = {B. Chin and
               S. Markstrum and
               T. D. Millstein and
               J. Palsberg},
  title     = {Inference of User-Defined Type Qualifiers and Qualifier
               Rules},
  booktitle = {ESOP},
  year      = {2006},
  pages     = {264-278}
}

@PhDThesis{	  fosterthesis,
  author	= "J.S. Foster",
  title		= "Type Qualifiers: Lightweight Specifications to Improve Software Quality",
  school	= "U.C. Berkeley",
  year		= "2002"
}

@PhDThesis{	  Mang02,
  author	= "F.Y.C. Mang",
  title		= "Games in Open Systems Verification and Synthesis",
  school	= "University of California, Berkeley",
  year		= "2002"
}

@inproceedings{DamsNamjoshi03,
  author    = {Dennis Dams and
               Kedar S. Namjoshi},
  title     = {Shape Analysis through Predicate Abstraction and Model Checking.},
  booktitle = {VMCAI},
  year      = {2003},
  pages     = {310-324},
  ee        = {http://link.springer.de/link/service/series/0558/bibs/2575/25750310.htm},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@inproceedings{Namjoshi03,
  author    = {Kedar S. Namjoshi},
  title     = {Lifting Temporal Proofs through Abstractions.},
  booktitle = {VMCAI},
  year      = {2003},
  pages     = {174-188},
  ee        = {http://link.springer.de/link/service/series/0558/bibs/2575/25750174.htm},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Balaban05,
  author    = {Ittai Balaban and
               Amir Pnueli and
               Lenore D. Zuck},
  title     = {Shape Analysis by Predicate Abstraction.},
  booktitle = {VMCAI},
  year      = {2005},
  pages     = {164-180},
  ee        = {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3385{\&}spage=164},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Sankaranarayanan05,
  author    = {S. Sankaranarayanan and
               H.B. Sipma and
               Z. Manna},
  title     = {Scalable Analysis of Linear Systems Using Mathematical Programming.},
  booktitle = {VMCAI},
  year      = {2005},
}

@InProceedings{	  Manna05,
  author	= {Ben D'Angelo and Sriram Sankaranarayanan and C{\'e}sar
		  S{\'a}nchez and Will Robinson and Bernd Finkbeiner and
		  Henny B. Sipma and Sandeep Mehrotra and Zohar Manna},
  title		= {LOLA: Runtime Monitoring of Synchronous Systems.},
  booktitle	= {TIME},
  year		= {2005},
  pages		= {166-174},
  ee		= {http://dx.doi.org/10.1109/TIME.2005.26},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Manna69,
  author	= "Z. Manna",
  title		= "The correctness of programs",
  journal	= "Journal of Computer and Systems Sciences",
  volume	= "3(2)",
  pages		= "119-127",
  year		= "1969"
}

@Book{		  Manna72,
  author	= "Z. Manna",
  title		= "Mathematical Theory of Computation",
  publisher	= "McGraw-Hill",
  year		= "1972"
}

@Book{bradleybook,
  author	= {A. Bradley and Z. Manna},
  title		= {The Calculus of Computation: Decision Procedures With Application To Verification},
  publisher = {Springer-Verlag},
  year	    = {2007}
}

@InCollection{	  Manna94,
  author	= "Z. Manna",
  title		= "Beyond model checking",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "220--221"
}

@InCollection{	  MannaPnueli83:icalp,
  author	= "Z. Manna and A. Pnueli",
  title		= "Proving precedence properties: the temporal way",
  booktitle	= "ICALP 83: Automata, Languages, and Programming",
  editor	= "J. Diaz",
  series	= "LNCS 154",
  publisher	= "Springer-Verlag",
  year		= "1983",
  pages		= "491--512"
}

@InProceedings{	  MannaPnueli83:popl,
  author	= "Z. Manna and A. Pnueli",
  title		= "How to cook a temporal proof system for your pet language",
  booktitle	= "Proceedings of the Tenth Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1983",
  pages		= "141--154"
}

@Article{	  MannaPnueli84,
  author	= "Z. Manna and A. Pnueli",
  title		= "Adequate proof principles for invariance and liveness
		  properties of concurrent programs",
  journal	= "Science of Computer Programming",
  volume	= "4",
  number	= "3",
  year		= "1984",
  pages		= "257--289"
}

@InCollection{	  MannaPnueli89:icalp,
  author	= "Z. Manna and A. Pnueli",
  title		= "Completing the temporal picture",
  booktitle	= "ICALP 89: Automata, Languages, and Programming",
  editor	= "G. Ausiello and M. {Dezani-Ciancaglini} and Ronchi Della
		  Rocca, S.",
  series	= "LNCS 372",
  publisher	= "Springer-Verlag",
  year		= "1989",
  pages		= "534--558"
}

@InCollection{	  MannaPnueli89:rex,
  author	= "Z. Manna and A. Pnueli",
  title		= "The anchored version of the temporal framework",
  booktitle	= "Linear Time, Branching Time, and Partial Order in Logics
		  and Models for Concurrency",
  editor	= "de Bakker, J.W. and de Roever, W.-P. and G. Rozenberg",
  series	= "LNCS 354",
  publisher	= "Springer-Verlag",
  year		= "1989",
  pages		= "201--284"
}

@InProceedings{	  MannaPnueli90,
  author	= "Z. Manna and A. Pnueli",
  title		= "A hierarchy of temporal properties",
  booktitle	= "Proceedings of the Ninth Annual Symposium on Principles of
		  Distributed Computing",
  publisher	= "ACM Press",
  year		= "1990",
  pages		= "377--408"
}

@Book{		  MannaPnueli92,
  author	= "Z. Manna and A. Pnueli",
  title		= "The Temporal Logic of Reactive and Concurrent Systems:
		  Specification",
  publisher	= "Springer-Verlag",
  year		= "1992"
}

@Book{		  MannaPnueli92vol1,
  author	= "Z. Manna and A. Pnueli",
  title		= "The Temporal Logic of Reactive and Concurrent Systems:
		  Specification",
  publisher	= "Springer-Verlag",
  year		= "1992"
}

@Article{	  MannaPnueli93acta,
  author	= "Z. Manna and A. Pnueli",
  title		= "Models for reactivity",
  journal	= "Acta Informatica",
  volume	= "30",
  number	= "2",
  year		= "1993",
  pages		= "609--678"
}

@InCollection{	  MannaPnueli93hybrid,
  author	= "Z. Manna and A. Pnueli",
  title		= "Verifying hybrid systems",
  booktitle	= "Hybrid Systems",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "LNCS 736",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "4--35"
}

@Book{		  MannaPnueli95,
  author	= "Z. Manna and A. Pnueli",
  title		= "Temporal Verification of Reactive Systems: Safety",
  publisher	= "Springer-Verlag",
  year		= "1995"
}

@Article{	  MannaWolper84,
  author	= "Z. Manna and P. Wolper",
  title		= "Synthesis of communicating processes from temporal-logic
		  specifications",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "6",
  number	= "1",
  year		= "1984",
  pages		= "68--93"
}

@Unpublished{	  Mars,
  author	= "Mars Climate Orbiter Mishap Investigation Board",
  title		= "Phase I Report, 10 Nov. 1999",
  note		= "\url{ftp://ftp.hq.nasa.gov/pub/pao/reports/1999/MCO_report.pdf}"
		  
}

@Article{	  Martin75,
  author	= "D.A. Martin",
  title		= "{Borel} determinacy",
  journal	= "Annals of Mathematics",
  volume	= 102,
  pages		= "363--371",
  year		= 1975
}

@Article{	  Martin90,
  author	= "D.A. Martin",
  title		= "An extension of {Borel} determinacy",
  journal	= "Annals of Pure and Applied Logic",
  volume	= 49,
  pages		= "279--293",
  year		= 1990
}

@Article{	  Martin98,
  author	= "D.A. Martin",
  title		= "The determinacy of {Blackwell} games",
  journal	= "The Journal of Symbolic Logic",
  volume	= 63,
  number	= 4,
  pages		= "1565--1581",
  publisher	= "Association for Symbolic Logic",
  year		= 1998
}

@InCollection{	  Mazurkiewics89,
  author	= "A. Mazurkiewics",
  title		= "Basic notions of trace theory",
  booktitle	= "Linear Time, Branching Time, and Partial Order in Logics
		  and Models for Concurrency",
  editor	= "de Bakker, J.W. and de Roever, W.-P. and G. Rozenberg",
  series	= "LNCS 354",
  publisher	= "Springer-Verlag",
  year		= "1989",
  pages		= "285--363"
}

@Article{	  MC81,
  author	= "J. Misra and K.M. Chandy",
  title		= "Proofs of networks of processes",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "SE-7",
  number	= "4",
  pages		= "417--426",
  year		= "1981"
}

@Article{	  mciver01,
  author	= "A. {McIver} and C. Morgan",
  title		= "Demonic, angelic and unbounded probabilistic choices in
		  sequential programs",
  journal	= "Acta Informatica",
  volume	= "37",
  number	= "4/5",
  year		= "2001",
  pages		= "329--354"
}

@InProceedings{	  mciver98,
  author	= "A. {McIver}",
  title		= "Reasoning About Efficiency Within a Probabilitic
		  $\mu$-calculus",
  booktitle	= "Proceedings of {PROBMIV}",
  year		= 1998,
  note		= "Technical Report CSR-98-4, University of Birmingham,
		  School of Computer Science",
  pages		= "45--58"
}

@InCollection{	  McManisVaraiya94,
  author	= "J. McManis and P. Varaiya",
  title		= "Suspension automata: a decidable class of hybrid automata",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "105--117"
}

@Article{	  McMillan00,
  author	= "K.L. McMillan",
  title		= "A methodology for hardware verification using
		  compositional model checking",
  journal	= "Sci.\ Comput.\ Program.",
  volume	= "37",
  pages		= "279-309",
  year		= "2000"
}

@InProceedings{	  McMillan01,
  author	= {Kenneth L. McMillan},
  title		= {Parameterized Verification of the FLASH Cache Coherence
		  Protocol by Compositional Model Checking},
  booktitle	= {CHARME 01: Correct Hardware Design and Verification},
  series	= {LNCS 2144},
  publisher	= {Springer},
  pages		= {179--195},
  year		= {2001}
}

@InCollection{	  McMillan03,
  author	= "K.L. McMillan",
  title		= "Interpolation and {SAT}-based model checking",
  booktitle	= "CAV 03: Computer-aided Verification",
  series	= "Lecture Notes in Computer Science 2725",
  publisher	= "Springer",
  year		= "2003",
  pages		= "1--13"
}
@article{McMillanTCS,
  author    = {Kenneth L. McMillan},
  title     = {An interpolating theorem prover.},
  journal   = {Theor. Comput. Sci.},
  volume    = {345},
  number    = {1},
  year      = {2005},
  pages     = {101-121},
  ee        = {http://dx.doi.org/10.1016/j.tcs.2005.07.003},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  McMillan04,
  author	= {Kenneth L. McMillan},
  title		= {An Interpolating Theorem Prover.},
  booktitle	= {TACAS: Tools and Algorithms for the Construction and
		  Analysis of Systems},
  year		= {2004},
  pages		= {16-30}
}

@inproceedings{McMillanTACAS05,
  author    = {Kenneth L. McMillan},
  title     = {Applications of Craig Interpolants in Model Checking.},
  booktitle = {TACAS},
  year      = {2005},
  pages     = {1-12},
  ee        = {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3440{\&}spage=1},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@InCollection{	  McMillan06,
  author	= "K. L. McMillan",
  title		= "Lazy Abstraction with Interpolants",
  booktitle	= "CAV",
  year		= "2006"
}

@Book{		  McMillan93,
  author	= "K.L. McMillan",
  title		= "Symbolic Model Checking: An Approach to the
		  State-Explosion Problem",
  publisher	= "Kluwer Academic Publishers",
  year		= "1993"
}

@InCollection{	  McMillan94,
  author	= "K.L. McMillan",
  title		= "Hierarchical representations of discrete functions, with
		  application to model checking",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "41--54"
}

@InCollection{	  McMillan97,
  author	= "K.L. Mc{M}illan",
  title		= "A compositional rule for hardware design refinement",
  booktitle	= "CAV 97: Computer-aided Verification",
  series	= "LNCS 1254",
  publisher	= "Springer",
  year		= "1997",
  pages		= "24--35"
}

@InProceedings{	  McMillanQadeerSaxe00,
  author	= "K.L. McMillan and S. Qadeer and J. Saxe",
  title		= "Induction in compositional model checking",
  booktitle	= "CAV 00: Computer-Aided Verification",
  series	= "LNCS",
  publisher	= "Springer",
  pages		= "312-327",
  year		= "2000"
}

@Article{	  McNaughton66,
  author	= "R. McNaughton",
  title		= "Testing and generating infinite sequences by a finite
		  automaton",
  journal	= "Information and Control",
  volume	= "9",
  number	= "5",
  year		= "1966",
  pages		= "521--530"
}

@Article{	  McNaughton93,
  author	= "R. McNaughton",
  title		= "Infinite games played on finite graphs",
  journal	= "Annals of Pure and Applied Logic",
  volume	= "65",
  year		= "1993",
  pages		= "149--184"
}

@Book{		  McNaughtonPapert71,
  author	= "R. McNaughton and S. Papert",
  title		= "Counter-free Automata",
  publisher	= "The MIT Press",
  year		= "1971"
}

@InProceedings{	  MDNM00,
  author	= "H. Matsuno and A. Doi and M. Nagasaki and S. Miyano",
  title		= "Hybrid petri net representation of gene regulatory
		  network",
  booktitle	= "Proceedings of the Pacific Symposium of Biocomputing (5)",
  pages		= "338--349",
  year		= "2000"
}

@InCollection{	  MelliarSmith89,
  author	= "{Melliar-Smith}, P.M.",
  title		= "Extending interval logic to real-time systems",
  booktitle	= "Temporal Logic in Specification",
  editor	= "B. Banieqbal and H. Barringer and A. Pnueli",
  series	= "LNCS 398",
  publisher	= "Springer-Verlag",
  year		= "1989",
  pages		= "224--242"
}

@InProceedings{	 MandelbaumWalker03,
  author	= {Yitzhak Mandelbaum and David Walker and Robert Harper},
  title		= {An effective theory of type refinements.},
  booktitle	= {ICFP},
  year		= {2003},
  pages		= {213-225},
  ee		= {http://doi.acm.org/10.1145/944725},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  MerlinFarber76,
  author	= "P.M. Merlin and D.J. Farber",
  title		= "Recoverability of communication protocols: implications of
		  a theoretical study",
  journal	= "IEEE Transactions on Communications",
  volume	= "COM-24",
  number	= "9",
  year		= "1976",
  pages		= "1036--1043"
}

@InProceedings{	  Metal,
  author	= "S. Hallem and B. Chelf and Y. Xie and D.R. Engler",
  title		= "A System and Language for Building System-Specific, Static
		  Analyses",
  booktitle	= "PLDI 02: Programming Language Design and Implementation",
  pages		= "69--82",
  publisher	= "ACM",
  year		= "2002"
}

@Article{	  Metropolis,
  author	= "F. Balarin and Y. Watanabe and Harry Hsieh and L. Lavagno
		  and C. Passerone and A. Sangiovanni-Vincentelli",
  title		= "Metropolis: An Integrated Electronic System Design
		  Environment",
  journal	= "IEEE Computer",
  pages		= "49--62",
  year		= "2003"
}

@Article{	  Meyer92,
  author	= {B. Meyer},
  title		= {Applying "Design by Contract".},
  journal	= {IEEE Computer},
  volume	= {25},
  number	= {10},
  year		= {1992},
  pages		= {40-51},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@book{ MeyerBook,
 author = {B. Meyer},
 title = {Eiffel: the language},
 year = {1992},
 isbn = {0-13-247925-7},
 publisher = {Prentice-Hall, Inc.},
 address = {Upper Saddle River, NJ, USA},
 }
 
@Unpublished{	  MichalBook,
  author	= "M. Pezze{`} and M. Young",
  title		= "Software Test and Analysis: Process, Principles, and
		  Techniques",
  note		= "Manuscript",
  year		= "2003"
}

@InProceedings{	  Millstein05,
  author	= "B. Chin and S. Markstrum and T. Millstein",
  title		= "Semantic Type Qualifiers",
  booktitle	= "PLDI",
  publisher	= {ACM},
  year		= "2005"
}

@InProceedings{	  Milner71,
  author	= "R. Milner",
  title		= "An algebraic definition of simulation between programs",
  booktitle	= "Second International Joint Conference on Artificial
		  Intelligence",
  publisher	= "The British Computer Society",
  year		= "1971",
  pages		= "481--489"
}

@Book{		  Milner80,
  author	= "R. Milner",
  title		= "A Calculus of Communicating Systems",
  series	= "LNCS 92",
  publisher	= "Springer-Verlag",
  year		= "1980"
}

@Article{	  Milner83,
  author	= "R. Milner",
  title		= "Calculi for synchrony and asynchrony",
  journal	= "Theoretical Computer Science",
  volume	= "25",
  number	= "3",
  year		= "1983",
  pages		= "267--310"
}

@Book{		  Milner89,
  author	= "R. Milner",
  title		= "Communication and Concurrency",
  publisher	= "Prentice-Hall",
  year		= "1989"
}

@InCollection{	  Milner90,
  author	= "R. Milner",
  title		= "Operational and Algebraic Semantics of Concurrent
		  Processes",
  booktitle	= "Handbook of Theoretical Computer Science",
  editor	= "J. van Leeuwen",
  publisher	= "Elsevier Science Publishers (North-Holland)",
  pages		= "1202--1242",
  volume	= "B",
  address	= "Amsterdam",
  year		= 1990
}

@Book{		  Mitchell96,
  author	= "J.C. Mitchell",
  title		= "Foundations for Programming Languages",
  publisher	= "MIT Press",
  year		= "1996"
}

@InProceedings{	  mitchell97,
  author	= "John Mitchell and Mark Mitchell and Ulrich Stern",
  title		= "Automated analysis of cryptographic protocols using
		  Murphi",
  booktitle	= "IEEE Symposium on Security and Privacy",
  publisher	= "IEEE Computer Society Press",
  year		= "1997",
  pages		= "122--137"
}

@InProceedings{	  MKP96,
  author	= "Z. Manna and Y. Kesten and A. Pnueli",
  title		= "Verifying clocked transition systems",
  booktitle	= "Hybrid Systems III",
  editor	= "R. Alur and T.A. Henzinger and E.D. Sontag",
  series	= "LNCS 1066",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "13--40"
}

@InProceedings{	  MM02,
  author	= "A. {McIver} and C. Morgan",
  title		= "Games, probability, and the quantitative $\mu$-calculus
		  $q\mu$",
  booktitle	= "LPAR 02: Logic Programming and Automated Reasoning",
  publisher	= "Springer-Verlag",
  series	= "Lecture Notes in Computer Science",
  volume	= "2514",
  pages		= "292--310",
  year		= 2002
}

@InCollection{	  MMP92,
  author	= "O. Maler and Z. Manna and A. Pnueli",
  title		= "From timed to hybrid systems",
  booktitle	= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "LNCS 600",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "447--484"
}

@InCollection{	  MMT91,
  author	= "M. Merritt and F. Modugno and M.R. Tuttle",
  title		= "Time-constrained automata",
  booktitle	= "CONCUR 91: Theories of Concurrency",
  editor	= "J.C.M. Baeten and J.F. Groote",
  series	= "LNCS 527",
  publisher	= "Springer-Verlag",
  year		= "1991",
  pages		= "408--423"
}

@Article{	  MNV03,
  author	= "D.A. Martin and I. Neeman and M. Vervoort",
  title		= "The strength of {Blackwell} determinacy",
  journal	= "The Journal of Symbolic Logic",
  volume	= 68,
  number	= 2,
  pages		= "615--636",
  publisher	= "Association for Symbolic Logic",
  year		= 2003
}

@InCollection{	  Mocha,
  author	= "R. Alur and T.A. Henzinger and F.Y.C. Mang and S. Qadeer
		  and S.K. Rajamani and S. Tasiran",
  title		= "{{\sc Mocha}}: Modularity in model checking",
  booktitle	= "CAV 98: Computer-Aided Verification",
  editor	= "A.J. Hu and M.Y. Vardi",
  series	= "Lecture Notes in Computer Science 1427",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "521--525"
}

@InCollection{	  MollerTofts90,
  author	= "F. Moller and C. Tofts",
  title		= "A temporal calculus of communicating processes",
  booktitle	= "CONCUR 90: Theories of Concurrency",
  editor	= "J.C.M. Baeten and J.W. Klop",
  series	= "LNCS 458",
  publisher	= "Springer-Verlag",
  year		= "1990",
  pages		= "401--415"
}

@InProceedings{	  Mondrian,
  author	= "E. Witchel and J. Cates and K. Asanovi\'c",
  title		= "Mondrian Memory protection",
  booktitle	= "ASPLOS 02",
  publisher	= "ACM",
  year		= 2002
}

@InProceedings{	  Monniaux01a,
  author	= "D. Monniaux",
  title		= "Backwards abstract interpretation of probabilistic
		  programs",
  booktitle	= "ESOP 01: European Symposium on Programming",
  series	= "LNCS",
  publisher	= "Springer",
  year		= "2001",
  pages		= "367-382"
}

@InProceedings{	  Monniaux01b,
  author	= "D. Monniaux",
  title		= "An abstract Monte-Carlo method for the analysis of
		  probabilistic programs",
  booktitle	= "POPL 01: Principles of Programming Languages",
  publisher	= "ACM",
  year		= "2001",
  pages		= "93-101"
}

@InProceedings{	  Monniaux03a,
  author	= "D. Monniaux",
  title		= "Abstract Interpretation of Programs as Markov Decision
		  Processes",
  booktitle	= "SAS 03: Static Analysis Symposium",
  series	= "LNCS",
  publisher	= "Springer",
  year		= "2003",
  pages		= "237-254"
}

@InProceedings{	  Monniaux03b,
  author	= "D. Monniaux",
  title		= "Abstraction of Expectation Functions using Gaussian
		  distributions",
  booktitle	= "VMCAI 03: Verification, Model Checking, and Abstract
		  Interpretation",
  series	= "LNCS",
  publisher	= "Springer",
  year		= "2003",
  pages		= "161-173"
}

@InProceedings{	  MOPS,
  author	= "H. Chen and D. Wagner",
  title		= "{MOPS}: an infrastructure for examining security
		  properties of software",
  booktitle	= "ACM Conference on Computer and Communications Security
		  2002",
  pages		= "235-244",
  year		= 2002
}

@InCollection{	  Morris82,
  author	= "J. M. Morris",
  title		= "A general axiom of assignment",
  booktitle	= "Theoretical Foundations of Programming Methodology",
  series	= "Lecture Notes of an International Summer School",
  publisher	= "D. Reidel Publishing Company",
  year		= "1982",
  pages		= "25-34"
}

@InCollection{	  Mostowski84,
  author	= "A.W. Mostowski",
  title		= "Regular expressions for infinite trees and a standard form
		  of automata",
  booktitle	= "5th Symposium on Computation Theory",
  series	= "LNCS 208",
  publisher	= "Springer-Verlag",
  year		= "1984",
  pages		= "157--168"
}

@TechReport{	  Mostowski91,
  author	= "A.W. Mostowski",
  title		= "Games with forbidden positions",
  institution	= "Uniwersytet Gda{\'n}ski, Instytyt Matematyki",
  number	= "78",
  year		= "1991"
}

@Article{	  Moszkowski85,
  author	= "B. Moszkowski",
  title		= "A temporal logic for multi-level reasoning about hardware",
  journal	= "IEEE Computer",
  volume	= "18",
  number	= "2",
  year		= "1985",
  pages		= "10--19"
}

@InCollection{	  MP67,
  author	= "J. Mc{Carthy} and J. Painter",
  title		= "Correctness of a compiler for arithmetic expressions",
  booktitle	= "Proc.\ Symposia in Applied Mathematics",
  publisher	= "American Mathematical Society",
  year		= "1967"
}

@InCollection{	  MPS95,
  author	= "O. Maler and A. Pnueli and J. Sifakis",
  title		= "On the synthesis of discrete controllers for timed
		  systems",
  booktitle	= "STACS 95: Theoretical Aspects of Computer Science",
  series	= "LNCS 900",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "229--242"
}


@inproceedings{Mycroft80,
  author    = {A. Mycroft},
  title     = {The Theory and Practice of Transforming Call-by-need into
               Call-by-value},
  booktitle = {ESOP},
  year      = {1980},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@inproceedings{Might07,
  author    = {M. Might},
  title     = {Logic-flow analysis of higher-order programs},
  booktitle = {POPL},
  year      = {2007},
  pages     = {185-198},
  ee        = {http://doi.acm.org/10.1145/1190216.1190247},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Shivers88,
  author    = {Olin Shivers},
  title     = {Control-Flow Analysis in {S}cheme},
  booktitle = {PLDI},
  year      = {1988},
}

@inproceedings{Mycroft84,
  author    = {Alan Mycroft},
  title     = {Polymorphic Type Schemes and Recursive Definitions},
  booktitle = {Symposium on Programming},
  year      = {1984},
  pages     = {217-228}
}

@Book{		  Muchnick,
  author	= "S. Muchnick",
  title		= "Advanced Compiler Design and Implementation",
  publisher	= "Morgan-Kaufman",
  year		= "1997"
}

@Book{		  Muchnik,
  author	= "S.S. Muchnik",
  title		= "Advanced Compiler Design and Implementation",
  publisher	= "Morgan Kaufman",
  year		= "1997"
}

@InProceedings{	  Murphi96,
  author	= "D.L. Dill",
  title		= "The {Murphi} Verification System",
  booktitle	= "CAV 96: Computer-Aided Verification",
  publisher	= "Springer-Verlag",
  series	= "Lecture Notes in Computer Science",
  volume	= "1102",
  pages		= "390--393",
  year		= 1996
}

@InProceedings{	  Myers99,
  author	= "A.C. Myers",
  title		= "{JFlow}: Practical mostly-static information flow control",
  booktitle	= "POPL 99: Principles of Programming Languages",
  year		= "1999",
  pages		= "228-241",
  publisher	= "ACM"
}

@Book{		  Myers:1979,
  author	= "G.J. Myers ",
  title		= "The Art of Software Testing",
  publisher	= "Wiley",
  year		= "1979"
}

@InProceedings{	  NAC99,
  title		= "Data flow analysis for checking properties of concurrent
		  {Java} programs",
  author	= "G. Naumovich and G.S. Avrunin and L.A. Clarke",
  booktitle	= "Proceedings of the 21st International Conference on
		  Software Engineering",
  pages		= "399--410",
  year		= 1999
}

@InProceedings{	  Naik05,
  author	= {Mayur Naik and Jens Palsberg},
  title		= {A Type System Equivalent to a Model Checker.},
  booktitle	= {ESOP},
  year		= {2005},
  pages		= {374-388},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3444{\&}spage=374}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Unpublished{	  NaikPalsberg04,
  author	= "M. Naik and J. Palsberg",
  title		= "A type system equivalent to a model checker",
  year		= "2004"
}

@InCollection{	  NaikSistla94,
  author	= "V.G. Naik and A.P. Sistla",
  title		= "Modeling and verification of a real-life protocol using
		  symbolic model checking",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "194--206"
}

@InCollection{	  Namjoshi01,
  author	= "K. Namjoshi",
  title		= "Certifying model checkers",
  booktitle	= "CAV 01: Computer Aided Verification",
  series	= "LNCS 2102",
  publisher	= "Springer",
  year		= "2001",
  pages		= "2--13"
}

@InProceedings{	  NarayanaAaby88,
  author	= "K.T. Narayana and A.A. Aaby",
  title		= "Specification of real-time systems in real-time temporal
		  interval logic",
  booktitle	= "Proceedings of the Ninth Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1988",
  pages		= "86--95"
}

@Article{	  Nash50,
  author	= "J. Nash",
  title		= "Equilibrium points in $n$-person games",
  journal	= "Proceedings of the National Academny of Sciences USA",
  volume	= 36,
  pages		= "48--49",
  year		= 1950
}

@InProceedings{	  NassorVidalNaquet92,
  author	= "E. Nassor and {Vidal-Naquet}, G.",
  title		= "Suitability of the propositional temporal logic to express
		  properties of real-time systems",
  booktitle	= "TACS 92: Theoretical Aspects of Computer Science",
  series	= "LNCS",
  publisher	= "Springer-Verlag",
  year		= "1992"
}

@InProceedings{	  NE00,
  author	= "L. P. Nieto and J. Esparza",
  title		= "Verifying Single and Multi-mutator Garbage Collectors with
		  {O}wicki-{G}ries in {I}sabelle/{HOL}",
  booktitle	= "MFCS 2000: Mathematical Foundations of Computer Science",
  publisher	= "Springer",
  pages		= "619-628",
  year		= "2000"
}

@InProceedings{	  Necula00,
  author	= {G.C. Necula},
  title		= {Translation validation for an optimizing compiler},
  booktitle	= "PLDI 00: Programming Languages Design and Implementation",
  publisher	= {ACM},
  year		= {2001},
  pages		= {83-95}
}

@InProceedings{	  Necula97,
  author	= {G.C. Necula},
  title		= {Proof carrying code},
  booktitle	= "POPL 97: Principles of Programming Languages",
  publisher	= {ACM},
  year		= {1997},
  pages		= {106-119}
}

@InProceedings{	  NeculaLee00,
  title		= {Proof Generation in the {T}ouchstone Theorem Prover},
  author	= {G. C. Necula and P. Lee},
  booktitle	= "CADE 00: Computer-Aided Deduction",
  pages		= "25--44",
  series	= "LNCS 1831",
  publisher	= "Springer",
  year		= "2000"
}

@InProceedings{	  NeculaLeeLICS98,
  author	= "George C. Necula and Peter Lee",
  title		= "Efficient Representation and Validation of Proofs",
  booktitle	= "Thirteenth Annual Symposium on Logic in Computer Science",
  address	= "Indianapolis",
  publisher	= "IEEE Computer Society Press",
  month		= jun,
  year		= "1998",
  pages		= "93--104"
}

@InProceedings{	  NeculaPCC-POPL97,
  author	= "G.C. Necula",
  title		= "Proof-Carrying Code",
  booktitle	= "Principles of Programming Languages",
  pages		= "106--119",
  publisher	= "ACM Press",
  year		= "1997"
}

@InProceedings{	  NeculaSAS06,
  author	= "Bor-Yuh Evan Chang and Matthew Harren and George C.
		  Necula",
  title		= "Analysis of Low-Level Code Using Cooperating Decompilers",
  booktitle	= "SAS 06: Static Analysis Symposium",
  series	= "LNCS",
  pages		= "XXX-YYY",
  publisher	= "Springer-Verlag",
  year		= "2006"
}

@article{NelsonOppen,
 author = {Nelson, Greg and Oppen, Derek C.},
 title = {Simplification by Cooperating Decision Procedures},
 journal = {TOPLAS},
 year = {1979},
}

@TechReport{	  Nelson81,
  author	= "G. Nelson",
  title		= "Techniques for program verification",
  institution	= "Xerox Palo Alto Research Center",
  number	= "CSL81-10",
  year		= 1981
}

@Book{		  NemhauserWolsey,
  author	= "G.L. Nemhauser and L.A. Wolsey",
  title		= "Integer and Combinatorial Optimization",
  publisher	= "Wiley",
  year		= "1988"
}

@InCollection{	  NerodeKohn93a,
  author	= "A. Nerode and W. Kohn",
  title		= "Multiple-agent hybrid control architecture",
  booktitle	= "Hybrid Systems",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "LNCS 736",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "297--316"
}

@InCollection{	  NerodeKohn93b,
  author	= "A. Nerode and W. Kohn",
  title		= "Models for hybrid systems: automata, topologies,
		  controllability, observability",
  booktitle	= "Hybrid Systems",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "LNCS 736",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "317--356"
}

@InProceedings{	  nesC,
  author	= "D. Gay and P. Levis and R. von Behren and M. Welsh and E.
		  Brewer and D. Culler",
  title		= "The {nesC} language: {A} holistic approach to networked
		  embedded systems",
  booktitle	= "PLDI 2003: Programming Languages Design and
		  Implementation",
  publisher	= {ACM},
  pages		= {1--11},
  year		= "2003"
}

@InCollection{	  NicollinSifakis91,
  author	= "X. Nicollin and J. Sifakis",
  title		= "An overview and synthesis on timed process algebras",
  booktitle	= "CAV 91: Computer-aided Verification",
  editor	= "K.G. Larsen and A. Skou",
  series	= "LNCS 575",
  publisher	= "Springer-Verlag",
  year		= "1991",
  pages		= "376--398"
}

@Book{		  Nipkow,
  title		= "Term rewriting and all that",
  author	= "F. Baader and T. Nipkow",
  publisher	= "Cambridge University Press",
  year		= "1998"
}

@TechReport{	  nist,
  author	= "National Institute of Standards and Technology",
  title		= "The Economic Impact of Inadequate Frameworks for Software
		  Testing",
  institution	= {US Department of Commerce},
  number	= {Planning Report 02-3},
  year		= {2002}
}

@Article{	  nooks,
  author	= "Michael Swift and Brian Bershad and Henry Levy",
  title		= "Improving the Reliability of Commodity Operating Systems",
  journal	= "ACM Transactions on Computer Systems",
  volume	= "23",
  number	= "5",
  year		= "2005",
  pages		= "XXX--XXX"
}

@InCollection{	  NOSY93,
  author	= "X. Nicollin and A. Olivero and J. Sifakis and S. Yovine",
  title		= "An approach to the description and analysis of hybrid
		  systems",
  booktitle	= "Hybrid Systems I",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "LNCS 736",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "149--178"
}

@phdthesis{norell07,
  author  = {U. Norell},
  title	  = {Towards a practical programming language based on dependent type theory},
  school  = {Chalmers},
  year	  = 2007
}

@Book{		  NPW2002,
  author	= {T. Nipkow and L.C. Paulson and M. Wenzel},
  title		= {{Isabelle/HOL} --- A Proof Assistant for Higher-Order
		  Logic},
  publisher	= {Springer},
  series	= {Lecture Notes in Computer Science},
  volume	= 2283,
  year		= 2002
}

@Article{	  NPW81,
  author	= "M. Nielsen and G. Plotkin and G. Winskel",
  title		= "Petri nets, event structures, and domains, part~I",
  journal	= "Theoretical Computer Science",
  volume	= "13",
  year		= "1981",
  pages		= "85--108"
}

@InProceedings{	  NR01,
  author	= "G.C. Necula and S.P. Rahul",
  title		= "Oracle-based checking of untrusted software",
  booktitle	= "POPL 01: Principles of Programming Languages",
  publisher	= "ACM",
  pages		= {142--154},
  year		= "2001"
}

@InProceedings{	  NRSV90,
  author	= "X. Nicollin and J.-L. Richier and J. Sifakis and J.
		  Voiron",
  title		= "{\sc {A}tp}: an algebra for timed processes",
  booktitle	= "Proceedings of the IFIP WG2.2/2.3 Working Conference on
		  Programming Concepts and Methods",
  editor	= "M. Broy and C.B. Jones",
  publisher	= "Elsevier Science Publishers",
  year		= "1990",
  pages		= "415--442"
}

@InProceedings{	  NS95,
  author	= "S. {Nadjm-Tehrani} and J.-E. Str{\"o}mberg",
  title		= "Proving dynamic properties in an aerospace application",
  booktitle	= "Proceedings of the 16th Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1995",
  pages		= "2--10"
}

@Article{	  NSY92,
  author	= "X. Nicollin and J. Sifakis and S. Yovine",
  title		= "Compiling real-time specifications into extended automata",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "SE-18",
  number	= "9",
  year		= "1992",
  pages		= "794--804"
}

@Article{	  NSY93,
  author	= "X. Nicollin and J. Sifakis and S. Yovine",
  title		= "From {\sc {A}tp} to timed graphs and hybrid systems",
  journal	= "Acta Informatica",
  volume	= "30",
  year		= "1993",
  pages		= "181--202"
}

@Book{		  OBJ,
  title		= "The Algebraic Semantics of Imperative Programs",
  author	= "Joseph Goguen and Grant Malcolm",
  publisher	= "MIT Press",
  year		= "1997"
}

@Article{	  Olender92,
  author	= {Kurt M. Olender and Leon J. Osterweil},
  title		= {Interprocedural Static Analysis of Sequencing
		  Constraints.},
  journal	= {ACM Trans. Softw. Eng. Methodol.},
  volume	= {1},
  number	= {1},
  year		= {1992},
  pages		= {21-52},
  ee		= {http://doi.acm.org/10.1145/125489.122822},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  OmegaTestCACM,
  title		= {A practical algorithm for exact array dependence
		  analysis},
  author	= { W. Pugh},
  journal	= {Communications of the ACM},
  volume	= {35},
  number	= {8},
  month		= {August},
  year		= {1992},
  pages		= {102-114}
}

@Book{		  Oney99,
  author	= "W. Oney",
  title		= "Programming the Microsoft Windows Driver Model",
  publisher	= "Microsoft Press",
  year		= "1999"
}

@Article{	  Ornstein69,
  author	= "D. Ornstein",
  title		= "On the Existence of Stationary Optimal Strategies",
  journal	= "Proc.\ Am.\ Math.\ Soc.",
  volume	= 20,
  year		= 1969,
  pages		= "563--569"
}

@InProceedings{	  ORS92,
  author	= "S. Owre and J.M. Rushby and N. Shankar",
  title		= "{PVS}: {A} Prototype Verification System",
  booktitle	= "CADE",
  year		= "1992"
}

@Book{		  Ostroff90,
  author	= "J.S. Ostroff",
  title		= "Temporal Logic of Real-time Systems",
  publisher	= "Research Studies Press",
  year		= "1990"
}

@InCollection{	  OSY94,
  author	= "A. Olivero and J. Sifakis and S. Yovine",
  title		= "Using abstractions for the verification of linear hybrid
		  systems",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "81--94"
}

@Book{		  Owen95,
  author	= "G. Owen",
  title		= "Game Theory",
  publisher	= "Academic Press",
  year		= 1995
}

@Article{	  OwickiGries,
  author	= {S. Owicki and D. Gries},
  title		= {An axiomatic proof technique for parallel programs},
  journal	= {Acta Informatica},
  year		= 1976,
  volume	= {6(4)},
  pages		= {319--340}
}

@Article{	  OwickiGries76,
  author	= "S. Owicki and D. Gries",
  title		= "An axiomatic proof technique for parallel programs",
  journal	= "Acta Informatica",
  volume	= "6",
  number	= "4",
  year		= "1976",
  pages		= "319--340"
}

@article{Lamport78,
 author = {Leslie Lamport},
 title = {Time, clocks, and the ordering of events in a distributed system},
 journal = {Commun. ACM},
 volume = {21},
 number = {7},
 year = {1978},
 issn = {0001-0782},
 pages = {558--565},
 doi = {http://doi.acm.org/10.1145/359545.359563},
 publisher = {ACM Press},
 address = {New York, NY, USA},
 }



@Article{	  OwickiLamport82,
  author	= "S. Owicki and L. Lamport",
  title		= "Proving liveness properties of concurrent programs",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "4",
  number	= "3",
  year		= "1982",
  pages		= "455--495"
}

@InProceedings{	  P-SAS00,
  author	= {A. Podelski},
  title		= {Model Checking as Constraint Solving},
  booktitle	= {SAS 00: Static Analysis},
  year		= 2000,
  series	= {LNCS 1824},
  publisher	= {Springer},
  pages		= {221-37}
}

@Article{	  PaigeTarjan87,
  author	= "R. Paige and R.E. Tarjan",
  title		= "Three partition-refinement algorithms",
  journal	= "SIAM Journal of Computing",
  volume	= "16",
  number	= "6",
  year		= "1987",
  pages		= "973--989"
}

@InProceedings{	  PALE,
  author	= {Anders Moller, Michael I. Schwartzbach},
  title		= {The Pointer Assertion Logic Engine},
  booktitle	= {PLDI 01: Programming Language Design and Implementation},
  pages		= {221--231},
  publisher	= {ACM},
  year		= {2001}
}

@InProceedings{	  Palsberg-visitorCalculus,
  author	= "J. Palsberg and T. van Drunen",
  title		= "Visitor-Oriented Programming",
  booktitle	= "FOOL 04: Foundations of Object-Oriented Languages",
  publisher	= "ACM",
  year		= "2004"
}

@InProceedings{	  PalsbergMa02,
  author	= "J. Palsberg and D. Ma",
  title		= "A Typed Interrupt Calculus",
  booktitle	= "FTRTFT 02: Formal Techniques in Real-Time and Fault
		  Tolerant Systems",
  pages		= "291--310",
  publisher	= "Springer-Verlag",
  series	= "LNCS 2469",
  year		= 2002
}

@InProceedings{	  PalsbergNaik,
  author	= "M. Naik and J. Palsberg",
  title		= "Compiling with code-size constraints",
  booktitle	= "LCTES-SCOPES 02",
  pages		= "109--126",
  publisher	= "ACM",
  year		= "2002"
}

@PhDThesis{	  Pareto00,
  author	= "Lars Pareto",
  title		= "Types for Crash Prevention",
  school	= "Chalmers University of Technology",
  year		= 2000
}

@Unpublished{	  Pareto96,
  author	= "Lars Pareto",
  title		= "Sized Types",
  note		= "M.S. Thesis, Chalmers University of Technology, 1996"
}

@Article{	  JPF,
  author	= {K. Havelund and T. Pressburger},
  title		= {Model Checking {Java} Programs using {Java} {P}athFinder},
  journal	= "Software Tools for Technology Transfer (STTT)",
  volume	= "2(4)",
  year		= {2000},
  pages		= {72-84}
}

@InCollection{	  PBV96,
  author	= "A. Puri and V. Borkar and P. Varaiya",
  title		= "$\varepsilon$-Approximation of differential inclusions",
  booktitle	= "Hybrid Systems III",
  editor	= "R. Alur and T.A. Henzinger and E.D. Sontag",
  series	= "LNCS 1066",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "362--376"
}

@InProceedings{	  PCC,
  author	= {George C. Necula},
  title		= {Proof carrying code},
  booktitle	= "POPL 97: Principles of Programming Languages",
  publisher	= {ACM},
  year		= {1997},
  pages		= {106-119}
}

@InProceedings{	  PDH99,
  title		= "Assume-guarantee model checking of software: {A}
		  comparative case study",
  author	= "C.S. Pasareanu and M.B. Dwyer and M. Huth",
  booktitle	= "SPIN 99: Theoretical and Practical Aspects of SPIN Model
		  Checking",
  series	= "LNCS 1680",
  publisher	= "Springer",
  year		= "1999",
  pages		= "168--183"
}

@Book{		  Peled,
  author	= "D. Peled",
  title		= "Software reliability methods",
  publisher	= "Springer",
  year		= 2001
}

@InCollection{	  Peled93,
  author	= "D. Peled",
  title		= "All from one, one for all: on model checking using
		  representatives",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "409--423"
}

@InProceedings{	  PeledICALP03,
  author	= "D. Peled",
  title		= "Model Checking and Testing Combined",
  booktitle	= "ICALP 2003: Automata, Languages and Programming",
  publisher	= "Springer",
  series	= "LNCS",
  volume	= "2719",
  pages		= "47--63",
  year		= "2003"
}

@InProceedings{	  PentiumBug,
  author	= "V. Pratt",
  title		= "Anatomy of the Pentium Bug",
  year		= 1995,
  booktitle	= "Theory and Practice of Software Development ({TAPSOFT})"
}

@Unpublished{	  Pfenning-lecture-notes,
  title		= {Computation and deduction},
  author	= "F. Pfenning",
  note		= "Lecture notes",
  year		= "1997"
}

@InProceedings{	  PicoRadio,
  author	= "J.L. da Silva Jr. and J. Shamberger and M.J. Ammer and C.
		  Guo and S. Li and R. Shah and T. Tuan and M. Sheets and
		  J.M. Rabaey and B. Nikolic and A. Sangiovanni-Vincentelli
		  and P. Wright",
  title		= "Design methodology for pico-radio networks",
  booktitle	= "DATE 01: Design Automation and Test in Europe",
  pages		= "314--323",
  publisher	= "IEEE",
  year		= "2001"
}

@Book{		  piercebook,
  author	= "B. C. Pierce",
  title		= "Types and Programming Languages",
  publisher	= "MIT Press",
  year		= "2002"
}

@inproceedings{Gulwani03,
  author    = {S. Gulwani and
               G.C. Necula},
  title     = {Discovering affine equalities using random interpretation},
  booktitle = {POPL},
  year      = {2003},
  pages     = {74-84},
  ee        = {http://doi.acm.org/10.1145/640128.604138},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{gulwaniPOPL08,
  author    = {S. Gulwani and
               B. McCloskey and
               A. Tiwari},
  title     = {Lifting abstract interpreters to quantified logical domains},
  booktitle = {POPL},
  year      = {2008},
  pages     = {235-246}
}
@inproceedings{cookCAV08,
  author    = {H. Yang and
               O. Lee and
               J. Berdine and
               C. Calcagno and
               B. Cook and
               D. Distefano and
               P. W. O'Hearn},
  title     = {Scalable Shape Analysis for Systems Code},
  booktitle = {CAV},
  year      = {2008},
  pages     = {385-398}
}

@inproceedings{ pierce-turner,
    author = "B. C. Pierce and D. N. Turner",
    title = "Local Type Inference",
    booktitle = "POPL",
    year = "1998"
}

@Book{		  Pinedo01,
  author	= "Pinedo, M.",
  title		= "Scheduling: Theory, Algorithms, and Systems",
  publisher	= "Prentice-Hall",
  year		= "2001"
}

@Unpublished{	  PITAC,
  author	= "President's Information Technology Advisory Committee
		  Report to the President",
  note		= "\url{http://www.ccic.gov/ac/report}",
  year		= "1999"
}

@InProceedings{	  Pnu85,
  author	= "A. Pnueli",
  title		= "Applications of Temporal Logic to the Specification and
		  Verification of Reactive Systems: A Survey of Current
		  Trends",
  booktitle	= "Proc. Advanced School on Current Trends in Concurrency",
  pages		= "510--584",
  publisher	= "Volume~224, LNCS, Springer-Verlag",
  address	= "Berlin",
  year		= "1985"
}

@InCollection{	  Pnu85a,
  author	= "A. Pnueli",
  title		= "In transition from global to modular temporal reasoning
		  about programs",
  booktitle	= "Logics and Models of Concurrent Systems",
  editor	= "K. Apt",
  series	= "{NATO} Advanced Summer Institutes",
  publisher	= "Springer-Verlag",
  year		= "1985",
  volume	= "F-13",
  pages		= "123--144"
}

@InProceedings{	  Pnueli77,
  author	= "A. Pnueli",
  title		= "The temporal logic of programs",
  booktitle	= "Proceedings of the 18th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1977",
  pages		= "46--57"
}

@Article{	  Pnueli81,
  author	= "A. Pnueli",
  title		= "The temporal semantics of concurrent programs",
  journal	= "Theoretical Computer Science",
  volume	= "13",
  number	= "1",
  year		= "1981",
  pages		= "45--60"
}

@InCollection{	  Pnueli84,
  author	= "A. Pnueli",
  title		= "In transition from global to modular temporal reasoning
		  about programs",
  booktitle	= "Logics and Models of Concurrent Systems",
  editor	= "K.R. Apt",
  publisher	= "Springer-Verlag",
  year		= "1984",
  pages		= "123--144"
}

@InCollection{	  Pnueli86,
  author	= "A. Pnueli",
  title		= "Applications of temporal logic to the specification and
		  verification of reactive systems: a survey of current
		  trends",
  booktitle	= "Current Trends in Concurrency",
  editor	= "de Bakker, J.W. and de Roever, W.-P. and G. Rozenberg",
  series	= "LNCS 224",
  publisher	= "Springer-Verlag",
  year		= "1986",
  pages		= "510--584"
}

@InProceedings{	  PnueliDeRoever82,
  author	= "A. Pnueli and de Roever, W.-P.",
  title		= "Rendez-vous with {Ada}: a proof-theoretical view",
  booktitle	= "Proceedings of the SIGPLAN AdaTEC Conference on Ada",
  publisher	= "ACM Press",
  year		= "1982",
  pages		= "129--137"
}

@InCollection{	  PnueliHarel88,
  author	= "A. Pnueli and E. Harel",
  title		= "Applications of temporal logic to the specification of
		  real-time systems",
  booktitle	= "Formal Techniques in Real-time and Fault-tolerant Systems",
  editor	= "M. Joseph",
  series	= "LNCS 331",
  publisher	= "Springer-Verlag",
  year		= "1988",
  pages		= "84--98"
}

@InProceedings{	  PnueliRosner89,
  author	= "A. Pnueli and R. Rosner",
  title		= "On the synthesis of a reactive module",
  booktitle	= "Proceedings of the 16th Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1989",
  pages		= "179--190"
}

@InProceedings{	  PnueliXuZuck02,
  author	= {Amir Pnueli and Jessie Xu and Lenore D. Zuck},
  title		= {Liveness with (0, 1, infty)-Counter Abstraction.},
  booktitle	= {CAV},
  year		= {2002},
  pages		= {107-122},
  ee		= {http://link.springer.de/link/service/series/0558/bibs/2404/24040107.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  PODC90,
  author	= "T.A. Henzinger",
  title		= "Half-order modal logic: how to prove real-time properties",
  booktitle	= "Proceedings of the Ninth Annual Symposium on Principles of
		  Distributed Computing",
  publisher	= "ACM Press",
  year		= "1990",
  pages		= "281--296"
}

@InProceedings{	  PODC91,
  author	= "R. Alur and T. Feder and T.A. Henzinger",
  title		= "The benefits of relaxing punctuality",
  booktitle	= "Proceedings of the Tenth Annual Symposium on Principles of
		  Distributed Computing",
  publisher	= "ACM Press",
  year		= "1991",
  pages		= "139--152"
}

@Article{	  PODC91j,
  author	= "R. Alur and T. Feder and T.A. Henzinger",
  title		= "The benefits of relaxing punctuality",
  journal	= "Journal of the ACM",
  volume	= "43",
  number	= "1",
  year		= "1996",
  pages		= "116--146"
}

@Book{		  Polis,
  author	= "F. Balarin and M. Chiodo and P. Giusto and H. Hsieh and A.
		  Jurecska and L. Lavagno and C. Passerone and A.
		  Sangiovanni-Vincentelli and E. Sentovich and K. Suzuki and
		  B. Tabbara",
  title		= "Hardware-Software Co-Design of Embedded Systems: The
		  {Polis} Approach",
  publisher	= "Kluwer Academic Press",
  year		= "1997"
}

@InCollection{	  Polyglot,
  author	= "N. Nystrom and M.R. Clarkson and A.C. Myers",
  title		= "Polyglot: An Extensible Compiler Framework for {Java}",
  booktitle	= "CC 03: Compiler Construction",
  series	= "Lecture Notes in Computer Science 2622",
  pages		= "138--152",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  POPL07lock,
  author	= "Michael Emmi and Jeffrey Fischer and Ranjit Jhala and Rupak Majumdar",
  title		= "Interprocedural Analysis of Asynchronous Programs",
  booktitle	= "Proceedings of the 34th Annual Symposium on Principles of Programming Languages",
  publisher	= "ACM Press",
  pages		= "to appear",
  year		= "2007"
}

@InProceedings{	  POPL07events,
  author	= "Ranjit Jhala and Rupak Majumdar",
  title		= "Interprocedural Analysis of Asynchronous Programs",
  booktitle	= "Proceedings of the 34th Annual Symposium on Principles of Programming Languages",
  publisher	= "ACM Press",
  pages		= "to appear",
  year		= "2007"
}
@InProceedings{	  POPL91,
  author	= "T.A. Henzinger and Z. Manna and A. Pnueli",
  title		= "Temporal proof methodologies for real-time systems",
  booktitle	= "Proceedings of the 18th Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1991",
  pages		= "353--366"
}

@Article{	  POPL91j,
  author	= "T.A. Henzinger and Z. Manna and A. Pnueli",
  title		= "Temporal proof methodologies for timed transition systems",
  journal	= "Information and Computation",
  volume	= "112",
  number	= "2",
  year		= "1994",
  pages		= "273--337"
}

@Article{	  Post44,
  author	= "E. Post",
  title		= "Recursively enumerable sets of positive integers and their
		  decision problems",
  journal	= "Bulletin of the AMS",
  volume	= "50",
  year		= "1944",
  pages		= "284--316"
}

@inproceedings{   Pottier96,
  author 	= {F. Pottier},
  title 	= {Simplifying subtyping constraints},
  booktitle 	= {ICFP},
  year 		= {1996},
  isbn 		= {0-89791-770-7},
  location 	= {Philadelphia, Pennsylvania, United States},
  doi 		= {http://doi.acm.org/10.1145/232627.232642},
  publisher 	= {ACM Press},
  address 	= {New York, NY, USA},
}


@InProceedings{	  PR79,
  author	= "G.L. Peterson and J.H. Reif",
  title		= "Multiple-Person Alternation",
  booktitle	= "Proc. 20st IEEE Symp. on Foundation of Computer Science",
  pages		= "348--363",
  year		= 1979
}

@InProceedings{	  PR89b,
  author	= "A. Pnueli and R. Rosner",
  title		= "On the Synthesis of an Asynchronous Reactive Module",
  booktitle	= "Proc. 16th International Colloquium on Automata, Languages
		  and Programming",
  publisher	= "Lecture Notes in Computer Science, Springer-Verlag",
  volume	= 372,
  month		= "July",
  pages		= "652--671",
  year		= 1989
}

@InProceedings{	  PR90,
  author	= "A. Pnueli and R. Rosner",
  title		= "Distributed Reactive Systems are hard to Synthesize",
  booktitle	= "Proc. 31st IEEE Symp. on Foundation of Computer Science",
  pages		= "746--757",
  year		= 1990
}

@Article{	  Pratt80,
  author	= "V.R. Pratt",
  title		= "A near-optimal method for reasoning about action",
  journal	= "Journal of Computer and System Sciences",
  volume	= "20",
  number	= "2",
  year		= "1980",
  pages		= "231--254"
}

@Article{	  Pratt86,
  author	= "V.R. Pratt",
  title		= "Modeling concurrency with partial orders",
  journal	= "International Journal of Parallel Programming",
  volume	= "15",
  number	= "1",
  year		= "1986",
  pages		= "33--71"
}

@Article{	  prefix,
  author	= {W. R. Bush and J. D. Pincus and D. J. Sielaff},
  title		= {A static analyzer for finding dynamic programming errors},
  journal	= {Software-Practice and Experience},
  publisher	= {Wiley and Sons},
  volume	= {30},
  number	= {7},
  month		= {June},
  pages		= {775-802},
  year		= {2000}
}

@InProceedings{	  ProbMu97,
  author	= "M. Huth and M. Kwiatkowska",
  title		= "Quantitative Analysis and Model Checking",
  booktitle	= "LICS 97: Logic in Computer Science",
  pages		= "111--122",
  year		= 1997,
  publisher	= "IEEE Computer Society Press",
  summary	= "Uses fuzzy semantics for &, proposes model-checking
		  algorithms only for some CTL-like mu-calculus, and does not
		  really deal with non-determinism."
}

@Article{	  ProPreTra96,
  author	= "C. Morgan and A. McIver and K. Seidel",
  title		= "Probabilistic Predicate Transformers",
  journal	= "ACM Transactions on Programming Languages and Systems",
  year		= 1996,
  volume	= 18,
  number	= 3,
  pages		= "325--353",
  summary	= "Extends the predicate transformers approach to deal with
		  demonic nondeterminism."
}

@InProceedings{	  PSS98,
  title		= {Translation validation},
  author	= {A. Pnueli and M. Siegel and E. Singerman},
  booktitle	= {TACAS 98: Tools and Algorithms for the Construction and
		  Analysis of Systems},
  series	= {Lecture Notes in Computer Science 1384},
  pages		= {151--166},
  publisher	= {Springer-Verlag},
  year		= {1998}
}

@TechReport{	  Ptolemy,
  author	= "E.A. Lee",
  title		= "Overview of the Ptolemy Project",
  number	= "UCB/ERL M03/25",
  institution	= "University of California at Berkeley",
  year		= "2003"
}

@Article{	  Pudlak,
  author	= "P. Pudl\'{a}k",
  title		= "Lower bounds for resolution and cutting plane proofs and
		  monotone computations",
  journal	= "J. Symbolic Logic",
  volume	= 62,
  pages		= "981--998",
  year		= 1997
}

@InCollection{	  PuriVaraiya94,
  author	= "A. Puri and P. Varaiya",
  title		= "Decidability of hybrid systems with rectangular
		  differential inclusions",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "95--104"
}

@Unpublished{	  PuriVaraiya95,
  author	= "A. Puri and P. Varaiya",
  title		= "Verification of hybrid systems using abstractions",
  note		= "To appear",
  year		= "1995"
}

@Book{		  Puterman,
  author	= "M.L. Puterman",
  title		= "{Markov} Decision Processes",
  year		= 1994,
  publisher	= "John Wiley and Sons"
}

@InProceedings{	  PVS,
  author	= "N. Shankar",
  title		= "Combining theorem proving and model checking through
		  symbolic analysis",
  booktitle	= "CONCUR: Concurrency Theory",
  pages		= "1--16",
  publisher	= "LNCS 1877, Springer",
  year		= "2000"
}

@InProceedings{	  PVS96,
  title		= {{PVS}: Combining Specification, Proof Checking, and Model
		  Checking},
  author	= {S. Owre and S. Rajan and J.M. Rushby and N. Shankar and
		  M.K. Srivas},
  booktitle	= "CAV 96: Computer-Aided Verification",
  series	= "LNCS 1102",
  publisher	= "Springer",
  year		= "1996",
  pages		= "411-414"
}

@InProceedings{	  PZ01,
  title		= {From Model Checking to a Temporal Proof},
  author	= {D. Peled and L.D. Zuck},
  booktitle	= {SPIN 2001: SPIN Workshop},
  series	= {Lecture Notes in Computer Science 2057},
  publisher	= {Springer-Verlag},
  pages		= {1--14},
  year		= {2001}
}

@InProceedings{Garrigue98,
  title		= {Programming With Polymorphic Variants},
  author	= {Jacques Garrigue},
  booktitle	= {ML}, 
  year		= {1998}
}

@Article{	  PZ86,
  author	= "A. Pnueli and L.D. Zuck",
  title		= "Verification of Multiprocess Probabilistic Protocols",
  journal	= "Distributed Computing",
  volume	= "1",
  pages		= "53--72",
  year		= "1986"
}

@PhDThesis{	  Qadeer99,
  author	= "S. Qadeer",
  title		= "Algorithms and Methodology for Scalable Model Checking",
  school	= "University of California at Berkeley",
  year		= "1996"
}

@InCollection{	  QueilleSifakis81,
  author	= "J. Queille and J. Sifakis",
  title		= "Specification and verification of concurrent systems in
		  {CESAR}",
  booktitle	= "Fifth International Symposium on Programming",
  editor	= "{Dezani-Ciancaglini}, M. and U. Montanari",
  series	= "LNCS 137",
  publisher	= "Springer-Verlag",
  year		= "1981",
  pages		= "337--351"
}

@InCollection{	  Rabin57,
  author	= "M.O. Rabin",
  title		= "Effective computability of winning strategies",
  booktitle	= "Contributions to the Theory of Games (Volume III)",
  editor	= "M. Dresher and A.W. Tucker and P. Wolfe",
  series	= "Annals of Mathematical Studies 39",
  publisher	= "Princeton University Press",
  year		= "1957",
  pages		= "147--157"
}

@Book{		  Rabin69,
  author	= "M.O. Rabin",
  title		= "Automata on Infinite Objects and Church's Problem",
  series	= "Conference Series in Mathematics",
  year		= 1969,
  number	= 13,
  publisher	= "American Mathematical Society"
}

@InProceedings{	  racerx,
  title		= {RacerX: Effective, Static Detection of Race Conditions and
		  Deadlocks},
  author	= {Dawson Engler and Ken Ashcraft},
  booktitle	= "SOSP 03: ACM Symposium on Operating System Principles",
  pages		= "237--252",
  publisher	= "ACM Press",
  year		= "2003"
}

@Article{	  RagFil91,
  author	= "T.E.S. Raghavan and J.A. Filar",
  title		= "Algorithms for Stochastic Games --- A Survey",
  journal	= "{ZOR} --- Methods and Models of Op.\ Res.",
  volume	= 35,
  pages		= "437--472",
  year		= 1991,
  group		= "GT",
  summary	= "Very nice survey of algorithms for solving infinite
		  stochastic games, discounted and undiscounted."
}

@PhDThesis{	  Rajamani99,
  author	= "S.K. Rajamani",
  title		= "New Directions in Refinement Checking",
  school	= "University of California at Berkeley",
  year		= "1996"
}

@Unpublished{	  Rajeev,
  author	= "R. Alur and P. Cerny and G. Gupta and P. Madhusudan and W.
		  Nam and A. Srivastava",
  title		= "Synthesis of interface specifications for {Java} classes",
  year		= "2004"
}

@Unpublished{	  Rajeev-interface,
  author	= "R. Alur and P. Cerny and G. Gupta and P. Madhusudan and W.
		  Nam and A. Srivastava",
  title		= "Synthesis of interface specifications for {Java} classes",
  note		= "Under submission",
  year		= "2004"
}

@Article{	  RamadgeWonham87,
  author	= "P.J. Ramadge and W.M. Wonham",
  title		= "Supervisory control of a class of discrete-event
		  processes",
  journal	= "SIAM Journal of Control and Optimization",
  volume	= "25",
  number	= "1",
  year		= "1987",
  pages		= "206--230"
}

@InProceedings{	  Raskin04,
  author	= {Gilles Geeraerts and Jean-Fran\c{c}ois Raskin and Laurent
		  Van Begin},
  title		= {Expand, Enlarge, and Check: New Algorithms for the
		  Coverability Problem of WSTS.},
  booktitle	= {FSTTCS},
  year		= {2004},
  pages		= {287-298},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3328{\&}spage=287}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Misc{		  McMillanPersonal,
  author	= "K. L. McMillan",  
  title		= "Personal communication",
  year		= "2014"
}

@Misc{		  Raskin98,
  author	= "J.-F. Raskin",
  title		= "Personal communication",
  year		= "1998"
}

@InCollection{	  RaskinSchobbens97,
  author	= "J.-F. Raskin and P.-Y. Schobbens",
  title		= "State-clock logic: a decidable real-time logic",
  booktitle	= "HART 97: Hybrid and Real-time Systems",
  editor	= "O. Maler",
  series	= "LNCS 1201",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "33--47"
}

@Article{	  ReedRoscoe88,
  author	= "G.M. Reed and A.W. Roscoe",
  title		= "A timed model for communicating sequential processes",
  journal	= "Theoretical Computer Science",
  volume	= "58",
  number	= "1/2/3",
  year		= "1988",
  pages		= "249--261"
}

@InProceedings{	  Regehr03,
  author	= "J. Regehr, A. Reid, K. Webb",
  title		= "Eliminating Stack Overflow by Abstract Interpretation",
  booktitle	= "EMSOFT 03: Embedded Software",
  series	= "Lecture Notes in Computer Science",
  pages		= "306--322",
  publisher	= "Springer",
  year		= "2003"
}

@Book{		  Reisig85,
  author	= "W. Reisig",
  title		= "Petri Nets: An Introduction",
  publisher	= "Springer-Verlag",
  year		= "1985"
}

@Article{	  reps-ist98,
  author	= {T. Reps},
  title		= {Program analysis via graph reachability},
  journal	= {Information and Software Technology},
  volume	= {40},
  number	= {11-12},
  month		= {November-December},
  year		= {1998},
  pages		= {701-726}
}

@InProceedings{	  reps-popl95,
  author	= { T. Reps and S. Horwitz and M. Sagiv},
  title		= {Precise interprocedural dataflow analysis via graph
		  reachability},
  booktitle	= {POPL 95: Principles of Programming Languages},
  publisher	= "ACM",
  year		= {1995},
  pages		= { 49-61}
}

@InProceedings{	  Reps03,
  author	= "T.W. Reps and S. Schwoon and S. Jha",
  title		= "Weighted Pushdown Systems and Their Application to
		  Interprocedural Dataflow Analysis",
  booktitle	= "SAS 03: Static Analysis Symposium",
  pages		= "189--213",
  series	= "LNCS",
  publisher	= "LNCS",
  year		= "2003"
}

@InProceedings{	  repsx86,
  author	= {Gogul Balakrishnan and Radu Gruian and Thomas W. Reps and
		  Tim Teitelbaum},
  title		= {CodeSurfer/x86-A Platform for Analyzing x86 Executables.},
  booktitle	= {CC},
  year		= {2005},
  pages		= {250-254},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3443{\&}spage=250}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InCollection{	  REX91pAH,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Logics and models of real time: a survey",
  booktitle	= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "Lecture Notes in Computer Science 600",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "74--106"
}

@InCollection{	  REX91pHMP,
  author	= "T.A. Henzinger and Z. Manna and A. Pnueli",
  title		= "Timed transition systems",
  booktitle	= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "Lecture Notes in Computer Science 600",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "226--251"
}

@InCollection{	  REX97p,
  author	= "R. Alur and T.A. Henzinger and O. Kupferman",
  title		= "Alternating-time temporal logic",
  booktitle	= "Compositionality: The Significant Difference",
  editor	= "de Roever, W.-P. and H. Langmaack and A. Pnueli",
  series	= "Lecture Notes in Computer Science 1536",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "23--60"
}

@InProceedings{	  Reynolds00,
  author	= "J. C. Reynolds",
  title		= "Intuitionistic reasoning about shared mutable data
		  structure",
  booktitle	= "Millenial Perspectives in Computer Science",
  publisher	= "Palgrave",
  year		= "2001",
  pages		= "303--321"
}

@InProceedings{	  Reynolds02,
  author	= {John C. Reynolds},
  title		= {Separation Logic: A Logic for Shared Mutable Data
		  Structures.},
  booktitle	= {LICS},
  year		= {2002},
  pages		= {55-74},
  ee		= {http://computer.org/proceedings/lics/1483/14830055abs.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Misc{		  rfc792,
  author	= "J. Postel",
  title		= "{Internet Control Message Protocol}",
  series	= "Request for Comments",
  number	= "792",
  howpublished	= "RFC 792 (Standard)",
  publisher	= "IETF",
  organisation	= "Internet Engineering Task Force",
  year		= 1981,
  month		= sep,
  day		= "1",
  note		= "Updated by RFC 950",
  url		= "http://www.ietf.org/rfc/rfc792.txt"
}

@Article{	  RH96,
  author	= "G. Rothermel and M. Harrold",
  title		= "Analyzing regression test selection techniques",
  journal	= "IEEE Transactions on Software Engineering",
  year		= "1996",
  volume	= 22,
  number	= 8,
  pages		= "529--551"
}

@Article{	  RH97,
  author	= "G. Rothermel and M. Harrold",
  title		= "A safe, efficient regression test selection technique",
  journal	= "ACM Transactions on Software Engineering and Methodology",
  year		= "1997",
  volume	= 6,
  number	= 2,
  pages		= "173--210"
}

@Article{	  RHC76,
  title		= "On the automated generation of program test data",
  author	= "C. Ramamoorthy and S.B. Ho and W. Chen",
  journal	= "IEEE Transactions in Software Engineering",
  volume	= "2(2)",
  year		= 1976,
  pages		= "293--300"
}

@InProceedings{	  RHS95,
  author	= { T. Reps and S. Horwitz and M. Sagiv},
  title		= {Precise interprocedural dataflow analysis via graph
		  reachability},
  booktitle	= {POPL 95: Principles of Programming Languages},
  publisher	= "ACM",
  year		= {1995},
  pages		= { 49-61}
}

@TechReport{	  RinardMarinov99,
  author	= {M. Rinard and D. Marinov},
  title		= {Credible compilation},
  institution	= "MIT",
  number	= "MIT-LCS-TR-776",
  year		= {1999}
}

@Book{		  Rogers67,
  author	= "Rogers, Jr., H.",
  title		= "Theory of Recursive Functions and Effective Computability",
  publisher	= "McGraw-Hill Book Company",
  year		= "1967"
}

@MastersThesis{	  Ron84,
  author	= "D. Ron",
  title		= "Temporal Verification of Communication Protocols",
  school	= "The Weizmann Institute of Science",
  address	= "Rehovot, Israel",
  year		= "1984"
}

@PhDThesis{	  Rosner92,
  author	= "R. Rosner",
  title		= "Modular Synthesis of Reactive Systems",
  school	= "Weizmann Institute of Science, Rehovot, Israel",
  year		= "1992"
}

@InProceedings{	  RSS01,
  author	= "A. Regev and W. Silverman and E. Shapiro",
  title		= "Representation and simulation of biochemical processes
		  using the pi-calculus process algebra",
  booktitle	= "Proceedings of the Pacific Symposium of Biocomputing (6)",
  pages		= "459--470",
  year		= "2001"
}

@InProceedings{	  RTSS93,
  author	= "R. Alur and T.A. Henzinger and P.-H. Ho",
  title		= "Automatic symbolic verification of embedded systems",
  booktitle	= "Proceedings of the 14th Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1993",
  pages		= "2--11"
}

@Article{	  RTSS93j,
  author	= "R. Alur and T.A. Henzinger and P.-H. Ho",
  title		= "Automatic symbolic verification of embedded systems",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "22",
  number	= "3",
  year		= "1996",
  pages		= "181--201"
}

@InProceedings{	  RTSS95,
  author	= "T.A. Henzinger and P.-H. Ho and H. Wong-Toi",
  title		= "{{\sc HyTech}}: the next generation",
  booktitle	= "Proceedings of the 16th Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1995",
  pages		= "56--65"
}

@Proceedings{	  RV02,
  title		= "Workshop on Run-Time Verification",
  series	= "Electronic Notes in Theoretical Computer Science",
  editor	= "K. Havelund and G. Rosu",
  volume	= "70(4)",
  year		= "2002"
}

@Article{	  RW89,
  author	= "P.J.G. Ramadge and W.M. Wonham",
  title		= "The control of discrete event systems",
  journal	= "{IEEE} Transactions on Control Theory",
  volume	= "77",
  pages		= "81-98",
  year		= "1989"
}

@Misc{		  sabelfeld03languagebased,
  author	= "A. Sabelfeld and A. Myers",
  title		= "Language-Based Information-Flow Security",
  text		= "A. Sabelfeld and A. C. Myers. Language-Based
		  Information-Flow Security. IEEE Journal on Selected Areas
		  in Communications, 21(1), 2003.",
  year		= "2003",
  url		= "citeseer.ist.psu.edu/article/sabelfeld03languagebased.html"
		  
}

@Article{	  SabelfieldMyers03,
  author	= "A. Sabelfield and A.C. Myers",
  title		= "Language-based information-flow security",
  journal	= "IEEE Journal on Selected Areas in Communication",
  volume	= "21",
  pages		= "5--19",
  year		= "2003"
}

@InProceedings{	  Safra88,
  author	= "S. Safra",
  title		= "On the complexity of $\omega$-automata",
  booktitle	= "Proceedings of the 29th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1988",
  pages		= "319--327"
}

@PhDThesis{	  Safra89,
  author	= "S. Safra",
  title		= "Complexity of automata on infinite objects",
  school	= "Weizmann Institute of Science",
  year		= "1989",
  address	= "Rehovot, Israel"
}

@InProceedings{	  Safra92,
  author	= "S. Safra",
  title		= "Exponential Determinization for $\omega$-Automata with
		  Strong-Fairness Acceptance Condition",
  booktitle	= "Proceedings of the 24th Annual Symposium on Theory of
		  Computing",
  publisher	= "ACM Press",
  year		= 1992,
  pages		= "275--282"
}

@InProceedings{	  sagiv-popl99,
  author	= {M. Sagiv and T. Reps and R. Wilhelm },
  title		= {Parametric shape analysis via 3-valued logic},
  booktitle	= {POPL 99: Principles of Programming Languages},
  publisher	= "ACM",
  year		= {1999},
  pages		= { 105-118}
}

@Article{	  SagivRepsWilhelm02j,
  author	= {Shmuel Sagiv and Thomas W. Reps and Reinhard Wilhelm},
  title		= {Parametric shape analysis via 3-valued logic.},
  journal	= {ACM Trans. Program. Lang. Syst.},
  volume	= {24},
  number	= {3},
  year		= {2002},
  pages		= {217-298},
  ee		= {http://doi.acm.org/10.1145/514188.514190},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  SaidiSAS2000,
  author	= "H. Saidi",
  title		= "Model Checking Guided Abstraction and Analysis",
  booktitle	= "SAS 00: Static-Analysis Symposium",
  pages		= "377--396",
  publisher	= "LNCS 1824, Springer",
  year		= "2000"
}

@InCollection{	  SaidiShankar99,
  author	= "H. Sa{\"i}di and N. Shankar",
  title		= "Abstract and model check while you prove",
  booktitle	= "CAV 99: Computer-aided Verification",
  series	= "LNCS 1633",
  publisher	= "Springer",
  year		= "1999",
  pages		= "443-454"
}

