Formal requirements specification analysis of attitude control of the International Space Station Alpha

A.E.K. Sobel
Proceedings of the Thirty-First Hawaii International Conference on System Sciences  
An operational formal method exists that is based on the externally visible behavior of a program. This formal method is modular, fully abstract, and has a form that is similar to the notations used in industrial requirements specifications. The specification model of the operational formal method is used to analyze the failure, detection, isolation, and recovery process for the attitude control component of the Command and Control software subsystem of the International Space Station Alpha.
doi:10.1109/hicss.1998.656300 dblp:conf/hicss/Sobel98 fatcat:gsz3xbk2ofdqrkgcnaxoftwb5y