@inproceedings{ABBD95,
  address     ={Liege, Belgium},
  author      ={A. Aziz and F. Balarin and R.K. Brayton 
		and M.D. Dibenedetto and A. Sladanha 
		and A.L. Sangiovanni-Vincentelli},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={ABBD95},
  month       ={July},
  pages       ={279--292},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Supervisory control of finite state machines},
  volume      ={939},
  year        ={1995}
}
@inproceedings{ABCC96,
  address     ={New Brunswick, NJ, USA},
  author      ={K.D. Anon and N. Boulerice and E. Cerny 
		and F. Corella and M. Langevin and X. Song 
		and S. Tahar and Y. Xu and Z. Zhou},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={ABCC96},
  month       ={July/August},
  pages       ={433--436},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{MDG} tools for the verification of {RTL} designs},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{ABCH94,
  address     ={San Diego, CA},
  author      ={A. Aziz and F. Balarin and S.-T. Cheng and R. Hojati 
		and T. Kam and S.C. Krishnan and R.K. Ranjan and T.R. Shiple 
		and V. Singhal and S. Tasiran and H.-Y. Wang and R.K. Brayton 
		and A.L. Sangiovanni-Vincentelli},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={ABCH94},
  keyword     ={design},
  month       ={June},
  publisher   ={San Diego Convention Center},
  title       ={{HSIS}: {A} {BDD}-{B}ased {E}nvironment for {F}ormal {V}erification},
  year        ={1994}
}
@inproceedings{ABIN93,
  address     ={Vancouver, Canada},
  author      ={P.B. Andrews and M. Bishop and S. Issar and D. Nesmith and F. Pfenning and H. Xi},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={ABIN93},
  keyword     ={type_theory},
  month       ={August},
  organization={University of British Columbia},
  pages       ={366--372},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={{TPS}: {A}n {I}nteractive and {A}utomatic {T}ool for {P}roving {T}heorems of {T}ype {T}heory},
  volume      ={780},
  year        ={1993}
}
@inproceedings{ABKM97,
  address     ={Grenoble, France},
  author      ={E. Asarin and M. Bozga and A. Kerbrat and O. Maler and M. Pnueli and A. Rasse},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={ABKM97},
  pages       ={346-360},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Data Structures for the Verification of Timed Automata},
  year        ={1997}
}
@techreport{ACDH92,
  author      ={R. Alur and C. Courcoubetis and D. Dill and N. Halbwachs and H. Wong-Toi},
  key         ={ACDH92},
  keyword     ={hardware verification other},
  title       ={{A}n {I}mplementation of {T}hree {A}lgorithm for {T}iming {V}erification {B}ased on {A}utomata {E}mptiness},
  year        ={1992}
}
@incollection{ACHH93,
  author      ={R. Alur and C. Courcoubetis and T.A. Henzinger and P.-H. Ho},
  booktitle   ={Hybrid Systems},
  editor      ={R.L. Grossmann and A. Nerode and A.P. Ravn and H. Rischel},
  key         ={ACHH93},
  pages       ={209--229},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{H}ybrid {A}utomata: {A}n {A}lgorithmic {A}pproach to the {S}pecification and {V}erification of {H}ybrid {S}ystems},
  volume      ={736},
  year        ={1993}
}
@inproceedings{ACJM95,
  author      ={M.A. Ardis and J.A. Chaves and L.J. Jagadeesan and P. Mataga and C. Puchol and M.G. Staskauskas and J. von Olnhausen},
  booktitle   ={International Conference on Software Engenieering},
  key         ={ACJM95},
  title       ={A Framework for Evaluating Specification Methods for Reactive Systems},
  year        ={1995}
}
@inproceedings{ACMA92,
  address     ={Leuven, Belgium},
  author      ={C.M. Angelo and L. Claesen and H. De Man and M. Archer and G. Fink and L. Yang},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={ACMA92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={375--394},
  publisher   ={North-Holland},
  title       ={{T}he {F}ormal {S}emantics {D}efinition of a {M}ulti-{R}ate {DSP} {S}pecification {L}anguage in {HOL}},
  year        ={1992}
}
@misc{ADA83,
  key         ={ADA83},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The Programming Language {ADA} Reference Manual},
  volume      ={155},
  year        ={1983}
}
@proceedings{AFMD89,
  key         ={AFMD89},
  keyword     ={HDL VHDL verification hardware},
  organization={IFIP WG 10.2/WG 10.5},
  publisher   ={North-Holland, published 1990},
  title       ={{I}nternational {W}orkshop on {A}pplied {F}ormal {M}ethods for {C}orrect {VLSI} {D}esign},
  year        ={1989}
}
@inproceedings{AGHL88,
  author      ={L.M. Augustin and B.A. Gennart and Y. Huh and D.C. Luckham and A.G. Stanculescu},
  booktitle   ={Design Automation Conference (DAC)},
  key         ={AGHL88},
  keyword     ={verification VHDL VAL},
  pages       ={48--53},
  publisher   ={ACM/IEEE},
  title       ={Verification of {VHDL} Designs Using {VAL}},
  year        ={1988}
}
@inproceedings{AINP90,
  author      ={P.B. Andrews and S. Issar and D. Nesmith and F. Pfennig},
  booktitle   ={Conference on Automated Deduction (CADE)},
  editor      ={M.E. Stickel},
  key         ={AINP90},
  pages       ={641-642},
  publisher   ={Springer-Verlag},
  title       ={{T}he {TPS} {T}heorem {P}roving {S}ystem},
  year        ={1990}
}
@inproceedings{AKRT97,
  address     ={Enschede, The Netherlands},
  author      ={P.R. D'Argenio and J.P. Katoen and T.C. Ruys and J. Tretmans},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={AKRT97},
  pages       ={416-432},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={The Bounded Retransmission Protocol Must Be on Time!},
  year        ={1997}
}
@inproceedings{ALAD92,
  address     ={Santa Clara, California},
  author      ={F. van Aelten and S.Y. Liao and J. Allen and S. Devadas},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={ALAD92},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={183--187},
  publisher   ={IEEE Computer Society Press},
  title       ={{A}utomatic {G}eneration and {V}erification of {S}ufficient {C}orrectness {P}roperties for {S}ynchronous {P}rocessors},
  year        ={1992}
}
@inproceedings{ALLS93,
  address     ={Vancouver, Canada},
  author      ={T. Arora and T. Leung and K.N. Levitt and T. Schubert and P.J. Windley},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={ALLS93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={239--253},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{R}eport on the {UCD} {M}icrocoded {V}iper {V}erification {P}roject},
  volume      ={780},
  year        ={1993}
}
@inproceedings{ASBS95,
  address     ={Liege, Belgium},
  author      ={A. Aziz and V. Singhal and R.K. Brayton and A.L. Sangiovanni-Vincentelli},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={ASBS95},
  month       ={July},
  pages       ={155-165},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={It Usually Works: The temporal Logic of stochastic systems},
  volume      ={939},
  year        ={1995}
}
@inproceedings{ASSB96,
  address     ={New Brunswick, NJ, USA},
  author      ={A. Aziz and K. Sanwal and V. Singhal and R. K. Brayton},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={ASSB96},
  month       ={July/August},
  pages       ={269--276},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verifying continuous-time Markov Chains},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{ASSB94,
  author      ={A. Aziz and V. Singhal and G.M. Swamy and R.K. Brayton},
  title       ={Minimizing Interacting Finite State Machines: 
		A Compositional Approach to Language Containment},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  year        ={1994},
  address     ={Cambridge, MA},
  month       ={October},
  key         ={ASSB94}
}
@inproceedings{ASBB94,
  author      ={A. Aziz and V. Singhal and F. Balarin and R.K. Brayton 
		and A.L. Sangiovanni-Vincentelli},
  title       ={Equivalences for Fair Kripke Structures},
  booktitle   ={International Colloquium on Automata, Languages and Programming (ICALP)},
  year        ={1994},
  address     ={Jerusalem, Israel},
  month       ={July},
  key         ={ASBB94}
}
@inproceedings{ASSS94,
  address     ={Standford, California, USA},
  author      ={A. Aziz and T. R. Shiple and V. Singhal and A. L. Sangiovanni-vincentelli},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={ASSS94},
  month       ={June},
  pages       ={324--337},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Formula-Dependent Equivalence for Compositional {CTL} Model Checking},
  volume      ={818},
  year        ={1994}
}
@inproceedings{AVCM91,
  author      ={C.M. Angelo and D. Verkest and L. Claesen and H. De Man},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  key         ={AVCM91},
  keyword     ={HOL-System theorem_proving},
  pages       ={340--347},
  publisher   ={IEEE Press},
  title       ={{F}ormal {H}ardware {V}erification in {HOL} and in {B}oyer-{M}oore: {A} {C}omparative {A}nalysis},
  year        ={1991}
}
@article{AVCM93,
  author      ={C.M. Angelo and D. Verkest and L. Claesen and H. De Man},
  journal     ={Formal Methods in System Design: An International Journal},
  key         ={AVCM93},
  keyword     ={survey verification hardware},
  month       ={February},
  note        ={Kluwer Academic Publishers},
  number      ={1},
  pages       ={45--72},
  title       ={{O}n the {C}omparison of {HOL} and {B}oyer-{M}oore for {F}ormal {H}ardware {V}erification},
  volume      ={2},
  year        ={1993}
}
@inproceedings{AaEK96,
  address     ={Paris, France},
  author      ={E.H.L. Aarts and G. Essink and E. A. de Kock},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={AaEK96},
  month       ={March},
  pages       ={460--466},
  publisher   ={{IEEE} Computer Society Press (Los Alamitos, California)},
  title       ={Recursive Bipartitioning of Signal Flow Graphs for Programmable Video Signal Processors},
  year        ={1996}
}
@inproceedings{AaLW93,
  address     ={Vancouver, Canada},
  author      ={M. Aagaard and M. Leeser and P.J. Windley},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={AaLW93},
  keyword     ={hardware automation HOL},
  month       ={August},
  organization={University of British Columbia},
  pages       ={400--414},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={{T}oward a {S}uper {D}uper {H}ardware {T}actic},
  volume      ={780},
  year        ={1993}
}
@inproceedings{AaLe92,
  address     ={Leuven, Belgium},
  author      ={M. Aagaard and M. Leeser},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={AaLe92},
  keyword     ={hardware automation HOL verification registertransferlevel},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={177--196},
  publisher   ={North-Holland},
  title       ={{A} {M}ethodology for {R}eusable {H}ardware {P}roofs},
  year        ={1992}
}
@article{AaLe94a,
  author      ={M. Aagaard and M. Leeser},
  journal     ={IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={AaLe94a},
  keyword     ={hardware gatelevel optimization formalsynthesis},
  month       ={April},
  number      ={4},
  pages       ={459--470},
  title       ={{PBS}: {P}roven {B}oolean {S}implification},
  volume      ={13},
  year        ={1994}
}
@inproceedings{AaLe94b,
  address     ={Bad Herrenalb, Germany},
  author      ={M. Aagaard and M. Leeser},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={AaLe94b},
  keyword     ={tpcd94},
  month       ={September},
  note        ={published 1995},
  pages       ={13--32},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{R}easoning {A}bout {P}ipelines with {S}tructural {H}azards},
  volume      ={901},
  year        ={1994}
}
@inproceedings{AaSe95,
  author      ={M. Aagaard and C.-J.H. Seger},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={AaSe95},
  month       ={November},
  pages       ={7--10},
  title       ={The Formal Verification of a Pipelined Double-Precision {IEEE} Floating-Point Multiplier},
  year        ={1995}
}
@book{AbGM92,
  address     ={Oxford},
  author      ={S. Abramsky and D.M. Gabbay and T.S. Maibaum},
  key         ={AbGM92},
  publisher   ={Clarendon Press},
  title       ={Handbook of Logic in Computer Science},
  volume      ={1 (Background: Mathematical Structures)},
  year        ={1992}
}
@book{AbGM92a,
  address     ={Oxford},
  author      ={S. Abramsky and D.M. Gabbay and T.S. Maibaum},
  key         ={AbGM92a},
  publisher   ={Clarendon Press},
  title       ={Handbook of Logic in Computer Science},
  volume      ={2 (Background: Computational Structures)},
  year        ={1992}
}
@inproceedings{AbLa88,
  address     ={Edinburgh},
  author      ={M. Abadi and L. Lamport},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={AbLa88},
  keyword     ={refinement transitionsystem},
  month       ={July},
  organization={IEEE},
  pages       ={165--175},
  title       ={{T}he {E}xistence of {R}efinement {M}appings},
  year        ={1988}
}
@techreport{AbLa90,
  author      ={M. Abadi and L. Lamport},
  institution ={Digital Equipment Cooperation},
  key         ={AbLa90},
  keyword     ={refinement transitionsystem techreport},
  number      ={66},
  title       ={{C}omposing {S}pecifications},
  year        ={1990}
}
@techreport{AbLa93,
  author      ={M. Abadi and L. Lamport},
  institution ={Digital Equipment Cooperation},
  key         ={AbLa93},
  number      ={118},
  title       ={{C}onjoining {S}pecifications},
  year        ={1993}
}
@article{AbLa95,
  author      ={M. Abadi and L. Lamport},
  journal     ={{ACM} Transactions on programming languages and systems},
  key         ={AbLa95},
  month       ={May},
  number      ={3},
  pages       ={507--534},
  title       ={Conjoining Specifications},
  volume      ={17},
  year        ={1995}
}
@article{AbMa89,
  author      ={M. Abadi and Z. Manna},
  journal     ={Journal of Symbolic Computation},
  key         ={AbMa89},
  pages       ={277-295},
  title       ={{T}emporal {L}ogic {P}rogramming},
  volume      ={8},
  year        ={1989}
}
@phdthesis{Prob96,
  address     ={Pittsburgh},
  author      ={S.T. Probst},
  key         ={Prob96},
  school      ={Carnegie Mellon University},
  title       ={Chemical Process and Operability Analysis using Symbolic
Model Checking},
  year        ={1996}
}
@phdthesis{Abra80,
  address     ={Seattle},
  author      ={K. Abrahamson},
  key         ={Abra80},
  school      ={University of Washington},
  title       ={Decidability and expressiveness of Logics of Processes},
  year        ={1980}
}
@article{Abra93,
  author      ={S. Abramsky},
  journal     ={Theoretical Computer Science},
  key         ={Abra93},
  number      ={111},
  pages       ={3-57},
  title       ={Computational interpretations of linear logic},
  year        ={1993}
}
@inproceedings{Acha95,
  address     ={Passau},
  author      ={H. Achatz},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden beim Entwurf von Hardwaresystemen},
  editor      ={W. Grass and M. Mutz},
  key         ={Acha95},
  keyword     ={3GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={61--70},
  publisher   ={Shaker Verlag},
  series      ={Berichte aus der Informatik},
  title       ={{U}niversal {S}cheduling in {H}igh-{L}evel {S}ynthesis},
  year        ={1995}
}
@article{Acke35a,
  author      ={W. Ackermann},
  journal     ={Mathematische Annalen},
  key         ={Acke35a},
  pages       ={390-413},
  title       ={{U}ntersuchungen \"{u}ber das {E}liminationsproblem der mathematischen {L}ogik},
  volume      ={110},
  year        ={1935}
}
@article{Acke35b,
  author      ={W. Ackermann},
  journal     ={Mathematische Annalen},
  key         ={Acke35b},
  pages       ={61-63},
  title       ={{Z}um {E}liminationsproblem der mathematischen {L}ogik},
  volume      ={111},
  year        ={1935}
}
@book{Acke68,
  author      ={W. Ackermann},
  key         ={Acke68},
  keyword     ={Logic},
  publisher   ={North-Holland},
  title       ={{S}olvable {C}ases of the {D}ecision {P}roblem},
  year        ={1968}
}
@book{Acte94,
  author      ={Actel},
  key         ={Acte94},
  keyword     ={textbook},
  publisher   ={Actel},
  title       ={{FPGA} {D}ata {B}ook and {D}esign {G}uide},
  year        ={1994}
}
@inproceedings{Adle86,
  author      ={D. Adler},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={Adle86},
  keyword     ={hardware design synchronous},
  organization={IEEE},
  pages       ={159--163},
  title       ={{SIMMOS:} {A} {M}ultiple-{D}elay {S}witch-{L}evel {S}imulator},
  year        ={1986}
}
@article{Adle91,
  author      ={D. Adler},
  journal     ={{IEEE} Transactions on Computer-Aided Design},
  key         ={Adle91},
  month       ={March},
  number      ={3},
  pages       ={346--355},
  title       ={{S}witch-{L}evel {S}imulation {U}sing {D}ynamic {G}raph {A}lgorithms},
  volume      ={10},
  year        ={1991}
}
@article{AeAD93,
  author      ={F. Van Aelten and J. Allen and S. Devadas},
  journal     ={IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={AeAD93},
  keyword     ={formalism fsm symbolic_state_traversal BDD hardware gatelevel verification},
  month       ={December},
  number      ={12},
  pages       ={1947--1959},
  title       ={{V}erification of {R}elations between {S}ynchronous {M}achines},
  volume      ={12},
  year        ={1993}
}
@article{AeAD94,
  author      ={F. van Aelten and J. Allen and S. Devadas},
  journal     ={IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={AeAD94},
  keyword     ={hardware gatelevel verification algorithmiclevel},
  month       ={January},
  number      ={1},
  pages       ={122--134},
  title       ={{E}vent-{B}ased {V}erification of {S}ynchronous, {G}lobally {C}ontrolled, {L}ogic {D}esigns {A}gainst {S}ignal {F}low {G}raphs},
  volume      ={13},
  year        ={1994}
}
@inproceedings{AgBD96,
  address     ={Turku, Finland},
  author      ={S. Agerholm and I. Beylin and P. Dybjer},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harisson},
  key         ={AgBD96},
  month       ={August},
  pages       ={17--32},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Comparison of {HOL} and {ALF} Formalizations of a Categorical Coherence Theorem},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{AgGo95,
  address     ={Aspen Grove, Utah, USA},
  author      ={S. Agerholm and M. Gordon},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={AgGo95},