@InProceedings{	  sanvido02a,
  author	= {Sanvido, M.A.A. and Schaufelberger, W. and Cechticky, V.},
  year		= {2002},
  title		= {Testing Embedded Control Systems using
		  Hardware-in-the-Loop Simulation and Temporal Logic},
  booktitle	= {15th IFAC World Congress on Automatic Control}
}

@InCollection{	  SAS00,
  author	= "T.A. Henzinger and R. Majumdar and F.Y.C. Mang and J.-F.
		  Raskin",
  title		= "Abstract interpretation of game properties",
  booktitle	= "SAS 00: Static Analysis",
  editor	= "J. Palsberg",
  series	= "Lecture Notes in Computer Science 1824",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "220--239"
}

@InProceedings{	  SAS04BLAST,
  author	= {Dirk Beyer and Adam J. Chlipala and Thomas A. Henzinger
		  and Ranjit Jhala and Rupak Majumdar},
  title		= {The Blast Query Language for Software Verification},
  booktitle	= {SAS 04: Static Analysis Symposium},
  year		= 2004,
  series	= {LNCS},
  publisher	= {Springer-Verlag},
  pages		= {2--18}
}

@InProceedings{	  SAS06,
  author	= {Ranjit Jhala and Rupak Majumdar and Ru-Gang Xu},
  title		= {Structural Invariants},
  booktitle	= {SAS 06: Static Analysis Symposium},
  publisher	= {LNCS},
  year		= {2006},
  pages		= {105--120}
}

@InProceedings{	  SavageInfocom03,
  author	= {David Moore and Colleen Shannon and Geoffrey M. Voelker
		  and Stefan Savage},
  title		= {Internet Quarantine: Requirements for Containing
		  Self-Propagating Code.},
  booktitle	= {INFOCOM},
  year		= {2003},
  ee		= {http://www.ieee-infocom.org/2003/papers/46_04.PDF},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Savitch70,
  author	= "W.J. Savitch",
  title		= "Relationship between nondeterministic and deterministic
		  tape classes",
  journal	= "Journal of Computer and System Sciences",
  volume	= "4",
  year		= "1970",
  pages		= "177--194"
}

@InProceedings{	  SBM92,
  author	= "F.B. Schneider and B. Bloom and K. Marzullo",
  title		= "Putting time into proof outlines",
  booktitle	= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "LNCS 600",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "618--639"
}

@InProceedings{	  Schmidt98,
  author	= "D.A. Schmidt",
  title		= "Data Flow Analysis is Model Checking of Abstract
		  Interpretation",
  booktitle	= "POPL 98: Principles of Programming Languages",
  publisher	= "ACM",
  year		= "1998",
  pages		= "38-48"
}

@InProceedings{	  SchmidtEsop01,
  author	= {M. Huth and R. Jagadeesan and D. A. Schmidt},
  title		= {Modal transition systems: a foundation for three-valued
		  program analysis},
  booktitle	= {ESOP 01: European Symposium on Programming},
  year		= 2001,
  publisher	= {Springer},
  note		= {To appear}
}

@Article{	  Schneider00,
  author	= {Fred B. Schneider},
  title		= {Enforceable security policies.},
  journal	= {ACM Trans. Inf. Syst. Secur.},
  volume	= {3},
  number	= {1},
  year		= {2000},
  pages		= {30-50},
  ee		= {http://doi.acm.org/10.1145/353323.353382},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@TechReport{	  Schneider87,
  author	= "F.B. Schneider",
  title		= "Understanding Protocols for Byzantine Clock
		  Synchronization",
  institution	= "Cornell University",
  number	= "CSD-TR-87-859",
  year		= "1987"
}

@InProceedings{	  Schneider88,
  author	= "F.B. Schneider",
  title		= "Real-time, reliable systems project",
  booktitle	= "Proceedings of the ONR Kickoff Workshop for the
		  Foundations of Real-time Computing Research Initiative",
  publisher	= "Office of Naval Research",
  year		= "1988",
  pages		= "28--32"
}

@Book{		  Schneider94,
  author	= "F.B. Schneider",
  title		= "On Concurrent Programming",
  year		= "To appear"
}

@TechReport{	  Schneider99,
  author	= "F. B. Schneider",
  title		= "Enforceable Security Policies",
  institution	= "Cornell University",
  number	= "TR98-1664",
  year		= 1999
}

@InProceedings{	  Schwartzbach,
  author	= "A.S. Christensen and A. Moller and M.I. Schwartzbach",
  title		= "Precise Analysis of String Expressions",
  booktitle	= "SAS 03: Static-Analysis Symposium",
  pages		= "1--18",
  publisher	= "LNCS 2694, Springer",
  year		= "2003"
}

@InProceedings{	  Sefka,
  author	= "M. Sefika and A. Sane and R.H. Campbell",
  title		= "Monitoring Compliance of a Software System With Its
		  High-Level Design Models",
  booktitle	= "ICSE 96: Software Engineering",
  pages		= "387--396",
  publisher	= "ACM",
  year		= "1996"
}

@PhDThesis{	  SegalaT,
  author	= "R. Segala",
  title		= "Modeling and Verification of Randomized Distributed
		  Real-Time Systems",
  school	= "MIT",
  year		= 1995,
  note		= "Technical Report MIT/LCS/TR-676"
}

@Article{	  Sei96,
  author	= {H. Seidl},
  title		= {Fast and Simple Nested Fixpoints},
  journal	= {Information Processing Letters},
  year		= {1996},
  volume	= {59},
  number	= {6},
  pages		= {303--308}
}

@InProceedings{	  Sekar03,
  author	= {R. Sekar and V. N. Venkatakrishnan and Samik Basu and
		  Sandeep Bhatkar and Daniel C. DuVarney},
  title		= {Model-carrying code: a practical approach for safe
		  execution of untrusted applications.},
  booktitle	= {SOSP},
  year		= {2003},
  pages		= {15-28},
  ee		= {http://doi.acm.org/10.1145/945448},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  Sen04,
  author	= {Koushik Sen and Abhay Vardhan and Gul Agha and Grigore
		  Rosu},
  title		= {Efficient Decentralized Monitoring of Safety in
		  Distributed Systems.},
  booktitle	= {ICSE},
  year		= {2004},
  pages		= {418-427},
  ee		= {http://csdl.computer.org/comp/proceedings/icse/2004/2163/00/21630418abs.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  Shah03npclick,
  author	= "N. Shah and W. Plishker and K. Keutzer",
  title		= "{NP}-{C}lick: A Programming Model for the {I}ntel
		  {IXP}-1200",
  booktitle	= "Proc. 2nd Workshop on Network Processors ({NP}-2), 9th
		  Int'l Symposium on High Performance Computing Architectures
		  ({HPCA}-9) ",
  year		= 2003
}

@InProceedings{	  ShahRabaey02,
  author	= "R. Shah and J.M. Rabaey",
  title		= "Energy-aware routing for low-energy ad-hoc sensor
		  networks",
  booktitle	= "Wireless Communications and Networking Conference",
  pages		= "812--817",
  publisher	= "IEEE",
  year		= "2002"
}

@Article{	  ShankarLam87,
  author	= "A.U. Shankar and S. Lam",
  title		= "Time-dependent distributed systems: proving safety,
		  liveness, and timing properties",
  journal	= "Distributed Computing",
  volume	= "2",
  number	= "2",
  year		= "1987",
  pages		= "61--79"
}

@Article{	  Shapley53,
  author	= "L.S. Shapley",
  title		= "Stochastic Games",
  journal	= "Proc.\ Nat.\ Acad.\ Sci. {USA}",
  volume	= 39,
  pages		= "1095-1100",
  year		= 1953,
  summary	= "Foundational paper for theory of infinite games"
}

@InProceedings{	  SharirPnueli,
  author	= {M. Sharir and A. Pnueli},
  title		= {Two approaches to interprocedural data dalow analysis},
  booktitle	= {Program Flow Analysis: Theory and Applications},
  pages		= {189-233},
  publisher	= {Prentice-Hall},
  year		= {1981}
}

@Article{	  Shostak84,
  author	= "R.E. Shostak",
  title		= "Deciding combinations of theories",
  journal	= "Journal of the ACM",
  volume	= "31",
  number	= "1",
  pages		= "1-12",
  year		= "1984"
}

@inproceedings{ Sheard06,
	author = {T. Sheard},
	booktitle = {PLPV},
	title = {Type-level Computation Using Narrowing in Omega.},
	url = {http://web.cecs.pdx.edu/~sheard/papers/sheardPLPV.ps},
	year = {2006}
}
@INPROCEEDINGS{pottier08,
  author = {Y. Regis-Gianas and F. Pottier},
  title = {A {Hoare} Logic for Call-by-Value Functional Programs},
  booktitle = {MPC},
  year = {2008},
  url = {http://cristal.inria.fr/~fpottier/publis/regis-gianas-pottier-hoarefp.ps.gz},
  pdf = {http://cristal.inria.fr/~fpottier/publis/regis-gianas-pottier-hoarefp.pdf},
  note = {To appear},
}

@inproceedings{invgen,
  author    = {A. Gupta and
               A. Rybalchenko},
  title     = {InvGen: An Efficient Invariant Generator},
  booktitle = {CAV},
  year      = {2009},
  pages     = {634-640},
}

@inproceedings{APRON,
  author    = {B. Jeannet and
               A. Min{\'e}},
  title     = {Apron: A Library of Numerical Abstract Domains for Static
               Analysis},
  booktitle = {CAV},
  year      = {2009},
  pages     = {661-667},
}


@Article{	  Sifakis82,
  author	= "J. Sifakis",
  title		= "A unified approach for studying the properties of
		  transition systems",
  journal	= "Theoretical Computer Science",
  volume	= "18",
  year		= "1982",
  pages		= "227--258"
}

@InProceedings{	  SifakisRTSS99,
  author	= "K. Altisen and G. {G{\"o}ssler} and A. Pnueli and J.
		  Sifakis and S. Tripakis and S. Yovine",
  title		= "A Framework for Scheduler Synthesis",
  booktitle	= "RTSS 99: Real-Time Systems Symposium",
  year		= 1999,
  publisher	= "IEEE Press",
  pages		= "154--163"
}

@InProceedings{	  SifakisScheduler,
  author	= {K. Altisen and G. G{\"o}ssler and A. Pnueli and J. Sifakis
		  and S. Tripakis and S. Yovine},
  title		= "A Framework for Scheduler Synthesis",
  booktitle	= "RTSS 99: IEEE Real-Time Systems Symposium",
  year		= "1999",
  pages		= "154--163"
}

@Article{	  SIGACT91,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Time for logic",
  journal	= "SIGACT News",
  volume	= "22",
  number	= "3",
  year		= "1991",
  pages		= "6--12"
}

@Unpublished{	  Simplify,
  author	= {D. Detlefs and G. Nelson and J. Saxe},
  title		= {Simplify Theorem Prover},
  note		= "\url{http://research.compaq.com/SRC/esc/Simplify.html}",
  key		= "SimplifyWebPage"
}

@article{Z3,
  author    = {L. de Moura and N. Bj{\o}rner},
  title     = {Z3: An Efficient {SMT} Solver},
  booktitle = {TACAS},
  year      = {2008},
  ee        = {http://dx.doi.org/10.1007/978-3-540-78800-3_24}
}

@Unpublished{    Yices,
  author  = {B. Dutertre and
             L. De Moura},
  title   = {Yices {SMT} Solver},
  note    = "\url{http://yices.csl.sri.com/}",
  key     = "YicesWebPage"
}

@Article{	  simplifyj,
  author	= {David Detlefs and Greg Nelson and James B. Saxe},
  title		= {Simplify: a theorem prover for program checking.},
  journal	= {J. ACM},
  volume	= {52},
  number	= {3},
  year		= {2005},
  pages		= {365-473},
  ee		= {http://doi.acm.org/10.1145/1066102},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Unpublished{	  SimplifyWebPage,
  author	= {D. Detlefs and G. Nelson and J. Saxe},
  title		= {Simplify Theorem Prover},
  note		= "\url{http://research.compaq.com/SRC/esc/Simplify.html}",
  key		= "SimplifyWebPage"
}

@InCollection{	  SinghalPixley94,
  author	= "V. Singhal and C. Pixley",
  title		= "The verification problem for safe replaceability",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "311--323"
}

@PhDThesis{	  Sistla83,
  author	= "A.P. Sistla",
  title		= "Theoretical Issues in the Design and Verification of
		  Distributed Systems",
  school	= "Harvard University",
  year		= "1983"
}

@Article{	  SistlaClarke85,
  author	= "A.P. Sistla and E.M. Clarke",
  title		= "The complexity of propositional linear temporal logics",
  journal	= "Journal of the ACM",
  volume	= "32",
  number	= "3",
  year		= "1985",
  pages		= "733--749"
}

@InCollection{	  SKH97,
  author	= "O. Stursberg and S. Kowalewski and I. Hoffmann and J.
		  Preu\ss{}ig",
  title		= "Comparing timed and hybrid automata as approximations of
		  continuous systems",
  editor	= "P. Antsaklis and W. Kohn and A. Nerode and S. Sastry",
  booktitle	= "Hybrid Systems IV",
  series	= "Lecture Notes in Computer Science 1273",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "361--377"
}

@InProceedings{	  SL94,
  author	= {R. Segala and N.A. Lynch},
  title		= {Probabilistic Simulations for Probabilistic Processes},
  booktitle	= "CONCUR 94: Concurrency Theory",
  pages		= "481--496",
  year		= 1994,
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer-Verlag",
  volume	= 836,
  summary	= "discusses simulation relations, and preservation of
		  temporal logic properties, defining an analogous to
		  probabilistic ACTL."
}

@Article{	  SL95,
  author	= {R. Segala and N.A. Lynch},
  title		= {Probabilistic Simulations for Probabilistic Processes},
  journal	= "Nordic Journal of Computing",
  volume	= {2},
  number	= {2},
  pages		= {250--273},
  year		= {1995}
}

@Unpublished{	  SLAM-personal,
  title		= "Personal communication",
  author	= "T. Ball and S.K. Rajamani"
}

@InProceedings{	  SLAMPOPL02,
  author	= "T. Ball and S.K. Rajamani",
  title		= "The {SLAM} project: debugging system software via static
		  analysis",
  booktitle	= {POPL},
  publisher	= {ACM},
  year		= {2002},
  pages		= "1-3"
}

@TechReport{	  SLAMTechRep,
  author	= {T. Ball and S. K. Rajamani},
  title		= {Boolean programs: a model and process for software
		  analysis},
  institution	= {Microsoft Research},
  number	= {MSR Technical Report 2000-14},
  year		= {2000}
}

@TechReport{	  SLIC,
  author	= {T. Ball and S. K. Rajamani},
  title		= {{SLIC}: A Specification Language for Interface Checking
		  (of {C})},
  institution	= {Microsoft Research},
  number	= {MSR-TR-2001-21},
  year		= {2001}
}

@InCollection{	  SMF97,
  author	= "T. Stauner and O. M{\"u}ller and M. Fuchs",
  title		= "Using {{\sc HyTech}} to verify an automotive control
		  system",
  booktitle	= "HART 97: Hybrid and Real-time Systems",
  editor	= "O. Maler",
  series	= "Lecture Notes in Computer Science 1201",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "139--153"
}

@Book{		  SML,
  title		= "The definition of Standard ML",
  author	= "Robin Milner and Mads Tofte and Robert Harper",
  publisher	= "MIT Press",
  year		= "1990"
}

@Book{		  Smullyan68,
  author	= "R.M. Smullyan",
  title		= "First-order Logic",
  publisher	= "Springer-Verlag",
  year		= "1968"
}

@article{BerezinClarke02,
  author    = {Sergey Berezin and
               Edmund M. Clarke and
               Armin Biere and
               Yunshan Zhu},
  title     = {Verification of Out-Of-Order Processor Designs Using Model
               Checking and a Light-Weight Completion Function.},
  journal   = {Formal Methods in System Design},
  volume    = {20},
  number    = {2},
  year      = {2002},
  pages     = {159-186},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@InProceedings{	  somesh05,
  author	= {Vinod Ganapathy and Sanjit A. Seshia and Somesh Jha and
		  Thomas W. Reps and Randal E. Bryant},
  title		= {Automatic discovery of API-level exploits.},
  booktitle	= {ICSE},
  year		= {2005},
  pages		= {312-321},
  ee		= {http://doi.acm.org/10.1145/1062518},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  someshBUFFER03,
  author	= {Vinod Ganapathy and Somesh Jha and David Chandler and
		  David Melski and David Vitek},
  title		= {Buffer overrun detection using linear programming and
		  static analysis.},
  booktitle	= {ACM Conference on Computer and Communications Security},
  year		= {2003},
  pages		= {345-354},
  ee		= {http://doi.acm.org/10.1145/948155},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Unpublished{	  Soot,
  title		= {Soot Compilation Framework},
  note		= "\url{http://www.sable.mcgill.ca/soot/}"
}

@InProceedings{	  SPE84,
  author	= "D.E. Shasha and A. Pnueli and W. Ewald",
  title		= "Temporal verification of carrier-sense local area network
		  protocols",
  booktitle	= "Proceedings of the 11th Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1984",
  pages		= "54--65"
}

@InCollection{SpecSharp,
  title		= "The Spec\# programming system: An overview",
  author	= "M. Barnett and K.R.M. Leino and W. Schulte",
  booktitle	= "CASSIS",
  year		= 2004
}

@Article{	  SPIN,
  author	= {G. Holzmann},
  title		= {The {S}pin Model Checker},
  journal	= {IEEE Transactions on Software Engineering},
  volume	= { 23},
  number	= { 5},
  month		= {May},
  year		= { 1997},
  pages		= {279-295}
}

@Article{	  splint,
  title		= "Improving Security Using Extensible Light-weight Static
		  Analysis",
  author	= "D. Evans and D. Larochelle",
  journal	= "IEEE Software",
  volume	= "19(1)",
  pages		= "42--51",
  year		= "2002"
}

@Article{	  srivas90,
  author	= "M. Srivas and M. Bickford",
  title		= "Formal Verification of a Pipelined Microprocessor",
  journal	= "IEEE Software",
  volume	= "7",
  number	= "5",
  year		= "1990",
  pages		= "52-64"
}

@InProceedings{	  SrivastavaISSTA,
  author	= {Amitabh Srivastava and Jay Thiagarajan},
  title		= {Effectively prioritizing tests in development
		  environment.},
  booktitle	= {ISSTA},
  year		= {2002},
  pages		= {97-106},
  ee		= {http://doi.acm.org/566172.566187},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  SRW02,
  author	= {M. Sagiv and T. Reps and R. Wilhelm },
  title		= {Parametric shape analysis via 3-valued logic},
  journal	= {ACM Trans. Program. Lang. Syst},
  volume	= "24(3)",
  publisher	= "ACM",
  year		= {2002},
  pages		= { 217--298}
}

@InProceedings{	  SRW99,
  author	= { M. Sagiv and T. Reps and R. Wilhelm },
  title		= {Parametric shape analysis via 3-valued logic},
  booktitle	= {POPL 99: Principles of Programming Languages},
  publisher	= "ACM",
  year		= {1999},
  pages		= { 105-118}
}

@InProceedings{	  SSP00,
  author	= "O. Shakernia and S.S. Sastry and G.J. Pappas",
  title		= "Decidable Controller Synthesis for Classes of Linear
		  Systems",
  booktitle	= "HSCC 00: Hybrid Systems Computation and Control",
  pages		= "407-420",
  publisher	= "Springer-Verlag",
  series	= "Lecture Notes in Computer Science",
  volume	= 1790,
  year		= 2000
}

@InCollection{	  STACS00,
  author	= "T.A. Henzinger and R. Majumdar",
  title		= "A classification of symbolic transition systems",
  booktitle	= "STACS 00: Theoretical Aspects of Computer Science",
  editor	= "H. Reichel and S. Tison",
  series	= "Lecture Notes in Computer Science 1770",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "13--34"
}

@InProceedings{	  Stark85,
  author	= "Eugene W. Stark",
  title		= "A Proof Technique for Rely/Guarantee Properties",
  booktitle	= "FSTTCS 1985: Foundations of Software Technology and
		  Theoretical Computer Science",
  year		= "2004",
  editor	= "S. N. Maheshwari",
  series	= "LNCS 206",
  publisher	= "Springer-Verlag",
  pages		= "369--391"
}

@InProceedings{	  StarkSmolka98,
  author	= "E.W. Stark and S.A. Smolka",
  title		= "Compositional analysis of expected delays in networks of
		  probabilistic {I/O} automata",
  booktitle	= "Proceedings of the 13th Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1998",
  pages		= "466--477"
}

@InProceedings{	  Steensgard96,
  title		= {Points-to Analysis in almost Linear Time},
  author	= {B. Steensgard},
  booktitle	= {POPL 96: Principles of Programming Languages},
  pages		= {32-41},
  publisher	= {ACM},
  year		= {1996}
}

@InProceedings{	  Steffen91,
  author	= {B. Steffen},
  title		= {Data Flow Analysis as Model Checking},
  booktitle	= {TACS 91: Theoretical Aspects of Computer Science},
  series	= {LNCS 536},
  publisher	= "Springer",
  pages		= "346-365",
  year		= {1991}
}

@InProceedings{	  STFW01,
  author	= {Umesh Shankar, Kunal Talwar, Jeffrey Foster and David
		  Wagner},
  title		= {Detecting Format String Vulnerabilities with Type
		  Qualifiers},
  booktitle	= {USENIX Security Symposium},
  year		= {2001},
  pages		= {}
}

@InCollection{	  Stirling95,
  author	= "C.P. Stirling",
  title		= "Local Model Checking Games",
  booktitle	= "CONCUR 95: Concurrency Theory",
  series	= "Lecture Notes in Computer Science 962",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "1--11"
}

@Article{	  StirlingWalker91,
  author	= "C.P. Stirling and D.J. Walker",
  title		= "Local model checking in the modal $\mu$-calculus",
  journal	= "Theoretical Computer Science",
  volume	= "89",
  number	= "1",
  year		= "1991"
}

@InProceedings{	  Sto02,
  author	= {M.I.A. Stoelinga},
  booktitle	= {Formal Aspects of Computing},
  title		= {Fun with {FireWire}: Experiments with Verifying the
		  {IEEE1394} Root Contention Protocol},
  year		= 2002,
  note		= {accepted for publication}
}

@InProceedings{	  STOC93,
  author	= "R. Alur and T.A. Henzinger and M.Y. Vardi",
  title		= "Parametric real-time reasoning",
  booktitle	= "Proceedings of the 25th Annual Symposium on Theory of
		  Computing",
  publisher	= "ACM Press",
  year		= "1993",
  pages		= "592--601"
}

@InProceedings{	  STOC95,
  author	= "T.A. Henzinger and P.W. Kopke and A. Puri and P. Varaiya",
  title		= "What's decidable about hybrid automata?",
  booktitle	= "Proceedings of the 27th Annual Symposium on Theory of
		  Computing",
  publisher	= "ACM Press",
  year		= "1995",
  pages		= "373--382"
}

@Article{	  STOC95j,
  author	= "T.A. Henzinger and P.W. Kopke and A. Puri and P. Varaiya",
  title		= "What's decidable about hybrid automata?",
  journal	= "Journal of Computer and System Sciences",
  volume	= "57",
  year		= "1998",
  pages		= "94--124"
}

@PhDThesis{	  Stockmeyer74,
  author	= "L.J. Stockmeyer",
  title		= "The Complexity of Decision Problems in Automata Theory and
		  Logic",
  school	= "Massachusetts Institute of Technology",
  year		= "1974"
}

@InProceedings{	  StockmeyerMeyer73,
  author	= "L.J. Stockmeyer and A.R. Meyer",
  title		= "Word problems requiring exponential time",
  booktitle	= "Proceedings of the 5th Annual Symposium on Theory of
		  Computing",
  publisher	= "ACM Press",
  year		= "1973",
  pages		= "1--9"
}

@InProceedings{	  stotts02,
  author	= "Stotts, D. and Lindsey, M. and Antley, A.",
  year		= "2002",
  title		= "An Informal Formal Method for Systematic {JUnit} Test-Case
		  Generation",
  booktitle	= "XP/Agile Universe 2002",
  publisher	= "Springer-Verlag",
  series	= "Lecture Notes in Computer Science 2418",
  pages		= "132--143"
}

@InProceedings{	  Stump,
  author	= "A. Stump and C.W. Barrett and D.L. Dill and J.R. Levitt",
  title		= "A Decision Procedure for an Extensional Theory of Arrays",
  pages		= "29--37",
  booktitle	= "LICS 01: Logic in Computer Science",
  publisher	= "IEEE",
  year		= "2003"
}

@InProceedings{   sulzmann97type,
    author 	= "M. Sulzmann and M. Odersky and M. Wehr",
    title 	= "Type Inference with Constrained Types",
    booktitle 	= "{FOOL}",
    year 	= "1997",
    url 	= "citeseer.ist.psu.edu/article/odersky99type.html" }

@InProceedings{	  SuzukiIshihata77,
  author	= {N. Suzuki and K. Ishihata},
  title		= {Implementation of an Array Bound Checker},
  booktitle	= "POPL 77: Principles of Programming Languages",
  publisher	= {ACM},
  year		= {1977},
  pages		= {132-143}
}

@Article{	  SY86,
  author	= "R.E. Strom and S. Yemini",
  title		= "Typestate: A Programming Language Concept for Enhancing
		  Software Reliability",
  journal	= "IEEE Trans. Software Eng.",
  volume	= "12(1)",
  pages		= "157--171",
  publisher	= "IEEE Press",
  year		= "1986"
}

@InCollection{	  TACAS00HM,
  author	= "T.A. Henzinger and R. Majumdar",
  title		= "Symbolic model checking for rectangular hybrid systems",
  booktitle	= "TACAS 00: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  editor	= "S. Graf and M. Schwartzbach",
  series	= "Lecture Notes in Computer Science 1785",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "142--156"
}

@InCollection{	  TACAS00HR,
  author	= "T.A. Henzinger and S.K. Rajamani",
  title		= "Fair bisimulation",
  booktitle	= "TACAS 00: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  editor	= "S. Graf and M. Schwartzbach",
  series	= "Lecture Notes in Computer Science 1785",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "299--314"
}

@InCollection{	  TACAS95,
  author	= "T.A. Henzinger and P.-H. Ho and H. Wong-Toi",
  title		= "A user guide to {{\sc HyTech}}",
  booktitle	= "TACAS 95: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  editor	= "E. Brinksma and W.R. Cleaveland and K.G. Larsen and T.
		  Margaria and B. Steffen",
  series	= "Lecture Notes in Computer Science 1019",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "41--71"
}

@InCollection{	  TACAS98,
  author	= "R. Alur and T.A. Henzinger and S. Rajamani",
  title		= "Symbolic exploration of transition hierarchies",
  booktitle	= "TACAS 98: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  editor	= "B. Steffen",
  series	= "Lecture Notes in Computer Science 1384",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "330--344"
}

@InCollection{	  TAKB96,
  author	= "S. Ta\c{s}iran and R. Alur and R.P. Kurshan and R.K.
		  Brayton",
  title		= "Verifying abstractions of timed systems",
  booktitle	= "CONCUR 96: Concurrency Theory",
  editor	= "U. Montanari",
  series	= "LNCS",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "546--562"
}

@InProceedings{	  Talpin04,
  author	= {Jean-Pierre Talpin and David Berner and Sandeep K. Shukla
		  and Paul Le Guernic and Abdoulaye Gamati{\'e} and Rajesh
		  Gupta},
  title		= {A Behavioral Type Inference System for Compositional
		  System-on-Chip Design.},
  booktitle	= {ACSD},
  year		= {2004},
  pages		= {47-56},
  ee		= {http://csdl.computer.org/comp/proceedings/acsd/2004/2077/00/20770047abs.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Book{		  Tarski51,
  author	= "A. Tarski",
  title		= "A Decision Method for Elementary Algebra and Geometry",
  publisher	= "University of California Press, Berkeley and Los Angeles",
  year		= "1951"
}

@InCollection{	  TCS00,
  author	= "T.A. Henzinger",
  title		= "Masaccio: a formal model for embedded components",
  booktitle	= "TCS 00: Theoretical Computer Science",
  editor	= "J. van Leeuwen and O. Watanabe and M. Hagiya and P.D.
		  Mosses and T. Ito",
  series	= "Lecture Notes in Computer Science 1872",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "549--563"
}

@InProceedings{	  TerauchiAiken05,
  author	= {T. Terauchi and A. Aiken},
  title		= {Secure Information Flow as a Safety Problem.},
  booktitle	= {SAS},
  year		= {2005},
  pages		= {352-367},
  ee		= {http://dx.doi.org/10.1007/11547662_24},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Thomas81,
  author	= "Wolfgang Thomas",
  title		= "A combinatorial approach to the theory of
		  $\omega$-automata",
  journal	= "Information and Control",
  volume	= "48",
  number	= "3",
  year		= "1981",
  pages		= "261--283"
}

@InCollection{	  Thomas90,
  author	= "W. Thomas",
  title		= "Automata on infinite objects",
  booktitle	= "Handbook of Theoretical Computer Science",
  volume	= "B",
  editor	= "van Leeuwen, J.",
  publisher	= "Elsevier",
  year		= "1990",
  pages		= "133--191"
}

@InProceedings{	  Thomas95,
  author	= "W. Thomas",
  title		= "On the Synthesis of Strategies in Infinite Games",
  booktitle	= "STACS 95: Theoretical Aspects of Computer Science",
  pages		= "1--13",
  publisher	= "Springer-Verlag",
  series	= "Lecture Notes in Computer Science",
  volume	= 900,
  year		= 1995
}

@InProceedings{	  TinyOS,
  author	= "J. Hill and R. Szewczyk and A. Woo and S. Hollar and D.
		  Culler and K. Pister",
  title		= "System architecture directions for networked sensors",
  booktitle	= "ASPLOS 2000: Architectural Support for Programming
		  Languages and Operating Systems",
  publisher	= {ACM},
  pages		= {93--104},
  year		= "2000"
}

@Article{	  Tip95,
  author	= "F. Tip",
  year		= "1995",
  title		= "A survey of program slicing techniques",
  journal	= "Journal of Programming Languages",
  volume	= 3,
  pages		= "121--189"
}

@InProceedings{	  TLS98,
  author	= "C. Tomlin and J. Lygeros and S.S. Sastry",
  title		= "Synthesizing Controllers for Nonlinear Hybrid Systems",
  booktitle	= "HSCC 98: Hybrid Systems Computation and Control",
  pages		= "360-373",
  publisher	= "Springer-Verlag",
  series	= "Lecture Notes in Computer Science",
  volume	= 1386,
  year		= 1998
}

@InProceedings{	  TML97,
  author	= "C. Thekkath and T. Mann and E.K. Lee",
  title		= "Frangipani: {A} scalable distributed file system",
  booktitle	= "SOSP 97: Symposium on Operating Systems Principles",
  year		= "1997",
  pages		= "224--237"
}

@InProceedings{	  Tomlin97,
  author	= "J. Kosecka and C.J. Tomlin and G. Pappas and S. Sastry",
  title		= "Generation of conflict resolution manoeuvres for air
		  traffic management",
  booktitle	= "IROS 97: Proceedings of the 1997 IEEE/RSJ International
		  Conference on Intelligent Robot and Systems",
  volume	= "3",
  publisher	= "IEEE Press",
  year		= "1997",
  pages		= "1598--1603"
}

@PhDThesis{	  Tomlin98,
  author	= "C. Tomlin",
  title		= "Hybrid Control of Air Traffic Management Systems",
  school	= "University of California at Berkeley",
  year		= "1998"
}

@TechReport{	  TR95,
  author	= "T.A. Henzinger and P.W. Kopke",
  title		= "Hybrid automata with finite mutual simulations",
  institution	= "Cornell University",
  number	= "CSD-TR-95-1497",
  year		= "1995"
}

@InCollection{	  TripakisYovine96,
  author	= "S. Tripakis and S. Yovine",
  title		= "Analysis of timed systems based on time-abstracting
		  bisimulations",
  booktitle	= "CAV 96: Computer-aided Verification",
  series	= "LNCS",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "232--243"
}

@Book{		  TTA,
  author	= "H. Kopetz",
  title		= "Real-time systems: {D}esign principles for distributed
		  embedded applications",
  publisher	= "Kluwer",
  year		= "1997"
}

@Article{	  TujVrieze87,
  author	= "F. Thuijsman and O.J. Vrieze",
  title		= "The Bad Match, a Total Reward Stochastic Game",
  journal	= "Operations Research Spektrum",
  pages		= "93--99",
  volume	= 9,
  year		= 1987,
  summary	= "Introduces total reward stochastic games"
}

@InProceedings{	  Turing36,
  author	= {A. M. Turing},
  title		= {On computable numbers, with an application to the
		  Eintscheidungsproblem},
  booktitle	= {LMS},
  publisher	= {},
  year		= {1936}
}


@InCollection{    LIRS05,
  author = "T. Lev-Ami and N. Immerman and T. Reps and M. Sagiv and S. Srivastava and G. Yorsh", 
  title = "Simulating reachability using 
	first-order logic with applications 
	to verification of linked data structures",
  booktitle = "CADE 05: Conference on Automated Deduction", 
  publisher = "Springer",
  year = 2005
}

@InCollection{	  TVLA,
  author	= "T. Lev-Ami and S. Sagiv",
  title		= "{TVLA}: {A} System for Implementing Static Analyses",
  booktitle	= "SAS",
  pages		= "280--301",
  series	= "LNCS 1824",
  publisher	= "Springer",
  year		= "2000"
}

@Article{	  typestate,
  author	= "R.E. Strom and S. Yemini",
  title		= "Typestate: A Programming Language Concept for Enhancing
		  Software Reliability",
  journal	= "IEEE Trans. Software Eng.",
  volume	= "12(1)",
  pages		= "157--171",
  publisher	= "IEEE Press",
  year		= "1986"
}

@InProceedings{	  UCLID,
  author	= {Shuvendu K. Lahiri and Sanjit A. Seshia},
  title		= {The UCLID Decision Procedure.},
  booktitle	= {CAV},
  year		= {2004},
  pages		= {475-478},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3114{\&}spage=475}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Book{		  UML,
  author	= "J. Rumbaugh and G. Booch and I. Jacobson",
  title		= "Petri Nets: An Introduction",
  publisher	= "Springer-Verlag",
  year		= "1999"
}

@Unpublished{	  valgrind,
  author	= "",
  title		= "Valgrind",
  note		= "\url{http://valgrind.org/}",
  year		= "2005"
}

@InCollection{	  Valmari90,
  author	= "A. Valmari",
  title		= "A stubborn attack on state explosion",
  booktitle	= "CAV 90: Computer-aided Verification",
  editor	= "R.P. Kurshan and E.M. Clarke",
  series	= "LNCS 531",
  publisher	= "Springer-Verlag",
  year		= "1990",
  pages		= "25--42"
}

@Unpublished{	  Vampyre,
  author	= {D. {Blei {\em et al.}}},
  title		= {Vampyre: A Proof Generating Theorem Prover},
  note		= "\url{http://www.eecs.berkeley.edu/$\sim$rupak/Vampyre}",
  key		= "VampyreWebPage"
}

@Unpublished{	  VampyreWebPage,
  author	= {D. Blei and C. Harrelson and R. Jhala and R. Majumdar and
		  G. C. Necula and S. P. Rahul and W. Weimer and D. Weitz},
  title		= {Vampyre: A Proof Generating Theorem Prover},
  note		= "\url{http://www.eecs.berkeley.edu/~rupak/Vampyre}",
  key		= "VampyreWebPage"
}

@Book{		  vanBenthem83,
  author	= "van Benthem, J.",
  title		= "The Logic of Time",
  publisher	= "D. Reidel Publishing Company",
  year		= "1983"
}

@PhDThesis{	  vanGlabbeek90,
  author	= "van Glabbeek, R.J.",
  title		= "Comparative Concurrency Semantics and Refinement of
		  Actions",
  school	= "Vrije Universiteit te Amsterdam",
  address	= "The Netherlands",
  year		= "1990"
}

@Article{	  Varaiya93,
  author	= "P. Varaiya",
  title		= "Smart cars on smart roads: problems of control",
  journal	= "IEEE Transactions on Automatic Control",
  volume	= "38",
  number	= "2",
  year		= "1993",
  pages		= "195--207"
}

@InProceedings{	  Vardi01,
  author	= "M.Y. Vardi",
  title		= "Branching vs. Linear Time: Final Showdown",
  booktitle	= "TACAS 01: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  pages		= "1-22",
  year		= "2001",
  series	= "Lecture Notes in Computer Science 2031",
  publisher	= "Springer-Verlag"
}

@InProceedings{	  Vardi88,
  author	= "M.Y. Vardi",
  title		= "A temporal fixpoint calculus",
  booktitle	= "Proceedings of the 15th Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1988",
  pages		= "250--259"
}

@InProceedings{	  Vardi98,
  author	= "M.Y. Vardi",
  title		= "Sometimes and Not Never Re-revisited: On Branching Versus
		  Linear Time",
  booktitle	= "CONCUR 98: Concurrency Theory",
  pages		= "1-17",
  year		= "199",
  series	= "Lecture Notes in Computer Science 1466",
  publisher	= "Springer-Verlag"
}

@InProceedings{	  VardiP85,
  author	= "M.Y. Vardi",
  title		= "Automatic Verification of Probabilistic Concurrent
		  Finite-State Systems",
  booktitle	= "Proceedings of the 26th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= 1985,
  pages		= "327--338",
  group		= "PR"
}

@Article{	  VardiWolper86jcss,
  author	= "M.Y. Vardi and P. Wolper",
  title		= "Automata-theoretic techniques for modal logics of
		  programs",
  journal	= "Journal of Computer and System Sciences",
  volume	= "32",
  year		= "1986",
  pages		= "183--221"
}

@InProceedings{	  VardiWolper86lics,
  author	= "M.Y. Vardi and P. Wolper",
  title		= "An automata-theoretic approach to automatic program
		  verification",
  booktitle	= "Proceedings of the First Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1986",
  pages		= "322--331"
}

@Article{	  VardiWolper94,
  author	= "M.Y. Vardi and P. Wolper",
  title		= "Reasoning about infinite computations",
  journal	= "Information and Computation",
  volume	= "115",
  number	= "1",
  year		= "1994",
  pages		= "1--37"
}

@InProceedings{	  Vault,
  title		= {Enforcing high-level protocols in low-level software},
  author	= {R. DeLine and M. F\"ahndrich},
  booktitle	= {PLDI 01: Programming Language Design and Implementation},
  publisher	= {ACM},
  year		= {2001}
}

@InCollection{	  vBW01CONCUR,
  author	= "F. van Breugel and J. Worrel",
  title		= "An algorithm for quantitative verification of
		  probabilistic transition systems",
  booktitle	= "CONCUR 01: Concurrency Theory",
  series	= "Lecture Notes in Computer Science 2154",
  publisher	= "Springer-Verlag",
  year		= "2001",
  pages		= "336--350"
}

@InCollection{	  vBW01ICALP,
  author	= "F. van Breugel and J. Worrel",
  title		= "Towards quantitative verification of probabilistic
		  systems",
  booktitle	= "ICALP 01: Automata, Languages, and Programming",
  series	= "Lecture Notes in Computer Science 2076",
  publisher	= "Springer-Verlag",
  year		= "2001",
  pages		= "421--432"
}

@InProceedings{	  Verisoft,
  author	= "P. Godefroid",
  title		= "Model checking for programming languages using {Verisoft}",
  booktitle	= {POPL 97: Principles of Programming Languages},
  pages		= {174--186},
  publisher	= {ACM},
  year		= {1997}
}


@inproceedings{VytiniotisJM12,
  author    = {D. Vytiniotis and
               S. L. Peyton-Jones and
               J. Magalh{\~a}es},
  title     = {Equality proofs and deferred type errors: a compiler pearl},
  booktitle = {ICFP},
  year      = {2012},
  pages     = {341-352},
  ee        = {http://doi.acm.org/10.1145/2364527.2364554},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{HooimeijerV11,
  author    = {Pieter Hooimeijer and
               Margus Veanes},
  title     = {An Evaluation of Automata Algorithms for String Analysis},
  booktitle = {VMCAI},
  year      = {2011},
  pages     = {248-262},
  ee        = {http://dx.doi.org/10.1007/978-3-642-18275-4_18},
}

@InProceedings{	  JMX07,
  author	= {Ranjit Jhala and Rupak Majumdar and Ru-Gang Xu},
  title		= {State of the Union: Type Inference via Craig Interpolation},
  booktitle	= {TACAS},
  year		= {2007}
}

@InProceedings{	  Visser,
  author	= "S. Khurshid and C.S. Pasareanu and W. Visser",
  title		= "Generalized Symbolic Execution for Model Checking and
		  Testing",
  booktitle	= "TACAS 03: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  series	= "LNCS",
  pages		= "553--568",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  VisserParkPenix,
  author	= {W. Visser and S. Park and J. Penix},
  title		= {Using Predicate Abstraction to Reduce Object-Oriented
		  Programs for Model Checking},
  booktitle	= {FMSP 00: Formal Methods in Software Practice},
  publisher	= {ACM},
  year		= {2000},
  pages		= {3-12}
}

@Book{		  vNM47,
  author	= "J. von Neumann and O. Morgenstern",
  title		= "Theory of games and economic behavior",
  publisher	= "Princeton University Press",
  year		= 1947
}

@InProceedings{	  VolpanoSmith98,
  author	= "Geoffrey Smith and Dennis Volpano",
  title		= {Secure Information Flow in a Multithreaded Imperative
		  Language},
  booktitle	= {POPL 98: Principles of Programming Languages},
  publisher	= {ACM},
  year		= {1998},
  pages		= "355-364"
}

@InProceedings{	  vPG03,
  author	= "C. von Praun and T. Gross",
  title		= "Static conflict analysis for multi-threaded
		  object-oriented programs",
  booktitle	= "PLDI 2003: Programming Languages Design and
		  Implementation",
  publisher	= {ACM},
  pages		= {115--128},
  year		= "2003"
}

@InProceedings{	  Vrable05,
  author	= "Michael Vrable and Justin Ma and Jay Chen and David Moore
		  and Erik VandeKieft and Alex C. Snoeren and Geoffrey M.
		  Voelker and Stefan Savage",
  title		= "Scalability, Fidelity and Containment in the Potemkin
		  Virtual Honeyfarm",
  booktitle	= "SOSP 05: Symposium on Operating Systems Principles",
  year		= "2005",
  pages		= "--"
}

@InProceedings{	  VWB98,
  author	= "T. Villa and H. {Wong-Toi} and A. Balluchi and J.
		  Preu\ss{}ig and A. {Sangiovanni-Vincentelli} and Y.
		  Watanabe",
  title		= "Formal verification of an automotive engine controller in
		  cutoff mode",
  booktitle	= "Proceedings of the 37th International Conference on
		  Decision and Control",
  publisher	= "IEEE Press",
  year		= "1998",
  pages		= "4271--4276"
}

@InProceedings{	  Wadler,
  author	= {Philip Wadler},
  title		= {Linear types can change the world!},
  booktitle	= {IFIP TC2 Working Conference on Programming Concepts and
		  Methods},
  year		= {1990},
  pages		= {}
}

@InProceedings{	  Walter83,
  author	= "B. Walter",
  title		= "Timed {Petri} nets for modeling and analyzing protocols
		  with real-time characteristics",
  booktitle	= "Proceedings of the Third IFIP WG6.1 International Workshop
		  on Protocol Specification, Testing, and Verification",
  editor	= "H. Rudin and C.H. West",
  publisher	= "Elsevier Science Publishers",
  year		= "1983",
  pages		= "149--159"
}

@InProceedings{	  Wang95,
  author	= "F. Wang",
  title		= "Timing behavior analysis for real-time systems",
  booktitle	= "Proceedings of the Tenth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1995",
  pages		= "112--122"
}

@InProceedings{	  Warlock,
  author	= "N. Sterling",
  title		= "Warlock: a static data race analysis tool",
  booktitle	= "USENIX Winter 1993 Technical Conference",
  pages		= "97--106",
  year		= "1993"
}

@InCollection{	  WB98,
  author	= "P. Wolper and B. Boigelot",
  title		= "Verifying systems with infinite but regular state spaces",
  booktitle	= "CAV 98: Computer-aided Verification",
  series	= "LNCS 1427",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "88--97"
}

@InProceedings{	  wcook05,
  author	= {William R. Cook and Siddhartha Rai},
  title		= {Safe query objects: statically typed objects as remotely
		  executable queries.},
  booktitle	= {ICSE},
  year		= {2005},
  pages		= {97-106},
  ee		= {http://doi.acm.org/10.1145/1062488},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Weiser82,
  author	= "Weiser, M.",
  year		= "1982",
  title		= "Program slicing",
  journal	= "IEEE Transactions on Software Engineering SE-10",
  volume	= 4,
  pages		= "352--357"
}

@InProceedings{	  Welc04,
  author	= {Adam Welc and Suresh Jagannathan and Antony L. Hosking},
  title		= {Transactional Monitors for Concurrent Objects.},
  booktitle	= {ECOOP},
  year		= {2004},
  pages		= {519-542},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3086{\&}spage=519}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InCollection{	  Weyl50,
  author	= "H. Weyl",
  title		= "Elementary proof of a minmax theorem due to von {Neumann}",
  booktitle	= "Contributions to the Theory of Games, I",
  series	= "Annals of Mathematical Studies",
  volume	= "24",
  publisher	= "Princeton University Press",
  pages		= "19--25",
  year		= "1950"
}

@InProceedings{	  WhaleyLam,
  author	= "J. Whaley and M.C. Martin and M.S. Lam",
  title		= "Automatic extraction of object-oriented component
		  interfaces",
  booktitle	= "ISSTA 02: Software Testing and Analysis",
  publisher	= "ACM",
  year		= "2002",
  pages		= "218--228"
}

@InProceedings{	  WhaleyLam02,
  author	= "J. Whaley and M.C. Martin and M.S. Lam",
  title		= "Automatic extraction of object-oriented component
		  interfaces",
  booktitle	= "ISSTA 02: Software Testing and Analysis",
  publisher	= "ACM",
  year		= "2002",
  pages		= "218--228"
}

@InCollection{	  Wilke94,
  author	= "T. Wilke",
  title		= "Specifying timed state sequences in powerful decidable
		  logics and timed automata",
  booktitle	= "FTRTFT 94: Formal Techniques in Real-time and
		  Fault-tolerant Systems",
  editor	= "H. Langmaack and de Roever, W.-P. and J. Vytopil",
  series	= "LNCS 863",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "694--715"
}

@Book{		  Williams,
  author	= "D. Williams",
  title		= "Probability With Martingales",
  year		= 1991,
  publisher	= "Cambridge University Press"
}

@Book{		  WinskelBook,
  author	= "G. Winskel",
  title		= "The formal semantics of programming languages: an
		  introduction",
  publisher	= "MIT Press",
  year		= "1993"
}

@Article{	  Wirth71,
  author	= "N. Wirth",
  title		= "Program Development by Stepwise Refinement",
  journal	= "Communication of the ACM",
  year		= "1971",
  number	= "4",
  volume	= "14",
  pages		= "221--227"
}

@InProceedings{	  WME90,
  author	= "F. Wang and A.K. Mok and E.A. Emerson",
  title		= "Real-time distributed system specification and
		  verification in asynchronous propositional temporal logic",
  booktitle	= "Proceedings of the 12th International Conference on
		  Software Engineering",
  year		= "1992"
}

@Book{		  Wolfram88,
  author	= "S. Wolfram",
  title		= "Mathematica: A System for Doing Mathematics by Computer",
  publisher	= "Addison-Wesley Publishing Company",
  year		= "1988"
}

@PhDThesis{	  Wolper82,
  author	= "P. Wolper",
  title		= "Synthesis of Communicating Processes from Temporal-Logic
		  Specifications",
  school	= "Stanford University",
  year		= "1982"
}

@Article{	  Wolper83,
  author	= "P. Wolper",
  title		= "Temporal logic can be more expressive",
  journal	= "Information and Control",
  volume	= "56",
  number	= "1/2",
  year		= "1983",
  pages		= "72--99"
}

@InProceedings{	  WongToi97,
  author	= "H. Wong-Toi",
  title		= "The synthesis of controllers for linear hybrid automata",
  booktitle	= "Proceedings of the 36th Conference on Decision and
		  Control",
  publisher	= "IEEE Computer Society Press",
  year		= "1997",
  pages		= "4607--4612"
}

@InCollection{	  WongToiDill90,
  author	= "{Wong-Toi}, H. and D.L. Dill",
  title		= "Synthesizing processes and schedulers from temporal
		  specifications",
  booktitle	= "CAV 90: Computer-aided Verification",
  editor	= "R.P. Kurshan and E.M. Clarke",
  series	= "LNCS 531",
  publisher	= "Springer-Verlag",
  note		= "1990",
  pages		= "272--281"
}

@InProceedings{	  WSS94,
  author	= "S.-H. Wu and S.A. Smolka and E.W. Stark",
  title		= "Composition and behaviors of probabilistic {I/O} automata",
  booktitle	= "CONCUR 94: Concurrency Theory",
  series	= "Lect. Notes in Comp. Sci.",
  pages		= "511--528",
  publisher	= "Springer",
  year		= "1994"
}

@InProceedings{	  WVS83,
  author	= "P. Wolper and M.Y. Vardi and A.P. Sistla",
  title		= "Reasoning about infinite computation paths",
  booktitle	= "Proceedings of the 24th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1983",
  pages		= "185--194"
}

@Article{	  XDuce,
  author	= "H. Hosoya and B.C. Pierce",
  title		= "{XDuce}: A typed {XML} processing language",
  journal	= "ACM Transactions on Internet Technology",
  volume	= "3(2)",
  pages		= "117--148",
  year		= 2003
}

@InProceedings{	  Xie05,
  author	= {Tao Xie and Darko Marinov and Wolfram Schulte and David
		  Notkin},
  title		= {Symstra: A Framework for Generating Object-Oriented Unit
		  Tests Using Symbolic Execution.},
  booktitle	= {TACAS},
  year		= {2005},
  pages		= {365-381},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3440{\&}spage=365}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  XieA05,
  author	= {Y. Xie and A. Aiken},
  title		= {Scalable error detection using boolean satisfiability.},
  booktitle	= {POPL 05: Principles of Programming Languages},
  year		= {2005},
  publisher	= "ACM",
}

@InProceedings{	  XieAiken05,
  author	= {Y. Xie and A. Aiken},
  title		= {Scalable error detection using boolean satisfiability.},
  booktitle	= {POPL},
  year		= {2005},
  pages		= {351-363},
  ee		= {http://doi.acm.org/10.1145/1040334},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}
@inproceedings{saturn,
  author = "I. Dillig and T. Dillig and A. Aiken",
  title  = "Sound, complete, and scalable path-sensitive analysis",
  booktitle = "PLDI",
  publisher = "ACM",
  year  = 2008,
  pages = "270--280"
}

@inproceedings{CousotsPOPL11,
  author    = {P. Cousot and
               R. Cousot and
               F. Logozzo},
  title     = {A parametric segmentation functor for fully automatic and
               scalable array content analysis},
  booktitle = {POPL},
  year      = {2011},
  pages     = {105-118},
  ee        = {http://doi.acm.org/10.1145/1926385.1926399},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@inproceedings{JhalaMcMillanCAV07,
  author    = {R. Jhala and K. L. McMillan},
  title     = {Array Abstractions from Proofs},
  booktitle = {CAV},
  year      = {2007},
  pages     = {193-206},
  ee        = {http://dx.doi.org/10.1007/978-3-540-73368-3_23},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@inproceedings{pfenningxi98,
  author    = {H. Xi and 
               F. Pfenning},
  title     = {Eliminating Array Bound Checking Through Dependent Types.},
  booktitle = {PLDI},
  year      = {1998},
}

@inproceedings{XiPfenning99,
  author    = {H. Xi and 
               F. Pfenning},
  title     = {Dependent Types in Practical Programming},
  booktitle = {POPL},
  year      = {1999},
}

@article{henglein93,
  author    = {F. Henglein},
  title     = {Type Inference with Polymorphic Recursion},
  journal   = {ACM TOPLAS},
  volume    = {15},
  number    = {2},
  year      = {1993},
  pages     = {253-289}
}

@Unpublished{vecurl,
  author    = {Luca de Alfaro},
  title     = {Vec: Extensible, Functional Arrays for Ocaml},
  note      = "\url{http://www.dealfaro.com/vec.html}",
  key       = "vecurl"
}

@Unpublished{benchmarkURL,
  title     = {{Dsolve} Recursive Refinements Benchmarks},
  note      = "\url{http://pho.ucsd.edu/liquid/benchmarks/}",
  key       = "Dsolve Benchmarks"
}

@Unpublished{dmlbenchmarks,
  author    = {H. Xi},
  title     = {{DML} code examples},
  note      = "\url{http://www.cs.bu.edu/fac/hwxi/DML/}",
  key       = "DMLBenchmarks"
}


@PhDThesis{	  Xi98,
  author	= "H. Xi",
  title		= "Dependent Types in Practical Programming",
  school	= "Carnegie Mellon University",
  year		= "1998"
}


@inproceedings{Flanagan93,
  author    = {C. Flanagan and
               A. Sabry and
               B. F. Duba and
               M. Felleisen},
  title     = {The Essence of Compiling with Continuations.},
  booktitle = {PLDI},
  year      = {1993},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  XuMillerReps,
  author	= {Z. Xu and B. P. Miller and T. Reps},
  title		= {Safety Checking of Machine Code},
  booktitle	= {PLDI 00: Programming Language Design and Implementation},
  publisher	= {ACM},
  year		= {2000},
  pages		= {70-82}
}

@InProceedings{	  Yahav01,
  author	= "E. Yahav",
  title		= "Verifying safety properties of concurrent {Java} programs
		  using {3-}valued logic",
  booktitle	= "POPL 01: Principles of Programming Languages",
  pages		= "27--40",
  publisher	= "ACM Press",
  year		= "2001"
}

@InProceedings{	  YahavRamalingam,
  author	= {E.~Yahav and G.~Ramalingam},
  title		= {Verifying Safety Properties using Separation and
		  Heterogeneous Abstractions},
  booktitle	= {Proc.\ PLDI},
  publisher	= {ACM},
  year		= {2004},
  pages		= {25-34}
}

@InCollection{	  Yannakakis90,
  title		= " Graph Theoretic Methods in Database Theory",
  author	= "M. Yannakakis",
  booktitle	= " Proc. 9th ACM Symp. on Principles of Database Systems",
  publisher	= "ACM Press",
  pages		= "203-242",
  year		= "1990"
}

@InCollection{	  Yi90,
  author	= "W. Yi",
  title		= "Real-time behavior of asynchronous agents",
  booktitle	= "CONCUR 90: Theories of Concurrency",
  editor	= "J.C.M. Baeten and J.W. Klop",
  series	= "LNCS 458",
  publisher	= "Springer-Verlag",
  year		= "1990",
  pages		= "502--520"
}

@InProceedings{	  YichenAiken,
  author	= "Y. Xie and A. Aiken",
  title		= "Scalable error detection using boolean satisfiability",
  booktitle	= "POPL 05",
  publisher	= "ACM",
  year		= "2005"
}

@InProceedings{	  Yorsh04,
  author	= "Thomas W. Reps and Shmuel Sagiv and Greta Yorsh",
  title		= "Symbolic Implementation of the Best Transformer",
  booktitle	= "VMCAI 2004: Verification Model Checking and Abstract
		  Interpretation",
  editor	= "Bernhard Steffen and Georgio Levi",
  series	= "LNCS 2937",
  publisher	= "Springer-Verlag",
  year		= "2004",
  pages		= "252--266"
}

@InProceedings{	  Yovine03,
  author	= "C. Kloukinas and C. Nakhli and S. Yovine",
  title		= "A Methodology and Tool Support for Generating Scheduled
		  Native Code for Real-Time Java Applications",
  booktitle	= "EMSOFT 03: Embedded Software",
  series	= "Lecture Notes in Computer Science",
  pages		= "274--289",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  Zeller05,
  author	= {Holger Cleve and Andreas Zeller},
  title		= {Locating causes of program failures.},
  booktitle	= {ICSE},
  year		= {2005},
  pages		= {342-351},
  ee		= {http://doi.acm.org/10.1145/1062522},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  Zeller99,
  author	= {Andreas Zeller},
  title		= {Yesterday, My Program Worked. Today, It Does Not. Why?},
  booktitle	= {ESEC / SIGSOFT FSE},
  year		= {1999},
  pages		= {253-267},
  ee		= {http://link.springer.de/link/service/series/0558/bibs/1687/16870253.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@article{Zenger97,
  author    = {C. Zenger},
  title     = {Indexed Types},
  journal   = {TCS},
  year      = {1997},
  ee        = {http://dx.doi.org/10.1016/S0304-3975(97)00062-5},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  ZhangGupta04,
  author	= "X. Zhang and R. Gupta",
  year		= 2004,
  title		= "Cost ective dynamic program slicing",
  booktitle	= "PLDI 04: Programming Language Design and Implementation",
  publisher	= "ACM",
  pages		= "94--106"
}

@InProceedings{	  Zhendong,
  author	= "C. Gould and Z. Su and P.T. Devanbu",
  title		= "Precise Analysis of String Expressions",
  booktitle	= "ICSE 04: Software Engineering",
  pages		= "645--654",
  publisher	= "IEEE Press",
  year		= "2004"
}

@InProceedings{	  zhendong04,
  author	= {Carl Gould and Zhendong Su and Premkumar T. Devanbu},
  title		= {Static Checking of Dynamically Generated Queries in
		  Database Applications.},
  booktitle	= {ICSE},
  year		= {2004},
  pages		= {645-654},
  ee		= {http://csdl.computer.org/comp/proceedings/icse/2004/2163/00/21630645abs.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  ZP96,
  author	= "U. Zwick and M. Paterson",
  title		= "The complexity of mean payoff games on graphs",
  journal	= "Theoretical Computer Science",
  volume	= "158",
  pages		= "343--359",
  publisher	= "Elsevier",
  year		= "1996"
}

@InProceedings{	  ZSS94,
  author	= "S. Zhang and O. Sokolsky and S. Smolka",
  title		= "On the parallel complexity of model checking and the
		  $\mu$-calculus",
  booktitle	= "Proceedings of the Ninth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1994",
  pages		= "154--163"
}

@InProceedings{	  Zuck,
  author	= "T. Arons, A. Pnueli, L.D. Zuck",
  title		= "Parameterized Verification by Probabilistic Abstraction",
  booktitle	= "FoSSaCS 03",
  series	= "Lect. Notes in Comp. Sci.",
  pages		= "87--102",
  publisher	= "Springer",
  year		= "2003"
}

@book{ HP,
	author = "J. Hennessy and D. Patterson",
	title = "Computer Architecture: A Quantitative Approach, 3rd edition",
	publisher = "Morgan Kaufmann",
	year = 2005
	}

@inproceedings{Noble,
  author =       "David G. Clarke and James Noble and John M. Potter",
  title =        {Simple Ownership Types for Object Containment},
  booktitle = "ECOOP 01: European Conference on Object Oriented Programming",
  keywords = {olit ecoop01},
  pages = "53-76",
}

@Inproceedings{  FF05,
	author = "C. Flanagan and S.N. Freund and M. Lifshin",
	title = "Type inference for atomicity",
	booktitle = "TLDI 05: Types in Language Design and Implementation",
	pages = "47-58",
	publisher = "ACM",
	year = 2005
}

@InProceedings{ BHT06,
	author = "D. Beyer and T. Henzinger and G. Theoduloz",
	title = "Lazy shape analysis",
	booktitle = "CAV 06: Computer-Aided Verification",
	publisher = "Springer",
	year = 2006
}

@misc{ VIS,
	author = "The VIS Team",
	title = "VIS",
	note = "Available from http://www-cad.eecs.berkeley.edu/$\sim$vis/"
}
@misc{ SMV,
	author = "K. McMillan",
	title = "Cadence SMV",
	note = "Available from http://www-cad.eecs.berkeley.edu/$\sim$kenmcmil/"
}
@misc{ TestBuilder,
	author = "Cadence",
	title = "TestBuilder",
	note = "http://www.testbuilder.net"
}
@article{ M5,
	title = "The {M5} Simulator: Modeling Networked Systems",
	author = "N.L. Binkert and R.G. Dreslinski and L.R. Hsu and K.T. Lim and A.G. Saidi and S.K. Reinhardt",
	journal = "IEEE Micro", 
	volume = "26(4)", 
	pages = "52-60", 
	year  = 2006
}
@misc{ IntelManual,
	author = "Intel",
	title = "Intel IA32 Technical Documents",
	note = "http://www.intel.com/design/pentium4/manuals/index\_new.htm"
}
@misc{ Austin,
	author = "T. Austin",
	title = "SimpleScalar",
	note = "http://www.simplescalar.com/"
}
@misc{ PTLSIM,
	author = "M. Yourst",
	title = "PTLsim",
	note = "http://www.ptlsim.org"
}
@InProceedings{ CHARME05,
	author = "A. Chakrabarti and K. Chatterjee and T.A. Henzinger and O. Kupferman and R. Majumdar",
	title = "Verifying quantitative properties using bound functions",
	booktitle = "CHARME 2005", 
	publisher = "Springer",
	year =  2005
}

@InProceedings{ SakallahRefinement,
	author = "Z.S. Andraus and M.H. Liffiton and K.A. Sakallah",
	title = "Refinement strategies for verification methods based on datapath abstraction",
	booktitle = "ASP-DAC 06",
	pages = "19-24",
	publisher = "ACM",
	year = 2006
}

@InProceedings{ Stoller05,
  author = "R. Agarwal and A. Sasturkar and L. Wang and S.D. Stoller",
  title = "Optimized run-time race detection and atomicity checking using partial discovered types",
  booktitle = "ASE 05: Automated Software Engineering",
  pages = "233-242",
  year = 2005
}

@inproceedings{   aiken93type,
  author 	= "Alexander Aiken and Edward L. Wimmers",
  title 	= "Type Inclusion Constraints and Type Inference",
  booktitle 	= "Functional Programming Languages and Computer Architecture",
  pages 	= "31-41",
  year 		= "1993",
  url 		= "citeseer.ist.psu.edu/aiken93type.html"
}

@inproceedings{ lincoln92algorithmic,
  author = "P. Lincoln and J. C. Mitchell",
  title = "Algorithmic Aspects of Type Inference with Subtypes",
  booktitle = "POPL",
  address = "Albequerque, New Mexico",
  year = "1992",
  url = "citeseer.ist.psu.edu/lincoln92algorithmic.html" }

@misc{ flanagan01houdini,
  author = "C. Flanagan and K. Leino",
  title = "Houdini, an Annotation Assistant for ESC/Java",
  text = "C. Flanagan and K. R. M. Leino. Houdini, an Annotation Assistant for ESC/Java.
    In Proc. FME 2001.",
  year = "2001",
  url = "citeseer.ist.psu.edu/flanagan00houdini.html" }

@inproceedings{ Ou2004,
  author    = {X. Ou and
               G. Tan and
               Y. Mandelbaum and
               D. Walker},
  title     = {Dynamic Typing with Dependent Types},
  booktitle = {IFIP TCS},
  year      = {2004},
}

@inproceedings{ Davies00,
  author    = {R. Davies and F. Pfenning},
  title     = {Intersection types and computational effects.},
  booktitle = {ICFP},
  year      = {2000},
  ee        = {http://doi.acm.org/10.1145/351240.351259},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{ Denney98,
  author    = {Ewen Denney},
  title     = {Refinement types for specification.},
  booktitle = {PROCOMET},
  year      = {1998},
  pages     = {148-166},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{  Hayashi93,
  author    = {S. Hayashi},
  title     = {Logic of Refinement Types.},
  booktitle = {TYPES},
  year      = {1993},
  pages     = {108-126},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{ Fuh88,
 author = {Y.C. Fuh and P. Mishra},
 title = {Type inference with subtypes},
 booktitle = {ESOP},
 year = {1988},
 doi = {http://dx.doi.org/10.1016/0304-3975(90)90144-7},
}

@techreport{ fahndrich96making,
    author = "Manuel Fahndrich and Alex Aiken",
    title = "Making Set-Constraint Program Analyses Scale",
    number = "CSD-96-917",
    pages = "10",
    year = "1996",
    url = "citeseer.ist.psu.edu/fahndrich96making.html"
}

@phdthesis{Davies,
 author = {Rowan Davies},
 title = {Practical Refinement-Type Checking},
 year = {2005},
 school = {Carnegie Mellon University},
 address = {Pittsburgh, PA, USA},
 }

@phdthesis{Dunfield,
 author = {J. Dunfield},
 title = {A Unified System of Type Refinements},
 year = {2007},
 school = {Carnegie Mellon University},
 address = {Pittsburgh, PA, USA},
 }

@phdthesis{ Heintze92,
 author = {Nevin Charles Heintze},
 title = {Set based program analysis},
 year = {1992},
 order_no = {UMI Order No. GAX93-22866},
 publisher = {Carnegie Mellon University},
 address = {Pittsburgh, PA, USA},
 }

@article{ flanagan99componential,
    author = "C. Flanagan and M. Felleisen",
    title = "Componential set-based analysis",
    journal = "ACM TOPLAS",
    volume = "21",
    number = "2",
    pages = "370--416",
    year = "1999",
    url = "citeseer.ist.psu.edu/flanagan97componential.html"
}

@inproceedings{KobayashiPOPL09,
  author = "N. Kobayashi",
  title = "Types and higher-order recursion schemes for verification
           of higher-order programs",
  booktitle = "POPL",
  year = 2009
}
@inproceedings{KobayashiLICS09,
  author = "N. Kobayashi and C.-H.L. Ong",
  title = "A type system equivalent to modal $\mu$-calculus model checking of recursion schemes",
  booktitle = "LICS",
  year = 2009
}

@inproceedings{Ong,
  author = "C.-H.L. Ong",
  title = "On model-checking trees generated by higher-order recursion schemes",
  booktitle = "LICS",
  year = 2006
}

@article{NaikPalsberg,
  author    = {M. Naik and J. Palsberg},
  title     = {A type system equivalent to a model checker},
  journal   = {ACM Trans. Program. Lang. Syst.},
  volume    = {30},
  number    = {5},
  year      = {2008}
}

@article{Palsberg95,
  author    = {J. Palsberg and
               P. O'Keefe},
  title     = {A Type System Equivalent to Flow Analysis},
  journal   = {ACM Trans. Program. Lang. Syst.},
  volume    = {17},
  number    = {4},
  year      = {1995},
  pages     = {576-599},
  ee        = {http://doi.acm.org/10.1145/210184.210187},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{AbadiCardelliCurienLevy,
  author = "M. Abadi and L. Cardelli and P.-L. Curien and J.-J. L{\'e}vy",
  title = "Explicit substitutions",
  journal = "Journal of Functional Programming",
  volume = "1",
  pages = "375--416",
  year = "1991"
} 
@inproceedings{PADL07,
 author    = {A. Podelski and
              A. Rybalchenko},
 title     = {{ARMC}: The Logical Choice for Software Model Checking with
              Abstraction Refinement},
 booktitle = {PADL},
 year      = {2007}
}

@inproceedings{TerauchiPOPL2010,
  author    = {T. Terauchi},
  title     = {Dependent types from counterexamples},
  booktitle = {POPL},
  year      = {2010},
  publisher = {ACM},
}

@inproceedings{UnnoPPDP09,
  author    = {H. Unno and
               N. Kobayashi},
  title     = {Dependent type inference with interpolants},
  booktitle = {PPDP},
  year      = {2009},
  publisher = {ACM},
}

@article{MineOctagon06,
  author =    {Min\'e, A{.}},
  title =     {The Octagon Abstract Domain},
  journal =   {Higher-Order and Symbolic Computation},
  publisher = {Springer},
  year =      {2006},
  volume =    {19},
  number =    {1},
  pages =     {31--100},
}

@inproceedings{ColonCAV03,
  author    = {M. Col{\'o}n and
               S. Sankaranarayanan and
               H. Sipma},
  title     = {Linear Invariant Generation Using Non-linear Constraint
               Solving},
  booktitle = {CAV},
  year      = {2003},
  publisher = {Springer},
}

@inproceedings{BeyerVMCAI07,
  author    = {Dirk Beyer and
               Thomas A. Henzinger and
               Rupak Majumdar and
               Andrey Rybalchenko},
  title     = {Invariant Synthesis for Combined Theories},
  booktitle = {VMCAI},
  year      = {2007},
  publisher = {Springer},
}

@inproceedings{Kennedy06,
  author = {Andrew J. Kennedy and Benjamin C. Pierce},
  title = {On Decidability of Nominal Subtyping with Variance},
  year = {2007},
  booktitle = {FOOL-WOOD},
}

@inproceedings{An11,
 author = {An, Jong-hoon (David) and Chaudhuri, Avik and Foster, Jeffrey S. and Hicks, Michael},
 title = {Dynamic Inference of Static Types for Ruby},
 booktitle = {POPL},
 year = {2011},
 }

@inproceedings{Rem89,
 author = {Didier R\'{e}my},
 title = {Type checking records and variants in a natural extension of ML},
 booktitle = {POPL},
 year = {1989},
 }

@ARTICLE{Rem94,
    author = {Didier R\'{e}my},
    title = {Type Inference for Records in a Natural Extension of ML},
    journal = {Theoretical Aspects of Object-Oriented Programming: Types, Semantics, and Language Design},
    year = {1994}
}

@INPROCEEDINGS{Car93,
    author = {Luca Cardelli and John C. Mitchell},
    title = {Operations on Records},
    booktitle = {Mathematical Structures in Computer Science},
    year = {1993},
    pages = {3--48}
}

@ARTICLE{Car94,
    author = {Luca Cardelli and John C. Mitchell},
    title = {Operations on Records},
    journal = {Theoretical Aspects of Object-Oriented Programming: Types, Semantics, and Language Design},
    year = {1994}
}

@inproceedings{typedracket,
  author    = {Sam Tobin-Hochstadt and Matthias Felleisen},
  title     = {Logical types for untyped languages},
  booktitle = {ICFP},
  year      = {2010},
}

@inproceedings{Tob08,
  author    = {Sam Tobin-Hochstadt and Matthias Felleisen},
  title = {The design and implementation of typed scheme},
  booktitle = {POPL},
  year = {2008},
 }

@inproceedings{Car91,
 author = {Robert Cartwright and Mike Fagan},
 title = {Soft typing},
 booktitle = {PLDI},
 year = {1991},
 }

@INPROCEEDINGS{Sie06,
    author = {Jeremy Siek and Walid Taha},
    title = {Gradual Typing for Functional Languages},
    booktitle = {Scheme and Functional Programming Workshop},
    year = {2006},
}

@INPROCEEDINGS{Sie07,
    author = {Jeremy Siek and Walid Taha},
    title = {Gradual typing for objects},
    booktitle = {ECOOP},
    year = {2007},
}

@inproceedings{Sie08,
    author = {Jeremy Siek and Manish Vachharajani},
    title = {Gradual Typing with Unification-based Inference},
    booktitle = {DLS},
    year = {2008}
}

@INPROCEEDINGS{Bie10,
    author = {Gavin Bierman and Erik Meijer and Mads Torgersen},
    title = {Adding Dynamic Types to C\#},
    booktitle = {ECOOP},
    year = {2010},
}

@inproceedings{Wri10,
 author = {Wrigstad, Tobias and Nardelli, Francesco Zappa and Lebresne, Sylvain and \"{O}stlund, Johan and Vitek, Jan},
 title = {Integrating typed and untyped code in a scripting language},
 booktitle = {POPL},
 year = {2010},
 }

@inproceedings{Fur09a,
 author = {Furr, Michael and An, Jong-hoon (David) and Foster, Jeffrey S. and Hicks, Michael},
 title = {Static type inference for Ruby},
 booktitle = {SAC},
 year = {2009},
 }

@inproceedings{Fur09b,
 author = {Furr, Michael and An, Jong-hoon (David) and Foster, Jeffrey S.},
 title = {Profile-guided static typing for dynamic scripting languages},
 booktitle = {OOPSLA},
 year = {2009},
 }

@inproceedings{Guha10b,
 author = {Arjun Guha and Claudiu Saftoiu and Shriram Krishnamurthi},
 title = {The Theory and Practice of Typed JavaScript},
 year = {Unpublished draft, June 2010},
 }

@inproceedings{dminor,
  author    = {Gavin M. Bierman and
               Andrew D. Gordon and
               Catalin Hritcu and
               David E. Langworthy},
  title     = {Semantic subtyping with an SMT solver},
  booktitle = {ICFP},
  year      = {2010},
  ee        = {http://doi.acm.org/10.1145/1863543.1863560}
}

@INPROCEEDINGS{Hen95,
    author = {Fritz Henglein and Jakob Rehof},
    title = {Safe polymorphic type inference for a Dynamically Typed Language: Translating Scheme to ML},
    booktitle = {Functional Programming Languages and Computer Architecture},
    year = {1995},
}

