Temporal logic is widely used for specifying hardware and software systems. Typically two types of properties are distinguished, safety and liveness properties. While safety can easily be checked by reachability analysis, and many efficient checkers for safety properties exist, more sophisticated algorithms have always been considered to be necessary for checking liveness. In this paper we desc...

Food safety concerns people's lives and property safety, the repeated food scandals of Chinese food safety brings a great shock at home and abroad. Chinese government has put forward many policies and schemes to solve the repeated food problems in China in recent years. There are several important measures in the process of dealing with the food safety problem. Among them, food recall is the mo...

4 Implementation 9 4.1 Time-stamping Algorithm . . . . . . . . . . . . . . . . . . . . . . 9 4.2 Correctness of the Implementation . . . . . . . . . . . . . . . . . 11 4.2.1 Preliminary Results . . . . . . . . . . . . . . . . . . . . . 11 4.2.2 Proofs of Safety Conditions . . . . . . . . . . . . . . . . . 12 4.3 Progress Condition . . . . . . . . . . . . . . . . . . . . . . . . . . 14 4.3.1 Pro...

Modified condition/decision coverage is a structural coverage criterion requiring that each condition within a decision is shown by execution to independently and correctly affect the outcome of the decision. This criterion was developed to help meet the need for extensive testing of complex Boolean expressions in safety-critical applications. The paper describes the modified condition/decision...

Many answer set solvers deal with programs with variables by requiring a safety condition on rules: any variable in a rule must appear in its positive body. This idea of safety has recently been extended to cover more general kinds of rules or first-order formulas that might be accepted by existing or future generation ASP systems [4, 12, 7]. In this paper we continue the study of the generalis...

It has been observed repeatedly that the standard safety-liveness classi cation for properties of reactive systems does not t for real-time properties. This is because the implicit \liveness" of time shifts the spectrum towards the safety side. While, for example, response | that \something good" will happen eventually | is a classical liveness property, bounded response | that \something good"...

We study embeddings of programming languages into one another that preserve what reductions take place at compile-time, i.e., staging. A certain condition — what we call a 'Turing complete kernel' — is sufficient for a language to be stage-universal in the sense that any language may be embedded in it while preserving staging. A similar line of reasoning yields the notion of safety-preserving e...

In this paper, we propose a self-stabilizing mutual exclusion algorithm using tokens for the mobile ad hoc network. Since the liveness condition of mutual exclusion can’t be guaranteed by any algorithm for a mobile ad hoc network with arbitary mobility, we consider a mobile ad hoc network with restricted mobility. Our algorithm is based on the dynamic virtual rings formed by the token circulati...

In many cases, crashes at intersections account for over 50% of all urban road accidents. The need to reduce these crashes has fostered considerable research on the development and evaluation of traffic safety at intersections. This paper introduces a micro-level behavioral method for estimating crash potential at signalized and unsignalized intersections for different traffic characteristics. ...

In an effort to ensure public safety, many civil engineering structures undergo various inspections to assess their condition or performance. Comprehensive procedures for using routine inspection data to update reliability assessments have not been developed. This paper illustrates how the Condition Index inspection data from a specific miter gate on a Corps of Engineers navigation lock can be ...