Long gone are the days when program veri? cation was a task carried out merely by hand
with paper and pen. For one, we are increasingly interested in proving actual program …

An information system maintains a representation of the state of the domain in its Information
Base (IB). The state of the IB changes due to the execution of the operations defined in the …

Abstract The Object Constraint Language (OCL) is a high-level, object-oriented language for
contractual system specifications. Despite its expressivity, OCL does not provide primitives …

In early phases of designing complex systems, models are not sufficiently detailed to serve
as an input for automated synthesis tools. Instead, a design space is constituted by multiple …

The design of safety-critical systems and business-critical services necessitates to
coordinate between a large variety of tools used in different phases of the development …

The “model-driven development of model transformations” requires both a technique to
model model transformations as well as a means to transform transformation models …

In behavioral modeling, operation contracts defined by pre-and postconditions describe the
effects on model properties (ie, model elements such as attributes, links, etc.) that are …

The paradigm of contractual specification provides a transparent way of specifying systems.
It clearly distinguishes between client and implementer obligations. One of the best known …

There are two different approaches to specify the behavior of the operations of an
Information System. In the imperative approach, the operation effect is defined by means of …

This paper studies two realizations of graph transformations which are based on a UML
class diagram. The first realization achieves a representation in terms of descriptive pre-and …