@inproceedings{Ern99,
 author = {Ernst, Michael D. and Cockrell, Jake and Griswold, William G. and Notkin, David},
 title = {Dynamically discovering likely program invariants to support program evolution},
 booktitle = {ICSE},
 year = {1999},
 }

@book{TAPL,
  author = {Benjamin C. Pierce},
  title = {Types and Programming Languages},
  year = {2002},
}

@inproceedings{Wand87,
	author = {Mitchell Wand},
        title = {Complete Type Inference for Simple Objects},
	booktitle = {LICS},
	year = {1987},
}

@inproceedings{Ernst00,
 author = {Ernst, Michael D. and Czeisler, Adam and Griswold, William G. and Notkin, David},
 title = {Quickly detecting relevant program invariants},
 booktitle = {ICSE},
 year = {2000},
 }

@inproceedings{Perkins04,
 author = {Perkins, Jeff H. and Ernst, Michael D.},
 title = {Efficient incremental algorithms for dynamic detection of likely invariants},
 booktitle = {FSE},
 year = {2004},
 }

@inproceedings{Abadi89,
 author = {Abadi, Martin and Cardelli, Luca and Pierce, Benjamin C. and Plotkin, Gordon},
 title = {Dynamic typing in a statically-typed language},
 booktitle = {POPL},
 year = {1989},
 }

@inproceedings{Thatte90,
 author = {Thatte, Satish},
 title = {Quasi-static typing},
 booktitle = {POPL},
 year = {1990},
 }

@inproceedings{lambdajs,
 author = {Arjun Guha and Claudiu Softoiu and Shriram Krishnamurthi},
 title = {Typing Local Control and State Using Flow Analysis},
 booktitle = {ESOP},
 year = {2011},
 }

@Unpublished{   dojo-js,
  author  = "{The Dojo Foundation}",
  title   = "Dojo Toolkit",
  note    = "\url{http://dojotoolkit.org/}"
}

@Unpublished{python-32,
  author  = "{The Python Software Foundation}",
  title   = "Python 3.2 Standard Library",
  note    = "\url{http://python.org/}"
}

@inproceedings{Drossopoulou05,
booktitle	= {ECOOP},
title		= {{Towards Type Inference for JavaScript}},
ISSN		= {0302-9743},
author		= {Anderson, Christopher and Drossopoulou, Sophia and Giannini, Paola},
pages		= {428--452},
month		= {June},
year		= {2005},
}
				
@inproceedings{Thiemann10,
  author    = {Phillip Heidegger and Peter Thiemann},
  title     = {Recency Types for Analyzing Scripting Languages},
  booktitle = {ECOOP},
  year      = {2010}  
}

@inproceedings{Thiemann05,
 author = {Peter Thiemann},
 title = {Towards a Type System for Analyzing JavaScript Programs},
 booktitle = {ESOP},
 year = {2005},
 }

@inproceedings{Guha10a,
 author = {Arjun Guha and Claudiu Saftoiu and Shriram Krishnamurthi},
 title = {The Essence of JavaScript},
 booktitle = {ECOOP},
 year = {2010},
 }

@inproceedings{Hindley69,
 author = {Roger Hindley},
 title = {The Principal Type-Scheme of an Object in Combinatory Logic},
 booktitle = {Transactions of the American Mathematical Society},
 year = {1969},
 }

@article{Car85,
 author = {Cardelli, Luca and Wegner, Peter},
 title = {On Understanding Types, Data Abstraction, and Polymorphism},
 journal = {ACM Computing Surveys},
 year = {1985},
 }

@ARTICLE{Mil78,
    author = {Robin Milner},
    title = {A theory of type polymorphism in programming},
    journal = {Journal of Computer and System Sciences},
    year = {1978},
}

@inproceedings{Dam82,
 author = {Damas, Luis and Milner, Robin},
 title = {Principal Type-Schemes for Functional Programs},
 booktitle = {POPL},
 year = {1982},
 }

@inproceedings{Wel94,
 author = {Joe Wells},
 title = {Typability and Type Checking in the Second-order Lambda Calculus are Equivalent and Undecidable},
 booktitle = {LICS},
 year = {1994},
 }

@inproceedings{Sie09,
 author = {Siek, Jeremy and Garcia, Ronald and Taha, Walid},
 title = {Exploring the Design Space of Higher-Order Casts},
 booktitle = {ESOP},
 year = {2009},
 }

@inproceedings{BartheTermination,
  author    = {G. Barthe and
               M. J. Frade and
               E. Gim{\'e}nez and
               L. Pinto and
               T. Uustalu},
  title     = {Type-based termination of recursive definitions},
  booktitle   = {MSCS},
  year      = {2004}
  }



@inproceedings{Terminator,
  author    = {B. Cook and
               A. Podelski and
               A. Rybalchenko},
  title     = {Termination proofs for systems code},
  booktitle = {PLDI},
  year      = {2006},
  ee        = {http://doi.acm.org/10.1145/1133981.1134029},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{SwamyPOPL13,
  author    = {C. Fournet and
               N. Swamy and
               J. Chen and
               P-{\'E.} Dagand and
               P-Y. Strub and
               B. Livshits},
  title     = {Fully abstract compilation to JavaScript},
  booktitle = {POPL},
  year      = {2013}
}




@inproceedings{SwamyPOPL12,
  author    = {P-Y. Strub and
               N. Swamy and
               C. Fournet and
               J. Chen},
  title     = {Self-certification: Bootstrapping certified typecheckers
               in {F*} with {Coq}},
  booktitle = {POPL},
  year      = {2012}
}




@inproceedings{WadlerICFP03,
  author    = {P. Wadler},
  title     = {Call-by-value is dual to call-by-name},
  booktitle = {ICFP},
  year      = {2003}
}


@inproceedings{Sie10,
 author = {Siek, Jeremy G. and Wadler, Philip},
 title = {Threesomes, with and without blame},
 booktitle = {POPL},
 year = {2010},
 }


@inproceedings{Foster09,
  author    = {Michael Furr and
               Jong-hoon (David) An and
               Jeffrey S. Foster and
               Michael W. Hicks},
  title     = {Static type inference for Ruby},
  booktitle = {SAC},
  year      = {2009},
  pages     = {1859-1866},
  ee        = {http://doi.acm.org/10.1145/1529282.1529700},
}

@article{Palsberg96,
 author = {Palsberg, Jens},
 title = {Type inference for objects},
 journal = {ACM Computing Surveys},
 year = {1996},
 }

@ARTICLE{Bruce99,
  author = {Kim B. Bruce and Luca Cardelli and Benjamin C. Pierce},
  title = {Comparing Object Encodings},
  journal = {Information and Computation},
  year = 1999,
}

@inproceedings{Foster11,
 author = {An, Jong-hoon (David) and Chaudhuri, Avik and Foster, Jeffrey S. and Hicks, Michael},
 title = {Dynamic Inference of Static Types for Ruby},
 booktitle = {POPL},
 year = {2011},
 }

@inproceedings{Pfe88,
 author = {Frank Pfenning},
 title = {Partial Polymorphic Type Inference and Higher-Order Unification},
 booktitle = {POPL},
 year = {1988},
}

@inproceedings{arrayz3,
  author    = {Leonardo de Moura and
               Nikolaj Bj{\o}rner},
  title     = {Generalized, efficient array decision procedures},
  booktitle = {FMCAD},
  year      = {2009},
  pages     = {45-52},
  ee        = {http://dx.doi.org/10.1109/FMCAD.2009.5351142},
}

@inproceedings{Mccarthy,
    author = {John Mc{C}arthy},
    title = {Towards a Mathematical Science of Computation},
    booktitle = {IFIP},
    year = {1962},
}

@inproceedings{Zhao10,
 author = {Tian Zhao},
 title = {Type Inference for Scripting Languages with Implicit Extension},
 booktitle = {FOOL},
 year = {2010},
}

@inproceedings{Zhao11,
 author = {Tian Zhao},
 title = {Polymorphic Type Inference for Scripting Languages with Object Extensions},
 booktitle = {DLS},
 year = {2011},
}


@inproceedings{NestedPOPL12,
 author = {Ravi Chugh and Patrick M. Rondon and Ranjit Jhala},
 title = {Nested Refinements: A Logic for Duck Typing},
 booktitle	= {POPL},
 year		= 2012,
}

@inproceedings{NestedTR,
 author = {Ravi Chugh and Patrick M. Rondon and Ranjit Jhala},
 title = {Nested Refinements: A Logic for Duck Typing},
 note = "\url{http://arxiv.org/abs/1103.5055v2}",
}

@article{harper-lf,
  author  = "Robert Harper and Furio Honsell and Gordon Plotkin" ,
  title = "A Framework for Defining Logics" ,
  journal = "Journal of the Association for Computing Machinery" ,
  volume  = "40" ,
  number  = "1" ,
  month = "January" ,
  year  = "1993" ,
  pages = "143--184"
}

@Book{coq-book,
  author       = "Y. Bertot and P. Cast\'eran",
  title        = "Coq'Art: The Calculus of Inductive Constructions",
  year         = "2004",
  publisher    = "Springer Verlag"
}

@inproceedings{FournetCCS11,
  author    = {C. Fournet and
               M. Kohlweiss and
               P-Y. Strub},
  title     = {Modular code-based cryptographic verification},
  booktitle = {CCS},
  year      = {2011},
  ee        = {http://doi.acm.org/10.1145/2046707.2046746},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{Bhargavan12,
  author    = {K. Bhargavan and
               C. Fournet and
               R. Corin and
               E. Zalinescu},
  title     = {Verified Cryptographic Implementations for TLS},
  journal   = {ACM TISSEC},
  volume    = {15},
  number    = {1},
  year      = {2012},
  pages     = {3},
  ee        = {http://doi.acm.org/10.1145/2133375.2133378},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Bhargavan13,
  author    = {K. Bhargavan and
               C. Fournet and
               M. Kohlweiss and
               A. Pironti and
               P.-Y Strub},
  title     = {Implementing TLS with Verified Cryptographic Security},
  booktitle = {IEEE S \& P},
  year      = {2013},
  ee        = {http://doi.ieeecomputersociety.org/10.1109/SP.2013.37},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@article{GordonTOPLAS2011,
  author    = {J. Bengtson and
               K. Bhargavan and
               C. Fournet and
               A. D. Gordon and
               S. Maffeis},
  title     = {Refinement types for secure implementations},
  journal   = {ACM TOPLAS},
  year      = {2011},
  ee        = {http://doi.acm.org/10.1145/1890028.1890031},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{SwamyOAKLAND11,
  author    = {A. Guha and
               M. Fredrikson and
               B. Livshits and
               N. Swamy},
  title     = {Verified Security for Browser Extensions},
  booktitle = {IEEE S \& P},
  year      = {2011}
}


@InProceedings{scc10fine,
  AUTHOR = {Nikhil Swamy and Juan Chen and Ravi Chugh},
  TITLE = {Enforcing Stateful Authorization and Information Flow Policies in Fine}, 
  MONTH = March,
  YEAR = 2010,
  BOOKTITLE = {ESOP}, 
}

@inproceedings{fstar,
  author    = {N. Swamy and
               J. Chen and
               C. Fournet and
               P-Y. Strub and
               K. Bhargavan and
               J. Yang},
  title     = {Secure distributed programming with value-dependent types},
  booktitle = {ICFP},
  year      = {2011}
}


@Book{JSGoodParts,
  title		= {JavaScript: The Good Parts},
  author	= {Douglas Crockford},
  publisher	= {Yahoo! Press},
  year		= 2008
}

@InProceedings{MaffeisJS,
  author       = "S. Maffeis and J.C. Mitchell and A. Taly",
  title        = "An Operational Semantics for {JavaScript}",
  booktitle    = "APLAS",
  year         = "2008",
}

@Book{ECMA,
  title		= {ECMAScript Language Specification, ECMA-262,
             3rd ed.},
  author	= {ECMA International},
  year		= 1999
}

@unpublished{ECMAcommittee,
  author = "ECMA TC-39 Committee",
  note   = "\url {http://www.ecmascript.org/community.php}"
}

@unpublished{SunSpider,
  author = "SunSpider",
  title  = "JavaScript Benchmark",
  note   = "\url {http://www.webkit.org/perf/sunspider/sunspider.html}"
}

@InProceedings{AKFT03,
  author    = {Alex Aiken and John Kodumal and
               Jeffrey S. Foster and Tachio Terauchi},
  title     = {Checking and Inferring Local Non-Aliasing},
  booktitle = {PLDI},
  year      = {2003}
}

@Article{LinLocFI07,
  author =       {Amal Ahmed and Matthew Fluet and Greg Morrisett},
  title =        {L$^3$:~A Linear Language with Locations},
  journal =      {Fundamenta Informaticae},
  year =         2007,
  volume =       77,
  number =       4,
  pages =        {397--449},
  month =        {June},
  publisher =    {IOS Press},
}

@book{ATheoryOfObjects,
	author={Martin Abadi and Luca Cardelli},
	title={A Theory of Objects},
	publisher={Springer-Verlag},
	year={1996},
}

@InProceedings{Bono98,
  author = {Viviana Bono and Kathleen Fisher},
  title = {An Imperative, First-Order Calculus with Object Extension},
  booktitle = {ECOOP},
  year = {1998}
}

@inproceedings{crowfoot,
  author    = {Nathaniel Charlton and
               Ben Horsfall and
               Bernhard Reus},
  title     = {Crowfoot: A Verifier for Higher-Order Store Programs},
  booktitle = {VMCAI},
  year      = {2012},
  pages     = {136-151}
}

@INPROCEEDINGS{Gianantonio98,
  author = {Pietro Di Gianantonio and Furio Honsell and Luigi Liquori},
  title = {A Lambda Calculus of Objects with Self-Inflicted Extension},
  booktitle = {OOPSLA},
  year = {1998},
}

@inproceedings{Politz11,
 author = {Politz, Joe Gibbs and Eliopoulos, Spiridon Aristides and
           Guha, Arjun and Krishnamurthi, Shriram},
 title = {ADsafety: type-based verification of JavaScript Sandboxing},
 booktitle = {USENIX Security},
 year = {2011},
} 

@unpublished{Guha11draft,
 author = {Guha, Arjun and Politz, Joe Gibbs and Krishnamurthi, Shriram},
 title = {Fluid Object Types},
 year = {2011},
} 

@inproceedings{Plaid,
 author = {Sunshine, Joshua and Naden, Karl and Stork, Sven and
           Aldrich, Jonathan and Tanter, \'{E}ric},
 title = {First-class state change in plaid},
 booktitle = {OOPSLA},
 year = {2011},
} 

@inproceedings{FirefoxTI,
  author    = {Shu-yu Guo and Brian Hackett},
  title     = {Fast and Precise Hybrid Type Inference for JavaScript},
  booktitle = {PLDI},
  year      = {2012},
}
@inproceedings{XuPOPL09,
  author    = {D. N. Xu and
               S. L. Peyton-Jones and
               K. Claessen},
  title     = {Static contract checking for Haskell},
  booktitle = {POPL},
  year      = {2009},
  ee        = {http://doi.acm.org/10.1145/1480881.1480889},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}



@inproceedings{Swierstra2012,
 author = {W. Swierstra},
 title = {Xmonad in {Coq} (experience report): Programming a Window Manager In A
   Proof Assistant},
 booktitle = {Haskell Symposium},
 year = {2012},
} 


@inproceedings{FilliatreCAV07,
  author    = {Jean-Christophe Filli{\^a}tre and
               Claude March{\'e}},
  title     = {The Why/Krakatoa/Caduceus Platform for Deductive Program
               Verification},
  booktitle = {CAV},
  year      = {2007},
}

@inproceedings{CohenTPHOL09,
  author    = {E. Cohen and
               M. Dahlweid and
               M. A. Hillebrand and
               D. Leinenbach and
               M. Moskal and
               T. Santen and
               W. Schulte and
               S. Tobies},
  title     = {VCC: A Practical System for Verifying Concurrent C},
  booktitle = {TPHOLs},
  year      = {2009},
}

@inproceedings{Giesl11,
  author    = {J. Giesl and
               M. Raffelsieper and
               P. Schneider-Kamp and
               S. Swiderski and
               R. Thiemann},
  title     = {Automated termination proofs for {Haskell} by term rewriting},
  booktitle   = {TPLS},
  year      = {2011}
}
@MISC{Lamsweerde00,
    author = {Axel Van Lamsweerde},
    title = {Formal Specification: a Roadmap},
    year = {2000}
}

@Book{cpdt,
ALTauthor = {Adam},
ALTeditor = {Chlipala},
title = {Certified Programming with Dependent Types},
publisher = {MIT Press},
year = {2013}
}

@Unpublished{   bitv,
  author  = {J.-C. Filli{\'a}tre},
  title   = "Bitv: a bit vectors library",
  note    = "\url{http://www.lri.fr/~filliatr/software.en.html}",
  key     = "BitvWebSite"
}

@inproceedings{UnnoTK13,
  author    = {Hiroshi Unno and
               Tachio Terauchi and
               Naoki Kobayashi},
  title     = {Automating relatively complete verification of higher-order
               functional programs},
  booktitle = {POPL},
  year      = {2013},
  pages     = {75-86}
}

@inproceedings{SuterKK11,
  author    = {Philippe Suter and
               Ali Sinan K{\"o}ksal and
               Viktor Kuncak},
  title     = {Satisfiability Modulo Recursive Programs},
  booktitle = {SAS},
  year      = {2011},
  pages     = {298-315}
}

@Unpublished{	  techrep,
  author	= {P. Rondon and M. Kawaguchi and R. Jhala},
  title		= {Recursive Refinements},
  note		= "\url{http://pho.ucsd.edu/rjhala/recursive-refinements-techrep.pdf}",
  key = "techrep"
}


@inproceedings{ChitilH06,
  author    = {Olaf Chitil and
               Frank Huch},
  title     = {A Pattern Logic for Prompt Lazy Assertions in Haskell},
  booktitle = {IFL},
  year      = {2006},
  pages     = {126-144},
  ee        = {http://dx.doi.org/10.1007/978-3-540-74130-5_8},
}

@inproceedings{ChitilMR03,
  author    = {Olaf Chitil and
               Dan McNeill and
               Colin Runciman},
  title     = {Lazy Assertions},
  booktitle = {IFL},
  year      = {2003},
  pages     = {1-19},
  ee        = {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3145{\&}spage=1},
}

@INPROCEEDINGS{Chitil07,
    author = {Olaf Chitil and Frank Huch},
    title = {Monadic prompt lazy assertions in Haskell},
    booktitle = {In Asian Symposium on Programming Languages and Systems},
    year = {2007}
}

@inproceedings{Chitil11,
  author    = {Olaf Chitil},
  title     = {A semantics for lazy assertions},
  booktitle = {PEPM},
  year      = {2011},
  pages     = {141-150},
  ee        = {http://doi.acm.org/10.1145/1929501.1929527},
}


@inproceedings{XuJC09,
  author    = {Dana N. Xu and
               Simon L. Peyton Jones and
               Koen Claessen},
  title     = {Static contract checking for Haskell},
  booktitle = {POPL},
  year      = {2009},
  pages     = {41-52},
  ee        = {http://doi.acm.org/10.1145/1480881.1480889},
}

@inproceedings{TereiMJM12,
  author    = {David Terei and
               Simon Marlow and
               Simon L. Peyton Jones and
               David Mazi{\`e}res},
  title     = {Safe haskell},
  booktitle = {Haskell},
  year      = {2012},
  pages     = {137-148},
  ee        = {http://doi.acm.org/10.1145/2364506.2364524},
}


@inproceedings{Chitil12,
  author    = {Olaf Chitil},
  title     = {Practical typed lazy contracts},
  booktitle = {ICFP},
  year      = {2012},
  pages     = {67-76},
  ee        = {http://doi.acm.org/10.1145/2364527.2364539},
}

@inproceedings{VytiniotisJCR13,
  author    = {Dimitrios Vytiniotis and
               Simon L. Peyton Jones and
               Koen Claessen and
               Dan Ros{\'e}n},
  title     = {HALO: haskell to logic through denotational semantics},
  booktitle = {POPL},
  year      = {2013},
  pages     = {431-442},
  ee        = {http://doi.acm.org/10.1145/2429069.2429121},
}

@inproceedings{YorgeyWCJVM12,
  author    = {Brent A. Yorgey and
               Stephanie Weirich and
               Julien Cretin and
               Simon L. Peyton Jones and
               Dimitrios Vytiniotis and
               Jos{\'e} Pedro Magalh{\~a}es},
  title     = {Giving Haskell a promotion},
  booktitle = {TLDI},
  year      = {2012},
  pages     = {53-66},
  ee        = {http://doi.acm.org/10.1145/2103786.2103795},
}


@inproceedings{EisenbergW12,
  author    = {Richard A. Eisenberg and
               Stephanie Weirich},
  title     = {Dependently typed programming with singletons},
  booktitle = {Haskell},
  year      = {2012},
  pages     = {117-130},
  ee        = {http://doi.acm.org/10.1145/2364506.2364522},
}

@inproceedings{Weirich12,
  author    = {Stephanie Weirich},
  title     = {Dependently-Typed Programming in GHC},
  booktitle = {FLOPS},
  year      = {2012},
  pages     = {3},
  ee        = {http://dx.doi.org/10.1007/978-3-642-29822-6_3},
}

@inproceedings{OuTMW04,
  author    = {Xinming Ou and
               Gang Tan and
               Yitzhak Mandelbaum and
               David Walker},
  title     = {Dynamic Typing with Dependent Types},
  booktitle = {IFIP TCS},
  year      = {2004},
  pages     = {437-450},
}

@inproceedings{WadlerF09,
  author    = {Philip Wadler and
               Robert Bruce Findler},
  title     = {Well-Typed Programs Can't Be Blamed},
  booktitle = {ESOP},
  year      = {2009},
  pages     = {1-16},
}


@inproceedings{Tobin-HochstadtF08,
  author    = {Sam Tobin-Hochstadt and
               Matthias Felleisen},
  title     = {The design and implementation of typed scheme},
  booktitle = {POPL},
  year      = {2008},
  pages     = {395-406},
  ee        = {http://doi.acm.org/10.1145/1328438.1328486}
}

@inproceedings{GuhaMFK07,
  author    = {Arjun Guha and
               Jacob Matthews and
               Robert Bruce Findler and
               Shriram Krishnamurthi},
  title     = {Relationally-parametric polymorphic contracts},
  booktitle = {DLS},
  year      = {2007},
  pages     = {29-40},
  ee        = {http://doi.acm.org/10.1145/1297081.1297089},
}

@inproceedings{ChitilH07,
  author    = {Olaf Chitil and
               Frank Huch},
  title     = {Monadic, Prompt Lazy Assertions in Haskell},
  booktitle = {APLAS},
  year      = {2007},
  pages     = {38-53},
  ee        = {http://dx.doi.org/10.1007/978-3-540-76637-7_4},
}

@article{BlumeM06,
  author    = {Matthias Blume and
               David A. McAllester},
  title     = {Sound and complete models of contracts},
  journal   = {J. Funct. Program.},
  volume    = {16},
  number    = {4-5},
  year      = {2006},
  pages     = {375-414},
  ee        = {http://dx.doi.org/10.1017/S0956796806005971},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@Unpublished{	  liquidtechrep,
  author = {P. Rondon and M. Kawaguchi and R. Jhala},
  title  = {Liquid Types},
  url	 = {http://pho.ucsd.edu/liquid/liquid_types_techrep.pdf},
  note	 = "Technical Report",
  key 	 = "techrepl"
}

@inproceedings{GulwaniSrivastava08,
  author    = {S. Gulwani and
               S. Srivastava and
               R. Venkatesan},
  title     = {Program analysis as constraint solving},
  booktitle = {PLDI},
  year      = {2008},
  pages     = {281-292},
  ee        = {http://doi.acm.org/10.1145/1375581.1375616},
}

@InProceedings{	  AAT94,
  author	= "R. Alur and H. Attiya and G. Taubenfeld",
  title		= "Time-adaptive algorithms for synchronization",
  booktitle	= "Proceedings of the 26th Annual Symposium on Theory of
		  Computing",
  publisher	= "ACM Press",
  year		= "1994"
}

@PhDThesis{	  Abadi87,
  author	= "M. Abadi",
  title		= "Temporal-Logic Theorem Proving",
  school	= "Stanford University",
  year		= "1987"
}

@Article{	  abadiblanchet05j,
  author	= "Martin Abadi and Bruno Blanchet",
  title		= "Analyzing security protocols with secrecy types and logic
		  programs",
  journal	= "Journal of the ACM",
  volume	= "52",
  number	= "1",
  year		= "2005",
  pages		= "102--146"
}

@InProceedings{	  AbadiLamport88,
  author	= "M. Abadi and L. Lamport",
  title		= "The existence of refinement mappings",
  booktitle	= "Proceedings of the Third Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1988",
  pages		= "165--175"
}

@InCollection{	  AbadiLamport90,
  author	= "M. Abadi and L. Lamport",
  title		= "Composing specifications",
  booktitle	= "Stepwise Refinement of Distributed Systems: Models,
		  Formalism, Correctness",
  editor	= "de Bakker, J.W. and de Roever, W.-P. and G. Rozenberg",
  series	= "LNCS 430",
  publisher	= "Springer-Verlag",
  year		= "1990"
}

@Article{	  AbadiLamport91,
  author	= "M. Abadi and L. Lamport",
  title		= "The existence of refinement mappings",
  journal	= "Theoretical Computer Science",
  volume	= "82",
  number	= "2",
  year		= "1991",
  pages		= "253--284"
}

@InCollection{	  AbadiLamport92,
  author	= "M. Abadi and L. Lamport",
  title		= "An old-fashioned recipe for real time",
  booktitle	= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "LNCS 600",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "1--27"
}

@Article{	  AbadiLamport93,
  author	= "M. Abadi and L. Lamport",
  title		= "Composing Specifications",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "15",
  number	= "1",
  year		= "1993",
  pages		= "73--132"
}

@Article{	  AbadiLamport94,
  author	= "M. Abadi and L. Lamport",
  title		= "An old-fashioned recipe for real time",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "16",
  number	= "5",
  year		= "1994",
  pages		= "1543--1571"
}

@Article{	  AbadiLamport95,
  author	= "M. Abadi and L. Lamport",
  title		= "Conjoining Specifications",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "17",
  number	= "3",
  year		= "1995",
  pages		= "507--534"
}

@InProceedings{	  AbdullaJonsson93,
  author	= "P. Abdulla and B. Jonsson",
  title		= "Verifying programs with unreliable channels",
  booktitle	= "Proceedings of the Eighth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1993",
  pages		= "160--170"
}

@InProceedings{	  AbdullaJonsson98,
  author	= "P. Abdulla and B. Jonsson",
  title		= "Verifying networks of timed automata",
  booktitle	= "TACAS 98: Tools and Algorithms for Construction and
		  Analysis of Systems",
  series	= "LNCS 1384",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "298--312"
}

@InProceedings{	  ABIKRSSW02,
  author	= "R. Alur and C. Belta and F. Ivancic and V. Kumar and H.
		  Rubin and J. Schug and O. Sokolsky and J. Webb",
  title		= "Visual Programming for Modeling and Simulation of
		  Biomolecular Regulatory Networks",
  booktitle	= "HiPC 2002: High Performance Computing",
  pages		= "702-712",
  year		= "2002"
}

@InCollection{	  ABK97,
  author	= "E. Asarin and M. Bozga and A. Kerbrat and O. Maler and A.
		  Pnueli and A. Rasse",
  title		= "Data structures for the verification of timed automata",
  booktitle	= "HART 97: Hybrid and Real-time Systems",
  editor	= "O. Maler",
  series	= "LNCS 1201",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "346--360"
}

@Article{	  Abramsky87,
  author	= "S. Abramsky",
  title		= "Observation equivalence as a testing equivalence",
  journal	= "Theoretical Computer Science",
  volume	= "53",
  year		= "1987",
  pages		= "225--241"
}

@InProceedings{	  ACD90,
  author	= "R. Alur and C. Courcoubetis and D.L. Dill",
  title		= "Model checking for real-time systems",
  booktitle	= "Proceedings of the Fifth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1990",
  pages		= "414--425"
}

@Article{	  ACD93,
  author	= "R. Alur and C. Courcoubetis and D.L. Dill",
  title		= "Model checking in dense real time",
  journal	= "Information and Computation",
  volume	= "104",
  number	= "1",
  year		= "1993",
  pages		= "2--34"
}

@InCollection{	  ACH92,
  author	= "R. Alur and C. Courcoubetis and N. Halbwachs and D.L. Dill
		  and {Wong-Toi}, H.",
  title		= "Minimization of timed transition systems",
  editor	= "R.J. Cleaveland",
  booktitle	= "CONCUR 92: Theories of Concurrency",
  series	= "LNCS 630",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "340--354"
}

@Article{	  ACHH95,
  author	= "R. Alur and C. Courcoubetis and N. Halbwachs and T.A.
		  Henzinger and P.-H. Ho and X. Nicollin and A. Olivero and
		  J. Sifakis and S. Yovine",
  title		= "The algorithmic analysis of hybrid systems",
  journal	= "Theoretical Computer Science",
  volume	= "138",
  year		= "1995",
  pages		= "3--34"
}

@InProceedings{	  ACJY96,
  author	= "P. A. Abdulla and K. {\v{C}}er\={a}ns and B. Jonsson and
		  Yih-Kuan Tsay",
  title		= "General decidability theorems for infinite-state systems",
  booktitle	= "Proceedings of the Eleventh Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1996",
  pages		= "313--321"
}

@Article{	  ACJY97,
  author	= "P. A. Abdulla and K. \v{C}er\={a}ns and B. Jonsson and
		  Yih-Kuan Tsay",
  title		= "Algorithmic analysis of programs with well quasi-ordered
		  domains",
  journal	= "Journal of Information and Computation",
  note		= "To appear",
  year		= "1999"
}

@Book{		  PalsbergBook,
  title		= {OO Type Systems},
  author	= {Jens Palsberg and Michael I. Schwartzbach},
  publisher	= {Wiley},
  year		= 1994 
}

@Book{		  ACL2,
  title		= "Computer-Aided Reasoning: An Approach",
  author	= "M. Kaufmann and P. Manolios and J.S. Moore",
  publisher	= "Kluwer Academic Publishers",
  year		= "2000"
}

@InCollection{	  AdAHM99,
  author	= "R. Alur and L. de Alfaro and T.A. Henzinger and F.Y.C.
		  Mang",
  title		= "Automating modular verification",
  booktitle	= "CONCUR 99: Concurrency Theory",
  series	= "Lecture Notes in Computer Science 1664",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "82--97"
}

@Article{	  ADS86,
  author	= "B. Alpern and A.J. Demers and F.B. Schneider",
  title		= "Safety without stuttering",
  journal	= "Information Processing Letters",
  volume	= "23",
  number	= "4",
  year		= "1986",
  pages		= "177--180"
}

@Article{	  AFdR80,
  author	= "K.R. Apt and N. Francez and de Roever, W.-P.",
  title		= "A proof system for communicating sequential processes",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "2",
  year		= "1980",
  pages		= "359--385"
}

@Article{	  AFK88,
  author	= "K.R. Apt and N. Francez and S. Katz",
  title		= "Appraising fairness in languages for distributed
		  programming",
  journal	= "Distributed Computing",
  volume	= "2",
  number	= "4",
  year		= "1988",
  pages		= "226--241"
}

@InProceedings{	  AggarwalKurshan83,
  author	= "S. Aggarwal and R.P. Kurshan",
  title		= "Modeling elapsed time in protocol specification",
  booktitle	= "Proceedings of the Third IFIP WG6.1 International Workshop
		  on Protocol Specification, Testing, and Verification",
  editor	= "H. Rudin and C.H. West",
  publisher	= "Elsevier Science Publishers",
  year		= "1983",
  pages		= "51--62"
}

@InProceedings{	  agrawal93,
  author	= "Agrawal, H. and Horgan, J.R. and Krauser, E.W. and London,
		  S.A.",
  title		= "Incremental Regression Testing",
  booktitle	= "ICSM 93: International Conference on Software Maintenance",
  year		= "1993",
  pages		= "348--357",
  publisher	= "IEEE"
}

@InProceedings{	  AH94,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Finitary Fairness",
  booktitle	= "LICS 94: Logic in Computer Science",
  pages		= "52--61",
  publisher	= "IEEE Computer Society Press",
  year		= 1994
}

@Article{	  AH99-reactive-modules,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Reactive modules",
  journal	= "Formal Methods in System Design",
  volume	= "15",
  number	= "1",
  year		= "1999",
  pages		= "7--48"
}

@Article{	  AHH96,
  author	= "R. Alur and T.A. Henzinger and P.-H. Ho",
  title		= "Automatic symbolic verification of embedded systems",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "22",
  number	= "3",
  year		= "1996",
  pages		= "181--201"
}

@Article{	  AHK02,
  author	= "R. Alur and T.A. Henzinger and O. Kupferman",
  title		= "Alternating-time temporal logic",
  journal	= "Journal of the ACM",
  volume	= "49",
  year		= "2002",
  pages		= "672--713"
}

@InCollection{	  AHKV98,
  author	= "R. Alur and T.A. Henzinger and O. Kupferman and M.Y.
		  Vardi",
  title		= "Alternating refinement relations",
  booktitle	= "CONCUR 97: Concurrency Theory",
  editor	= "D. Sangiorgi and R. de Simone",
  series	= "Lecture Notes in Computer Science 1466",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "163--178"
}

@InProceedings{	  AhmedJiaWalker03,
  author	= {Amal J. Ahmed and Limin Jia and David Walker},
  title		= {Reasoning about Hierarchical Storage.},
  booktitle	= {LICS},
  year		= {2003},
  pages		= {33-44},
  ee		= {http://csdl.computer.org/comp/proceedings/lics/2003/1884/00/18840033abs.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InCollection{	  AIKY92,
  author	= "R. Alur and A. Itai and R.P. Kurshan and M. Yannakakis",
  title		= "Timing verification by successive approximation",
  booktitle	= "CAV 92: Computer-aided Verification",
  editor	= "G. von Bochmann and D.K. Probst",
  series	= "LNCS 663",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "137--150"
}

@Article{	  AIKY95,
  author	= "R. Alur and A. Itai and R.P. Kurshan and M. Yannakakis",
  title		= "Timing verification by successive approximation",
  journal	= "Information and Computation",
  volume	= "118",
  number	= "1",
  year		= "1995",
  pages		= "142--157"
}

@Article{	  AJ96,
  author	= "P. Abdulla and B. Jonsson",
  title		= "Verifying Programs with Unreliable Channels",
  journal	= "Information and Computation",
  volume	= "127",
  year		= "1996",
  pages		= "91--101"
}

@Article{	  AL95,
  title		= "Conjoining specifications",
  author	= "M. Abadi and L. Lamport",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "17(3)",
  year		= 1995,
  pages		= "507--534"
}

@InProceedings{	  Aldrich05,
  author	= {Kevin Bierhoff and Jonathan Aldrich},
  title		= {Lightweight Object Specification with Typestates},
  booktitle	= {ESEC/FSE 2005: Foundations of Software Engineering},
  publisher	= {ACM},
  year		= {2005},
  pages		= {217--226}
}

@InProceedings{AliasTypes,
  author	  = "F. Smith and D. Walker and J.G. Morrisett",
  title		  = "Alias Types",
  booktitle = "ESOP",
  year	   	= {2000}
}

@InCollection{AliasTypesRec,
  author	= "D. Walker and J.G. Morrisett",
  title		= "Alias Types for Recursive Data Structures",
  proceedings	= "Types in Compilation 2000",
  year		= 2000
}

@Article{	  AlpernSchneider85,
  author	= "B. Alpern and F.B. Schneider",
  title		= "Defining liveness",
  journal	= "Information Processing Letters",
  volume	= "21",
  number	= "4",
  year		= "1985",
  pages		= "181--185"
}

@PhDThesis{	  Alur91,
  author	= "R. Alur",
  title		= "Techniques for Automatic Verification of Real-time
		  Systems",
  school	= "Stanford University",
  year		= "1991"
}

@InProceedings{	  Alur99,
  author	= "R. Alur",
  title		= "Timed Automata",
  booktitle	= "CAV 99: Computer-Aided Verification",
  pages		= "8--22",
  series	= "Lecture Notes in Computer Science 1633",
  publisher	= "Springer-Verlag",
  year		= "1999"
}

@InCollection{	  AlurDill90,
  author	= "R. Alur and D.L. Dill",
  title		= "Automata for modeling real-time systems",
  booktitle	= "ICALP 90: Automata, Languages, and Programming",
  editor	= "M.S. Paterson",
  series	= "LNCS 443",
  publisher	= "Springer-Verlag",
  year		= "1990",
  pages		= "322--335"
}

@Article{	  AlurDill94,
  author	= "R. Alur and D.L. Dill",
  title		= "A theory of timed automata",
  journal	= "Theoretical Computer Science",
  year		= "1994",
  volume	= "126",
  pages		= "183--235"
}

@Unpublished{	  AlurInterface05,
  author	= "R. Alur and P. Cerny and G. Gupta and P. Madhusudan and W.
		  Nam and A. Srivastava",
  title		= "Synthesis of interface specifications for {Java} classes",
  booktitle	= {POPL 05: Principles of Programming Languages},
  publisher	= "ACM",
  year		= {2005},
  pages		= {49-61}
}

@Article{	  AlurKurshan95,
  author	= "R. Alur and A. Itai and R.P. Kurshan and M. Yannakakis",
  title		= "Timing verification by successive approximation",
  journal	= "Information and Computation",
  volume	= "118(1)",
  year		= 1995,
  pages		= "142--157"
}

@InProceedings{	  AlurKurshan96,
  author	= "R. Alur and R.P. Kurshan",
  title		= "Timing analysis in {\sc {C}ospan}",
  booktitle	= "Hybrid Systems III",
  editor	= "R. Alur and T.A. Henzinger and E.D. Sontag",
  series	= "LNCS 1066",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "220--231"
}

@InProceedings{	  AlurLaTorre,
  author	= "R. Alur and S. La Torre and G. Pappas",
  title		= "Optimal paths in weighted timed automata",
  booktitle	= "HSCC 01: Hybrid Systems: Computation and Control",
  series	= "LNCS 2034",
  publisher	= "Springer-Verlag",
  year		= "2001",
  pages		= "49--62"
}

@InProceedings{	  AlurSTOC04,
  author	= {Rajeev Alur and P. Madhusudan},
  title		= {Visibly pushdown languages.},
  booktitle	= {STOC},
  year		= {2004},
  pages		= {202-211},
  ee		= {http://doi.acm.org/10.1145/1007390},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  ALW89,
  author	= "M. Abadi and L. Lamport and P. Wolper",
  title		= "Realizable and Unrealizable Concurrent Program
		  Specifications",
  booktitle	= "ICALP89: International Colloquium on Automata, Languages
		  and Programming",
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer-Verlag",
  volume	= 372,
  year		= "1989",
  pages		= "1--17"
}

@TechReport{	  AM78,
  author	= {Tilak Agerwala and Jayadev Misra},
  title		= {Assertion Graphs for Verifying and Synthesizing Programs},
  institution	= {University of Texas, Austin},
  year		= 1978,
  number	= {83}
}

@InProceedings{	  Amarasinghe,
  author	= {Mark Stephenson and Jonathan Babb and Saman P.
		  Amarasinghe},
  title		= {Bitwidth analysis with application to silicon
		  compilation.},
  booktitle	= {PLDI},
  year		= {2000},
  pages		= {108-120},
  ee		= {http://doi.acm.org/10.1145/349299.349317},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  AmmonsBodikLarus02,
  author	= {G. Ammons and R. Bodik and J. R. Larus},
  title		= {Mining specifications},
  booktitle	= {POPL 02: Principles of Programming Languages},
  publisher	= {ACM},
  year		= {2002},
  pages		= {4--16}
}

@InProceedings{	  AmmonsLarus98,
  author	= {G. Ammons and J. R. Larus},
  title		= {Improving Data-flow Analysis with Path Profiles},
  booktitle	= {PLDI 98: Programming Language Design and Implementation},
  publisher	= {ACM},
  year		= {1998},
  pages		= {72-84}
}

@Article{	  AMP95,
  author	= "E. Asarin and O. Maler and A. Pnueli",
  title		= "On the analysis of dynamical systems having
		  piecewise-constant derivatives",
  journal	= "Theoretical Computer Science",
  volume	= "238",
  year		= "1995",
  pages		= "35-65"
}

@InCollection{	  AMP96,
  author	= "E. Asarin and O. Maler and A. Pnueli",
  title		= "Symbolic controller synthesis for discrete and timed
		  systems",
  booktitle	= "Hybrid Systems II",
  editor	= "P. Antsaklis and A. Nerode and W. Kohn and S. Sastry",
  series	= "LNCS 999",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "1--20"
}

@PhDThesis{	  Andersen,
  title		= {Program analysis and specialization for the {C}
		  programming language},
  author	= {L.O. Andersen},
  institution	= {DIKU, University of Copenhagen},
  year		= {1994}
}

@PhDThesis{	  Andersen94,
  author	= "L.O. Andersen",
  title		= "Program Analysis and Specialization for the C Programming
		  Language",
  school	= "DIKU, University of Copenhagen",
  year		= "1994"
}

@Book{		  Andrews91,
  author	= "G.R. Andrews",
  title		= "Concurrent Programming: Principles and Practice",
  publisher	= "Benjamin/Cummings",
  year		= "1991"
}

@Book{		  AO91,
  author	= "K.R. Apt and E.-R. Olderog",
  title		= "Verification of sequential and concurrent programs",
  publisher	= "Springer-Verlag",
  year		= "1991"
}

@Book{		  AptOlderog91,
  author	= "K.R. Apt and Olderog, E.-R.",
  title		= "Verification of Sequential and Concurrent Programs",
  publisher	= "Springer-Verlag",
  year		= "1991"
}

@Article{	  ARTS93j,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Real-time system = discrete system + clock variables",
  journal	= "Software Tools for Technology Transfer",
  volume	= "1",
  year		= "1997",
  pages		= "86--109"
}

@InCollection{	  ARTS93p,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Real-time system = discrete system + clock variables",
  booktitle	= "Theories and Experiences for Real-time System Development",
  editor	= "T. Rus and C. Rattray",
  series	= "AMAST Series in Computing 2",
  publisher	= "World Scientific",
  year		= "1994",
  pages		= "1--29"
}

@InProceedings{	  AsarinMaler99,
  author	= "E. Asarin and O. Maler",
  title		= "As soon as possible: Time optimal control for timed
		  automata",
  booktitle	= "HSCC 99: Hybrid Systems: Computation and Control",
  series	= "LNCS 1569",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "19--30"
}

@Book{		  ASU86,
  author	= "A.V. Aho and R. Sethi and J.D. Ullman",
  title		= "Compilers: Principles, Techniques, and Tools",
  publisher	= "Addison-Wesley",
  year		= "1986"
}

@InProceedings{	  AtomCaml05,
  author	= "Michael F. Ringenberg and Dan Grossman",
  title		= "AtomCaml: First-Class Atomicity via Rollback",
  booktitle	= "Proceedings of the 10th Annual Conference on Functional
		  Programming",
  publisher	= "ACM Press",
  year		= "2005"
}

@TechReport{	  Autofocus,
  title		= "Integrated Development of Embedded Systems with
		  {AutoFocus}",
  author	= "F. Huber and B. Schatz",
  number	= "TUM-I0107",
  institution	= "TU Munich, Institut fur Informatik",
  year		= "2001"
}

@InProceedings{	  Avots05,
  author	= {Dzintars Avots and Michael Dalton and V. Benjamin Livshits
		  and Monica S. Lam},
  title		= {Improving software security with a C pointer analysis.},
  booktitle	= {ICSE},
  year		= {2005},
  pages		= {332-341},
  ee		= {http://doi.acm.org/10.1145/1062520},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  bacon98,
  author	= "David F. Bacon and Ravi Konuru and Chet Murthy and
		  Mauricio Serrano",
  title		= "Thin Locks: Featherweight Synchronization for Java",
  booktitle	= {PLDI 98: Programming Language Design and Implementation},
  publisher	= {ACM},
  pages		= "56--67",
  year		= 1993
}

@Article{	  BaetenBergstra91,
  author	= "J.C.M. Baeten and J.A. Bergstra",
  title		= "Real-time process algebra",
  journal	= "Formal Aspects of Computing",
  volume	= "3",
  number	= "2",
  year		= "1991",
  pages		= "142--188"
}

@Book{		  BaetenWeijland90,
  author	= "J.C.M. Baeten and W.P. Weijland",
  title		= "Process Algebra",
  publisher	= "Cambridge University Press",
  year		= "1990"
}

@PhDThesis{	  Baier98,
  author	= "C. Baier",
  title		= "On Algorithmic Verification Methods for Probabilistic
		  Systems",
  school	= "University of Mannheim",
  address	= "Germany",
  year		= "1998"
}

@TechReport{	  Ball,
  author	= {Thomas Ball},
  title		= {A Theory of Predicate-Complete Test Coverage and
		  Generation},
  institution	= {Microsoft Research},
  number	= {MSR-TR-2004-09},
  year		= {2004}
}

@InProceedings{	  ball98limit,
  author	= "T. Ball",
  title		= "On the Limit of Control-Flow Analysis for Regression Test
		  Selection",
  booktitle	= "ISSTA 98: International Symposium on Software Testing and
		  Analysis",
  pages		= "134-142",
  year		= "1998",
  publisher	= "ACM"
}

@InCollection{	  BallRajamaniSpin00,
  author	= "T. Ball and S. K. Rajamani",
  title		= "Bebop: A Symbolic Model Checker for {B}oolean Programs",
  booktitle	= "SPIN 00: SPIN Workshop",
  series	= "LNCS 1885",
  publisher	= "Springer",
  pages		= {113-130},
  year		= "2000"
}

@InProceedings{	  BallRajamaniSpin01,
  title		= {Automatically Validating Temporal Safety Properties of
		  Interfaces},
  author	= {T. Ball and S. K. Rajamani},
  booktitle	= {SPIN 2001: SPIN Workshop},
  series	= {LNCS 2057},
  publisher	= {Springer},
  pages		= {103--122},
  year		= {2001}
}

@InProceedings{	  Bandera,
  title		= {Bandera : Extracting Finite-state Models from {J}ava
		  Source Code},
  author	= {J. Corbett and M. Dwyer and J. Hatcliff and C. Pasareanu
		  and Robby and S. Laubach and H. Zheng},
  booktitle	= {ICSE 00: Software Engineering},
  pages		= {439-448},
  year		= {2000}
}

@InProceedings{	  BanderaAbstraction,
  title		= {Tool-supported Program Abstraction for Finite-state
		  Verification},
  author	= {M. Dwyer and J. Hatcliff and R. Joehanes and S. Laubach
		  and C. Pasareanu and Robby and W. Visser and H. Zheng},
  booktitle	= {ICSE 01: Software Engineering (to appear)},
  year		= {2001}
}

@InProceedings{	  Banerjee,
  author	= "M. Abadi and A. Banerjee and N. Heintze and J.G. Riecke",
  title		= "A Core Calculus of Dependency",
  booktitle	= "POPL 99: Principles of Programming Languages",
  year		= "1999",
  pages		= "147-160",
  publisher	= "ACM"
}

@InCollection{	  Barringer87,
  author	= "H. Barringer",
  title		= "The use of temporal logic in the compositional
		  specification of concurrent systems",
  booktitle	= "Temporal Logics and their Applications",
  editor	= "A. Galton",
  publisher	= "Academic Press",
  year		= "1987",
  pages		= "53--90"
}

@Article{	  Barwise89,
  author	= "J. Barwise",
  title		= "Mathematical proofs of computer system correctness",
  journal	= "Notices of the*American Mathematical Society 36",
  pages		= "844--851",
  year		= "1989"
}

@Article{	  Basu99,
  author	= "S. Basu",
  title		= "New Results on Quantifier Elimination over Real Closed
		  Fields and Applications to Constraint D atabases",
  journal	= "Journal of the {ACM}",
  volume	= "46(4)",
  pages		= "537--555",
  year		= 1999
}

@Article{	  BasuPollackRoy96,
  author	= "S. Basu and R. Pollack and M.-F. Roy",
  title		= "On the Combinatorial and Algebraic Complexity of
		  Quantifier Elimination",
  journal	= "Journal of the {ACM}",
  volume	= "43(6)",
  pages		= "1002--1045",
  year		= 1996
}

@InProceedings{	  Batory03,
  author	= {Don S. Batory and Jacob Neal Sarvela and Axel
		  Rauschmayer},
  title		= {Scaling Step-Wise Refinement.},
  booktitle	= {ICSE},
  year		= {2003},
  pages		= {187-197},
  ee		= {http://computer.org/proceedings/icse/1877/18770187abs.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  BB87,
  author	= "B. Banieqbal and H. Barringer",
  title		= "Temporal logic with fixed points",
  booktitle	= "Temporal Logic in Specification",
  editor	= "B. Banieqbal and H. Barringer and A. Pnueli",
  series	= "Lecture Notes in Computer Science",
  volume	= 398,
  publisher	= "Springer-Verlag",
  year		= 1987,
  pages		= "62--74"
}

@InCollection{	  BBC96,
  author	= "N. Bj{\o}rner and A. Browne and E. Chang and M. Col\'on
		  and A. Kapur and Z. Manna and H.B. Sipma and T.E. Uribe",
  title		= "{\sc {S}{T}e{P}}: deductive-algorithmic verification of
		  reactive and real-time systems",
  booktitle	= "CAV 96: Computer-aided Verification",
  editor	= "R. Alur and T.A. Henzinger",
  series	= "LNCS 1102",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "415--418"
}


@inproceedings{RybalchenkoVMCAI07,
  author    = {D. Beyer and
               T. Henzinger and
               R. Majumdar and
               A. Rybalchenko},
  title     = {Invariant Synthesis in Combination Theories},
  booktitle = {VMCAI},
  year      = {2007},
  ee        = {http://dx.doi.org/10.1007/11609773_28},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{RupakPLDI07,
  author    = {D. Beyer and
               T. Henzinger and
               R. Majumdar and
               A. Rybalchenko},
  title     = {Path Invariants},
  booktitle = {PLDI},
  year      = {2007 (to appear)}
}


@inproceedings{BradleyManna06,
  author    = {Aaron R. Bradley and
               Zohar Manna and
               Henny B. Sipma},
  title     = {What's Decidable About Arrays?},
  booktitle = {VMCAI},
  year      = {2006},
  pages     = {427-442},
  ee        = {http://dx.doi.org/10.1007/11609773_28},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}



@InProceedings{	  BBLS92,
  author	= "S. Bensalem and A. Bouajjani and C. Loiseaux and J.
		  Sifakis",
  title		= "Property-preserving simulations",
  booktitle	= "CAV 92: Computer-aided Verification",
  editor	= "G. von Bochmann and D.K. Probst",
  series	= "LNCS 663",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "260--273"
}

@Book{		  BBook,
  author	= "J.-R. Abrial",
  title		= "The {B}~Book: Assigning Programs to Meanings",
  publisher	= "Cambridge University Press",
  year		= 1996
}

@InProceedings{	  BC02,
  author	= "A. Bockmayr and A. Courtois",
  title		= "Using hybrid concurrent constraint programming to model
		  dynamic biological systems",
  booktitle	= "ICLP 02: Logic Programming",
  pages		= "85--99",
  publisher	= "Springer",
  year		= "2002"
}

@InProceedings{	  BC96,
  author	= "G. Bhat and R. Cleaveland",
  title		= "Efficient model checking via the equational
		  $\mu$-calculus",
  booktitle	= "Proceedings of the Eleventh Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1996",
  pages		= "304--312"
}

@Article{	  BCG88,
  author	= "M.C. Browne and E.M. Clarke and O. Grumberg",
  title		= "Characterizing finite {K}ripke structures in propositional
		  temporal logic",
  journal	= "Theoretical Computer Science",
  volume	= "59",
  year		= "1988",
  pages		= "115--131"
}

@Article{	  BCG89,
  author	= "M.C. Browne and E.C. Clarke and O. Grumberg",
  title		= "Reasoning about networks with many identical finite state
		  processes",
  journal	= "Information and Computation",
  volume	= "81",
  year		= "1989",
  pages		= "13--31"
}

@InCollection{	  BCG97,
  author	= "C. Baier and E.M. Clarke and V. Garmhausen-Hartonas and M.
		  Kwiatkowska and M. Ryan",
  title		= "Symbolic model checking for probabilistic processes",
  booktitle	= "ICALP 97: Automata, Languages, and Programming",
  editor	= "P. Degano and R. Gorrieri and A. Marchetti-Spaccamela",
  series	= "Lecture Notes in Computer Science 1256",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "430--440"
}

@InCollection{kuehlmann,
  author    = {Andreas Kuehlmann and Fabio Somenzi},
  title     = {Equivalence Checking},
  booktitle = {Electronic Design Automation for Integrated Circuits
    Handbook Volume 2},
  year = {2006},
  publisher = {CRC Press}
}

@inproceedings{mine06,
  author    = {Antoine Min{\'e}},
  title     = {Field-sensitive value analysis of embedded C programs with
               union types and pointer arithmetics.},
  booktitle = {LCTES},
  year      = {2006},
  pages     = {54-63},
  ee        = {http://doi.acm.org/10.1145/1134650.1134659},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@inproceedings{DistefanoOY06,
  author    = {Dino Distefano and
               Peter W. O'Hearn and
               Hongseok Yang},
  title     = {A Local Shape Analysis Based on Separation Logic.},
  booktitle = {TACAS},
  year      = {2006},
  pages     = {287-302},
  ee        = {http://dx.doi.org/10.1007/11691372_19}
}

@Unpublished{	  BCHSep04,
  author	= {J. Berdine and C. Calcagno and P. O'Hearn},
  title		= {A Decidable Fragment of Separation Logic},
  note		= "\url{http://www.dcs.qmul.ac.uk/~ohearn/papers/unroll_collapse.pdf}"
		  ,
  key		= "BCHSep04"
}

@Article{	  BCM92,
  author	= "J.R. Burch and E.M. Clarke and K.L. McMillan and D.L. Dill
		  and L.J. Hwang",
  title		= "Symbolic model checking: $10^{20}$ states and beyond",
  journal	= "Information and Computation",
  volume	= "98",
  number	= "2",
  year		= "1992",
  pages		= "142--170"
}

@InProceedings{	  BCR01,
  title		= { Parameterized verification of multithreaded software
		  libraries},
  author	= {T. Ball and S. Chaki and S. K. Rajamani},
  booktitle	= {TACAS 01: Tools and Algorithms for Construction and
		  Analysis of Systems},
  series	= {LNCS 2031},
  publisher	= {Springer},
  year		= {2001}
}

@InProceedings{	  Bentley05,
	title = {Validating a modern microprocessor},
	author = {B. Bentley},
	booktitle = "CAV 05: Computer-Aided Verification",
	series = "LNCS 3576",
	publisher = "Springer",
	pages = "2--4",
	year = 2005
}

@InProceedings{	  BdA95,
  author	= "A. Bianco and L. de Alfaro",
  title		= "Model Checking of Probabilistic and Nondeterministic
		  Systems",
  booktitle	= "FSTTCS 95: Software Technology and Theoretical Computer
		  Science",
  year		= 1995,
  series	= "Lecture Notes in Computer Science",
  volume	= 1026,
  pages		= "499--513",
  publisher	= "Springer-Verlag"
}

@InProceedings{	  Beacon,
  title		= { Parameterized verification of multithreaded software
		  libraries},
  author	= {T. Ball and S. Chaki and S. K. Rajamani},
  booktitle	= {TACAS 01: Tools and Algorithms for Construction and
		  Analysis of Systems},
  series	= {LNCS 2031},
  publisher	= {Springer-Verlag},
  year		= {2001}
}

@inproceedings{AndrausSakallah04,
  author    = {Zaher S. Andraus and
               Karem A. Sakallah},
  title     = {Automatic abstraction and verification of verilog models.},
  booktitle = {DAC},
  year      = {2004},
  pages     = {218-223},
  ee        = {http://doi.acm.org/10.1145/996566.996629},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{AndrausSakallah06,
  author    = {Zaher S. Andraus and
               Mark H. Liffiton and
               Karem A. Sakallah},
  title     = {Refinement strategies for verification methods based on
               datapath abstraction.},
  booktitle = {ASP-DAC},
  year      = {2006},
  pages     = {19-24},
  ee        = {http://doi.acm.org/10.1145/1118299.1118306},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@InProceedings{	  manoliosBAT,
  author	= "Panagiotis Manolios and Sudarshan K. Srinivasan and Daron Vroon",
  title		= "Automatic Memory Reductions for RTL Model Verification",
  booktitle	= "ICCAD 06: International Conference on Computer-Aided
		  Design",
  year		= 2006,
  publisher	= "ACM Press",
  pages		= "(to appear)"
}


@article{manolios06,
  author    = {Panagiotis Manolios and Sudarshan K. Srinivasan},
  title     = {A Framework for Verifying Bit-Level Pipelined Machines Based
    on Automated Deduction and Decision Procedures},
  journal   = {Journal of Automated Reasoning (to appear)},
  year 	    = {2006}
}


@article{hosabettu,
  author    = {Ravi Hosabettu and
               Ganesh Gopalakrishnan and
               Mandayam K. Srivas},
  title     = {Formal Verification of a Complex Pipelined Processor.},
  journal   = {Formal Methods in System Design},
  volume    = {23},
  number    = {2},
  year      = {2003},
  pages     = {171-213},
  ee        = {http://dx.doi.org/10.1023/A:1024716316140},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{GordonRefinement09,
  author    = {J. Bengtson and
               K. Bhargavan and
               C. Fournet and
               A.D. Gordon and
               S. Maffeis},
  title     = {Refinement Types for Secure Implementations},
  booktitle = {CSF},
  year      = {2008},
}

@Book{		  HOL,
  author	= "M. J. C. Gordon and T. F. Melham",
  title		= "Introduction to HOL",
  year		= "1993",
  publisher	= "Cambridge University Press"
}

@Book{		  Beck99,
  author	= "K. Beck",
  title		= "Extreme Programming Explained: Embrace Change",
  year		= "1999",
  publisher	= "Addison-Wesley"
}

@Article{	  Bee80,
  author	= "C. Beeri",
  title		= "On the membership problem for functional and multivalued
		  dependencies in relational databases",
  journal	= "ACM Trans. on Database Systems",
  volume	= 5,
  pages		= "241--259",
  year		= 1980
}

@Article{	  Bellman54,
  author	= "R.E. Bellman",
  title		= "The Theory of Dynamic Programming",
  journal	= "Bull.\ Amer.\ Math.\ Soc.",
  volume	= 60,
  pages		= "503--516",
  year		= 1954
}

@InCollection{	  BEM97,
  author	= "A. Bouajjani and J. Esparza and O. Maler",
  title		= "Reachability analysis of pushdown automata: application to
		  model checking",
  booktitle	= "CONCUR 97: Concurrency Theory",
  series	= "LNCS 1243",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "135--150"
}

@Book{		  BenAri90,
  author	= "{Ben-Ari}, M.",
  title		= "Principles of Concurrent and Distributed Programming",
  publisher	= "Prentice-Hall",
  year		= "1990"
}

@InCollection{	  BER94cav,
  author	= "A. Bouajjani and R. Echahed and R. Robbana",
  title		= "Verification of context-free timed systems using linear
		  hybrid observers",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "118--131"
}

@InCollection{	  BER94ftrtft,
  author	= "A. Bouajjani and R. Echahed and R. Robbana",
  title		= "Verifying invariance properties of timed systems with
		  duration variables",
  booktitle	= "FTRTFT 94: Formal Techniques in Real-time and
		  Fault-tolerant Systems",
  editor	= "H. Langmaack and de Roever, W.-P. and J. Vytopil",
  series	= "LNCS 863",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "193--210"
}

@InProceedings{	  BerkP95,
  author	= "A. Aziz and V. Singhal and F. Balarin and R.K. Brayton and
		  A.L. Sangiovanni-Vincentelli",
  title		= "It Usually Works: The Temporal Logic of Stochastic
		  Systems",
  booktitle	= "CAV95: Computer-Aided Verification",
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer-Verlag",
  volume	= 939,
  year		= 1995,
  summary	= "Introduces pCTL on Markov chains, and then considers more
		  general systems, in which the probabilities are specified
		  by algebrical constraints, and invokes decidability results
		  for these theories to provide (hugely inefficient)
		  model-checking algorithms"
}

@Article{	  Berman80,
  author	= "L. Berman",
  year		= "1980",
  title		= "The complexity of logical theories",
  journal	= "Theoretical Computer Science",
  volume	= "11",
  pages		= "71--77"
}

@InProceedings{	  BernsteinHarter81,
  author	= "A. Bernstein and Harter, Jr., P.K.",
  title		= "Proving real-time properties of programs with temporal
		  logic",
  booktitle	= "Proceedings of the Eighth Annual Symposium on Operating
		  System Principles",
  publisher	= "ACM Press",
  year		= "1981",
  pages		= "1--11"
}

@TechReport{	  BerryGonthier88,
  author	= "G. Berry and G. Gonthier",
  title		= "The Synchronous Programming Language {\sc {E}sterel}:
		  Design, Semantics, Implementation",
  institution	= "INRIA",
  number	= "842",
  year		= "1988"
}

@Article{	  BerthomieuDiaz91,
  author	= "B. Berthomieu and M. Diaz",
  title		= "Modeling and verification of time-dependent systems using
		  time {Petri} nets",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "SE-17",
  number	= "3",
  year		= "1991",
  pages		= "259--273"
}

@Book{		  Bertsekas95,
  author	= "D.P. Bertsekas",
  title		= "Dynamic Programming and Optimal Control",
  year		= 1995,
  note		= "Volumes I and II",
  publisher	= "Athena Scientific"
}

@InProceedings{	  BES93,
  author	= "A. Bouajjani and R. Echahed and J. Sifakis",
  title		= "On model checking for real-time properties with durations",
  booktitle	= "Proceedings of the Eighth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1993",
  pages		= "147--159"
}

@InCollection{	  BFH90,
  author	= "A. Bouajjani and Fernandez, J.-C. and N. Halbwachs",
  title		= "Minimal model generation",
  booktitle	= "CAV 90: Computer-aided Verification",
  editor	= "R.P. Kurshan and E.M. Clarke",
  series	= "LNCS 531",
  publisher	= "Springer-Verlag",
  year		= "1990",
  pages		= "197--203"
}

@Article{	  BG03,
  author	= "D. Bustan and O. Grumberg",
  year		= "2003",
  title		= "Simulation-based minimization",
  journal	= "ACM Transactions on Computational Logic",
  volume	= "4",
  pages		= "181--206"
}

@InCollection{	  BGK96,
  author	= "J. Bengtsson and W.O.D. Griffioen and K.J. Kristoffersen
		  and K.G. Larsen and F. Larsson and P. Pettersson and W. Yi",
  title		= "Verification of an audio protocol with bus collision using
		  {\sc {U}ppaal}",
  booktitle	= "CAV 96: Computer-aided Verification",
  editor	= "R. Alur and T.A. Henzinger",
  series	= "LNCS 1102",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "244--256"
}

@InCollection{	  BGM93,
  author	= "A. Back and J. Guckenheimer and M. Myers",
  title		= "A dynamical simulation facility for hybrid systems",
  booktitle	= "Hybrid Systems",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "LNCS 736",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "255--267"
}

@InProceedings{	  BGP97,
  author	= "T. Bultan and R. Gerber and W. Pugh",
  title		= "Symbolic model checking of infinite systems using
		  Presburger arithmetic",
  booktitle	= "CAV 97: Computer-Aided Verification",
  series	= "LNCS 1254",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "400--411"
}

@InProceedings{	  BGS97,
  title		= {Refining dataflow information using infeasible paths},
  author	= {R. Bodik and R. Gupta and M.L. Soffa},
  booktitle	= {FSE 97: Foundations of Software Engineering},
  series	= {LNCS 1301},
  publisher	= {Springer},
  pages		= {361--377},
  year		= {1997}
}

@InProceedings{	  BhatCleaveland96,
  author	= "G. Bhat and R. Cleaveland",
  title		= "Efficient local model-checking for fragments of the modal
		  $\mu$-calculus",
  booktitle	= "Proceedings of the International Conference on Tools and
		  Algorithms for Construction and Analysis of Systems",
  series	= "LNCS",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "107--126"
}

@InProceedings{	  BI01,
  author	= {Samin S. Ishtiaq and Peter W. O'Hearn},
  title		= {BI as an Assertion Language for Mutable Data Structures.},
  booktitle	= {POPL},
  year		= {2001},
  pages		= {14-26},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  BIM88,
  author	= "B. Bloom and S. Istrail and A.R. Meyer",
  title		= "Bisimulation can't be traced",
  booktitle	= "Proceedings of the 15th Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1988",
  pages		= "229--239"
}

@Article{	  BK98,
  author	= "C. Baier and M. Kwiatkowska",
  title		= "On the Verification of Qualitative Properties of
		  Probabilistic Processes under Fairness Contraints",
  journal	= "Information Processing Letters",
  volume	= 66,
  number	= 2,
  pages		= "71--79",
  year		= 1998,
  summary	= "discusses a new notion of fairness (which may be
		  impractical to represent) that generalizes extreme and
		  alpha fairness for hybrid systems. Fairness is used as a
		  substitute for probability, not nondeterminism as in their
		  KB96 paper"
}

@InProceedings{	  BKP84,
  author	= "H. Barringer and R. Kuiper and A. Pnueli",
  title		= "Now you may compose temporal-logic specifications",
  booktitle	= "Proceedings of the 16th Annual Symposium on Theory of
		  Computing",
  publisher	= "ACM Press",
  year		= "1984",
  pages		= "51--63"
}

@InProceedings{	  BKP86,
  author	= "H. Barringer and R. Kuiper and A. Pnueli",
  title		= "A really abstract concurrent model and its temporal logic",
  booktitle	= "Proceedings of the 13th Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1986",
  pages		= "173--183"
}

@Article{	  BKRW98,
  author	= "A.L. Buchsbaum and H. Kaplan and A. Rogers and J.
		  Westbrook",
  title		= "A New, Simpler Linear-Time Dominators Algorithm",
  journal	= "ACM Trans. Program. Lang. Syst.",
  volume	= "20(6)",
  pages		= "1265-1296",
  publisher	= "ACM",
  year		= "1998"
}

@Article{	  BL99,
  author	= "Saddek Bensalem and Yassine Lakhnech",
  title		= "Automatic Generation of Invariants",
  journal	= "Formal Methods in System Design",
  volume	= "15(1)",
  pages		= "75-92",
  year		= "1999"
}

@Article{	  Blackwell62,
  author	= "D. Blackwell",
  title		= "Discounted dynamic programming",
  journal	= "Annals of Mathematical Statistics",
  volume	= "36",
  pages		= "226--235",
  year		= 1962
}

@InProceedings{	  BLL96,
  author	= "J. Bengtsson and K.G. Larsen and F. Larsson and P.
		  Pettersson and W. Yi",
  title		= "{\sc {U}ppaal}: a tool-suite for automatic verification of
		  real-time systems",
  booktitle	= "Hybrid Systems III",
  editor	= "R. Alur and T.A. Henzinger and E.D. Sontag",
  series	= "LNCS 1066",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "232--243"
}

@PhDThesis{	  Bloom89,
  author	= "B. Bloom",
  title		= "Ready simulation, bisimulation, and the semantics of
		  {CCS}-like languages",
  school	= "MIT",
  year		= "1989"
}

@Article{	  BloomPaige95,
  author	= "B. Bloom and R. Paige",
  title		= "Transformational design and implementation of a new
		  efficient solution to the ready simulation problem",
  journal	= "Science of Computer Programming",
  volume	= "24",
  number	= "3",
  year		= "1995",
  pages		= "189--220"
}

@InProceedings{	  BLV96,
  author	= "N. Buhrke and H. Lescow and J. Voge",
  title		= "Strategy construction in infinite games with Streett and
		  Rabin chain winning conditions",
  booktitle	= "TACAS 96: Tools and Algorithms for Construction and
		  Analysis of Systems",
  series	= "LNCS 1055",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "207--224"
}

@Book{		  BM79,
  author	= "R.S. Boyer and J.S. Moore",
  title		= "A Computational Logic",
  publisher	= "Academic Press, NY",
  year		= "1979"
}


@inproceedings{pvshardware,
  author    = {Mandayam K. Srivas and
               Harald Rue{\ss} and
               David Cyrluk},
  title     = {Hardware Verification Using PVS.},
  booktitle = {Formal Hardware Verification},
  year      = {1997},
  pages     = {156-205},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@inproceedings{Harrison05,
  author    = {John Harrison},
  title     = {Floating-Point Verification.},
  booktitle = {FM},
  year      = {2005},
  pages     = {529-532},
  ee        = {http://dx.doi.org/10.1007/11526841_35},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@article{acl2fdiv,
  author    = {J. Strother Moore and
               Thomas W. Lynch and
               Matt Kaufmann},
  title     = {A Mechanically Checked Proof of the AMD5$_{\mbox{K}}$86$^{\mbox{TM}}$
               Floating Point Division Program.},
  journal   = {IEEE Trans. Computers},
  volume    = {47},
  number    = {9},
  year      = {1998},
  pages     = {913-926},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@InCollection{	  BMC,
  author	= "A. Biere and A. Cimatti and E.M. Clarke and Y. Zhu",
  title		= "Symbolic Model Checking without {BDDs}",
  booktitle	= "TACAS 99: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  series	= "Lecture Notes in Computer Science 1579",
  publisher	= "Springer",
  pages		= "193-207",
  year		= 1999
}

@InProceedings{	  BMMR01,
  title		= {Automatic Predicate Abstraction of {C} Programs},
  author	= {T. Ball and R. Majumdar and T. Millstein and S. K.
		  Rajamani},
  booktitle	= {PLDI},
  publisher	= {ACM},
  pages		= {203--213},
  year		= {2001}
}

@InProceedings{	  BMP81,
  author	= "{Ben-Ari}, M. and Z. Manna and A. Pnueli",
  title		= "The temporal logic of branching time",
  booktitle	= "Proceedings of the Eighth Annual Symposium on Principles
		  of Programming Languages",
  publisher	= "ACM Press",
  year		= "1981",
  pages		= "164--176"
}

@Article{	  BMR03,
  title		= {Polymorphic predicate abstraction},
  author	= {T. Ball and T. Millstein and S.K. Rajamani},
  journal	= {ACM Transactions on Programming Languages and Systems},
  publisher	= {ACM},
  year		= {2003}
}

@Article{	  Bochmann:1978:CN,
  author	= "Bochmann, {G. V.}",
  title		= "Finite State Description of Communication Protocols",
  journal	= "Computer Networks (and ISDN Systems)",
  volume	= "2",
  pages		= "361--372",
  year		= "1978"
}

@InProceedings{	  BodikAnik98,
  author	= {R. Bodik and S. Anik},
  title		= {Path-Sensitive Value-Flow Analysis},
  booktitle	= {POPL 98: Principles of Programming Languages},
  publisher	= {ACM},
  year		= { 1998 },
  pages		= {237-251}
}

@InProceedings{	  BodikGuptaSarkar00,
  author	= {Rastislav Bodik and Rajiv Gupta and Vivek Sarkar},
  title		= {ABCD: Eliminating Array Bounds Checks on Demand},
  booktitle	= {PLDI 00: Programming Language Design and Implementation},
  publisher	= {ACM},
  year		= {2002},
  pages		= {321--333}
}

@InProceedings{	  BodikGuptaSoffa97,
  author	= {R. Bodik and R. Gupta and M. L. Soffa},
  title		= {Interprocedural Conditional Branch Elimination},
  booktitle	= {PLDI 97: Programming Language Design and Implementation},
  publisher	= {ACM},
  pages		= {146-158},
  year		= { 1997 }
}

@InProceedings{	  BodikStrauss,
  author	= {Glenn Ammons and David Mandelin and Rastislav Bodik and
		  James R. Larus},
  title		= {Debugging temporal specifications with Concept Analysis},
  booktitle	= {PLDI 03: Programming Language Design and Implementation},
  publisher	= {ACM},
  year		= {2003},
  pages		= {182--195}
}

@InProceedings{	  Boigelot:1994:CAV,
  author	= "Boigelot, B. and Wolper, P.",
  title		= "Symbolic Verification with Periodic Sets",
  booktitle	= "CAV 94: Computer-Aided Verification",
  volume	= "818",
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer-Verlag",
  pages		= "55--67",
  year		= "1994"
}

@InProceedings{	  Boigelot:1996:CAV,
  author	= "Boigelot, B. and Godefroid, P.",
  title		= "Symbolic Verification of Communication Protocols with
		  Infinite State Spaces Using QDDs",
  booktitle	= "CAV 96: Computer-Aided Verification",
  volume	= "1102",
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer-Verlag",
  pages		= "1--12",
  year		= "1996"
}