  month       ={September},
  pages       ={32--45},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{E}xperiments with {ZF} {S}et {T}heory in {HOL} and {I}sabelle},
  volume      ={971},
  year        ={1995}
}
@inproceedings{AgKS83,
  address     ={Amsterdam},
  author      ={S. Agrawal and R.P. Kurshan and K.K. Sabnani},
  booktitle   ={Protocol Specification, Testing and Verification {III}},
  key         ={AgKS83},
  pages       ={19--34},
  publisher   ={North-Holland},
  title       ={{A} {C}alculus for {P}rotocol {S}pecification and {V}alidation},
  year        ={1983}
}
@unpublished{AgMo92,
  author      ={M. d'Agostino and M. Mondadori},
  key         ={AgMo92},
  note        ={To be published},
  title       ={An Improvement of Analytic Tableaux},
  year        ={1992}
}
@inproceedings{AgRS88,
  author      ={P. Agrawal and S.H. Robinson and T.G. Szymanski},
  booktitle   ={{IEEE} Conference},
  key         ={AgRS88},
  organization={IEEE},
  pages       ={350--353},
  title       ={{A}utomatic {M}odeling of {S}witch-{L}evel {N}etworks {U}sing {P}artial {O}rders},
  year        ={1988}
}
@inproceedings{Ager91,
  address     ={Davis, California},
  author      ={S. Agerholm},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Ager91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={208--222},
  publisher   ={IEEE Computer Society Press},
  title       ={{M}echanizing {P}rogram {V}erification in {HOL}},
  year        ={1991}
}
@mastersthesis{Ager92a,
  address     ={Ny Munkegade, Building 540, DK-8000 {\AA}rhus C, Denmark},
  author      ={S. Agerholm},
  key         ={Ager92a},
  month       ={April},
  school      ={Computer Science Department, Matematisk Instituttut, {\AA}rhus Universitet},
  title       ={{M}echanizing {P}rogram {V}erification in {HOL}},
  year        ={1992}
}
@inproceedings{Ager93,
  address     ={Vancouver, Canada},
  author      ={S. Agerholm},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Ager93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={295--310},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={{D}omain {T}heory in {HOL}},
  volume      ={780},
  year        ={1993}
}
@inproceedings{Ager94a,
  address     ={Malta},
  author      ={S. Agerholm},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={Ager94a},
  month       ={September},
  pages       ={1--16},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{LCF} {E}xamples in {HOL}},
  volume      ={859},
  year        ={1994}
}
@techreport{Ager94b,
  author      ={S. Agerholm},
  institution ={University of Cambridge Computer Laboratory},
  key         ={Ager94b},
  note        ={http://www.cl.cam.ac.uk/users/mjcg/papers/holst},
  number      ={354},
  title       ={{F}ormalising a {M}odel of the $\lambda$-calculus in {HOL-ST}},
  year        ={1994}
}
@techreport{Ager94c,
  address     ={University of Aarhus, Denmark},
  author      ={S. Agerholm},
  institution ={Department of Computer Science},
  key         ={Ager94c},
  month       ={December},
  note        ={http://www.daimi.aau.dk/BRICS/RS/94/44/BRICS-RS-94-44/BRICS-RS-94-44.html},
  title       ={A {HOL} {B}asis for {R}easoning about {F}unctional {P}rograms},
  type        ={BRICS RS-94-44, ISSN 0909-0878},
  year        ={1994}
}
@inproceedings{Ager95,
  address     ={Aspen Grove, Utah, USA},
  author      ={S. Agerholm},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={Ager95},
  month       ={September},
  pages       ={17--31},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{N}on-{P}rimitive {R}ecursive {F}unction {D}efinitions},
  volume      ={971},
  year        ={1995}
}
@inproceedings{Ager96,
  address     ={Turku, Finland},
  author      ={S. Agerholm},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harisson},
  key         ={Ager96},
  month       ={August},
  pages       ={1--16},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Translating Specifications in {VDM-SL} to {PVS}},
  volume      ={1125},
  year        ={1996}
}
@article{Agos92,
  author      ={M. d'Agostino},
  journal     ={Journal of Logic, Language, and Information},
  key         ={Agos92},
  number      ={3},
  pages       ={127-139},
  title       ={Are {T}ableaux an {I}mprovement of {T}ruth-{T}ables? {C}ut-{F}ree {P}roofs and {B}ivalence},
  volume      ={1},
  year        ={1992}
}
@book{AhHU74,
  author      ={A. V. Aho and J. E. Hopcroft and J. D. Ullman},
  edition     ={Adisson-Wesley},
  key         ={AhHU74},
  title       ={The Design and Analysis of Computer Algorithms},
  year        ={1974}
}
@book{AiBO94,
  address     ={France Telecom},
  author      ={R. Airiau and J.-M. B{\'e}rge and V. Olive},
  key         ={AiBO94},
  keyword     ={textbook},
  publisher   ={Kluwer Academic Publishers},
  title       ={{C}ircuit {S}ynthesis with {VHDL}},
  year        ={1994}
}
@book{AiNi89,
  author      ={H. Ait-Kaci and M. Nivat},
  key         ={AiNi89},
  keyword     ={Rewrite},
  publisher   ={Academic Press},
  title       ={{R}ewrite {T}echniques, {V}olume {II} of {R}esolution of {E}quations in {A}lgebraic {S}tructures},
  year        ={1989}
}
@inproceedings{AiSC97,
  address     ={Montreal, Canada},
  author      ={O. Ait-Mohamed and X. Song and E. Cerny},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={H. F. Li and D. K. Probst},
  key         ={AiSC97},
  keyword     ={conference},
  month       ={October},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={On the non-termination of {MDG}s-based abstract state enumeration},
  year        ={1997}
}
@article{Ait85,
  author      ={H. Ait-Kaci},
  journal     ={RAIRO Theoretische Informatik},
  key         ={Ait85},
  keyword     ={Rewrite Methods},
  pages       ={359--382},
  title       ={{A}n {A}lgorithm for {F}inding a {M}inimal {R}ecursive {P}ath {O}rdering},
  volume      ={19},
  year        ={1985}
}
@inproceedings{AkGo92,
  address     ={Santa Clara, California},
  author      ={V. Akella and G. Gopalakrishnan},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={AkGo92},
  keyword     ={synthesis},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={587--593},
  publisher   ={IEEE Computer Society Press},
  title       ={{SHILPA:} {A} {H}igh-{L}evel {S}ynthesis {S}ystem for {S}elf-{T}imed {C}ircuits},
  year        ={1992}
}
@article{Aker78,
  author      ={S.B. Akers},
  journal     ={IEEE Transactions on Computers},
  key         ={Aker78},
  keyword     ={formalism propositionallogic BDD},
  month       ={June},
  number      ={6},
  title       ={{B}inary {D}ecision {D}iagrams},
  volume      ={C-27},
  year        ={1978}
}
@inproceedings{AlCD90,
  address     ={Washington, D.C.},
  author      ={R. Alur and C. Courcoubetics and D.L. Dill},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={AlCD90},
  keyword     ={formalism temporallogic modelchecking realtime hardware},
  month       ={June},
  pages       ={414--425},
  publisher   ={IEEE Computer Society Press},
  title       ={{M}odel {C}hecking for {R}eal-{T}ime {S}ystems},
  year        ={1990}
}
@techreport{AlCD91,
  author      ={R. Alur and C. Courcoubetics and D.L. Dill},
  institution ={Stanford University, University of Crete},
  key         ={AlCD91},
  keyword     ={hardware verification modelchecking specification logic realtime},
  title       ={{M}odel {C}hecking in {D}ense {R}eal-time},
  year        ={1991}
}
@inproceedings{AlCL96,
  address     ={Oxford},
  author      ={P.S.C. Alencar and D.D. Cowan and C.J.P. Lucena},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={AlCL96},
  month       ={March},
  pages       ={576-594},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{A} {F}ormal {A}pproach to {A}rchitectural {D}esign {P}atterns},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{AlDi90,
  address     ={New York},
  author      ={R. Alur and D.L. Dill},
  booktitle   ={International Colloquium on Automata, Languages and Programming (ICALP)},
  key         ={AlDi90},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A}utomata for {M}odeling {R}eal-{T}ime {S}ystems},
  volume      ={433},
  year        ={1990}
}
@inproceedings{AlDi91,
  address     ={Mook, The Netherlands},
  author      ={R. Alur and D.L. Dill},
  booktitle   ={Real-Time: Theory in Practice},
  key         ={AlDi91},
  keyword     ={hardware modelling fsm specification Logic realtime transpositionsystem},
  month       ={June},
  pages       ={45--73},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {T}heory of {T}imed {A}utomata},
  volume      ={600},
  year        ={1991}
}
@article{AlDi94,
  author      ={R. Alur and D. Dill},
  journal     ={Theoretical Computer Science},
  key         ={AlDi94},
  month       ={April},
  number      ={2},
  pages       ={183--236},
  title       ={{A}utomata for modelling real-time systems},
  volume      ={126},
  year        ={1994}
}
@inproceedings{AlFH91,
  author      ={R. Alur and T. Feder and T.A. Henzinger},
  booktitle   ={{ACM} Symposium on Principles of Distributed Computing},
  key         ={AlFH91},
  pages       ={139--152},
  publisher   ={ACM Press},
  title       ={{T}he {B}enefits of {R}elaxing {P}unctuality},
  year        ={1991}
}
@inproceedings{AlFH94,
  address     ={Standford, California, USA},
  author      ={R. Alur and L. Fix and T.A. Henzinger},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={AlFH94},
  month       ={June},
  pages       ={1-13},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Determinizable Class of Timed Automata},
  volume      ={818},
  year        ={1994}
}
@inproceedings{AlHK97,
  address     ={Florida},
  author      ={R. Alur and T.A. Henzinger and O. Kupferman},
  booktitle   ={{IEEE} Symposium on Foundations of Computer Science},
  key         ={AlHK97},
  month       ={October},
  title       ={Alternating-time temporal logic},
  year        ={1997}
}
@inproceedings{AlHe89,
  address     ={New York},
  author      ={R. Alur and T.A. Henzinger},
  booktitle   ={Symposium on Foundations of Computer Science},
  key         ={AlHe89},
  organization={IEEE},
  pages       ={164--169},
  publisher   ={IEEE Computer Society Press},
  title       ={{A} {R}eally {T}emporal {L}ogic},
  year        ={1989}
}
@inproceedings{AlHe90,
  address     ={Washington, D.C.},
  author      ={R. Alur and T.A. Henzinger},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={AlHe90},
  month       ={June},
  pages       ={390--401},
  publisher   ={IEEE Computer Society Press},
  title       ={{R}eal-{T}ime {L}ogics: {C}omplexity and {E}xpressiveness},
  year        ={1990}
}
@inproceedings{AlHe91,
  author      ={R. Alur and T.A. Henzinger},
  booktitle   ={Real-Time: Theory in Practice},
  key         ={AlHe91},
  keyword     ={hardware specification Logic realtime modelling fsm},
  pages       ={74--106},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{L}ogics and {M}odels of {R}eal-{T}ime: {A} {S}urvey},
  volume      ={600},
  year        ={1991}
}
@book{AlHe92,
  author      ={R. Alur and T.A. Henzinger},
  key         ={AlHe92},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science, Real-Time: Theory in Practice},
  title       ={Logics and Models of Real-Time: A Survey},
  year        ={1992}
}
@article{AlHe94,
  author      ={R. Alur and T.A. Henzinger},
  journal     ={JACM},
  key         ={AlHe94},
  keyword     ={hardware specification Logic realtime},
  month       ={January},
  number      ={1},
  pages       ={181--204},
  title       ={{A} {R}eally {T}emporal {L}ogic},
  volume      ={41},
  year        ={1994}
}
@inproceedings{AlHe95,
  address     ={Liege, Belgium},
  author      ={R. Alur and T.A. Henzinger},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={AlHe95},
  month       ={July},
  pages       ={166--179},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Local Liveness for compositional Modeling of Fair reactive systems},
  volume      ={939},
  year        ={1995}
}
@inproceedings{AlLe91,
  address     ={Davis, California},
  author      ={J. Alves-Foss and K.N. Levitt},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={AlLe91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={{M}echanical {V}erification of {S}ecure {D}istributed {S}ystems in {HOL}},
  year        ={1991}
}
@inproceedings{AlMa96,
  address     ={New Brunswick, NJ, USA},
  author      ={L. de Alfaro and Z. Manna},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={AlMa96},
  month       ={July/August},
  pages       ={288--299},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Temporal Verification by Diagram Transformations},
  volume      ={1102},
  year        ={1996}
}
@techreport{AlSc85,
  address     ={Ithaca, NY},
  author      ={B. Alpern and F. Schneider},
  institution ={Cornell University},
  key         ={AlSc85},
  title       ={Defining Safety and Liveness},
  year        ={1985}
}
@article{AlSc87,
  author      ={B. Alpern and F.B. Schneider},
  journal     ={Distributed Comp.},
  key         ={AlSc87},
  keyword     ={omega},
  pages       ={117--126},
  title       ={{R}ecognizing {S}afety and {L}iveness},
  volume      ={2},
  year        ={1987}
}
@inproceedings{Alle93,
  address     ={Ottawa, Canada},
  author      ={M. Allemand},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Alle93},
  keyword     ={hardware microprocessor rewriting},
  month       ={April},
  organization={IFIP WG10.2},
  pages       ={103--110},
  publisher   ={Elsevier Science Publishers B.V., Netherland},
  title       ={{R}ewriting {B}ased {M}ethod for the {F}ormal {V}erification of {M}icroprocessors},
  year        ={1993}
}
@inproceedings{Alle94,
  address     ={Bad Herrenalb, Germany},
  author      ={M. Allemand},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={Alle94},
  keyword     ={tpcd94},
  month       ={September},
  note        ={published 1995},
  pages       ={292--297},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{F}ormal {V}erification of {C}haracteristic {P}roperties},
  volume      ={901},
  year        ={1994}
}
@phdthesis{Alur91,
  address     ={Stanford},
  author      ={R. Alur},
  key         ={Alur91},
  school      ={Stanford University},
  title       ={{T}echniques for {A}utomatic {V}erification of {R}eal-{T}ime {S}ystems},
  year        ={1991}
}
@inproceedings{Alve92,
  address     ={Leuven, Belgium},
  author      ={J. Alves-Foss},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Alve92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={295--306},
  publisher   ={North-Holland},
  title       ={{M}odelling {N}on-{D}eterministic {S}ystem in {HOL}},
  year        ={1992}
}
@inproceedings{AmBS91,
  author      ={T. Amon and G. Boriello and C. Sequin},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Borrione and R. Waxman},
  key         ={AmBS91},
  organization={IFIP},
  pages       ={261--280},
  publisher   ={Elsevier Science Publisher B.V. (North-Holland)},
  title       ={{O}peration/{E}vent {G}raphs: {A} {D}esign {R}epresentation for {T}iming {B}ehavior},
  year        ={1991}
}
@inproceedings{AmBo91,
  author      ={T. Amon and G. Borriello},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={AmBo91},
  keyword     ={hardware simulation discrete},
  organization={ACM/IEEE},
  pages       ={656--661},
  title       ={{OE}sim: {A} {S}imulator for {T}iming {B}ehavior},
  year        ={1991}
}
@inproceedings{AmBo92,
  author      ={T. Amon and G. Boriello},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={AmBo92},
  keyword     ={hardware gatelevel verification timing},
  pages       ={410--413},
  title       ={{A}n {A}pproach to {S}ymbolic {T}iming {V}erification},
  year        ={1992}
}
@inproceedings{AmRo96,
  address     ={New Brunswick, NJ, USA},
  author      ={D. Ambroise and B. Rozoy},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={AmRo96},
  month       ={July/August},
  pages       ={458--461},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{MARRELLA}: a tool for simulation and verification},
  volume      ={1102},
  year        ={1996}
}
@phdthesis{Amon93,
  address     ={Washington},
  author      ={T. Amon},
  key         ={Amon93},
  keyword     ={hardware verification},
  school      ={University of Washington},
  title       ={{S}pecification, {S}imulation, and {V}erification of {T}iming {B}ehavior},
  year        ={1993}
}
@mastersthesis{Amor96,
  address     ={Karlsruhe},
  author      ={M.G. Ben Amor},
  key         ={Amor96},
  keyword     ={formalism verification SFB358},
  remark      ={betreut von K. Schneider},
  school      ={Universit\"{a}t Karlsruhe},
  title       ={Implementierung eines Modellpr\"{u}fers f\"{u}r die verzweigende temporale Logik {CTL*}},
  year        ={1996}
}
@inproceedings{AnCM93,
  address     ={Vancouver, Canada},
  author      ={C.M. Angelo and L. Claesen and H. De Man},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={AnCM93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={87--99},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={{D}egrees of {F}ormality in {S}hallow {E}mbedding {H}ardware {D}escription {L}anguages in {HOL}},
  volume      ={780},
  year        ={1993}
}
@inproceedings{AnCM94,
  address     ={Malta},
  author      ={C.M. Angelo and L. Claesen and H. De Man},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={AnCM94},
  month       ={September},
  pages       ={33--48},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{R}easoning about a {C}lass of {L}inear {S}ystems of {E}quations in {HOL}},
  volume      ={859},
  year        ={1994}
}
@inproceedings{AnDu93,
  address     ={Ottawa, Canada},
  author      ={R. Ang and N. Dutt},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={AnDu93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={251--266},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={{A} {R}epresentation for {B}inding of {RT}-{C}omponent {F}unctionality to {HDL} {B}ehavior},
  year        ={1993}
}
@inproceedings{AnMU95,
  author      ={A. Anuchitanukul and Z. Manna and T. Uribe},
  editor      ={J. van Leeuwen},
  key         ={AnMU95},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{D}ifferential {BDD}s},
  volume      ={1000},
  year        ={1995}
}
@inproceedings{AnMa94,
  address     ={Standford, California, USA},
