Invaluable Feedback from a Superb Team of Requirements Engineers

A traditional formal veri cation method becomes an e ective weapon in the arsenal of a designer only after su cient insight into a design problem has been developed for a draft solution to be formalized. In the initial phases of a design the designers can therefore perceive formal methods to be more of a hindrance than an assistance. Since formal methods are meant to be problem solving tools, we would like to nd ways to make them both e ective and attractive from the moment that a design process begins. Invited paper: 4th Int. School and Symposium on Formal Techniques in Real Time and Fault Tolerant Systems. Sept 1996, Uppsala, Sweden