@InProceedings{	  BOON,
  author	= {David Wagner and Jeffrey S. Foster and Eric A. Brewer and
		  Alexander Aiken},
  title		= {A First Step Towards Automated Detection of Buffer Overrun
		  Vulnerabilities.},
  booktitle	= {NDSS},
  year		= {2000},
  ee		= {http://www.isoc.org/isoc/conferences/ndss/2000/proceedings/039.pdf}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Bouajjani:1999:TCS,
  author	= "Bouajjani, A. and Habermehl, P.",
  title		= "Symbolic reachability analysis of {FIFO}-channel systems
		  with nonregular sets of configurations",
  journal	= "Theoretical Computer Science",
  volume	= "221",
  number	= "1--2",
  pages		= "211--250",
  year		= "1999"
}

@InCollection{	  BouajjaniRobbana95,
  author	= "A. Bouajjani and R. Robbana",
  title		= "Verifying $\omega$-regular properties for subclasses of
		  linear hybrid systems",
  booktitle	= "CAV 95: Computer-aided Verification",
  editor	= "P. Wolper",
  series	= "LNCS 939",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "437--450"
}

@InProceedings{	  Bourdoncle93,
  author	= "F. Bourdoncle",
  title		= "Abstract debugging of higher-order imperative languages",
  booktitle	= "Proceedings of the Annual Conference on Programming
		  Language Design and Implementation",
  publisher	= "ACM Press",
  year		= "1993",
  pages		= "46--55"
}

@InProceedings{	  Boyapati02,
  author	= "C. Boyapati and S. Khurshid and D. Marinov",
  title		= "Korat: {A}utomated testing based on {Java} predicates",
  booktitle	= "ISSTA 02: Software Testing and Analysis",
  publisher	= "ACM",
  year		= "2002",
  pages		= "123--133"
}

@InProceedings{	  Boyapati03,
  author	= {Chandrasekhar Boyapati and Alexandru Salcianu and William
		  S. Beebee and Martin C. Rinard},
  title		= {Ownership types for safe region-based memory management in
		  real-time Java.},
  booktitle	= {PLDI},
  year		= {2003},
  pages		= {324-337},
  ee		= {http://doi.acm.org/781131.781168},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  BoyapatiLeeRinard02,
  author	= "C. Boyapati and R. Lee and M. Rinard",
  title		= "Ownership types for safe programming: preventing data
		  races and deadlocks",
  booktitle	= "OOPSLA 02: Object-Oriented Programming, Systems, Languages
		  and Applications",
  pages		= "211--230",
  year		= "2002"
}

@InProceedings{	  BoyapatiRinard,
  author	= {C. Boyapati and R. Lee and M.C. Rinard},
  title		= "Ownership types for safe programming: preventing data
		  races and deadlocks",
  booktitle	= {Proc.\ OOPSLA},
  publisher	= {ACM},
  year		= {2002},
  pages		= {211-230}
}

@InProceedings{	  BoyapatiRinard01,
  author	= "C. Boyapati and M. Rinard",
  title		= "A Parameterized Type System for Race-Free {Java} Programs",
  booktitle	= "OOPSLA 01: Object-Oriented Programming, Systems, Languages
		  and Applications",
  pages		= "56--69",
  year		= "2001"
}

@InCollection{	  BozgaMaler99,
  author	= "M. Bozga and O. Maler",
  title		= "On the representation of probabilities over structured
		  domains",
  booktitle	= "CAV 99: Computer-aided Verification",
  editor	= "N. Halbwachs and D. Peled",
  series	= "Lecture Notes in Computer Science 1633",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "261--273"
}

@InProceedings{	  BPR01,
  title		= {Boolean and cartesian abstractions for model checking {C}
		  programs},
  author	= {T. Ball and A. Podelski and S. K. Rajamani},
  booktitle	= {TACAS 01: Tools and Algorithms for Construction and
		  Analysis of Systems},
  series	= {LNCS 2031},
  pages		= {268--283},
  publisher	= {Springer},
  year		= {2001}
}

@InCollection{	  BPV94,
  author	= "D. Bosscher and I. Polak and F. Vaandrager",
  title		= "Verification of an audio-control protocol",
  booktitle	= "FTRTFT 94: Formal Techniques in Real-time and
		  Fault-tolerant Systems",
  editor	= "H. Langmaack and de Roever, W.-P. and J. Vytopil",
  series	= "LNCS 863",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "170--192"
}

@Book{		  BrinchHansen77,
  author	= "{Brinch Hansen}, P.",
  title		= "The Architecture of Concurrent Programs",
  publisher	= "Prentice-Hall",
  year		= "1977"
}

@TechReport{	  BRNewton,
  author	= {T. Ball and S.K. Rajamani},
  title		= {Generating Abstract Explanations of Spurious
		  Counterexamples in {C} Programs},
  institution	= {Microsoft Research},
  number	= {MSR-TR-2002-09},
  year		= {2002}
}

@InProceedings{	  BRS93,
  author	= "G. Berry and S. Ramesh and R.K. Shyamasundar",
  title		= "Communicating reactive processes",
  booktitle	= "Proceedings of the 20th Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1993",
  pages		= "85--98"
}

@Article{	  Bryant86,
  author	= "R.E. Bryant",
  title		= "Graph-based algorithms for boolean function manipulation",
  journal	= "IEEE Transactions on Computers",
  volume	= "C-35",
  number	= "8",
  year		= "1986",
  pages		= "677-691"
}
@InProceedings{	  Arvind03,
  author	= "Arvind",
  title		= "Bluespec: A language for hardware design, simulation, synthesis and verification Invited Talk:",
  booktitle	= "MEMOCODE03: Formal Methods and Models for Co-Design, 2003",
  pages		= "249",
  year		= 2003
}

@InProceedings{	  Arvind05,
  author	= "N. Dave and M. C. Ng and Arvind",
  title		= "Automatic synthesis of cache-coherence protocol processors using Bluespec",
  booktitle	= "MEMOCODE05: Formal Methods and Models for Co-Design, 2005",
  pages		= "25--34",
  year		= 2005
}

@InProceedings{	  BrylowDamgaardPalsberg00,
  author	= "Dennis Brylow and Niels Damgaard and Jens Palsberg",
  title		= "Static Checking of Interrupt-driven Software",
  booktitle	= "ICSE 01: International Conference on Software Engineering",
  pages		= "47--56",
  year		= 2001
}

@InCollection{	  BS94,
  author	= "O. Burkart and B. Steffen",
  title		= "Pushdown processes: parallel composition and model
		  checking",
  booktitle	= "CONCUR 94: Concurrency Theory",
  series	= "LNCS 836",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "98--113"
}

@Article{	  Buchi60,
  author	= "J.R. B{\"u}chi",
  title		= "Weak second-order arithmetic and finite automata",
  journal	= "{Zeitschrift f\"ur mathematische Logik und Grundlagen der
		  Mathematik}",
  volume	= "6",
  year		= "1960",
  pages		= "66--92"
}

@InProceedings{	  Buchi62,
  author	= "J.R. B{\"u}chi",
  title		= "On a decision method in restricted second-order
		  arithmetic",
  booktitle	= "Proceedings of the First International Congress on Logic,
		  Methodology, and Philosophy of Science 1960",
  editor	= "E. Nagel and P. Suppes and A. Tarski",
  publisher	= "Stanford University Press",
  year		= "1962",
  pages		= "1--11"
}

@Article{	  Buchi83,
  author	= "J.R. B{\"u}chi",
  title		= "State strategies for games in $F_{\sigma\delta} \cap
		  G_{\delta\sigma}$",
  journal	= "Journal of Symbolic Logic",
  volume	= "48",
  year		= "1983",
  pages		= "1171--1198"
}

@Article{	  BuchiLandweber69,
  author	= "J.R. B{\"u}chi and L.H. Landweber",
  title		= "Solving sequential conditions by finite-state strategies",
  journal	= "Transactions of the AMS",
  volume	= "138",
  year		= "1969",
  pages		= "295--311"
}

@InProceedings{	  BufferOverrun,
  author	= "D. Wagner and J.S. Foster and E.A. Brewer and A. Aiken",
  title		= "A First Step Towards Automated Detection of Buffer Overrun
		  Vulnerabilities",
  booktitle	= "NDSS 00",
  year		= 2000
}

@inproceedings{burchdill94,
  author    = {Jerry R. Burch and
               David L. Dill},
  title     = {Automatic verification of Pipelined Microprocessor Control.},
  booktitle = {CAV},
  year      = {1994},
  pages     = {68-80},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{sawadahunt,
  author    = {Jun Sawada and
               Warren A. Hunt Jr.},
  title     = {Verification of FM9801: An Out-of-Order Microprocessor Model
               with Speculative Execution, Exceptions, and Program-Modifying
               Capability.},
  journal   = {Formal Methods in System Design},
  volume    = {20},
  number    = {2},
  year      = {2002},
  pages     = {187-222},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@InCollection{	  Burch89,
  author	= "J.R. Burch",
  title		= "Combining {CTL}, trace theory, and timing models",
  booktitle	= "CAV 89: Automatic Verification Methods for Finite-state
		  Systems",
  editor	= "J. Sifakis",
  series	= "LNCS 407",
  publisher	= "Springer-Verlag",
  year		= "1989",
  pages		= "334--348"
}

@InCollection{	  Burgess84,
  author	= "J.P. Burgess",
  title		= "Basic tense logic",
  booktitle	= "Handbook of Philosophical Logic",
  volume	= "II",
  editor	= "D. Gabbay and F. Guenthner",
  publisher	= "D. Reidel Publishing Company",
  year		= "1984",
  pages		= "89--133"
}

@InProceedings{	  Burns,
  title		= "A Probabilistic Framework for Schedulability Analysis",
  author	= "A. Burns and G. Bernat and I. Broster",
  booktitle	= "EMSOFT 03: Embedded Software",
  series	= "Lecture Notes in Computer Science",
  pages		= "1--15",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  Butkevich00,
  author	= {Sergey Butkevich and Marco Renedo and Gerald Baumgartner
		  and Michal Young},
  title		= {Compiler and tool support for debugging object
		  protocols.},
  booktitle	= {SIGSOFT FSE},
  year		= {2000},
  pages		= {50-59},
  ee		= {http://portal.acm.org/citation.cfm?id=355045.355052},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Book{		  Buttazzo,
  author	= "G.C. Buttazzo",
  title		= "Hard Real-Time Computing Systems",
  publisher	= "Kluwer",
  year		= "1997"
}

@InCollection{	  BVW94,
  author	= "O. Bernholtz and M.Y. Vardi and P. Wolper",
  title		= "An automata-theoretic approach to branching-time model
		  checking",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "142--155"
}

@TechReport{	  C2bp-tr,
  author	= {T. Ball and T. Millstein and S. K. Rajamani},
  title		= {Polymorphic Predicate Abstraction},
  institution	= {Microsoft Research},
  number	= {MSR Technical Report 2001-10},
  year		= {2000}
}

@Unpublished{	  cameleon,
  author	= "Maxence Guesdon and Dimitri Ara and Alan Schmitt and
		  Sylvain Le Gall and Nadji Gauthier",
  title		= "Cameleon",
  note		= "\url{http://pauillac.inria.fr/~guesdon/Tools/cameleon/cameleon.html}"
		  ,
  year		= "2005"
}

@Book{		  Cassandras93,
  author	= "C.G. Cassandras",
  title		= "Discrete-Event Systems: Modeling and Performance Analysis",
  publisher	= "Aksen Associates",
  year		= "1993"
}

@InCollection{	  CAV00,
  author	= "L. de Alfaro and T.A. Henzinger and F.Y.C. Mang",
  title		= "Detecting errors before reaching them",
  booktitle	= "CAV 00: Computer-aided Verification",
  editor	= "E.A. Emerson and A.P. Sistla",
  series	= "Lecture Notes in Computer Science 1855",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "186--201"
}


@inproceedings{SPIN03BLAST,
  author    = {Thomas A. Henzinger and
               Ranjit Jhala and
               Rupak Majumdar and
               Gr{\'e}goire Sutre},
  title     = {Software Verification with BLAST.},
  booktitle = {SPIN},
  year      = {2003},
  pages     = {235-239},
  ee        = {http://link.springer.de/link/service/series/0558/bibs/2648/26480235.htm},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@InCollection{	  CAV02BLAST,
  author	= "T.A. Henzinger and R. Jhala and R. Majumdar and G.C.
		  Necula and G. Sutre and W. Weimer",
  title		= "Temporal-safety proofs for systems code",
  booktitle	= "CAV 02: Computer-Aided Verification",
  series	= "LNCS 2404",
  publisher	= "Springer",
  year		= "2002",
  pages		= "526--538"
}

@InCollection{	  CAV03BLAST,
  author	= "T.A. Henzinger and R. Jhala and R. Majumdar and S. Qadeer",
  title		= "Thread-modular abstraction refinement",
  booktitle	= "CAV 03: Computer-Aided Verification",
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer-Verlag",
  year		= "2003"
}

@InCollection{	  CAV93,
  author	= "R. Alur and C. Courcoubetis and T.A. Henzinger",
  title		= "Computing accumulated delays in real-time systems",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "Lecture Notes in Computer Science 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "181--193"
}

@Article{	  CAV93j,
  author	= "R. Alur and C. Courcoubetis and T.A. Henzinger",
  title		= "Computing accumulated delays in real-time systems",
  journal	= "Formal Methods in System Design",
  volume	= "11",
  number	= "2",
  year		= "1997",
  pages		= "137--156"
}

@InCollection{	  CAV94,
  author	= "R. Alur and L. Fix and T.A. Henzinger",
  title		= "A determinizable class of timed automata",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "Lecture Notes in Computer Science 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "1--13"
}

@InCollection{	  CAV95AH,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Local liveness for compositional modeling of fair reactive
		  systems",
  booktitle	= "CAV 95: Computer-aided Verification",
  editor	= "P. Wolper",
  series	= "Lecture Notes in Computer Science 939",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "166--179"
}

@InCollection{	  CAV95HH,
  author	= "T.A. Henzinger and P.-H. Ho",
  title		= "Algorithmic analysis of nonlinear hybrid systems",
  booktitle	= "CAV 95: Computer-aided Verification",
  editor	= "P. Wolper",
  series	= "Lecture Notes in Computer Science 939",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "225--238"
}

@Article{	  CAV95HHWj,
  author	= "T.A. Henzinger and P.-H. Ho and H. Wong-Toi",
  title		= "Algorithmic analysis of nonlinear hybrid systems",
  journal	= "IEEE Transactions on Automatic Control",
  volume	= "43",
  number	= "4",
  year		= "1998",
  pages		= "540--554"
}

@InCollection{	  CAV97ABHQR,
  author	= "R. Alur and R.K. Brayton and T.A. Henzinger and S. Qadeer
		  and S.K. Rajamani",
  title		= "Partial-order reduction in symbolic state-space
		  exploration",
  booktitle	= "CAV 97: Computer-aided Verification",
  editor	= "O. Grumberg",
  series	= "Lecture Notes in Computer Science 1254",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "340--351"
}

@InCollection{	  CAV97HHW,
  author	= "T.A. Henzinger and P.-H. Ho and H. Wong-Toi",
  title		= "{\sc {H}y{T}ech}: a model checker for hybrid systems",
  booktitle	= "CAV 97: Computer-aided Verification",
  editor	= "O. Grumberg",
  series	= "Lecture Notes in Computer Science 1254",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "460--463"
}

@Article{	  CAV97HHWj,
  author	= "T.A. Henzinger and P.-H. Ho and H. Wong-Toi",
  title		= "{\sc {H}y{T}ech}: a model checker for hybrid systems",
  journal	= "Software Tools for Technology Transfer",
  volume	= "1",
  year		= "1997",
  pages		= "110--122"
}

@InCollection{	  CAV98AHMQRT,
  author	= "R. Alur and T.A. Henzinger and F.Y.C. Mang and S. Qadeer
		  and S.K. Rajamani and S. Tasiran",
  title		= "{\sc {M}ocha}: modularity in model checking",
  booktitle	= "CAV 98: Computer-aided Verification",
  editor	= "A.J. Hu and M.Y. Vardi",
  series	= "Lecture Notes in Computer Science 1427",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "521--525"
}

@InCollection{	  CAV98HKQ,
  author	= "T.A. Henzinger and O. Kupferman and S. Qadeer",
  title		= "From {\em pre\/}historic to {\em post\/}modern symbolic
		  model checking",
  booktitle	= "CAV 98: Computer-aided Verification",
  editor	= "A.J. Hu and M.Y. Vardi",
  series	= "Lecture Notes in Computer Science 1427",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "195--206"
}

@InCollection{	  CAV98HQR,
  author	= "T.A. Henzinger and S. Qadeer and S.K. Rajamani",
  title		= "You assume, we guarantee: methodology and case studies",
  booktitle	= "CAV 98: Computer-aided Verification",
  editor	= "A.J. Hu and M.Y. Vardi",
  series	= "Lecture Notes in Computer Science 1427",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "440--451"
}

@InCollection{	  CAV99HQR1,
  author	= "T.A. Henzinger and S. Qadeer and S.K. Rajamani",
  title		= "Assume-guarantee refinement between different time scales",
  booktitle	= "CAV 99: Computer-aided Verification",
  editor	= "N. Halbwachs and D. Peled",
  series	= "Lecture Notes in Computer Science 1633",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "208--221"
}

@InCollection{	  CAV99HQR2,
  author	= "T.A. Henzinger and S. Qadeer and S.K. Rajamani",
  title		= "Verifying sequential consistency on shared-memory
		  multiprocessor systems",
  booktitle	= "CAV 99: Computer-aided Verification",
  editor	= "N. Halbwachs and D. Peled",
  series	= "Lecture Notes in Computer Science 1633",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "301--315"
}

@Unpublished{	  CavBook,
  author	= "R.~Alur and T.A. Henzinger",
  title		= "Computer-Aided Verification. {A}n Introduction to Model
		  Building and Model Checking for Concurrent Systems",
  note		= "Draft",
  year		= 1998
}

@Unpublished{	  CBG91,
  author	= "E.M. Clarke and J.R. Burch and O. Grumberg and D.E. Long
		  and K.L. McMillan",
  title		= "Automatic verification of sequential circuit designs",
  note		= "Presented at the Royal Society of London",
  year		= "1991"
}

@InCollection{	  CBM89,
  author	= "O. Coudert and C. Berthet and J. Madre",
  title		= "Verification of synchronous sequential machines based on
		  symbolic execution",
  booktitle	= "CAV 89: Automatic Verification Methods for Finite-state
		  Systems",
  editor	= "J. Sifakis",
  series	= "LNCS 407",
  publisher	= "Springer-Verlag",
  year		= "1989",
  pages		= "365--373"
}

@Unpublished{interproc,
  author	= {G. Lalire and M. Argoud and B. Jeannet},
  title		= {Interproc},
  note		= {\url{http://bit.ly/8Y310m}}
}

@Unpublished{	  CBreezeWebPage,
  author	= "C. {Lin {\em et al.}}",
  title		= "C-Breeze: C Compiler Infrastructure",
  note		= "\url{http://www.cs.utexas.edu/users/c-breeze/}"
}

@InProceedings{	  CCM94,
  author	= "S. Campos and E.M. Clarke and W. Marrero and M. Minea and
		  H. Hiraishi",
  title		= "Computing quantitative characteristics of finite-state
		  real-time systems",
  booktitle	= "Proceedings of the 15th Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1994"
}

@InProceedings{	  ccured,
  author	= {Jeremy Condit and Matthew Harren and Scott McPeak and
		  George C. Necula and Westley Weimer},
  title		= {CCured in the real world.},
  booktitle	= {PLDI},
  year		= {2003},
  pages		= {232-244},
  ee		= {http://doi.acm.org/781131.781157},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InCollection{	  CdAHJ+02,
  author	= "A. Chakrabarti and L. de Alfaro and T.A. Henzinger and M.
		  Jurdzi\'{n}ski and F.Y.C. Mang",
  title		= "Interface compatibility checking for software modules",
  booktitle	= "CAV 02: Computer-Aided Verification",
  editor	= "E. Brinksma and K.G. Larsen",
  series	= "Lecture Notes in Computer Science 2404",
  publisher	= "Springer-Verlag",
  year		= "2002",
  pages		= "428--441"
}

@InCollection{	  CdAHM02,
  author	= "A. Chakrabarti and L. de Alfaro and T.A. Henzinger and
		  F.Y.C. Mang",
  title		= "Synchronous and bidirectional component interfaces",
  booktitle	= "CAV 02: Computer-Aided Verification",
  editor	= "E. Brinksma and K.G. Larsen",
  series	= "Lecture Notes in Computer Science 2404",
  publisher	= "Springer-Verlag",
  year		= "2002",
  pages		= "414--427"
}

@InProceedings{	  CdAHS03,
  author	= "A. Chakrabarti and L. de Alfaro and T.A. Henzinger and M.
		  Stoelinga",
  title		= "Resource interfaces",
  booktitle	= "EMSOFT 03: Embedded Software",
  series	= "Lecture Notes in Computer Science",
  pages		= "117-133",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  CDC97,
  author	= "R. Alur and T.A. Henzinger and H. Wong-Toi",
  title		= "Symbolic analysis of hybrid systems",
  booktitle	= "Proceedings of the 36th International Conference on
		  Decision and Control",
  publisher	= "IEEE Press",
  year		= "1997",
  pages		= "702--707"
}

@InProceedings{	  CDHP+00,
  author	= "J. Corbett and M. Dwyer and J. Hatcliff and C. Pasareanu
		  and Robby and S. Laubach and H. Zheng",
  title		= "Bandera: Extracting Finite-state Models from {J}ava Source
		  Code",
  booktitle	= {ICSE 2000: International Conference on Software
		  Engineering},
  publisher	= {ACM},
  pages		= {439-448},
  year		= "2000"
}

@Article{	  CelikkanCleaveland,
  author	= "U. Celikkan and R. Cleaveland",
  title		= "Generating diagnostic information for behavioral
		  preorders",
  journal	= "Distributed Computing",
  year		= "To appear"
}

@InCollection{	  Cerans92,
  author	= "K. {\v{C}er\=ans}",
  title		= "Decidability of bisimulation equivalence for parallel
		  timer processes",
  booktitle	= "CAV 92: Computer-aided Verification",
  editor	= "G. von Bochmann and D.K. Probst",
  series	= "LNCS 663",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "302--315"
}

@PhDThesis{	  Cerans92thesis,
  author	= "K. {\v{C}er\=ans}",
  title		= "Algorithmic Problems in Analysis of Real-time System
		  Specifications",
  school	= "University of Latvia",
  year		= "1992"
}

@Unpublished{	  CERT,
  author	= "{CERT} Advisory CA-2001-19",
  title		= "Code Red Worm Exploiting Buffer Overflow In IIS Indexing
		  Service DLL",
  note		= "\url{http://www.cert.org/advisories/CA-2001-19.html}",
  year		= "2001"
}

@Article{	  CES86,
  author	= "E.M. Clarke and E.A. Emerson and A.P. Sistla",
  title		= "Automatic verification of finite-state concurrent systems
		  using temporal-logic specifications",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "8",
  number	= "2",
  year		= "1986",
  pages		= "244--263"
}

@InProceedings{	  CF03,
  title		= "Symbolic Model Checking of Biochemical Networks",
  author	= "N. Chabrier and F. Fages",
  booktitle	= "CMSB 2003: Computational methods in Systems Biology",
  pages		= "149--162",
  publisher	= "Springer",
  year		= "2003"
}

@InCollection{	  CFJ93,
  author	= "E.M. Clarke and T. Filkorn and S. Jha",
  title		= "Exploiting symmetry in temporal-logic model checking",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "450--462"
}

@Article{	  CFRWZ91,
  author	= "R. Cytron and J. Ferrante and B.K. Rosen and M.N. Wegman
		  and F.K. Zadek",
  title		= "Efficiently computing static single assignment form and
		  the program dependence graph",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "13",
  pages		= "451--490",
  year		= "1991"
}

@InProceedings{	  CGH93,
  author	= "E.M. Clarke and O. Grumberg and H. Hiraishi and S. Jha and
		  D.E. Long and K.L. McMillan and L.A. Ness",
  title		= "Verification of the Futurebus$+$ cache coherence protocol",
  booktitle	= "Proceedings of the 11th Symposium on Computer Hardware
		  Description Languages and their Applications",
  year		= "1993"
}

@InCollection{	  CGJ95,
  author	= "E.C. Clarke and O. Grumberg and S. Jha",
  title		= "Verifying parameterized networks using abstraction and
		  regular languages",
  booktitle	= "CONCUR 95: Concurrency Theory",
  series	= "LNCS 962",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "395--407"
}

@InProceedings{	  CGL92,
  author	= "E. M. Clarke and O. Grumberg and D.E. Long",
  title		= "Model checking and abstraction",
  booktitle	= "POPL 92: Principles of Programming Languages",
  publisher	= "ACM",
  year		= "1992",
  pages		= "343-354"
}

@InCollection{	  CGL93,
  author	= "K. {{\v C}er\=ans} and J.C. Godskesen and K.G. Larsen",
  title		= "Timed modal specification: Theory and tools",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "253--267"
}

@InCollection{	  CGL94,
  author	= "E.M. Clarke and O. Grumberg and D.E. Long",
  title		= "Verification tools for finite-state concurrent systems",
  booktitle	= "A Decade of Concurrency: Reflections and Perspectives",
  series	= "LNCS 803",
  publisher	= "Springer-Verlag",
  year		= "1994"
}

@InProceedings{	  CGMZ95,
  author	= "E.M. Clarke and O. Grumberg and K. Mc{M}illan and X. Zhao",
  title		= "Efficient generation of counterexamples and witnesses in
		  symbolic model checking",
  booktitle	= "DAC 95: Proceedings of the 32nd Design Automation
		  Conference",
  publisher	= "IEEE Computer Society Press",
  pages		= "427--432",
  year		= "1995"
}

@InCollection{	  CGP03,
  author	= "J.M. Cobleigh and D. Giannakopoulou and C.S. Pasareanu",
  title		= "Learning Assumptions for Compositional Verification",
  booktitle	= "TACAS 03: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  pages		= "331-346",
  series	= "Lecture Notes in Computer Science 2619",
  publisher	= "Springer",
  year		= "2003"
}

@TechReport{	  CGR93,
  author	= "D.H. Craigen and S.L. Gerhart and T.J. Ralston",
  title		= "An International Survey of Industrial Applications of
		  Formal Methods",
  institution	= "Naval Research Laboratory",
  number	= "NRL/FR/5546-93-9581",
  address	= "Washington, DC",
  year		= "1993"
}

@InProceedings{	  Chaff,
  author	= "M.W. Moskewicz and C.F. Madigan and Y. Zhao and L. Zhang
		  and S. Malik",
  title		= "Chaff: Engineering an Efficient {SAT} Solver",
  booktitle	= "DAC 01: Design Automation Conference",
  pages		= "530--535",
  year		= "2001"
}

@InProceedings{	  Chaki03,
  author	= {S. Chaki and E.M. Clarke and A. Groce and O. Strichman},
  title		= {Predicate abstraction with minimum predicates},
  booktitle	= {CHARME 03},
  series	= {LNCS 2860},
  publisher	= {Springer},
  pages		= {19--34},
  year		= {2003}
}

@Article{	  MAGIC,
  author	= {Sagar Chaki and Edmund M. Clarke and Alex Groce and Somesh
		  Jha and Helmut Veith},
  title		= {Modular Verification of Software Components in C.},
  journal	= {IEEE Trans. Software Eng.},
  volume	= {30},
  number	= {6},
  year		= {2004},
  pages		= {388-402},
  ee		= {http://doi.ieeecomputersociety.org/10.1109/TSE.2004.22},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  ChakiICSE03,
  title		= {Modular verification of software components in {C}},
  author	= {S. Chaki and E.M. Clarke and A. Groce and S. Jha and H.
		  Veith},
  booktitle	= {ICSE 00: Software Engineering},
  pages		= {385--395},
  publisher	= {IEEE},
  year		= {2003}
}

@Book{		  ChandyMisra88,
  author	= "K.M. Chandy and J. Misra",
  title		= "Parallel Program Design: A Foundation",
  publisher	= "Addison-Wesley Publishing Company",
  year		= "1988"
}

@Book{		  ChangKeisler73,
  author	= "C.C. Chang and H.J. Keisler",
  title		= "Model Theory",
  publisher	= "North Holland",
  edition	= "3rd edition",
  year		= "1990"
}

@inproceedings{changPOPL08,
  author    = {B. E. Chang and
               X. Rival},
  title     = {Relational inductive shape analysis},
  booktitle = {POPL},
  year      = {2008},
  pages     = {247-260}
}

@inproceedings{Chang07,
  author    = {B. E. Chang and
               X. Rival and
               G. C. Necula},
  title     = {Shape Analysis with Structural Invariant Checkers},
  booktitle = {SAS},
  year      = {2007},
  pages     = {384-401},
  ee        = {http://dx.doi.org/10.1007/978-3-540-74061-2_24},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Charon,
  author	= "R. Alur and T. Dang and J.M. Esposito and Y. Hur and F.
		  Ivancic and V. Kumar and P. Mishra and G.J. Pappas and O.
		  Sokolsky",
  title		= "Hierarchical modeling and analysis of embedded systems",
  journal	= "Proceedings of the IEEE",
  volume	= "91",
  pages		= "11--28",
  year		= "2003"
}

@InProceedings{	  ChenWagner02,
  author	= "H. Chen and D. Wagner and D. Dean",
  title		= "Setuid demystified",
  booktitle	= "Usenix Security Symposium",
  publisher	= "Usenix",
  pages		= "171--190",
  year		= "2002"
}

@InProceedings{	  ChenWagnerMOPS,
  author	= "H. Chen and D. Wagner",
  title		= "{MOPS}: an infrastructure for examining security
		  properties of software",
  booktitle	= "ACM CCS 02: Conference on Computer and Communications
		  Security",
  publisher	= "ACM",
  pages		= "235--244",
  year		= "2002"
}

@InProceedings{	  cheon01simple,
  author	= "Y. Cheon and G.T. Leavens",
  title		= "A Simple and Practical Approach to Unit Testing: The {JML}
		  and {JUnit} Way",
  series	= "Lecture Notes in Computer Science 2374",
  year		= "2002",
  booktitle	= "ECOOP 02: European Conference on Object-Oriented
		  Programming",
  publisher	= "Springer-Verlag",
  pages		= "231--255"
}


@inproceedings{Kawaguchi12,
  author    = {Ming Kawaguchi and
               Patrick Maxim Rondon and
               Alexander Bakst and
               Ranjit Jhala},
  title     = {Deterministic parallelism via liquid effects},
  booktitle = {PLDI},
  year      = {2012},
  pages     = {45-54},
  ee        = {http://doi.acm.org/10.1145/2254064.2254071},
}

@inproceedings{Rondon10,
  author    = {Patrick Maxim Rondon and
               Ming Kawaguchi and
               Ranjit Jhala},
  title     = {Low-level liquid types},
  booktitle = {POPL},
  year      = {2010},
  pages     = {131-144},
  ee        = {http://doi.acm.org/10.1145/1706299.1706316},
}

@inproceedings{ Chlipala11,
  author    = "Adam Chlipala",
  title     = "Mostly-automated verification of low-level programs in computational
               separation logic",
  booktitle	= "PLDI 2011: Programming Languages Design and
		  Implementation",
  publisher	= {ACM},
  year      = {2011},
  pages     = {234-245},
}

@Article{	  CHR91,
  author	= "Z. Chaochen and C.A.R. Hoare and A.P. Ravn",
  title		= "A calculus of durations",
  journal	= "Information Processing Letters",
  volume	= "40",
  number	= "5",
  year		= "1991",
  pages		= "269--276"
}

@InProceedings{	  CHRF00,
  author	= "D.W. Currie and A.J. Hu and S. Rajan and M. Fujita",
  title		= "Automatic formal verification of {DSP} software",
  booktitle	= "DAC 00: Design Automation Conference",
  pages		= "130--135",
  year		= "2000",
  publisher	= "ACM/IEEE"
}

@InProceedings{	  Church62,
  author	= "A. Church",
  title		= "Logic, arithmetic, and automata",
  booktitle	= "Proceedings of the International Congress of
		  Mathematicians",
  publisher	= "Institut Mittag-Leffler",
  year		= "1962",
  pages		= "23--35"
}

@InProceedings{	  CIL,
  title		= {{CIL}: Intermediate Language and Tools for Analysis and
		  Transformation of {C} Programs},
  author	= {G. C. Necula and S. McPeak and S. P. Rahul and W. Weimer},
  booktitle	= "CC 02: Compiler Construction",
  series	= "Lecture Notes in Computer Science 2304",
  pages		= "213--228",
  publisher	= "Springer",
  year		= "2002"
}

@InProceedings{	  CIY95,
  author	= {R. Cleaveland and P. Iyer and D. Yankelevich},
  title		= {Optimality in Abstractions of Model Checking},
  booktitle	= {SAS 95: Static Analysis},
  series	= {LNCS 983},
  publisher	= {Springer},
  pages		= {51-63},
  year		= {1995}
}

@InProceedings{	  CJH04,
  author	= "K.~Chatterjee and M.~Jurdzi{\'{n}}ski and T.A.~Henzinger",
  title		= "Quantitative Stochastic Parity Games",
  booktitle	= "SODA 04: ACM-SIAM Symposium on Discrete Algorithms",
  note		= "(To appear): Technical Report: UCB/CSD-3-1280 (October
		  2003)",
  year		= "2004"
}

@InCollection{	  CKS92,
  author	= "R. Cleaveland and M. Klein and B. Steffen",
  title		= "Faster model checking for the modal {$\mu$}-calculus",
  booktitle	= "CAV 92: Computer-aided Verification",
  editor	= "G.v. Bochmann and D. Probst",
  series	= "LNCS 663",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pag10		= "420--462"
}

@Article{	  Clarke76,
  title		= "A system to generate test data and symbolically execute
		  programs",
  author	= "L. Clarke",
  journal	= "IEEE Transactions in Software Engineering",
  volume	= "2(2)",
  year		= 1976,
  pages		= "215--222"
}

@InProceedings{	  ClarkeBMC99,
  author	= {Armin Biere and Alessandro Cimatti and Edmund M. Clarke
		  and Masahiro Fujita and Yunshan Zhu},
  title		= {Symbolic Model Checking Using SAT Procedures instead of
		  BDDs.},
  booktitle	= {DAC},
  year		= {1999},
  pages		= {317-320},
  ee		= {http://doi.acm.org/10.1145/309847.309942},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Book{		  ClarkeBook,
  author	= "E.M. Clarke and O. Grumberg and D. Peled",
  title		= "Model Checking",
  year		= 1999,
  publisher	= "MIT Press"
}

@InCollection{	  ClarkeCAV00,
  author	= "E. M. Clarke and O. Grumberg and S. Jha and Y. Lu and H.
		  Veith",
  title		= "Counterexample-Guided Abstraction Refinement",
  booktitle	= "CAV 00:",
  series	= "LNCS 1855",
  publisher	= "Springer",
  year		= "2000",
  pages		= "154-169"
}

@InProceedings{	  ClarkeCAV2000,
  author	= {E. Clarke and O. Grumberg and S. Jha and Y. Lu and H.
		  Veith},
  title		= {Counterexample-guided Abstraction Refinement},
  booktitle	= "CAV 00: Computer Aided Verification",
  series	= "LNCS 1855",
  publisher	= {Springer},
  year		= {2000},
  pages		= {154-169}
}

@InProceedings{	  ClarkeEmerson81,
  author	= {E. M. Clarke and E. A. Emerson},
  title		= {Synthesis of synchronization skeletons for branching time
		  temporal logic},
  booktitle	= {Logic of Programs},
  pages		= {52-71},
  series	= {LNCS 131},
  publisher	= {Springer},
  year		= {1981}
}

@InCollection{	  ClarkeGrumberg00,
  author	= "E. M. Clarke and O. Grumberg and S. Jha and Y. Lu and H.
		  Veith",
  title		= "Counterexample-Guided Abstraction Refinement",
  booktitle	= "CAV 00: Computer-Aided Verification",
  series	= "LNCS 1855",
  publisher	= "Springer",
  year		= "2000",
  pages		= "154-169"
}

@InCollection{	  ClarkeGrumberg87,
  author	= "E.M. Clarke and O. Grumberg",
  title		= "Research on automatic verification of finite-state
		  concurrent systems",
  booktitle	= "Annual Review of Computer Science",
  volume	= "II",
  editor	= "J.F. Traub and B.J. Grosz and B.W. Lampson and N.J.
		  Nilsson",
  publisher	= "Annual Reviews",
  year		= "1987",
  pages		= "269--290"
}

@Article{	  ClarkeKurshan96,
  author	= "E.M. Clarke and R.P. Kurshan",
  title		= "Computer-aided verification",
  journal	= "IEEE Spectrum",
  volume	= "33",
  number	= "6",
  year		= "1996",
  pages		= "61--67"
}

@InCollection{	  ClarkeRichardson81,
  author	= "L.A. Clarke and D.J. Richardson",
  title		= "Symbolic evaluation methods for program analysis",
  booktitle	= "Program Flow Analysis: theory and applications",
  publisher	= "Prentice-Hall",
  pages		= "264--300",
  year		= "1981"
}

@Article{	  CleavelandSteffen93,
  author	= "R.J. Cleaveland and B. Steffen",
  title		= "A linear-time model-checking algorithm for the
		  alternation-free modal $\mu$-calculus",
  journal	= "Formal Methods in System Design",
  volume	= "2",
  year		= "1993",
  pages		= "121--147"
}

@InProceedings{	  CLLCSS02,
  author	= "J.-D. Choi and K. Lee and A. Loginov and R. O'Callahan and
		  V. Sarkar and M. Sridharan",
  title		= "Efficient and precise datarace detection for multithreaded
		  object-oriented programs",
  booktitle	= "PLDI 2002: Programming Languages Design and
		  Implementation",
  publisher	= {ACM},
  pages		= {258--269},
  year		= "2002"
}

@InProceedings{	  CLM89,
  author	= "E.M. Clarke and D.E. Long and K.L. McMillan",
  title		= "Compositional model checking",
  booktitle	= "Proceedings of the Fourth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1989",
  pages		= "353--362"
}

@InProceedings{	  CMC,
  author	= "M. Musuvathi and D.Y.W. Park and A. Chou and D.R. Engler
		  and D.L. Dill",
  title		= {{CMC}: {A} pragmatic approach to model checking real
		  code},
  booktitle	= "OSDI 02: Operating Systems Design and Implementation",
  publisher	= "ACM",
  year		= 2002
}

@Article{	  CohenGold77,
  author	= "R.S. Cohen and A.Y. Gold",
  title		= "Theory of $\omega$-languages~{I}: characterizations of
		  $\omega$-context-free Languages",
  journal	= "Journal of Computer and System Sciences",
  volume	= "15",
  year		= "1977",
  pages		= "169--184"
}

@TechReport{	  cohn87,
  author	= "Avra Cohn",
  title		= "A Proof of Correctness of the Viper Microprocessor: the
		  first level",
  institution	= "University of Cambridge, Computer Laboratory, Technical
		  Report",
  number	= "UCAM-CL-TR-104",
  year		= 1987
}

@InProceedings{	  Comon:1998:CAV,
  author	= "Comon, H. and Jurski, Y.",
  title		= "Multiple counters automata, safety analysis and
		  {Presburger} arithmetic",
  booktitle	= "CAV 98: Computer-Aided Verification",
  volume	= "1427",
  series	= "Lecture Notes in Computer Science",
  pages		= "268--279",
  publisher	= "Springer-Verlag",
  year		= "1998"
}

@InCollection{	  CONCUR00,
  author	= "L. de Alfaro and T.A. Henzinger and F.Y.C. Mang",
  title		= "The control of synchronous systems",
  booktitle	= "CONCUR 00: Concurrency Theory",
  editor	= "C. Palamidessi",
  series	= "Lecture Notes in Computer Science 1877",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "458--473"
}

@InCollection{	  CONCUR94,
  author	= "R. Alur and C. Courcoubetis and T.A. Henzinger",
  title		= "The observational power of clocks",
  booktitle	= "CONCUR 94: Concurrency Theory",
  editor	= "B. Jonsson and J. Parrow",
  series	= "Lecture Notes in Computer Science 836",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "162--177"
}

@InCollection{	  CONCUR96HK,
  author	= "T.A. Henzinger and P.W. Kopke",
  title		= "State equivalences for rectangular hybrid automata",
  booktitle	= "CONCUR 96: Concurrency Theory",
  editor	= "U. Montanari and V. Sassone",
  series	= "Lecture Notes in Computer Science 1119",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "530--545"
}

@InCollection{	  CONCUR96HKV,
  author	= "T.A. Henzinger and O. Kupferman and M.Y. Vardi",
  title		= "A space-efficient on-the-fly algorithm for real-time model
		  checking",
  booktitle	= "CONCUR 96: Concurrency Theory",
  editor	= "U. Montanari and V. Sassone",
  series	= "Lecture Notes in Computer Science 1119",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "514--529"
}

@InCollection{	  CONCUR97AH,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Modularity for timed and hybrid systems",
  booktitle	= "CONCUR 97: Concurrency Theory",
  editor	= "A. Mazurkiewicz and J. Winkowski",
  series	= "Lecture Notes in Computer Science 1243",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "74--88"
}

@InCollection{	  CONCUR97HKR,
  author	= "T.A. Henzinger and O. Kupferman and S.K. Rajamani",
  title		= "Fair simulation",
  booktitle	= "CONCUR 97: Concurrency Theory",
  editor	= "A. Mazurkiewicz and J. Winkowski",
  series	= "Lecture Notes in Computer Science 1243",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "273--287"
}

@InCollection{	  CONCUR98AHKV,
  author	= "R. Alur and T.A. Henzinger and O. Kupferman and M.Y.
		  Vardi",
  title		= "Alternating refinement relations",
  booktitle	= "CONCUR 98: Concurrency Theory",
  editor	= "D. Sangiorgi and R. de Simone",
  series	= "Lecture Notes in Computer Science 1466",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "163--178"
}

@InCollection{	  CONCUR98H,
  author	= "T.A. Henzinger",
  title		= "It's about time: real-time logics reviewed",
  booktitle	= "CONCUR 98: Concurrency Theory",
  editor	= "D. Sangiorgi and R. de Simone",
  series	= "Lecture Notes in Computer Science 1466",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "439--454"
}

@InCollection{	  CONCUR98RSH,
  author	= "J.-F. Raskin and P.-Y. Schobbens and T.A. Henzinger",
  title		= "Axioms for real-time logics",
  booktitle	= "CONCUR 98: Concurrency Theory",
  editor	= "D. Sangiorgi and R. de Simone",
  series	= "Lecture Notes in Computer Science 1466",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "219--236"
}

@InCollection{	  CONCUR99ADHM,
  author	= "R. Alur and L. de Alfaro and T.A. Henzinger and F.Y.C.
		  Mang",
  title		= "Automating modular verification",
  booktitle	= "CONCUR 99: Concurrency Theory",
  editor	= "J.C.M. Baeten and S. Mauw",
  series	= "Lecture Notes in Computer Science 1664",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "82--97"
}

@InCollection{	  CONCUR99HHM,
  author	= "T.A. Henzinger and B. Horowitz and R. Majumdar",
  title		= "Rectangular hybrid games",
  booktitle	= "CONCUR 99: Concurrency Theory",
  editor	= "J.C.M. Baeten and S. Mauw",
  series	= "Lecture Notes in Computer Science 1664",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "320--335"
}

@Book{		  Constable86,
  author	= "R.L. Constable",
  title		= "Implementing Mathematics with the Nuprl Proof Development
		  System",
  publisher	= "Prentice-Hall",
  year		= "1986"
}

@Article{	  Cooper72,
  author	= "D.C. Cooper",
  title		= "Theorem proving in arithmetic without multiplication",
  journal	= "Machine Intelligence",
  volume	= "7",
  pages		= "91--100",
  year		= "1972"
}

@InProceedings{	  Corbett94,
  author	= "J.C. Corbett",
  title		= "Modeling and analysis of real-time {Ada} tasking programs",
  booktitle	= "Proceedings of the 15th Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1994"
}

@Article{	  Corbett96,
  author	= "J.C. Corbett",
  title		= "Timing analysis of {{\sc Ada}} tasking programs",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "22",
  number	= "7",
  year		= "1996",
  pages		= "461--483"
}

@InProceedings{	  Cormac03,
  author	= "C. Flanagan",
  title		= "Automatic software model checking using {CLP}",
  booktitle	= "ESOP 03: European Symposium on Programming",
  pages		= "189--203",
  series	= "LNCS 2618",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  CornilsHedin00,
  author	= "A. Cornils and G. Hedin",
  title		= "Statically Checked Documentation with Design Patterns",
  booktitle	= "TOOLS 00: Technology of Object-Oriented Languages and
		  Systems",
  pages		= "419--430",
  year		= "2000"
}

@Book{		  Kurshan,
  author	= "R.P. Kurshan",
  title		= "Computer-Aided Verification of Coordinating Processes: The
		  Automata-Theoretic Approach",
  publisher	= "Princeton University Press",
  year		= 1995
}

@InCollection{	  CourcoubetisYannakakis91,
  author	= "C. Courcoubetis and M. Yannakakis",
  title		= "Minimum and maximum delay problems in real-time systems",
  booktitle	= "CAV 91: Computer-aided Verification",
  editor	= "K.G. Larsen and A. Skou",
  series	= "LNCS 575",
  publisher	= "Springer-Verlag",
  year		= "1991",
  pages		= "399--409"
}

@InProceedings{	  Cousot02,
  author	= "B. Blanchet and P. Cousot and R. Cousot and J. Feret and
		  L. Mauborgne and A. Mine and D. Monniaux and X. Rival",
  title		= "Design and Implementation of a Special-Purpose Static
		  Program Analyzer for Safety-Critical Real-Time Embedded
		  Software",
  booktitle	= "The Essence of Computation, Complexity, Analysis,
		  Transformation: Essays Dedicated to Neil D. Jones",
  series	= "Lecture Notes in Computer Science 2566",
  pages		= "85-108",
  publisher	= "Springer-Verlag",
  year		= "2002"
}

@InProceedings{	  Cousot03,
  author	= "B. Blanchet and P. Cousot and R. Cousot and J. Feret and
		  L. Mauborgne and A. Mine and D. Monniaux and X. Rival",
  title		= "A static analyzer for large safety-critical software",
  booktitle	= "PLDI 03: Programming Languages Design and Implementation",
  pages		= "196-207",
  publisher	= "ACM",
  year		= "2003"
}

@InCollection{	  Cousot81,
  author	= "P. Cousot",
  title		= "Semantics fundations of program analysis",
  booktitle	= "Program Flow Analysis: Theory and Applications",
  editor	= "S.S. Muchnick and N.D. Jones",
  publisher	= "Prentice-Hall",
  year		= "1981",
  pages		= "303--342"
}

@inproceedings{fsoft06,
  author    = {H. Jain and
               F. Ivancic and
               A. Gupta and
               I. Shlyakhter and
               C. Wang},
  title     = {Using Statically Computed Invariants Inside the Predicate
               Abstraction and Refinement Loop},
  booktitle = {CAV},
  year      = {2006},
  pages     = {137-151},
  ee        = {http://dx.doi.org/10.1007/11817963_15},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  CousotCousot00,
  author	= "P. Cousot and R. Cousot",
  title		= "Temporal abstract interpretation",
  booktitle	= "POPL 00: Principles of Programming Languages",
  publisher	= "ACM",
  pages		= {12-25},
  year		= "2000"
}

@InProceedings{	  CousotCousot77,
  author	= "P. Cousot and R. Cousot",
  title		= "Abstract interpretation: a unified lattice model for the
		  static analysis of programs",
  booktitle	= "POPL 77",
  publisher	= "ACM",
  pages		= {238-252},
  year		= "1977"
}

@Article{	  CousotCousot92:jlp,
  author	= "P. Cousot and R. Cousot",
  title		= "Abstract interpretation and application to logic programs",
  journal	= "Journal of Logic Programming",
  volume	= "13",
  number	= "2/3",
  year		= "1992",
  pages		= "103--179"
}

@InCollection{	  CousotCousot92comparison,
  author	= "P. Cousot and R. Cousot",
  title		= "Comparing the {Galois} connection and widening/narrowing
		  approaches to abstract interpretation",
  booktitle	= "PLILP",
  series	= "LNCS 631",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "269--295"
}

@InProceedings {	  Cousot97,
  author	= "P. Cousot",
  title		= "Types as abstract interpretations",
  booktitle	= "POPL 97: Principles of Programming Languages",
  publisher	= "ACM",
  pages		= "316-331",
  year		= "1997"
}

@InProceedings{	  CousotHalbwachs78,
  author	= "P. Cousot and N. Halbwachs",
  title		= "Automatic discovery of linear restraints among variables
		  of a program",
  booktitle	= "POPL", 
  publisher	= "ACM Press",
  year		= "1978"
}

@InProceedings{	  CousotPLDI03,
  author	= {B. Blanchet and P. Cousot and R. Cousot and
		  J. Feret and L. Mauborgne and A.  Min{\'e} 
                  and D. Monniaux and X. Rival},
  title		= {A static analyzer for large safety-critical software.},
  booktitle	= {PLDI},
  year		= {2003},
  pages		= {196-207},
  ee		= {http://doi.acm.org/781131.781153},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  CPS93,
  author	= "R.J. Cleaveland and J. Parrow and B. Steffen",
  title		= "The {C}oncurrency {W}orkbench: a semantics-based tool for
		  the verification of finite-state systems",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "15",
  number	= "1",
  year		= "1993",
  pages		= "36--72"
}

@Article{	  Craig57,
  author	= "W. Craig",
  title		= "Linear reasoning",
  journal	= "J. Symbolic Logic",
  volume	= 22,
  pages		= "250--268",
  year		= 1957
}

@InProceedings{	  Crary99,
  author	= {Karl Crary and David Walker and J. Gregory Morrisett},
  title		= {Typed Memory Management in a Calculus of Capabilities.},
  booktitle	= {POPL},
  year		= {1999},
  pages		= {262-275},
  ee		= {http://doi.acm.org/10.1145/292540.292564},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  CS91,
  author	= "R. Cleaveland and B. Steffen",
  title		= "A Linear-Time Model-Checking Algorithm for the
		  Alternation-Free Modal $\mu$-Calculus",
  booktitle	= "CAV 91: Computer-Aided Verification",
  pages		= "48--58",
  series	= "Lecture Notes in Computer Science",
  volume	= 575,
  publisher	= "Springer-Verlag",
  year		= 1991
}

@Unpublished{	  CuDD,
  author	= "F. Somenzi",
  title		= "Colorado {U}niversity decision diagram package",
  note		= "\url{http://vlsi.colorado.edu/pub/}",
  year		= "1998"
}

@TechReport{	  cunningham,
  author	= "R. Cunningham",
  title		= "{eel}: Tools for debugging, visualization, and
		  verification of event-driven software",
  institution	= "MS Thesis, UC Los Angeles",
  year		= "2005"
}

@InCollection{	  CVC,
  author	= "A. Stump and C.W. Barrett and D.L. Dill",
  title		= "{CVC}: A Cooperating Validity Checker",
  booktitle	= "CAV 02: Computer-Aided Verification",
  series	= "LNCS 2404",
  publisher	= "Springer",
  pages		= "500--504",
  year		= "2002"
}

@Article{	  CVWY92,
  author	= "C. Courcoubetis and M.Y. Vardi and P. Wolper and M.
		  Yannakakis",
  title		= "Memory-efficient algorithms for the verification of
		  temporal properties",
  journal	= "Formal Methods in System Design",
  volume	= "1",
  year		= "1992",
  pages		= "275--288"
}

@InProceedings{	  CWZ90,
  author	= "D.R. Chase and M.N. Wegman and F.K. Zadeck",
  title		= "Analysis of Pointers and Structures",
  booktitle	= "PLDI 90: Programming Languages Design and Implementation",
  publisher	= "ACM",
  year		= "1990",
  pages		= "296--310"
}

@InProceedings{	  CY88,
  author	= "C. Courcoubetis and M. Yannakakis",
  title		= "Verifying Temporal Properties of Finite-State
		  Probabilistic Programs",
  booktitle	= focs88,
  pages		= "338--354",
  year		= 1988,
  group		= "PR-P1",
  summary	= "proves that verifying LTL with prob 1 on markov chains is
		  singly exponential, and that LTL with prob 1 on concurrent
		  markov chains is doubly exponential. very important paper."
}

@InProceedings{	  CY90,
  author	= "C. Courcoubetis and M. Yannakakis",
  title		= "{Markov} Decision Processes and Regular Events",
  booktitle	= "ICALP 90: Automata, Languages, and Programming",
  series	= "Lecture Notes in Computer Science",
  volume	= 443,
  publisher	= "Springer-Verlag",
  year		= 1990,
  pages		= "336--349"
}

@Article{	  CY95,
  author	= "C. Courcoubetis and M. Yannakakis",
  title		= "The Complexity of Probabilistic Verification",
  journal	= "Journal of the ACM",
  year		= 1995,
  volume	= 42,
  number	= 4,
  pages		= "857--907"
}

@InProceedings{	  CYCHE01,
  title		= {An empirical study of operating system bugs},
  author	= {A. Chou and J. Yang and B. Chelf and S. Hallem and D.
		  Engler},
  booktitle	= "SOSP 01: ACM Symposium on Operating System Principles",
  pages		= "78--81",
  publisher	= "ACM Press",
  year		= "2001"
}

@InProceedings{	  cyclone,
  author	= {Trevor Jim and J. Gregory Morrisett and Dan Grossman and
		  Michael W. Hicks and James Cheney and Yanling Wang},
  title		= {Cyclone: A Safe Dialect of C.},
  booktitle	= {USENIX Annual Technical Conference, General Track},
  year		= {2002},
  pages		= {275-288},
  ee		= {http://www.usenix.org/publications/library/proceedings/usenix02/jim.html}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  dA98,
  author	= "de Alfaro, L.",
  title		= "Stochastic Transition Systems",
  booktitle	= "CONCUR 98: Concurrency Theory",
  series	= "Lecture Notes in Computer Science",
  pages		= "423--438",
  publisher	= "Springer-Verlag",
  year		= 1998
}

@InCollection{	  DAG96,
  author	= "T.A. Henzinger and H. Wong-Toi",
  title		= "Using {{\sc HyTech}} to synthesize control parameters for
		  a steam boiler",
  booktitle	= "Formal Methods for Industrial Applications: Specifying and
		  Programming the Steam Boiler Control",
  editor	= "J.-R. Abrial and E. {B\"orger} and H. Langmaack",
  series	= "Lecture Notes in Computer Science 1165",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "265--282"
}


@inproceedings{Hinze06,
  author    = {Ralf Hinze and
               Johan Jeuring and
               Andres L{\"o}h},
  title     = {Typed Contracts for Functional Programming},
  booktitle = {FLOPS},
  year      = {2006},
  pages     = {208-225},
  ee        = {http://dx.doi.org/10.1007/11737414_15}
}

@InProceedings{	  dAH00,
  author	= "L. de Alfaro and T.A. Henzinger",
  title		= "Concurrent omega-regular games",
  booktitle	= "Proceedings of the 15th Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "2000",
  pages		= "141--154"
}

@InProceedings{	  dAH01,
  author	= "L. de Alfaro and T.A. Henzinger",
  title		= "Interface automata",
  booktitle	= "Proceedings of the Ninth Annual Symposium on Foundations
		  of Software Engineering",
  publisher	= "ACM Press",
  year		= "2001",
  pages		= "109--120"
}

@InCollection{	  dAH01emsoft,
  author	= "L. de Alfaro and T.A. Henzinger",
  title		= "Interface theories for component-based design",
  booktitle	= "EMSOFT 01: Embedded Software",
  series	= "Lecture Notes in Computer Science 2211",
  publisher	= "Springer-Verlag",
  year		= "2001",
  pages		= "148--165"
}

@InProceedings{	  dAHK98,
  author	= "de Alfaro, L. and T.A. Henzinger and O. Kupferman",
  title		= "Concurrent Reachability Games",
  booktitle	= "FOCS 98: Foundations of Computer Science",
  publisher	= "IEEE Computer Society Press",
  pages		= "564--575",
  year		= 1998,
  notes		= "An extended version is available as technical report
		  UCB/ERL M98/33, University of California at Berkeley, 1998"
}

@InCollection{	  dAHM00cav,
  author	= "L. de Alfaro and T.A. Henzinger and F.Y.C. Mang",
  title		= "Detecting errors before reaching them",
  booktitle	= "CAV 00: Computer-Aided Verification",
  series	= "Lecture Notes in Computer Science 1855",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "186--201"
}

@Article{	  DaikonESC,
  author	= "J.W. Nimmer and M.D. Ernst",
  title		= "Static verification of dynamically detected program
		  invariants: Integrating {Daikon} and {ESC/Java}",
  journal	= "Electr. Notes Theor. Comput. Sci.",
  volume	= "55(2)",
  year		= "2001"
}

@InProceedings{	  dAK00,
  author	= "L. de Alfaro and M. Kwiatkowska and G. Norman and D.
		  Parker and R. Segala",
  title		= "Symbolic Model Checking of Concurrent Probabilistic
		  Processes Using {MTBDDs} and the {Kronecker}
		  Representation",
  booktitle	= "{TACAS 00}: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  year		= 2000,
  series	= "Lecture Notes in Computer Science",
  volume	= "1785",
  pages		= "395--410",
  publisher	= "Springer-Verlag"
}

@InCollection{	  Dam92,
  author	= "M. Dam",
  title		= "Fixed points of {B}{\"u}chi automata",
  booktitle	= "Foundations of Software Technology and Theoretical
		  Computer Science",
  editor	= "R. Shyamasundar",
  series	= "LNCS 652",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "39--50"
}

@Article{	  Dam94,
  author	= "M. Dam",
  title		= "{CTL}$^*$ and {ECTL}$^*$ as fragments of the modal
		  $\mu$-calculus",
  journal	= "Theoretical Computer Science",
  volume	= "126",
  publisher	= "Elsevier",
  year		= "1994",
  pages		= "77--96"
}

@InProceedings{	  DanielJackson,
  author	= {Daniel Jackson and Ian Schechter and Ilya Shlyakhter},
  title		= {Alcoa: the alloy constraint analyzer.},
  booktitle	= {ICSE},
  year		= {2000},
  pages		= {730-733},
  ee		= {http://doi.acm.org/10.1145/337180.337616},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InCollection{	  DargenioBrinksma96,
  author	= "P.A. D'Argenio and E. Brinksma",
  title		= "A calculus for timed automata",
  booktitle	= "FTRTFT 96: Formal Techniques in Real-time and
		  Fault-tolerant Systems",
  editor	= "B. Jonsson and J. Parrow",
  series	= "LNCS 1135",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "110--129"
}

@InProceedings{	  DART,
  author	= {Patrice Godefroid and Nils Klarlund and Koushik Sen},
  title		= {DART: directed automated random testing.},
  booktitle	= {PLDI},
  year		= {2005},
  pages		= {213-223},
  ee		= {http://doi.acm.org/10.1145/1065036},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  Das00,
  title		= {Unification-Based Pointer Analysis with Directional
		  Assignments},
  author	= {M. Das},
  booktitle	= {PLDI 00: Programming Language Design and Implementation},
  pages		= {35-46},
  publisher	= {ACM},
  year		= {2000}
}

@InProceedings{	  Das02,
  author	= "M. Das and S. Lerner and M. Seigle",
  title		= "{ESP}: {P}ath-Sensitive Program Verification in Polynomial
		  Time",
  booktitle	= "PLDI 02: Programming Language Design and Implementation",
  pages		= "57-68",
  publisher	= "ACM",
  year		= "2002"
}

@InProceedings{	  DasDillLICS2001,
  author	= "S. Das and D.L. Dill",
  title		= "Successive approximation of abstract transition relations",
  booktitle	= "LICS 01: Logic in Computer Science",
  publisher	= "IEEE Press",
  pages		= "51--60",
  year		= "2001"
}


@inproceedings{HackettAiken06,
  author    = {Brian Hackett and
               Alex Aiken},
  title     = {How is aliasing used in systems software?},
  booktitle = {SIGSOFT FSE},
  year      = {2006},
  pages     = {69-80},
  ee        = {http://doi.acm.org/10.1145/1181775.1181785},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Condit09,
  author    = {Jeremy Condit and
               Brian Hackett and
               Shuvendu K. Lahiri and
               Shaz Qadeer},
  title     = {Unifying type checking and property checking for low-level
               code},
  booktitle = {POPL},
  year      = {2009},
  ee        = {http://doi.acm.org/10.1145/1480881.1480921},
}


@InProceedings{	  DasICSE05,
  author	= "Brian Hackett and Manuvir Das and Daniel Wang and Zhe
		  Yang",
  title		= "Modular Checking for Buffer Overflows in the Large",
  booktitle	= "ICSE 05: Software Engineering",
  publisher	= "ACM",
  pages		= "129--144",
  year		= 2005
}

@InProceedings{	  DasOLF,
  title		= {Unification-Based Pointer Analysis with Directional
		  Assignments},
  author	= {M. Das},
  booktitle	= {PLDI 00: Programming Language Design and Implementation},
  pages		= {35-46},
  publisher	= {ACM},
  year		= {2000}
}

@PhDThesis{	  dAthesis,
  author	= "L. de Alfaro",
  title		= "Formal verification of probabilistic systems",
  school	= "Stanford University",
  year		= "1997"
}

@InProceedings{	  dawnsong,
  author	= "James Newsome and Dawn Song",
  title		= "Dynamic Taint Analysis: Automatic Detection, Analysis, and
		  Signature Generation of Exploit Attacks on Commodity
		  Software",
  booktitle	= "NDSS 05: Networks and Distributed Systems Security",
  year		= "2005",
  pages		= "XXX--XXX"
}


@InProceedings{	  DawsYovine95,
  author	= "C. Daws and S. Yovine",
  title		= "Two examples of verification of multirate timed automata
		  with {K}ronos",
  booktitle	= "Proceedings of the 16th Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1995",
  pages		= "66--75"
}

@InProceedings{	  DBLP:conf/icse/OCallahanJ97,
  author	= {Robert O'Callahan and Daniel Jackson},
  title		= {Lackwit: A Program Understanding Tool Based on Type
		  Inference.},
  booktitle	= {ICSE},
  year		= {1997},
  pages		= {338-348},
  ee		= {http://doi.acm.org/10.1145/253228.253351},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  DBLP:conf/issta/WhaleyML02,
  author	= {John Whaley and Michael C. Martin and Monica S. Lam},
  title		= {Automatic extraction of object-oriented component
		  interfaces.},
  booktitle	= {ISSTA},
  year		= {2002},
  pages		= {218-228},
  ee		= {http://doi.acm.org/566172.566212},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  Milner82,
  author	= {L. Damas and R. Milner},
  title		= {Principal Type-Schemes for Functional Programs.},
  booktitle	= {POPL},
  year		= {1982},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  DBLP:conf/popl/Kildall73,
  author	= {Gary A. Kildall},
  title		= {A Unified Approach to Global Program Optimization.},
  booktitle	= {POPL},
  year		= {1973},
  pages		= {194-206},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Proceedings{	  DBLP:conf/uss/2004,
  title		= {Proceedings of the 13th USENIX Security Symposium, August
		  9-13, 2004, San Diego, CA, USA},
  booktitle	= {USENIX Security Symposium},
  publisher	= {USENIX},
  year		= {2004},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  DBLP:conf/uss/JohnsonW04,
  author	= {Robert Johnson and David Wagner},
  title		= {Finding User/Kernel Pointer Bugs with Type Inference.},
  booktitle	= {USENIX Security Symposium},
  year		= {2004},
  pages		= {119-134},
  ee		= {http://www.usenix.org/publications/library/proceedings/sec04/tech/johnson.html}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  DBLP:journals/jcss/Milner78,
  author	= {Robin Milner},
  title		= {A Theory of Type Polymorphism in Programming.},
  journal	= {J. Comput. Syst. Sci.},
  volume	= {17},
  number	= {3},
  year		= {1978},
  pages		= {348-375},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InCollection{	  DD02,
  author	= "S. Das and D.L. Dill",
  title		= "Counter-example Based Predicate Discovery in Predicate
		  Abstraction",
  booktitle	= "FMCAD 2002: Formal Methods in Computer-Aided Design",
  publisher	= "Springer",
  pages		= "19--32",
  series	= "Lecture Notes in Computer Science 2517",
  year		= "2002"
}

@InProceedings{	  DDHM02,
  author	= "X. Deng and M.B. Dwyer and J. Hatcliff and M. Mizuno",
  title		= "Invariant-based specification, synthesis, and verification
		  of synchronization in concurrent programs",
  booktitle	= "Proceedings of the International Conference on Software
		  Engineering",
  year		= "2002",
  pages		= "???--???"
}

@InProceedings{	  DDP99,
  author	= "S. Das and D. L. Dill and S. Park",
  title		= "Experience with Predicate Abstraction",
  booktitle	= "CAV 99: Computer-Aided Verification",
  series	= "LNCS 1633",
  pages		= "160-171",
  publisher	= "Springer",
  year		= 1999
}

@Book{		  deBakkerVink96,
  author	= "J.W. de Bakker and E. de Vink",
  title		= "Control flow semantics",
  publisher	= "MIT Press",
  year		= "1996"
}

@Article{	  DederichsWeber90,
  author	= "F. Dederichs and R. Weber",
  title		= "Safety and liveness from a methodological point of view",
  journal	= "Information Processing Letters",
  volume	= "36",
  number	= "1",
  year		= "1990",
  pages		= "25--30"
}

@InProceedings{	  DelineFahndrich,
  title		= {Enforcing high-level protocols in low-level software},
  author	= {R. DeLine and M.A. F{\"a}hndrich},
  booktitle	= {PLDI 01: Programming Language Design and Implementation},
  publisher	= {ACM},
  pages		= {???--???},
  year		= {2001}
}

@InProceedings{	  DelzannoPodelski99,
  author	= "G. Delzanno and A. Podelski",
  title		= "Model checking in {CLP}",
  booktitle	= "TACAS 99: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  pages		= "223--239",
  publisher	= "Springer",
  year		= "1999"
}

@Article{	  DEP02,
  author	= "J. Desharnais and A. Edalat and P. Panangaden",
  title		= "Bisimulation for Labelled Markov Processes",
  journal	= "Information and Computation",
  volume	= 179,
  number	= 2,
  pages		= "163--193",
  year		= 2002
}

@Book{		  Derman,
  author	= "C. Derman",
  title		= "Finite State {Markovian} Decision Processes",
  year		= 1970,
  publisher	= "Academic Press"
}

@InProceedings{	  deRoever85,
  author	= "de Roever, W.-P.",
  title		= "The quest for compositionality: a survey of
		  assertion-based proof systems for concurrent programs,
		  part~I",
  booktitle	= "Proceedings of the IFIP Working Conference on Formal
		  Models in Programming",
  editor	= "E.J. Neuhold and G. Chroust",
  publisher	= "Elsevier Science Publishers",
  year		= "1985",
  pages		= "181--205"
}

@InCollection{	  DES94,
  author	= "R. Alur and C. Courcoubetis and T.A. Henzinger and P.-H.
		  Ho and X. Nicollin and A. Olivero and J. Sifakis and S.
		  Yovine",
  title		= "The algorithmic analysis of hybrid systems",
  booktitle	= "Proceedings of the 11th International Conference on
		  Analysis and Optimization of Systems: Discrete-event
		  Systems",
  editor	= "G. Cohen and J.-P. Quadrat",
  series	= "Lecture Notes in Control and Information Sciences 199",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "331--351"
}

@Article{	  DES94j,
  author	= "R. Alur and C. Courcoubetis and N. Halbwachs and T.A.
		  Henzinger and P.-H. Ho and X. Nicollin and A. Olivero and
		  J. Sifakis and S. Yovine",
  title		= "The algorithmic analysis of hybrid systems",
  journal	= "Theoretical Computer Science",
  volume	= "138",
  year		= "1995",
  pages		= "3--34"
}

@InCollection{	  DGG93,
  author	= "D.R. Dams and O. Grumberg and R. Gerth",
  title		= "Generation of reduced models for checking fragments of
		  {CTL}",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "479--490"
}

@InCollection{	  DGG94,
  author	= "D.R. Dams and O. Grumberg and R. Gerth",
  title		= "Abstract interpretation of reactive systems: abstractions
		  preserving {ACTL}$^*$, {ECTL}$^*$, and {CTL}$^*$",
  booktitle	= "PROCOMET 94: Programming Concepts, Methods, and Calculi",
  publisher	= "Elsevier Science Publishers",
  pages		= "561-581",
  year		= "1994"
}

@Article{	  DGG97,
  author	= "D.R. Dams and R. Gerth and O. Grumberg",
  title		= "Abstract Interpretation of reactive systems",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "19",
  number	= "2",
  pages		= "253--291",
  year		= "1997"
}

@Article{	  DGJP01,
  author	= "J. Desharnais and A. Edalat and P. Panangaden",
  title		= "Bisimulation for Labelled Markov Processes",
  journa	= "Information and Computation",
  year		= 2001
}

@InProceedings{	  DGJP02,
  author	= "J. Desharnais and V. Gupta and R. Jagadeesan and P.
		  Panangaden",
  title		= "The metric analogue of weak bisimulation for probabilistic
		  processes",
  booktitle	= "LICS 02: Logic in Computer Science",
  pages		= "413--422",
  publisher	= "{IEEE} Press",
  year		= 2002
}

@InCollection{	  DGJP99,
  author	= "J. Desharnais and V. Gupta and R. Jagadeesan and P.
		  Panangaden",
  title		= "Metrics for Labelled Markov Systems",
  booktitle	= "CONCUR 99: Concurrency Theory",
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer",
  volume	= 1664,
  year		= 1999,
  pages		= "258--273",
  group		= "Y"
}

@Article{	  Dijkstra65,
  author	= "E.W. Dijkstra",
  title		= "Solution of a problem in concurrent programming control",
  journal	= "Communications of the ACM",
  volume	= "8",
  number	= "9",
  year		= "1965",
  pages		= "569"
}

@Article{	  Dijkstra75,
  author	= "E.W. Dijkstra",
  title		= "Guarded commands, nondeterminacy, and formal derivation of
		  programs",
  journal	= "Communications of the ACM",
  volume	= "18",
  number	= "8",
  year		= "1975",
  pages		= "453--457"
}

@Book{		  Dijkstra76,
  author	= "E.W. Dijkstra",
  title		= "A Discipline of Programming",
  publisher	= "Prentice-Hall",
  year		= "1976"
}

@Book{		  Dill89book,
  author	= "D.L. Dill",
  title		= "Trace Theory for Automatic Hierarchical Verification of
		  Speed-independent Circuits",
  publisher	= "The MIT Press",
  year		= "1989"
}

@InCollection{	  Dill89cav,
  author	= "D.L. Dill",
  title		= "Timing assumptions and verification of finite-state
		  concurrent systems",
  booktitle	= "CAV 89: Automatic Verification Methods for Finite-state
		  Systems",
  editor	= "J. Sifakis",
  series	= "LNCS 407",
  publisher	= "Springer-Verlag",
  year		= "1989",
  pages		= "197--212"
}

@InCollection{	  DillHu93,
  author	= "D.L. Dill and A.J. Hu",
  title		= "Efficient verification with {BDD}s using implicitly
		  conjoined invariants",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "3--14"
}

@InCollection{	  DillWongToi95,
  author	= "D.L. Dill and {Wong-Toi}, H.",
  title		= "Verification of real-time systems by successive over- and
		  underapproximation",
  booktitle	= "CAV 95: Computer-aided Verification",
  editor	= "P. Wolper",
  series	= "LNCS 939",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "409--422"
}

@PhDThesis{	  DISS91,
  author	= "T.A. Henzinger",
  title		= "The Temporal Specification and Verification of Real-time
		  Systems",
  school	= "Stanford University",
  year		= "1991"
}

@InProceedings{	  DJW97,
  author	= "S. Dziembowski and M. Jurdzinski and I. Walukiewicz",
  title		= "How much memory is needed to win infinite games?",
  booktitle	= "LICS 97: Logic in Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1997",
  pages		= "99--110"
}

@inproceedings{Ramalingam99,
  author    = {G. Ramalingam and
               John Field and
               Frank Tip},
  title     = {Aggregate Structure Identification and Its Application to
               Program Analysis.},
  booktitle = {POPL},
  year      = {1999},
  pages     = {119-132},
  ee        = {http://doi.acm.org/10.1145/292540.292553},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}




@inproceedings{Komondoor05,
  author    = {Raghavan Komondoor and
               Ganesan Ramalingam and
               Satish Chandra and
               John Field},
  title     = {Dependent Types for Program Understanding.},
  booktitle = {TACAS},
  year      = {2005},
  pages     = {157-173},
  ee        = {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3440{\&}spage=157},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@inproceedings{Lipton,
  author    = {Richard J. Lipton},
  title     = {Reduction: A New Method of Proving Properties of Systems of Processes.},
  booktitle = {POPL 75: Principles of Programming Languages},
  year      = {1975},
  pages     = {78-86},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@Article{	  DLP79,
  author	= "R.A. De Millo and R.J. Lipton and A.J. Perlis",
  title		= "Social Processes and Proofs of Theorems and Programs",
  journal	= "Communications of the ACM",
  volume	= "22",
  publisher	= "ACM Press",
  pages		= "271--280",
  year		= "1979"
}

