This paper presents a novel discriminative learning method, called manifold discriminant
analysis (MDA), to solve the problem of image set classification. By modeling each image …

Safety-critical systems, by definition those systems whose failure can cause catastrophic
results for people, the environment, and the economy, are becoming increasingly complex …

Ten years ago the Mondex electronic purse was certified to ITSEC Level E6, the highest
level of assurance for secure systems. This involved building formal models in the Z …

Refinement is reviewed, highlighting in particular the distinction between its use as a
specification constructor at a high level, and its use as an implementation mechanism at a …

Our increasing reliance on software systems requires reliable software. Mainstream software
manufacture, however, is not rigorous and precise, and resulting software lacks the desired …

Retrenchment is a flexible model evolution formalism that compensates for the limitations
imposed by specific formulations of refinement. Its refinement-like proof obligations feature …

Retrenchment is a flexible model evolution formalism that arose as a reaction to the
limitations imposed by refinement, and for which the proof obligations feature additional …

Some of the success stories of model based refinement are recalled, as well as some of the
annoyances that arise when refinement is deployed in the engineering of large systems. The …

Refinement of formal system models towards implementation has been a mainstay of system
development since the inception of formal and Correct by Construction approaches to …

The Mondex electronic purse is an outstanding example of industrial scale formal
refinement, and was the first verification to achieve ITSEC level E6 certification. A formal …