  author      ={A. Anuchitanukul and Z. Manna},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={AnMa94},
  month       ={June},
  pages       ={156-168},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Realizability and Synthesis of Reactive Modules},
  volume      ={818},
  year        ={1994}
}
@techreport{AnMa94a,
  address     ={Department of Computer Science},
  author      ={A. Anuchitanukul and Z. Manna},
  institution ={Stanford University},
  key         ={AnMa94a},
  month       ={September},
  note        ={ftp://elib.stanford.edu/pub/reports/cs/tr/94/1525/CS-TR-94-1525.ps},
  number      ={CS-TR-94-1525},
  title       ={{D}ifferential {BDD}'s},
  year        ={1994}
}
@inproceedings{AnPP93,
  address     ={Vancouver, Canada},
  author      ={F. Andersen and K.D. Petersen and J.S. Petterson},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={AnPP93},
  keyword     ={program_verification},
  month       ={August},
  organization={University of British Columbia},
  pages       ={1--16},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={{P}rogram {V}erification using {HOL-UNITY}},
  volume      ={780},
  year        ={1993}
}
@inproceedings{AnPP94,
  address     ={Malta},
  author      ={F. Andersen and K.D. Petersen and J.S. Petterson},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={AnPP94},
  month       ={September},
  pages       ={17--32},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {G}raphical {T}ool for {P}roving {UNITY} {P}rogress},
  volume      ={859},
  year        ={1994}
}
@inproceedings{AnPe91,
  address     ={Davis, California},
  author      ={F. Andersen and K.D. Petersen},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={AnPe91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={{R}ecursive {B}oolean {F}unctions in {HOL}},
  year        ={1991}
}
@inproceedings{AnSM97,
  author      ={H.R. Andersen and J. Staunstrup and N. Maretti},
  booktitle   ={FASE},
  key         ={AnSM97},
  month       ={January},
  publisher   ={Springer Verlag},
  title       ={A Comparison of Modular Verification Techniques},
  year        ={1997}
}
@inproceedings{AnSW94,
  author      ={H.R. Andersen and C. Stirling and G. Winskel},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={AnSW94},
  month       ={June},
  title       ={A Compositional Proof System for the Modal $\mu$-calculus},
  year        ={1994}
}
@inproceedings{AnVe95,
  address     ={Liege, Belgium},
  author      ={H.R. Andersen and B. Vergauwen},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={AnVe95},
  month       ={July},
  pages       ={142--154},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Efficient Checking of behavioural Relations and Modal Assertions using Fixed-point inversion},
  volume      ={939},
  year        ={1995}
}
@phdthesis{Ande92,
  address     ={Horsholm, Denmark},
  author      ={F. Andersen},
  key         ={Ande92},
  keyword     ={HOL UNITY},
  month       ={March},
  title       ={{A} {T}heorem {P}rover for {UNITY} in {H}igher {O}rder {L}ogic},
  year        ={1992}
}
@book{Andr65,
  author      ={P.B. Andrews},
  key         ={Andr65},
  publisher   ={North-Holland Publishing Company},
  title       ={{A} {T}ransfinite {T}ype {T}heory with {T}ype {V}ariables},
  year        ={1965}
}
@article{Andr71,
  author      ={P.B. Andrews},
  journal     ={Journal of Symbolic Logic},
  key         ={Andr71},
  pages       ={414-432},
  title       ={{R}esolution in {T}ype {T}heory},
  volume      ={36},
  year        ={1971}
}
@article{Andr72a,
  author      ={P.B. Andrews},
  journal     ={Journal of Symbolic Logic},
  key         ={Andr72a},
  pages       ={385-394},
  title       ={{G}eneral models, descriptions, and choice in type theory},
  volume      ={37},
  year        ={1972}
}
@article{Andr72b,
  author      ={P.B. Andrews},
  journal     ={Journal of Symbolic Logic},
  key         ={Andr72b},
  pages       ={395-397},
  title       ={{G}eneral models and extensionality},
  volume      ={37},
  year        ={1972}
}
@article{Andr81,
  author      ={P.B. Andrews},
  journal     ={Journal of the ACM},
  key         ={Andr81},
  keyword     ={Logic theorem_proving},
  month       ={April},
  number      ={2},
  pages       ={193--214},
  title       ={{R}efutations by {M}atings},
  volume      ={28},
  year        ={1981}
}
@book{Andr86,
  author      ={P.B. Andrews},
  key         ={Andr86},
  publisher   ={Academic Press},
  series      ={Computer Science and Applied Mathematics Series},
  title       ={An Introduction to Mathematical Logic and Type Theory: to Truth through Proof},
  year        ={1986}
}
@article{Andr89,
  author      ={P.B. Andrews},
  journal     ={Journal of Automated Reasoning},
  key         ={Andr89},
  pages       ={257-291},
  title       ={{O}n {C}onnections and {H}igher {O}rder {L}ogic},
  volume      ={5},
  year        ={1989}
}
@techreport{Andr95,
  author      ={Ch. Andre},
  institution ={University of Nice, Sophia Antipolis},
  key         ={Andr95},
  number      ={tr95-52},
  title       ={SyncCharts: A Visual Representation of Reactive Behaviors},
  type        ={research report},
  year        ={1995}
}
@techreport{Andr96,
  author      ={Ch. Andre},
  institution ={University of Nice, Sophia Antipolis},
  key         ={Andr96},
  number      ={tr96-28},
  title       ={Representation and Analysis of Reactive Behaviors: A Synchronous Approach},
  type        ={research report},
  year        ={1996}
}
@book{Anna86,
  author      ={M. Annaratone},
  key         ={Anna86},
  keyword     ={Design hardware},
  publisher   ={Kluwer Academic Publishers},
  title       ={{D}igital {CMOS} {C}ircuit {D}esign},
  year        ={1986}
}
@article{ApKo86,
  author      ={K. Apt and D. Kozen},
  journal     ={Information Processing Letters},
  key         ={ApKo86},
  number      ={6},
  pages       ={307--309},
  title       ={{L}imits for {A}utomatic {V}erification of {F}init-{S}tate {C}oncurrent {S}ystems},
  volume      ={22},
  year        ={1986}
}
@inproceedings{ApKu95,
  address     ={Austin, Texas},
  author      ={D.P. Appenzeller and A. Kuehlmann},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={ApKu95},
  keyword     ={verification},
  month       ={October},
  organization={IBM},
  title       ={{F}ormal {V}erification of a {P}ower{PC} {M}icroprocessor},
  year        ={1995}
}
@article{Apt81,
  author      ={K.R. Apt},
  journal     ={ACM Transactions on Programming Languages and Systems},
  key         ={Apt81},
  number      ={4},
  pages       ={431-483},
  title       ={Ten Years of {H}oare's Logic: A Survey -- Part I},
  volume      ={3},
  year        ={1981}
}
@inproceedings{ArBR96,
  address     ={Oxford},
  author      ={A. Arnold and D. Begay and J.-P. Radoux},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={ArBR96},
  month       ={March},
  pages       ={649-661},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{A}n {E}xample of use of {F}ormal {M}ethods to {D}ebug an {E}mbedded {S}oftware},
  volume      ={1051},
  year        ={1996}
}
@article{ArBa86,
  author      ={J. Archibal and J.-L. Baer},
  journal     ={{ACM} Transactions on Computer Systems},
  key         ={ArBa86},
  month       ={November},
  number      ={4},
  pages       ={273--298},
  title       ={{C}ache {C}oherence {P}rotocol: {E}valuation using a {M}ultiprocessor {S}imulation {M}odel},
  volume      ={4},
  year        ={1986}
}
@inproceedings{ArFY92,
  address     ={Leuven, Belgium},
  author      ={M. Archer and G. Fink and L. Yang},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={ArFY92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={539--548},
  publisher   ={North-Holland},
  title       ={{L}inking {O}ther {T}heorem {P}rovers to {HOL} {U}sing {PM}: {P}roof {M}anager},
  year        ={1992}
}
@book{ArGr93,
  author      ={J.R. Armstrong and F.G. Gray},
  key         ={ArGr93},
  keyword     ={textbook},
  publisher   ={Prentice Hall},
  title       ={{S}tructured {L}ogic {D}esign with {VHDL}},
  year        ={1993}
}
@inproceedings{ArHe97,
  address     ={Grenoble, France},
  author      ={M. Archer and C. Heitmeyer},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={ArHe97},
  pages       ={171-185},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Safety Verification for Automated Platoon Maneuvers: A Case Study},
  year        ={1997}
}
@article{ArNi80,
  author      ={A. Arnold and M. Nivat},
  journal     ={Math. Systems Theory},
  key         ={ArNi80},
  keyword     ={omega},
  pages       ={219--236},
  title       ={{F}ormal computations of nondeterministic recursive program schemes},
  volume      ={13},
  year        ={1980}
}
@inproceedings{Arch91,
  address     ={Davis, California},
  author      ={M. Archer},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Arch91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={{I}nterfaces to {HOL}},
  year        ={1991}
}
@inproceedings{Ardi96,
  address     ={Palo Alto, CA, USA},
  author      ={L. Arditi},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={Ardi96},
  month       ={November},
  pages       ={34--48},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{BMDs} can delay the use of theorem proving for verifying arithmetic assembly instructions},
  volume      ={1166},
  year        ={1996}
}
@article{Arno85,
  author      ={A. Arnold},
  journal     ={Theoretical Computer Science},
  key         ={Arno85},
  keyword     ={omega},
  pages       ={333--335},
  title       ={{A} syntactical congruence for rational $\omega$-languages},
  volume      ={39},
  year        ={1985}
}
@article{Arno88,
  author      ={A. Arnold},
  journal     ={Theoretical Computer Science},
  key         ={Arno88},
  keyword     ={omega},
  pages       ={289--297},
  title       ={{L}ogical definability of fixed points},
  volume      ={61},
  year        ={1988}
}
@inproceedings{Aror94,
  address     ={L\"{u}beck, Germany},
  author      ={A. Arora},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={Aror94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={110--127},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{E}fficient {R}econfiguration of {T}rees: {A} {C}ase {S}tudy in {M}ethodical {D}esign of {N}onmasking {F}ault-{T}olerant {P}rograms},
  volume      ={863},
  year        ={1994}
}
@inproceedings{Arth91,
  address     ={Davis, California},
  author      ={R.D. Arthan},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Arth91},
  keyword     ={theorem_proving},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={{A} {R}eport on {ICL HOL}},
  year        ={1991}
}
@inproceedings{AsCh94,
  address     ={San Jose, California},
  author      ={P. Ashar and M. Cheong},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={AsCh94},
  keyword     ={BDD},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={622--627},
  publisher   ={IEEE Computer Society Press},
  title       ={{E}fficient {B}readth-{F}irst {M}anipulation of {B}inary {D}ecision {D}iagrams},
  year        ={1994}
}
@inproceedings{AsDM92,
  address     ={Santa Clara, California},
  author      ={P. Ashar and S. Dey and S. Malik},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={AsDM92},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={510--517},
  publisher   ={IEEE Computer Society Press},
  title       ={{E}xploiting {M}ulti-{C}ycle {F}alse {P}aths in the {P}erformance {O}ptimization of {S}equential {C}ircuits},
  year        ={1992}
}
@inproceedings{Asha64,
  author      ={K.G. Ashar},
  booktitle   ={{IEEE} Transactions on Electron Devices},
  key         ={Asha64},
  month       ={November},
  organization={IEEE},
  pages       ={497--506},
  title       ={{T}he {M}ethod of {E}stimating {D}elay in {S}witching {C}ircuits and the {F}igure of {M}erit of a {S}witching {T}ransistor},
  year        ={1964}
}
@misc{Ashe90,
  author      ={P.J. Ashenden},
  howpublished={University of Adelaide, South Australia},
  key         ={Ashe90},
  note        ={ftp://www.cs.adelaide.edu.au/pub/VHDL-Cookbook/},
  title       ={{T}he {VHDL} {C}ookbook},
  year        ={1990}
}
@book{Asse72,
  author      ={G. Asser},
  key         ={Asse72},
  keyword     ={Logic theorem_proving},
  publisher   ={Harri Deutsch},
  title       ={{E}inf\"{u}hrung in die mathematische {L}ogik {I-III}},
  year        ={1972}
}
@article{Atki68,
  author      ={D.E. Atkins},
  journal     ={IEEE Transactions on Computers},
  key         ={Atki68},
  month       ={October},
  number      ={10},
  pages       ={925--934},
  title       ={Higher-radix {D}ivision {U}sing {E}stimates of the {D}ivisor and {P}artial {R}emainders},
  volume      ={C-17},
  year        ={1968}
}
@inproceedings{AuBG97,
  address     ={Toledo, Spain},
  author      ={M. Auguin and C. Belleudy and G. Gogniat},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={AuBG97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Interface synthesis in embedded hardware-software systems},
  year        ={1997}
}
@article{Aubi79,
  author      ={R. Aubin},
  journal     ={Theoretical Computer Science},
  key         ={Aubi79},
  keyword     ={Rewrite},
  pages       ={329--362},
  title       ={{M}echanizing structural induction},
  volume      ={9},
  year        ={1979}
}
@inproceedings{Avru96,
  address     ={New Brunswick, NJ, USA},
  author      ={G. S. Avrunin},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={Avru96},
  month       ={July/August},
  pages       ={26--37},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Symbolic Model Checking Using Algebraic Geometry},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{AzTB94,
  address     ={San Diego, CA},
  author      ={A. Aziz and S. Tasiran and R.K. Brayton},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={AzTB94},
  keyword     ={BDD_techniques_and_formal_verification},
  month       ={June},
  note        ={ch. 18.3},
  publisher   ={San Diego Convention Center},
  title       ={{BDD} {V}ariable {O}rdering for {I}nteracting {F}inite {S}tate {M}achines},
  year        ={1994}
}
@inproceedings{BBBC87,
  address     ={Los Alamitos},
  author      ={R.E. Bryant and D.L. Beatty and K. Brace and K. Cho and T. Sheffler},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={BBBC87},
  keyword     ={hardware verification general},
  month       ={June},
  pages       ={9--16},
  publisher   ={IEEE Computer Society Press},
  title       ={{COSMOS}: {A} {C}ompiled {S}imulator for {MOS} {C}ircuits},
  year        ={1987}
}
@inproceedings{BBCC94,
  address     ={Bad Herrenalb, Germany},
  author      ={G. Bezzi and M. Bombana and P. Cavalloro and S. Conigliaro and G. Zaza},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={BBCC94},
  keyword     ={tpcd94},
  month       ={September},
  note        ={published 1995},
  pages       ={286--291},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{Q}uantitative {E}valuation of {F}ormal {B}ased {S}ynthesis in {ASIC} {D}esign},
  volume      ={901},
  year        ={1994}
}
@inproceedings{BBCC96,
  address     ={New Brunswick, NJ, USA},
  author      ={N. Bjorner and A. Browne and E. Chang and M. Colon and A. Kapur and Z. Manna and H. B. Sipma and T. E. Uribe},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={BBCC96},
  month       ={July/August},
  pages       ={415--418},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{STeP}: deductive-algorithmic verification of reactive and real-time systems},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{BBCD97,
  address     ={Enschede, The Netherlands},
  author      ={M. von der Beeck and V. Braun and A. Cla{\ss}en and A. Danneker and C. Friedrich and D. Kosch\"{u}tzki and T. Margaria and F. Schreiber and B. Steffen},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={BBCD97},
  pages       ={112-129},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={Graphs in {METAF}rame: the Unifying Power of Polymorphism},
  year        ={1997}
}
@inproceedings{BBDF96,
  address     ={Palo Alto, CA, USA},
  author      ={D. Borionne and H. Bouamama and D. Deharbe and C. Le Fou and A. Wahba},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={BBDF96},
  month       ={November},
  pages       ={450--568},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{HDL}-Based Integration of formal Methods and {CAD} Tools in the Prevail Environment},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{BBFS93,
  address     ={Paris, France},
  author      ={T. Besson and H. Bouzouzou and I. Floricica and G. Saucier and R. Roane},
  booktitle   ={European Design Automation Conference },
  editor      ={F. Poirot and A.-M. Trullemans},
  key         ={BBFS93},
  month       ={February},
  pages       ={266--272},
  publisher   ={IEEE Computer Society Press},
  title       ={{I}nput {O}rder for {ROBDD}s {B}ased on {K}ernel {A}nalysis},
  year        ={1993}
}
@inproceedings{BBGG94,
  address     ={Standford, California, USA},
  author      ={I. Beer and S. Ben-David and D. Geist and R. Gewirtzman and M. Yoeli},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={BBGG94},
  month       ={June},
  pages       ={182--193},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Methodology and System for Practical Formal Verification of Reactive Hardware},
  volume      ={818},
  year        ={1994}
}
@inproceedings{BBLS92,
  author      ={S. Bensalem and A. Bouajjani and C. Loiseaux and J. Sifakis},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={G.V. Bochmann and D.K. Probst},
  key         ={BBLS92},
  month       ={July},
  title       ={{P}roperty {P}reserving {S}imulations},
  year        ={1992}
}
@inproceedings{BBRR97,
  address     ={Grenoble, France},
  author      ={F. Boniol and A. Burgueno and O. Roux and V. Rusu},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={BBRR97},
  pages       ={75-80},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Analysis of Slope-Parametric Hybrid Automata},
  year        ={1997}
}
@article{BCDM86,
  author      ={M.C. Browne and E.M. Clarke and D.L. Dill and B. Mishra},
  journal     ={IEEE Transactions on Computers},
  key         ={BCDM86},
  keyword     ={hardware verification modelchecking},
  month       ={December},
  number      ={12},
  pages       ={1034--1044},