@InProceedings{	  Dor03,
  author	= {Nurit Dor and Michael Rodeh and Shmuel Sagiv},
  title		= {CSSV: towards a realistic tool for statically detecting
		  all buffer overflows in C.},
  booktitle	= {PLDI},
  year		= {2003},
  pages		= {155-167},
  ee		= {http://doi.acm.org/781131.781149},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InCollection{	  DOTY96,
  author	= "C. Daws and A. Olivero and S. Tripakis and S. Yovine",
  title		= "The tool {\sc {K}ronos}",
  booktitle	= "Hybrid Systems III",
  editor	= "R. Alur and T.A. Henzinger and E.D. Sontag",
  series	= "LNCS 1066",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "208--219"
}

@InProceedings{	  DRvB02,
  author	= "G. Delzanno and J.-F. Raskin and L. Van Begin",
  title		= "Towards the Automated Verification of Multithreaded {Java}
		  Programs",
  booktitle	= "TACAS 02: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  pages		= "173--187",
  publisher	= "Springer",
  year		= "2002"
}

@InProceedings{	  DS91,
  author	= "Annette Dinning and Edith Schonberg",
  title		= "Detecting Access Anomalies in Programs with Critical
		  Sections",
  booktitle	= " ACM/ONR Workshop on Parallel and Distributed Debugging",
  year		= "1991"
}

@InCollection{	  DT98,
  author	= "C. Daws and S. Tripakis",
  title		= "Model checking of real-time reachability properties using
		  abstractions",
  booktitle	= "TACAS98: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  editor	= "B. Steffen",
  series	= "LNCS 1384",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "313--329"
}

@InProceedings{Dunfield07,
  author =     {Joshua Dunfield},
  title =      {Refined typechecking with {Stardust}},
  booktitle =  {Programming Languages meets Program Verification (PLPV '07)},
  month =      oct,
  year =       2007,
  editor =     {A. Stump and H. Xi},
  address =    {Freiburg, Germany}
}

@InProceedings{	  EarlyBird,
  author	= {Sumeet Singh and Cristian Estan and George Varghese and
		  Stefan Savage},
  title		= {Automated Worm Fingerprinting},
  booktitle	= {OSDI},
  year		= {2004},
  pages		= {45-60},
  ee		= {http://www.usenix.org/events/osdi04/tech/singh.html},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Book{		  EF99,
  author	= "H.D. Ebbinghaus and J. Flum",
  title		= "Finite Model Theory",
  publisher	= "Springer",
  year		= "1999"
}

@InProceedings{	  EFM99,
  author	= "J. Esparza and A. Finkel and R. Mayr",
  title		= "On the Verification of Broadcast Protocols",
  booktitle	= "LICS 99: Logic in Computer Science",
  publisher	= "IEEE Press",
  year		= "1999",
  pages		= "352--359"
}

@Article{	  EH85a,
  author	= "E.A. Emerson and J.Y. Halpern",
  title		= "Decision Procedures and Expressiveness in the Temporal
		  Logic of Branching Time",
  journal	= "Journal of Computer and System Sciences",
  volume	= "30",
  pages		= "1-24",
  year		= 1985
}

@Book{		  Eiffel,
  title		= "Eiffel: The Language",
  author	= "B. Meyer",
  publisher	= "Prentice-Hall",
  year		= "1991"
}

@InCollection{	  Eiriksson98,
  author	= "Asgeir P. Eiriksson",
  title		= "The formal design of 1M-gate asics",
  booktitle	= "FMCAD 98: Formal Methods in Computer-Aided Design",
  series	= "LNCS 1522",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "49--63"
}

@Article{	  Emerson83,
  author	= "E.A. Emerson",
  title		= "Alternative semantics for temporal logics",
  journal	= "Theoretical Computer Science",
  volume	= "26",
  number	= "1",
  year		= "1983",
  pages		= "121--130"
}

@InCollection{	  Emerson90,
  author	= "E.A. Emerson",
  title		= "Temporal and modal logic",
  booktitle	= "Handbook of Theoretical Computer Science",
  volume	= "B",
  editor	= "van Leeuwen, J.",
  publisher	= "Elsevier Science Publishers",
  year		= "1990",
  pages		= "995--1072"
}

@InCollection{	  Emerson92,
  author	= "E.A. Emerson",
  title		= "Real time and the $\mu$-calculus",
  booktitle	= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "LNCS 600",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "176--194"
}

@InCollection{	  EmersonClarke80,
  author	= "E.A. Emerson and E.M. Clarke",
  title		= "Characterizing correctness properties of parallel programs
		  as fixpoints",
  booktitle	= "ICALP 83: Automata, Languages, and Programming",
  series	= "LNCS 85",
  publisher	= "Springer-Verlag",
  year		= "1980",
  pages		= "169--181"
}

@Article{	  EmersonClarke82,
  author	= "E.A. Emerson and E.M. Clarke",
  title		= "Using branching-time temporal logic to synthesize
		  synchronization skeletons",
  journal	= "Science of Computer Programming",
  volume	= "2",
  number	= "3",
  year		= "1982",
  pages		= "241--266"
}

@Article{	  EmersonHalpern86,
  author	= "E.A. Emerson and J.Y. Halpern",
  title		= "{``Sometimes''} and {``Not never''} revisited: on
		  branching versus linear-time temporal logic",
  journal	= "Journal of the ACM",
  volume	= "33",
  number	= "1",
  year		= "1986",
  pages		= "151--178"
}

@InProceedings{	  EmersonJutla88,
  author	= "E.A. Emerson and C. Jutla",
  title		= "The complexity of tree automata and logics of programs",
  booktitle	= "Proceedings of the 29th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1988",
  pages		= "328--337"
}

@InProceedings{	  EmersonJutla91,
  author	= "E.A. Emerson and C. Jutla",
  title		= "Tree automata, mu-calculus and determinacy",
  booktitle	= "Proceedings of the 32th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1991",
  pages		= "368--377"
}

@Article{	  EmersonJutlaSistla01,
  author	= "E.A. Emerson and C.S. Jutla and A.P. Sistla",
  title		= "On model checking for the $\mu$-calculus and its
		  fragments",
  journal	= "Theoretical Computer Science",
  volume	= "258",
  year		= "2001",
  pages		= "491--522"
}

@InProceedings{	  EmersonJutlaSistla93,
  author	= "E.A. Emerson and C.S. Jutla and A.P. Sistla",
  title		= "On model checking for fragments of $\mu$-calculus",
  booktitle	= "CAV 93: Computer-aided Verification",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "385--396"
}

@InProceedings{	  EmersonLei86,
  author	= "E.A. Emerson and C. Lei",
  title		= "Efficient model checking in fragments of the propositional
		  $\mu$-calculus",
  booktitle	= "Proceedings of the First Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1986",
  pages		= "267--278"
}

@InCollection{	  EmersonSistla93,
  author	= "E.A. Emerson and A.P. Sistla",
  title		= "Symmetry and model checking",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "463--478"
}

@InCollection{	  EMSS90,
  author	= "E.A. Emerson and A.K. Mok and A.P. Sistla and J.
		  Srinivasan",
  title		= "Quantitative temporal reasoning",
  booktitle	= "CAV 90: Computer-aided Verification",
  editor	= "R.P. Kurshan and E.M. Clarke",
  series	= "LNCS 531",
  publisher	= "Springer-Verlag",
  year		= "1990",
  pages		= "136--145"
}

@Book{		  Enderton72,
  author	= "H.B. Enderton",
  title		= "A Mathematical Introduction to Logic",
  publisher	= "Academic Press",
  year		= "1972"
}

@InProceedings{	  Engler00,
  author	= {D. Engler and B. Chelf and A. Chou and S. Hallem},
  title		= {Checking System Rules Using System-Specific,
		  Programmer-Written Compiler Extensions},
  booktitle	= {OSDI 00: Operating System Design and Implementation},
  publisher	= {Usenix Association},
  year		= {2000}
}

@InProceedings{	  EnglerNSDI,
  author	= {Madanlal Musuvathi and Dawson R. Engler},
  title		= {Model Checking Large Network Protocol Implementations.},
  booktitle	= {NSDI},
  year		= {2004},
  pages		= {155-168},
  ee		= {http://www.usenix.org/events/nsdi04/tech/musuvathi.html},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  EnglerNSDI03,
  author	= {D. Engler and M. Musuvathi},
  title		= {Model Checking network system implementations},
  booktitle	= {NSDI 04: Network System Design and Implementation},
  publisher	= {Usenix Association},
  year		= {2003}
}

@InProceedings{	  EnglerOSDI04,
  author	= {J. Yang and P. Twohey and D. Engler and M. Musuvathi},
  title		= {Using Model Checking to Find Serious File System Errors},
  booktitle	= {OSDI 04: Operating System Design and Implementation},
  publisher	= {Usenix Association},
  year		= {2004}
}

@Article{	  EnglerSoftMC03,
  author	= {D. Engler and M. Musuvathi},
  title		= {Some lessons from using static analysis and software model
		  checking for bug finding},
  journal	= {Electronic Notes in Theoretical Computer Science},
  volume	= 89,
  year		= {2003}
}

@Article{	  Eraser,
  author	= "S. Savage and M. Burrows and C.G. Nelson and P. Sobalvarro
		  and T.A. Anderson",
  title		= "Eraser: {A} dynamic data race detector for multithreaded
		  programs",
  journal	= "ACM Transactions on Computer Systems",
  volume	= "15",
  number	= "4",
  publisher	= "ACM",
  pages		= "391--411",
  year		= "1997"
}

@Article{	  Ernst01,
  title		= "Dynamically Discovering Likely Program Invariants to
		  Support Program Evolution",
  author	= "M.D. Ernst and J. Cockrell and W. G. Griswold and D.
		  Notkin",
  journal	= "IEEE Transactions in Software Engineering",
  volume	= "27(2)",
  year		= 2001,
  pages		= "1-25"
}

@InProceedings{	  Ernst03,
  author	= "M. Harder and J. Mellen and M.D. Ernst",
  title		= "Improving Test Suites via Operational Abstraction",
  booktitle	= "ICSE 03: Software Engineering",
  publisher	= "ACM",
  pages		= "60--73",
  year		= 2003
}

@InCollection{	  Ernst04,
  author	= "S. McCamant and M.D. Ernst",
  title		= "Early Identification of Incompatibilities in
		  Multi-component Upgrades",
  booktitle	= "ECOOP 04: Object-oriented programming",
  series	= "Lecture Notes in Computer Science 3086",
  publisher	= "Springer",
  pages		= "440--464",
  year		= 2004
}

@InProceedings{	  Ernst99,
  author	= "M. Ernst",
  title		= "Research Summary for Dynamic Detection of Program
		  Invariants",
  booktitle	= "ICSE 99: International Conference on Software Engineering",
  pages		= "718--719",
  year		= 1999
}

@PhDThesis{	  ErnstDiss,
  author	= "M. D. Ernst",
  title		= "Dynamically Discovering Likely Program Invariants",
  school	= "University of Washington, Seattle",
  year		= "2000"
}

@InProceedings{	  ErnstMockObjects,
  author	= {David Saff and Michael D. Ernst},
  title		= {Mock object creation for test factoring.},
  booktitle	= {PASTE},
  year		= {2004},
  pages		= {49-51},
  ee		= {http://doi.acm.org/10.1145/996838},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  ESCJava,
  title		= "Extended static checking for {Java}",
  author	= {C. Flanagan and K.R.M. Leino and M. Lillibridge and G.
		  Nelson and J. B. Saxe and R. Stata},
  booktitle	= {PLDI},
  pages		= "234--245",
  year		= {2002}
}

@InProceedings{	  ESCModula,
  author	= { K. R. M. Leino and G. Nelson },
  title		= { An Extended Static Checker for {M}odula-3},
  booktitle	= {CC 98: Compiler Construction},
  series	= "LNCS 1383",
  publisher	= "Springer",
  year		= { 1998 },
  pages		= {302-305}
}

@TechReport{	  ESCtr,
  author	= {D. L. Detlefs and K. R. M. Leino and G. Nelson and J. B.
		  Saxe},
  title		= {Extended Static Checking},
  institution	= {Compaq Systems Research Center},
  number	= {Research Report 159},
  month		= {December},
  year		= {1998}
}

@InProceedings{	  ESP,
  title		= {{ESP}: Path-Sensitive Program Verification in Polynomial
		  Time},
  author	= {M. Das and S. Lerner and M. Seigle},
  booktitle	= {PLDI 02: Programming Language Design and Implementation},
  pages		= {57--68},
  publisher	= {ACM},
  year		= {2002}
}

@Article{	  Esparza97,
  author	= "J. Esparza",
  title		= "Decidability of model-checking for infinite-state
		  concurrent systems",
  journal	= "Acta Informatica",
  volume	= "34",
  year		= "1997",
  pages		= "85--107"
}

@InProceedings{	  Evans96,
  author	= {D. Evans},
  title		= {Static Detection of Dynamic Memory Errors.},
  booktitle	= {PLDI},
  year		= {1996},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  Everett57,
  author	= "H. Everett",
  title		= "Recursive Games",
  booktitle	= "Contributions to the Theory of Games {III}",
  volume	= 39,
  series	= "Annals of Mathematical Studies",
  pages		= "47--78",
  year		= 1957,
  summary	= "Proves the existence of supinf stationary strategies for
		  many types of recursive games"
}

@InCollection{	  Extreme,
  author	= "T.A. Henzinger and R. Jhala and R. Majumdar and M.A.A.
		  Sanvido",
  title		= "Extreme model checking",
  booktitle	= "International Symposium on Verification",
  series	= "LNCS",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  FASE05,
  author	= {D. Beyer and T. A. Henzinger and R. Jhala and
		  R. Majumdar},
  title		= {Checking Memory Safety with {Blast}},
  booktitle	= {Proceedings of the 8th International Conference on
		  Fundamental Approaches to Software Engineering (FASE~2005,
		  Edinburgh, April 2-10)},
  editor	= {M.~Cerioli},
  series	= {LNCS~3442},
  pages		= {2-18},
  publisher	= {Springer-Verlag, Berlin},
  year		= {2005},
  isbn		= {3-540-25420-X},
  keyword	= {Software Model Checking},
  pdf		= {../../2005-FASE.Checking_Memory_Safety_with_Blast.pdf},
  url		= {http://www.springer.de/cgi-bin/search_book.pl?isbn=3-540-25420-X}
		  ,
  annote	= {FASE 2005, Edinburgh, April 2-10 Maura Cerioli, editor}
}

@InProceedings{	  FD02,
  author	= {M. Fahndrich and R. DeLine},
  title		= "Adoption and Focus: Practical Linear Types for Imperative
		  Programming",
  booktitle	= {PLDI},
  publisher	= {ACM},
  year		= {2002},
  pages		= {13-24}
}

@InProceedings{	  FD04,
  author	= "M.A. Fahndrich and R. DeLine",
  title		= "Typestates for objects",
  booktitle	= "ECOOP 04: Object-Oriented Programming",
  pages		= "465--490",
  series	= "LNCS 3086",
  publisher	= "Springer",
  year		= "2004"
}

@InProceedings{	  Feaver,
  author	= "G.J. Holzmann",
  title		= "Logic Verification of {ANSI-C} Code with {SPIN}",
  booktitle	= "SPIN 00: Spin Model Checking and Software Verification",
  series	= "LNCS 1885",
  publisher	= "Springer",
  pages		= "131--147",
  year		= 2000
}

@Article{	  FerranteRackoff75,
  author	= "J. Ferrante and C. Rackoff",
  title		= "A decision procedure for the first-order theory of real addition with order",
  journal	= "SIAM Journal on Computing",
  volume	= "4",
  number	= "1",
  year		= "1975",
  pages		= "69--76"
}

@inproceedings{sif,
  author    = {Ravi Chugh and
               Jeffrey A. Meister and
               Ranjit Jhala and
               Sorin Lerner},
  title     = {Staged information flow for javascript},
  booktitle = {Proceedings of PLDI 2009},
  year      = {2009},
  pages     = {50-62},
  ee        = {http://doi.acm.org/10.1145/1542476.1542483},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@InProceedings{	  FFA99,
  author	= "J. Foster and M. Fahndrich and A. Aiken",
  title		= "A Theory of type qualifiers",
  booktitle	= "PLDI",
  publisher	= "ACM",
  year		= "1999"
}

@Article{	  FFQS05,
  author	= "Cormac Flanagan and Stephen Freund and Shaz Qadeer and
		  Sanjit Seshia",
  title		= "Modular verification of multithreaded programs",
  journal	= "Theoretical Computer Science",
  volume	= "338",
  year		= "2005",
  pages		= "153--183"
}

@Book{		  FilarVrieze97,
  author	= "J. Filar and K. Vrieze",
  title		= "Competitive {Markov} Decision Processes",
  publisher	= "Springer-Verlag",
  year		= 1997
}

@Unpublished{	  FindBugs,
  author	= {Bill Pugh and David Hovemeyer and Phil Crosby and Peter
		  Freise and David Brosius and Brian Goetz and Rohan Lloyd},
  title		= {FindBugs},
  note		= "\url{http://findbugs.sourceforge.net}",
  key		= "FindBugs"
}

@InProceedings{	  Findler01,
  author	= {R. B. Findler and M. Felleisen},
  title		= {Contract Soundness for Object-Oriented Languages.},
  booktitle	= {OOPSLA},
  year		= {2001},
  pages		= {1-15},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}



@InProceedings{	  HTT,
  author	= {A. Nanevski and G. Morrisett and A. Shinnar and P. Govereau and L. Birkedal},
  title		= {Ynot: Reasoning with the Awkward Squad},
  booktitle	= {ICFP},
  year		= {2008}
}


@InProceedings{	  Findler02,
  author	= {R. B. Findler and M. Felleisen},
  title		= {Contracts for higher-order functions.},
  booktitle	= {ICFP},
  year		= {2002},
  pages		= {48-59},
  ee		= {http://doi.acm.org/10.1145/581478.581484},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@PhDThesis{	  FindlerThesis,
  author	= "Robert Bruce Findler",
  title		= "Behavioral Software Contracts",
  school	= "Rice University",
  year		= "2002"
}

@InProceedings{	  Finkel:2000:CONCUR,
  author	= "Finkel, A. and Iyer, {S. P.} and Sutre, G.",
  title		= "Well-Abstracted Transition Systems",
  booktitle	= "CONCUR 00: Concurrency Theory",
  series	= "Lecture Notes in Computer Science 1877",
  publisher	= "Springer-Verlag",
  pages		= "566--580",
  year		= "2000"
}

@TechReport{	  FinkelSchnoebelen98,
  author	= "A. Finkel and Ph. Schnoebelen",
  title		= "Well-structured transition systems everywhere",
  institution	= "Laboratoire Sp\'ecification et V\'erification",
  number	= "LSV-98-4",
  year		= "1998"
}

@Book{		  Fitting83,
  author	= "M. Fitting",
  title		= "Proof Methods for Modal and Intuitionistic Logics",
  publisher	= "D. Reidel Publishing Company",
  year		= "1983"
}

@InProceedings{	  FJM05,
  author	= {Jeffrey Fischer and Ranjit Jhala and Rupak Majumdar},
  title		= {Joining Dataflow with Predicates},
  booktitle	= {ESEC/FSE 2005: Foundations of Software Engineering},
  publisher	= {ACM},
  year		= {2005},
  pages		= {to appear}
}

@Article{	  FL79,
  author	= "M.J. Fischer and R.E. Ladner",
  title		= "Propositional dynamic logic of regular programs",
  journal	= "Journal of Computer and Systems Sciences",
  volume	= "18",
  year		= "1979",
  pages		= "194-211"
}

@InProceedings{	  flanagan06,
  author	= {C. Flanagan},
  title		= {Hybrid Type Checking},
  booktitle	= {POPL},
  publisher	= {ACM},
  year		= {2006},
}

@InProceedings{	  FlanaganAbadi99,
  author	= "C. Flanagan and M. Abadi",
  title		= "Types for safe locking",
  booktitle	= "ESOP 99: European Symposium on Programming",
  series	= "LNCS 1576",
  publisher	= {Springer},
  year		= {1999},
  pages		= {91--108}
}

@InProceedings{	  FlanaganFreund00,
  author	= "C. Flanagan and S.N. Freund",
  title		= "Type-based race detection for {Java}",
  booktitle	= {PLDI 00: Programming Languages Design and Implementation},
  publisher	= {ACM},
  year		= {2000},
  pages		= "219--232"
}

@InProceedings{	  FlanaganFreund01,
  author	= "C. Flanagan and S.N. Freund",
  title		= "Detecting race conditions in large programs",
  booktitle	= "PASTE 01: Program Analysis for Software Tools and
		  Engineering",
  publisher	= {ACM},
  year		= {2001},
  pages		= "90--96"
}

@inproceedings{FlanaganFreund04,
  author    = {Cormac Flanagan and Stephen N. Freund},
  title     = {Atomizer: a dynamic atomicity checker for multithreaded programs.},
  booktitle = {POPL},
  year      = {2004},
  pages     = {256-267},
  ee        = {http://doi.acm.org/10.1145/964001.964023},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{WangStoller06,
  author    = {Liqiang Wang and
               Scott D. Stoller},
  title     = {Runtime Analysis of Atomicity for Multithreaded Programs.},
  journal   = {IEEE Trans. Software Eng.},
  volume    = {32},
  number    = {2},
  year      = {2006},
  pages     = {93-110},
  ee        = {http://doi.ieeecomputersociety.org/10.1109/TSE.2006.18},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Knowles09,
  author    = {Kenneth W. Knowles and
               Cormac Flanagan},
  title     = {Compositional reasoning and decidable checking for dependent
               contract types},
  booktitle = {PLPV},
  year      = {2009},
  pages     = {27-38},
  ee        = {http://doi.acm.org/10.1145/1481848.1481853},
}


@InProceedings{	  FlanaganFreund05,
  author	= {Cormac Flanagan and Stephen N. Freund and Marina Lifshin},
  title		= {Type inference for atomicity.},
  booktitle	= {TLDI},
  year		= {2005},
  pages		= {47-58},
  ee		= {http://doi.acm.org/10.1145/1040299},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  FlanaganFreundQadeer02,
  author	= "C. Flanagan and S.N. Freund and S. Qadeer",
  title		= "Thread-modular verification for shared-memory programs",
  booktitle	= "ESOP 02: European Symposium on Programming",
  series	= "LNCS 2305",
  publisher	= {Springer},
  year		= {2002},
  pages		= {262--277}
}

@InProceedings{	  FlanaganQadeer02,
  author	= "C. Flanagan and S. Qadeer",
  title		= "Predicate abstraction for software verification",
  booktitle	= {POPL},
  publisher	= {ACM},
  year		= {2002},
}

@InProceedings{	  FlanaganQadeer03,
  author	= "C. Flanagan and S. Qadeer",
  title		= "Thread-modular model checking",
  booktitle	= "SPIN 03: Model Checking Software",
  pages		= "213-224",
  series	= "LNCS 2648",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  FlanaganQadeerSeshia02,
  author	= "C. Flanagan and S. Qadeer and S.A. Seshia",
  title		= "A modular checker for multithreaded programs",
  booktitle	= "CAV 02: Computer-Aided Verification",
  series	= "LNCS 2404",
  publisher	= {Springer},
  year		= {2002},
  pages		= {180--194}
}

@InProceedings{	  FlanaganSaxe00,
  author	= "C. Flanagan and J.B. Saxe",
  title		= {Avoiding exponential explosion: generating compact
		  verification conditions},
  booktitle	= {POPL 00: Principles of Programming Languages},
  publisher	= {ACM},
  year		= {2000},
  pages		= "193-205"
}

@InProceedings{	  FLAVERS,
  author	= {M. Dwyer and L. Clarke},
  title		= {Data flow analysis for verifying properties of concurrent
		  programs},
  booktitle	= {FSE 94: Foundations of Software Engineering},
  publisher	= {ACM},
  year		= {1994},
  pages		= {62-75}
}

@InCollection{	  Floyd67,
  author	= {R.W. Floyd},
  title		= {Assigning meanings to programs},
  booktitle	= "Mathematical Aspects of Computer Science",
  year		= 1967,
  publisher	= "American Mathematical Society",
  pages		= {19--32}
}

@InCollection{	  FMCAD98,
  author	= "T.A. Henzinger and S. Qadeer and S.K. Rajamani and S.
		  Tasiran",
  title		= "An assume-guarantee rule for checking simulation",
  booktitle	= "FMCAD 98: Formal Methods in Computer-aided Design",
  editor	= "G. Gopalakrishnan and P. Windley",
  series	= "Lecture Notes in Computer Science 1522",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "421--432"
}

@Article{	  FMJJ92,
  author	= "Fernandez, J.-C. and L. Mounier and C. Jard and T. Jeron",
  title		= "On-the-fly verification of finite transition systems",
  journal	= "Formal Methods in System Design",
  volume	= "1",
  year		= "1992",
  pages		= "251--273"
}

@InProceedings{	  FOCS89,
  author	= "R. Alur and T.A. Henzinger",
  title		= "A really temporal logic",
  booktitle	= "Proceedings of the 30th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1989",
  pages		= "164--169"
}

@Article{	  FOCS89j,
  author	= "R. Alur and T.A. Henzinger",
  title		= "A really temporal logic",
  journal	= "Journal of the ACM",
  volume	= "41",
  number	= "1",
  year		= "1994",
  pages		= "181--204"
}

@InProceedings{	  FOCS92,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Back to the future: towards a theory of timed regular
		  languages",
  booktitle	= "Proceedings of the 33rd Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1992",
  pages		= "177--186"
}

@InProceedings{	  FOCS95,
  author	= "M.R. Henzinger and T.A. Henzinger and P.W. Kopke",
  title		= "Computing simulations on finite and infinite graphs",
  booktitle	= "Proceedings of the 36rd Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1995",
  pages		= "453--462"
}

@InProceedings{	  FOCS97,
  author	= "R. Alur and T.A. Henzinger and O. Kupferman",
  title		= "Alternating-time temporal logic",
  booktitle	= "Proceedings of the 38th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1997",
  pages		= "100--109"
}

@InProceedings{	  FOCS98,
  author	= "L. de Alfaro and T.A. Henzinger and O. Kupferman",
  title		= "Concurrent reachability games",
  booktitle	= "Proceedings of the 39th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1998",
  pages		= "564--575"
}

@InProceedings{	  foster05,
  author	= {Michael Furr and Jeffrey S. Foster},
  title		= {Checking type safety of foreign function calls.},
  booktitle	= {PLDI},
  year		= {2005},
  pages		= {62-72},
  ee		= {http://doi.acm.org/10.1145/1065019},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  FosterPLDI05,
  author	= {M. Furr and J. Foster},
  title		= {Checking type safety of foreign function calls},
  booktitle	= {PLDI},
  year		= {2005},
}

@InProceedings{	  LiquidPLDI08,
  author	= {P. Rondon and M. Kawaguchi and R. Jhala},
  title		= {Liquid Types},
  booktitle	= {PLDI},
  year		= 2008,
}

@InProceedings{	  LiquidPLDI09,
  author	= {M. Kawaguchi and P. Rondon and R. Jhala},
  title		= {Type-based Data Structure Verification},
  booktitle	= {PLDI},
  year		= {2009},
  pages		= {304-315}
}

@InProceedings{LiquidPOPL10,
  author	= {P. Rondon and M. Kawaguchi and R. Jhala},
  title		= {Low-Level Liquid Types},
  booktitle	= {POPL},
  year		= {2010},
}

@InProceedings{	  FQ02,
  author	= "C. Flanagan and S. Qadeer",
  title		= "Predicate abstraction for software verification",
  booktitle	= "POPL 02: Principles of Programming Languages",
  publisher	= {ACM},
  year		= {2002},
  pages		= "191--202"
}

@InProceedings{	  FQ03,
  author	= "Cormac Flanagan and Shaz Qadeer",
  title		= "A Type and Effect System for Atomicity",
  booktitle	= {PLDI 03: Programming Language Design Implementation},
  publisher	= {ACM},
  year		= {2003},
  pages		= "191--202"
}

@Book{		  Francez86,
  author	= "N. Francez",
  title		= "Fairness",
  publisher	= "Springer-Verlag",
  year		= "1986"
}

@Book{		  Francez92,
  author	= "N. Francez",
  title		= "Program Verification",
  publisher	= "Addison-Wesley Publishing Company",
  year		= "1992"
}

@InProceedings{	  FreemanPfenning91,
  author	= {T. Freeman and F. Pfenning},
  title		= {Refinement Types for {ML}},
  booktitle	= {PLDI},
  year		= {1991},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  FS01,
  author	= "C. Flanagan and J.B. Saxe",
  title		= {Avoiding exponential explosion: generating compact
		  verification conditions},
  booktitle	= {POPL 01: Principles of Programming Languages},
  publisher	= {ACM},
  year		= {2001},
  pages		= "193-205"
}

@InProceedings{	  FSE01,
  author	= "L. de Alfaro and T.A. Henzinger",
  title		= "Interface automata",
  booktitle	= "Foundations of Software Engineering",
  publisher	= "ACM Press",
  year		= "2001",
  pages		= "??--??"
}


@InProceedings{	  FSE06bits,
  author	= {Ranjit Jhala and Rupak Majumdar},
  title		= {Bit-level Types for High-level Reasoning},
  booktitle	= {FSE 2006: Foundations of Software Engineering},
  publisher	= {ACM},
  year		= {2006},
  pages		= {to appear}
}

@inproceedings{cayenne,
  author    = {L. Augustsson},
  title     = {Cayenne - a Language with Dependent Types.},
  booktitle = {ICFP},
  year      = {1998},
  ee        = {http://doi.acm.org/10.1145/289423.289451},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}



@InProceedings{	  FSE06ds,
  author	= {Deepak Kapoor and Rupak Majumdar and Calagero Zarba},
  title		= {Interpolants for Data Structures},
  booktitle	= {FSE 2006: Foundations of Software Engineering},
  publisher	= {ACM},
  year		= {2006},
  pages		= {to appear}
}

@InProceedings{	  fsoft05,
  author	= {H. Jain and F. Ivancic and A. Gupta and M.
		  K. Ganai},
  title		= {Localization and Register Sharing for Predicate
		  Abstraction.},
  booktitle	= {TACAS},
  year		= {2005}
}

@InProceedings{	  FTA02,
  author	= {J.S. Foster and T. Terauchi and A. Aiken},
  title		= {Flow-sensitive type qualifiers},
  booktitle	= "PLDI",
  year		= 2002
}

@InCollection{	  FTRTFT94HK,
  author	= "T.A. Henzinger and P.W. Kopke",
  title		= "Verification methods for the divergent runs of clock
		  systems",
  booktitle	= "FTRTFT 94: Formal Techniques in Real-time and
		  Fault-tolerant Systems",
  editor	= "H. Langmaack and de Roever, W.-P. and J. Vytopil",
  series	= "Lecture Notes in Computer Science 863",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "351--372"
}

@InCollection{	  FTRTFT94KHMP,
  author	= "A. Kapur and T.A. Henzinger and Z. Manna and A. Pnueli",
  title		= "Proving safety properties of hybrid systems",
  booktitle	= "FTRTFT 94: Formal Techniques in Real-time and
		  Fault-tolerant Systems",
  editor	= "H. Langmaack and de Roever, W.-P. and J. Vytopil",
  series	= "Lecture Notes in Computer Science 863",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "431--454"
}

@InCollection{	  FTRTFT98,
  author	= "J. Preu{\ss}ig and S. Kowalewski and H. {Wong-Toi} and
		  T.A. Henzinger",
  title		= "An algorithm for the approximative analysis of rectangular
		  automata",
  booktitle	= "FTRTFT 98: Formal Techniques in Real-time and
		  Fault-tolerant Systems",
  editor	= "A.P. Ravn and H. Rischel",
  series	= "Lecture Notes in Computer Science 1486",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "228--240"
}

@TechReport{	  Fugue,
  author	= {Robert DeLine and Manuel Fahndrich},
  title		= {The Fugue protocol checker: Is your software Baroque ?},
  institution	= "Microsoft Research",
  number	= "MSR-TR-2004-07",
  year		= {2004}
}

@Article{	  GabrielianFranklin91,
  author	= "A. Gabrielian and M.K. Franklin",
  title		= "Multi-level specification and verification of real-time
		  software",
  journal	= "Communications of the ACM",
  volume	= "34",
  number	= "5",
  year		= "1991",
  pages		= "50--60"
}

@Book{		  Gamma,
  title		= "Design Patterns",
  author	= "E. Gamma and R. Helm and R. Johnson and J. Vlissides",
  publisher	= "Addison Wesley",
  year		= "1995"
}

@Book{		  GarlanShaw,
  title		= "Software Architecture: Perspectives on an Emerging
		  Discipline",
  author	= "M. Shaw and D. Garlan",
  publisher	= "Pearson Education",
  year		= "1996"
}

@InCollection{	  Garson84,
  author	= "J.W. Garson",
  title		= "Quantification in modal logic",
  booktitle	= "Handbook of Philosophical Logic",
  volume	= "II",
  editor	= "D. Gabbay and F. Guenthner",
  publisher	= "D. Reidel Publishing Company",
  year		= "1984",
  pages		= "249--307"
}

@TechReport{	  GBD94,
  author	= "A. Geist and A. Beguelin and J. Dongarra and W. Jiang and
		  R. Manchek and V. Sunderam",
  title		= "{PVM~3} User's Guide and Reference Manual",
  institution	= "Oak Ridge National Laboratory",
  number	= "12187",
  address	= "Oak Ridge, Tennessee",
  year		= "1994"
}

@InProceedings{	  GD00,
  author	= "S.G. Govindaraju and D.L. Dill",
  title		= "Counterexample-guided Choice of Projections in Approximate
		  Symbolic Model Checking",
  booktitle	= "ICCAD 00: International Conference on Computer-Aided
		  Design",
  year		= 2000,
  publisher	= "ACM Press",
  pages		= "??--??"
}

@InProceedings{	  GerberLee89,
  author	= "R. Gerber and I. Lee",
  title		= "{Communicating Shared Resources}: a model for distributed
		  real-time systems",
  booktitle	= "Proceedings of the Tenth Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1989",
  pages		= "68--78"
}

@InCollection{	  GHJ,
  author	= "V. Gupta and T.A. Henzinger and R. Jagadeesan",
  title		= "Robust timed automata",
  booktitle	= "HART 97: Hybrid and Real-Time Systems",
  editor	= "O. Maler",
  series	= "Lecture Notes in Computer Science 1201",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "331--345"
}

@InProceedings{	  GHJ01,
  author	= {P. Godefroid and M. Huth and R. Jagadeesan},
  title		= {Abstraction-based model checking using modal transition
		  systems},
  booktitle	= "CONCUR 01: Concurrency Theory",
  series	= "LNCS",
  publisher	= {Springer},
  year		= {2001},
  pages		= {???-???}
}

@Article{	  GiacobazziACM00,
  author	= {R. Giacobazzi and F. Ranzato and F. Scozzari},
  title		= {Making Abstract Interpretations Complete},
  journal	= {Journal of the ACM},
  year		= 2000,
  volume	= {47(2)},
  pages		= {361-416},
  month		= {March}
}

@Book{		  GKP89,
  title		= "Concrete Mathematics: A Foundation for Computer Science",
  author	= "R.L. Graham and D.E. Knuth and O. Patashnik",
  publisher	= "Addison-Wesley Publishing Company",
  year		= "1989"
}

@InProceedings{	  GodefroidWolper91,
  author	= "P. Godefroid and P. Wolper",
  title		= "A partial approach to model checking",
  booktitle	= "Proceedings of the Sixth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1991",
  pages		= "406--415"
}

@Book{		  Goldblatt87,
  author	= "R. Goldblatt",
  title		= "Logics of Time and Computation",
  series	= "CSLI Lecture Notes 7",
  publisher	= "Center for the Study of Language and Information",
  address	= "Stanford, California",
  year		= "1987"
}

@InProceedings{	  Gopan05,
  author	= {D. Gopan and T. W. Reps and S. Sagiv},
  title		= {A framework for numeric analysis of array operations.},
  booktitle	= {POPL},
  year		= {2005},
  pages		= {338-350},
  ee		= {http://doi.acm.org/10.1145/1040333},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}


@InProceedings{	  Gotlieb98,
  author	= "A. Gotlieb and B. Botella and M. Rueher",
  title		= "Automatic test data generation using constraint solving
		  techniques",
  booktitle	= "ISSTA 98: Software Testing and Analysis",
  publisher	= "ACM",
  year		= "2002",
  pages		= "53--62"
}

@InProceedings{	  Gottlob95,
  author	= "G. Gottlob and N. Leone and H. Veith",
  title		= "Second Order Logic and the Weak Exponential Hierarchies",
  booktitle	= "MFCS 95: Mathematical Foundations of Compuer Science",
  pages		= "66-81",
  series	= lncs,
  publisher	= springer,
  year		= 1995
}

@InProceedings{	  GPB02,
  author	= "D. Giannakopoulou and C.S. Pasareanu and H. Barringer",
  title		= "Assumption Generation for Software Component Verification",
  booktitle	= "ASE 02: Automated Software Engineering",
  pages		= "3--12",
  publisher	= "IEEE Press",
  year		= "2002"
}

@InProceedings{	  GPSS80,
  author	= "D. Gabbay and A. Pnueli and S. Shelah and J. Stavi",
  title		= "On the temporal analysis of fairness",
  booktitle	= "Proceedings of the Seventh Annual Symposium on Principles
		  of Programming Languages",
  publisher	= "ACM Press",
  year		= "1980",
  pages		= "163--173"
}

@InCollection{	  Graf94,
  author	= "S. Graf",
  title		= "Verification of a distributed cache memory by using
		  abstractions",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "207--219"
}

@InCollection{	  GrafSaidi97,
  author	= "S. Graf and H. Sa{\"\i}di",
  title		= "Construction of abstract state graphs with {PVS}",
  booktitle	= "CAV",
  series	= "LNCS 1254",
  publisher	= "Springer",
  year		= "1997",
  pages		= "72-83"
}

@InProceedings{	  GraphTypes,
  author	= "N. Klarlund and M.I. Schwartzbach",
  title		= "Graph Types",
  booktitle	= "POPL 93: Principlesof Programming Languages",
  pages		= "196-205",
  year		= 1993
}

@inproceedings{Greenberg11,
  author    = {J. F. Belo and
               M. Greenberg and
               A. Igarashi and
               B. C. Pierce},
  title     = {Polymorphic Contracts},
  booktitle = {ESOP},
  year      = {2011},
  pages     = {18-37},
  ee        = {http://dx.doi.org/10.1007/978-3-642-19718-5_2},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Vazou13,
  author    = {N. Vazou and
               P. Rondon and
               R. Jhala},
  title     = {Abstract Refinements},
  booktitle = {ESOP},
  year      = {2013},
}

@inproceedings{vazou13,
  author    = {N. Vazou and
               P. Rondon and
               R. Jhala},
  title     = {Abstract Refinements},
  booktitle = {ESOP},
  year      = {2013},
}


@article{Greenberg12,
  author = {M. Greenberg and B. C. Pierce and S. Weirich},
  title = {Contracts Made Manifest},
  year = {2012},
  journal = {JFP},
  volume = {22},
  number = {3},
  month = {May},
  pages = {225--274}
}

@Book{		  Gries81,
  author	= "D. Gries",
  title		= "The Science of Programming",
  publisher	= "Springer",
  year		= "1981"
}

@InProceedings{	  Grossman05,
  author	= {Michael F. Ringenburg and Dan Grossman},
  title		= {Types for describing coordinated data structures.},
  booktitle	= {TLDI},
  year		= {2005},
  pages		= {25-36},
  ee		= {http://doi.acm.org/10.1145/1040297},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@INPROCEEDINGS{Gronski06,
    author = {Jessica Gronski and Kenneth Knowles and Aaron Tomb and Stephen N. Freund and Cormac Flanagan},
    title = {Sage: Hybrid checking for flexible specifications},
    booktitle = {Scheme and Functional Programming Workshop},
    year = {2006},
    pages = {93--104}
}

@INPROCEEDINGS{Gronski07,
    author = {Jessica Gronski and Cormac Flanagan},
    title = {Unifying hybrid types and contracts},
    booktitle = {In Eighth Symposium on Trends in Functional Programming},
    year = {2007}
}

@Article{	  GrumbergLong94,
  author	= "O. Grumberg and D.E. Long",
  title		= "Model checking and modular verification",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "16",
  number	= "3",
  year		= "1994",
  pages		= "843--871"
}

@Article{	  GS92,
  author	= "S.M. German and A.P. Sistla",
  title		= "Reasoning about systems with many processes",
  journal	= "Journal of the ACM",
  volume	= "39",
  year		= "1992",
  pages		= "675--735"
}

@InCollection{	  GS97,
  author	= "S. Graf and H. Sa{\"\i}di",
  title		= "Construction of Abstract State Graphs with {PVS}",
  booktitle	= "CAV",
  series	= "LNCS 1254",
  publisher	= "Springer",
  year		= "1997",
  pages		= "72--83"
}

@InCollection{	  GSSL94,
  author	= "R. Gawlick and R. Segala and J.F. Sogaard-Andersen and
		  N.A. Lynch",
  title		= "Liveness in timed and untimed systems",
  booktitle	= "ICALP 94: Automata, Languages, and Programming",
  editor	= "S. Abiteboul and E. Shamir",
  series	= "LNCS 820",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "166--177"
}

@Unpublished{	  GTK,
  title		= {The GIMP Toolkit},
  note		= "\url{http://www.gtk.org/}",
  key		= "GTK"
}

@InProceedings{	  GTT03,
  author	= "R. Ghosh and A. Tiwari and C. Tomlin",
  title		= "Automated Symbolic Reachability Analysis; with Application
		  to Delta-Notch Signaling Automata",
  booktitle	= "HSCC 03: Hybrid Systems Computation and Control",
  series	= "Lecture Notes in Computer Science",
  pages		= "233--248",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  gulwani06,
  author	= "S. Gulwani and A. Tiwari",
  title		= "Combining Abstract Interpreters",
  booktitle	= "PLDI 2006: Programming Languages Design and
		  Implementation",
  publisher	= {ACM},
  pages		= {To Appear},
  year		= "2006"
}

@InProceedings{	  GunterPeled02,
  author	= "E. Gunter and D. Peled",
  title		= "Temporal Debugging for Concurrent Systems",
  booktitle	= "TACAS 02: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  publisher	= "Springer",
  series	= "LNCS",
  volume	= "2280",
  pages		= "431--444",
  year		= "2002"
}

@InProceedings{	  Gupta98,
  title		= {Generating test data for branch coverage},
  author	= {N. Gupta and A. Mathur and M.L. Soffa},
  booktitle	= {ASE 00: Automated Software Engineering},
  pages		= {219--228},
  publisher	= {IEEE},
  year		= {1998}
}

@InProceedings{	  GuptaBit02,
  author	= {Rajiv Gupta and Eduard Mehofer and Youtao Zhang},
  title		= {A Representation for Bit Section Based Analysis and
		  Optimization.},
  booktitle	= {CC},
  year		= {2002},
  pages		= {62-77},
  ee		= {http://link.springer.de/link/service/series/0558/bibs/2304/23040062.htm},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  GurevichHarrington82,
  author	= "Y. Gurevich and L. Harrington",
  title		= "Trees, automata, and games",
  booktitle	= "Proc. Symposium on Theory of Computing",
  publisher	= "ACM Press",
  year		= "1982",
  pages		= "60--65"
}

@InProceedings{	  Guyer03,
  author	= {Samuel Z. Guyer and Calvin Lin},
  title		= {Client-Driven Pointer Analysis.},
  booktitle	= {SAS},
  year		= {2003},
  pages		= {214-236},
  ee		= {http://link.springer.de/link/service/series/0558/bibs/2694/26940214.htm},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Haase81,
  author	= "V.H. Haase",
  title		= "Real-time behavior of programs",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "SE-7",
  number	= "5",
  year		= "1981",
  pages		= "494--501"
}

@Book{		  Halbwachs93book,
  author	= "N. Halbwachs",
  title		= "Synchronous Programming of Reactive Systems",
  publisher	= "Kluwer Academic Publishers",
  year		= "1993"
}

@InCollection{	  Halbwachs93cav,
  author	= "N. Halbwachs",
  title		= "Delay analysis in synchronous programs",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "333--346"
}

@InCollection{	  Halpern87,
  author	= "J.Y. Halpern",
  title		= "Using reasoning about knowledge to analyze distributed
		  systems",
  booktitle	= "Annual Review of Computer Science",
  volume	= "II",
  editor	= "J.F. Traub and B.J. Grosz and B.W. Lampson and N.J.
		  Nilsson",
  publisher	= "Annual Reviews",
  year		= "1987",
  pages		= "37--68"
}

@Article{	  Halpern91,
  author	= "J.Y. Halpern",
  title		= "Presburger arithmetic with unary predicates is
		  {$\Pi^1_1$}-complete",
  journal	= "The Journal of Symbolic Logic",
  volume	= "56",
  number	= "2",
  year		= "1991",
  pages		= "637--642"
}

@InProceedings{	  HalpernZuck87,
  author	= "J.Y. Halpern and L.D. Zuck",
  title		= "A little knowledge goes a long way: simple knowledge-based
		  derivations and correctness proofs for a family of
		  protocols",
  booktitle	= "Proceedings of the Sixth Annual Symposium on Principles of
		  Distributed Computing",
  publisher	= "ACM Press",
  year		= "1987",
  pages		= "269--280"
}

@InProceedings{	  Hao02,
  title		= {Setuid Demystified},
  author	= {H. Chen and D. Wagner and D. Dean},
  booktitle	= {USENIX Security Symposium},
  pages		= {171-190},
  year		= {2002}
}
@article{Eiriksson00,
  author    = {{\'A}sgeir Th. Eir\'{\i}ksson},
  title     = {The Formal Design of 1M-gate ASICs.},
  journal   = {Formal Methods in System Design},
  volume    = {16},
  number    = {1},
  year      = {2000},
  pages     = {7-22},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{segerbryant95,
  author    = {Carl-Johan H. Seger and
               Randal E. Bryant},
  title     = {Formal Verification by Symbolic Evaluation of Partially-Ordered
               Trajectories.},
  journal   = {Formal Methods in System Design},
  volume    = {6},
  number    = {2},
  year      = {1995},
  pages     = {147-189},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@article{futurebus,
  author    = {Edmund M. Clarke and
               Orna Grumberg and
               Hiromi Hiraishi and
               Somesh Jha and
               David E. Long and
               Kenneth L. McMillan and
               Linda A. Ness},
  title     = {Verification of the Futurebus+ Cache Coherence Protocol.},
  journal   = {Formal Methods in System Design},
  volume    = {6},
  number    = {2},
  year      = {1995},
  pages     = {217-232},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@InProceedings{	  Hao04,
  title		= {Model checking one million lines of C code},
  author	= {H. Chen and D. Dean and D. Wagner},
  booktitle	= {NDSS 04: Annual Network and Distributed System Security
		  Symposium},
  pages		= {171-185},
  year		= {2004}
}

@InProceedings{	  Harel,
  author	= "N. Kam and D. Harel and H. Kugler and R. Marelly and A.
		  Pnueli and E.J.A. Hubbard and M.J. Stern",
  title		= "Formal Modeling of {C}. elegans Development: A
		  Scenario-Based Approach",
  booktitle	= "CMSB 2003: Computational methods in Systems Biology",
  pages		= "4--20",
  publisher	= "Springer",
  year		= "2003"
}

@InCollection{	  Harel84,
  author	= "D. Harel",
  title		= "Dynamic Logic",
  booktitle	= "Handbook of Philosophical Logic",
  volume	= "II",
  editor	= "D. Gabbay and F. Guenthner",
  publisher	= "D. Reidel Publishing Company",
  year		= "1984",
  pages		= "497--604"
}

@Article{	  Harel87,
  author	= "D. Harel",
  title		= "Statecharts: a visual formalism for complex systems",
  journal	= "Science of Computer Programming",
  volume	= "8",
  year		= "1987",
  pages		= "231--274"
}

@MastersThesis{	  Harel88,
  author	= "E. Harel",
  title		= "Temporal Analysis of Real-time Systems",
  school	= "The Weizmann Institute of Science",
  address	= "Rehovot, Israel",
  year		= "1988"
}

@InProceedings{	  Harris03,
  author	= {Tim Harris and Keir Fraser},
  title		= {Language support for lightweight transactions.},
  booktitle	= {OOPSLA},
  year		= {2003},
  pages		= {388-402},
  ee		= {http://doi.acm.org/10.1145/949340},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  harrold01,
  author	= {Harrold, M.J. and Jones, J. and Li, T. and Liang, D. and
		  Orso, A. and Pennings, M. and Sinha, S. and Spoon, S. and
		  Gujarathi, A.},
  title		= {Regression Test Selection for Java Software},
  booktitle	= {OOPSLA 01: Object-Oriented Programming, Systems,
		  Languages, and Applications},
  year		= {2001},
  pages		= {312--326},
  publisher	= {ACM}
}

@InCollection{	  HART97GHJ,
  author	= "V. Gupta and T.A. Henzinger and R. Jagadeesan",
  title		= "Robust timed automata",
  booktitle	= "HART 97: Hybrid and Real-time Systems",
  editor	= "O. Maler",
  series	= "Lecture Notes in Computer Science 1201",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "331--345"
}

@InCollection{	  HART97HK,
  author	= "T.A. Henzinger and O. Kupferman",
  title		= "From quantity to quality",
  booktitle	= "HART 97: Hybrid and Real-time Systems",
  editor	= "O. Maler",
  series	= "Lecture Notes in Computer Science 1201",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "48--62"
}

@InProceedings{	  HCL03,
  author	= "H.S. Hong and S.D. Cha and I. Lee and O. Sokolsky and H.
		  Ural",
  title		= "Data Flow Testing as Model Checking",
  booktitle	= "ICSE 2003: Software Engineering",
  publisher	= "ACM",
  pages		= "232--243",
  year		= "2003"
}

@InProceedings{	  Heintze94,
  author	= {N. Heintze},
  title		= {Set-based analysis of {ML} programs},
  pages		= { 306-317 },
  booktitle	= {LFP 94: LISP and Functional Programming},
  publisher	= {ACM},
  year		= {1994}
}

@InProceedings{	  Hendren96,
  author	= {Rakesh Ghiya and Laurie J. Hendren},
  title		= {Is it a Tree, a DAG, or a Cyclic Graph? A Shape Analysis
		  for Heap-Directed Pointers in C.},
  booktitle	= {POPL},
  year		= {1996},
  pages		= {1-15},
  ee		= {http://doi.acm.org/10.1145/237721.237724},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Henkin49,
  author	= "L. Henkin",
  title		= "The completeness of the first-order functional calculus",
  journal	= "The Journal of Symbolic Logic",
  volume	= "14",
  number	= "3",
  year		= "1949",
  pages		= "159--166"
}

@Book{		  Hennessy88,
  author	= "M.C.B. Hennessy",
  title		= "Algbraic Theory of Processes",
  publisher	= "The MIT Press",
  year		= "1994"
}

@Article{	  HennessyMilner85,
  author	= "M.C.B. Hennessy and R. Milner",
  title		= "Algebraic laws for nondeterminism and concurrency",
  journal	= "Journal of the ACM",
  volume	= "32",
  number	= "1",
  year		= "1985",
  pages		= "137--161"
}

@InCollection{	  Henzinger95,
  author	= "T.A. Henzinger",
  title		= "Hybrid automata with finite bisimulations",
  booktitle	= "ICALP 95: Automata, Languages, and Programming",
  editor	= "Z. F{\"u}l{\"o}p and F. G{\'e}cseg",
  series	= "Lecture Notes in Computer Science 944",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "324--335"
}

@InProceedings{	  Henzinger96,
  author	= "T.A. Henzinger",
  title		= "The theory of hybrid automata",
  booktitle	= "Proceedings of the 11th Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1996",
  pages		= "278--292"
}

@InProceedings{	  Henzinger:2000:STACS,
  author	= "Henzinger, {T. A.} and Majumdar, R.",
  title		= "A Classification of Symbolic Transition Systems",
  booktitle	= lncs1770,
  series	= "LNCS 1770",
  publisher	= sv,
  pages		= "13--34",
  year		= "2000"
}

@InProceedings{	  HHK95,
  author	= "M.R. Henzinger and T.A. Henzinger and P.W. Kopke",
  title		= "Computing simulations on finite and infinite graphs",
  booktitle	= "Proceedings of the 36rd Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1995",
  pages		= "453--462"
}

@InProceedings{	  HHK96,
  author	= "R.H. Hardin and Z. Har'el and R.P. Kurshan",
  title		= "{COSPAN}",
  booktitle	= "Computer Aided Verification, Proc. 8th International
		  Conference",
  pages		= "423--427",
  series	= "Lecture Notes in Computer Science",
  volume	= "1102",
  publisher	= "Springer-Verlag",
  year		= "1996"
}

@Article{	  HHP93,
  author	= {R. Harper and F. Honsell and G. Plotkin},
  title		= {A framework for defining logics},
  journal	= {Journal of the ACM},
  year		= 1993,
  volume	= {40(1)},
  pages		= {143-184}
}

@InProceedings{	  HHW95rtss,
  author	= "T.A. Henzinger and P.-H. Ho and H. Wong-Toi",
  title		= "{{\sc HyTech}}: The next generation",
  booktitle	= "Proceedings of the 16th Annual Real-Time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1995",
  pages		= "56--65"
}

@Article{	  Higman52,
  author	= "G. Higman",
  title		= "Ordering by divisibility in abstract algebras",
  journal	= "Proc. London Math. Society",
  volume	= "2",
  number	= "7",
  year		= "1952",
  pages		= "326--336"
}

@Book{		  HirschSmale74,
  author	= "M.W. Hirsch and S. Smale",
  title		= "Differential Equations, Dynamical Systems, and Linear
		  Algebra",
  publisher	= "Academic Press",
  year		= "1974"
}

@InProceedings{	  HJL93,
  author	= "C.L. Heitmeyer and R.D. Jeffords and B.G. Labaw",
  title		= "A benchmark for comparing different approaches for
		  specifying and verifying real-time systems",
  booktitle	= "Proceedings of the Tenth International Workshop on
		  Real-time Operating Systems and Software",
  year		= "1993"
}

@InProceedings{	  HJM04,
  author	= "Thomas A. Henzinger and Ranjit Jhala and Rupak Majumdar",
  title		= "Race Checking by Context Inference",
  booktitle	= "PLDI 2004: Programming Languages Design and
		  Implementation",
  publisher	= {ACM},
  pages		= {1--12},
  year		= "2004"
}

@InProceedings{	  HJM05,
  author	= {Thomas A. Henzinger and Ranjit Jhala and Rupak Majumdar},
  title		= {Permissive Interfaces},
  booktitle	= {ESEC/FSE 2005: Foundations of Software Engineering},
  publisher	= {ACM},
  year		= {2005}
}

@InProceedings{	  EFJM07,
  author	= {Michael Emmi and Jeffrey Fischer and Ranjit Jhala and Rupak Majumdar},
  title		= {Lock Allocation},
  booktitle	= {POPL 07: Principles of Programming Languages},
  publisher	= {ACM},
  year		= {2007}
}

@InProceedings{	  JM07a,
  author	= {Ranjit Jhala and Rupak Majumdar},
  title		= {Interprocedural Analysis of Asynchronous Programs},
  booktitle	= {POPL 07: Principles of Programming Languages},
  publisher	= {ACM},
  year		= {2007}
}


@InProceedings{	  HJMM04,
  author	= "T.A. Henzinger and R. Jhala and R. Majumdar and K.L.
		  McMillan",
  title		= "Abstractions from Proofs",
  booktitle	= "POPL 04",
  publisher	= "ACM",
  year		= "2004"
}

@InProceedings{	  HJMS02,
  author	= "T.A. Henzinger and R. Jhala and R. Majumdar and G. Sutre",
  title		= "Lazy abstraction",
  booktitle	= "POPL",
  publisher	= "ACM",
  pages		= {58--70},
  year		= "2002"
}

@InProceedings{	  HK02,
  author	= {T.A. Henzinger and C.M. Kirsch},
  title		= {The embedded machine: predictable, portable real-time
		  code},
  booktitle	= {Proc. ACM SIGPLAN Conference on Programming Languages
		  Design and Implementation (PLDI)},
  publisher	= {ACM Press},
  pages		= {315--326},
  year		= {2002}
}

@InCollection{	  HK96,
  author	= "T.A. Henzinger and P.W. Kopke",
  title		= "State equivalences for rectangular hybrid automata",
  booktitle	= "CONCUR 96: Concurrency Theory",
  editor	= "U. Montanari and V. Sassone",
  series	= "Lecture Notes in Computer Science 1119",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "530--545"
}

@Article{	  HKPV98,
  author	= "T.A. Henzinger and P.W. Kopke and A. Puri and P. Varaiya",
  title		= "What's decidable about hybrid automata?",
  journal	= "Journal of Computer and System Sciences",
  volume	= "57",
  year		= "1998",
  pages		= "94--124"
}

@InProceedings{	  HLP90,
  author	= "E. Harel and O. Lichtenstein and A. Pnueli",
  title		= "Explicit-clock temporal logic",
  booktitle	= "Proceedings of the Fifth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1990",
  pages		= "402--413"
}

@InProceedings{	  HLQR99,
  author	= "T.A. Henzinger and X. Liu and S. Qadeer and S.K. Rajamani",
  title		= "Formal specification and verification of a dataflow
		  processor array",
  booktitle	= "Proceedings of the International Conference on
		  Computer-aided Design",
  publisher	= "IEEE Computer Society Press",
  year		= "1999",
  pages		= "494--499"
}

@InProceedings{	  HLS00,
  author	= "J. Hu and J. Lygeros and S.S. Sastry",
  title		= "Towars a Theory of Stochastic Hybrid Systems",
  booktitle	= "HSCC 00: Hybrid Systems Computation and Control",
  series	= "Lecture Notes in Computer Science 1790",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "160--173"
}

@InCollection{	  HLW91,
  author	= "U. Holmer and K.G. Larsen and W. Yi",
  title		= "Deciding properties of regular real timed processes",
  booktitle	= "CAV 91: Computer-aided Verification",
  editor	= "K.G. Larsen and A. Skou",
  series	= "LNCS 575",
  publisher	= "Springer-Verlag",
  year		= "1991",
  pages		= "443--453"
}

@Article{	  HNSY94,
  author	= "T.A. Henzinger and X. Nicollin and J. Sifakis and S.
		  Yovine",
  title		= "Symbolic model checking for real-time systems",
  journal	= "Information and Computation",
  volume	= "111",
  number	= "2",
  year		= "1994",
  pages		= "193--244"
}

@PhDThesis{	  Ho95,
  author	= "P.-H. Ho",
  title		= "Automatic Analysis of Hybrid Systems",
  school	= "Cornell University",
  year		= "1995"
}

@Article{	  Hoare69,
  author	= "C.A.R. Hoare",
  title		= "An Axiomatic Basis for Computer Programming",
  journal	= "Communications of the {ACM}",
  volume	= 12,
  pages		= "576--580",
  year		= 1969
}

@Article{	  Hoare78,
  author	= "C.A.R. Hoare",
  title		= "Communicating sequential processes",
  journal	= "Communications of the ACM",
  volume	= "21",
  number	= "8",
  year		= "1978",
  pages		= "666--677"
}

@Book{		  Hoare85,
  author	= "C.A.R. Hoare",
  title		= "Communicating Sequential Processes",
  publisher	= "Prentice-Hall",
  year		= "1985"
}

@InProceedings{	  HOB,
  author	= {P. Lam and V. Kuncak and M.C. Rinard},
  title		= {Hob: A Tool for Verifying Data Structure Consistency},
  booktitle	= {CC 2005: Compiler Construction},
  series	= "LNCS 3443",
  publisher	= "Springer-Verlag",
  year		= { 2005 },
  pages		= {237--241}
}

@InProceedings{	  HoffmannWongToi92,
  author	= "G. Hoffmann and {Wong-Toi}, H.",
  title		= "The input-output control of real-time discrete-event
		  systems",
  booktitle	= "Proceedings of the 13th Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1992",
  pages		= "256--265"
}

@Article{	  HofKar66,
  author	= "A.J. Hoffman and R.M. Karp",
  title		= "On Nonterminating Stochastic Games",
  journal	= mansci,
  volume	= 12,
  number	= 5,
  mese		= jan,
  year		= 1966,
  pages		= "359--370",
  group		= "GT"
}

@Book{		  Holzmann91,
  author	= "G.J. Holzmann",
  title		= "Design and Validation of Computer Protocols",
  publisher	= "Prentice-Hall",
  year		= "1991"
}

@InProceedings{	  HolzmannSpin2000,
  author	= {G.J. Holzmann},
  title		= {Logic Verification of {ANSI-C} Code with {S}pin},
  booktitle	= "SPIN 00: SPIN Workshop",
  series	= "LNCS 1885",
  publisher	= "Springer",
  year		= {2000},
  pages		= {131-147}
}

@PhDThesis{	  Hooman91,
  author	= "J. Hooman",
  title		= "Specification and Compositional Verification of Real-time
		  Systems",
  school	= "Technische Universiteit Eindhoven",
  address	= "The Netherlands",
  year		= "1991"
}

@InCollection{	  Hooman92,
  author	= "J. Hooman",
  title		= "Compositional verification of real-time systems using
		  extended {Hoare} triples",
  booktitle	= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "LNCS 600",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "252--290"
}

@InCollection{	  HoomanWidom89,
  author	= "J. Hooman and J. Widom",
  title		= "A temporal-logic-based compositional proof system for
		  real-time message passing",
  booktitle	= "PARLE 89: Parallel Architectures and Languages Europe",
  editor	= "E. Odijk and M. Rem and J.-C. Syre",
  series	= "vol.~II, LNCS 366",
  publisher	= "Springer-Verlag",
  year		= "1989",
  pages		= "424--441"
}

@Book{		  HopcroftUllman79,
  author	= "J.E. Hopcroft and J.D. Ullman",
  title		= "Introduction to Automata Theory, Languages, and
		  Computation",
  publisher	= "Addison-Wesley Publishing Company",
  year		= "1979"
}

@Article{	  horwitz-toplas97,
  author	= {S. Horwitz},
  title		= {Precise flow-insensitive may-alias analysis is {NP}-hard},
  journal	= {ACM Trans. on Programming Languages and Systems},
  year		= 1997,
  volume	= {19(1)},
  pages		= {1-6},
  month		= {January}
}

@Article{	  Houdini,
  author	= "C. Flanagan and R. Joshi and K. R. M. Leino",
  title		= "Annotation inference for modular checkers",
  journal	= "Information Processing Letters",
  year		= "2001"
}

@InCollection{	  HoWongToi95,
  author	= "P.-H. Ho and {Wong-Toi}, H.",
  title		= "Automated analysis of an audio control protocol",
  booktitle	= "CAV 95: Computer-aided Verification",
  editor	= "P. Wolper",
  series	= "Lecture Notes in Computer Science 939",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "381--394"
}

@Article{	  HPS83,
  author	= "D. Harel and A. Pnueli and J. Stavi",
  title		= "Propositional dynamic logic of regular programs",
  journal	= "Journal of Computer and System Sciences",
  volume	= "26",
  number	= "2",
  year		= "1983",
  pages		= "222--243"
}

@InCollection{	  HQR99,
  author	= "T.A. Henzinger and S. Qadeer and S.K. Rajamani",
  title		= "Assume-guarantee refinement between different time scales",
  booktitle	= "CAV 99: Computer-aided Verification",
  editor	= "N. Halbwachs and D. Peled",
  series	= "Lecture Notes in Computer Science 1633",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "208--221"
}

@InCollection{	  HR,
  author	= "T.A. Henzinger and J.-F. Raskin",
  title		= "Robust undecidability of timed and hybrid systems",
  booktitle	= "HSCC 00: Hybrid Systems---Computation and Control",
  editor	= "N.A. Lynch and B. Krogh",
  series	= "Lecture Notes in Computer Science 1790",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "145--159"
}

@Article{	  HR01,
  title		= "Monitoring {Java} Programs with {Java PathExplorer}",
  author	= "K. Havelund and G. Rosu",
  journal	= "Electronic Notes in Theoretical Computer Science",
  volume	= "55(2)",
  year		= 2001
}

@InProceedings{	  HR02,
  title		= "Synthesizing Monitors for Safety Properties",
  author	= "K. Havelund and G. Rosu",
  booktitle	= "TACAS 02: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  series	= "Lecture Notes in Computer Science 2280",
  pages		= "342-356",
  publisher	= "Springer",
  year		= "2002"
}

@Article{	  HRB90,
  author	= "S. Horwitz and T. Reps and D. Binkley",
  title		= "Interprocedural slicing using dependence graphs",
  journal	= "ACM TOPLAS",
  volume	= 12,
  pages		= "26--61",
  year		= 1990
}

@InProceedings{	  HRP94,
  author	= "N. Halbwachs and P. Raymond and Y.-E. Proy",
  title		= "Verification of linear hybrid systems by means of convex
		  approximation",
  booktitle	= "SAS 94: Static Analysis Symposium",
  editor	= "B. {LeCharlier}",
  series	= "LNCS 864",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "223--237"
}

@InCollection{	  HS92pACHH,
  author	= "R. Alur and C. Courcoubetis and T.A. Henzinger and P.-H.
		  Ho",
  title		= "Hybrid automata: an algorithmic approach to the
		  specification and verification of hybrid systems",
  booktitle	= "Hybrid Systems I",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "Lecture Notes in Computer Science 736",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "209--229"
}

@InCollection{	  HS92pHMP,
  author	= "T.A. Henzinger and Z. Manna and A. Pnueli",
  title		= "Towards refining temporal specifications into hybrid
		  systems",
  booktitle	= "Hybrid Systems I",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "Lecture Notes in Computer Science 736",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "60--76"
}

@TechReport{	  HS94HK,
  author	= "T.A. Henzinger and P.W. Kopke",
  title		= "Undecidability results for hybrid systems",
  note		= "Presented at the Workshop on Hybrid Systems and Autonomous
		  Control (Ithaca, NY)",
  institution	= "Cornell University",
  number	= "CSD-TR-95-1483",
  year		= "1994"
}

@Unpublished{	  HS94HPV,
  author	= "T.A. Henzinger and A. Puri and P. Varaiya",
  title		= "Clock transformation of hybrid automata with rectangular
		  differential inclusions",
  note		= "Presented at the Workshop on Hybrid Systems and Autonomous
		  Control (Ithaca, NY)",
  year		= "1994"
}

@InCollection{	  HS94p1,
  author	= "T.A. Henzinger and P.-H. Ho",
  title		= "{\sc {H}y{T}ech}: {T}he {C}ornell {H}ybrid {T}echnology
		  {T}ool",
  booktitle	= "Hybrid Systems II",
  editor	= "P. Antsaklis and A. Nerode and W. Kohn and S. Sastry",
  series	= "Lecture Notes in Computer Science 999",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "265--293"
}

@InCollection{	  HS94p2,
  author	= "T.A. Henzinger and P.-H. Ho",
  title		= "A note on abstract-interpretation strategies for hybrid
		  automata",
  booktitle	= "Hybrid Systems II",
  editor	= "P. Antsaklis and A. Nerode and W. Kohn and S. Sastry",
  series	= "Lecture Notes in Computer Science 999",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "252--264"
}

@InCollection{	  HS95,
  author	= "T.A. Henzinger and H. Wong-Toi",
  title		= "Linear phase-portrait approximations for nonlinear hybrid
		  systems",
  booktitle	= "Hybrid Systems III",
  editor	= "R. Alur and T.A. Henzinger and E.D. Sontag",
  series	= "Lecture Notes in Computer Science 1066",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "377--388"
}

@InCollection{	  HSCC00HHMW,
  author	= "T.A. Henzinger and B. Horowitz and R. Majumdar and H.
		  {Wong-Toi}",
  title		= "Beyond {{\sc HyTech}}: hybrid systems analysis using
		  interval numerical methods",
  editor	= "N.A. Lynch and B. Krogh",
  booktitle	= "HSCC 00: Hybrid Systems---Computation and Control",
  series	= "Lecture Notes in Computer Science 1790",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "130--144"
}

@InCollection{	  HSCC00HR,
  author	= "T.A. Henzinger and J.-F. Raskin",
  title		= "Robust undecidability of timed and hybrid systems",
  booktitle	= "HSCC 00: Hybrid Systems---Computation and Control",
  editor	= "N.A. Lynch and B. Krogh",
  series	= "Lecture Notes in Computer Science 1790",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "145--159"
}

@InCollection{	  HSCC98,
  author	= "T.A. Henzinger and V. Rusu",
  title		= "Reachability Verification for Hybrid Automata",
  booktitle	= "HSCC 98: Hybrid Systems---Computation and Control",
  editor	= "T.A. Henzinger and S. Sastry",
  series	= "Lecture Notes in Computer Science 1386",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "190--204"
}

@InProceedings{	  HughesParetoSabry96,
  author	= "John Hughes and Lars Pareto and Amr Sabry",
  title		= "Proving the Correctness of Reactive Systems using Sized
		  Types",
  booktitle	= "POPL 96: Principles of Programming Languages",
  pages		= "410--423",
  year		= 1996
}

@InCollection{	  Hungar93,
  author	= "H. Hungar",
  title		= "Combining model checking and theorem proving to verify
		  parallel processes",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "154--165"
}

@PhDThesis{	  hunt85,
  author	= "Warren Alva Hunt",
  title		= "FM8501: A Verified Microprocessor",
  school	= "University of Texas, Austin",
  year		= "1985"
}

@Article{	  HyTech,
  author	= "T.A. Henzinger and P.-H. Ho and H. Wong-Toi",
  title		= "{\sc {H}y{T}ech}: a model checker for hybrid systems",
  journal	= "Software Tools for Technology Transfer",
  volume	= "1",
  year		= "1997",
  pages		= "110--122"
}

@InCollection{	  ICALP02,
  author	= "F.Y.C. Mang and T.A. Henzinger and O. Kupferman and S.
		  Krishnan",
  title		= "The synthesis of uninitialized systems",
  booktitle	= "ICALP 02: Automata, Languages, and Programming",
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer-Verlag",
  year		= "2002",
  pages		= "???--???"
}

@InCollection{	  ICALP92,
  author	= "T.A. Henzinger and Z. Manna and A. Pnueli",
  title		= "What good are digital clocks?",
  booktitle	= "ICALP 92: Automata, Languages, and Programming",
  editor	= "W. Kuich",
  series	= "Lecture Notes in Computer Science 623",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "545--558"
}

@InCollection{	  ICALP95H,
  author	= "T.A. Henzinger",
  title		= "Hybrid automata with finite bisimulations",
  booktitle	= "ICALP 95: Automata, Languages, and Programming",
  editor	= "Z. F{\"u}l{\"o}p and F. G{\'e}cseg",
  series	= "Lecture Notes in Computer Science 944",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "324--335"
}

@InCollection{	  ICALP95HKW,
  author	= "T.A. Henzinger and P.W. Kopke and H. Wong-Toi",
  title		= "The expressive power of clocks",
  booktitle	= "ICALP 95: Automata, Languages, and Programming",
  editor	= "Z. F{\"u}l{\"o}p and F. G{\'e}cseg",
  series	= "Lecture Notes in Computer Science 944",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "417--428"
}

@InCollection{	  ICALP97,
  author	= "T.A. Henzinger and P.W. Kopke",
  title		= "Discrete-time control for rectangular hybrid automata",
  booktitle	= "ICALP 97: Automata, Languages, and Programming",
  editor	= "P. Degano and R. Gorrieri and A. Marchetti-Spaccamela",
  series	= "Lecture Notes in Computer Science 1256",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "582--593"
}

@Article{	  ICALP97j,
  author	= "T.A. Henzinger and P.W. Kopke",
  title		= "Discrete-time control for rectangular hybrid automata",
  journal	= "Theoretical Computer Science",
  volume	= "221",
  year		= "1999",
  pages		= "369--392"
}

@InCollection{	  ICALP98,
  author	= "T.A. Henzinger and J.-F. Raskin and P.-Y. Schobbens",
  title		= "The regular real-time languages",
  booktitle	= "ICALP 97: Automata, Languages, and Programming",
  editor	= "K.G. Larsen and S. Skyum and G. Winskel",
  series	= "Lecture Notes in Computer Science 1443",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "580--591"
}

@InProceedings{	  ICCAD00,
  author	= "T.A. Henzinger and S. Qadeer and S.K. Rajamani",
  title		= "Decomposing refinement proofs using assume-guarantee
		  reasoning",
  booktitle	= "Proceedings of the International Conference on
		  Computer-aided Design",
  publisher	= "IEEE Computer Society Press",
  year		= "2000",
  pages		= "245--252"
}

@InProceedings{	  ICCAD99,
  author	= "T.A. Henzinger and X. Liu and S. Qadeer and S.K. Rajamani",
  title		= "Formal specification and verification of a dataflow
		  processor array",
  booktitle	= "Proceedings of the International Conference on
		  Computer-aided Design",
  publisher	= "IEEE Computer Society Press",
  year		= "1999",
  pages		= "494--499"
}

