From STPA to Safe Behavior Models

Jette Petzold, Reinhard von Hanxleden

Model checking is a proven approach for checking whether the behavior model of a safety-critical system fulfills safety properties that are stated as LTL formulas.We propose rules…