  title       ={{A}utomatic {V}erification of {S}equential {C}ircuits {U}sing {T}emporal {L}ogic},
  volume      ={C-35},
  year        ={1986}
}
@inproceedings{BCHM94,
  address     ={Paris},
  author      ={R.I. Bahar and H. Cho and G.D. Hachtel and E. Macii and F. Somenzi},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={BCHM94},
  keyword     ={Techniques_and_Applications_for_BDDs},
  month       ={February},
  pages       ={625--629},
  publisher   ={IEEE Computer Society Press},
  title       ={{T}iming {A}nalysis of {C}ombinational {C}ircuits using {ADD}s},
  year        ={1994}
}
@inproceedings{BCIN86,
  author      ={Z. Barzilai and J.L. Carter and V.S. Iyengar and I. Nair and B.K. Rosen and J. Rutledge},
  booktitle   ={International Test Conference (ITC)},
  key         ={BCIN86},
  organization={IEEE},
  pages       ={520--529},
  title       ={Efficient Fault Simulation of {CMOS} Circuits with Accurate Models},
  year        ={1986}
}
@techreport{BCJM96,
  author      ={S. Berezin and E. Clarke and S. Jha and W. Marrero},
  key         ={BCJM96},
  month       ={September},
  note        ={ftp://reports.adm.cs.cmu.edu/usr/anon/1996/CMU-CS-96-180.ps},
  number      ={CMU-CS-96-180},
  title       ={Model Checking Algorithms for the $\mu$-Calculus},
  year        ={1996}
}
@techreport{BCLM93,
  address     ={Pittsburg, PA 15213},
  author      ={J.R. Burch and E.M. Clarke and D.E. Long and K.L. McMillan and D. Dill},
  institution ={Carnegy Mellon University},
  key         ={BCLM93},
  keyword     ={hardware verification modelchecking},
  month       ={July},
  number      ={CMU-CS-93-211},
  title       ={{S}ymbolic {M}odel {C}hecking for {S}equential {C}ircuit {V}erification},
  year        ={1993}
}
@article{BCLM94,
  author      ={J.R. Burch and E.M. Clarke and D.E. Long and K.L. MacMillan and D.L. Dill},
  journal     ={IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={BCLM94},
  keyword     ={hardware gatelevel verification formalism temporallogic modelchecking},
  month       ={April},
  number      ={4},
  pages       ={401--424},
  title       ={Symbolic Model Checking for Sequential Circuit Verification},
  volume      ={13},
  year        ={1994}
}
@inproceedings{BCMD90,
  address     ={Washington, D.C.},
  author      ={J.R. Burch and E.M. Clarke and K.L. McMillan and D.L. Dill and L.J. Hwang},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={BCMD90},
  keyword     ={hardware verification modelchecking},
  month       ={June},
  pages       ={1--33},
  publisher   ={IEEE Computer Society Press},
  title       ={{S}ymbolic {M}odel {C}hecking: $10^{20}$ {S}tates and {B}eyond},
  year        ={1990}
}
@inproceedings{BCMD90a,
  address     ={Los Alamitos, CA},
  author      ={J.R. Burch and E.M. Clarke and K.L. McMillan and D.L. Dill},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={BCMD90a},
  keyword     ={hardware gatelevel verification formalism temporallogic modelchecking},
  month       ={June},
  organization={ACM/IEEE},
  pages       ={46--51},
  publisher   ={IEEE Society Press},
  title       ={{S}equential {C}ircuit {V}erification {U}sing {S}ymbolic {M}odel {C}hecking},
  year        ={1990}
}
@article{BCMD92,
  author      ={J.R. Burch and E.M. Clarke and K.L. McMillan and D.L. Dill and L.J. Hwang},
  journal     ={Information and Computing},
  key         ={BCMD92},
  keyword     ={hardware verification modelchecking},
  month       ={June},
  number      ={2},
  pages       ={142--170},
  title       ={{S}ymbolic {M}odel {C}hecking: $10^{20}$ {S}tates and {B}eyond},
  volume      ={98},
  year        ={1992}
}
@inproceedings{BCPP88,
  address     ={Silver Spring},
  author      ={D. Borrione and P. Camurati and J.L. Paillet and P. Prinetto},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={BCPP88},
  pages       ={592--595},
  publisher   ={IEEE Computer Science Press},
  title       ={A Functional Approach to Formal Hardware Verification: The {MIT} Experience},
  year        ={1988}
}
@inproceedings{BCRP97,
  address     ={Montreal, Canada},
  author      ={M. Baldi and F. Corno and M. Rebaudengo and P. Prinetto and M. Sonza Reorda and G. Squillero},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={H. F. Li and D. K. Probst},
  key         ={BCRP97},
  keyword     ={conference},
  month       ={October},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Simulation-based verification of network protocols performance},
  year        ={1997}
}
@inproceedings{BDBS96,
  address     ={Oxford},
  author      ={E. Boiten and J. Derrick and H. Bowman and M. Steen},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={BDBS96},
  month       ={March},
  pages       ={287-306},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{C}onsistency and {R}efinement for {P}artial {S}pecification in {Z}},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{BDEH91,
  author      ={D. Borrione and D. Deharbe and H. Eveking and S. H\"{o}reth},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  key         ={BDEH91},
  keyword     ={BDD},
  title       ={Application of a {BDD}-package to the verification of {HDL}-Descriptions},
  year        ={1991}
}
@inproceedings{BDGL94,
  address     ={Grenoble, France},
  author      ={L. Burgun and N. Dictus and A. Greiner and E.P. Lopes and C. Sarwary},
  booktitle   ={European Design Automation Conference },
  key         ={BDGL94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={14--21},
  publisher   ={IEEE Computer Society Press},
  title       ={{M}ultilevel {L}ogic {O}ptimization of {V}ery {H}igh {C}omplexity {C}ircuits},
  year        ={1994}
}
@inproceedings{BDSA94,
  address     ={Grenoble, France},
  author      ={K. Bilinski and E.L. Dagless and J.M. Saul and M. Adamski},
  booktitle   ={European Design Automation Conference },
  key         ={BDSA94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={96--103},
  publisher   ={IEEE Computer Society Press},
  title       ={{P}arallel {C}ontroller {S}ynthesis from a {P}etri {N}et {S}pecification},
  year        ={1994}
}
@inproceedings{BDSS94,
  address     ={Grenoble, France},
  author      ={K. Bilinski and E.L. Dagless and J. Saul and J. Szajna},
  booktitle   ={European Design Automation Conference },
  key         ={BDSS94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={302--309},
  publisher   ={IEEE Computer Society Press},
  title       ={{A}n {E}fficient Verification {A}lgorithm for {P}arallel {C}ontrollers},
  year        ={1994}
}
@inproceedings{BDWM93,
  address     ={Santa Clara, California},
  author      ={J.R. Burch and D. Dill and E. Wolf and G. De Micheli},
  booktitle   ={{IEEE}/{ACM} International Conference on {CAD}},
  key         ={BDWM93},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={612--617},
  publisher   ={IEEE Computer Society Press},
  title       ={Modeling Hierarchical Combinational Circuits},
  year        ={1993}
}
@inproceedings{BEFK89,
  author      ={A. Bartsch and H. Eveking and H.-J. F\"{a}rber and M. Kelelatchew and J. Pinder and U. Schelling},
  booktitle   ={{IFIP} International Workshop on Applied Formal Methods for Correct {VLSI} Design},
  key         ={BEFK89},
  keyword     ={verification},
  pages       ={522--531},
  publisher   ={North-Holland},
  title       ={{LOVERT} - A logic verifier of register-transfer level descriptions},
  year        ={1989}
}
@inproceedings{BFGH93,
  address     ={Santa Clara, California},
  author      ={R.I. Bahar and E.A. Frohm and C.M. Gaona and G.D. Hachtel and E. Macii and A. Pardo and F. Somenzi},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={BFGH93},
  keyword     ={hardware modelling bdd BDD_Techniques},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={188--191},
  publisher   ={IEEE Computer Society Press},
  title       ={{A}lgebraic {D}ecision {D}iagrams and {T}heir {A}pplications},
  year        ={1993}
}
@inproceedings{BFGW97,
  address     ={Toledo, Spain},
  author      ={H. Barringer and D. Fellows and G. Gough and A. Williams},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={BFGW97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Abstract modelling of asynchronous micropipeline systems using {Rainbow}},
  year        ={1997}
}
@article{BFHR92,
  author      ={A. Bouajjani and J.C. Fernandez and N. Halbwachs and P. Raymond and C. Ratel},
  journal     ={Science of Computer Programming},
  key         ={BFHR92},
  month       ={June},
  number      ={3},
  pages       ={247--271},
  title       ={{M}inimal {S}tate {G}raph {G}eneration},
  volume      ={18},
  year        ={1992}
}
@inproceedings{BGGH92,
  address     ={Nijmegen},
  author      ={R. Boulton and A. Gordon and M.J.C. Gordon and J. Herbert and J. van Tassel},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  key         ={BGGH92},
  keyword     ={HDL ELLA SILAGE VHDL verification},
  month       ={June},
  organization={IFIP TC10/WG 10.2},
  pages       ={129--156},
  publisher   ={North-Holland},
  title       ={Experience with embedding hardware description languages in {HOL}},
  year        ={1992}
}
@inproceedings{BGHT91,
  address     ={Miami},
  author      ={R. Boulton and M.J.C. Gordon and J. Herbert and J. van Tassel},
  booktitle   ={{ACM} International Workshop on Formal Methods in {VLSI} Design},
  key         ={BGHT91},
  keyword     ={HDL verification},
  title       ={The {HOL} Verification of {ELLA} Designs},
  year        ={1991}
}
@inproceedings{BGKL96,
  address     ={New Brunswick, NJ, USA},
  author      ={J. Bengtsson and W. O. D. Griffioen and K. J. Kristoffersen and K. G. Larsen and F. Larsson and P. Pettersson and W. Yi},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={BGKL96},
  month       ={July/August},
  pages       ={244--256},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification of an audio protocol with bus collision using {UPPAAL}},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{BGLM85,
  address     ={Tokyo},
  author      ={M. Barbacci and S. Grout and G. Lindstrom and M. Maloney and E. Organick and D. Rudisill},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  key         ={BGLM85},
  keyword     ={HDL},
  title       ={{ADA} as a Hardware Description Language: An Initial Report},
  year        ={1985}
}
@inproceedings{BGMS94,
  address     ={Paris},
  author      ={J. Bern and J. Gergov and C. Meinel and A. Slobodova},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={BGMS94},
  keyword     ={BDD_Concepts},
  month       ={February},
  pages       ={200--207},
  publisher   ={IEEE Computer Society Press},
  title       ={{B}oolean {M}anipulation with {F}ree {BDD}s. {F}irst {E}xperimental {R}esults},
  year        ={1994}
}
@inproceedings{BGMW95,
  address     ={Manchester University (UK), Harlequin Ltd. (UK)},
  author      ={H. Barringer and G. Gough and B. Monahan and A. Williams},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={BGMW95},
  keyword     ={verification_environments},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={225--245},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{F}ormal support for the {ELLA} hardware description language},
  volume      ={987},
  year        ={1995}
}
@inproceedings{BGWW97,
  address     ={Paris},
  author      ={B. Boigelot and P. Godefroid and B. Willems and P. Wolper},
  booktitle   ={International Static Analysis Symposium},
  key         ={BGWW97},
  month       ={September},
  pages       ={172--186},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The Power of {QDD}'s},
  volume      ={1302},
  year        ={1997}
}
@inproceedings{BHJL96,
  author      ={F. Balarin and H. Hsieh and A. Jurecska and L. Lavagno and A. Sangiovanni-Vincentelli},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={BHJL96},
  month       ={June},
  title       ={Formal Verification of Embedded Systems based on {CFSM} Networks},
  year        ={1996}
}
@inproceedings{BHKR94,
  address     ={L\"{u}beck, Germany},
  author      ={S. Bradley and W. Henderson and D. Kendall and A. Robson},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={BHKR94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={228--246},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  volume      ={863},
  year        ={1994}
}
@book{BHMS84,
  editor      ={R. Brayton and G. Hachtel and C. McMullen and A. Sangiovanni-Vincentelli},
  key         ={BHMS84},
  keyword     ={hardware gatelevel optimization formalism propositionallogic},
  publisher   ={Kluwer Academic Publishers},
  series      ={The Kluwer International Series in Engineering and Computer Science},
  title       ={Logic Minimization Algorithms for {VLSI} Synthesis},
  year        ={1984}
}
@book{BHMS86,
  author      ={R.K. Brayton and G.D. Hachtel and C.T. McMullen and A.L. Sangiovanni-Vincentelli},
  key         ={BHMS86},
  keyword     ={textbook},
  publisher   ={Kluwer Academic Publishers},
  series      ={The Kluwer International Series in Engineering and Computer Science},
  title       ={Logic Minimization Algorithms for {VLSI} Synthesis},
  year        ={1986}
}
@article{BHMY89,
  author      ={W.R. Bevier and W.A. Hunt and J.S. Moore and W.D. Young},
  journal     ={Journal of Automated Reasoning},
  key         ={BHMY89},
  number      ={4},
  pages       ={411--428},
  title       ={An Approach to System Verification},
  volume      ={5},
  year        ={1989}
}
@inproceedings{BHSS96,
  address     ={New Brunswick, NJ, USA},
  author      ={R. K. Brayton and G. D. Hachtel and A. Sangiovanni-Vincentelli and F. Somenzi and A. Aziz and S. -T. Cheng and S. Edwards and S. Khatri and Y. Kukimoto and A. Pardo and S. Qadeer and R. K. Ranjan and S. Sarwary and T. R. Shiple and G. Swamy and T. Villa},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={BHSS96},
  month       ={July/August},
  pages       ={428--432},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{VIS}: a System for Verification and Synthesis},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{BKKR86,
  author      ={R. Br\"{u}ck and B. Kleinjohann and T. Kath\"{o}fer and F.J. Rammig},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={BKKR86},
  keyword     ={petrinet synthesis},
  organization={ACM/IEEE},
  pages       ={285--292},
  remark      ={Hinweis auf DACAPO-Definition in Petrinetz},
  title       ={Synthesis of Concurrent Modular Controllers from Algorithmic Descriptions},
  year        ={1986}
}
@inproceedings{BKRS91,
  address     ={Amsterdam},
  author      ={K. van Berkel and J. Kessel and M. Roncken and R. Saeijs and F. Schalij},
  booktitle   ={European Design Automation Conference },
  key         ={BKRS91},
  keyword     ={Formal_Verification},
  month       ={February},
  organization={IEEE},
  pages       ={384--389},
  publisher   ={IEEE Computer Society Press},
  title       ={{T}he {VLSI}-{P}rogramming {L}anguage {T}angram and its {T}ranslation into {H}andshake {C}ircuits},
  year        ={1991}
}
@inproceedings{BKWS93,
  address     ={Bad Herrenalb},
  author      ={M. Baveco and H. Korte and I. Widya and M. van Sinderen},
  booktitle   ={GI/ITG Workshop Formale Methoden zum Entwurf korrekter Systeme},
  editor      ={T. Kropf and R. Kumar and D. Schmid},
  key         ={BKWS93},
  keyword     ={1GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={81--94},
  publisher   ={Universit\"{a}t Karlsruhe, Interner Bericht Nr. 10/93},
  title       ={{U}sage of the {L}otosphere {D}evelopment {T}ools and {ISODE} for {P}rototyping {A}pplication {L}ayer {P}rotocols},
  year        ={1993}
}
@inproceedings{BLFG94,
  address     ={L\"{u}beck, Germany},
  author      ={A. Benveniste and B.C. Levy and E. Fabre and P. Le Guernic},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={BLFG94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={149--169},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {C}alculus of {S}tochastic {S}ystems for the {S}pecification, {S}imulation, and {H}idden {S}tate {E}stimation of {H}ybrid {S}tochastic/{N}on-stochastic {S}ystems},
  volume      ={863},
  year        ={1994}
}
@inproceedings{BMCM87,
  author      ={J. Benkowski and E. van den Meersch and L. Claesen and H. De Man},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={BMCM87},
  keyword     ={verification},
  pages       ={44--47},
  title       ={Efficient algorithms for solving the false path problem in timing verification},
  year        ={1987}
}
@inproceedings{BMPP91,
  address     ={Marseille},
  author      ={G. Buonanno and S. Morasca and M. Pezz\`{e} and K. Protman and D. Sciuto},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Borrione and R. Waxman},
  key         ={BMPP91},
  keyword     ={petrinet},
  month       ={April},
  organization={IFIP WG 10.2},
  pages       ={281--300},
  publisher   ={North-Holland},
  title       ={A New Timed Petri Net Model for Hardware Representation},
  year        ={1991}
}
@inproceedings{BMPY97,
  author      ={M. Bozga and O. Maler and A. Pnueli and S. Yovine},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={O. Grumberg},
  key         ={BMPY97},
  month       ={June},
  pages       ={179--190},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Some Progress in the Symbolic Verification of Timed Automata},
  volume      ={1254},
  year        ={1997}
}
@inproceedings{BRKM91,
  author      ={K.M. Butler and D.E. Ross and R. Kapur and M.R. Mercer},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={BRKM91},
  keyword     ={formalism propositionallogic BDD},
  organization={ACM/IEEE},
  pages       ={417--420},
  publisher   ={IEEE},
  title       ={Heuristics to Compute Variable Orderings for Efficient Manipulation of Ordered Binary Decision Diagrams},
  year        ={1991}
}
@inproceedings{BRRS96,
  address     ={New Brunswick, NJ, USA},
  author      ={A. Bouali and A. Ressouche and V. Roy and R. de Simone},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={BRRS96},
  month       ={July/August},
  pages       ={441--445},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The {FC2Tools} Set},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{BSBC94,
  address     ={Grenoble, France},
  author      ={C. Bayol and B. Soulas and D. Borrione and F. Corno and P. Prinetto},
  booktitle   ={European Design Automation Conference },
  key         ={BSBC94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={506--511},