@InCollection{	  ICS,
  author	= "J.-C. {Filli\^atre} and S. Owre and H. Ruess and N.
		  Shankar",
  title		= "{ICS}: Integrated canonizer and solver",
  booktitle	= "CAV 01: Computer-aided verification",
  series	= "LNCS",
  publisher	= "Springer",
  pages		= {???-???},
  year		= "2001"
}

@InProceedings{	  ICSE04BLAST,
  title		= { Generating Tests from Counterexamples},
  author	= {D. Beyer and A. J. Chlipala and T. A. Henzinger
		  and R. Jhala and R. Majumdar},
  booktitle	= {ICSE 04: Software Engineering},
  pages		= {326-335},
  year		= {2004}
}

@TechReport{	  IEA94,
  author	= "T.A. Henzinger and P.-H. Ho",
  title		= "Model-checking strategies for linear hybrid systems",
  note		= "Presented at the Seventh International Conference on
		  Industrial and Engineering Applications of Artificial
		  Intelligence and Expert Systems (Austin, TX)",
  institution	= "Cornell University",
  number	= "CSD-TR-94-1437",
  year		= "1994"
}

@Book{		  IEEE,
  title		= "IEEE Standard Dictionary of Electrical and Electronics
		  Terms",
  editor	= "F. Jay",
  edition	= "fourth",
  publisher	= "The Institute of Electrical and Electronics Engineers",
  address	= "Piscataway, New Jersey",
  year		= "1988"
}

@Article{	  IEEE00,
  author	= "R. Alur and T.A. Henzinger and G. Lafferriere and G.J.
		  Pappas",
  title		= "Discrete abstractions of hybrid systems",
  journal	= "Proceedings of the IEEE",
  volume	= "88",
  number	= "7",
  year		= "2000",
  pages		= "971--984"
}

@InProceedings{	  IeFiCe05,
  author	= {R. Ierusalimschy and L. H. de Figueiredo and W. Celes},
  title		= {The Implementation of Lua 5.0},
  booktitle	= {Proceedings of IX Brazilian Symposium on Programming
		  Languages},
  publisher	= {ACM},
  pages		= {63--75}
}

@InProceedings{	  IH01,
  author	= "S. Ishtiaq and P. O'Hearn",
  title		= "{BI} as an assertion language for mutable data structures",
  booktitle	= "POPL 01: Principles of Programming Languages",
  publisher	= "ACM",
  year		= "2001",
  pages		= "14-26"
}

@Article{	  Immerman81,
  author	= "N. Immerman",
  title		= "Number of quantifiers is better than number of tape cells",
  journal	= "Journal of Computer and System Sciences",
  volume	= "22",
  year		= "1981",
  pages		= "384--406"
}

@Article{	  IPL92,
  author	= "T.A. Henzinger",
  title		= "Sooner Is Safer Than Later",
  journal	= "Information Processing Letters",
  volume	= "43",
  number	= "3",
  year		= "1992",
  pages		= "135--141"
}

@InProceedings{	  Jackson00,
  author	= {Daniel Jackson},
  title		= {Enforcing Design Constraints with Object Logic.},
  booktitle	= {SAS},
  year		= {2000},
  pages		= {1-21},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  JacksonVaziri00,
  author	= "D. Jackson and M. Vaziri",
  title		= "Finding bugs with a constraint solver",
  booktitle	= "ISSTA 00: Software Testing and Analysis",
  publisher	= "ACM",
  year		= "2000",
  pages		= "14--25"
}

@InProceedings{	  jaffar06,
  author	= "Joxan Jaffar and Andrew Santosa and Razvan Voicu",
  title		= "A CLP Method for Compositional and Intermittent Predicate
		  Abstraction",
  booktitle	= "VMCAI 2006: Verification Model Checking and Abstract
		  Interpretation",
  publisher	= "Springer-Verlag",
  year		= "2006",
  pages		= "17--32"
}

@Article{	  JahanianMok86,
  author	= "F. Jahanian and A.K. Mok",
  title		= "Safety analysis of timing properties in real-time systems",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "SE-12",
  number	= "9",
  year		= "1986",
  pages		= "890--904"
}

@Article{	  JahanianMok87,
  author	= "F. Jahanian and A.K. Mok",
  title		= "A graph-theoretic approach for timing analysis and its
		  implementation",
  journal	= "IEEE Transactions on Computers",
  volume	= "C-36",
  number	= "8",
  year		= "1987",
  pages		= "961--975"
}

@InProceedings{	  JahanianStuart88,
  author	= "F. Jahanian and D.A. Stuart",
  title		= "A method for verifying properties of {M}odechart
		  specifications",
  booktitle	= "Proceedings of the Ninth Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1988",
  pages		= "12--21"
}

@InProceedings{	  Jasper94,
  author	= "R. Jasper and M. Brennan and K. Williamson and B. Currier
		  and D. Zimmerman",
  title		= "Test data generation and infeasible path analysis",
  booktitle	= "ISSTA 94: Software Testing and Analysis",
  publisher	= "ACM",
  year		= "1994",
  pages		= "95--107"
}

@Book{		  JAVA,
  title		= "The Java Language Specification",
  author	= "James Gosling and Willam Joy and Guy Steele Jr.",
  publisher	= "Addison-Wesley",
  year		= "1996"
}

@InProceedings{	  JavaMAC,
  author	= {Moonjoo Kim and Sampath Kannan and Insup Lee and Oleg
		  Sokolsky},
  title		= {Java-MaC: a Run-time Assurance Tool for Java},
  booktitle	= {Runtime Verification 01},
  year		= {2001},
  pages		= {XXX-XXX}
}

@PhDThesis{	  Jayasimha88,
  author	= "D.N. Jayasimha",
  title		= "Communication and Synchronization in Parallel Computation",
  school	= "University of Illinois at Urbana-Champaign",
  year		= "1988"
}

@InProceedings{	  JCIT90,
  author	= "T.A. Henzinger and Z. Manna and A. Pnueli",
  title		= "An interleaving model for real time",
  booktitle	= "Proceedings of the Fifth Jerusalem Conference on
		  Information Technology",
  publisher	= "IEEE Computer Society Press",
  year		= "1990",
  pages		= "717--730"
}

@InProceedings{	  jcrasher,
  author	= {Christoph Csallner and Yannis Smaragdakis},
  title		= {Check 'n' crash: combining static checking and testing.},
  booktitle	= {ICSE},
  year		= {2005},
  pages		= {422-431},
  ee		= {http://doi.acm.org/10.1145/1062533},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@TechReport{	  JeffFoster,
  author	= {J.S. Foster and T. Terauchi and A. Aiken},
  title		= {{Flow-Sensitive Type Qualifiers}},
  institution	= {University of California, Berkeley},
  year		= 2001,
  number	= {CSD-01-1162}
}


@InCollection{	  JhalaMcMillanCAV01,
  author	= "R. Jhala and K. L. McMillan",
  title		= "Microarchitecture Verification by Compositional Model
		  Checking",
  booktitle	= "CAV 01: Computer Aided Verification",
  series	= "LNCS 2102",
  publisher	= "Springer",
  year		= "2001",
  pages		= "396--410"
}

@InCollection{	  JM05,
  author	= "R. Jhala and K. L. McMillan",
  title		= "Interpolant-based transition relation approximation",
  booktitle	= "CAV 05",
  series	= "LNCS",
  publisher	= "Springer",
  year		= "2005",
  pages		= "39--51"
}

@InProceedings{	  JM05a,
  author	= {Ranjit Jhala and Rupak Majumdar},
  title		= {Path Slicing},
  booktitle	= "PLDI 05: Programming Language Design and Implementation",
  publisher	= "ACM",
  pages		= "38--47",
  year		= 2005
}

@InProceedings{	  jhalamcmillan06,
  author	= "R. Jhala and K.L. McMillan",
  title		= "A Practical and Complete Approach to Predicate Refinement",
  booktitle	= "TACAS 06",
  series	= "LNCS 2987",
  publisher	= "Springer-Verlag",
  year		= "2006",
  pages		= "298--312"
}

@Article{	  JML,
  author	= "L. Burdy and Y. Cheon and D.R. Cok and M.D. Ernst and J.
		  Kiniry and G.T. Leavens and K.R.M. Leino and E. Poll",
  title		= "An overview of {JML} tools and applications",
  journal	= "Electr. Notes Theor. Comput. Sci.",
  volume	= 80,
  year		= 2003
}

@InProceedings{	  jml00,
  author	= "Leavens, G.T. and Leino, K.R.M. and Poll, E. and Ruby, C.
		  and Jacobs, B.",
  title		= "{JML}: {N}otations and tools supporting detailed design in
		  {J}ava",
  booktitle	= {OOPSLA 00: Object-Oriented Programming, Systems,
		  Languages, and Applications},
  year		= "2000",
  pages		= "105--106",
  publisher	= "ACM"
}

@Book{		  JNI,
  title		= "The Java Native Interface: Programmer's Guide and
		  Specification",
  author	= "S. Liang",
  publisher	= "Addison-Wesley",
  year		= "1999"
}

@InProceedings{	  JohnsonW04,
  author	= {Robert Johnson and David Wagner},
  title		= {Finding User/Kernel Pointer Bugs with Type Inference.},
  booktitle	= {USENIX Security Symposium},
  year		= {2004},
  pages		= {119-134},
  ee		= {http://www.usenix.org/publications/library/proceedings/sec04/tech/johnson.html}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Jones,
  title		= "Tentative steps toward a development method for
		  interfering programs",
  author	= "C.B. Jones",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "5(4)",
  year		= 1983,
  pages		= "596--619"
}

@Article{	  Jones02,
  author	= {Robert B. Jones and Jens U. Skakkeb{\ae}k and David L.
		  Dill},
  title		= {Formal Verification of Out-of-Order Execution with
		  Incremental Flushing.},
  journal	= {Formal Methods in System Design},
  volume	= {20},
  number	= {2},
  year		= {2002},
  pages		= {139-158},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Jones83,
  title		= "Tentative steps toward a development method for
		  interfering programs",
  author	= "C.B. Jones",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "5(4)",
  year		= 1983,
  pages		= "596--619"
}

@InProceedings{	  JonPincusPC,
  author	= {J. Pincus},
  title		= {personal communication, {O}ctober 2000}
}

@InCollection{	  Jonsson91,
  author	= "B. Jonsson",
  title		= "Simulations between specifications of distributed systems",
  booktitle	= "CONCUR 91: Theories of Concurrency",
  editor	= "J.C.M. Baeten and J.F. Groote",
  series	= "LNCS 527",
  publisher	= "Springer-Verlag",
  year		= "1991",
  pages		= "346--360"
}

@InProceedings{	  JouSmol90,
  author	= "C.-C. Jou and S.A. Smolka",
  title		= "Equivalences, Congruences and Complete Axiomatizations for
		  Probabilistic Processes",
  booktitle	= "CONCUR 90: Concurrency Theory",
  series	= "Lecture Notes in Computer Science",
  volume	= 458,
  pages		= "367--383",
  publisher	= "Springer-Verlag",
  year		= 1990,
  summary	= "Studies trace, failure, ready, and bisimulation
		  equivalences of probabilistic systems. Propose PCCS for
		  communicating probabilistic processes."
}

@Article{	  junit,
  author	= "E. Gamma and K. Beck",
  title		= "{JUnit}: A cook's tour",
  journal	= "Java Report",
  year		= "1999",
  volume	= 4,
  number	= 5,
  pages		= "27--38"
}

@InProceedings{	  Jur00,
  author	= {Marcin Jurdzinski},
  title		= {Small Progress Measures for Solving Parity Games},
  booktitle	= {STACS 00: Theoretical Aspects of Computer Science},
  pages		= {290--301},
  year		= {2000},
  volume	= {1770},
  series	= {Lecture Notes in Computer Science},
  publisher	= {Springer-Verlag}
}

@Article{	  Jur98,
  author	= "M. Jurdzinski",
  title		= "Deciding the Winner in Parity Games is in {UP} $\cap$
		  co-{UP}",
  journal	= "Information Processing Letters",
  volume	= 68,
  number	= 3,
  pages		= "119-124",
  year		= 1998
}

@InProceedings{	  JW95,
  author	= "D. Janin and I. Walukiewicz",
  title		= "Automata for the modal $\mu$-calculus and related results",
  booktitle	= "Proc. 20th International Symp. on Mathematical Foundations
		  of Computer Science",
  pages		= "552-562",
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer-Verlag",
  year		= 1995
}

@InProceedings{	  JW96,
  author	= "D. Janin and I. Walukiewicz",
  title		= "On the expressive completeness of the propositional
		  $\mu$-calculus with respect to the monadic second order
		  logic",
  booktitle	= "Proc. 7th Conference on Concurrency Theory",
  series	= "Lecture Notes in Computer Science",
  volume	= "1119",
  pages		= "263--277",
  publisher	= "Springer-Verlag",
  year		= 1996
}

@InProceedings{	  Kahn74,
  author	= "G. Kahn",
  title		= "The semantics of a simple language for parallel
		  programming",
  booktitle	= "Information Processing 74: Proceedings of the Sixth IFIP
		  World Computer Congress",
  editor	= "J.L. Rosenfeld",
  publisher	= "Elsevier Science Publishers",
  year		= "1974",
  pages		= "471--475"
}

@PhDThesis{	  Kamp68,
  author	= "J.A.W. Kamp",
  title		= "Tense Logic and the Theory of Linear Order",
  school	= "University of California at Los Angeles",
  year		= "1968"
}

@Article{	  KanellakisSmolka90,
  author	= "P.C. Kanellakis and S.A. Smolka",
  title		= "{CCS} expressions, finite-state processes, and three
		  problems of equivalence",
  journal	= "Information and Computation",
  volume	= "86",
  year		= "1990",
  pages		= "43--68"
}

@InCollection{	  Kapur,
  author	= "J. Giesl and D. Kapur",
  title		= "Decidable Classes of Inductive Theorems",
  booktitle	= "IJCAR 2001: International Joint Conference on Automated
		  Reasoning",
  pages		= "469--484",
  year		= "2001",
  series	= "Lecture Notes in Computer Science 2083",
  publisher	= "Springer"
}

@Book{		  Kechris94,
  author	= "A.S. Kecrhis",
  title		= "Classical Descriptive Set Theory",
  publisher	= "Springer-Verlag",
  year		= "1994"
}

@Article{	  Keller76,
  author	= "R.M. Keller",
  title		= "Formal verification of parallel programs",
  journal	= "Communications of the ACM",
  volume	= "19",
  number	= "7",
  year		= "1976",
  pages		= "371--384"
}

@Book{		  Kelley55,
  author	= "J.L. Kelley",
  title		= "General Topology",
  publisher	= "Springer-Verlag",
  year		= "1955"
}

@Article{	  KF72,
  author	= {J.C. King and R.W. Floyd},
  title		= {An interpretation oriented theorem prover over integers},
  journal	= {Journal of Computer and System Sciences},
  year		= 1972,
  volume	= {6(4)},
  pages		= {305-323}
}

@article{Kfoury93,
 author = {A. J. Kfoury and J. Tiuryn and P. Urzyczyn},
 title = {Type reconstruction in the presence of polymorphic recursion},
 journal = {TOPLAS},
 volume = {15},
 number = {2},
 year = {1993},
 pages = {290--311},
 publisher = {ACM}
}


@InProceedings{	  Kiczales97,
  author	= {Gregor Kiczales and John Lamping and Anurag Mendhekar and
		  Chris Maeda and Cristina Videira Lopes and Jean-Marc
		  Loingtier and John Irwin},
  title		= {Aspect-Oriented Programming.},
  booktitle	= {ECOOP},
  year		= {1997},
  pages		= {220-242},
  ee		= {http://link.springer.de/link/service/series/0558/bibs/1241/12410220.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  King76,
  author	= {J.C. King},
  title		= {Symbolic Execution and Program Testing},
  journal	= "Communications of the ACM",
  year		= 1976,
  volume	= {19(7)},
  pages		= {385--394}
}

@Article{	  KM69,
  author	= "R.M. Karp and R.E. Miller",
  title		= "Parallel Program Schemata",
  journal	= "J. Comput. Syst. Sci.",
  volume	= "3",
  number	= "2",
  year		= "1969",
  pages		= "147--195"
}

@InCollection{	  KMOS95,
  author	= "R.P. Kurshan and M. Merritt and A. Orda and S.R. Sachs",
  title		= "Modeling asynchrony with a synchronous model",
  booktitle	= "CAV 95: Computer-aided Verification",
  editor	= "P. Wolper",
  series	= "LNCS 939",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "339--352"
}

@InProceedings{	  KMTV00,
  author	= "O. Kupferman and P. Madhusudan and P.S. Thiagarajan and
		  M.Y. Vardi",
  title		= "Open Systems in Reactive Environments: Control and
		  Synthesis",
  booktitle	= "Proc. 11th International Conference on Concurrency Theory",
  series	= "Lecture Notes in Computer Science",
  volume	= "1877",
  pages		= "92--107",
  publisher	= "Springer-Verlag",
  year		= 2000
}

@InProceedings{	  KN02,
  author	= "M.Z. Kwiatkowska and G. Norman",
  title		= "Verifying Randomized Byzantine Agreement",
  booktitle	= "FORTE 02: Formal Techniques for Networked and Distributed
		  Systems",
  pages		= "194--209",
  series	= "Lecture Notes in Computer Science 2529",
  publisher	= "Springer-Verlag",
  year		= "2002"
}

@InProceedings{	  KNP02,
  author	= "M.Z. Kwiatkowska and G. Norman and D. Parker",
  title		= "Probabilistic Symbolic Model Checking with {PRISM}: {A}
		  hybrid approach",
  booktitle	= "TACAS 02: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  pages		= "169--187",
  series	= "Lecture Notes in Computer Science 2280",
  publisher	= "Springer-Verlag",
  year		= "2002"
}

@InProceedings{	  KNS02,
  author	= "M.Z. Kwiatkowska and G. Norman and J. Sproston",
  title		= "Probabilistic Model Checking of the {IEEE} 802.11 Wireless
		  Local Area Network Protocol",
  booktitle	= "PAPM/PROBMIV 02: Process Algebra and Probabilistic
		  Methods, Performance Modeling and Verification",
  pages		= "169--187",
  series	= "Lecture Notes in Computer Science 2399",
  publisher	= "Springer-Verlag",
  year		= "2002"
}

@Book{		  Kopetz1997,
  author	= {H. Kopetz},
  title		= {Real-Time Systems: Design Principles for Distributed
		  Embedded Applications},
  publisher	= {Kluwer},
  year		= {1997}
}

@PhDThesis{	  Kopke96,
  author	= "P.W. Kopke",
  title		= "The Theory of Rectangular Hybrid Automata",
  school	= "Cornell University",
  year		= "1996"
}

@Article{	  Koymans90,
  author	= "R. Koymans",
  title		= "Specifying real-time properties with metric temporal
		  logic",
  journal	= "Real-time Systems",
  volume	= "2",
  number	= "4",
  year		= "1990",
  pages		= "255--299"
}

@InCollection{	  KoymansDeRoever85,
  author	= "R. Koymans and de Roever, W.-P.",
  title		= "Examples of a real-time temporal specification",
  booktitle	= "The Analysis of Concurrent Systems",
  editor	= "B.D. Denvir and W.T. Harwood and M.I. Jackson and M.J.
		  Wray",
  series	= "LNCS 207",
  publisher	= "Springer-Verlag",
  year		= "1985",
  pages		= "231--252"
}

@InProceedings{	  Kozen83,
  author	= "D. Kozen",
  title		= "A Probabilistic {PDL}",
  booktitle	= "STOC 83: Theory of Computing",
  year		= 1983,
  pages		= "291--297",
  summary	= "Gives a very nice dynamic logic to be used on Markovian
		  models - but the models are richer than this. In the end,
		  one gets a probabilistic model for programs but cannot
		  really use it for reliability or performance"
}

@Article{	  Kozen83mu,
  author	= "D. Kozen",
  title		= "Results on the propositional $\mu$-calculus",
  journal	= "Theoretical Computer Science",
  volume	= "27",
  number	= "3",
  year		= "1983",
  pages		= "333--354"
}

@InProceedings{	  KPB95,
  author	= "S.C. Krishnan and A. Puri and R.K. Brayton",
  title		= "Structural Complexity of $\omega$-Automata",
  booktitle	= "Symposium on Theoretical Aspects of Computer Science",
  series	= "Lecture Notes in Computer Science",
  volume	= 900,
  publisher	= "Springer-Verlag",
  year		= 1995
}

@InCollection{	  KPBV95,
  author	= "S.C. Krishnan and A. Puri and R.K. Brayton and P. Varaiya",
  title		= "The Rabin index and chain automata, with applications to
		  automata and games",
  booktitle	= "CAV 95: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 939",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "253--266"
}

@InCollection{	  KPSY93,
  author	= "Y. Kesten and A. Pnueli and J. Sifakis and S. Yovine",
  title		= "Integration graphs: a class of decidable hybrid systems",
  booktitle	= "Hybrid Systems",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "LNCS 736",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "179--208"
}

@InCollection{	  KR01,
  author	= "S. Kremer and J.-F. Raskin",
  title		= "A Game-Based Verification of Non-repudiation and Fair
		  Exchange Protocols",
  booktitle	= "CONCUR 01: Concurrency Theory",
  series	= "Lecture Notes in Computer Science 2154",
  publisher	= "Springer-Verlag",
  year		= "2001",
  pages		= "551--565"
}

@InProceedings{	  KR92,
  author	= "E. Kushilevitz and M.O. Rabin",
  title		= "Randomized Mutual Exclusion Algorithms Revisited",
  booktitle	= "PODC 92: Principles of Distributed Computing",
  pages		= "275--283",
  publisher	= "ACM Press",
  year		= "1992"
}

@Article{	  Kraj,
  author	= "J. Kraj\'{i}\u{c}ek",
  title		= "Interpolation theorems, lower bounds for proof systems,
		  and independence results for bounded arithmetic",
  journal	= "J. Symbolic Logic",
  volume	= 62,
  pages		= "457--486",
  year		= 1997
}

@InProceedings{	  Krishnamurthi02,
  author	= {Harry C. Li and Shriram Krishnamurthi and Kathi Fisler},
  title		= {Interfaces for Modular Feature Verification.},
  booktitle	= {ASE},
  year		= {2002},
  pages		= {195-204},
  ee		= {http://csdl.computer.org/comp/proceedings/ase/2002/1736/00/17360195abs.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  Krishnamurthi04,
  author	= {Colin Blundell and Kathi Fisler and Shriram Krishnamurthi
		  and Pascal Van Hentenryck},
  title		= {Parameterized Interfaces for Open System Verification of
		  Product Lines.},
  booktitle	= {ASE},
  year		= {2004},
  pages		= {258-267},
  ee		= {http://csdl.computer.org/comp/proceedings/ase/2004/2131/00/21310258abs.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}
@inproceedings{KroeningTACAS06,
  author    = {Daniel Kroening and
               Natasha Sharygina},
  title     = {Approximating Predicate Images for Bit-Vector Logic.},
  booktitle = {TACAS},
  year      = {2006},
  pages     = {242-256},
  ee        = {http://dx.doi.org/10.1007/11691372_16},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{JainKroening05,
  author    = {Himanshu Jain and
               Daniel Kroening and
               Natasha Sharygina and
               Edmund M. Clarke},
  title     = {Word level predicate abstraction and refinement for verifying
               RTL verilog.},
  booktitle = {DAC},
  year      = {2005},
  pages     = {445-450},
  ee        = {http://doi.acm.org/10.1145/1065579.1065697}
}

@article{bryantgermanvelev01,
  author    = {Randal E. Bryant and
               Steven M. German and
               Miroslav N. Velev},
  title     = {Processor verification using efficient reductions of the
               logic of uninterpreted functions to propositional logic.},
  journal   = {ACM Trans. Comput. Log.},
  volume    = {2},
  number    = {1},
  year      = {2001},
  pages     = {93-134},
  ee        = {http://doi.acm.org/10.1145/371282.371364},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{VelevBryant03,
  author    = {Miroslav N. Velev and
               Randal E. Bryant},
  title     = {Effective use of Boolean satisfiability procedures in the
               formal verification of superscalar and VLIW microprocessors.},
  journal   = {J. Symb. Comput.},
  volume    = {35},
  number    = {2},
  year      = {2003},
  pages     = {73-106},
  ee        = {http://dx.doi.org/10.1016/S0747-7171(02)00091-3},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  Kroening,
  author	= "D. Kroening and E. Clarke and K. Yorav",
  title		= "Behavioral consistency of {C} and {Verilog} programs using
		  bounded model checking",
  pages		= "368--371",
  booktitle	= "DAC 03: Design Automation Conference",
  publisher	= "ACM",
  year		= "2003"
}

@InCollection{	  kroening06,
  author	= "Georg Weissenbacher and Daniel Kroening",
  title		= "Abstraction Refinement for Counterexamples with Loops",
  booktitle	= "CAV 2006: Computer-Aided Verification",
  editor	= "T. Ball and R. Jones",
  series	= "LNCS",
  publisher	= "Springer-Verlag",
  year		= "2006",
  pages		= "XXX--YYY"
}

@InProceedings{	  KroeningCBMC,
  author	= {Edmund M. Clarke and Daniel Kroening and Natasha Sharygina
		  and Karen Yorav},
  title		= {SATABS: SAT-Based Predicate Abstraction for ANSI-C.},
  booktitle	= {TACAS},
  year		= {2005},
  pages		= {570-574},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3440{\&}spage=570}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{KroeningFiniteMaps,
  author = "Daniel Kr{\"o}ning and Philipp R{\"u}mmer and Georg Weissenbacher",
  title = "A Proposal for Theory of Finite Sets, Lists, and Maps for the SMT-Lib Standard",
  booktitle = "SMT",
  year = "2009"
}

@InProceedings{	  kruger05,
  author	= {Russell A. McClure and Ingolf H. Kr{\"u}ger},
  title		= {SQL DOM: compile time checking of dynamic SQL
		  statements.},
  booktitle	= {ICSE},
  year		= {2005},
  pages		= {88-96},
  ee		= {http://doi.acm.org/10.1145/1062487},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  KSdR88,
  author	= "R. Koymans and R.K. Shyamasundar and de Roever, W.-P. and
		  R. Gerth and S. Arun-Kumar",
  title		= "Compositional semantics for real-time distributed
		  computing",
  journal	= "Information and Computation",
  volume	= "79",
  number	= "3",
  year		= "1988",
  pages		= "210--256"
}

@Article{	  Kumar81,
  author	= "P.R. Kumar and T.H. Shiau",
  title		= "Existence of Value and Randomized Strategies in Zero-sum
		  Discrete-Time Stochastic Dynamic Games",
  journal	= "{SIAM} J. Control and Optimization",
  volume	= 19,
  number	= 5,
  year		= 1981,
  pages		= "617--634",
  group		= "GT",
  summary	= "Analyzes two-player zero-sum games with randomized
		  strategies, over general state spaces, and shows existence
		  of values and of epsilon-optimal strategies for different
		  cases. In particular, it shows that sometimes there are
		  epsilon-optimal but not optimal strategies, equal to our
		  result of cone subset climit. It discusses also the
		  existence of series of optimal and epsilon-optimal
		  stationary strategies."
}

@INPROCEEDINGS{kuncak07,
  author = {Thomas Wies and Viktor Kuncak and Karen Zee and
A. Podelski and M. Rinard},
  title = {Verifying Complex Properties using Symbolic Shape Analysis},
  booktitle = {Workshop on Heap Abstraction and Verification 
(collocated with ETAPS)},
  year = 2007,
  localurl = {http://lara.epfl.ch/~kuncak/papers/WiesETAL07VerifyingComplexPropertiesSymbolicShapeAnalysis.pdf}
}

@inproceedings{LahiriCAV05,
  author    = {Shuvendu K. Lahiri and
               Thomas Ball and
               Byron Cook},
  title     = {Predicate Abstraction via Symbolic Decision Procedures.},
  booktitle = {CAV},
  year      = {2005},
  pages     = {24-38},
  ee        = {http://dx.doi.org/10.1007/11513988_5},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{LahiriCAV06,
  author    = {Shuvendu K. Lahiri and
               Robert Nieuwenhuis and
               Albert Oliveras},
  title     = {SMT Techniques for Fast Predicate Abstraction.},
  booktitle = {CAV},
  year      = {2006},
  pages     = {424-437},
  ee        = {http://dx.doi.org/10.1007/11817963_39},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@inproceedings{LahiriBryantIndexPA,
  author    = {Shuvendu K. Lahiri and
               Randal E. Bryant},
  title     = {Indexed Predicate Discovery for Unbounded System Verification.},
  booktitle = {CAV},
  year      = {2004},
  pages     = {135-147},
  ee        = {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3114{\&}spage=135},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{kuncak08,
  author    = {K. Zee and
               V. Kuncak and
               M. C. Rinard},
  title     = {Full functional verification of linked data structures},
  booktitle = {PLDI},
  year      = {2008},
  pages     = {349-361}
}


@inproceedings{LahiriQadeer08,
  author    = {S. K. Lahiri and
               S. Qadeer},
  title     = {Back to the future: revisiting precise program verification
               using SMT solvers},
  booktitle = {POPL},
  year      = {2008}
}

@inproceedings{LahiriQadeer06,
  author    = {Shuvendu K. Lahiri and
               Shaz Qadeer},
  title     = {Verifying properties of well-founded linked lists.},
  booktitle = {POPL},
  year      = {2006},
  pages     = {115-126},
  ee        = {http://doi.acm.org/10.1145/1111037.1111048},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Reps93,
  author    = {Thomas W. Reps},
  title     = {Demand Interprocedural Program Analysis Using Logic Databases.},
  booktitle = {Workshop on Programming with Logic Databases},
  year      = {1993},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Lerner05,
  author    = {Sorin Lerner and
               Todd D. Millstein and
               Erika Rice and
               Craig Chambers},
  title     = {Automated soundness proofs for dataflow analyses and transformations
               via local rules.},
  booktitle = {POPL},
  year      = {2005},
  pages     = {364-377},
  ee        = {http://doi.acm.org/10.1145/1040305.1040335},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}



@inproceedings{Whaley04,
  author    = {John Whaley and
               Monica S. Lam},
  title     = {Cloning-based context-sensitive pointer alias analysis using
               binary decision diagrams.},
  booktitle = {PLDI},
  year      = {2004},
  pages     = {131-144},
  ee        = {http://doi.acm.org/10.1145/996841.996859},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{RakamaricTACAS07,
  author    = {Shaunak Chatterjee and Shuvendu Lahiri and  Shaz Qadeer and Zvonimir Rakamaric},
  title     = {A Reachability Predicate for Analyzing Low-Level Software},
  booktitle = {TACAS},
  year      = {2007},
  pages     = {(to appear)}
}

@inproceedings{RakamaricVMCAI07,
  author    = {Z. Rakamaric and J. D. Bingham and A. J. Hu},
  title     = {An Inference-Rule-Based Decision Procedure for Verification of 
               Heap-Manipulating Programs with Mutable Data and Cyclic Data Structures},
  booktitle = {VMCAI},
  year      = {2007},
  pages     = {}
}

@inproceedings{RakamaricVMCAI06,
  author    = {J. D. Bingham and Z. Rakamaric},
  title     = {A Logic and Decision Procedure for Predicate Abstraction
               of Heap-Manipulating Programs.},
  booktitle = {VMCAI},
  year      = {2006},
  pages     = {207-221},
  ee        = {http://dx.doi.org/10.1007/11609773_14},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@article{Knowles10,
  author    = {K.W. Knowles and
               C. Flanagan},
  title     = {Hybrid type checking},
  journal   = {ACM TOPLAS},
  volume    = {32},
  number    = {2},
  year      = {2010},
  ee        = {http://doi.acm.org/10.1145/1667048.1667051},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{    Knowles07,
  title		 = "Type Reconstruction for General Refinement Types",
  author	 = "K. Knowles and C. Flanagan",
  booktitle	 = "ESOP",
  year		 = 2007,
  url		 = "http://kenn.frap.net/publications/knowles-flanagan.esop.07.type.pdf"
}

@TechReport{	  Kuncak,
  author	= "P. Lam and V. Kuncak and M. Rinard",
  title		= "On Modular Pluggable Analyses Using Set Interfaces",
  number	= "TR 933",
  institution	= "MIT Computer Science and Artificial Intelligence
		  Laboratory",
  year		= "2003"
}

@INPROCEEDINGS{KuncakSYMBOLIC,
  author = {Charles Bouillaguet and Viktor Kuncak and Thomas Wies and Karen Zee and Martin Rinard},
  title = {Using First-Order Theorem Provers in the {J}ahob Data Structure Verification System},
  booktitle = {Verification, Model Checking and Abstract Interpretation},
  year = 2007,
  month = {November}
}
@InCollection{	  KuncakFS,
  author	= "K. Arkoudas and K. Zee and V. Kuncak and M. Rinard",
  title		= "Verifying a File System Implementation",
  booktitle	= "ICFEM 04: International Conference on Formal Engineering
		  Methods",
  publisher	= "Springer",
  series	= "LNCS 3308",
  year		= 2004
}

@InProceedings{	  KuncakHob05,
  author	= {P. Lam and V. Kuncak and M. C. Rinard},
  title		= {Hob: A Tool for Verifying Data Structure Consistency.},
  booktitle	= {CC},
  year		= {2005},
  pages		= {237-241},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3443{\&}spage=237}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@PhDThesis{	  Kupferman95,
  author	= "O. Kupferman",
  title		= "Model Checking for Branching-time Temporal Logics",
  school	= "The Technion",
  year		= "1995"
}

@InCollection{	  KupfermanVardi99,
  author	= "O. Kupferman and M.Y. Vardi",
  title		= "Robust satisfaction",
  booktitle	= "CONCUR 99: Concurrency Theory",
  editor	= "J.C.M. Baeten and S. Mauw",
  series	= "Lecture Notes in Computer Science 1664",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "383--398"
}

@InProceedings{	  Kur94b,
  author	= "R.P. Kurshan",
  title		= "The Complexity of Verification",
  booktitle	= "Proc. 26th ACM Symp. on Theory of Computing",
  address	= "Montreal",
  pages		= "365--371",
  year		= "1994"
}

@Book{		  Kur98,
  author	= "R.P. Kurshan",
  title		= "FormalCheck User's Manual",
  year		= 1998,
  publisher	= {Cadence Design, Inc.}
}

@InCollection{	  Kurshan90,
  author	= "R.P. Kurshan",
  title		= "Analysis of discrete-event coordination",
  series	= "LNCS 430",
  publisher	= "Springer-Verlag",
  year		= "1990",
  pages		= "414--453"
}

@Book{		  Kurshan94,
  author	= "R.P. Kurshan",
  title		= "Computer-aided Verification of Coordinating Processes",
  publisher	= "Princeton University Press",
  year		= "1994"
}

@InCollection{	  KurshanLamport93,
  author	= "R.P. Kurshan and L. Lamport",
  title		= "Verification of a multiplier: 64 bits and beyond",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "166--179"
}

@InProceedings{	  KV00a,
  author	= "O. Kupferman and M.Y. Vardi",
  title		= "Synthesis with incomplete informatio",
  booktitle	= "Advances in Temporal Logic",
  pages		= "109--127",
  publisher	= "Kluwer Academic Publishers",
  month		= "January",
  year		= "2000"
}

@InProceedings{	  KV00b,
  author	= "O. Kupferman and M.Y. Vardi",
  title		= "$\mu$-calculus Synthesis",
  booktitle	= "Proc. 25th International Symp. on Mathematical Foundations
		  of Computer Science",
  series	= "Lecture Notes in Computer Science",
  volume	= "1893",
  pages		= "497--507",
  publisher	= "Springer-Verlag",
  year		= "2000"
}

@InProceedings{	  KV00c,
  author	= "O. Kupferman and M.Y. Vardi",
  title		= "An automata-theoretic approach to reasoning about
		  infinite-state systems",
  booktitle	= "Computer Aided Verification, Proc. 12th International
		  Conference",
  pages		= "36--52",
  series	= "Lecture Notes in Computer Science",
  volume	= "1855",
  publisher	= "Springer-Verlag",
  year		= "2000"
}

@Article{	  KV00d,
  author	= "O. Kupferman and M.Y. Vardi",
  title		= "An Automata-Theoretic Approach to Modular Model Checking",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= 22,
  pages		= "87-128",
  year		= "2000"
}

@InProceedings{	  KV03,
  author	= "O. Kupferman and M.Y. Vardi",
  title		= "Safraless decision procedures",
  booktitle	= "FOCS 03: Foundations of Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "2003"
}

@InProceedings{	  KVdR83,
  author	= "R. Koymans and J. Vytopil and de Roever, W.-P.",
  title		= "Real-time programming and asynchronous message passing",
  booktitle	= "Proceedings of the Second Annual Symposium on Principles
		  of Distributed Computing",
  publisher	= "ACM Press",
  year		= "1983",
  pages		= "187--197"
}

@Article{	  KVW00,
  author	= "O. Kupferman and M.Y. Vardi and P. Wolper",
  title		= "An Automata-Theoretic Approach to Branching-Time Model
		  Checking",
  journal	= "Journal of the ACM",
  volume	= 47,
  number	= 2,
  pages		= "312-360",
  month		= "March",
  year		= "2000"
}

@Article{	  KVW01,
  author	= "O. Kupferman and M.Y. Vardi and P. Wolper",
  title		= "Module Checking",
  journal	= "Information and Computation",
  volume	= 164,
  pages		= "322-344",
  year		= "2001"
}

@Article{	  Kwiat89,
  author	= "M. Kwiatkowska",
  title		= "Survey of Fairness Notions",
  journal	= "Information and Software Technology",
  volume	= 31,
  number	= 7,
  pages		= "371--386",
  year		= 1989
}

@InProceedings{	  Kwiatkowska03,
  author	= "M. Kwiatkowska",
  title		= "Model Checking for Probability and Time: From Theory to
		  Practice",
  booktitle	= "LICS 03: Logic in Computer Science",
  pages		= "351--360",
  publisher	= "IEEE Press",
  year		= "2003"
}

@InProceedings{	  Lackwit,
  author	= "R. O'Callahan and D. Jackson",
  title		= "Lackwit: A Program-Understanding Tool Based on Type
		  Inference",
  booktitle	= {ICSE},
  publisher	= {ACM/IEEE},
  pages		= {338-348},
  year		= "1997"
}

@InProceedings{	  Lahiri03,
  author	= {Shuvendu K. Lahiri and Randal E. Bryant},
  title		= {Deductive Verification of Advanced Out-of-Order
		  Microprocessors.},
  booktitle	= {CAV},
  year		= {2003},
  pages		= {341-353},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=2725{\&}spage=341}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  LahiriBryantCook03,
  author	= {Shuvendu K. Lahiri and Randal E. Bryant and Byron Cook},
  title		= {A Symbolic Approach to Predicate Abstraction.},
  booktitle	= {CAV},
  year		= {2003},
  pages		= {141-153},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=2725{\&}spage=141}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  LaLuz03,
  title		= "Energy-Conscious Memory Allocation and Deallocation for
		  Pointer-Intensive Applications",
  author	= "V. De La Luz and M. Kandemir and G. Chen and I. Kolcu",
  booktitle	= "EMSOFT 03: Embedded Software",
  series	= "Lecture Notes in Computer Science",
  pages		= "156--172",
  publisher	= "Springer",
  year		= "2003"
}

@Article{	  Lamport74,
  author	= "L.~Lamport",
  title		= "A new solution of Dijkstra's concurrent programming
		  problem",
  journal	= "Communications of the ACM",
  volume	= "17",
  pages		= "453--455",
  year		= "1974"
}

@Article{	  Lamport77,
  author	= "L. Lamport",
  title		= "Proving the correctness of multiprocess programs",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "SE-3",
  number	= "2",
  year		= "1977",
  pages		= "125-143"
}

@InProceedings{	  Lamport80,
  author	= "L. Lamport",
  title		= "Sometimes is sometimes ``Not never'' - on the temporal
		  logic of programs",
  year		= "1980",
  booktitle	= "POPL 80: {ACM} Symp. on Principles of Programming
		  Languages",
  pages		= "174-185",
  publisher	= "ACM Press"
}

@InProceedings{	  Lamport83ifip,
  author	= "L. Lamport",
  title		= "What good is temporal logic?",
  booktitle	= "Information Processing 83: Proceedings of the Ninth IFIP
		  World Computer Congress",
  editor	= "R.E.A. Mason",
  publisher	= "Elsevier Science Publishers",
  year		= "1983",
  pages		= "657--668"
}

@Article{	  Lamport83toplas,
  author	= "L. Lamport",
  title		= "Specifying concurrent program modules",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "5",
  number	= "2",
  year		= "1983",
  pages		= "190--222"
}

@Article{	  Lamport87,
  author	= "L. Lamport",
  title		= "A fast mutual exclusion algorithm",
  journal	= "ACM Transactions on Computer Systems",
  volume	= "5",
  number	= "1",
  year		= "1987",
  pages		= "1--11"
}

@Article{	  Lamport94,
  author	= "L. Lamport",
  title		= "The {T}emporal {L}ogic of {A}ctions",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "16",
  number	= "3",
  year		= "1994",
  pages		= "872--923"
}

@InProceedings{	  landi:93,
  author	= "W. Landi and B. G. Ryder and S. Zhang",
  title		= "Interprocedural Side Effect Analysis With Pointer
		  Aliasing",
  booktitle	= {PLDI 93: Programming Language Design and Implementation},
  publisher	= {ACM},
  pages		= "56--67",
  year		= 1993
}

@InProceedings{	  Larsen,
  title		= "As Cheap as Possible: Efficient Cost-Optimal Reachability
		  for Priced Timed Automata",
  author	= "K.G. Larsen and G. Behrmann and E. Brinksma and A. Fehnker
		  and T. Hune and P. Pettersson and J. Romijn",
  booktitle	= "CAV 2001: Computer-Aided Verification",
  series	= "Lecture Notes in Computer Science",
  pages		= "493--505",
  publisher	= "Springer",
  year		= "2001"
}

@InProceedings{	  Larsen03,
  author	= "K.G. Larsen",
  title		= "Resource-efficient scheduling for real time systems",
  booktitle	= "EMSOFT 03: Embedded Software",
  series	= "Lecture Notes in Computer Science",
  pages		= "16--19",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  LBCJM94,
  author	= "D. Long and A. Brown and E. Clarke and S. Jha and W.
		  Marrero",
  title		= "An improved algorithm for the evaluation of fixpoint
		  expressions",
  booktitle	= "CAV 94: Computer-Aided Verification",
  series	= "Lecture Notes in Computer Science",
  volume	= "818",
  year		= "1994",
  publisher	= "Springer-Verlag",
  pages		= "338--350"
}

@InProceedings{	  LeeDavidson92,
  author	= "I. Lee and S. Davidson",
  title		= "An overview of an integrated toolset under development for
		  the {CSR} paradigm",
  booktitle	= "Proceedings of the Workshop on Responsive Computer
		  Systems",
  year		= "1992"
}

@InProceedings{	  LeeYannakakis92,
  author	= "D. Lee and M. Yannakakis",
  title		= "Online minimization of transition systems",
  booktitle	= "Proceedings of the 24th Annual Symposium on Theory of
		  Computing",
  publisher	= "ACM Press",
  year		= "1992",
  pages		= "264--274"
}

@Article{	  Lemmon66,
  author	= "E.J. Lemmon",
  title		= "Algebraic semantics for modal logics",
  journal	= "The Journal of Symbolic Logic",
  volume	= "31",
  number	= "2",
  year		= "1966",
  pages		= "191--218"
}

@Article{	  lengauertarjan79,
  author	= {Thomas Lengauer and Robert E. Tarjan},
  title		= {A fast algorithm for finding dominators in a flowgraph},
  journal	= {ACM Trans. on Programming Languages and Systems},
  year		= 1979,
  volume	= {1(1)},
  pages		= {121-141},
  month		= {July}
}

@Book{		  Leveson95,
  author	= "Nancy Leveson",
  title		= "System safety and computers",
  publisher	= "Addison-Wesley",
  year		= "1995"
}

@InCollection{	  LevesonStolzy85,
  author	= "N. Leveson and J. Stolzy",
  title		= "Analyzing safety and fault tolerance using timed {P}etri
		  Nets",
  booktitle	= "Proceedings of International Joint Conference on Theory
		  and Practice of Software Development",
  series	= "LNCS 186",
  publisher	= "Springer-Verlag",
  year		= "1985",
  pages		= "339--355"
}

@InProceedings{	  Lewis90,
  author	= "H.R. Lewis",
  title		= "A logic of concrete time intervals",
  booktitle	= "Proceedings of the Fifth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1990",
  pages		= "380--389"
}

@Article{	  LGSBB95,
  author	= "C. Loiseauxc and S. Graf and J. Sifakis and A. Bouajjani
		  and S. Bensalem",
  year		= "1995",
  title		= "Property-preserving abstractions for the verification of
		  concurrent systems",
  journal	= "Formal Methods in System Design",
  volume	= "6",
  pages		= "11--44"
}

@InProceedings{	  LichtensteinPnueli85,
  author	= "O. Lichtenstein and A. Pnueli",
  title		= "Checking that finite-state concurrent programs satisfy
		  their linear specification",
  booktitle	= "Proceedings of the 12th Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1985",
  pages		= "97--107"
}

@InProceedings{	  LICS00,
  author	= "L. de Alfaro and T.A. Henzinger",
  title		= "Concurrent omega-regular games",
  booktitle	= "Proceedings of the 15th Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "2000",
  pages		= "141--154"
}

@InProceedings{	  LICS90,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Real-time logics: complexity and expressiveness",
  booktitle	= "Proceedings of the Fifth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1990",
  pages		= "390--401"
}

@Article{	  LICS90j,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Real-time logics: complexity and expressiveness",
  journal	= "Information and Computation",
  volume	= "104",
  number	= "1",
  year		= "1993",
  pages		= "35--77"
}

@InProceedings{	  LICS92,
  author	= "T.A. Henzinger and X. Nicollin and J. Sifakis and S.
		  Yovine",
  title		= "Symbolic model checking for real-time systems",
  booktitle	= "Proceedings of the Seventh Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1992",
  pages		= "394--406"
}

@Article{	  LICS92j,
  author	= "T.A. Henzinger and X. Nicollin and J. Sifakis and S.
		  Yovine",
  title		= "Symbolic model checking for real-time systems",
  journal	= "Information and Computation",
  volume	= "111",
  number	= "2",
  year		= "1994",
  pages		= "193--244"
}

@InProceedings{	  LICS94,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Finitary fairness",
  booktitle	= "Proceedings of the Ninth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1994",
  pages		= "52--61"
}

@InProceedings{	  LICS96AH,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Reactive modules",
  booktitle	= "Proceedings of the 11th Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1996",
  pages		= "207--218"
}

@Article{	  LICS96AHj,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Reactive modules",
  journal	= "Formal Methods in System Design",
  volume	= "15",
  number	= "1",
  year		= "1999",
  pages		= "7--48"
}

@InProceedings{	  LICS96H,
  author	= "T.A. Henzinger",
  title		= "The theory of hybrid automata",
  booktitle	= "Proceedings of the 11th Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1996",
  pages		= "278--292"
}

@InCollection{	  LinearTypes,
  author	= "P. Wadler",
  title		= "Linear types can change a world!",
  booktitle	= "Programming Concetps and Methods",
  year		= 1990
}

@Book{		  LinProg,
  author	= "A. Schrijver",
  title		= "Theory of Linear and Integer Programming",
  year		= 1987,
  publisher	= "J. Wiley \& Sons"
}

@Misc{		  linussparse03,
  author	= "Linus Torvalds",
  title		= "Linus \& the Lunatics, Part {I}",
  howpublished	= "Transcript by Doc Searls of a talk during the Linux Lunacy
		  Geek Cruise",
  year		= 2003,
  month		= nov,
  note		= "\url{http://www.linuxjournal.com/comment/reply/7272}, as
		  of November 2004"
}

@Article{	  LiskovWing94,
  title		= "A Behavioral Notion of Subtyping",
  author	= "Barbara Liskov and Jeannette Wing",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "16(6)",
  year		= 1994,
  pages		= "1811--1841"
}

@Article{	  LiuLayland1973,
  author	= {C. Liu and J. Layland},
  title		= {Scheduling Algorithms for Multiprogramming in a
		  Hard-Real-Time Environment},
  journal	= {Journal of the ACM},
  year		= {1973},
  volume	= {20},
  number	= {1}
}

@InProceedings{	  Livshits03,
  author	= {V. Benjamin Livshits and Monica S. Lam},
  title		= {Tracking pointers with path and context sensitivity for
		  bug detection in C programs.},
  booktitle	= {ESEC / SIGSOFT FSE},
  year		= {2003},
  pages		= {317-326},
  ee		= {http://doi.acm.org/10.1145/940114},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Book{		  LNCS1066,
  title		= "Hybrid Systems III: Verification and Control",
  editor	= "R. Alur and T.A. Henzinger and E.D. Sontag",
  series	= "Lecture Notes in Computer Science 1066",
  publisher	= "Springer-Verlag",
  year		= "1996",
  note		= "Proceedings of the Third International Workshop"
}

@Book{		  LNCS1102,
  title		= "CAV 96: Computer-aided Verification",
  editor	= "R. Alur and T.A. Henzinger",
  series	= "Lecture Notes in Computer Science 1102",
  publisher	= "Springer-Verlag",
  year		= "1996",
  note		= "Proceedings of the Eighth International Conference"
}

@Book{		  LNCS1386,
  title		= "HSCC 98: Hybrid Systems---Computation and Control",
  editor	= "T.A. Henzinger and S. Sastry",
  series	= "Lecture Notes in Computer Science 1386",
  publisher	= "Springer-Verlag",
  year		= "1998",
  note		= "Proceedings of the First International Workshop"
}

@Book{		  LNCS354,
  title		= "Linear Time, Branching Time, and Partial Order in Logics
		  and Models for Concurrency",
  editor	= "de Bakker, J.W. and de Roever, W.-P. and G. Rozenberg",
  series	= "LNCS 354",
  publisher	= "Springer-Verlag",
  year		= "1988"
}

@Book{		  LNCS600,
  title		= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "LNCS 600",
  publisher	= "Springer-Verlag",
  year		= "1992"
}

@Book{		  LNCS736,
  title		= "Hybrid Systems I",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "LNCS 736",
  publisher	= "Springer-Verlag",
  year		= "1993"
}

@Book{		  LNCS999,
  title		= "Hybrid Systems II",
  editor	= "P. Antsaklis and A. Nerode and W. Kohn and S. Sastry",
  series	= "LNCS 999",
  publisher	= "Springer-Verlag",
  year		= "1995"
}

@Article{	  Loewe02,
  author	= "B. L{\"o}we",
  title		= "Playing with mixed strategies on infinite sets",
  journal	= "International Journal of Game Theory",
  volume	= "31",
  year		= "2002",
  pages		= "137--150"
}

@Article{	  LosieauxGraf95,
  author	= {C. Loiseaux and S. Graf and J. Sifakis and A. Bouajjani
		  and S. Bensalem},
  title		= {Property Preserving Abstractions for the Verification of
		  Concurrent Systems},
  journal	= {Formal Methods in System Design Volume},
  volume	= {6(1)},
  pages		= {11-44},
  year		= {1995}
}

@InCollection{	  LPS82,
  author	= "D. Lehman and A. Pnueli and J. Stavi",
  title		= "Impartiality, justice, and fairness: the ethics of
		  concurrent termination",
  booktitle	= "ICALP 82: Automata, Languages, and Programming",
  series	= "LNCS 115",
  publisher	= "Springer-Verlag",
  year		= "1982",
  pages		= "264--277"
}

@InProceedings{	  LPY95,
  author	= "K.G. Larsen and P. Pettersson and W. Yi",
  title		= "Compositional and symbolic model checking of real-time
		  systems",
  booktitle	= "Proceedings of the 16th Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1995",
  pages		= "76--87"
}

@InCollection{	  LPZ85,
  author	= "O. Lichtenstein and A. Pnueli and L.D. Zuck",
  title		= "The glory of the past",
  booktitle	= "Logics of Programs",
  editor	= "R. Parikh",
  series	= "LNCS 193",
  publisher	= "Springer-Verlag",
  year		= "1985",
  pages		= "196--218"
}

@InCollection{	  LSVW96,
  author	= "N.A. Lynch and R. Segala and F. Vaandrager and H.B.
		  Weinberg",
  title		= "Hybrid {I/O} {A}utomata",
  booktitle	= "Hybrid Systems III",
  editor	= "R. Alur and T.A. Henzinger and E.D. Sontag",
  series	= "LNCS 1066",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "496--510"
}

@Article{	  Lub84,
  author	= {B.D. Lubachevsky},
  title		= "An Approach to Automating the Verification of Compact
		  Parallel Coordination Programs {I}",
  journal	= "Acta Informatica",
  volume	= {21},
  pages		= {125--169},
  year		= {1984}
}


@inproceedings{ATS,
  author    = {S. Cui and
               K. Donnelly and
               H. Xi},
  title     = {ATS: A Language That Combines Programming with Theorem Proving},
  booktitle = {FroCos},
  year      = {2005},
  ee        = {http://dx.doi.org/10.1007/11559306_19}
}


@TechReport{	  LX01,
  author	= "Edward A. Lee and Yuhong Xiong",
  title		= "System-level types for component-based design",
  institution	= "UC Berkeley",
  number	= "UCB/ERL M00/8",
  year		= "2000"
}

@Misc{		  Lynchalsoprob,
  author	= "N. Lynch",
  title		= "Proving Performance Properties (even Probabilistic Ones)",
  year		= 1994,
  summary	= "Surveys quickly work done in Lynch's group. Not suitable
		  as a basic reference"
}

@InProceedings{	  LynchAttiya90,
  author	= "N.A. Lynch and H. Attiya",
  title		= "Using mappings to prove timing properties",
  booktitle	= "Proceedings of the Ninth Annual Symposium on Principles of
		  Distributed Computing",
  publisher	= "ACM Press",
  year		= "1990",
  pages		= "265--280"
}

@InProceedings{	  LynchTuttle87,
  author	= "N.A. Lynch and M.R. Tuttle",
  title		= "Hierarchical correctness proofs for distributed
		  algorithms",
  booktitle	= "Proceedings of the Sixth Annual Symposium on Principles of
		  Distributed Computing",
  publisher	= "ACM Press",
  year		= "1987",
  pages		= "137--151"
}

@InCollection{	  LynchVaandrager92concur,
  author	= "N.A. Lynch and F. Vaandrager",
  title		= "Action transducers and timed automata",
  booktitle	= "CONCUR 92: Theories of Concurrency",
  editor	= "R.J. Cleaveland",
  series	= "LNCS 630",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "436-455"
}

@InCollection{	  LynchVaandrager92rex,
  author	= "N.A. Lynch and F. Vaandrager",
  title		= "Forward and backward simulations for timing-based systems",
  booktitle	= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "LNCS 600",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "397--446"
}

@Article{	  LynchVaandrager96,
  author	= "N.A. Lynch and F. Vaandrager",
  title		= "Forward and Backward Simulations, Part II: Timing-based
		  Systems",
  journal	= "Information and Computation",
  volume	= "128",
  number	= "1",
  year		= "1996",
  pages		= "1--25"
}

@PhDThesis{	  Ma04,
  author	= "D. Ma",
  title		= "Bounding the stack size of interrupt-driven programs",
  school	= "Purdue University",
  year		= 2004
}

@InCollection{	  MalerPnueli93,
  author	= "O. Maler and A. Pnueli",
  title		= "Reachability analysis of planar multi-linear systems",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "194--209"
}

@InCollection{	  MalerPnueli95,
  author	= "O. Maler and A. Pnueli",
  title		= "Timing analysis of asynchronous circuits using timed
		  automata",
  booktitle	= "CHARME 95",
  editor	= "P.E. Camurati and H. Eveking",
  series	= "Lecture Notes in Computer Science 987",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "189--205"
}

@InProceedings{	  Malik,
  author	= "M.W. Moskewicz and C.F. Madigan and Y. Zhao and L. Zhang
		  and S. Malik",
  title		= "Chaff: Engineering an Efficient {SAT} Solver",
  booktitle	= "DAC 01: Design Automation Conference",
  pages		= "530--535",
  year		= "2001"
}
@inproceedings{millstein06,
  author    = {B. Chin and
               S. Markstrum and
               T. D. Millstein and
               J. Palsberg},
  title     = {Inference of User-Defined Type Qualifiers and Qualifier
               Rules},
  booktitle = {ESOP},
  year      = {2006},
  pages     = {264-278}
}

@PhDThesis{	  fosterthesis,
  author	= "J.S. Foster",
  title		= "Type Qualifiers: Lightweight Specifications to Improve Software Quality",
  school	= "U.C. Berkeley",
  year		= "2002"
}

@PhDThesis{	  Mang02,
  author	= "F.Y.C. Mang",
  title		= "Games in Open Systems Verification and Synthesis",
  school	= "University of California, Berkeley",
  year		= "2002"
}

@inproceedings{DamsNamjoshi03,
  author    = {Dennis Dams and
               Kedar S. Namjoshi},
  title     = {Shape Analysis through Predicate Abstraction and Model Checking.},
  booktitle = {VMCAI},
  year      = {2003},
  pages     = {310-324},
  ee        = {http://link.springer.de/link/service/series/0558/bibs/2575/25750310.htm},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@inproceedings{Namjoshi03,
  author    = {Kedar S. Namjoshi},
  title     = {Lifting Temporal Proofs through Abstractions.},
  booktitle = {VMCAI},
  year      = {2003},
  pages     = {174-188},
  ee        = {http://link.springer.de/link/service/series/0558/bibs/2575/25750174.htm},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Balaban05,
  author    = {Ittai Balaban and
               Amir Pnueli and
               Lenore D. Zuck},
  title     = {Shape Analysis by Predicate Abstraction.},
  booktitle = {VMCAI},
  year      = {2005},
  pages     = {164-180},
  ee        = {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3385{\&}spage=164},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Sankaranarayanan05,
  author    = {S. Sankaranarayanan and
               H.B. Sipma and
               Z. Manna},
  title     = {Scalable Analysis of Linear Systems Using Mathematical Programming.},
  booktitle = {VMCAI},
  year      = {2005},
}

@InProceedings{	  Manna05,
  author	= {Ben D'Angelo and Sriram Sankaranarayanan and C{\'e}sar
		  S{\'a}nchez and Will Robinson and Bernd Finkbeiner and
		  Henny B. Sipma and Sandeep Mehrotra and Zohar Manna},
  title		= {LOLA: Runtime Monitoring of Synchronous Systems.},
  booktitle	= {TIME},
  year		= {2005},
  pages		= {166-174},
  ee		= {http://dx.doi.org/10.1109/TIME.2005.26},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Manna69,
  author	= "Z. Manna",
  title		= "The correctness of programs",
  journal	= "Journal of Computer and Systems Sciences",
  volume	= "3(2)",
  pages		= "119-127",
  year		= "1969"
}

@Book{		  Manna72,
  author	= "Z. Manna",
  title		= "Mathematical Theory of Computation",
  publisher	= "McGraw-Hill",
  year		= "1972"
}

@Book{bradleybook,
  author	= {Aaron Bradley and Zohar Manna},
  title		= {The Calculus of Computation: Decision Procedures With Application To Verification},
  publisher = {Springer-Verlag},
  year	    = {2007}
}

@InCollection{	  Manna94,
  author	= "Z. Manna",
  title		= "Beyond model checking",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "220--221"
}

@InCollection{	  MannaPnueli83:icalp,
  author	= "Z. Manna and A. Pnueli",
  title		= "Proving precedence properties: the temporal way",
  booktitle	= "ICALP 83: Automata, Languages, and Programming",
  editor	= "J. Diaz",
  series	= "LNCS 154",
  publisher	= "Springer-Verlag",
  year		= "1983",
  pages		= "491--512"
}

@InProceedings{	  MannaPnueli83:popl,
  author	= "Z. Manna and A. Pnueli",
  title		= "How to cook a temporal proof system for your pet language",
  booktitle	= "Proceedings of the Tenth Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1983",
  pages		= "141--154"
}

@Article{	  MannaPnueli84,
  author	= "Z. Manna and A. Pnueli",
  title		= "Adequate proof principles for invariance and liveness
		  properties of concurrent programs",
  journal	= "Science of Computer Programming",
  volume	= "4",
  number	= "3",
  year		= "1984",
  pages		= "257--289"
}

@InCollection{	  MannaPnueli89:icalp,
  author	= "Z. Manna and A. Pnueli",
  title		= "Completing the temporal picture",
  booktitle	= "ICALP 89: Automata, Languages, and Programming",
  editor	= "G. Ausiello and M. {Dezani-Ciancaglini} and Ronchi Della
		  Rocca, S.",
  series	= "LNCS 372",
  publisher	= "Springer-Verlag",
  year		= "1989",
  pages		= "534--558"
}

@InCollection{	  MannaPnueli89:rex,
  author	= "Z. Manna and A. Pnueli",
  title		= "The anchored version of the temporal framework",
  booktitle	= "Linear Time, Branching Time, and Partial Order in Logics
		  and Models for Concurrency",
  editor	= "de Bakker, J.W. and de Roever, W.-P. and G. Rozenberg",
  series	= "LNCS 354",
  publisher	= "Springer-Verlag",
  year		= "1989",
  pages		= "201--284"
}

@InProceedings{	  MannaPnueli90,
  author	= "Z. Manna and A. Pnueli",
  title		= "A hierarchy of temporal properties",
  booktitle	= "Proceedings of the Ninth Annual Symposium on Principles of
		  Distributed Computing",
  publisher	= "ACM Press",
  year		= "1990",
  pages		= "377--408"
}

@Book{		  MannaPnueli92,
  author	= "Z. Manna and A. Pnueli",
  title		= "The Temporal Logic of Reactive and Concurrent Systems:
		  Specification",
  publisher	= "Springer-Verlag",
  year		= "1992"
}

@Book{		  MannaPnueli92vol1,
  author	= "Z. Manna and A. Pnueli",
  title		= "The Temporal Logic of Reactive and Concurrent Systems:
		  Specification",
  publisher	= "Springer-Verlag",
  year		= "1992"
}

@Article{	  MannaPnueli93acta,
  author	= "Z. Manna and A. Pnueli",
  title		= "Models for reactivity",
  journal	= "Acta Informatica",
  volume	= "30",
  number	= "2",
  year		= "1993",
  pages		= "609--678"
}

@InCollection{	  MannaPnueli93hybrid,
  author	= "Z. Manna and A. Pnueli",
  title		= "Verifying hybrid systems",
  booktitle	= "Hybrid Systems",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "LNCS 736",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "4--35"
}

@Book{		  MannaPnueli95,
  author	= "Z. Manna and A. Pnueli",
  title		= "Temporal Verification of Reactive Systems: Safety",
  publisher	= "Springer-Verlag",
  year		= "1995"
}

@Article{	  MannaWolper84,
  author	= "Z. Manna and P. Wolper",
  title		= "Synthesis of communicating processes from temporal-logic
		  specifications",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "6",
  number	= "1",
  year		= "1984",
  pages		= "68--93"
}

@Unpublished{	  Mars,
  author	= "Mars Climate Orbiter Mishap Investigation Board",
  title		= "Phase I Report, 10 Nov. 1999",
  note		= "\url{ftp://ftp.hq.nasa.gov/pub/pao/reports/1999/MCO_report.pdf}"
		  
}

@Article{	  Martin75,
  author	= "D.A. Martin",
  title		= "{Borel} determinacy",
  journal	= "Annals of Mathematics",
  volume	= 102,
  pages		= "363--371",
  year		= 1975
}

@Article{	  Martin90,
  author	= "D.A. Martin",
  title		= "An extension of {Borel} determinacy",
  journal	= "Annals of Pure and Applied Logic",
  volume	= 49,
  pages		= "279--293",
  year		= 1990
}

@Article{	  Martin98,
  author	= "D.A. Martin",
  title		= "The determinacy of {Blackwell} games",
  journal	= "The Journal of Symbolic Logic",
  volume	= 63,
  number	= 4,
  pages		= "1565--1581",
  publisher	= "Association for Symbolic Logic",
  year		= 1998
}

@InCollection{	  Mazurkiewics89,
  author	= "A. Mazurkiewics",
  title		= "Basic notions of trace theory",
  booktitle	= "Linear Time, Branching Time, and Partial Order in Logics
		  and Models for Concurrency",
  editor	= "de Bakker, J.W. and de Roever, W.-P. and G. Rozenberg",
  series	= "LNCS 354",
  publisher	= "Springer-Verlag",
  year		= "1989",
  pages		= "285--363"
}

@Article{	  MC81,
  author	= "J. Misra and K.M. Chandy",
  title		= "Proofs of networks of processes",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "SE-7",
  number	= "4",
  pages		= "417--426",
  year		= "1981"
}

@Article{	  mciver01,
  author	= "A. {McIver} and C. Morgan",
  title		= "Demonic, angelic and unbounded probabilistic choices in
		  sequential programs",
  journal	= "Acta Informatica",
  volume	= "37",
  number	= "4/5",
  year		= "2001",
  pages		= "329--354"
}

@InProceedings{	  mciver98,
  author	= "A. {McIver}",
  title		= "Reasoning About Efficiency Within a Probabilitic
		  $\mu$-calculus",
  booktitle	= "Proceedings of {PROBMIV}",
  year		= 1998,
  note		= "Technical Report CSR-98-4, University of Birmingham,
		  School of Computer Science",
  pages		= "45--58"
}

@InCollection{	  McManisVaraiya94,
  author	= "J. McManis and P. Varaiya",
  title		= "Suspension automata: a decidable class of hybrid automata",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "105--117"
}

@Article{	  McMillan00,
  author	= "K.L. McMillan",
  title		= "A methodology for hardware verification using
		  compositional model checking",
  journal	= "Sci.\ Comput.\ Program.",
  volume	= "37",
  pages		= "279-309",
  year		= "2000"
}

@InProceedings{	  McMillan01,
  author	= {Kenneth L. McMillan},
  title		= {Parameterized Verification of the FLASH Cache Coherence
		  Protocol by Compositional Model Checking},
  booktitle	= {CHARME 01: Correct Hardware Design and Verification},
  series	= {LNCS 2144},
  publisher	= {Springer},
  pages		= {179--195},
  year		= {2001}
}

@InCollection{	  McMillan03,
  author	= "K.L. McMillan",
  title		= "Interpolation and {SAT}-based model checking",
  booktitle	= "CAV 03: Computer-aided Verification",
  series	= "Lecture Notes in Computer Science 2725",
  publisher	= "Springer",
  year		= "2003",
  pages		= "1--13"
}
@article{McMillanTCS,
  author    = {Kenneth L. McMillan},
  title     = {An interpolating theorem prover.},
  journal   = {Theor. Comput. Sci.},
  volume    = {345},
  number    = {1},
  year      = {2005},
  pages     = {101-121},
  ee        = {http://dx.doi.org/10.1016/j.tcs.2005.07.003},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  McMillan04,
  author	= {Kenneth L. McMillan},
  title		= {An Interpolating Theorem Prover.},
  booktitle	= {TACAS: Tools and Algorithms for the Construction and
		  Analysis of Systems},
  year		= {2004},
  pages		= {16-30}
}

@inproceedings{McMillanTACAS05,
  author    = {Kenneth L. McMillan},
  title     = {Applications of Craig Interpolants in Model Checking.},
  booktitle = {TACAS},
  year      = {2005},
  pages     = {1-12},
  ee        = {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3440{\&}spage=1},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@InCollection{	  McMillan06,
  author	= "K. L. McMillan",
  title		= "Lazy Abstraction with Interpolants",
  booktitle	= "CAV",
  year		= "2006"
}

@Book{		  McMillan93,
  author	= "K.L. McMillan",
  title		= "Symbolic Model Checking: An Approach to the
		  State-Explosion Problem",
  publisher	= "Kluwer Academic Publishers",
  year		= "1993"
}

@InCollection{	  McMillan94,
  author	= "K.L. McMillan",
  title		= "Hierarchical representations of discrete functions, with
		  application to model checking",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "41--54"
}

@InCollection{	  McMillan97,
  author	= "K.L. Mc{M}illan",
  title		= "A compositional rule for hardware design refinement",
  booktitle	= "CAV 97: Computer-aided Verification",
  series	= "LNCS 1254",
  publisher	= "Springer",
  year		= "1997",
  pages		= "24--35"
}

@InProceedings{	  McMillanQadeerSaxe00,
  author	= "K.L. McMillan and S. Qadeer and J. Saxe",
  title		= "Induction in compositional model checking",
  booktitle	= "CAV 00: Computer-Aided Verification",
  series	= "LNCS",
  publisher	= "Springer",
  pages		= "312-327",
  year		= "2000"
}

@Article{	  McNaughton66,
  author	= "R. McNaughton",
  title		= "Testing and generating infinite sequences by a finite
		  automaton",
  journal	= "Information and Control",
  volume	= "9",
  number	= "5",
  year		= "1966",
  pages		= "521--530"
}

@Article{	  McNaughton93,
  author	= "R. McNaughton",
  title		= "Infinite games played on finite graphs",
  journal	= "Annals of Pure and Applied Logic",
  volume	= "65",
  year		= "1993",
  pages		= "149--184"
}

@Book{		  McNaughtonPapert71,
  author	= "R. McNaughton and S. Papert",
  title		= "Counter-free Automata",
  publisher	= "The MIT Press",
  year		= "1971"
}

@InProceedings{	  MDNM00,
  author	= "H. Matsuno and A. Doi and M. Nagasaki and S. Miyano",
  title		= "Hybrid petri net representation of gene regulatory
		  network",
  booktitle	= "Proceedings of the Pacific Symposium of Biocomputing (5)",
  pages		= "338--349",
  year		= "2000"
}

@InCollection{	  MelliarSmith89,
  author	= "{Melliar-Smith}, P.M.",
  title		= "Extending interval logic to real-time systems",
  booktitle	= "Temporal Logic in Specification",
  editor	= "B. Banieqbal and H. Barringer and A. Pnueli",
  series	= "LNCS 398",
  publisher	= "Springer-Verlag",
  year		= "1989",
  pages		= "224--242"
}

@InProceedings{	 MandelbaumWalker03,
  author	= {Yitzhak Mandelbaum and David Walker and Robert Harper},
  title		= {An effective theory of type refinements.},
  booktitle	= {ICFP},
  year		= {2003},
  pages		= {213-225},
  ee		= {http://doi.acm.org/10.1145/944725},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  MerlinFarber76,
  author	= "P.M. Merlin and D.J. Farber",
  title		= "Recoverability of communication protocols: implications of
		  a theoretical study",
  journal	= "IEEE Transactions on Communications",
  volume	= "COM-24",
  number	= "9",
  year		= "1976",
  pages		= "1036--1043"
}

@InProceedings{	  Metal,
  author	= "S. Hallem and B. Chelf and Y. Xie and D.R. Engler",
  title		= "A System and Language for Building System-Specific, Static
		  Analyses",
  booktitle	= "PLDI 02: Programming Language Design and Implementation",
  pages		= "69--82",
  publisher	= "ACM",
  year		= "2002"
}

@Article{	  Metropolis,
  author	= "F. Balarin and Y. Watanabe and Harry Hsieh and L. Lavagno
		  and C. Passerone and A. Sangiovanni-Vincentelli",
  title		= "Metropolis: An Integrated Electronic System Design
		  Environment",
  journal	= "IEEE Computer",
  pages		= "49--62",
  year		= "2003"
}

@Article{	  Meyer92,
  author	= {B. Meyer},
  title		= {Applying "Design by Contract".},
  journal	= {IEEE Computer},
  volume	= {25},
  number	= {10},
  year		= {1992},
  pages		= {40-51},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@book{ MeyerBook,
 author = {B. Meyer},
 title = {Eiffel: the language},
 year = {1992},
 isbn = {0-13-247925-7},
 publisher = {Prentice-Hall, Inc.},
 address = {Upper Saddle River, NJ, USA},
 }
 
@Unpublished{	  MichalBook,
  author	= "M. Pezze{`} and M. Young",
  title		= "Software Test and Analysis: Process, Principles, and
		  Techniques",
  note		= "Manuscript",
  year		= "2003"
}

@InProceedings{	  Millstein05,
  author	= "B. Chin and S. Markstrum and T. Millstein",
  title		= "Semantic Type Qualifiers",
  booktitle	= "PLDI",
  publisher	= {ACM},
  year		= "2005"
}

@InProceedings{	  Milner71,
  author	= "R. Milner",
  title		= "An algebraic definition of simulation between programs",
  booktitle	= "Second International Joint Conference on Artificial
		  Intelligence",
  publisher	= "The British Computer Society",
  year		= "1971",
  pages		= "481--489"
}

@Book{		  Milner80,
  author	= "R. Milner",
  title		= "A Calculus of Communicating Systems",
  series	= "LNCS 92",
  publisher	= "Springer-Verlag",
  year		= "1980"
}

@Article{	  Milner83,
  author	= "R. Milner",
  title		= "Calculi for synchrony and asynchrony",
  journal	= "Theoretical Computer Science",
  volume	= "25",
  number	= "3",
  year		= "1983",
  pages		= "267--310"
}

@Book{		  Milner89,
  author	= "R. Milner",
  title		= "Communication and Concurrency",
  publisher	= "Prentice-Hall",
  year		= "1989"
}

@InCollection{	  Milner90,
  author	= "R. Milner",
  title		= "Operational and Algebraic Semantics of Concurrent
		  Processes",
  booktitle	= "Handbook of Theoretical Computer Science",
  editor	= "J. van Leeuwen",
  publisher	= "Elsevier Science Publishers (North-Holland)",
  pages		= "1202--1242",
  volume	= "B",
  address	= "Amsterdam",
  year		= 1990
}

@Book{		  Mitchell96,
  author	= "J.C. Mitchell",
  title		= "Foundations for Programming Languages",
  publisher	= "MIT Press",
  year		= "1996"
}

@InProceedings{	  mitchell97,
  author	= "John Mitchell and Mark Mitchell and Ulrich Stern",
  title		= "Automated analysis of cryptographic protocols using
		  Murphi",
  booktitle	= "IEEE Symposium on Security and Privacy",
  publisher	= "IEEE Computer Society Press",
  year		= "1997",
  pages		= "122--137"
}

@InProceedings{	  MKP96,
  author	= "Z. Manna and Y. Kesten and A. Pnueli",
  title		= "Verifying clocked transition systems",
  booktitle	= "Hybrid Systems III",
  editor	= "R. Alur and T.A. Henzinger and E.D. Sontag",
  series	= "LNCS 1066",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "13--40"
}

@InProceedings{	  MM02,
  author	= "A. {McIver} and C. Morgan",
  title		= "Games, probability, and the quantitative $\mu$-calculus
		  $q\mu$",
  booktitle	= "LPAR 02: Logic Programming and Automated Reasoning",
  publisher	= "Springer-Verlag",
  series	= "Lecture Notes in Computer Science",
  volume	= "2514",
  pages		= "292--310",
  year		= 2002
}

@InCollection{	  MMP92,
  author	= "O. Maler and Z. Manna and A. Pnueli",
  title		= "From timed to hybrid systems",
  booktitle	= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "LNCS 600",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "447--484"
}

@InCollection{	  MMT91,
  author	= "M. Merritt and F. Modugno and M.R. Tuttle",
  title		= "Time-constrained automata",
  booktitle	= "CONCUR 91: Theories of Concurrency",
  editor	= "J.C.M. Baeten and J.F. Groote",
  series	= "LNCS 527",
  publisher	= "Springer-Verlag",
  year		= "1991",
  pages		= "408--423"
}

@Article{	  MNV03,
  author	= "D.A. Martin and I. Neeman and M. Vervoort",
  title		= "The strength of {Blackwell} determinacy",
  journal	= "The Journal of Symbolic Logic",
  volume	= 68,
  number	= 2,
  pages		= "615--636",
  publisher	= "Association for Symbolic Logic",
  year		= 2003
}

@InCollection{	  Mocha,
  author	= "R. Alur and T.A. Henzinger and F.Y.C. Mang and S. Qadeer
		  and S.K. Rajamani and S. Tasiran",
  title		= "{{\sc Mocha}}: Modularity in model checking",
  booktitle	= "CAV 98: Computer-Aided Verification",
  editor	= "A.J. Hu and M.Y. Vardi",
  series	= "Lecture Notes in Computer Science 1427",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "521--525"
}

@InCollection{	  MollerTofts90,
  author	= "F. Moller and C. Tofts",
  title		= "A temporal calculus of communicating processes",
  booktitle	= "CONCUR 90: Theories of Concurrency",
  editor	= "J.C.M. Baeten and J.W. Klop",
  series	= "LNCS 458",
  publisher	= "Springer-Verlag",
  year		= "1990",
  pages		= "401--415"
}

@InProceedings{	  Mondrian,
  author	= "E. Witchel and J. Cates and K. Asanovi\'c",
  title		= "Mondrian Memory protection",
  booktitle	= "ASPLOS 02",
  publisher	= "ACM",
  year		= 2002
}

@InProceedings{	  Monniaux01a,
  author	= "D. Monniaux",
  title		= "Backwards abstract interpretation of probabilistic
		  programs",
  booktitle	= "ESOP 01: European Symposium on Programming",
  series	= "LNCS",
  publisher	= "Springer",
  year		= "2001",
  pages		= "367-382"
}

@InProceedings{	  Monniaux01b,
  author	= "D. Monniaux",
  title		= "An abstract Monte-Carlo method for the analysis of
		  probabilistic programs",
  booktitle	= "POPL 01: Principles of Programming Languages",
  publisher	= "ACM",
  year		= "2001",
  pages		= "93-101"
}

@InProceedings{	  Monniaux03a,
  author	= "D. Monniaux",
  title		= "Abstract Interpretation of Programs as Markov Decision
		  Processes",
  booktitle	= "SAS 03: Static Analysis Symposium",
  series	= "LNCS",
  publisher	= "Springer",
  year		= "2003",
  pages		= "237-254"
}

@InProceedings{	  Monniaux03b,
  author	= "D. Monniaux",
  title		= "Abstraction of Expectation Functions using Gaussian
		  distributions",
  booktitle	= "VMCAI 03: Verification, Model Checking, and Abstract
		  Interpretation",
  series	= "LNCS",
  publisher	= "Springer",
  year		= "2003",
  pages		= "161-173"
}

@InProceedings{	  MOPS,
  author	= "H. Chen and D. Wagner",
  title		= "{MOPS}: an infrastructure for examining security
		  properties of software",
  booktitle	= "ACM Conference on Computer and Communications Security
		  2002",
  pages		= "235-244",
  year		= 2002
}

@InCollection{	  Morris82,
  author	= "J. M. Morris",
  title		= "A general axiom of assignment",
  booktitle	= "Theoretical Foundations of Programming Methodology",
  series	= "Lecture Notes of an International Summer School",
  publisher	= "D. Reidel Publishing Company",
  year		= "1982",
  pages		= "25-34"
}

@InCollection{	  Mostowski84,
  author	= "A.W. Mostowski",
  title		= "Regular expressions for infinite trees and a standard form
		  of automata",
  booktitle	= "5th Symposium on Computation Theory",
  series	= "LNCS 208",
  publisher	= "Springer-Verlag",
  year		= "1984",
  pages		= "157--168"
}

@TechReport{	  Mostowski91,
  author	= "A.W. Mostowski",
  title		= "Games with forbidden positions",
  institution	= "Uniwersytet Gda{\'n}ski, Instytyt Matematyki",
  number	= "78",
  year		= "1991"
}

@Article{	  Moszkowski85,
  author	= "B. Moszkowski",
  title		= "A temporal logic for multi-level reasoning about hardware",
  journal	= "IEEE Computer",
  volume	= "18",
  number	= "2",
  year		= "1985",
  pages		= "10--19"
}

@InCollection{	  MP67,
  author	= "J. Mc{Carthy} and J. Painter",
  title		= "Correctness of a compiler for arithmetic expressions",
  booktitle	= "Proc.\ Symposia in Applied Mathematics",
  publisher	= "American Mathematical Society",
  year		= "1967"
}

@InCollection{	  MPS95,
  author	= "O. Maler and A. Pnueli and J. Sifakis",
  title		= "On the synthesis of discrete controllers for timed
		  systems",
  booktitle	= "STACS 95: Theoretical Aspects of Computer Science",
  series	= "LNCS 900",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "229--242"
}


@inproceedings{Mycroft80,
  author    = {A. Mycroft},
  title     = {The Theory and Practice of Transforming Call-by-need into
               Call-by-value},
  booktitle = {ESOP},
  year      = {1980},
  pages     = {269-281},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@inproceedings{Might07,
  author    = {M. Might},
  title     = {Logic-flow analysis of higher-order programs},
  booktitle = {POPL},
  year      = {2007},
  pages     = {185-198},
  ee        = {http://doi.acm.org/10.1145/1190216.1190247},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Shivers88,
  author    = {Olin Shivers},
  title     = {Control-Flow Analysis in {S}cheme},
  booktitle = {PLDI},
  year      = {1988},
}

@inproceedings{Mycroft84,
  author    = {Alan Mycroft},
  title     = {Polymorphic Type Schemes and Recursive Definitions},
  booktitle = {Symposium on Programming},
  year      = {1984},
  pages     = {217-228}
}

@Book{		  Muchnick,
  author	= "S. Muchnick",
  title		= "Advanced Compiler Design and Implementation",
  publisher	= "Morgan-Kaufman",
  year		= "1997"
}

@Book{		  Muchnik,
  author	= "S.S. Muchnik",
  title		= "Advanced Compiler Design and Implementation",
  publisher	= "Morgan Kaufman",
  year		= "1997"
}

@InProceedings{	  Murphi96,
  author	= "D.L. Dill",
  title		= "The {Murphi} Verification System",
  booktitle	= "CAV 96: Computer-Aided Verification",
  publisher	= "Springer-Verlag",
  series	= "Lecture Notes in Computer Science",
  volume	= "1102",
  pages		= "390--393",
  year		= 1996
}

@InProceedings{	  Myers99,
  author	= "A.C. Myers",
  title		= "{JFlow}: Practical mostly-static information flow control",
  booktitle	= "POPL 99: Principles of Programming Languages",
  year		= "1999",
  pages		= "228-241",
  publisher	= "ACM"
}

@Book{		  Myers:1979,
  author	= "G.J. Myers ",
  title		= "The Art of Software Testing",
  publisher	= "Wiley",
  year		= "1979"
}

@InProceedings{	  NAC99,
  title		= "Data flow analysis for checking properties of concurrent
		  {Java} programs",
  author	= "G. Naumovich and G.S. Avrunin and L.A. Clarke",
  booktitle	= "Proceedings of the 21st International Conference on
		  Software Engineering",
  pages		= "399--410",
  year		= 1999
}

@InProceedings{	  Naik05,
  author	= {Mayur Naik and Jens Palsberg},
  title		= {A Type System Equivalent to a Model Checker.},
  booktitle	= {ESOP},
  year		= {2005},
  pages		= {374-388},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3444{\&}spage=374}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Unpublished{	  NaikPalsberg04,
  author	= "M. Naik and J. Palsberg",
  title		= "A type system equivalent to a model checker",
  year		= "2004"
}

@InCollection{	  NaikSistla94,
  author	= "V.G. Naik and A.P. Sistla",
  title		= "Modeling and verification of a real-life protocol using
		  symbolic model checking",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "194--206"
}

@InCollection{	  Namjoshi01,
  author	= "K. Namjoshi",
  title		= "Certifying model checkers",
  booktitle	= "CAV 01: Computer Aided Verification",
  series	= "LNCS 2102",
  publisher	= "Springer",
  year		= "2001",
  pages		= "2--13"
}

@InProceedings{	  NarayanaAaby88,
  author	= "K.T. Narayana and A.A. Aaby",
  title		= "Specification of real-time systems in real-time temporal
		  interval logic",
  booktitle	= "Proceedings of the Ninth Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1988",
  pages		= "86--95"
}

@Article{	  Nash50,
  author	= "J. Nash",
  title		= "Equilibrium points in $n$-person games",
  journal	= "Proceedings of the National Academny of Sciences USA",
  volume	= 36,
  pages		= "48--49",
  year		= 1950
}

@InProceedings{	  NassorVidalNaquet92,
  author	= "E. Nassor and {Vidal-Naquet}, G.",
  title		= "Suitability of the propositional temporal logic to express
		  properties of real-time systems",
  booktitle	= "TACS 92: Theoretical Aspects of Computer Science",
  series	= "LNCS",
  publisher	= "Springer-Verlag",
  year		= "1992"
}

@InProceedings{	  NE00,
  author	= "L. P. Nieto and J. Esparza",
  title		= "Verifying Single and Multi-mutator Garbage Collectors with
		  {O}wicki-{G}ries in {I}sabelle/{HOL}",
  booktitle	= "MFCS 2000: Mathematical Foundations of Computer Science",
  publisher	= "Springer",
  pages		= "619-628",
  year		= "2000"
}

@InProceedings{	  Necula00,
  author	= {G.C. Necula},
  title		= {Translation validation for an optimizing compiler},
  booktitle	= "PLDI 00: Programming Languages Design and Implementation",
  publisher	= {ACM},
  year		= {2001},
  pages		= {83-95}
}

@InProceedings{	  Necula97,
  author	= {G.C. Necula},
  title		= {Proof carrying code},
  booktitle	= "POPL 97: Principles of Programming Languages",
  publisher	= {ACM},
  year		= {1997},
  pages		= {106-119}
}

@InProceedings{	  NeculaLee00,
  title		= {Proof Generation in the {T}ouchstone Theorem Prover},
  author	= {G. C. Necula and P. Lee},
  booktitle	= "CADE 00: Computer-Aided Deduction",
  pages		= "25--44",
  series	= "LNCS 1831",
  publisher	= "Springer",
  year		= "2000"
}

@InProceedings{	  NeculaLeeLICS98,
  author	= "George C. Necula and Peter Lee",
  title		= "Efficient Representation and Validation of Proofs",
  booktitle	= "Thirteenth Annual Symposium on Logic in Computer Science",
  address	= "Indianapolis",
  publisher	= "IEEE Computer Society Press",
  month		= jun,
  year		= "1998",
  pages		= "93--104"
}

@InProceedings{	  NeculaPCC-POPL97,
  author	= "G.C. Necula",
  title		= "Proof-Carrying Code",
  booktitle	= "Principles of Programming Languages",
  pages		= "106--119",
  publisher	= "ACM Press",
  year		= "1997"
}

@InProceedings{	  NeculaSAS06,
  author	= "Bor-Yuh Evan Chang and Matthew Harren and George C.
		  Necula",
  title		= "Analysis of Low-Level Code Using Cooperating Decompilers",
  booktitle	= "SAS 06: Static Analysis Symposium",
  series	= "LNCS",
  pages		= "XXX-YYY",
  publisher	= "Springer-Verlag",
  year		= "2006"
}

@article{NelsonOppen,
 author = {Nelson, Greg and Oppen, Derek C.},
 title = {Simplification by Cooperating Decision Procedures},
 journal = {TOPLAS},
 year = {1979},
}

@TechReport{	  Nelson81,
  author	= "G. Nelson",
  title		= "Techniques for program verification",
  institution	= "Xerox Palo Alto Research Center",
  number	= "CSL81-10",
  year		= 1981
}

@Book{		  NemhauserWolsey,
  author	= "G.L. Nemhauser and L.A. Wolsey",
  title		= "Integer and Combinatorial Optimization",
  publisher	= "Wiley",
  year		= "1988"
}

@InCollection{	  NerodeKohn93a,
  author	= "A. Nerode and W. Kohn",
  title		= "Multiple-agent hybrid control architecture",
  booktitle	= "Hybrid Systems",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "LNCS 736",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "297--316"
}

@InCollection{	  NerodeKohn93b,
  author	= "A. Nerode and W. Kohn",
  title		= "Models for hybrid systems: automata, topologies,
		  controllability, observability",
  booktitle	= "Hybrid Systems",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "LNCS 736",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "317--356"
}

@InProceedings{	  nesC,
  author	= "D. Gay and P. Levis and R. von Behren and M. Welsh and E.
		  Brewer and D. Culler",
  title		= "The {nesC} language: {A} holistic approach to networked
		  embedded systems",
  booktitle	= "PLDI 2003: Programming Languages Design and
		  Implementation",
  publisher	= {ACM},
  pages		= {1--11},
  year		= "2003"
}

@InCollection{	  NicollinSifakis91,
  author	= "X. Nicollin and J. Sifakis",
  title		= "An overview and synthesis on timed process algebras",
  booktitle	= "CAV 91: Computer-aided Verification",
  editor	= "K.G. Larsen and A. Skou",
  series	= "LNCS 575",
  publisher	= "Springer-Verlag",
  year		= "1991",
  pages		= "376--398"
}

@Book{		  Nipkow,
  title		= "Term rewriting and all that",
  author	= "F. Baader and T. Nipkow",
  publisher	= "Cambridge University Press",
  year		= "1998"
}

@TechReport{	  nist,
  author	= "National Institute of Standards and Technology",
  title		= "The Economic Impact of Inadequate Frameworks for Software
		  Testing",
  institution	= {US Department of Commerce},
  number	= {Planning Report 02-3},
  year		= {2002}
}

@Article{	  nooks,
  author	= "Michael Swift and Brian Bershad and Henry Levy",
  title		= "Improving the Reliability of Commodity Operating Systems",
  journal	= "ACM Transactions on Computer Systems",
  volume	= "23",
  number	= "5",
  year		= "2005",
  pages		= "XXX--XXX"
}

@InCollection{	  NOSY93,
  author	= "X. Nicollin and A. Olivero and J. Sifakis and S. Yovine",
  title		= "An approach to the description and analysis of hybrid
		  systems",
  booktitle	= "Hybrid Systems I",
  editor	= "R.L. Grossman and A. Nerode and A.P. Ravn and H. Rischel",
  series	= "LNCS 736",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "149--178"
}

@phdthesis{norell07,
  author  = {U. Norell},
  title	  = {Towards a practical programming language based on dependent type theory},
  school  = {Chalmers},
  year	  = 2007,
  month	  = {September},
  address = {SE-412 96 G\"{o}teborg, Sweden}
}

@Book{		  NPW2002,
  author	= {T. Nipkow and L.C. Paulson and M. Wenzel},
  title		= {{Isabelle/HOL} --- A Proof Assistant for Higher-Order
		  Logic},
  publisher	= {Springer},
  series	= {Lecture Notes in Computer Science},
  volume	= 2283,
  year		= 2002
}

@Article{	  NPW81,
  author	= "M. Nielsen and G. Plotkin and G. Winskel",
  title		= "Petri nets, event structures, and domains, part~I",
  journal	= "Theoretical Computer Science",
  volume	= "13",
  year		= "1981",
  pages		= "85--108"
}

@InProceedings{	  NR01,
  author	= "G.C. Necula and S.P. Rahul",
  title		= "Oracle-based checking of untrusted software",
  booktitle	= "POPL 01: Principles of Programming Languages",
  publisher	= "ACM",
  pages		= {142--154},
  year		= "2001"
}

@InProceedings{	  NRSV90,
  author	= "X. Nicollin and J.-L. Richier and J. Sifakis and J.
		  Voiron",
  title		= "{\sc {A}tp}: an algebra for timed processes",
  booktitle	= "Proceedings of the IFIP WG2.2/2.3 Working Conference on
		  Programming Concepts and Methods",
  editor	= "M. Broy and C.B. Jones",
  publisher	= "Elsevier Science Publishers",
  year		= "1990",
  pages		= "415--442"
}

@InProceedings{	  NS95,
  author	= "S. {Nadjm-Tehrani} and J.-E. Str{\"o}mberg",
  title		= "Proving dynamic properties in an aerospace application",
  booktitle	= "Proceedings of the 16th Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1995",
  pages		= "2--10"
}

@Article{	  NSY92,
  author	= "X. Nicollin and J. Sifakis and S. Yovine",
  title		= "Compiling real-time specifications into extended automata",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "SE-18",
  number	= "9",
  year		= "1992",
  pages		= "794--804"
}

@Article{	  NSY93,
  author	= "X. Nicollin and J. Sifakis and S. Yovine",
  title		= "From {\sc {A}tp} to timed graphs and hybrid systems",
  journal	= "Acta Informatica",
  volume	= "30",
  year		= "1993",
  pages		= "181--202"
}

@Book{		  OBJ,
  title		= "The Algebraic Semantics of Imperative Programs",
  author	= "Joseph Goguen and Grant Malcolm",
  publisher	= "MIT Press",
  year		= "1997"
}

@Article{	  Olender92,
  author	= {Kurt M. Olender and Leon J. Osterweil},
  title		= {Interprocedural Static Analysis of Sequencing
		  Constraints.},
  journal	= {ACM Trans. Softw. Eng. Methodol.},
  volume	= {1},
  number	= {1},
  year		= {1992},
  pages		= {21-52},
  ee		= {http://doi.acm.org/10.1145/125489.122822},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  OmegaTestCACM,
  title		= {A practical algorithm for exact array dependence
		  analysis},
  author	= { W. Pugh},
  journal	= {Communications of the ACM},
  volume	= {35},
  number	= {8},
  month		= {August},
  year		= {1992},
  pages		= {102-114}
}

@Book{		  Oney99,
  author	= "W. Oney",
  title		= "Programming the Microsoft Windows Driver Model",
  publisher	= "Microsoft Press",
  year		= "1999"
}

@Article{	  Ornstein69,
  author	= "D. Ornstein",
  title		= "On the Existence of Stationary Optimal Strategies",
  journal	= "Proc.\ Am.\ Math.\ Soc.",
  volume	= 20,
  year		= 1969,
  pages		= "563--569"
}

@InProceedings{	  ORS92,
  author	= "S. Owre and J.M. Rushby and N. Shankar",
  title		= "{PVS}: {A} Prototype Verification System",
  booktitle	= "CADE 92: Computer-Aided Automatic Deduction",
  pages		= "748--752",
  year		= "1992",
  publisher	= "Springer-Verlag",
  series	= "Lecture Notes in Computer Science 607"
}

@Book{		  Ostroff90,
  author	= "J.S. Ostroff",
  title		= "Temporal Logic of Real-time Systems",
  publisher	= "Research Studies Press",
  year		= "1990"
}

@InCollection{	  OSY94,
  author	= "A. Olivero and J. Sifakis and S. Yovine",
  title		= "Using abstractions for the verification of linear hybrid
		  systems",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "81--94"
}

@Book{		  Owen95,
  author	= "G. Owen",
  title		= "Game Theory",
  publisher	= "Academic Press",
  year		= 1995
}

@Article{	  OwickiGries,
  author	= {S. Owicki and D. Gries},
  title		= {An axiomatic proof technique for parallel programs},
  journal	= {Acta Informatica},
  year		= 1976,
  volume	= {6(4)},
  pages		= {319--340}
}

@Article{	  OwickiGries76,
  author	= "S. Owicki and D. Gries",
  title		= "An axiomatic proof technique for parallel programs",
  journal	= "Acta Informatica",
  volume	= "6",
  number	= "4",
  year		= "1976",
  pages		= "319--340"
}

@article{Lamport78,
 author = {Leslie Lamport},
 title = {Time, clocks, and the ordering of events in a distributed system},
 journal = {Commun. ACM},
 volume = {21},
 number = {7},
 year = {1978},
 issn = {0001-0782},
 pages = {558--565},
 doi = {http://doi.acm.org/10.1145/359545.359563},
 publisher = {ACM Press},
 address = {New York, NY, USA},
 }



@Article{	  OwickiLamport82,
  author	= "S. Owicki and L. Lamport",
  title		= "Proving liveness properties of concurrent programs",
  journal	= "ACM Transactions on Programming Languages and Systems",
  volume	= "4",
  number	= "3",
  year		= "1982",
  pages		= "455--495"
}

@InProceedings{	  P-SAS00,
  author	= {A. Podelski},
  title		= {Model Checking as Constraint Solving},
  booktitle	= {SAS 00: Static Analysis},
  year		= 2000,
  series	= {LNCS 1824},
  publisher	= {Springer},
  pages		= {221-37}
}

@Article{	  PaigeTarjan87,
  author	= "R. Paige and R.E. Tarjan",
  title		= "Three partition-refinement algorithms",
  journal	= "SIAM Journal of Computing",
  volume	= "16",
  number	= "6",
  year		= "1987",
  pages		= "973--989"
}

@InProceedings{	  PALE,
  author	= {Anders Moller, Michael I. Schwartzbach},
  title		= {The Pointer Assertion Logic Engine},
  booktitle	= {PLDI 01: Programming Language Design and Implementation},
  pages		= {221--231},
  publisher	= {ACM},
  year		= {2001}
}

@InProceedings{	  Palsberg-visitorCalculus,
  author	= "J. Palsberg and T. van Drunen",
  title		= "Visitor-Oriented Programming",
  booktitle	= "FOOL 04: Foundations of Object-Oriented Languages",
  publisher	= "ACM",
  year		= "2004"
}

@InProceedings{	  PalsbergMa02,
  author	= "J. Palsberg and D. Ma",
  title		= "A Typed Interrupt Calculus",
  booktitle	= "FTRTFT 02: Formal Techniques in Real-Time and Fault
		  Tolerant Systems",
  pages		= "291--310",
  publisher	= "Springer-Verlag",
  series	= "LNCS 2469",
  year		= 2002
}

@InProceedings{	  PalsbergNaik,
  author	= "M. Naik and J. Palsberg",
  title		= "Compiling with code-size constraints",
  booktitle	= "LCTES-SCOPES 02",
  pages		= "109--126",
  publisher	= "ACM",
  year		= "2002"
}

@PhDThesis{	  Pareto00,
  author	= "Lars Pareto",
  title		= "Types for Crash Prevention",
  school	= "Chalmers University of Technology",
  year		= 2000
}

@Unpublished{	  Pareto96,
  author	= "Lars Pareto",
  title		= "Sized Types",
  note		= "M.S. Thesis, Chalmers University of Technology, 1996"
}

@Article{	  JPF,
  author	= {K. Havelund and T. Pressburger},
  title		= {Model Checking {Java} Programs using {Java} {P}athFinder},
  journal	= "Software Tools for Technology Transfer (STTT)",
  volume	= "2(4)",
  year		= {2000},
  pages		= {72-84}
}

@InCollection{	  PBV96,
  author	= "A. Puri and V. Borkar and P. Varaiya",
  title		= "$\varepsilon$-Approximation of differential inclusions",
  booktitle	= "Hybrid Systems III",
  editor	= "R. Alur and T.A. Henzinger and E.D. Sontag",
  series	= "LNCS 1066",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "362--376"
}

@InProceedings{	  PCC,
  author	= {George C. Necula},
  title		= {Proof carrying code},
  booktitle	= "POPL 97: Principles of Programming Languages",
  publisher	= {ACM},
  year		= {1997},
  pages		= {106-119}
}

@InProceedings{	  PDH99,
  title		= "Assume-guarantee model checking of software: {A}
		  comparative case study",
  author	= "C.S. Pasareanu and M.B. Dwyer and M. Huth",
  booktitle	= "SPIN 99: Theoretical and Practical Aspects of SPIN Model
		  Checking",
  series	= "LNCS 1680",
  publisher	= "Springer",
  year		= "1999",
  pages		= "168--183"
}

@Book{		  Peled,
  author	= "D. Peled",
  title		= "Software reliability methods",
  publisher	= "Springer",
  year		= 2001
}

@InCollection{	  Peled93,
  author	= "D. Peled",
  title		= "All from one, one for all: on model checking using
		  representatives",
  booktitle	= "CAV 93: Computer-aided Verification",
  editor	= "C. Courcoubetis",
  series	= "LNCS 697",
  publisher	= "Springer-Verlag",
  year		= "1993",
  pages		= "409--423"
}

@InProceedings{	  PeledICALP03,
  author	= "D. Peled",
  title		= "Model Checking and Testing Combined",
  booktitle	= "ICALP 2003: Automata, Languages and Programming",
  publisher	= "Springer",
  series	= "LNCS",
  volume	= "2719",
  pages		= "47--63",
  year		= "2003"
}

@InProceedings{	  PentiumBug,
  author	= "V. Pratt",
  title		= "Anatomy of the Pentium Bug",
  year		= 1995,
  booktitle	= "Theory and Practice of Software Development ({TAPSOFT})"
}

@Unpublished{	  Pfenning-lecture-notes,
  title		= {Computation and deduction},
  author	= "F. Pfenning",
  note		= "Lecture notes",
  year		= "1997"
}

@InProceedings{	  PicoRadio,
  author	= "J.L. da Silva Jr. and J. Shamberger and M.J. Ammer and C.
		  Guo and S. Li and R. Shah and T. Tuan and M. Sheets and
		  J.M. Rabaey and B. Nikolic and A. Sangiovanni-Vincentelli
		  and P. Wright",
  title		= "Design methodology for pico-radio networks",
  booktitle	= "DATE 01: Design Automation and Test in Europe",
  pages		= "314--323",
  publisher	= "IEEE",
  year		= "2001"
}

@Book{		  piercebook,
  author	= "B. C. Pierce",
  title		= "Types and Programming Languages",
  publisher	= "MIT Press",
  year		= "2002"
}

@inproceedings{Gulwani03,
  author    = {S. Gulwani and
               G.C. Necula},
  title     = {Discovering affine equalities using random interpretation},
  booktitle = {POPL},
  year      = {2003},
  pages     = {74-84},
  ee        = {http://doi.acm.org/10.1145/640128.604138},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{gulwaniPOPL08,
  author    = {S. Gulwani and
               B. McCloskey and
               A. Tiwari},
  title     = {Lifting abstract interpreters to quantified logical domains},
  booktitle = {POPL},
  year      = {2008},
  pages     = {235-246}
}
@inproceedings{cookCAV08,
  author    = {H. Yang and
               O. Lee and
               J. Berdine and
               C. Calcagno and
               B. Cook and
               D. Distefano and
               P. W. O'Hearn},
  title     = {Scalable Shape Analysis for Systems Code},
  booktitle = {CAV},
  year      = {2008},
  pages     = {385-398}
}

@inproceedings{ pierce-turner,
    author = "B. C. Pierce and D. N. Turner",
    title = "Local Type Inference",
    booktitle = "POPL",
    year = "1998"
}

@Book{		  Pinedo01,
  author	= "Pinedo, M.",
  title		= "Scheduling: Theory, Algorithms, and Systems",
  publisher	= "Prentice-Hall",
  year		= "2001"
}

@Unpublished{	  PITAC,
  author	= "President's Information Technology Advisory Committee
		  Report to the President",
  note		= "\url{http://www.ccic.gov/ac/report}",
  year		= "1999"
}

@InProceedings{	  Pnu85,
  author	= "A. Pnueli",
  title		= "Applications of Temporal Logic to the Specification and
		  Verification of Reactive Systems: A Survey of Current
		  Trends",
  booktitle	= "Proc. Advanced School on Current Trends in Concurrency",
  pages		= "510--584",
  publisher	= "Volume~224, LNCS, Springer-Verlag",
  address	= "Berlin",
  year		= "1985"
}

@InCollection{	  Pnu85a,
  author	= "A. Pnueli",
  title		= "In transition from global to modular temporal reasoning
		  about programs",
  booktitle	= "Logics and Models of Concurrent Systems",
  editor	= "K. Apt",
  series	= "{NATO} Advanced Summer Institutes",
  publisher	= "Springer-Verlag",
  year		= "1985",
  volume	= "F-13",
  pages		= "123--144"
}

@InProceedings{	  Pnueli77,
  author	= "A. Pnueli",
  title		= "The temporal logic of programs",
  booktitle	= "Proceedings of the 18th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1977",
  pages		= "46--57"
}

@Article{	  Pnueli81,
  author	= "A. Pnueli",
  title		= "The temporal semantics of concurrent programs",
  journal	= "Theoretical Computer Science",
  volume	= "13",
  number	= "1",
  year		= "1981",
  pages		= "45--60"
}

@InCollection{	  Pnueli84,
  author	= "A. Pnueli",
  title		= "In transition from global to modular temporal reasoning
		  about programs",
  booktitle	= "Logics and Models of Concurrent Systems",
  editor	= "K.R. Apt",
  publisher	= "Springer-Verlag",
  year		= "1984",
  pages		= "123--144"
}

@InCollection{	  Pnueli86,
  author	= "A. Pnueli",
  title		= "Applications of temporal logic to the specification and
		  verification of reactive systems: a survey of current
		  trends",
  booktitle	= "Current Trends in Concurrency",
  editor	= "de Bakker, J.W. and de Roever, W.-P. and G. Rozenberg",
  series	= "LNCS 224",
  publisher	= "Springer-Verlag",
  year		= "1986",
  pages		= "510--584"
}

@InProceedings{	  PnueliDeRoever82,
  author	= "A. Pnueli and de Roever, W.-P.",
  title		= "Rendez-vous with {Ada}: a proof-theoretical view",
  booktitle	= "Proceedings of the SIGPLAN AdaTEC Conference on Ada",
  publisher	= "ACM Press",
  year		= "1982",
  pages		= "129--137"
}

@InCollection{	  PnueliHarel88,
  author	= "A. Pnueli and E. Harel",
  title		= "Applications of temporal logic to the specification of
		  real-time systems",
  booktitle	= "Formal Techniques in Real-time and Fault-tolerant Systems",
  editor	= "M. Joseph",
  series	= "LNCS 331",
  publisher	= "Springer-Verlag",
  year		= "1988",
  pages		= "84--98"
}

@InProceedings{	  PnueliRosner89,
  author	= "A. Pnueli and R. Rosner",
  title		= "On the synthesis of a reactive module",
  booktitle	= "Proceedings of the 16th Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1989",
  pages		= "179--190"
}

@InProceedings{	  PnueliXuZuck02,
  author	= {Amir Pnueli and Jessie Xu and Lenore D. Zuck},
  title		= {Liveness with (0, 1, infty)-Counter Abstraction.},
  booktitle	= {CAV},
  year		= {2002},
  pages		= {107-122},
  ee		= {http://link.springer.de/link/service/series/0558/bibs/2404/24040107.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  PODC90,
  author	= "T.A. Henzinger",
  title		= "Half-order modal logic: how to prove real-time properties",
  booktitle	= "Proceedings of the Ninth Annual Symposium on Principles of
		  Distributed Computing",
  publisher	= "ACM Press",
  year		= "1990",
  pages		= "281--296"
}

@InProceedings{	  PODC91,
  author	= "R. Alur and T. Feder and T.A. Henzinger",
  title		= "The benefits of relaxing punctuality",
  booktitle	= "Proceedings of the Tenth Annual Symposium on Principles of
		  Distributed Computing",
  publisher	= "ACM Press",
  year		= "1991",
  pages		= "139--152"
}

@Article{	  PODC91j,
  author	= "R. Alur and T. Feder and T.A. Henzinger",
  title		= "The benefits of relaxing punctuality",
  journal	= "Journal of the ACM",
  volume	= "43",
  number	= "1",
  year		= "1996",
  pages		= "116--146"
}

@Book{		  Polis,
  author	= "F. Balarin and M. Chiodo and P. Giusto and H. Hsieh and A.
		  Jurecska and L. Lavagno and C. Passerone and A.
		  Sangiovanni-Vincentelli and E. Sentovich and K. Suzuki and
		  B. Tabbara",
  title		= "Hardware-Software Co-Design of Embedded Systems: The
		  {Polis} Approach",
  publisher	= "Kluwer Academic Press",
  year		= "1997"
}

@InCollection{	  Polyglot,
  author	= "N. Nystrom and M.R. Clarkson and A.C. Myers",
  title		= "Polyglot: An Extensible Compiler Framework for {Java}",
  booktitle	= "CC 03: Compiler Construction",
  series	= "Lecture Notes in Computer Science 2622",
  pages		= "138--152",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  POPL07lock,
  author	= "Michael Emmi and Jeffrey Fischer and Ranjit Jhala and Rupak Majumdar",
  title		= "Interprocedural Analysis of Asynchronous Programs",
  booktitle	= "Proceedings of the 34th Annual Symposium on Principles of Programming Languages",
  publisher	= "ACM Press",
  pages		= "to appear",
  year		= "2007"
}

@InProceedings{	  POPL07events,
  author	= "Ranjit Jhala and Rupak Majumdar",
  title		= "Interprocedural Analysis of Asynchronous Programs",
  booktitle	= "Proceedings of the 34th Annual Symposium on Principles of Programming Languages",
  publisher	= "ACM Press",
  pages		= "to appear",
  year		= "2007"
}
@InProceedings{	  POPL91,
  author	= "T.A. Henzinger and Z. Manna and A. Pnueli",
  title		= "Temporal proof methodologies for real-time systems",
  booktitle	= "Proceedings of the 18th Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1991",
  pages		= "353--366"
}

@Article{	  POPL91j,
  author	= "T.A. Henzinger and Z. Manna and A. Pnueli",
  title		= "Temporal proof methodologies for timed transition systems",
  journal	= "Information and Computation",
  volume	= "112",
  number	= "2",
  year		= "1994",
  pages		= "273--337"
}

@Article{	  Post44,
  author	= "E. Post",
  title		= "Recursively enumerable sets of positive integers and their
		  decision problems",
  journal	= "Bulletin of the AMS",
  volume	= "50",
  year		= "1944",
  pages		= "284--316"
}

@inproceedings{   Pottier96,
  author 	= {F. Pottier},
  title 	= {Simplifying subtyping constraints},
  booktitle 	= {ICFP},
  year 		= {1996},
  isbn 		= {0-89791-770-7},
  location 	= {Philadelphia, Pennsylvania, United States},
  doi 		= {http://doi.acm.org/10.1145/232627.232642},
  publisher 	= {ACM Press},
  address 	= {New York, NY, USA},
}


@InProceedings{	  PR79,
  author	= "G.L. Peterson and J.H. Reif",
  title		= "Multiple-Person Alternation",
  booktitle	= "Proc. 20st IEEE Symp. on Foundation of Computer Science",
  pages		= "348--363",
  year		= 1979
}

@InProceedings{	  PR89b,
  author	= "A. Pnueli and R. Rosner",
  title		= "On the Synthesis of an Asynchronous Reactive Module",
  booktitle	= "Proc. 16th International Colloquium on Automata, Languages
		  and Programming",
  publisher	= "Lecture Notes in Computer Science, Springer-Verlag",
  volume	= 372,
  month		= "July",
  pages		= "652--671",
  year		= 1989
}

@InProceedings{	  PR90,
  author	= "A. Pnueli and R. Rosner",
  title		= "Distributed Reactive Systems are hard to Synthesize",
  booktitle	= "Proc. 31st IEEE Symp. on Foundation of Computer Science",
  pages		= "746--757",
  year		= 1990
}

@Article{	  Pratt80,
  author	= "V.R. Pratt",
  title		= "A near-optimal method for reasoning about action",
  journal	= "Journal of Computer and System Sciences",
  volume	= "20",
  number	= "2",
  year		= "1980",
  pages		= "231--254"
}

@Article{	  Pratt86,
  author	= "V.R. Pratt",
  title		= "Modeling concurrency with partial orders",
  journal	= "International Journal of Parallel Programming",
  volume	= "15",
  number	= "1",
  year		= "1986",
  pages		= "33--71"
}

@Article{	  prefix,
  author	= {W. R. Bush and J. D. Pincus and D. J. Sielaff},
  title		= {A static analyzer for finding dynamic programming errors},
  journal	= {Software-Practice and Experience},
  publisher	= {Wiley and Sons},
  volume	= {30},
  number	= {7},
  month		= {June},
  pages		= {775-802},
  year		= {2000}
}

@InProceedings{	  ProbMu97,
  author	= "M. Huth and M. Kwiatkowska",
  title		= "Quantitative Analysis and Model Checking",
  booktitle	= "LICS 97: Logic in Computer Science",
  pages		= "111--122",
  year		= 1997,
  publisher	= "IEEE Computer Society Press",
  summary	= "Uses fuzzy semantics for &, proposes model-checking
		  algorithms only for some CTL-like mu-calculus, and does not
		  really deal with non-determinism."
}

@Article{	  ProPreTra96,
  author	= "C. Morgan and A. McIver and K. Seidel",
  title		= "Probabilistic Predicate Transformers",
  journal	= "ACM Transactions on Programming Languages and Systems",
  year		= 1996,
  volume	= 18,
  number	= 3,
  pages		= "325--353",
  summary	= "Extends the predicate transformers approach to deal with
		  demonic nondeterminism."
}

@InProceedings{	  PSS98,
  title		= {Translation validation},
  author	= {A. Pnueli and M. Siegel and E. Singerman},
  booktitle	= {TACAS 98: Tools and Algorithms for the Construction and
		  Analysis of Systems},
  series	= {Lecture Notes in Computer Science 1384},
  pages		= {151--166},
  publisher	= {Springer-Verlag},
  year		= {1998}
}

@TechReport{	  Ptolemy,
  author	= "E.A. Lee",
  title		= "Overview of the Ptolemy Project",
  number	= "UCB/ERL M03/25",
  institution	= "University of California at Berkeley",
  year		= "2003"
}

@Article{	  Pudlak,
  author	= "P. Pudl\'{a}k",
  title		= "Lower bounds for resolution and cutting plane proofs and
		  monotone computations",
  journal	= "J. Symbolic Logic",
  volume	= 62,
  pages		= "981--998",
  year		= 1997
}

@InCollection{	  PuriVaraiya94,
  author	= "A. Puri and P. Varaiya",
  title		= "Decidability of hybrid systems with rectangular
		  differential inclusions",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "95--104"
}

@Unpublished{	  PuriVaraiya95,
  author	= "A. Puri and P. Varaiya",
  title		= "Verification of hybrid systems using abstractions",
  note		= "To appear",
  year		= "1995"
}

@Book{		  Puterman,
  author	= "M.L. Puterman",
  title		= "{Markov} Decision Processes",
  year		= 1994,
  publisher	= "John Wiley and Sons"
}

@InProceedings{	  PVS,
  author	= "N. Shankar",
  title		= "Combining theorem proving and model checking through
		  symbolic analysis",
  booktitle	= "CONCUR: Concurrency Theory",
  pages		= "1--16",
  publisher	= "LNCS 1877, Springer",
  year		= "2000"
}

@InProceedings{	  PVS96,
  title		= {{PVS}: Combining Specification, Proof Checking, and Model
		  Checking},
  author	= {S. Owre and S. Rajan and J.M. Rushby and N. Shankar and
		  M.K. Srivas},
  booktitle	= "CAV 96: Computer-Aided Verification",
  series	= "LNCS 1102",
  publisher	= "Springer",
  year		= "1996",
  pages		= "411-414"
}

@InProceedings{	  PZ01,
  title		= {From Model Checking to a Temporal Proof},
  author	= {D. Peled and L.D. Zuck},
  booktitle	= {SPIN 2001: SPIN Workshop},
  series	= {Lecture Notes in Computer Science 2057},
  publisher	= {Springer-Verlag},
  pages		= {1--14},
  year		= {2001}
}

@InProceedings{Garrigue98,
  title		= {Programming With Polymorphic Variants},
  author	= {Jacques Garrigue},
  booktitle	= {ML}, 
  year		= {1998}
}

@Article{	  PZ86,
  author	= "A. Pnueli and L.D. Zuck",
  title		= "Verification of Multiprocess Probabilistic Protocols",
  journal	= "Distributed Computing",
  volume	= "1",
  pages		= "53--72",
  year		= "1986"
}

@PhDThesis{	  Qadeer99,
  author	= "S. Qadeer",
  title		= "Algorithms and Methodology for Scalable Model Checking",
  school	= "University of California at Berkeley",
  year		= "1996"
}

@InCollection{	  QueilleSifakis81,
  author	= "J. Queille and J. Sifakis",
  title		= "Specification and verification of concurrent systems in
		  {CESAR}",
  booktitle	= "Fifth International Symposium on Programming",
  editor	= "{Dezani-Ciancaglini}, M. and U. Montanari",
  series	= "LNCS 137",
  publisher	= "Springer-Verlag",
  year		= "1981",
  pages		= "337--351"
}

@InCollection{	  Rabin57,
  author	= "M.O. Rabin",
  title		= "Effective computability of winning strategies",
  booktitle	= "Contributions to the Theory of Games (Volume III)",
  editor	= "M. Dresher and A.W. Tucker and P. Wolfe",
  series	= "Annals of Mathematical Studies 39",
  publisher	= "Princeton University Press",
  year		= "1957",
  pages		= "147--157"
}

@Book{		  Rabin69,
  author	= "M.O. Rabin",
  title		= "Automata on Infinite Objects and Church's Problem",
  series	= "Conference Series in Mathematics",
  year		= 1969,
  number	= 13,
  publisher	= "American Mathematical Society"
}

@InProceedings{	  racerx,
  title		= {RacerX: Effective, Static Detection of Race Conditions and
		  Deadlocks},
  author	= {Dawson Engler and Ken Ashcraft},
  booktitle	= "SOSP 03: ACM Symposium on Operating System Principles",
  pages		= "237--252",
  publisher	= "ACM Press",
  year		= "2003"
}

@Article{	  RagFil91,
  author	= "T.E.S. Raghavan and J.A. Filar",
  title		= "Algorithms for Stochastic Games --- A Survey",
  journal	= "{ZOR} --- Methods and Models of Op.\ Res.",
  volume	= 35,
  pages		= "437--472",
  year		= 1991,
  group		= "GT",
  summary	= "Very nice survey of algorithms for solving infinite
		  stochastic games, discounted and undiscounted."
}

@PhDThesis{	  Rajamani99,
  author	= "S.K. Rajamani",
  title		= "New Directions in Refinement Checking",
  school	= "University of California at Berkeley",
  year		= "1996"
}

@Unpublished{	  Rajeev,
  author	= "R. Alur and P. Cerny and G. Gupta and P. Madhusudan and W.
		  Nam and A. Srivastava",
  title		= "Synthesis of interface specifications for {Java} classes",
  year		= "2004"
}

@Unpublished{	  Rajeev-interface,
  author	= "R. Alur and P. Cerny and G. Gupta and P. Madhusudan and W.
		  Nam and A. Srivastava",
  title		= "Synthesis of interface specifications for {Java} classes",
  note		= "Under submission",
  year		= "2004"
}

@Article{	  RamadgeWonham87,
  author	= "P.J. Ramadge and W.M. Wonham",
  title		= "Supervisory control of a class of discrete-event
		  processes",
  journal	= "SIAM Journal of Control and Optimization",
  volume	= "25",
  number	= "1",
  year		= "1987",
  pages		= "206--230"
}

@InProceedings{	  Raskin04,
  author	= {Gilles Geeraerts and Jean-Fran\c{c}ois Raskin and Laurent
		  Van Begin},
  title		= {Expand, Enlarge, and Check: New Algorithms for the
		  Coverability Problem of WSTS.},
  booktitle	= {FSTTCS},
  year		= {2004},
  pages		= {287-298},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3328{\&}spage=287}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Misc{		  Raskin98,
  author	= "J.-F. Raskin",
  title		= "Personal communication",
  year		= "1998"
}

@InCollection{	  RaskinSchobbens97,
  author	= "J.-F. Raskin and P.-Y. Schobbens",
  title		= "State-clock logic: a decidable real-time logic",
  booktitle	= "HART 97: Hybrid and Real-time Systems",
  editor	= "O. Maler",
  series	= "LNCS 1201",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "33--47"
}

@Article{	  ReedRoscoe88,
  author	= "G.M. Reed and A.W. Roscoe",
  title		= "A timed model for communicating sequential processes",
  journal	= "Theoretical Computer Science",
  volume	= "58",
  number	= "1/2/3",
  year		= "1988",
  pages		= "249--261"
}

@InProceedings{	  Regehr03,
  author	= "J. Regehr, A. Reid, K. Webb",
  title		= "Eliminating Stack Overflow by Abstract Interpretation",
  booktitle	= "EMSOFT 03: Embedded Software",
  series	= "Lecture Notes in Computer Science",
  pages		= "306--322",
  publisher	= "Springer",
  year		= "2003"
}

@Book{		  Reisig85,
  author	= "W. Reisig",
  title		= "Petri Nets: An Introduction",
  publisher	= "Springer-Verlag",
  year		= "1985"
}

@Article{	  reps-ist98,
  author	= {T. Reps},
  title		= {Program analysis via graph reachability},
  journal	= {Information and Software Technology},
  volume	= {40},
  number	= {11-12},
  month		= {November-December},
  year		= {1998},
  pages		= {701-726}
}

@InProceedings{	  reps-popl95,
  author	= { T. Reps and S. Horwitz and M. Sagiv},
  title		= {Precise interprocedural dataflow analysis via graph
		  reachability},
  booktitle	= {POPL 95: Principles of Programming Languages},
  publisher	= "ACM",
  year		= {1995},
  pages		= { 49-61}
}

@InProceedings{	  Reps03,
  author	= "T.W. Reps and S. Schwoon and S. Jha",
  title		= "Weighted Pushdown Systems and Their Application to
		  Interprocedural Dataflow Analysis",
  booktitle	= "SAS 03: Static Analysis Symposium",
  pages		= "189--213",
  series	= "LNCS",
  publisher	= "LNCS",
  year		= "2003"
}

@InProceedings{	  repsx86,
  author	= {Gogul Balakrishnan and Radu Gruian and Thomas W. Reps and
		  Tim Teitelbaum},
  title		= {CodeSurfer/x86-A Platform for Analyzing x86 Executables.},
  booktitle	= {CC},
  year		= {2005},
  pages		= {250-254},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3443{\&}spage=250}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InCollection{	  REX91pAH,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Logics and models of real time: a survey",
  booktitle	= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "Lecture Notes in Computer Science 600",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "74--106"
}

@InCollection{	  REX91pHMP,
  author	= "T.A. Henzinger and Z. Manna and A. Pnueli",
  title		= "Timed transition systems",
  booktitle	= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "Lecture Notes in Computer Science 600",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "226--251"
}

@InCollection{	  REX97p,
  author	= "R. Alur and T.A. Henzinger and O. Kupferman",
  title		= "Alternating-time temporal logic",
  booktitle	= "Compositionality: The Significant Difference",
  editor	= "de Roever, W.-P. and H. Langmaack and A. Pnueli",
  series	= "Lecture Notes in Computer Science 1536",
  publisher	= "Springer-Verlag",
  year		= "1999",
  pages		= "23--60"
}

@InProceedings{	  Reynolds00,
  author	= "J. C. Reynolds",
  title		= "Intuitionistic reasoning about shared mutable data
		  structure",
  booktitle	= "Millenial Perspectives in Computer Science",
  publisher	= "Palgrave",
  year		= "2001",
  pages		= "303--321"
}

@InProceedings{	  Reynolds02,
  author	= {John C. Reynolds},
  title		= {Separation Logic: A Logic for Shared Mutable Data
		  Structures.},
  booktitle	= {LICS},
  year		= {2002},
  pages		= {55-74},
  ee		= {http://computer.org/proceedings/lics/1483/14830055abs.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Misc{		  rfc792,
  author	= "J. Postel",
  title		= "{Internet Control Message Protocol}",
  series	= "Request for Comments",
  number	= "792",
  howpublished	= "RFC 792 (Standard)",
  publisher	= "IETF",
  organisation	= "Internet Engineering Task Force",
  year		= 1981,
  month		= sep,
  day		= "1",
  note		= "Updated by RFC 950",
  url		= "http://www.ietf.org/rfc/rfc792.txt"
}

@Article{	  RH96,
  author	= "G. Rothermel and M. Harrold",
  title		= "Analyzing regression test selection techniques",
  journal	= "IEEE Transactions on Software Engineering",
  year		= "1996",
  volume	= 22,
  number	= 8,
  pages		= "529--551"
}

@Article{	  RH97,
  author	= "G. Rothermel and M. Harrold",
  title		= "A safe, efficient regression test selection technique",
  journal	= "ACM Transactions on Software Engineering and Methodology",
  year		= "1997",
  volume	= 6,
  number	= 2,
  pages		= "173--210"
}

@Article{	  RHC76,
  title		= "On the automated generation of program test data",
  author	= "C. Ramamoorthy and S.B. Ho and W. Chen",
  journal	= "IEEE Transactions in Software Engineering",
  volume	= "2(2)",
  year		= 1976,
  pages		= "293--300"
}

@InProceedings{	  RHS95,
  author	= { T. Reps and S. Horwitz and M. Sagiv},
  title		= {Precise interprocedural dataflow analysis via graph
		  reachability},
  booktitle	= {POPL 95: Principles of Programming Languages},
  publisher	= "ACM",
  year		= {1995},
  pages		= { 49-61}
}

@TechReport{	  RinardMarinov99,
  author	= {M. Rinard and D. Marinov},
  title		= {Credible compilation},
  institution	= "MIT",
  number	= "MIT-LCS-TR-776",
  year		= {1999}
}

@Book{		  Rogers67,
  author	= "Rogers, Jr., H.",
  title		= "Theory of Recursive Functions and Effective Computability",
  publisher	= "McGraw-Hill Book Company",
  year		= "1967"
}

@MastersThesis{	  Ron84,
  author	= "D. Ron",
  title		= "Temporal Verification of Communication Protocols",
  school	= "The Weizmann Institute of Science",
  address	= "Rehovot, Israel",
  year		= "1984"
}

@PhDThesis{	  Rosner92,
  author	= "R. Rosner",
  title		= "Modular Synthesis of Reactive Systems",
  school	= "Weizmann Institute of Science, Rehovot, Israel",
  year		= "1992"
}

@InProceedings{	  RSS01,
  author	= "A. Regev and W. Silverman and E. Shapiro",
  title		= "Representation and simulation of biochemical processes
		  using the pi-calculus process algebra",
  booktitle	= "Proceedings of the Pacific Symposium of Biocomputing (6)",
  pages		= "459--470",
  year		= "2001"
}

@InProceedings{	  RTSS93,
  author	= "R. Alur and T.A. Henzinger and P.-H. Ho",
  title		= "Automatic symbolic verification of embedded systems",
  booktitle	= "Proceedings of the 14th Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1993",
  pages		= "2--11"
}

@Article{	  RTSS93j,
  author	= "R. Alur and T.A. Henzinger and P.-H. Ho",
  title		= "Automatic symbolic verification of embedded systems",
  journal	= "IEEE Transactions on Software Engineering",
  volume	= "22",
  number	= "3",
  year		= "1996",
  pages		= "181--201"
}

@InProceedings{	  RTSS95,
  author	= "T.A. Henzinger and P.-H. Ho and H. Wong-Toi",
  title		= "{{\sc HyTech}}: the next generation",
  booktitle	= "Proceedings of the 16th Annual Real-time Systems
		  Symposium",
  publisher	= "IEEE Computer Society Press",
  year		= "1995",
  pages		= "56--65"
}

@Proceedings{	  RV02,
  title		= "Workshop on Run-Time Verification",
  series	= "Electronic Notes in Theoretical Computer Science",
  editor	= "K. Havelund and G. Rosu",
  volume	= "70(4)",
  year		= "2002"
}

@Article{	  RW89,
  author	= "P.J.G. Ramadge and W.M. Wonham",
  title		= "The control of discrete event systems",
  journal	= "{IEEE} Transactions on Control Theory",
  volume	= "77",
  pages		= "81-98",
  year		= "1989"
}

@Misc{		  sabelfeld03languagebased,
  author	= "A. Sabelfeld and A. Myers",
  title		= "Language-Based Information-Flow Security",
  text		= "A. Sabelfeld and A. C. Myers. Language-Based
		  Information-Flow Security. IEEE Journal on Selected Areas
		  in Communications, 21(1), 2003.",
  year		= "2003",
  url		= "citeseer.ist.psu.edu/article/sabelfeld03languagebased.html"
		  
}

@Article{	  SabelfieldMyers03,
  author	= "A. Sabelfield and A.C. Myers",
  title		= "Language-based information-flow security",
  journal	= "IEEE Journal on Selected Areas in Communication",
  volume	= "21",
  pages		= "5--19",
  year		= "2003"
}

@InProceedings{	  Safra88,
  author	= "S. Safra",
  title		= "On the complexity of $\omega$-automata",
  booktitle	= "Proceedings of the 29th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1988",
  pages		= "319--327"
}

@PhDThesis{	  Safra89,
  author	= "S. Safra",
  title		= "Complexity of automata on infinite objects",
  school	= "Weizmann Institute of Science",
  year		= "1989",
  address	= "Rehovot, Israel"
}

@InProceedings{	  Safra92,
  author	= "S. Safra",
  title		= "Exponential Determinization for $\omega$-Automata with
		  Strong-Fairness Acceptance Condition",
  booktitle	= "Proceedings of the 24th Annual Symposium on Theory of
		  Computing",
  publisher	= "ACM Press",
  year		= 1992,
  pages		= "275--282"
}

@InProceedings{	  sagiv-popl99,
  author	= {M. Sagiv and T. Reps and R. Wilhelm },
  title		= {Parametric shape analysis via 3-valued logic},
  booktitle	= {POPL 99: Principles of Programming Languages},
  publisher	= "ACM",
  year		= {1999},
  pages		= { 105-118}
}

@Article{	  SagivRepsWilhelm02j,
  author	= {Shmuel Sagiv and Thomas W. Reps and Reinhard Wilhelm},
  title		= {Parametric shape analysis via 3-valued logic.},
  journal	= {ACM Trans. Program. Lang. Syst.},
  volume	= {24},
  number	= {3},
  year		= {2002},
  pages		= {217-298},
  ee		= {http://doi.acm.org/10.1145/514188.514190},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  SaidiSAS2000,
  author	= "H. Saidi",
  title		= "Model Checking Guided Abstraction and Analysis",
  booktitle	= "SAS 00: Static-Analysis Symposium",
  pages		= "377--396",
  publisher	= "LNCS 1824, Springer",
  year		= "2000"
}

@InCollection{	  SaidiShankar99,
  author	= "H. Sa{\"i}di and N. Shankar",
  title		= "Abstract and model check while you prove",
  booktitle	= "CAV 99: Computer-aided Verification",
  series	= "LNCS 1633",
  publisher	= "Springer",
  year		= "1999",
  pages		= "443-454"
}

@InProceedings{	  sanvido02a,
  author	= {Sanvido, M.A.A. and Schaufelberger, W. and Cechticky, V.},
  year		= {2002},
  title		= {Testing Embedded Control Systems using
		  Hardware-in-the-Loop Simulation and Temporal Logic},
  booktitle	= {15th IFAC World Congress on Automatic Control}
}

@InCollection{	  SAS00,
  author	= "T.A. Henzinger and R. Majumdar and F.Y.C. Mang and J.-F.
		  Raskin",
  title		= "Abstract interpretation of game properties",
  booktitle	= "SAS 00: Static Analysis",
  editor	= "J. Palsberg",
  series	= "Lecture Notes in Computer Science 1824",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "220--239"
}

@InProceedings{	  SAS04BLAST,
  author	= {Dirk Beyer and Adam J. Chlipala and Thomas A. Henzinger
		  and Ranjit Jhala and Rupak Majumdar},
  title		= {The Blast Query Language for Software Verification},
  booktitle	= {SAS 04: Static Analysis Symposium},
  year		= 2004,
  series	= {LNCS},
  publisher	= {Springer-Verlag},
  pages		= {2--18}
}

@InProceedings{	  SAS06,
  author	= {Ranjit Jhala and Rupak Majumdar and Ru-Gang Xu},
  title		= {Structural Invariants},
  booktitle	= {SAS 06: Static Analysis Symposium},
  publisher	= {LNCS},
  year		= {2006},
  pages		= {105--120}
}

@InProceedings{	  SavageInfocom03,
  author	= {David Moore and Colleen Shannon and Geoffrey M. Voelker
		  and Stefan Savage},
  title		= {Internet Quarantine: Requirements for Containing
		  Self-Propagating Code.},
  booktitle	= {INFOCOM},
  year		= {2003},
  ee		= {http://www.ieee-infocom.org/2003/papers/46_04.PDF},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Savitch70,
  author	= "W.J. Savitch",
  title		= "Relationship between nondeterministic and deterministic
		  tape classes",
  journal	= "Journal of Computer and System Sciences",
  volume	= "4",
  year		= "1970",
  pages		= "177--194"
}

@InProceedings{	  SBM92,
  author	= "F.B. Schneider and B. Bloom and K. Marzullo",
  title		= "Putting time into proof outlines",
  booktitle	= "Real Time: Theory in Practice",
  editor	= "de Bakker, J.W. and K. Huizing and de Roever, W.-P. and G.
		  Rozenberg",
  series	= "LNCS 600",
  publisher	= "Springer-Verlag",
  year		= "1992",
  pages		= "618--639"
}

@InProceedings{	  Schmidt98,
  author	= "D.A. Schmidt",
  title		= "Data Flow Analysis is Model Checking of Abstract
		  Interpretation",
  booktitle	= "POPL 98: Principles of Programming Languages",
  publisher	= "ACM",
  year		= "1998",
  pages		= "38-48"
}

@InProceedings{	  SchmidtEsop01,
  author	= {M. Huth and R. Jagadeesan and D. A. Schmidt},
  title		= {Modal transition systems: a foundation for three-valued
		  program analysis},
  booktitle	= {ESOP 01: European Symposium on Programming},
  year		= 2001,
  publisher	= {Springer},
  note		= {To appear}
}

@Article{	  Schneider00,
  author	= {Fred B. Schneider},
  title		= {Enforceable security policies.},
  journal	= {ACM Trans. Inf. Syst. Secur.},
  volume	= {3},
  number	= {1},
  year		= {2000},
  pages		= {30-50},
  ee		= {http://doi.acm.org/10.1145/353323.353382},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@TechReport{	  Schneider87,
  author	= "F.B. Schneider",
  title		= "Understanding Protocols for Byzantine Clock
		  Synchronization",
  institution	= "Cornell University",
  number	= "CSD-TR-87-859",
  year		= "1987"
}

@InProceedings{	  Schneider88,
  author	= "F.B. Schneider",
  title		= "Real-time, reliable systems project",
  booktitle	= "Proceedings of the ONR Kickoff Workshop for the
		  Foundations of Real-time Computing Research Initiative",
  publisher	= "Office of Naval Research",
  year		= "1988",
  pages		= "28--32"
}

@Book{		  Schneider94,
  author	= "F.B. Schneider",
  title		= "On Concurrent Programming",
  year		= "To appear"
}

@TechReport{	  Schneider99,
  author	= "F. B. Schneider",
  title		= "Enforceable Security Policies",
  institution	= "Cornell University",
  number	= "TR98-1664",
  year		= 1999
}

@InProceedings{	  Schwartzbach,
  author	= "A.S. Christensen and A. Moller and M.I. Schwartzbach",
  title		= "Precise Analysis of String Expressions",
  booktitle	= "SAS 03: Static-Analysis Symposium",
  pages		= "1--18",
  publisher	= "LNCS 2694, Springer",
  year		= "2003"
}

@InProceedings{	  Sefka,
  author	= "M. Sefika and A. Sane and R.H. Campbell",
  title		= "Monitoring Compliance of a Software System With Its
		  High-Level Design Models",
  booktitle	= "ICSE 96: Software Engineering",
  pages		= "387--396",
  publisher	= "ACM",
  year		= "1996"
}

@PhDThesis{	  SegalaT,
  author	= "R. Segala",
  title		= "Modeling and Verification of Randomized Distributed
		  Real-Time Systems",
  school	= "MIT",
  year		= 1995,
  note		= "Technical Report MIT/LCS/TR-676"
}

@Article{	  Sei96,
  author	= {H. Seidl},
  title		= {Fast and Simple Nested Fixpoints},
  journal	= {Information Processing Letters},
  year		= {1996},
  volume	= {59},
  number	= {6},
  pages		= {303--308}
}

@InProceedings{	  Sekar03,
  author	= {R. Sekar and V. N. Venkatakrishnan and Samik Basu and
		  Sandeep Bhatkar and Daniel C. DuVarney},
  title		= {Model-carrying code: a practical approach for safe
		  execution of untrusted applications.},
  booktitle	= {SOSP},
  year		= {2003},
  pages		= {15-28},
  ee		= {http://doi.acm.org/10.1145/945448},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  Sen04,
  author	= {Koushik Sen and Abhay Vardhan and Gul Agha and Grigore
		  Rosu},
  title		= {Efficient Decentralized Monitoring of Safety in
		  Distributed Systems.},
  booktitle	= {ICSE},
  year		= {2004},
  pages		= {418-427},
  ee		= {http://csdl.computer.org/comp/proceedings/icse/2004/2163/00/21630418abs.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  Shah03npclick,
  author	= "N. Shah and W. Plishker and K. Keutzer",
  title		= "{NP}-{C}lick: A Programming Model for the {I}ntel
		  {IXP}-1200",
  booktitle	= "Proc. 2nd Workshop on Network Processors ({NP}-2), 9th
		  Int'l Symposium on High Performance Computing Architectures
		  ({HPCA}-9) ",
  year		= 2003
}

@InProceedings{	  ShahRabaey02,
  author	= "R. Shah and J.M. Rabaey",
  title		= "Energy-aware routing for low-energy ad-hoc sensor
		  networks",
  booktitle	= "Wireless Communications and Networking Conference",
  pages		= "812--817",
  publisher	= "IEEE",
  year		= "2002"
}

@Article{	  ShankarLam87,
  author	= "A.U. Shankar and S. Lam",
  title		= "Time-dependent distributed systems: proving safety,
		  liveness, and timing properties",
  journal	= "Distributed Computing",
  volume	= "2",
  number	= "2",
  year		= "1987",
  pages		= "61--79"
}

@Article{	  Shapley53,
  author	= "L.S. Shapley",
  title		= "Stochastic Games",
  journal	= "Proc.\ Nat.\ Acad.\ Sci. {USA}",
  volume	= 39,
  pages		= "1095-1100",
  year		= 1953,
  summary	= "Foundational paper for theory of infinite games"
}

@InProceedings{	  SharirPnueli,
  author	= {M. Sharir and A. Pnueli},
  title		= {Two approaches to interprocedural data dalow analysis},
  booktitle	= {Program Flow Analysis: Theory and Applications},
  pages		= {189-233},
  publisher	= {Prentice-Hall},
  year		= {1981}
}

@Article{	  Shostak84,
  author	= "R.E. Shostak",
  title		= "Deciding combinations of theories",
  journal	= "Journal of the ACM",
  volume	= "31",
  number	= "1",
  pages		= "1-12",
  year		= "1984"
}

@inproceedings{ Sheard06,
	author = {T. Sheard},
	booktitle = {PLPV},
	title = {Type-level Computation Using Narrowing in Omega.},
	url = {http://web.cecs.pdx.edu/~sheard/papers/sheardPLPV.ps},
	year = {2006}
}
@INPROCEEDINGS{pottier08,
  author = {Y. Regis-Gianas and F. Pottier},
  title = {A {Hoare} Logic for Call-by-Value Functional Programs},
  booktitle = {MPC},
  year = {2008},
  url = {http://cristal.inria.fr/~fpottier/publis/regis-gianas-pottier-hoarefp.ps.gz},
  pdf = {http://cristal.inria.fr/~fpottier/publis/regis-gianas-pottier-hoarefp.pdf},
  note = {To appear},
}

@inproceedings{invgen,
  author    = {A. Gupta and
               A. Rybalchenko},
  title     = {InvGen: An Efficient Invariant Generator},
  booktitle = {CAV},
  year      = {2009},
  pages     = {634-640},
}

@inproceedings{APRON,
  author    = {B. Jeannet and
               A. Min{\'e}},
  title     = {Apron: A Library of Numerical Abstract Domains for Static
               Analysis},
  booktitle = {CAV},
  year      = {2009},
  pages     = {661-667},
}


@Article{	  Sifakis82,
  author	= "J. Sifakis",
  title		= "A unified approach for studying the properties of
		  transition systems",
  journal	= "Theoretical Computer Science",
  volume	= "18",
  year		= "1982",
  pages		= "227--258"
}

@InProceedings{	  SifakisRTSS99,
  author	= "K. Altisen and G. {G{\"o}ssler} and A. Pnueli and J.
		  Sifakis and S. Tripakis and S. Yovine",
  title		= "A Framework for Scheduler Synthesis",
  booktitle	= "RTSS 99: Real-Time Systems Symposium",
  year		= 1999,
  publisher	= "IEEE Press",
  pages		= "154--163"
}

@InProceedings{	  SifakisScheduler,
  author	= {K. Altisen and G. G{\"o}ssler and A. Pnueli and J. Sifakis
		  and S. Tripakis and S. Yovine},
  title		= "A Framework for Scheduler Synthesis",
  booktitle	= "RTSS 99: IEEE Real-Time Systems Symposium",
  year		= "1999",
  pages		= "154--163"
}

@Article{	  SIGACT91,
  author	= "R. Alur and T.A. Henzinger",
  title		= "Time for logic",
  journal	= "SIGACT News",
  volume	= "22",
  number	= "3",
  year		= "1991",
  pages		= "6--12"
}

@Unpublished{	  Simplify,
  author	= {D. Detlefs and G. Nelson and J. Saxe},
  title		= {Simplify Theorem Prover},
  note		= "\url{http://research.compaq.com/SRC/esc/Simplify.html}",
  key		= "SimplifyWebPage"
}

@inproceedings{z3,
  author    = {L. de Moura and N. Bj{\o}rner},
  title     = {Z3: An Efficient {SMT} Solver},
  booktitle = {TACAS},
  year      = {2008},
  ee        = {http://dx.doi.org/10.1007/978-3-540-78800-3_24}
}

@inproceedings{Z3,
  author    = {L. de Moura and N. Bj{\o}rner},
  title     = {Z3: An Efficient {SMT} Solver},
  booktitle = {TACAS},
  year      = {2008},
  ee        = {http://dx.doi.org/10.1007/978-3-540-78800-3_24}
}

@Unpublished{    Yices,
  author  = {B. Dutertre and
             L. De Moura},
  title   = {Yices {SMT} Solver},
  note    = "\url{http://yices.csl.sri.com/}",
  key     = "YicesWebPage"
}

@Article{	  simplifyj,
  author	= {David Detlefs and Greg Nelson and James B. Saxe},
  title		= {Simplify: a theorem prover for program checking.},
  journal	= {J. ACM},
  volume	= {52},
  number	= {3},
  year		= {2005},
  pages		= {365-473},
  ee		= {http://doi.acm.org/10.1145/1066102},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Unpublished{	  SimplifyWebPage,
  author	= {D. Detlefs and G. Nelson and J. Saxe},
  title		= {Simplify Theorem Prover},
  note		= "\url{http://research.compaq.com/SRC/esc/Simplify.html}",
  key		= "SimplifyWebPage"
}

@InCollection{	  SinghalPixley94,
  author	= "V. Singhal and C. Pixley",
  title		= "The verification problem for safe replaceability",
  booktitle	= "CAV 94: Computer-aided Verification",
  editor	= "D.L. Dill",
  series	= "LNCS 818",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "311--323"
}

@PhDThesis{	  Sistla83,
  author	= "A.P. Sistla",
  title		= "Theoretical Issues in the Design and Verification of
		  Distributed Systems",
  school	= "Harvard University",
  year		= "1983"
}

@Article{	  SistlaClarke85,
  author	= "A.P. Sistla and E.M. Clarke",
  title		= "The complexity of propositional linear temporal logics",
  journal	= "Journal of the ACM",
  volume	= "32",
  number	= "3",
  year		= "1985",
  pages		= "733--749"
}

@InCollection{	  SKH97,
  author	= "O. Stursberg and S. Kowalewski and I. Hoffmann and J.
		  Preu\ss{}ig",
  title		= "Comparing timed and hybrid automata as approximations of
		  continuous systems",
  editor	= "P. Antsaklis and W. Kohn and A. Nerode and S. Sastry",
  booktitle	= "Hybrid Systems IV",
  series	= "Lecture Notes in Computer Science 1273",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "361--377"
}

@InProceedings{	  SL94,
  author	= {R. Segala and N.A. Lynch},
  title		= {Probabilistic Simulations for Probabilistic Processes},
  booktitle	= "CONCUR 94: Concurrency Theory",
  pages		= "481--496",
  year		= 1994,
  series	= "Lecture Notes in Computer Science",
  publisher	= "Springer-Verlag",
  volume	= 836,
  summary	= "discusses simulation relations, and preservation of
		  temporal logic properties, defining an analogous to
		  probabilistic ACTL."
}

@Article{	  SL95,
  author	= {R. Segala and N.A. Lynch},
  title		= {Probabilistic Simulations for Probabilistic Processes},
  journal	= "Nordic Journal of Computing",
  volume	= {2},
  number	= {2},
  pages		= {250--273},
  year		= {1995}
}

@Unpublished{	  SLAM-personal,
  title		= "Personal communication",
  author	= "T. Ball and S.K. Rajamani"
}

@InProceedings{	  SLAMPOPL02,
  author	= "T. Ball and S.K. Rajamani",
  title		= "The {SLAM} project: debugging system software via static
		  analysis",
  booktitle	= {POPL},
  publisher	= {ACM},
  year		= {2002},
  pages		= "1-3"
}

@TechReport{	  SLAMTechRep,
  author	= {T. Ball and S. K. Rajamani},
  title		= {Boolean programs: a model and process for software
		  analysis},
  institution	= {Microsoft Research},
  number	= {MSR Technical Report 2000-14},
  year		= {2000}
}

@TechReport{	  SLIC,
  author	= {T. Ball and S. K. Rajamani},
  title		= {{SLIC}: A Specification Language for Interface Checking
		  (of {C})},
  institution	= {Microsoft Research},
  number	= {MSR-TR-2001-21},
  year		= {2001}
}

@InCollection{	  SMF97,
  author	= "T. Stauner and O. M{\"u}ller and M. Fuchs",
  title		= "Using {{\sc HyTech}} to verify an automotive control
		  system",
  booktitle	= "HART 97: Hybrid and Real-time Systems",
  editor	= "O. Maler",
  series	= "Lecture Notes in Computer Science 1201",
  publisher	= "Springer-Verlag",
  year		= "1997",
  pages		= "139--153"
}