  publisher   ={IEEE Computer Society Press},
  title       ={{A} {P}rocess {A}lgebra {I}nterpretation of a {V}erification {O}riented {O}verlanguage of {VHDL}},
  year        ={1994}
}
@techreport{BSSW93,
  author      ={B. Bollig and M. Sauerhoff and D. Sieling and I. Wegener},
  institution ={Universit\"{a}t Dortmund},
  key         ={BSSW93},
  note        ={http://ls2-www.informatik.uni-dortmund.de/papers/tr-474.ps.gz},
  number      ={Forschungsbericht Nr. 474},
  title       ={Read k Times Ordered Binary Decision Diagrams -- Efficient Algorithms in the Presence of Null Chains},
  year        ={1993}
}
@inproceedings{BSSW94,
  author      ={B. Bollig and M. Sauerhoff and D. Sieling and I. Wegener},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden im Systementwurf},
  editor      ={H. Eveking},
  key         ={BSSW94},
  keyword     ={2GI/ITG},
  month       ={March},
  organization={GI/ITG},
  publisher   ={Universit\"{a}t Frankfurt, Interner Bericht Nr. 6/94},
  title       ={{E}ine neue {D}atenstruktur f\"{u}r {B}oolesche {F}unktionen: k-fach wiederholte {OBDD}s},
  year        ={1994}
}
@inproceedings{BaBa87,
  author      ={B. Banieqbal and H. Barringer},
  booktitle   ={Temporal Logic in Specification},
  key         ={BaBa87},
  pages       ={62-74},
  title       ={Temporal Logic with Fixed Points},
  year        ={1987}
}
@inproceedings{BaCF91,
  address     ={Davis, California},
  author      ={S. Bainbridge and A. Camilleri and R. Fleming},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={BaCF91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Industrial Application of Theorem Proving to System Level Design},
  year        ={1991}
}
@inproceedings{BaCW95,
  address     ={Prague},
  author      ={M. Baudinet and J. Chomicki and P. Wolper},
  booktitle   ={International Conference on Database Theory (ICDT)},
  key         ={BaCW95},
  month       ={January},
  pages       ={322--337},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Constraint-Generating Dependencies},
  volume      ={893},
  year        ={1995}
}
@inproceedings{BaDL96,
  address     ={Palo Alto, CA, USA},
  author      ={C. Barett and D. L. Dill and J. Levitt},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={BaDL96},
  month       ={November},
  pages       ={187--201},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Validity checking for combinations of theories with equality},
  volume      ={1166},
  year        ={1996}
}
@inbook{BaDP89,
  author      ={L. Bachmair and N. Dershowitz and D. Plaisted},
  chapter     ={Completion without Failure},
  key         ={BaDP89},
  keyword     ={Rewrite},
  publisher   ={Academic Press},
  title       ={Resolution of Equations in Algebraic Structures},
  year        ={1989}
}
@inproceedings{BaDe86,
  author      ={L. Bachmair and N. Dershowitz},
  booktitle   ={Conference on Automated Deduction (CADE)},
  key         ={BaDe86},
  keyword     ={Rewrite Methods},
  pages       ={5--20},
  title       ={Commutation, transformation and termination},
  year        ={1986}
}
@article{BaDe88,
  author      ={L. Bachmair and N. Dershowitz},
  journal     ={Journal of Symbolic Computation},
  key         ={BaDe88},
  keyword     ={Rewrite Methods},
  month       ={August},
  number      ={1},
  pages       ={1--18},
  title       ={Critical pair criteria for completion},
  volume      ={6},
  year        ={1988}
}
@inproceedings{BaEn96,
  address     ={Dresden, Germany},
  author      ={R.K. Bawa and E. Encrenaz},
  booktitle   ={SIG-VHDL Spring '96 Working Conference},
  editor      ={W. Ecker},
  key         ={BaEn96},
  keyword     ={VHDL verification modelchecking},
  month       ={May},
  pages       ={145--156},
  publisher   ={Shaker Verlag},
  remark      ={ISBN: 3-8265-1462-9},
  title       ={{VMC}: A tool for Model Checking {VHDL} Descriptions},
  year        ={1996}
}
@inproceedings{BaFr96,
  address     ={Turku, Finland},
  author      ={D. Basin and S. Friedrich},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harisson},
  key         ={BaFr96},
  month       ={August},
  pages       ={33--50},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Modeling a Hardware Synthesis Methodology in Isabelle},
  volume      ={1125},
  year        ={1996}
}
@article{BaFr98,
  author      ={D. Basin and S. Friedrich},
  journal     ={Journal of Formal Methods in Systems Design},
  key         ={BaFr98},
  title       ={Modeling a Hardware Synthesis Methodology in {I}sabelle},
  year        ={1998}
}
@inproceedings{BaKP84,
  address     ={New York},
  author      ={H. Barringer and R. Kuiper and A. Pnueli},
  booktitle   ={{ACM} Symposium on Theory of Computing},
  key         ={BaKP84},
  organization={ACM},
  pages       ={51--63},
  title       ={Now you may compose Temporal Logic Specifications},
  year        ={1984}
}
@inproceedings{BaKP86,
  author      ={H. Barringer and R. Kuiper and A. Pnueli},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={BaKP86},
  organization={ACM},
  pages       ={173--183},
  title       ={A Really Abstract Current Model and its Temporal Logic},
  year        ={1986}
}
@inproceedings{BaKl95,
  address     ={Liege, Belgium},
  author      ={D. A. Basin and N. Klarlund},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={BaKl95},
  month       ={July},
  pages       ={31--41},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Hardware verification using Monadic Second-order Logic},
  volume      ={939},
  year        ={1995}
}
@article{BaKl98,
  author      ={D. Basin and N. Klarlund},
  journal     ={Journal of Formal Methods in Systems Design},
  key         ={BaKl98},
  title       ={Automata Based Symbolic Reasoning in Hardware Verification},
  year        ={1998}
}
@techreport{BaKu83,
  author      ={H. Barringer and R. Kuiper},
  institution ={University of Manchester},
  key         ={BaKu83},
  month       ={November},
  title       ={A Temporal Logic Specification Method Supporting Hierarchical Development},
  year        ={1983}
}
@article{BaMc92,
  author      ={M. Barroca and J.A. McDermid},
  journal     ={The Computer Journal},
  key         ={BaMc92},
  number      ={6},
  pages       ={579--592},
  title       ={{F}ormal {M}ethods: {U}se and {R}elevance for the Development of {S}afety-{C}ritical {S}ystems},
  volume      ={35},
  year        ={1992}
}
@inproceedings{BaNW91,
  address     ={Denver, Collorado},
  author      ={M. Baudinet and M. Ni\'{e}zette and P. Wolper},
  booktitle   ={ACM Symposium on Principles of Database Systems},
  key         ={BaNW91},
  pages       ={280--290},
  title       ={On the Representation of Infinite Temporal Data and Queries},
  year        ={1991}
}
@inbook{BaPA95,
  address     ={Boston, MA},
  author      ={P. Baraona and J. Penix and P. Alexander},
  chapter     ={{VSPEC}: A Declarative Requirements Specification Language for {VHDL}},
  key         ={BaPA95},
  publisher   ={Kluwer Academic Publishers},
  series      ={Current Issues in Electronic Modeling},
  title       ={High Level System Modeling: Specification Languages},
  volume      ={3},
  year        ={1995}
}
@incollection{BaRo94,
  author      ={E. Barros and W. Rosenstiel},
  booktitle   ={Codesign: Computer Aided Software/Hardware Engineering},
  key         ={BaRo94},
  publisher   ={IEEE Press},
  title       ={A clustering approach to support hardware/software partitioning},
  year        ={1994}
}
@inproceedings{BaSa94,
  address     ={San Jose, California},
  author      ={F. Balarin and A.L. Sangiovanni-Vincentelli},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={BaSa94},
  keyword     ={formal_verification},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={450--457},
  publisher   ={IEEE Computer Society Press},
  title       ={{I}terative {A}lgorithms for {F}ormal {V}erification of {E}mbedded {R}eal-{T}ime {S}ystems},
  year        ={1994}
}
@inproceedings{BaSa94a,
  address     ={Standford, California, USA},
  author      ={F. Balarin and A.L. Sangiovanni-Vincentelli},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={BaSa94a},
  month       ={June},
  pages       ={234--246},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={On The Automatic Computation of Network Invariants},
  volume      ={818},
  year        ={1994}
}
@inproceedings{BaSa97,
  address     ={Toledo, Spain},
  author      ={F. Balarin and K. Sajid},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={BaSa97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Simplifying data operations for formal verification},
  year        ={1997}
}
@inproceedings{BaWi87,
  address     ={New York},
  author      ={M.R. Barbacci and J.M. Wing},
  booktitle   ={Conference on Parallel Architectures and Languages Europe (PARLE)},
  key         ={BaWi87},
  month       ={June},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Specifying Functional and Timing Behaviour for Real-Time Systems},
  volume      ={259},
  year        ={1987}
}
@techreport{BaWr89,
  address     ={Lemmink\"{a}inengatan 14, SF-20520 Turku, Finland},
  author      ={R.-J.R. Back and J. von Wright},
  institution ={Institutionen f\"{o}r Informationsbehandling \& Mathematiska Institutet, {\AA}bo Akademi},
  key         ={BaWr89},
  keyword     ={refinement HOL techreport},
  month       ={September},
  number      ={Series A---85},
  title       ={Refinement Concepts Formalized in Higher-Order Logic},
  type        ={Reports on Computer Science {\&} Mathematics},
  year        ={1989}
}
@article{BaWr90,
  author      ={R.-J.R. Back and J. von Wright},
  journal     ={Formal Aspects of Computing},
  key         ={BaWr90},
  keyword     ={refinement HOL},
  month       ={July},
  number      ={3},
  pages       ={247--272},
  title       ={Refinement Concepts Formalised in Higher-Order Logic},
  volume      ={2},
  year        ={1990}
}
@article{BaWr90a,
  author      ={R.J.-R. Back and J. von Wright},
  journal     ={Formal Aspects of Computing},
  key         ={BaWr90a},
  month       ={July},
  number      ={3},
  pages       ={247--272},
  title       ={Refinement Concepts Formalised in Higher-Order Logic},
  volume      ={2},
  year        ={1990}
}
@inproceedings{BaYo93,
  address     ={Ottawa, Canada},
  author      ={F. Balarin and G. York},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={BaYo93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={439--452},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Verilog {HDL} Modeling Styles for Formal Verification},
  year        ={1993}
}
@inproceedings{Bach88,
  author      ={L. Bachmair},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={Bach88},
  pages       ={228-233},
  title       ={Proof by consistency in equational theories},
  year        ={1988}
}
@article{Bach88a,
  author      ={L. Bachmair},
  journal     ={Journal of Symbolic Computation},
  key         ={Bach88a},
  keyword     ={Rewrite},
  pages       ={1--18},
  title       ={Critical Pair Criteria for Completion},
  volume      ={6},
  year        ={1988}
}
@inproceedings{Bach88b,
  address     ={Edinburgh, UK},
  author      ={L. Bachmair},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={Bach88b},
  keyword     ={Rewrite},
  pages       ={228--233},
  title       ={Proof by consistency in equational theories},
  year        ={1988}
}
@inproceedings{Baie96,
  address     ={New Brunswick, NJ, USA},
  author      ={C. Baier},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={Baie96},
  month       ={July/August},
  pages       ={50--61},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Polynomial-Time Algorithms for Testing Probabilistic Bisimulation and Simulation},
  volume      ={1102},
  year        ={1996}
}
@incollection{Bail91,
  author      ={A. Bailey},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Borrione and R. Waxman},
  key         ={Bail91},
  pages       ={213--228},
  publisher   ={Elsevier Science Publishers B.V. (North-Holland)},
  title       ={Abstraction Mechanisms for Hardware Verification: Formalisation in a Process Algebra},
  year        ={1991}
}
@inproceedings{Bail93,
  address     ={Arles, France},
  author      ={A. Bailey},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={Bail93},
  keyword     ={verification},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={167--178},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Automatic Verification of Speed-Independent Circuit Designs Using the {C}ircal System},
  volume      ={683},
  year        ={1993}
}
@phdthesis{Bala94,
  author      ={F. Balarin},
  key         ={Bala94},
  school      ={The University of California at Berkeley},
  title       ={Iterative Methods for Formal Verification of Digital Systems},
  year        ={1994}
}
@article{Barb92,
  author      ={M. Barbacci},
  journal     ={IEEE Design \& Test of Computers},
  key         ={Barb92},
  keyword     ={HDL},
  month       ={September},
  pages       ={75--77},
  title       ={An {ISPS} Retrospective},
  year        ={1992}
}
@inproceedings{Barb93a,
  address     ={Ottawa, Canada},
  author      ={M. Barbacci},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Barb93a},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={1--2},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Real-Time System Design},
  year        ={1993}
}
@inproceedings{Barb93b,
  address     ={Ottawa, Canada},
  author      ={M. Barbacci},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Barb93b},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={101--102},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Synthesis and Verification},
  year        ={1993}
}
@book{Bare84,
  author      ={H.P. Barendregt},
  key         ={Bare84},
  publisher   ={North-Holland},
  title       ={The $\lambda$-calculus},
  year        ={1984}
}
@article{Barr84,
  author      ={H.G. Barrow},
  journal     ={{VLSI} Design},
  key         ={Barr84},
  month       ={July},
  pages       ={64--77},
  title       ={Proving the Correctness of Digital Hardware Designs},
  volume      ={5},
  year        ={1984}
}
@inproceedings{Barr91,
  address     ={Davis, California},
  author      ={E. de {Barros Lucena}},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Barr91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={384--394},
  publisher   ={IEEE Computer Society Press},
  title       ={Reasoning About {P}etri Nets in {HOL}},
  year        ={1991}
}
@inproceedings{Barr95,
  author      ={H. Barringer},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  key         ={Barr95},
  month       ={August},
  publisher   ={Chiba, Japan},
  title       ={Symbolic verification of hardware systems},
  year        ={1995}
}
@book{Barw77,
  address     ={Amsterdam},
  author      ={J. Barwise},
  key         ={Barw77},
  publisher   ={North-Holland},
  title       ={Handbook of Mathematical Logic},
  year        ={1977}
}
@inproceedings{Baur92,
  author      ={P. Baur},
  booktitle   ={{IFA} {S}ymposium on {S}afety, {S}ecurity and {R}ealiability of Computers},
  key         ={Baur92},
  title       ={{T}he verification {S}upport {E}nvironment {VSE}},
  year        ={1992}
}
@inproceedings{BeBM93,
  address     ={Santa Clara, California},
  author      ={P.A. Beerel and J. Burch and T.H.-Y. Meng},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={BeBM93},
  keyword     ={Asynchronous_Circuit_Synthesis_and_Verification},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={261--269},
  publisher   ={IEEE Computer Society Press},
  title       ={{E}fficient {V}erification of {D}eterminate {S}peed-{I}ndependent {C}ircuits},
  year        ={1993}
}
@inproceedings{BeBR96,
  address     ={New Brunswick, NJ, USA},
  author      ={N. Berregeb and A. Bouhoula and M. Rusinowitch},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={BeBR96},
  month       ={July/August},
  pages       ={220--231},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Automated Verification By Induction With Associative-Commutative Operators},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{BeBS90,
  address     ={Cambridge},
  author      ={D.L. Beatty and R.E. Bryant and C.-J.H. Seger},
  booktitle   ={{MIT} Conference on Advanced Research in {VLSI}},
  editor      ={W.J. Dally},
  key         ={BeBS90},
  pages       ={98--112},
  publisher   ={MIT Press},
  title       ={Synchronous circuit verification by symbolic simulation: An Illustration},
  year        ={1990}
}
@inproceedings{BeBS91,
  author      ={D.L. Beatty and R.E. Bryant and C.-J.H. Seger},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={BeBS91},
  month       ={June},
  organization={IEEE},
  publisher   ={IEE Computer Society Press},
  title       ={{F}ormal {H}ardware {V}erification by {S}ymbolic {T}ernary {T}rajectory {E}valuation},
  year        ={1991}
}
@inproceedings{BeBr94,
  address     ={San Diego, CA},
  author      ={D.L. Beatty and R.E. Bryant},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={BeBr94},
  keyword     ={formal_verification},
  month       ={June},
  note        ={ch. 38.1},
  publisher   ={San Diego Convention Center},
  title       ={{F}ormally {V}erifying a {M}icroprocessor {U}sing a {S}imulation {M}ethodology},
  year        ={1994}
}
@inbook{BeCG88,
  author      ={B. Berry and P. Courronn{\'e} and G. Gonthier},
  chapter     ={Synchronous programming of reactive systems, an introduction to {Esterel}},
  editor      ={K. Fuchi and M. Nivat},
  key         ={BeCG88},
  note        ={Also INRIA Report 647},
  publisher   ={Elsevier Science Publisher (North Holland)},
  title       ={Programming of Future Generation Computers},
  year        ={1988}
}
@inproceedings{BeCM90,
  author      ={C. Berthet and O. Coudert and J. C. Madre},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={BeCM90},
  title       ={New Ideas on Symbolic Manipulations of Finite State Machines},
  year        ={1990}
}
@inproceedings{BeCS90,
  author      ={J. Benkowski and M. Chew and A.J. Strojwas},
  booktitle   ={Formal {VLSI} Correctness Verification},
  editor      ={L.J.M. Claesen},
  key         ={BeCS90},
  keyword     ={hardware verification general},
  pages       ={39--56},
  publisher   ={Elsevier Science Publishers, North-Holland},
  series      ={{VLSI} Design Methods},