@Book{		  SML,
  title		= "The definition of Standard ML",
  author	= "Robin Milner and Mads Tofte and Robert Harper",
  publisher	= "MIT Press",
  year		= "1990"
}

@Book{		  Smullyan68,
  author	= "R.M. Smullyan",
  title		= "First-order Logic",
  publisher	= "Springer-Verlag",
  year		= "1968"
}

@article{BerezinClarke02,
  author    = {Sergey Berezin and
               Edmund M. Clarke and
               Armin Biere and
               Yunshan Zhu},
  title     = {Verification of Out-Of-Order Processor Designs Using Model
               Checking and a Light-Weight Completion Function.},
  journal   = {Formal Methods in System Design},
  volume    = {20},
  number    = {2},
  year      = {2002},
  pages     = {159-186},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@InProceedings{	  somesh05,
  author	= {Vinod Ganapathy and Sanjit A. Seshia and Somesh Jha and
		  Thomas W. Reps and Randal E. Bryant},
  title		= {Automatic discovery of API-level exploits.},
  booktitle	= {ICSE},
  year		= {2005},
  pages		= {312-321},
  ee		= {http://doi.acm.org/10.1145/1062518},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  someshBUFFER03,
  author	= {Vinod Ganapathy and Somesh Jha and David Chandler and
		  David Melski and David Vitek},
  title		= {Buffer overrun detection using linear programming and
		  static analysis.},
  booktitle	= {ACM Conference on Computer and Communications Security},
  year		= {2003},
  pages		= {345-354},
  ee		= {http://doi.acm.org/10.1145/948155},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Unpublished{	  Soot,
  title		= {Soot Compilation Framework},
  note		= "\url{http://www.sable.mcgill.ca/soot/}"
}

@InProceedings{	  SPE84,
  author	= "D.E. Shasha and A. Pnueli and W. Ewald",
  title		= "Temporal verification of carrier-sense local area network
		  protocols",
  booktitle	= "Proceedings of the 11th Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1984",
  pages		= "54--65"
}

@InCollection{	  SpecSharp,
  title		= "The Spec\# programming system: An overview",
  author	= "M. Barnett and K.R.M. Leino and W. Schulte",
  note		= "To be published",
  booktitle	= "CASSIS 2004",
  year		= 2004
}

@Article{	  SPIN,
  author	= {G. Holzmann},
  title		= {The {S}pin Model Checker},
  journal	= {IEEE Transactions on Software Engineering},
  volume	= { 23},
  number	= { 5},
  month		= {May},
  year		= { 1997},
  pages		= {279-295}
}

@Article{	  splint,
  title		= "Improving Security Using Extensible Light-weight Static
		  Analysis",
  author	= "D. Evans and D. Larochelle",
  journal	= "IEEE Software",
  volume	= "19(1)",
  pages		= "42--51",
  year		= "2002"
}

@Article{	  srivas90,
  author	= "M. Srivas and M. Bickford",
  title		= "Formal Verification of a Pipelined Microprocessor",
  journal	= "IEEE Software",
  volume	= "7",
  number	= "5",
  year		= "1990",
  pages		= "52-64"
}

@InProceedings{	  SrivastavaISSTA,
  author	= {Amitabh Srivastava and Jay Thiagarajan},
  title		= {Effectively prioritizing tests in development
		  environment.},
  booktitle	= {ISSTA},
  year		= {2002},
  pages		= {97-106},
  ee		= {http://doi.acm.org/566172.566187},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  SRW02,
  author	= {M. Sagiv and T. Reps and R. Wilhelm },
  title		= {Parametric shape analysis via 3-valued logic},
  journal	= {ACM Trans. Program. Lang. Syst},
  volume	= "24(3)",
  publisher	= "ACM",
  year		= {2002},
  pages		= { 217--298}
}

@InProceedings{	  SRW99,
  author	= { M. Sagiv and T. Reps and R. Wilhelm },
  title		= {Parametric shape analysis via 3-valued logic},
  booktitle	= {POPL 99: Principles of Programming Languages},
  publisher	= "ACM",
  year		= {1999},
  pages		= { 105-118}
}

@InProceedings{	  SSP00,
  author	= "O. Shakernia and S.S. Sastry and G.J. Pappas",
  title		= "Decidable Controller Synthesis for Classes of Linear
		  Systems",
  booktitle	= "HSCC 00: Hybrid Systems Computation and Control",
  pages		= "407-420",
  publisher	= "Springer-Verlag",
  series	= "Lecture Notes in Computer Science",
  volume	= 1790,
  year		= 2000
}

@InCollection{	  STACS00,
  author	= "T.A. Henzinger and R. Majumdar",
  title		= "A classification of symbolic transition systems",
  booktitle	= "STACS 00: Theoretical Aspects of Computer Science",
  editor	= "H. Reichel and S. Tison",
  series	= "Lecture Notes in Computer Science 1770",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "13--34"
}

@InProceedings{	  Stark85,
  author	= "Eugene W. Stark",
  title		= "A Proof Technique for Rely/Guarantee Properties",
  booktitle	= "FSTTCS 1985: Foundations of Software Technology and
		  Theoretical Computer Science",
  year		= "2004",
  editor	= "S. N. Maheshwari",
  series	= "LNCS 206",
  publisher	= "Springer-Verlag",
  pages		= "369--391"
}

@InProceedings{	  StarkSmolka98,
  author	= "E.W. Stark and S.A. Smolka",
  title		= "Compositional analysis of expected delays in networks of
		  probabilistic {I/O} automata",
  booktitle	= "Proceedings of the 13th Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1998",
  pages		= "466--477"
}

@InProceedings{	  Steensgard96,
  title		= {Points-to Analysis in almost Linear Time},
  author	= {B. Steensgard},
  booktitle	= {POPL 96: Principles of Programming Languages},
  pages		= {32-41},
  publisher	= {ACM},
  year		= {1996}
}

@InProceedings{	  Steffen91,
  author	= {B. Steffen},
  title		= {Data Flow Analysis as Model Checking},
  booktitle	= {TACS 91: Theoretical Aspects of Computer Science},
  series	= {LNCS 536},
  publisher	= "Springer",
  pages		= "346-365",
  year		= {1991}
}

@InProceedings{	  STFW01,
  author	= {Umesh Shankar, Kunal Talwar, Jeffrey Foster and David
		  Wagner},
  title		= {Detecting Format String Vulnerabilities with Type
		  Qualifiers},
  booktitle	= {USENIX Security Symposium},
  year		= {2001},
  pages		= {}
}

@InCollection{	  Stirling95,
  author	= "C.P. Stirling",
  title		= "Local Model Checking Games",
  booktitle	= "CONCUR 95: Concurrency Theory",
  series	= "Lecture Notes in Computer Science 962",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "1--11"
}

@Article{	  StirlingWalker91,
  author	= "C.P. Stirling and D.J. Walker",
  title		= "Local model checking in the modal $\mu$-calculus",
  journal	= "Theoretical Computer Science",
  volume	= "89",
  number	= "1",
  year		= "1991"
}

@InProceedings{	  Sto02,
  author	= {M.I.A. Stoelinga},
  booktitle	= {Formal Aspects of Computing},
  title		= {Fun with {FireWire}: Experiments with Verifying the
		  {IEEE1394} Root Contention Protocol},
  year		= 2002,
  note		= {accepted for publication}
}

@InProceedings{	  STOC93,
  author	= "R. Alur and T.A. Henzinger and M.Y. Vardi",
  title		= "Parametric real-time reasoning",
  booktitle	= "Proceedings of the 25th Annual Symposium on Theory of
		  Computing",
  publisher	= "ACM Press",
  year		= "1993",
  pages		= "592--601"
}

@InProceedings{	  STOC95,
  author	= "T.A. Henzinger and P.W. Kopke and A. Puri and P. Varaiya",
  title		= "What's decidable about hybrid automata?",
  booktitle	= "Proceedings of the 27th Annual Symposium on Theory of
		  Computing",
  publisher	= "ACM Press",
  year		= "1995",
  pages		= "373--382"
}

@Article{	  STOC95j,
  author	= "T.A. Henzinger and P.W. Kopke and A. Puri and P. Varaiya",
  title		= "What's decidable about hybrid automata?",
  journal	= "Journal of Computer and System Sciences",
  volume	= "57",
  year		= "1998",
  pages		= "94--124"
}

@PhDThesis{	  Stockmeyer74,
  author	= "L.J. Stockmeyer",
  title		= "The Complexity of Decision Problems in Automata Theory and
		  Logic",
  school	= "Massachusetts Institute of Technology",
  year		= "1974"
}

@InProceedings{	  StockmeyerMeyer73,
  author	= "L.J. Stockmeyer and A.R. Meyer",
  title		= "Word problems requiring exponential time",
  booktitle	= "Proceedings of the 5th Annual Symposium on Theory of
		  Computing",
  publisher	= "ACM Press",
  year		= "1973",
  pages		= "1--9"
}

@InProceedings{	  stotts02,
  author	= "Stotts, D. and Lindsey, M. and Antley, A.",
  year		= "2002",
  title		= "An Informal Formal Method for Systematic {JUnit} Test-Case
		  Generation",
  booktitle	= "XP/Agile Universe 2002",
  publisher	= "Springer-Verlag",
  series	= "Lecture Notes in Computer Science 2418",
  pages		= "132--143"
}

@InProceedings{	  Stump,
  author	= "A. Stump and C.W. Barrett and D.L. Dill and J.R. Levitt",
  title		= "A Decision Procedure for an Extensional Theory of Arrays",
  pages		= "29--37",
  booktitle	= "LICS 01: Logic in Computer Science",
  publisher	= "IEEE",
  year		= "2003"
}

@InProceedings{   sulzmann97type,
    author 	= "M. Sulzmann and M. Odersky and M. Wehr",
    title 	= "Type Inference with Constrained Types",
    booktitle 	= "{FOOL}",
    year 	= "1997",
    url 	= "citeseer.ist.psu.edu/article/odersky99type.html" }

@InProceedings{	  SuzukiIshihata77,
  author	= {N. Suzuki and K. Ishihata},
  title		= {Implementation of an Array Bound Checker},
  booktitle	= "POPL 77: Principles of Programming Languages",
  publisher	= {ACM},
  year		= {1977},
  pages		= {132-143}
}

@Article{	  SY86,
  author	= "R.E. Strom and S. Yemini",
  title		= "Typestate: A Programming Language Concept for Enhancing
		  Software Reliability",
  journal	= "IEEE Trans. Software Eng.",
  volume	= "12(1)",
  pages		= "157--171",
  publisher	= "IEEE Press",
  year		= "1986"
}

@InCollection{	  TACAS00HM,
  author	= "T.A. Henzinger and R. Majumdar",
  title		= "Symbolic model checking for rectangular hybrid systems",
  booktitle	= "TACAS 00: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  editor	= "S. Graf and M. Schwartzbach",
  series	= "Lecture Notes in Computer Science 1785",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "142--156"
}

@InCollection{	  TACAS00HR,
  author	= "T.A. Henzinger and S.K. Rajamani",
  title		= "Fair bisimulation",
  booktitle	= "TACAS 00: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  editor	= "S. Graf and M. Schwartzbach",
  series	= "Lecture Notes in Computer Science 1785",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "299--314"
}

@InCollection{	  TACAS95,
  author	= "T.A. Henzinger and P.-H. Ho and H. Wong-Toi",
  title		= "A user guide to {{\sc HyTech}}",
  booktitle	= "TACAS 95: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  editor	= "E. Brinksma and W.R. Cleaveland and K.G. Larsen and T.
		  Margaria and B. Steffen",
  series	= "Lecture Notes in Computer Science 1019",
  publisher	= "Springer-Verlag",
  year		= "1995",
  pages		= "41--71"
}

@InCollection{	  TACAS98,
  author	= "R. Alur and T.A. Henzinger and S. Rajamani",
  title		= "Symbolic exploration of transition hierarchies",
  booktitle	= "TACAS 98: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  editor	= "B. Steffen",
  series	= "Lecture Notes in Computer Science 1384",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "330--344"
}

@InCollection{	  TAKB96,
  author	= "S. Ta\c{s}iran and R. Alur and R.P. Kurshan and R.K.
		  Brayton",
  title		= "Verifying abstractions of timed systems",
  booktitle	= "CONCUR 96: Concurrency Theory",
  editor	= "U. Montanari",
  series	= "LNCS",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "546--562"
}

@InProceedings{	  Talpin04,
  author	= {Jean-Pierre Talpin and David Berner and Sandeep K. Shukla
		  and Paul Le Guernic and Abdoulaye Gamati{\'e} and Rajesh
		  Gupta},
  title		= {A Behavioral Type Inference System for Compositional
		  System-on-Chip Design.},
  booktitle	= {ACSD},
  year		= {2004},
  pages		= {47-56},
  ee		= {http://csdl.computer.org/comp/proceedings/acsd/2004/2077/00/20770047abs.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Book{		  Tarski51,
  author	= "A. Tarski",
  title		= "A Decision Method for Elementary Algebra and Geometry",
  publisher	= "University of California Press, Berkeley and Los Angeles",
  year		= "1951"
}

@InCollection{	  TCS00,
  author	= "T.A. Henzinger",
  title		= "Masaccio: a formal model for embedded components",
  booktitle	= "TCS 00: Theoretical Computer Science",
  editor	= "J. van Leeuwen and O. Watanabe and M. Hagiya and P.D.
		  Mosses and T. Ito",
  series	= "Lecture Notes in Computer Science 1872",
  publisher	= "Springer-Verlag",
  year		= "2000",
  pages		= "549--563"
}

@InProceedings{	  TerauchiAiken05,
  author	= {T. Terauchi and A. Aiken},
  title		= {Secure Information Flow as a Safety Problem.},
  booktitle	= {SAS},
  year		= {2005},
  pages		= {352-367},
  ee		= {http://dx.doi.org/10.1007/11547662_24},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Thomas81,
  author	= "Wolfgang Thomas",
  title		= "A combinatorial approach to the theory of
		  $\omega$-automata",
  journal	= "Information and Control",
  volume	= "48",
  number	= "3",
  year		= "1981",
  pages		= "261--283"
}

@InCollection{	  Thomas90,
  author	= "W. Thomas",
  title		= "Automata on infinite objects",
  booktitle	= "Handbook of Theoretical Computer Science",
  volume	= "B",
  editor	= "van Leeuwen, J.",
  publisher	= "Elsevier",
  year		= "1990",
  pages		= "133--191"
}

@InProceedings{	  Thomas95,
  author	= "W. Thomas",
  title		= "On the Synthesis of Strategies in Infinite Games",
  booktitle	= "STACS 95: Theoretical Aspects of Computer Science",
  pages		= "1--13",
  publisher	= "Springer-Verlag",
  series	= "Lecture Notes in Computer Science",
  volume	= 900,
  year		= 1995
}

@InProceedings{	  TinyOS,
  author	= "J. Hill and R. Szewczyk and A. Woo and S. Hollar and D.
		  Culler and K. Pister",
  title		= "System architecture directions for networked sensors",
  booktitle	= "ASPLOS 2000: Architectural Support for Programming
		  Languages and Operating Systems",
  publisher	= {ACM},
  pages		= {93--104},
  year		= "2000"
}

@Article{	  Tip95,
  author	= "F. Tip",
  year		= "1995",
  title		= "A survey of program slicing techniques",
  journal	= "Journal of Programming Languages",
  volume	= 3,
  pages		= "121--189"
}

@InProceedings{	  TLS98,
  author	= "C. Tomlin and J. Lygeros and S.S. Sastry",
  title		= "Synthesizing Controllers for Nonlinear Hybrid Systems",
  booktitle	= "HSCC 98: Hybrid Systems Computation and Control",
  pages		= "360-373",
  publisher	= "Springer-Verlag",
  series	= "Lecture Notes in Computer Science",
  volume	= 1386,
  year		= 1998
}

@InProceedings{	  TML97,
  author	= "C. Thekkath and T. Mann and E.K. Lee",
  title		= "Frangipani: {A} scalable distributed file system",
  booktitle	= "SOSP 97: Symposium on Operating Systems Principles",
  year		= "1997",
  pages		= "224--237"
}

@InProceedings{	  Tomlin97,
  author	= "J. Kosecka and C.J. Tomlin and G. Pappas and S. Sastry",
  title		= "Generation of conflict resolution manoeuvres for air
		  traffic management",
  booktitle	= "IROS 97: Proceedings of the 1997 IEEE/RSJ International
		  Conference on Intelligent Robot and Systems",
  volume	= "3",
  publisher	= "IEEE Press",
  year		= "1997",
  pages		= "1598--1603"
}

@PhDThesis{	  Tomlin98,
  author	= "C. Tomlin",
  title		= "Hybrid Control of Air Traffic Management Systems",
  school	= "University of California at Berkeley",
  year		= "1998"
}

@TechReport{	  TR95,
  author	= "T.A. Henzinger and P.W. Kopke",
  title		= "Hybrid automata with finite mutual simulations",
  institution	= "Cornell University",
  number	= "CSD-TR-95-1497",
  year		= "1995"
}

@InCollection{	  TripakisYovine96,
  author	= "S. Tripakis and S. Yovine",
  title		= "Analysis of timed systems based on time-abstracting
		  bisimulations",
  booktitle	= "CAV 96: Computer-aided Verification",
  series	= "LNCS",
  publisher	= "Springer-Verlag",
  year		= "1996",
  pages		= "232--243"
}

@Book{		  TTA,
  author	= "H. Kopetz",
  title		= "Real-time systems: {D}esign principles for distributed
		  embedded applications",
  publisher	= "Kluwer",
  year		= "1997"
}

@Article{	  TujVrieze87,
  author	= "F. Thuijsman and O.J. Vrieze",
  title		= "The Bad Match, a Total Reward Stochastic Game",
  journal	= "Operations Research Spektrum",
  pages		= "93--99",
  volume	= 9,
  year		= 1987,
  summary	= "Introduces total reward stochastic games"
}

@InProceedings{	  Turing36,
  author	= {Alan M. Turing},
  title		= {On computable numbers, with an application to the
		  Eintscheidungsproblem},
  booktitle	= {Proceedings of the London Mathematical Soceity},
  publisher	= {},
  year		= {1936},
  pages		= {230--265}
}

@InCollection{    LIRS05,
  author = "T. Lev-Ami and N. Immerman and T. Reps and M. Sagiv and S. Srivastava and G. Yorsh", 
  title = "Simulating reachability using 
	first-order logic with applications 
	to verification of linked data structures",
  booktitle = "CADE 05: Conference on Automated Deduction", 
  publisher = "Springer",
  year = 2005
}

@InCollection{	  TVLA,
  author	= "T. Lev-Ami and S. Sagiv",
  title		= "{TVLA}: {A} System for Implementing Static Analyses",
  booktitle	= "SAS",
  pages		= "280--301",
  series	= "LNCS 1824",
  publisher	= "Springer",
  year		= "2000"
}

@Article{	  typestate,
  author	= "R.E. Strom and S. Yemini",
  title		= "Typestate: A Programming Language Concept for Enhancing
		  Software Reliability",
  journal	= "IEEE Trans. Software Eng.",
  volume	= "12(1)",
  pages		= "157--171",
  publisher	= "IEEE Press",
  year		= "1986"
}

@InProceedings{	  UCLID,
  author	= {Shuvendu K. Lahiri and Sanjit A. Seshia},
  title		= {The UCLID Decision Procedure.},
  booktitle	= {CAV},
  year		= {2004},
  pages		= {475-478},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3114{\&}spage=475}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Book{		  UML,
  author	= "J. Rumbaugh and G. Booch and I. Jacobson",
  title		= "Petri Nets: An Introduction",
  publisher	= "Springer-Verlag",
  year		= "1999"
}

@Unpublished{	  valgrind,
  author	= "",
  title		= "Valgrind",
  note		= "\url{http://valgrind.org/}",
  year		= "2005"
}

@InCollection{	  Valmari90,
  author	= "A. Valmari",
  title		= "A stubborn attack on state explosion",
  booktitle	= "CAV 90: Computer-aided Verification",
  editor	= "R.P. Kurshan and E.M. Clarke",
  series	= "LNCS 531",
  publisher	= "Springer-Verlag",
  year		= "1990",
  pages		= "25--42"
}

@Unpublished{	  Vampyre,
  author	= {D. {Blei {\em et al.}}},
  title		= {Vampyre: A Proof Generating Theorem Prover},
  note		= "\url{http://www.eecs.berkeley.edu/$\sim$rupak/Vampyre}",
  key		= "VampyreWebPage"
}

@Unpublished{	  VampyreWebPage,
  author	= {D. Blei and C. Harrelson and R. Jhala and R. Majumdar and
		  G. C. Necula and S. P. Rahul and W. Weimer and D. Weitz},
  title		= {Vampyre: A Proof Generating Theorem Prover},
  note		= "\url{http://www.eecs.berkeley.edu/~rupak/Vampyre}",
  key		= "VampyreWebPage"
}

@Book{		  vanBenthem83,
  author	= "van Benthem, J.",
  title		= "The Logic of Time",
  publisher	= "D. Reidel Publishing Company",
  year		= "1983"
}

@PhDThesis{	  vanGlabbeek90,
  author	= "van Glabbeek, R.J.",
  title		= "Comparative Concurrency Semantics and Refinement of
		  Actions",
  school	= "Vrije Universiteit te Amsterdam",
  address	= "The Netherlands",
  year		= "1990"
}

@Article{	  Varaiya93,
  author	= "P. Varaiya",
  title		= "Smart cars on smart roads: problems of control",
  journal	= "IEEE Transactions on Automatic Control",
  volume	= "38",
  number	= "2",
  year		= "1993",
  pages		= "195--207"
}

@InProceedings{	  Vardi01,
  author	= "M.Y. Vardi",
  title		= "Branching vs. Linear Time: Final Showdown",
  booktitle	= "TACAS 01: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  pages		= "1-22",
  year		= "2001",
  series	= "Lecture Notes in Computer Science 2031",
  publisher	= "Springer-Verlag"
}

@InProceedings{	  Vardi88,
  author	= "M.Y. Vardi",
  title		= "A temporal fixpoint calculus",
  booktitle	= "Proceedings of the 15th Annual Symposium on Principles of
		  Programming Languages",
  publisher	= "ACM Press",
  year		= "1988",
  pages		= "250--259"
}

@InProceedings{	  Vardi98,
  author	= "M.Y. Vardi",
  title		= "Sometimes and Not Never Re-revisited: On Branching Versus
		  Linear Time",
  booktitle	= "CONCUR 98: Concurrency Theory",
  pages		= "1-17",
  year		= "199",
  series	= "Lecture Notes in Computer Science 1466",
  publisher	= "Springer-Verlag"
}

@InProceedings{	  VardiP85,
  author	= "M.Y. Vardi",
  title		= "Automatic Verification of Probabilistic Concurrent
		  Finite-State Systems",
  booktitle	= "Proceedings of the 26th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= 1985,
  pages		= "327--338",
  group		= "PR"
}

@Article{	  VardiWolper86jcss,
  author	= "M.Y. Vardi and P. Wolper",
  title		= "Automata-theoretic techniques for modal logics of
		  programs",
  journal	= "Journal of Computer and System Sciences",
  volume	= "32",
  year		= "1986",
  pages		= "183--221"
}

@InProceedings{	  VardiWolper86lics,
  author	= "M.Y. Vardi and P. Wolper",
  title		= "An automata-theoretic approach to automatic program
		  verification",
  booktitle	= "Proceedings of the First Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1986",
  pages		= "322--331"
}

@Article{	  VardiWolper94,
  author	= "M.Y. Vardi and P. Wolper",
  title		= "Reasoning about infinite computations",
  journal	= "Information and Computation",
  volume	= "115",
  number	= "1",
  year		= "1994",
  pages		= "1--37"
}

@InProceedings{	  Vault,
  title		= {Enforcing high-level protocols in low-level software},
  author	= {R. DeLine and M. F\"ahndrich},
  booktitle	= {PLDI 01: Programming Language Design and Implementation},
  publisher	= {ACM},
  year		= {2001}
}

@InCollection{	  vBW01CONCUR,
  author	= "F. van Breugel and J. Worrel",
  title		= "An algorithm for quantitative verification of
		  probabilistic transition systems",
  booktitle	= "CONCUR 01: Concurrency Theory",
  series	= "Lecture Notes in Computer Science 2154",
  publisher	= "Springer-Verlag",
  year		= "2001",
  pages		= "336--350"
}

@InCollection{	  vBW01ICALP,
  author	= "F. van Breugel and J. Worrel",
  title		= "Towards quantitative verification of probabilistic
		  systems",
  booktitle	= "ICALP 01: Automata, Languages, and Programming",
  series	= "Lecture Notes in Computer Science 2076",
  publisher	= "Springer-Verlag",
  year		= "2001",
  pages		= "421--432"
}

@InProceedings{	  Verisoft,
  author	= "P. Godefroid",
  title		= "Model checking for programming languages using {Verisoft}",
  booktitle	= {POPL 97: Principles of Programming Languages},
  pages		= {174--186},
  publisher	= {ACM},
  year		= {1997}
}


@inproceedings{VytiniotisJM12,
  author    = {D. Vytiniotis and
               S. L. Peyton Jones and
               J. Magalh{\~a}es},
  title     = {Equality proofs and deferred type errors: a compiler pearl},
  booktitle = {ICFP},
  year      = {2012},
  pages     = {341-352},
  ee        = {http://doi.acm.org/10.1145/2364527.2364554},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{HooimeijerV11,
  author    = {Pieter Hooimeijer and
               Margus Veanes},
  title     = {An Evaluation of Automata Algorithms for String Analysis},
  booktitle = {VMCAI},
  year      = {2011},
  pages     = {248-262},
  ee        = {http://dx.doi.org/10.1007/978-3-642-18275-4_18},
}

@InProceedings{	  JMX07,
  author	= {Ranjit Jhala and Rupak Majumdar and Ru-Gang Xu},
  title		= {State of the Union: Type Inference via Craig Interpolation},
  booktitle	= {TACAS},
  year		= {2007}
}

@InProceedings{	  Visser,
  author	= "S. Khurshid and C.S. Pasareanu and W. Visser",
  title		= "Generalized Symbolic Execution for Model Checking and
		  Testing",
  booktitle	= "TACAS 03: Tools and Algorithms for the Construction and
		  Analysis of Systems",
  series	= "LNCS",
  pages		= "553--568",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  VisserParkPenix,
  author	= {W. Visser and S. Park and J. Penix},
  title		= {Using Predicate Abstraction to Reduce Object-Oriented
		  Programs for Model Checking},
  booktitle	= {FMSP 00: Formal Methods in Software Practice},
  publisher	= {ACM},
  year		= {2000},
  pages		= {3-12}
}

@Book{		  vNM47,
  author	= "J. von Neumann and O. Morgenstern",
  title		= "Theory of games and economic behavior",
  publisher	= "Princeton University Press",
  year		= 1947
}

@InProceedings{	  VolpanoSmith98,
  author	= "Geoffrey Smith and Dennis Volpano",
  title		= {Secure Information Flow in a Multithreaded Imperative
		  Language},
  booktitle	= {POPL 98: Principles of Programming Languages},
  publisher	= {ACM},
  year		= {1998},
  pages		= "355-364"
}

@InProceedings{	  vPG03,
  author	= "C. von Praun and T. Gross",
  title		= "Static conflict analysis for multi-threaded
		  object-oriented programs",
  booktitle	= "PLDI 2003: Programming Languages Design and
		  Implementation",
  publisher	= {ACM},
  pages		= {115--128},
  year		= "2003"
}

@InProceedings{	  Vrable05,
  author	= "Michael Vrable and Justin Ma and Jay Chen and David Moore
		  and Erik VandeKieft and Alex C. Snoeren and Geoffrey M.
		  Voelker and Stefan Savage",
  title		= "Scalability, Fidelity and Containment in the Potemkin
		  Virtual Honeyfarm",
  booktitle	= "SOSP 05: Symposium on Operating Systems Principles",
  year		= "2005",
  pages		= "--"
}

@InProceedings{	  VWB98,
  author	= "T. Villa and H. {Wong-Toi} and A. Balluchi and J.
		  Preu\ss{}ig and A. {Sangiovanni-Vincentelli} and Y.
		  Watanabe",
  title		= "Formal verification of an automotive engine controller in
		  cutoff mode",
  booktitle	= "Proceedings of the 37th International Conference on
		  Decision and Control",
  publisher	= "IEEE Press",
  year		= "1998",
  pages		= "4271--4276"
}

@InProceedings{	  Wadler,
  author	= {Philip Wadler},
  title		= {Linear types can change the world!},
  booktitle	= {IFIP TC2 Working Conference on Programming Concepts and
		  Methods},
  year		= {1990},
  pages		= {}
}

@InProceedings{	  Walter83,
  author	= "B. Walter",
  title		= "Timed {Petri} nets for modeling and analyzing protocols
		  with real-time characteristics",
  booktitle	= "Proceedings of the Third IFIP WG6.1 International Workshop
		  on Protocol Specification, Testing, and Verification",
  editor	= "H. Rudin and C.H. West",
  publisher	= "Elsevier Science Publishers",
  year		= "1983",
  pages		= "149--159"
}

@InProceedings{	  Wang95,
  author	= "F. Wang",
  title		= "Timing behavior analysis for real-time systems",
  booktitle	= "Proceedings of the Tenth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1995",
  pages		= "112--122"
}

@InProceedings{	  Warlock,
  author	= "N. Sterling",
  title		= "Warlock: a static data race analysis tool",
  booktitle	= "USENIX Winter 1993 Technical Conference",
  pages		= "97--106",
  year		= "1993"
}

@InCollection{	  WB98,
  author	= "P. Wolper and B. Boigelot",
  title		= "Verifying systems with infinite but regular state spaces",
  booktitle	= "CAV 98: Computer-aided Verification",
  series	= "LNCS 1427",
  publisher	= "Springer-Verlag",
  year		= "1998",
  pages		= "88--97"
}

@InProceedings{	  wcook05,
  author	= {William R. Cook and Siddhartha Rai},
  title		= {Safe query objects: statically typed objects as remotely
		  executable queries.},
  booktitle	= {ICSE},
  year		= {2005},
  pages		= {97-106},
  ee		= {http://doi.acm.org/10.1145/1062488},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  Weiser82,
  author	= "Weiser, M.",
  year		= "1982",
  title		= "Program slicing",
  journal	= "IEEE Transactions on Software Engineering SE-10",
  volume	= 4,
  pages		= "352--357"
}

@InProceedings{	  Welc04,
  author	= {Adam Welc and Suresh Jagannathan and Antony L. Hosking},
  title		= {Transactional Monitors for Concurrent Objects.},
  booktitle	= {ECOOP},
  year		= {2004},
  pages		= {519-542},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3086{\&}spage=519}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InCollection{	  Weyl50,
  author	= "H. Weyl",
  title		= "Elementary proof of a minmax theorem due to von {Neumann}",
  booktitle	= "Contributions to the Theory of Games, I",
  series	= "Annals of Mathematical Studies",
  volume	= "24",
  publisher	= "Princeton University Press",
  pages		= "19--25",
  year		= "1950"
}

@InProceedings{	  WhaleyLam,
  author	= "J. Whaley and M.C. Martin and M.S. Lam",
  title		= "Automatic extraction of object-oriented component
		  interfaces",
  booktitle	= "ISSTA 02: Software Testing and Analysis",
  publisher	= "ACM",
  year		= "2002",
  pages		= "218--228"
}

@InProceedings{	  WhaleyLam02,
  author	= "J. Whaley and M.C. Martin and M.S. Lam",
  title		= "Automatic extraction of object-oriented component
		  interfaces",
  booktitle	= "ISSTA 02: Software Testing and Analysis",
  publisher	= "ACM",
  year		= "2002",
  pages		= "218--228"
}

@InCollection{	  Wilke94,
  author	= "T. Wilke",
  title		= "Specifying timed state sequences in powerful decidable
		  logics and timed automata",
  booktitle	= "FTRTFT 94: Formal Techniques in Real-time and
		  Fault-tolerant Systems",
  editor	= "H. Langmaack and de Roever, W.-P. and J. Vytopil",
  series	= "LNCS 863",
  publisher	= "Springer-Verlag",
  year		= "1994",
  pages		= "694--715"
}

@Book{		  Williams,
  author	= "D. Williams",
  title		= "Probability With Martingales",
  year		= 1991,
  publisher	= "Cambridge University Press"
}

@Book{		  WinskelBook,
  author	= "G. Winskel",
  title		= "The formal semantics of programming languages: an
		  introduction",
  publisher	= "MIT Press",
  year		= "1993"
}

@Article{	  Wirth71,
  author	= "N. Wirth",
  title		= "Program Development by Stepwise Refinement",
  journal	= "Communication of the ACM",
  year		= "1971",
  number	= "4",
  volume	= "14",
  pages		= "221--227"
}

@InProceedings{	  WME90,
  author	= "F. Wang and A.K. Mok and E.A. Emerson",
  title		= "Real-time distributed system specification and
		  verification in asynchronous propositional temporal logic",
  booktitle	= "Proceedings of the 12th International Conference on
		  Software Engineering",
  year		= "1992"
}

@Book{		  Wolfram88,
  author	= "S. Wolfram",
  title		= "Mathematica: A System for Doing Mathematics by Computer",
  publisher	= "Addison-Wesley Publishing Company",
  year		= "1988"
}

@PhDThesis{	  Wolper82,
  author	= "P. Wolper",
  title		= "Synthesis of Communicating Processes from Temporal-Logic
		  Specifications",
  school	= "Stanford University",
  year		= "1982"
}

@Article{	  Wolper83,
  author	= "P. Wolper",
  title		= "Temporal logic can be more expressive",
  journal	= "Information and Control",
  volume	= "56",
  number	= "1/2",
  year		= "1983",
  pages		= "72--99"
}

@InProceedings{	  WongToi97,
  author	= "H. Wong-Toi",
  title		= "The synthesis of controllers for linear hybrid automata",
  booktitle	= "Proceedings of the 36th Conference on Decision and
		  Control",
  publisher	= "IEEE Computer Society Press",
  year		= "1997",
  pages		= "4607--4612"
}

@InCollection{	  WongToiDill90,
  author	= "{Wong-Toi}, H. and D.L. Dill",
  title		= "Synthesizing processes and schedulers from temporal
		  specifications",
  booktitle	= "CAV 90: Computer-aided Verification",
  editor	= "R.P. Kurshan and E.M. Clarke",
  series	= "LNCS 531",
  publisher	= "Springer-Verlag",
  note		= "1990",
  pages		= "272--281"
}

@InProceedings{	  WSS94,
  author	= "S.-H. Wu and S.A. Smolka and E.W. Stark",
  title		= "Composition and behaviors of probabilistic {I/O} automata",
  booktitle	= "CONCUR 94: Concurrency Theory",
  series	= "Lect. Notes in Comp. Sci.",
  pages		= "511--528",
  publisher	= "Springer",
  year		= "1994"
}

@InProceedings{	  WVS83,
  author	= "P. Wolper and M.Y. Vardi and A.P. Sistla",
  title		= "Reasoning about infinite computation paths",
  booktitle	= "Proceedings of the 24th Annual Symposium on Foundations of
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1983",
  pages		= "185--194"
}

@Article{	  XDuce,
  author	= "H. Hosoya and B.C. Pierce",
  title		= "{XDuce}: A typed {XML} processing language",
  journal	= "ACM Transactions on Internet Technology",
  volume	= "3(2)",
  pages		= "117--148",
  year		= 2003
}

@InProceedings{	  Xie05,
  author	= {Tao Xie and Darko Marinov and Wolfram Schulte and David
		  Notkin},
  title		= {Symstra: A Framework for Generating Object-Oriented Unit
		  Tests Using Symbolic Execution.},
  booktitle	= {TACAS},
  year		= {2005},
  pages		= {365-381},
  ee		= {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3440{\&}spage=365}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  XieA05,
  author	= {Y. Xie and A. Aiken},
  title		= {Scalable error detection using boolean satisfiability.},
  booktitle	= {POPL 05: Principles of Programming Languages},
  year		= {2005},
  publisher	= "ACM",
}

@InProceedings{	  XieAiken05,
  author	= {Y. Xie and A. Aiken},
  title		= {Scalable error detection using boolean satisfiability.},
  booktitle	= {POPL},
  year		= {2005},
  pages		= {351-363},
  ee		= {http://doi.acm.org/10.1145/1040334},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}
@inproceedings{saturn,
  author = "I. Dillig and T. Dillig and A. Aiken",
  title  = "Sound, complete, and scalable path-sensitive analysis",
  booktitle = "PLDI",
  publisher = "ACM",
  year  = 2008,
  pages = "270--280"
}

@inproceedings{CousotsPOPL11,
  author    = {P. Cousot and
               R. Cousot and
               F. Logozzo},
  title     = {A parametric segmentation functor for fully automatic and
               scalable array content analysis},
  booktitle = {POPL},
  year      = {2011},
  pages     = {105-118},
  ee        = {http://doi.acm.org/10.1145/1926385.1926399},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@inproceedings{JhalaMcMillanCAV07,
  author    = {R. Jhala and K. L. McMillan},
  title     = {Array Abstractions from Proofs},
  booktitle = {CAV},
  year      = {2007},
  pages     = {193-206},
  ee        = {http://dx.doi.org/10.1007/978-3-540-73368-3_23},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@inproceedings{pfenningxi98,
  author    = {H. Xi and 
               F. Pfenning},
  title     = {Eliminating Array Bound Checking Through Dependent Types.},
  booktitle = {PLDI},
  year      = {1998},
}


@inproceedings{Xi00,
  author    = {Hongwei Xi},
  title     = {Imperative Programming with Dependent Types},
  booktitle = {LICS},
  year      = {2000},
  pages     = {375-387}
}

@inproceedings{XiPfenning99,
  author    = {H. Xi and 
               F. Pfenning},
  title     = {Dependent Types in Practical Programming},
  booktitle = {POPL},
  year      = {1999},
}

@article{henglein93,
  author    = {F. Henglein},
  title     = {Type Inference with Polymorphic Recursion},
  journal   = {ACM TOPLAS},
  volume    = {15},
  number    = {2},
  year      = {1993},
  pages     = {253-289}
}

@Unpublished{vecurl,
  author    = {Luca de Alfaro},
  title     = {Vec: Extensible, Functional Arrays for Ocaml},
  note      = "\url{http://www.dealfaro.com/vec.html}",
  key       = "vecurl"
}

@Unpublished{benchmarkURL,
  title     = {{Dsolve} Recursive Refinements Benchmarks},
  note      = "\url{http://pho.ucsd.edu/liquid/benchmarks/}",
  key       = "Dsolve Benchmarks"
}

@Unpublished{dmlbenchmarks,
  author    = {H. Xi},
  title     = {{DML} code examples},
  note      = "\url{http://www.cs.bu.edu/fac/hwxi/DML/}",
  key       = "DMLBenchmarks"
}


@PhDThesis{	  Xi98,
  author	= "H. Xi",
  title		= "Dependent Types in Practical Programming",
  school	= "Carnegie Mellon University",
  year		= "1998"
}


@inproceedings{Flanagan93,
  author    = {C. Flanagan and
               A. Sabry and
               B. F. Duba and
               M. Felleisen},
  title     = {The Essence of Compiling with Continuations.},
  booktitle = {PLDI},
  year      = {1993},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  XuMillerReps,
  author	= {Z. Xu and B. P. Miller and T. Reps},
  title		= {Safety Checking of Machine Code},
  booktitle	= {PLDI 00: Programming Language Design and Implementation},
  publisher	= {ACM},
  year		= {2000},
  pages		= {70-82}
}

@InProceedings{	  Yahav01,
  author	= "E. Yahav",
  title		= "Verifying safety properties of concurrent {Java} programs
		  using {3-}valued logic",
  booktitle	= "POPL 01: Principles of Programming Languages",
  pages		= "27--40",
  publisher	= "ACM Press",
  year		= "2001"
}

@InProceedings{	  YahavRamalingam,
  author	= {E.~Yahav and G.~Ramalingam},
  title		= {Verifying Safety Properties using Separation and
		  Heterogeneous Abstractions},
  booktitle	= {Proc.\ PLDI},
  publisher	= {ACM},
  year		= {2004},
  pages		= {25-34}
}

@InCollection{	  Yannakakis90,
  title		= " Graph Theoretic Methods in Database Theory",
  author	= "M. Yannakakis",
  booktitle	= " Proc. 9th ACM Symp. on Principles of Database Systems",
  publisher	= "ACM Press",
  pages		= "203-242",
  year		= "1990"
}

@InCollection{	  Yi90,
  author	= "W. Yi",
  title		= "Real-time behavior of asynchronous agents",
  booktitle	= "CONCUR 90: Theories of Concurrency",
  editor	= "J.C.M. Baeten and J.W. Klop",
  series	= "LNCS 458",
  publisher	= "Springer-Verlag",
  year		= "1990",
  pages		= "502--520"
}

@InProceedings{	  YichenAiken,
  author	= "Y. Xie and A. Aiken",
  title		= "Scalable error detection using boolean satisfiability",
  booktitle	= "POPL 05",
  publisher	= "ACM",
  year		= "2005"
}

@InProceedings{	  Yorsh04,
  author	= "Thomas W. Reps and Shmuel Sagiv and Greta Yorsh",
  title		= "Symbolic Implementation of the Best Transformer",
  booktitle	= "VMCAI 2004: Verification Model Checking and Abstract
		  Interpretation",
  editor	= "Bernhard Steffen and Georgio Levi",
  series	= "LNCS 2937",
  publisher	= "Springer-Verlag",
  year		= "2004",
  pages		= "252--266"
}

@InProceedings{	  Yovine03,
  author	= "C. Kloukinas and C. Nakhli and S. Yovine",
  title		= "A Methodology and Tool Support for Generating Scheduled
		  Native Code for Real-Time Java Applications",
  booktitle	= "EMSOFT 03: Embedded Software",
  series	= "Lecture Notes in Computer Science",
  pages		= "274--289",
  publisher	= "Springer",
  year		= "2003"
}

@InProceedings{	  Zeller05,
  author	= {Holger Cleve and Andreas Zeller},
  title		= {Locating causes of program failures.},
  booktitle	= {ICSE},
  year		= {2005},
  pages		= {342-351},
  ee		= {http://doi.acm.org/10.1145/1062522},
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  Zeller99,
  author	= {Andreas Zeller},
  title		= {Yesterday, My Program Worked. Today, It Does Not. Why?},
  booktitle	= {ESEC / SIGSOFT FSE},
  year		= {1999},
  pages		= {253-267},
  ee		= {http://link.springer.de/link/service/series/0558/bibs/1687/16870253.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@article{Zenger97,
  author    = {Christoph Zenger},
  title     = {Indexed Types},
  journal   = {TCS},
  volume    = {187},
  number    = {1-2},
  year      = {1997},
  pages     = {147-165},
  ee        = {http://dx.doi.org/10.1016/S0304-3975(97)00062-5},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@InProceedings{	  ZhangGupta04,
  author	= "X. Zhang and R. Gupta",
  year		= 2004,
  title		= "Cost ective dynamic program slicing",
  booktitle	= "PLDI 04: Programming Language Design and Implementation",
  publisher	= "ACM",
  pages		= "94--106"
}

@InProceedings{	  Zhendong,
  author	= "C. Gould and Z. Su and P.T. Devanbu",
  title		= "Precise Analysis of String Expressions",
  booktitle	= "ICSE 04: Software Engineering",
  pages		= "645--654",
  publisher	= "IEEE Press",
  year		= "2004"
}

@InProceedings{	  zhendong04,
  author	= {Carl Gould and Zhendong Su and Premkumar T. Devanbu},
  title		= {Static Checking of Dynamically Generated Queries in
		  Database Applications.},
  booktitle	= {ICSE},
  year		= {2004},
  pages		= {645-654},
  ee		= {http://csdl.computer.org/comp/proceedings/icse/2004/2163/00/21630645abs.htm}
		  ,
  bibsource	= {DBLP, http://dblp.uni-trier.de}
}

@Article{	  ZP96,
  author	= "U. Zwick and M. Paterson",
  title		= "The complexity of mean payoff games on graphs",
  journal	= "Theoretical Computer Science",
  volume	= "158",
  pages		= "343--359",
  publisher	= "Elsevier",
  year		= "1996"
}

@InProceedings{	  ZSS94,
  author	= "S. Zhang and O. Sokolsky and S. Smolka",
  title		= "On the parallel complexity of model checking and the
		  $\mu$-calculus",
  booktitle	= "Proceedings of the Ninth Annual Symposium on Logic in
		  Computer Science",
  publisher	= "IEEE Computer Society Press",
  year		= "1994",
  pages		= "154--163"
}

@InProceedings{	  Zuck,
  author	= "T. Arons, A. Pnueli, L.D. Zuck",
  title		= "Parameterized Verification by Probabilistic Abstraction",
  booktitle	= "FoSSaCS 03",
  series	= "Lect. Notes in Comp. Sci.",
  pages		= "87--102",
  publisher	= "Springer",
  year		= "2003"
}

@book{ HP,
	author = "J. Hennessy and D. Patterson",
	title = "Computer Architecture: A Quantitative Approach, 3rd edition",
	publisher = "Morgan Kaufmann",
	year = 2005
	}

@inproceedings{Noble,
  author =       "David G. Clarke and James Noble and John M. Potter",
  title =        {Simple Ownership Types for Object Containment},
  booktitle = "ECOOP 01: European Conference on Object Oriented Programming",
  keywords = {olit ecoop01},
  pages = "53-76",
}

@Inproceedings{  FF05,
	author = "C. Flanagan and S.N. Freund and M. Lifshin",
	title = "Type inference for atomicity",
	booktitle = "TLDI 05: Types in Language Design and Implementation",
	pages = "47-58",
	publisher = "ACM",
	year = 2005
}

@InProceedings{ BHT06,
	author = "D. Beyer and T. Henzinger and G. Theoduloz",
	title = "Lazy shape analysis",
	booktitle = "CAV 06: Computer-Aided Verification",
	publisher = "Springer",
	year = 2006
}

@misc{ VIS,
	author = "The VIS Team",
	title = "VIS",
	note = "Available from http://www-cad.eecs.berkeley.edu/$\sim$vis/"
}
@misc{ SMV,
	author = "K. McMillan",
	title = "Cadence SMV",
	note = "Available from http://www-cad.eecs.berkeley.edu/$\sim$kenmcmil/"
}
@misc{ TestBuilder,
	author = "Cadence",
	title = "TestBuilder",
	note = "http://www.testbuilder.net"
}
@article{ M5,
	title = "The {M5} Simulator: Modeling Networked Systems",
	author = "N.L. Binkert and R.G. Dreslinski and L.R. Hsu and K.T. Lim and A.G. Saidi and S.K. Reinhardt",
	journal = "IEEE Micro", 
	volume = "26(4)", 
	pages = "52-60", 
	year  = 2006
}
@misc{ IntelManual,
	author = "Intel",
	title = "Intel IA32 Technical Documents",
	note = "http://www.intel.com/design/pentium4/manuals/index\_new.htm"
}
@misc{ Austin,
	author = "T. Austin",
	title = "SimpleScalar",
	note = "http://www.simplescalar.com/"
}
@misc{ PTLSIM,
	author = "M. Yourst",
	title = "PTLsim",
	note = "http://www.ptlsim.org"
}
@InProceedings{ CHARME05,
	author = "A. Chakrabarti and K. Chatterjee and T.A. Henzinger and O. Kupferman and R. Majumdar",
	title = "Verifying quantitative properties using bound functions",
	booktitle = "CHARME 2005", 
	publisher = "Springer",
	year =  2005
}

@InProceedings{ SakallahRefinement,
	author = "Z.S. Andraus and M.H. Liffiton and K.A. Sakallah",
	title = "Refinement strategies for verification methods based on datapath abstraction",
	booktitle = "ASP-DAC 06",
	pages = "19-24",
	publisher = "ACM",
	year = 2006
}

@InProceedings{ Stoller05,
  author = "R. Agarwal and A. Sasturkar and L. Wang and S.D. Stoller",
  title = "Optimized run-time race detection and atomicity checking using partial discovered types",
  booktitle = "ASE 05: Automated Software Engineering",
  pages = "233-242",
  year = 2005
}

@inproceedings{   aiken93type,
  author 	= "Alexander Aiken and Edward L. Wimmers",
  title 	= "Type Inclusion Constraints and Type Inference",
  booktitle 	= "Functional Programming Languages and Computer Architecture",
  pages 	= "31-41",
  year 		= "1993",
  url 		= "citeseer.ist.psu.edu/aiken93type.html"
}

@inproceedings{ lincoln92algorithmic,
  author = "P. Lincoln and J. C. Mitchell",
  title = "Algorithmic Aspects of Type Inference with Subtypes",
  booktitle = "POPL",
  address = "Albequerque, New Mexico",
  year = "1992",
  url = "citeseer.ist.psu.edu/lincoln92algorithmic.html" }

@misc{ flanagan01houdini,
  author = "C. Flanagan and K. Leino",
  title = "Houdini, an Annotation Assistant for ESC/Java",
  text = "C. Flanagan and K. R. M. Leino. Houdini, an Annotation Assistant for ESC/Java.
    In Proc. FME 2001.",
  year = "2001",
  url = "citeseer.ist.psu.edu/flanagan00houdini.html" }

@inproceedings{ Ou2004,
  author    = {X. Ou and
               G. Tan and
               Y. Mandelbaum and
               D. Walker},
  title     = {Dynamic Typing with Dependent Types},
  booktitle = {IFIP TCS},
  year      = {2004},
  pages     = {437-450}
}

@inproceedings{ Davies00,
  author    = {R. Davies and F. Pfenning},
  title     = {Intersection types and computational effects.},
  booktitle = {ICFP},
  year      = {2000},
  ee        = {http://doi.acm.org/10.1145/351240.351259},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{ Denney98,
  author    = {Ewen Denney},
  title     = {Refinement types for specification.},
  booktitle = {PROCOMET},
  year      = {1998},
  pages     = {148-166},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{  Hayashi93,
  author    = {S. Hayashi},
  title     = {Logic of Refinement Types.},
  booktitle = {TYPES},
  year      = {1993},
  pages     = {108-126},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{ Fuh88,
 author = {Y.C. Fuh and P. Mishra},
 title = {Type inference with subtypes},
 booktitle = {ESOP},
 year = {1988},
 doi = {http://dx.doi.org/10.1016/0304-3975(90)90144-7},
}

@techreport{ fahndrich96making,
    author = "Manuel Fahndrich and Alex Aiken",
    title = "Making Set-Constraint Program Analyses Scale",
    number = "CSD-96-917",
    pages = "10",
    year = "1996",
    url = "citeseer.ist.psu.edu/fahndrich96making.html"
}

@phdthesis{Davies,
 author = {Rowan Davies},
 title = {Practical Refinement-Type Checking},
 year = {2005},
 school = {Carnegie Mellon University},
 address = {Pittsburgh, PA, USA},
 }

@phdthesis{Dunfield,
 author = {J. Dunfield},
 title = {A Unified System of Type Refinements},
 year = {2007},
 school = {Carnegie Mellon University},
 address = {Pittsburgh, PA, USA},
 }

@phdthesis{ Heintze92,
 author = {Nevin Charles Heintze},
 title = {Set based program analysis},
 year = {1992},
 order_no = {UMI Order No. GAX93-22866},
 publisher = {Carnegie Mellon University},
 address = {Pittsburgh, PA, USA},
 }

@article{ flanagan99componential,
    author = "C. Flanagan and M. Felleisen",
    title = "Componential set-based analysis",
    journal = "ACM TOPLAS",
    volume = "21",
    number = "2",
    pages = "370--416",
    year = "1999",
    url = "citeseer.ist.psu.edu/flanagan97componential.html"
}

@inproceedings{KobayashiPOPL09,
  author = "N. Kobayashi",
  title = "Types and higher-order recursion schemes for verification
           of higher-order programs",
  booktitle = "POPL",
  year = 2009
}
@inproceedings{KobayashiLICS09,
  author = "N. Kobayashi and C.-H.L. Ong",
  title = "A type system equivalent to modal $\mu$-calculus model checking of recursion schemes",
  booktitle = "LICS",
  year = 2009
}

@inproceedings{Ong,
  author = "C.-H.L. Ong",
  title = "On model-checking trees generated by higher-order recursion schemes",
  booktitle = "LICS",
  year = 2006
}

@article{NaikPalsberg,
  author    = {M. Naik and J. Palsberg},
  title     = {A type system equivalent to a model checker},
  journal   = {ACM Trans. Program. Lang. Syst.},
  volume    = {30},
  number    = {5},
  year      = {2008}
}

@article{Palsberg95,
  author    = {J. Palsberg and
               P. O'Keefe},
  title     = {A Type System Equivalent to Flow Analysis},
  journal   = {ACM Trans. Program. Lang. Syst.},
  volume    = {17},
  number    = {4},
  year      = {1995},
  pages     = {576-599},
  ee        = {http://doi.acm.org/10.1145/210184.210187},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{AbadiCardelliCurienLevy,
  author = "M. Abadi and L. Cardelli and P.-L. Curien and J.-J. L{\'e}vy",
  title = "Explicit substitutions",
  journal = "Journal of Functional Programming",
  volume = "1",
  pages = "375--416",
  year = "1991"
} 
@inproceedings{PADL07,
 author    = {A. Podelski and
              A. Rybalchenko},
 title     = {{ARMC}: The Logical Choice for Software Model Checking with
              Abstraction Refinement},
 booktitle = {PADL},
 year      = {2007}
}

@inproceedings{TerauchiPOPL2010,
  author    = {T. Terauchi},
  title     = {Dependent types from counterexamples},
  booktitle = {POPL},
  year      = {2010},
  publisher = {ACM},
}

@inproceedings{UnnoPPDP09,
  author    = {H. Unno and
               N. Kobayashi},
  title     = {Dependent type inference with interpolants},
  booktitle = {PPDP},
  year      = {2009},
  publisher = {ACM},
}

@article{MineOctagon06,
  author =    {Min\'e, A{.}},
  title =     {The Octagon Abstract Domain},
  journal =   {Higher-Order and Symbolic Computation},
  publisher = {Springer},
  year =      {2006},
  volume =    {19},
  number =    {1},
  pages =     {31--100},
}

@inproceedings{ColonCAV03,
  author    = {M. Col{\'o}n and
               S. Sankaranarayanan and
               H. Sipma},
  title     = {Linear Invariant Generation Using Non-linear Constraint
               Solving},
  booktitle = {CAV},
  year      = {2003},
  publisher = {Springer},
}

@inproceedings{BeyerVMCAI07,
  author    = {Dirk Beyer and
               Thomas A. Henzinger and
               Rupak Majumdar and
               Andrey Rybalchenko},
  title     = {Invariant Synthesis for Combined Theories},
  booktitle = {VMCAI},
  year      = {2007},
  publisher = {Springer},
}

@inproceedings{Kennedy06,
  author = {Andrew J. Kennedy and Benjamin C. Pierce},
  title = {On Decidability of Nominal Subtyping with Variance},
  year = {2007},
  booktitle = {FOOL-WOOD},
}

@inproceedings{An11,
 author = {An, Jong-hoon (David) and Chaudhuri, Avik and Foster, Jeffrey S. and Hicks, Michael},
 title = {Dynamic Inference of Static Types for Ruby},
 booktitle = {POPL},
 year = {2011},
 }

@inproceedings{Rem89,
 author = {Didier R\'{e}my},
 title = {Type checking records and variants in a natural extension of ML},
 booktitle = {POPL},
 year = {1989},
 }

@ARTICLE{Rem94,
    author = {Didier R\'{e}my},
    title = {Type Inference for Records in a Natural Extension of ML},
    journal = {Theoretical Aspects of Object-Oriented Programming: Types, Semantics, and Language Design},
    year = {1994}
}

@INPROCEEDINGS{Car93,
    author = {Luca Cardelli and John C. Mitchell},
    title = {Operations on Records},
    booktitle = {Mathematical Structures in Computer Science},
    year = {1993},
    pages = {3--48}
}

@ARTICLE{Car94,
    author = {Luca Cardelli and John C. Mitchell},
    title = {Operations on Records},
    journal = {Theoretical Aspects of Object-Oriented Programming: Types, Semantics, and Language Design},
    year = {1994}
}

@inproceedings{typedracket,
  author    = {Sam Tobin-Hochstadt and Matthias Felleisen},
  title     = {Logical types for untyped languages},
  booktitle = {ICFP},
  year      = {2010},
}

@inproceedings{Tob08,
  author    = {Sam Tobin-Hochstadt and Matthias Felleisen},
  title = {The design and implementation of typed scheme},
  booktitle = {POPL},
  year = {2008},
 }

@inproceedings{Car91,
 author = {Robert Cartwright and Mike Fagan},
 title = {Soft typing},
 booktitle = {PLDI},
 year = {1991},
 }

@INPROCEEDINGS{Sie06,
    author = {Jeremy Siek and Walid Taha},
    title = {Gradual Typing for Functional Languages},
    booktitle = {Scheme and Functional Programming Workshop},
    year = {2006},
}

@INPROCEEDINGS{Sie07,
    author = {Jeremy Siek and Walid Taha},
    title = {Gradual typing for objects},
    booktitle = {ECOOP},
    year = {2007},
}

@inproceedings{Sie08,
    author = {Jeremy Siek and Manish Vachharajani},
    title = {Gradual Typing with Unification-based Inference},
    booktitle = {DLS},
    year = {2008}
}

@INPROCEEDINGS{Bie10,
    author = {Gavin Bierman and Erik Meijer and Mads Torgersen},
    title = {Adding Dynamic Types to C\#},
    booktitle = {ECOOP},
    year = {2010},
}

@inproceedings{Wri10,
 author = {Wrigstad, Tobias and Nardelli, Francesco Zappa and Lebresne, Sylvain and \"{O}stlund, Johan and Vitek, Jan},
 title = {Integrating typed and untyped code in a scripting language},
 booktitle = {POPL},
 year = {2010},
 }

@inproceedings{Fur09a,
 author = {Furr, Michael and An, Jong-hoon (David) and Foster, Jeffrey S. and Hicks, Michael},
 title = {Static type inference for Ruby},
 booktitle = {SAC},
 year = {2009},
 }

@inproceedings{Fur09b,
 author = {Furr, Michael and An, Jong-hoon (David) and Foster, Jeffrey S.},
 title = {Profile-guided static typing for dynamic scripting languages},
 booktitle = {OOPSLA},
 year = {2009},
 }

@inproceedings{Guha10b,
 author = {Arjun Guha and Claudiu Saftoiu and Shriram Krishnamurthi},
 title = {The Theory and Practice of Typed JavaScript},
 year = {Unpublished draft, June 2010},
 }

@inproceedings{CVC3,
  author    = "Clark Barrett and Cesare Tinelli",
  title     = "{CVC3}",
  booktitle = "Proceedings of the $19^{th}$ International Conference on Computer Aided Verification (CAV '07)",
  series    = "Lecture Notes in Computer Science",
  volume    = 4590,
  publisher = "Springer-Verlag",
  editor    = "Werner Damm and Holger Hermanns",
  pages     = "298--302",
  month     = jul,
  year      = 2007,
  note      = "Berlin, Germany"
}

@inproceedings{dminor,
  author    = {Gavin M. Bierman and
               Andrew D. Gordon and
               Catalin Hritcu and
               David E. Langworthy},
  title     = {Semantic subtyping with an SMT solver},
  booktitle = {ICFP},
  year      = {2010},
  ee        = {http://doi.acm.org/10.1145/1863543.1863560}
}

@INPROCEEDINGS{Hen95,
    author = {Fritz Henglein and Jakob Rehof},
    title = {Safe polymorphic type inference for a Dynamically Typed Language: Translating Scheme to ML},
    booktitle = {Functional Programming Languages and Computer Architecture},
    year = {1995},
}

@inproceedings{Ern99,
 author = {Ernst, Michael D. and Cockrell, Jake and Griswold, William G. and Notkin, David},
 title = {Dynamically discovering likely program invariants to support program evolution},
 booktitle = {ICSE},
 year = {1999},
 }

@book{TAPL,
  author = {Benjamin C. Pierce},
  title = {Types and Programming Languages},
  year = {2002},
}

@inproceedings{Wand87,
	author = {Mitchell Wand},
        title = {Complete Type Inference for Simple Objects},
	booktitle = {LICS},
	year = {1987},
}

@inproceedings{Ernst00,
 author = {Ernst, Michael D. and Czeisler, Adam and Griswold, William G. and Notkin, David},
 title = {Quickly detecting relevant program invariants},
 booktitle = {ICSE},
 year = {2000},
 }

@inproceedings{Perkins04,
 author = {Perkins, Jeff H. and Ernst, Michael D.},
 title = {Efficient incremental algorithms for dynamic detection of likely invariants},
 booktitle = {FSE},
 year = {2004},
 }

@inproceedings{Abadi89,
 author = {Abadi, Martin and Cardelli, Luca and Pierce, Benjamin C. and Plotkin, Gordon},
 title = {Dynamic typing in a statically-typed language},
 booktitle = {POPL},
 year = {1989},
 }

@inproceedings{Thatte90,
 author = {Thatte, Satish},
 title = {Quasi-static typing},
 booktitle = {POPL},
 year = {1990},
 }

@inproceedings{lambdajs,
 author = {Arjun Guha and Claudiu Softoiu and Shriram Krishnamurthi},
 title = {Typing Local Control and State Using Flow Analysis},
 booktitle = {ESOP},
 year = {2011},
 }

@Unpublished{   dojo-js,
  author  = "{The Dojo Foundation}",
  title   = "Dojo Toolkit",
  note    = "\url{http://dojotoolkit.org/}"
}

@Unpublished{python-32,
  author  = "{The Python Software Foundation}",
  title   = "Python 3.2 Standard Library",
  note    = "\url{http://python.org/}"
}

@inproceedings{Drossopoulou05,
booktitle	= {ECOOP},
title		= {{Towards Type Inference for JavaScript}},
ISSN		= {0302-9743},
author		= {Anderson, Christopher and Drossopoulou, Sophia and Giannini, Paola},
pages		= {428--452},
month		= {June},
year		= {2005},
}
				
@inproceedings{Thiemann10,
  author    = {Phillip Heidegger and Peter Thiemann},
  title     = {Recency Types for Analyzing Scripting Languages},
  booktitle = {ECOOP},
  year      = {2010}  
}

@inproceedings{Thiemann05,
 author = {Peter Thiemann},
 title = {Towards a Type System for Analyzing JavaScript Programs},
 booktitle = {ESOP},
 year = {2005},
 }

@inproceedings{Guha10a,
 author = {Arjun Guha and Claudiu Saftoiu and Shriram Krishnamurthi},
 title = {The Essence of JavaScript},
 booktitle = {ECOOP},
 year = {2010},
 }

@inproceedings{Hindley69,
 author = {Roger Hindley},
 title = {The Principal Type-Scheme of an Object in Combinatory Logic},
 booktitle = {Transactions of the American Mathematical Society},
 year = {1969},
 }

@article{Car85,
 author = {Cardelli, Luca and Wegner, Peter},
 title = {On Understanding Types, Data Abstraction, and Polymorphism},
 journal = {ACM Computing Surveys},
 year = {1985},
 }

@ARTICLE{Mil78,
    author = {Robin Milner},
    title = {A theory of type polymorphism in programming},
    journal = {Journal of Computer and System Sciences},
    year = {1978},
}

@inproceedings{Dam82,
 author = {Damas, Luis and Milner, Robin},
 title = {Principal Type-Schemes for Functional Programs},
 booktitle = {POPL},
 year = {1982},
 }

@inproceedings{Wel94,
 author = {Joe Wells},
 title = {Typability and Type Checking in the Second-order Lambda Calculus are Equivalent and Undecidable},
 booktitle = {LICS},
 year = {1994},
 }

@inproceedings{Sie09,
 author = {Siek, Jeremy and Garcia, Ronald and Taha, Walid},
 title = {Exploring the Design Space of Higher-Order Casts},
 booktitle = {ESOP},
 year = {2009},
 }

@inproceedings{Sie10,
 author = {Siek, Jeremy G. and Wadler, Philip},
 title = {Threesomes, with and without blame},
 booktitle = {POPL},
 year = {2010},
 }


@inproceedings{Foster09,
  author    = {Michael Furr and
               Jong-hoon (David) An and
               Jeffrey S. Foster and
               Michael W. Hicks},
  title     = {Static type inference for Ruby},
  booktitle = {SAC},
  year      = {2009},
  pages     = {1859-1866},
  ee        = {http://doi.acm.org/10.1145/1529282.1529700},
}

@article{Palsberg96,
 author = {Palsberg, Jens},
 title = {Type inference for objects},
 journal = {ACM Computing Surveys},
 year = {1996},
 }

@ARTICLE{Bruce99,
  author = {Kim B. Bruce and Luca Cardelli and Benjamin C. Pierce},
  title = {Comparing Object Encodings},
  journal = {Information and Computation},
  year = 1999,
}

@inproceedings{Foster11,
 author = {An, Jong-hoon (David) and Chaudhuri, Avik and Foster, Jeffrey S. and Hicks, Michael},
 title = {Dynamic Inference of Static Types for Ruby},
 booktitle = {POPL},
 year = {2011},
 }

@inproceedings{Pfe88,
 author = {Frank Pfenning},
 title = {Partial Polymorphic Type Inference and Higher-Order Unification},
 booktitle = {POPL},
 year = {1988},
}

@inproceedings{arrayz3,
  author    = {Leonardo de Moura and
               Nikolaj Bj{\o}rner},
  title     = {Generalized, efficient array decision procedures},
  booktitle = {FMCAD},
  year      = {2009},
  pages     = {45-52},
  ee        = {http://dx.doi.org/10.1109/FMCAD.2009.5351142},
}

@inproceedings{Mccarthy,
    author = {John Mc{C}arthy},
    title = {Towards a Mathematical Science of Computation},
    booktitle = {IFIP},
    year = {1962},
}

@inproceedings{Zhao10,
 author = {Tian Zhao},
 title = {Type Inference for Scripting Languages with Implicit Extension},
 booktitle = {FOOL},
 year = {2010},
}

@inproceedings{Zhao11,
 author = {Tian Zhao},
 title = {Polymorphic Type Inference for Scripting Languages with Object Extensions},
 booktitle = {DLS},
 year = {2011},
}


@inproceedings{NestedPOPL12,
 author = {Ravi Chugh and Patrick M. Rondon and Ranjit Jhala},
 title = {Nested Refinements: A Logic for Duck Typing},
 booktitle	= {POPL},
 year		= 2012,
}

@inproceedings{NestedTR,
 author = {Ravi Chugh and Patrick M. Rondon and Ranjit Jhala},
 title = {Nested Refinements: A Logic for Duck Typing},
 note = "\url{http://arxiv.org/abs/1103.5055v2}",
}

@article{harper-lf,
  author  = "Robert Harper and Furio Honsell and Gordon Plotkin" ,
  title = "A Framework for Defining Logics" ,
  journal = "Journal of the Association for Computing Machinery" ,
  volume  = "40" ,
  number  = "1" ,
  month = "January" ,
  year  = "1993" ,
  pages = "143--184"
}

@Book{coq-book,
  author       = "Bertot, Yves and Cast\'eran, Pierre",
  title        = "Interactive Theorem Proving and Program Development. Coq'Art: The Calculus of Inductive Constructions",
  series       = "Texts in Theoretical Computer Science",
  year         = "2004",
  publisher    = "Springer Verlag",
}

@inproceedings{FournetCCS11,
  author    = {C. Fournet and
               M. Kohlweiss and
               P-Y. Strub},
  title     = {Modular code-based cryptographic verification},
  booktitle = {CCS},
  year      = {2011},
  pages     = {341-350},
  ee        = {http://doi.acm.org/10.1145/2046707.2046746},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{DBLP:journals/tissec/BhargavanFCZ12,
  author    = {Karthikeyan Bhargavan and
               C{\'e}dric Fournet and
               Ricardo Corin and
               Eugen Zalinescu},
  title     = {Verified Cryptographic Implementations for TLS},
  journal   = {ACM Trans. Inf. Syst. Secur.},
  volume    = {15},
  number    = {1},
  year      = {2012},
  pages     = {3},
  ee        = {http://doi.acm.org/10.1145/2133375.2133378},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{GordonTOPLAS2011,
  author    = {J. Bengtson and
               K. Bhargavan and
               C. Fournet and
               A. D. Gordon and
               S. Maffeis},
  title     = {Refinement types for secure implementations},
  journal   = {ACM TOPLAS},
  volume    = {33},
  number    = {2},
  year      = {2011},
  pages     = {8},
  ee        = {http://doi.acm.org/10.1145/1890028.1890031},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{ SwamyOAKLAND11,
  author    = {A. Guha and
               M. Fredrikson and
               B. Livshits and
               N. Swamy},
  title     = {Verified Security for Browser Extensions},
  booktitle = {IEEE Symposium on Security and Privacy},
  year      = {2011},
  pages     = {115-130},
  ee        = {http://doi.ieeecomputersociety.org/10.1109/SP.2011.36},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@InProceedings{scc10fine,
  AUTHOR = {Nikhil Swamy and Juan Chen and Ravi Chugh},
  TITLE = {Enforcing Stateful Authorization and Information Flow Policies in Fine}, 
  MONTH = March,
  YEAR = 2010,
  BOOKTITLE = {ESOP}, 
}

@inproceedings{SwamyCFSBY11,
  author    = {N. Swamy and
               J. Chen and
               C. Fournet and
               P-Y. Strub and
               K. Bhargavan and
               J. Yang},
  title     = {Secure distributed programming with value-dependent types},
  booktitle = {ICFP},
  year      = {2011},
  pages     = {266-278},
  ee        = {http://doi.acm.org/10.1145/2034773.2034811}
}


@Book{JSGoodParts,
  title		= {JavaScript: The Good Parts},
  author	= {Douglas Crockford},
  publisher	= {Yahoo! Press},
  year		= 2008
}

@InProceedings{MaffeisJS,
  author       = "S. Maffeis and J.C. Mitchell and A. Taly",
  title        = "An Operational Semantics for {JavaScript}",
  booktitle    = "APLAS",
  year         = "2008",
}

@Book{ECMA,
  title		= {ECMAScript Language Specification, ECMA-262,
             3rd ed.},
  author	= {ECMA International},
  year		= 1999
}

@unpublished{ECMAcommittee,
  author = "ECMA TC-39 Committee",
  note   = "\url {http://www.ecmascript.org/community.php}"
}

@unpublished{SunSpider,
  author = "SunSpider",
  title  = "JavaScript Benchmark",
  note   = "\url {http://www.webkit.org/perf/sunspider/sunspider.html}"
}

@InProceedings{AKFT03,
  author    = {Alex Aiken and John Kodumal and
               Jeffrey S. Foster and Tachio Terauchi},
  title     = {Checking and Inferring Local Non-Aliasing},
  booktitle = {PLDI},
  year      = {2003}
}

@Article{LinLocFI07,
  author =       {Amal Ahmed and Matthew Fluet and Greg Morrisett},
  title =        {L$^3$:~A Linear Language with Locations},
  journal =      {Fundamenta Informaticae},
  year =         2007,
  volume =       77,
  number =       4,
  pages =        {397--449},
  month =        {June},
  publisher =    {IOS Press},
}

@book{ATheoryOfObjects,
	author={Martin Abadi and Luca Cardelli},
	title={A Theory of Objects},
	publisher={Springer-Verlag},
	year={1996},
}

@InProceedings{Bono98,
  author = {Viviana Bono and Kathleen Fisher},
  title = {An Imperative, First-Order Calculus with Object Extension},
  booktitle = {ECOOP},
  year = {1998}
}

@inproceedings{crowfoot,
  author    = {Nathaniel Charlton and
               Ben Horsfall and
               Bernhard Reus},
  title     = {Crowfoot: A Verifier for Higher-Order Store Programs},
  booktitle = {VMCAI},
  year      = {2012},
  pages     = {136-151}
}

@INPROCEEDINGS{Gianantonio98,
  author = {Pietro Di Gianantonio and Furio Honsell and Luigi Liquori},
  title = {A Lambda Calculus of Objects with Self-Inflicted Extension},
  booktitle = {OOPSLA},
  year = {1998},
}

@inproceedings{Politz11,
 author = {Politz, Joe Gibbs and Eliopoulos, Spiridon Aristides and
           Guha, Arjun and Krishnamurthi, Shriram},
 title = {ADsafety: type-based verification of JavaScript Sandboxing},
 booktitle = {USENIX Security},
 year = {2011},
} 

@unpublished{Guha11draft,
 author = {Guha, Arjun and Politz, Joe Gibbs and Krishnamurthi, Shriram},
 title = {Fluid Object Types},
 year = {2011},
} 

@inproceedings{Plaid,
 author = {Sunshine, Joshua and Naden, Karl and Stork, Sven and
           Aldrich, Jonathan and Tanter, \'{E}ric},
 title = {First-class state change in plaid},
 booktitle = {OOPSLA},
 year = {2011},
} 

@inproceedings{FirefoxTI,
  author    = {Shu-yu Guo and Brian Hackett},
  title     = {Fast and Precise Hybrid Type Inference for JavaScript},
  booktitle = {PLDI},
  year      = {2012},
}