  title       ={A Framework for Timing Verification/Simulation with Varying Delays},
  year        ={1990}
}
@inproceedings{BeDE96,
  address     ={Kreischa},
  author      ={B. Becker and R. Drechsler and R. Enders},
  booktitle   ={GI/ITG/GME Workshop Methoden des Entwurfs und der Verifikation Digitaler Systeme},
  editor      ={Bernd straube and Jens Schoenherr},
  key         ={BeDE96},
  keyword     ={4. GI/ITG/GME},
  month       ={March},
  organization={GI/ITG/GME},
  pages       ={71--80},
  publisher   ={Shaker Verlag, Aachen},
  series      ={Berichte aus der Informatik},
  title       ={On The Computational Power of Bit-Level and Word-Level Decision Diagrams},
  year        ={1996}
}
@article{BeDT97,
  author      ={B. Becker and R. Drechsler and M. Theobald},
  journal     ={Formal Methods in System Design},
  key         ={BeDT97},
  pages       ={5-21},
  title       ={On the Expressive Power of {OKFDD}s},
  volume      ={11},
  year        ={1997}
}
@inproceedings{BeDW95,
  author      ={B. Becker and R. Drechsler and R. Werchner},
  booktitle   ={LATIN95},
  key         ={BeDW95},
  series      ={Lecture Notes in Computer Science},
  title       ={{O}n the {R}elation between {BDD}s and {FDD}s},
  year        ={1995}
}
@inproceedings{BeDj97,
  address     ={Toledo, Spain},
  author      ={J. Benzakki and B. Djafri},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={BeDj97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Object oriented extensions to {VHDL}. the {LaMI} proposal},
  year        ={1997}
}
@inproceedings{BeDr95,
  address     ={Paris},
  author      ={B. Becker and R. Drechsler},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={BeDr95},
  month       ={March},
  pages       ={438--443},
  publisher   ={IEEE Computer Society Press},
  title       ={{H}ow {M}any {D}ecomposition {T}ypes {D}o {W}e {N}eed?},
  year        ={1995}
}
@inproceedings{BeGC97,
  address     ={Toledo, Spain},
  author      ={B. Berkane and S. Gandrabur and E. Cerny},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={BeGC97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Algebra of communicating timing charts for describing and verifying hardware interfaces},
  year        ={1997}
}
@inproceedings{BeGo89,
  author      ={G. Berry and G. Gonthier},
  booktitle   ={International Symposium on Protocol Specification, Testing, and Verification (PSTV)},
  key         ={BeGo89},
  publisher   ={North Holland},
  title       ={Incremental Development of an {HDLC} Protocol in {E}sterel},
  year        ={1989}
}
@article{BeGo92,
  author      ={G. Berry and G. Gonthier},
  journal     ={Science of Computer Programming},
  key         ={BeGo92},
  number      ={2},
  pages       ={87-152},
  title       ={The {E}sterel Synchronous Programming Language: Design, Semantics, Implementation},
  volume      ={19},
  year        ={1992}
}
@techreport{BeGr94,
  address     ={The Techion, Haifa 32000, Israel},
  author      ={O. Bernholtz and O. Grumberg},
  institution ={Department of Computer Science},
  key         ={BeGr94},
  keyword     ={hardware specification logic ltl ctl},
  title       ={Buy One, Get One Free!!!},
  year        ={1994}
}
@inproceedings{BeGr94a,
  author      ={O. Bernholtz and O. Grumberg},
  booktitle   ={International Conference on Temporal Logic},
  key         ={BeGr94a},
  title       ={Buy One, Get One Free!!!},
  year        ={1994}
}
@article{BeGu90,
  author      ={A. Benveniste and P. Le Guernic},
  journal     ={{IEEE} Transactions on Automatic Control},
  key         ={BeGu90},
  number      ={5},
  pages       ={535-546},
  title       ={Hybrid dynamical systems theory and the {SIGNAL} language},
  volume      ={35},
  year        ={1990}
}
@article{BeHP82,
  author      ={M. Ben-Ari and J. Y. Halpern and A. Pnueli},
  journal     ={Computer System Science},
  key         ={BeHP82},
  pages       ={402--417},
  title       ={Deterministic Propositional Dynamic Logic: Finite Models, Complexity, and completness},
  volume      ={25},
  year        ={1982}
}
@inproceedings{BeHa81,
  address     ={New York},
  author      ={A. Bernstein and P. Harter},
  booktitle   ={{ACM} Symposium on Operating System Principles},
  key         ={BeHa81},
  month       ={December},
  organization={ACM},
  pages       ={1--11},
  title       ={Proving Real-Time Properties of Programs with Temporal Logic},
  year        ={1981}
}
@inproceedings{BeHa92,
  author      ={B. Beckert and R. H\"{a}hnle},
  booktitle   ={Conference on Automated Deduction (CADE)},
  key         ={BeHa92},
  keyword     ={Logic},
  title       ={An improved method for adding equality to free variable tableaux},
  year        ={1992}
}
@inproceedings{BeHe95,
  address     ={Passau},
  author      ={B. Becker and S. Hennig},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden beim Entwurf von Hardwaresystemen},
  editor      ={W. Grass and M. Mutz},
  key         ={BeHe95},
  keyword     ={3GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={51--60},
  publisher   ={Shaker Verlag},
  series      ={Berichte aus der Informatik},
  title       ={{GAFAP:} {A} {L}inear {T}ime {S}cheduling {A}pproach for {H}igh-level {S}ynthesis},
  year        ={1995}
}
@article{BeKl85,
  author      ={J.A. Bergstra and J.W. Klop},
  journal     ={Theoretical Computer Science},
  key         ={BeKl85},
  number      ={1},
  pages       ={77--121},
  title       ={{A}lgebra of {C}ommunicating {P}rocesses with {A}bstraction},
  volume      ={37},
  year        ={1985}
}
@book{BeKr83,
  author      ={K. Berka and L. Kreiser},
  key         ={BeKr83},
  keyword     ={Logic},
  publisher   ={Akademie-Verlag, Berlin},
  title       ={{L}ogik-{T}exte - {K}ommentierte {A}uswahl zur {G}eschichte der modernen {L}ogik},
  year        ={1983}
}
@inproceedings{BeLS96,
  address     ={New Brunswick, NJ, USA},
  author      ={S. Bensalem and Y. Lakhnech and H. Saidi},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={BeLS96},
  month       ={July/August},
  pages       ={323--335},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Powerful Techniques for the automatic Generation of Invariants},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{BeLe97,
  address     ={Enschede, The Netherlands},
  author      ={H. Ben-Abdallah and S. Leue},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={BeLe97},
  pages       ={259-274},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={Syntactic Detection of Process Divergence and Non-local Choice in Message Sequence Charts},
  year        ={1997}
}
@inproceedings{BeMP81,
  author      ={M. Ben-Ari and Z. Manna and A. Pnueli},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={BeMP81},
  keyword     ={hardware specification logic ctl},
  pages       ={164--176},
  title       ={The Temporal Logic of Branching Time},
  year        ={1981}
}
@article{BeMP83,
  author      ={M. Ben-Ari and Z. Manna and A. Pnueli},
  journal     ={Acta Informatica},
  key         ={BeMP83},
  pages       ={207--226},
  title       ={The Temporal Logic of Branching Time},
  volume      ={20},
  year        ={1983}
}
@inproceedings{BeMS95,
  address     ={Liege, Belgium},
  author      ={J. Bern and C. Meinel and A. Slobodova},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={BeMS95},
  month       ={July},
  pages       ={4--15},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Global Rebuilding of {OBDD's}-Avoiding Memory Requirement Maxima},
  volume      ={939},
  year        ={1995}
}
@inproceedings{BeMe92,
  address     ={Santa Clara, California},
  author      ={P.A. Beerel and T.H.-Y. Meng},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={BeMe92},
  keyword     ={synthesis},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={581--586},
  publisher   ={IEEE Computer Society Press},
  title       ={{A}utomatic {G}ate-{L}evel {S}ynthesis of {S}peed-{I}ndependent {C}ircuits},
  year        ={1992}
}
@article{BePM83,
  author      ={M. Ben-Ari and A. Pnueli and Z. Manna},
  journal     ={Acta Informatica},
  key         ={BePM83},
  number      ={3},
  pages       ={207--226},
  title       ={{T}he {T}emporal {L}ogic of {B}ranching {T}ime},
  volume      ={20},
  year        ={1983}
}
@inproceedings{BeRS93,
  address     ={Charleston, Virginia},
  author      ={G. Berry and S. Ramesh and R.K. Shyamasundar},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={BeRS93},
  title       ={Communicating Reactive Processes},
  year        ={1993}
}
@inproceedings{BeRa96,
  address     ={Paris, France},
  author      ={R. A. Bergamaschi and s. Raje},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={BeRa96},
  month       ={March},
  pages       ={350--356},
  publisher   ={{IEEE} Computer Society Press (Los Alamitos, California)},
  title       ={Observable Time Windows: Verifying The Results of High-Level Synthesis},
  year        ={1996}
}
@inproceedings{BeSa92,
  author      ={B. Benhamou and L. Sais},
  booktitle   ={Conference on Automated Deduction (CADE)},
  editor      ={D. Kapur},
  key         ={BeSa92},
  pages       ={281-294},
  title       ={Theoretical Study of Symmetries in Propositional Calculus and Applications},
  year        ={1992}
}
@inproceedings{BeSt91,
  address     ={Amsterdam},
  author      ={J. Benkoski and R.B. Stewart},
  booktitle   ={European Design Automation Conference },
  key         ={BeSt91},
  keyword     ={Timing_Verification_and_Specification},
  month       ={February},
  organization={IEEE},
  pages       ={256--260},
  publisher   ={IEEE Computer Society Press},
  title       ={{TATOO:} {A}n {I}ndustrial {T}iming {A}nalyzer with {F}alse {P}ath {E}limination and {T}est {P}attern {G}eneration},
  year        ={1991}
}
@inproceedings{BeVW94,
  address     ={Standford, California, USA},
  author      ={O. Bernholtz and M. Y. Vardi and P. Wolper},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={BeVW94},
  month       ={June},
  pages       ={142-155},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={An Automata-Theoretic Approach to Branching-Time Model Checking},
  volume      ={818},
  year        ={1994}
}
@phdthesis{Beat93,
  address     ={School of Computer Science},
  author      ={D.L. Beatty},
  key         ={Beat93},
  school      ={Carnegie-Mellon University},
  title       ={A Methodology for Formal Hardware Verification with Application to Microprocessors},
  year        ={1993}
}
@techreport{Beck91,
  author      ={B. Beckert},
  institution ={Institut f\"{u}r wissensbasierte Systeme},
  key         ={Beck91},
  keyword     ={Logic techreport},
  title       ={{K}onzeption und {I}mplementierung von {G}leichheit f\"{u}r einen tableau-basierten {T}heorembeweiser},
  year        ={1991}
}
@inproceedings{Beec94,
  address     ={L\"{u}beck, Germany},
  author      ={M. von der Beeck},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={Beec94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={128--148},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {C}omparison of {S}tatecharts {V}ariants},
  volume      ={863},
  year        ={1994}
}
@article{Behm22,
  author      ={H. Behmann},
  journal     ={Mathematische Annalen},
  key         ={Behm22},
  pages       ={163-229},
  title       ={{B}eitr\"{a}ge zur {A}lgebra der {L}ogik, insbesondere zum {E}ntscheidungsproblem},
  volume      ={86},
  year        ={1922}
}
@incollection{Beln77,
  address     ={Dordrecht},
  author      ={N.D. Belnap},
  booktitle   ={Modern Uses of Multiple Valued Logic},
  editor      ={J.M. Dunn and G. Epstein},
  key         ={Beln77},
  publisher   ={{D. Reidel}},
  title       ={A Useful Four-Valued Logic},
  year        ={1977}
}
@inproceedings{Bend96,
  address     ={Paris, France},
  author      ={A. Bender},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={Bend96},
  month       ={March},
  pages       ={275-281},
  publisher   ={{IEEE} Computer Society Press (Los Alamitos, California)},
  title       ={Design of an Optimal Loosely Coupled Heterogeneous Multiprocessor System},
  year        ={1996}
}
@article{Berr89,
  author      ={G. Berry},
  journal     ={Information Processing},
  key         ={Berr89},
  pages       ={11-17},
  title       ={Real-Time Programming: General Purpose or Special-Purpose Languages},
  year        ={1989}
}
@inproceedings{Berr91,
  address     ={Miami, Florida},
  author      ={G. Berry},
  booktitle   ={{ACM} International Workshop on Formal Methods in {VLSI} Design},
  key         ={Berr91},
  keyword     ={verification},
  month       ={January},
  title       ={A Hardware Implementation of Pure {E}sterel},
  year        ={1991}
}
@inproceedings{Berr93,
  author      ={G. Berry},
  booktitle   ={Conference on the Foundations of Software Technology and Theoretical Computer Science (FSTTCS)},
  key         ={Berr93},
  number      ={761},
  pages       ={72-93},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Preemption and Concurrent Systems},
  year        ={1993}
}
@misc{Berr96,
  author      ={G. Berry},
  key         ={Berr96},
  month       ={May},
  title       ={The Constructive Semantics of Pure {Esterel}},
  year        ={1996}
}
@inproceedings{Berr97,
  address     ={Toledo, Spain},
  author      ={G. Berry},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={Berr97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP},
  publisher   ={Chapman and Hall},
  title       ={Synchronous languages for hardware and software reactive systems},
  year        ={1997}
}
@misc{Berr97a,
  author      ={G. Berry},
  howpublished={http://www.inria.fr/meije/esterel/},
  key         ={Berr97a},
  month       ={April},
  title       ={The {Esterel} v5 Language Primer},
  year        ={1997}
}
@misc{Berr97b,
  author      ={G. Berry},
  howpublished={http://www.inria.fr/meije/esterel/},
  key         ={Berr97b},
  month       ={February},
  title       ={A Quick Guide to {Esterel}},
  year        ={1997}
}
@incollection{Berr98,
  author      ={G. Berry},
  booktitle   ={Proof, Language and Interaction: Essays in Honour of Robin Milner},
  title       ={The Foundations of {E}sterel},
  editor      ={G. Plotkin and C. Stirling and M. Tofte},
  key         ={Berr98},
  publisher   ={MIT Press},
  year        ={1998}
}
@book{Bers79,
  author      ={J. Berstel},
  key         ={Bers79},
  keyword     ={omega},
  publisher   ={Teubner, Stuttgart},
  title       ={Transductions and Context-Free Languages},
  year        ={1979}
}
@article{Beth55,
  author      ={E.W. Beth},
  journal     ={Medlingen der Koninklijke Nederlandse Akademie van Wetenschapen},
  key         ={Beth55},
  keyword     ={Logic},
  number      ={13},
  pages       ={309--342},
  title       ={Semantic Entailment and formal derivability},
  volume      ={18},
  year        ={1955}
}
@article{Bevi89,
  author      ={W.R. Bevier},
  journal     ={Journal of Automated Reasoning},
  key         ={Bevi89},
  number      ={4},
  pages       ={519--530},
  title       ={Kit and the Sort Stack},
  volume      ={5},
  year        ={1989}
}
@inproceedings{BhDB93,
  address     ={Paris, France},
  author      ={S. Bhattacharya and S. Dey and F. Brglez},
  booktitle   ={European Design Automation Conference },
  editor      ={A. Ambler},
  key         ={BhDB93},
  month       ={February},
  pages       ={162--169},
  publisher   ={IEEE Computer Society Press},
  title       ={{RT}-Level Transformations for Gate-Level Testability},
  year        ={1993}
}
@inproceedings{BhDe94,
  address     ={San Diego, CA},
  author      ={V. Bhagwati and S. Devadas},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={BhDe94},
  keyword     ={formal_verification},
  month       ={June},
  note        ={ch. 38.2},
  publisher   ={San Diego Convention Center},
  title       ={{A}utomatic {V}erification of {P}ipelined {M}icroprocessors},
  year        ={1994}
}
@inproceedings{BiBa96,
  address     ={Kreischa},
  author      ={Ulrich Bieker and Steven Bashford},
  booktitle   ={GI/ITG/GME Workshop Methoden des Entwurfs und der Verifikation Digitaler Systeme},
  editor      ={Bernd straube and Jens Schoenherr},
  key         ={BiBa96},
  keyword     ={4. GI/ITG/GME},
  month       ={March},
  organization={GI/ITG/GME},
  pages       ={41--50},
  publisher   ={Shaker Verlag, Aachen},
  series      ={Berichte aus der Informatik},
  title       ={Scheduling, Compaction and Binding in a Retargetable Code Generator Using Constraint Logic Programming},
  year        ={1996}
}
@inproceedings{BiDW96,
  address     ={Oxford},
  author      ={J. Bicarregui and J. Dick and E. Woods},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={BiDW96},
  month       ={March},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{Q}uantitative {A}nalysis of an {A}pplication of {F}ormal {M}ethods},
  volume      ={1051},
  year        ={1996}
}
@book{BiDa95,
  address     ={University of Calgary, Alta., Canada; University of Utah, Salt Lake City USA},
  author      ={G. Birtwistle and A.L. Davis},
  key         ={BiDa95},
  month       ={April},
  note        ={ISBN 3-540-19901-2},
  publisher   ={Springer-Verlag},
  remark      ={Approx. 280 pp. 151 figs., 6 tabs. Softcover DM 84,- \"{o}S 655,20; sFr 81,-},
  series      ={Workshops in Computing. Ed.: C.J. van Rijsbergen},
  title       ={{A}synchronous {D}igital {C}ircuit {D}esign},
  year        ={1995}
}
@inproceedings{BiEF83,
  author      ={W. Bibel and E. Eder and B. Fronh\"{o}fer},
  booktitle   ={International Joint Conference on Artificial Intelligence (IJCAI)},
  key         ={BiEF83},
  keyword     ={Logic},
  month       ={August},
  pages       ={920--922},
  title       ={Towards an Advanced Implementation of the Connection Method},
  year        ={1983}
}
@inproceedings{BiJa96,
  address     ={Palo Alto, CA, USA},
  author      ={M. Bickford and D. Jamseck},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={BiJa96},
  month       ={November},
  pages       ={310--326},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Formal specification and verification of {VHDL}},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{BiMa88,
  address     ={Glasgow, Scotland},
  author      ={J.P. Billon and J.C. Madre},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={BiMa88},
  keyword     ={verification},
  note        ={IFIP Transactions},
  organization={IFIP WG 10.2},
  pages       ={487--501},
  publisher   ={North-Holland},
  title       ={Original Concepts of {PRIAM}, an Industrial Tool for Efficient Formal Verification of Combinational Circuits},
  year        ={1988}
}
@inproceedings{BiSc75,
  author      ={W. Bibel and J. Schreiber},
  booktitle   ={International Computing Symposium},
  editor      ={F. Gelenbe and F. Poitier},
  key         ={BiSc75},
  pages       ={205-212},
  publisher   ={North-Holland},
  title       ={Proof Search in a Gentzen-like System of first-order logic},
  year        ={1975}
}
@book{BiSu88,
  editor      ={G. Birtwistle and P.A. Subrahmanyam},
  key         ={BiSu88},
  publisher   ={Springer-Verlag},
  title       ={Current Trends in Hardware Verification and Automated Theorem Proving},
  year        ={1988}
}
@book{BiSu88a,
  address     ={Boston, MA},
  booktitle   ={{VLSI} Specification, Verification, and Synthesis},
  editor      ={G. Birtwistle and P.A. Subrahmanyam},
  key         ={BiSu88a},
  publisher   ={Kluwer Academic Publishers},
  title       ={{VLSI} Specification, Verification and Synthesis},
  year        ={1988}
}
@article{Bibe81,
  author      ={W. Bibel},
  journal     ={Journal of the Association for Computing Machinery},
  key         ={Bibe81},
  month       ={oct},
  number      ={4},
  pages       ={633-645},
  title       ={On Matrices with Connections},
  volume      ={28},
  year        ={1981}
}
@article{Bibe83,
  author      ={W. Bibel},
  journal     ={Communications of the ACM},
  key         ={Bibe83},
  keyword     ={Logic},
  number      ={11},
  pages       ={844--852},
  title       ={Matings and Matrices},
  volume      ={26},
  year        ={1983}
}
@article{Bibe85,
  author      ={W. Bibel},
  journal     ={Journal of Symbolic Computation},
  key         ={Bibe85},
  pages       ={245-260},
  title       ={Automated Inferencing},
  volume      ={1},
  year        ={1985}
}
@book{Bibe87a,
  author      ={W. Bibel},
  key         ={Bibe87a},
  keyword     ={Logic},
  publisher   ={Vieweg Verlag},
  title       ={Automated Theorem Proving},
  year        ={1987}
}
@article{Bibe89,
  author      ={W. Bibel},
  journal     ={Journal of the Automated Reasoning},
  key         ={Bibe89},
  keyword     ={Logic},
  title       ={Short Proofs of the Pigeonhole Formulas based on the Connection Method},
  year        ={1989}
}
@inproceedings{Bibe90,
  author      ={W. Bibel},
  booktitle   ={Conference on Automated Deduction (CADE)},
  key         ={Bibe90},
  keyword     ={Logic},
  note        ={Kaiserslautern},
  title       ={Perspectives on Automated Deduction},
  year        ={1990}
}
@inproceedings{Biek93,
  address     ={Bad Herrenalb},
  author      ={U. Bieker},
  booktitle   ={GI/ITG Workshop Formale Methoden zum Entwurf korrekter Systeme},
  editor      ={T. Kropf and R. Kumar and D. Schmid},
  key         ={Biek93},
  keyword     ={1GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={8--12},
  publisher   ={Universit\"{a}t Karlsruhe, Interner Bericht Nr. 10/93},
  title       ={{O}n the {F}ormal {S}emantics of a {CHDL}-{A} {C}ase {S}tudy},
  year        ={1993}
}
@phdthesis{Bier97,
  address     ={76128 Karlsruhe, Germany},
  author      ={A. Biere},
  key         ={Bier97},
  school      ={University of Karlsruhe, Germany},
  title       ={Effiziente Modellpr\"{u}fung des $\mu$-Kalk\"{u}ls mit bin\"{a}ren Entscheidungsdiagrammen},
  year        ={1997}
}
@techreport{Bill87,
  address     ={Louveciennes, France},
  author      ={J.P. Billon},
  institution ={Bull Research Center},
  key         ={Bill87},
  month       ={June},
  number      ={87019},
  title       ={Perfect Formal Forms for {DISCRETE} Functions},
  year        ={1987}
}
@techreport{Bill91,
  address     ={Rue Jean Jaures,78340 Les-Clayes-Sous-Bois, France},
  author      ={J.P. Billon},
  institution ={Bull system Products, Operation Recherche et Developements Avances},
  key         ={Bill91},
  number      ={RT/91037},
  title       ={A new approach of theorem proving for nonclausal first order logic with equalitybased on generalized {S}hannons decomposition principle},
  year        ={1991}
}
@book{Binm77,
  address     ={Cambridge},
  author      ={K.G. Binmore},
  key         ={Binm77},
  publisher   ={Cambridge University Press},
  title       ={Mathematical Analysis},
  year        ={1977}
}
@inproceedings{BjBM95,
  address     ={Cassis, France},
  author      ={N. Bjxrner and I.A. Browne and Z. Manna},
  booktitle   ={International Conference on Principles and Practice of Constraint Programming},
  key         ={BjBM95},
  month       ={September},
  title       ={{A}utomatic {G}eneration of {I}nvariants and {I}ntermediate {A}ssertions},
  year        ={1995}
}
@book{BlBu87,
  author      ={K.H. Bl\"{a}sius and H.-J. B\"{u}rckert},
  key         ={BlBu87},
  keyword     ={Logic},
  publisher   ={Oldenburg Verlag},
  title       ={Deduktionssysteme},
  year        ={1987}
}
@inproceedings{BlDS93,
  address     ={Paris, France},
  author      ={Y. Blaqui\`{e}re and M. Dagenais and Y. Savaria},
  booktitle   ={European Design Automation Conference },
  editor      ={C.O. Newton and M. Heydeman},
  key         ={BlDS93},
  month       ={February},
  organization={IEEE},
  pages       ={449--454},
  publisher   ={IEEE Computer Society Press},
  title       ={A New Accurate and Hierarchical Timing Analysis Approach},
  year        ={1993}
}
@book{BlLo84,
  author      ={W.W. Bledsoe and D.W. Loveland},
  key         ={BlLo84},
  publisher   ={Contemporary Mathematics 29, American Mathematical Society},
  title       ={Automated Theorem Proving: after 25 years},
  year        ={1984}
}
@inproceedings{BlWi95,
  address     ={Aspen Grove, Utah, USA},
  author      ={P.E. Black and P.J. Windley},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={BlWi95},
  month       ={September},
  pages       ={46--57},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A}utomatically {S}ynthesized {T}erm {D}enotation {P}redicates: {A} {P}roof {A}id},
  volume      ={971},
  year        ={1995}
}
@inproceedings{BlWi96,
  address     ={Turku, Finland},
  author      ={P. E. Black and P. J. Windley},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harisson},
  key         ={BlWi96},
  month       ={August},
  pages       ={51--60},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Inference Rules for Programming Languages with Side Effects In Expressions},
  volume      ={1125},
  year        ={1996}
}
@mastersthesis{Blau97,
  address     ={Karlsruhe},
  author      ={M. Blaum},
  key         ={Blau97},
  keyword     ={SFB358},
  remark      ={betreut von T. Kropf und J. Ruf},
  school      ={Universit\"{a}t Karlsruhe},
  title       ={Verifikation arithmetischer Schaltungen mit Nichtstandard-{BDD}s},
  year        ={1997}
}
@inproceedings{BoBe94,
  address     ={L\"{u}beck, Germany},
  author      ={H. Boucheneb and G. Berthelot},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={BoBe94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={211--227},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{P}redicting {L}ogical and {T}emporal {P}roperties of {R}eal-{T}ime {S}ystems {U}sing {S}ynchronized {E}lementary {N}ets},
  volume      ={863},
  year        ={1994}
}
@inproceedings{BoCZ92,
  address     ={Leuven, Belgium},
  author      ={M. Bombana and P. Cavalloro and G. Zaza},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={BoCZ92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={475--486},
  publisher   ={North-Holland},
  title       ={Specification and Formal Synthesis of Digital Circuits},
  year        ={1992}
}
@inproceedings{BoDa95,
  address     ={Paris},
  author      ={A. Boglioli and M. Damiani},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={BoDa95},
  keyword     ={Combinational_Logic_Synthesis},
  month       ={March},
  pages       ={80--85},
  publisher   ={IEEE Computer Society Press},
  title       ={{S}ynthesis of {M}ultilevel {F}ault-{T}olerant {C}ombinational {C}ircuits},
  year        ={1995}
}
@techreport{BoEJ93,
  author      ={B. Bose and M. {Esen Tuna} and V. Choppella},
  institution ={Indiana University, Computer Science Department},
  key         ={BoEJ93},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/},
  number      ={TR386},
  title       ={System Factorization in Codesign},
  year        ={1993}
}
@inproceedings{BoEC96,
  address     ={Palo Alto, CA, USA},
  author      ={B. Bose and M. {Esen Tuna} and V. Choppella},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={BoEC96},
  month       ={November},
  pages       ={270--274},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Tutorial on digital design derivation using {DRS}},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{BoER94,
  address     ={L\"{u}beck, Germany},
  author      ={A. Bouajjani and R. Echahed and R. Robbana},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={BoER94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={193--210},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{V}erifying {I}nvariance {P}roperties of {T}imed {S}ystems with {D}uration {V}ariables},
  volume      ={863},
  year        ={1994}
}
@inproceedings{BoER94a,
  address     ={Standford, California, USA},
  author      ={A. Bouajjani and R. Echahed and R. Robbana},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={BoER94a},
  month       ={June},
  pages       ={118-131},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification of Context-Free Timed Systems Using Linear Hybrid Observers},
  volume      ={818},
  year        ={1994}
}
@inproceedings{BoFR94,
  address     ={Malta},
  author      ={J.-P. Bodeveix and M. Filali and P. Roche},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={BoFR94},
  month       ={September},
  pages       ={49--64},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Towards a {HOL} theory of memory},
  volume      ={859},
  year        ={1994}
}
@inproceedings{BoFi89,
  address     ={Silver Spring},
  author      ={S. Bose and A.L. Fisher},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={BoFi89},
  pages       ={217--221},
  publisher   ={IEEE Computer Society Press},
  title       ={{V}erifying {P}ipelined {H}ardware {U}sing {S}ymbolic {L}ogic {S}imulation},
  year        ={1989}
}
@inproceedings{BoFi89a,
  author      ={S. Bose and A.L. Fisher},
  booktitle   ={{IFIP} International Workshop on Applied Formal Methods for Correct {VLSI} Design},
  editor      ={L.J.M. Claesen},
  key         ={BoFi89a},
  month       ={November},
  title       ={{A}utomatic {V}erification of {S}ynchronous {C}ircuits {U}sing {S}ymbolic {S}imulation and {T}emporal {L}ogic},
  year        ={1989}
}
@inproceedings{BoFi90,
  address     ={Leuven, Belgium},
  author      ={S. Bose and A.L. Fisher},
  booktitle   ={{IFIP} International Workshop on Applied Formal Methods for Correct {VLSI} Design},
  editor      ={L.J.M. Claesen},
  key         ={BoFi90},
  keyword     ={verification},
  pages       ={759--764},
  publisher   ={North-Holland},
  title       ={{A}utomatic {V}erification of {S}ynchronous {C}ircuits {U}sing {S}ymbolic {S}imulation and {T}emporal {L}ogic},
  year        ={1990}
}
@inproceedings{BoFi95,
  address     ={Aspen Grove, Utah, USA},
  author      ={J.-P. Bodeveix and M. Filali},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={BoFi95},
  month       ={September},
  pages       ={58--74},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{O}n the {R}efinement of {S}ymmetric {M}emory {P}rotocols},
  volume      ={971},
  year        ={1995}
}
@inproceedings{BoGM92,
  address     ={Hamburg},
  author      ={D. Boussebha and N. Giambiasi and H. Magnier},
  booktitle   ={European Design Automation Conference },
  key         ={BoGM92},
  keyword     ={HDL VHDL verification},
  month       ={March},
  organization={IEEE},
  pages       ={692--697},
  title       ={{T}emporal {V}erification of {B}ehavioral {D}escriptions in {VHDL}},
  year        ={1992}
}
@incollection{BoGM95,
  address     ={Madrid, Spain},
  author      ={E. B\"{o}rger and U. Gl\"{a}sser and W. M\"{u}ller},
  booktitle   ={Formal Semantics for {VHDL}},
  chapter     ={4},
  editor      ={C. {Delgado Kloos} and P.T. Breuer},
  key         ={BoGM95},
  month       ={March},
  publisher   ={Kluwer Academic Publishers},
  series      ={The Kluwer international series in engineering and computer science},
  title       ={A Formal Definition of an Abstract {VHDL'93} Simulator by {EA}-Machines},
  volume      ={307},
  year        ={1995}
}
@inproceedings{BoGo96,
  address     ={New Brunswick, NJ, USA},
  author      ={B. Boigelot and P. Godefroid},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={BoGo96},
  month       ={July/August},
  pages       ={1--12},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Symbolic Verification of Communication Protocols with infinite State Spaces using {QDDs}},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{BoGo96a,
  address     ={Oxford},
  author      ={B. Boigelot and P. Godefroid},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={BoGo96a},
  month       ={March},
  pages       ={465-478},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{M}odel {C}hecking in {P}ractice: {A}n {A}nalysis of the {ACCESS}.bus {P}rotocol using {SPIN}},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{BoGo97,
  address     ={Enschede, The Netherlands},
  author      ={B. Boigelot and P. Godefroid},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={BoGo97},
  pages       ={321-334},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={Automatic Synthesis of Specifications from the Dynamic Observation of Reactive Programs},
  year        ={1997}
}
@techreport{BoHi94,
  address     ={Wolfson Building, Parks Road, Oxford OX1 3QD},
  author      ={J.P. Bowen and M.G. Hinchey},
  institution ={Oxford University Computing Laboratory},
  key         ={BoHi94},
  keyword     ={verification},
  month       ={July},
  number      ={PRG-TR-7-94},
  remark      ={Successor of Hall90: seven myth of formal methods},
  title       ={{S}even more myths of formal methods},
  year        ={1994}
}
@inproceedings{BoHu96,
  address     ={Oxford},
  author      ={F.S. de Boer and M. van Hulst},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={BoHu96},
  month       ={March},
  pages       ={367-384},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{L}ocal {N}ondeterminism in {A}synchronously {C}ommunicating {P}rocesses},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{BoJP93,
  address     ={Ottawa, Canada},
  author      ={B. Bose and S.D. Johnson and S. Pullela},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={BoJP93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={127--134},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Integrating Boolean Verification with Formal Derivation},
  year        ={1993}
}
@inproceedings{BoJa96,
  address     ={Oxford},
  author      ={J. Bohn and W. Janssen},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={BoJa96},
  month       ={March},
  pages       ={609-628},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{A} {S}trategic {A}pproach to {T}ransformational {D}esign},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{BoJo93,
  address     ={Arles,France},
  author      ={B. Bose and S.D. Johnson},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  key         ={BoJo93},
  month       ={May},
  pages       ={191-202},
  publisher   ={Springer-Verlag},
  title       ={{DDD-FM9001}:Derivation of a Verified Microprocessor},
  year        ={1993}
}
@techreport{BoKR92,
  address     ={78153 Le Chesnay Cedex, France},
  author      ={A. Bouhoula and E. Kounalis and M. Rusinowitch},
  institution ={Institute National de Recherche en Informatique et en Automatique (INRIA)},
  key         ={BoKR92},
  keyword     ={Rewrite},
  month       ={April},
  number      ={1663},
  title       ={Automated Mathematical Induction},
  type        ={Rapport de Recherche},
  year        ={1992}
}
@inproceedings{BoLR95,
  address     ={Liege, Belgium},
  author      ={A. Bouajjani and Y. Lakhnech and R. Robbana},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={BoLR95},
  month       ={July},
  pages       ={196--210},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={From Duration Calculus to linear hybrid Automata},
  volume      ={939},
  year        ={1995}
}
@techreport{BoLW94,
  author      ={B. Bollig and M. L\"{o}bbing and I. Werner},
  institution ={Universit\"{a}t Dortmund},
  key         ={BoLW94},
  note        ={http://ls2-www.informatik.uni-dortmund.de/papers/tr-528.ps.gz},
  number      ={Forschungsbericht Nr. 528},
  title       ={Variable Orderings for {OBDD}'s, Simulated Annealing, and the Hidden Weighted Bit Function},
  year        ={1994}
}
@book{BoMo79,
  author      ={R.S. Boyer and J.S. Moore},
  key         ={BoMo79},
  keyword     ={Rewrite},
  publisher   ={Academic Press},
  title       ={A Computational Logic Handbook},
  year        ={1979}
}
@article{BoMo84,
  author      ={R.S. Boyer and J.S. Moore},
  journal     ={Contemporary Mathematics},
  key         ={BoMo84},
  pages       ={119--132},
  title       ={Proof-Checking Theorem-Proving and Program Verification},
  volume      ={29},
  year        ={1984}
}
@book{BoMo88,
  author      ={R.S. Boyer and J.S. Moore},
  key         ={BoMo88},
  keyword     ={Logic},
  publisher   ={Academic Press},
  title       ={A Computational Logic Handbook},
  year        ={1988}
}
@article{BoNi80,
  author      ={L. Boasson and M. Nivat},
  journal     ={Computer and System Science},
  key         ={BoNi80},
  keyword     ={omega},
  pages       ={285--309},
  title       ={Adherence of languages},
  volume      ={20},
  year        ={1980}
}
@inproceedings{BoPP88,
  address     ={Glasgow, Scotland},
  author      ={D. Borrione and J.-L. Paillet and L. Pierre},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={BoPP88},
  note        ={IFIP Transactions},
  organization={IFIP WG 10.2},
  pages       ={185--210},
  publisher   ={North-Holland},
  title       ={Formal Verification of {CASCADE} Descriptions},
  year        ={1988}
}
@article{BoPS92,
  author      ={D. Borrione and L. Pierre and A.M. Salem},
  journal     ={IEEE Design \& Test of Computers},
  key         ={BoPS92},
  keyword     ={verification VHDL},
  month       ={June},
  pages       ={42--55},
  title       ={{F}ormal {V}erification of {VHDL} {D}escriptions in the {P}revail {E}nvironment},
  year        ={1992}
}
@inproceedings{BoPV94,
  address     ={L\"{u}beck, Germany},
  author      ={D. Bosscher and I. Polak and F. Vaandrager},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={BoPV94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={170--192},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{V}erification of an {A}udio {C}ontrol {P}rotocol},
  volume      ={863},
  year        ={1994}
}
@techreport{BoPa87,
  address     ={Grenoble, France},
  author      ={D. Borrione and J.L. Paillet},
  institution ={IMAG/ARTEMIS},
  key         ={BoPa87},
  month       ={November},
  title       ={An Approach to the Formal Verification of {VHDL} descriptions},
  type        ={Research Report},
  year        ={1987}
}
@article{BoPi92,
  author      ={D. Borrione and R. Piloty},
  journal     ={IEEE Design \& Test of Computers},
  key         ={BoPi92},
  keyword     ={HDL},
  month       ={September},
  pages       ={54--56},
  title       ={Conlan: A Short Review and Critical Comparison with {VHDL}},
  year        ={1992}
}
@inproceedings{BoRa92,
  author      ={B. Boothe and A. Ranade},
  booktitle   ={Annual International Symposium on Computer Architecture},
  key         ={BoRa92},
  pages       ={214-223},
  title       ={Improved Multithreading Techniques for Hiding Communication Latency in Multiprocessors},
  year        ={1992}
}
@inproceedings{BoRo95,
  address     ={Liege, Belgium},
  author      ={A. Bouajjani and R. Robbana},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={BoRo95},
  month       ={July},
  pages       ={437--450},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verifying Omega-regular properties for a subclass of linear hybrid systems},
  volume      ={939},
  year        ={1995}
}
@inproceedings{BoRu93,
  address     ={Chambery, France},
  author      ={A. Bouhoula and M. Rusinowitch},
  booktitle   ={International Joint Conference on Artificial Intelligence (IJCAI)},
  key         ={BoRu93},
  keyword     ={Rewrite},
  title       ={Automatic Case Analysis in Proof by Induction},
  year        ={1993}
}
@article{BoRu94,
  author      ={A. Bouhoula and M. Rusinowitch},
  journal     ={Journal of Automated Reasoning},
  key         ={BoRu94},
  title       ={Implicit Induction in Conditional Theories},
  year        ={1994}
}
@article{BoSa95,
  author      ={D. Borrione and A. Salem},
  journal     ={Formal Methods in System Design},
  key         ={BoSa95},
  keyword     ={VHDL},
  month       ={August},
  note        ={Kluwer Academic Publishers, ISSN: 0925-9856},
  number      ={1/2},
  pages       ={53--72},
  remark      ={Publisher: Kluwer, special issue},
  title       ={{D}enotational {S}emantics of a {S}ynchronous {VHDL} {S}ubset},
  volume      ={7},
  year        ={1995}
}
@article{BoSi91,
  author      ={F. Boussinot and R. de Simone},
  journal     ={{IEEE}},
  key         ={BoSi91},
  month       ={sep},
  number      ={9},
  pages       ={1293-1304},
  title       ={The {ESTEREL} language},
  volume      ={79},
  year        ={1991}
}
@techreport{BoSi95,
  author      ={F. Boussinot and R. de Simone},
  institution ={{INRIA}},
  key         ={BoSi95},
  month       ={March},
  number      ={No. 2510},
  title       ={The {SL} synchronous language},
  type        ={Technical Report},
  year        ={1995}
}
@article{BoSi96,
  author      ={F. Boussinot and R. de Simone},
  journal     ={{IEEE} Transactions on Software Engineering},
  key         ={BoSi96},
  month       ={April},
  number      ={4},
  pages       ={256-266},
  title       ={The {SL} Synchronous Language},
  volume      ={22},
  year        ={1996}
}
@inproceedings{BoSi97,
  address     ={Grenoble, France},
  author      ={S. Bornot and J. Sifakis},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={BoSi97},
  pages       ={286-300},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Relating Time Progress and Deadlines in Hybrid Systems},
  year        ={1997}
}
@inproceedings{BoTJ93,
  author      ={B. Bose and M.E. Tuna and S.D. Johnson},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={BoTJ93},
  keyword     ={hardware algorithmiclevel formalsynthesis software complexity},
  month       ={October},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/abstracts/abstract-BoTJ93.txt},
  title       ={A Case Study of the Use of Formal Techniques to Achieve Hardware-Software Decomposition},
  year        ={1993}
}
@inproceedings{BoVB97,
  address     ={Montreal, Canada},
  author      ={D. Borrione and F. Vestman and H. Bouamama},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={H. F. Li and D. K. Probst},
  key         ={BoVB97},
  keyword     ={conference},
  month       ={October},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={An approach to {Verilog-VHDL} interoperability for synchronous designs},
  year        ={1997}
}
@inproceedings{BoWo94,
  address     ={Standford, California, USA},
  author      ={B. Boigelot and P. Wolper},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={BoWo94},
  month       ={June},
  pages       ={55-67},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Symbolic verification with Periodic Sets},
  volume      ={818},
  year        ={1994}
}
@article{Boch82,
  author      ={G.V. Bochmann},
  journal     ={{IEEE} Transactions on Computers},
  key         ={Boch82},
  keyword     ={hardware gatelevel specification formalism temporallogic ltl},
  month       ={March},
  number      ={3},
  pages       ={223--231},
  title       ={{H}ardware {S}pecification with {T}emporal {L}ogic: {A}n {E}xample},
  volume      ={C-31},
  year        ={1982}
}
@inproceedings{Boch93,
  address     ={Ottawa, Canada},
  author      ={G.V. Bochmann},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Boch93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={363--382},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Specification languages for communication protocols},
  year        ={1993}
}
@book{Boer85,
  author      ={E. B\"{o}rger},
  key         ={Boer85},
  keyword     ={Logic},
  publisher   ={Vieweg Verlag},
  title       ={{B}erechenbarkeit, {L}ogik, {K}omplexit\"{a}t},
  year        ={1985}
}
@inproceedings{Bohn93,
  address     ={Bad Herrenalb},
  author      ={J. Bohn},
  booktitle   ={GI/ITG Workshop Formale Methoden zum Entwurf korrekter Systeme},
  editor      ={T. Kropf and R. Kumar and D. Schmid},
  key         ={Bohn93},
  keyword     ={1GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={116--121},
  publisher   ={Universit\"{a}t Karlsruhe, Interner Bericht Nr. 10/93},
  title       ={{I}nteraktive {S}ynthese kommunizierender {S}ysteme mit {LAMBDA}},
  year        ={1993}
}
@inproceedings{Bojs93,
  address     ={Arles},
  author      ={P. Bojsen},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={Bojs93},
  keyword     ={verification flowgraph},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={258--269},
  publisher   ={Springer-Verlag},
  remark      ={CHARME93},
  series      ={Lecture Notes in Computer Science},
  title       ={An Approach to Formalization of Data Flow Graphs},
  volume      ={683},
  year        ={1993}
}
@inproceedings{Boli95,
  address     ={BULL, France},
  author      ={D. Bolignano},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={Boli95},
  keyword     ={language_containment},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={261--277},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} partial-order approach to the verification of concurrent systems: checking liveness properties},
  volume      ={987},
  year        ={1995}
}
@inproceedings{Bora97,
  author      ={A. Bor\"{a}lv},
  booktitle   ={International ERCIM Workshop on Formal Methods for Industrial Critical Systems},
  editor      ={S. Gnesi and D. Latella},
  key         ={Bora97},
  month       ={July},
  pages       ={39-62},
  publisher   ={Consiglio Nazionale Ricerche, Pisa},
  title       ={A Fully Automated Approach for Proving Safety Properties in Interlocking Software Using Automatic Theorem-Proving},
  year        ={1997}
}
@inproceedings{Borr81,
  author      ={D. Borrione},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  key         ={Borr81},
  keyword     ={verification},
  pages       ={3--21},
  publisher   ={North-Holland},
  title       ={The worker model of evaluation for computer hardware description languages},
  year        ={1981}
}
@article{Borr95,
  author      ={D. Borrione},
  journal     ={Formal Methods in System Design},
  key         ={Borr95},
  month       ={August},
  number      ={1/2},
  title       ={{S}pecial {I}ssue on {VHDL} {S}emantics},
  volume      ={7},
  year        ={1995}
}
@techreport{Boul92a,
  author      ={R. Boulton},
  institution ={University of Cambridge, Computer Laboratory},
  key         ={Boul92a},
  keyword     ={HDL verification techreport},
  month       ={April},
  number      ={254},
  title       ={A {HOL} Semantics for a Subset of {ELLA}},
  type        ={technical report},
  year        ={1992}
}
@inproceedings{Boul92b,
  address     ={Leuven, Belgium},
  author      ={R. Boulton},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Boul92b},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={19--38},
  publisher   ={North-Holland},
  title       ={A Lazy Approach to Fully-Expansive Theorem Proving},
  year        ={1992}
}
@inproceedings{Boul92c,
  address     ={Leuven, Belgium},
  author      ={R. Boulton},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Boul92c},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={133--145},
  publisher   ={North-Holland},
  title       ={{B}oyer-{M}oore Automation for the {HOL} System},
  year        ={1992}
}
@inproceedings{Boul95,
  address     ={Aspen Grove, Utah, USA},
  author      ={R.J. Boulton},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={Boul95},
  month       ={September},
  pages       ={75--89},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{C}ombining {D}ecision {P}rocedures in the {HOL} System},
  volume      ={971},
  year        ={1995}
}
@inproceedings{Boul97,
  address     ={Enschede, The Netherlands},
  author      ={R.J. Boulton},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={Boul97},
  pages       ={81-95},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={A Tool to Support Formal Reasoning about Computer Languages},
  year        ={1997}
}
@article{Bous91,
  author      ={F. Boussinot},
  journal     ={Software Practice and Experience},
  key         ={Bous91},
  number      ={4},
  pages       ={401-428},
  title       ={Reactive {C}: An Extension of {C} to Program Reactive Systems},
  volume      ={21},
  year        ={1991}
}
@inproceedings{Bout85,
  author      ={R.T. Boute},
  booktitle   ={Formal Aspects of {VLSI} Design},
  key         ={Bout85},
  keyword     ={verification},
  pages       ={99--112},
  title       ={Current work on the semantics of digital systems},
  year        ={1985}
}
@inproceedings{Bout91,
  address     ={Marseille},
  author      ={R.T. Boute},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Borrione and R. Waxman},
  key         ={Bout91},
  keyword     ={HDL flowgraph petrinet},
  month       ={April},
  organization={IFIP WG 10.2},
  pages       ={185--212},
  publisher   ={North-Holland},
  title       ={Declarative languages - still a long way to go},
  year        ={1991}
}
@inproceedings{BrBK89,
  author      ={F. Brglez and D. Bryan and K. Kozminski},
  booktitle   ={{IEEE} International Symposium on Circuits and Systems},
  key         ={BrBK89},
  keyword     ={hardware gatelevel test Benchmarks},
  month       ={May},
  title       ={Combinational Profiles of Sequential Benchmark Circuits},
  year        ={1989}
}
@inproceedings{BrBS91,
  author      ={R.E. Bryant and D.L. Beatty and C.-J.H. Seger},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={BrBS91},
  keyword     ={trajectoryevaluation hardware gatelevel verification transistorlevel symbolicsimulation},
  pages       ={397--402},
  title       ={Formal Hardware Verification by Symbolic Ternary Trajectory Evaluation},
  year        ={1991}
}
@inproceedings{BrCD85,
  address     ={Port Chester, New York},
  author      ={M.C. Browne and E.M. Clarke and D.L. Dill},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={BrCD85},
  pages       ={445--448},
  title       ={Checking the Correctness of Sequential Circuits},
  year        ={1985}
}
@inproceedings{BrCD86,
  address     ={Amsterdam},
  author      ={M.C. Browne and E.M. Clarke and D.L. Dill},
  booktitle   ={Formal Aspects in {VLSI} Design},
  editor      ={G.J. Milne and P.A. Subrahmanyam},
  key         ={BrCD86},
  pages       ={113--124},
  publisher   ={North-Holland},
  title       ={Automatic Circuit Verification Using Temporal Logic: Two New Examples},
  year        ={1986}
}
@article{BrCD86a,
  author      ={M.C. Browne and E.M. Clarke and D.L. Dill},
  journal     ={{IEEE} Transactions on Computers},
  key         ={BrCD86a},
  month       ={December},
  number      ={12},
  pages       ={1035--1044},
  title       ={Automatic Verification of Sequential Circuits Using Temporal Logic},
  volume      ={C-35},
  year        ={1986}
}
@article{BrCG88,
  author      ={M.C. Browne and E.M. Clarke and O. Grumberg},
  journal     ={Theoretical Computer Science},
  key         ={BrCG88},
  month       ={July},
  number      ={1-2},
  title       ={{C}haracterizing {F}inite {K}ripke {S}tructures in {P}ropositional {T}emporal {L}ogic},
  volume      ={59},
  year        ={1988}
}
@techreport{BrCh94,
  address     ={Pittsburgh},
  author      ={R.E. Bryant and Y.-A. Chen},
  institution ={Carnegie Mellon University},
  key         ={BrCh94},
  number      ={CMU-CS-94-160},
  title       ={{V}erification or {A}rithmetic {F}unctions with {B}inary {M}oment {D}iagrams},
  year        ={1994}
}
@inproceedings{BrCh95,
  address     ={Pittsburgh},
  author      ={R.E. Bryant and Y.-A. Chen},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={BrCh95},
  month       ={June},
  organization={Carnegie Mellon University},
  title       ={{V}erification or {A}rithmetic {C}ircuits with {B}inary {M}oment {D}iagrams},
  year        ={1995}
}
@inproceedings{BrCl86,
  address     ={Grenoble, France},
  author      ={M.C. Browne and E.M. Clarke},
  booktitle   ={{IFIP} WG 10.2 International Working Conference From {HDL} Descriptions to Guaranteed Correct Circuit Designs},
  key         ={BrCl86},
  month       ={September},
  title       ={{SML}: A High Level Language for the Design and Verification of Finite State Machines},
  year        ={1986}
}
@inproceedings{BrCl87,
  address     ={Amsterdam},
  author      ={M.C. Browne and E.M. Clarke},
  booktitle   ={From {HDL} Descriptions to Guaranteed Correct Circuit Designs},
  editor      ={D. Borrione},
  key         ={BrCl87},
  pages       ={269--292},
  publisher   ={North-Holland},
  title       ={{SML}: A High Level Language for the Design and Verification of Finite State Machines},
  year        ={1987}
}
@article{BrEb92,
  author      ={J.A. Brzozowski and C. Ebergen},
  journal     ={IEEE Transactions on Computers},
  key         ={BrEb92},
  month       ={November},
  number      ={11},
  pages       ={1349--1359},
  title       ={On the Delay-Sensitivity of Gate Networks},
  volume      ={41},
  year        ={1992}
}
@inproceedings{BrEd97,
  address     ={Toledo, Spain},
  author      ={A. Bradsley and D. Edwards},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={BrEd97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Compiling the language {BALSA} to delay insensitive hardware},
  year        ={1997}
}
@inproceedings{BrFD94,
  address     ={Paris},
  author      ={P.T. Breuer and L.S. Fern{\'a}ndez and C. {Delgado Kloos}},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={BrFD94},
  keyword     ={High-Level_Verification},
  month       ={February},
  pages       ={641--647},
  publisher   ={IEEE Computer Society Press},
  title       ={{C}lean {F}ormal {S}emantics for {VHDL}},
  year        ={1994}
}
@incollection{BrFD95,
  address     ={Madrid, Spain},
  author      ={P.T. Breuer and L.S. Fernandez and C. {Delgado Kloos}},
  booktitle   ={Formal Semantics for {VHDL}},
  chapter     ={2},
  editor      ={C. {Delgado Kloos} and P.T. Breuer},
  key         ={BrFD95},
  keyword     ={VHDL},
  month       ={March},
  publisher   ={Kluwer Academic Publishers},
  series      ={The Kluwer International Series in Engineering and Computer Science},
  title       ={{A} {F}unctional {S}emantics for {U}nit-{D}elay {VHDL}},
  volume      ={307},
  year        ={1995}
}
@article{BrFD95a,
  author      ={P.T. Breuer and L.S. Fernandez and C. {Delgado Kloos}},
  journal     ={Formal Methods in System Design},
  key         ={BrFD95a},
  keyword     ={VHDL},
  month       ={August},
  note        ={Kluwer Academic Publishers, ISSN: 0925-9856},
  number      ={1/2},
  pages       ={27--52},
  title       ={{A} {S}imple {D}enotational {S}emantics, {P}roof {T}heory and a {V}alidation {C}ondition {G}enerator for {U}nit-{D}elay {VHDL}},
  volume      ={7},
  year        ={1995}
}
@inproceedings{BrFL96,
  address     ={Oxford},
  author      ={T.M. Brookes and J.S. Fitzgerald and P.G. Larsen},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={BrFL96},
  month       ={March},
  pages       ={214-227},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{F}ormal and {I}nformal {S}pecifications of a {S}ecure {S}ystem {C}omponent},
  volume      ={1051},
  year        ={1996}
}
@article{BrHS90,
  author      ={R. Brayton and G. Hachtel and A.L. Sangiovanni-Vincentelli},
  journal     ={{IEEE}},
  key         ={BrHS90},
  pages       ={264--300},
  title       ={Multilevel Logic Synthesis},
  volume      ={78},
  year        ={1990}
}
@inproceedings{BrHY92,
  address     ={Nijmegen},
  author      ={B.C. Brock and W.A. Hunt and W.D. Young},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  key         ={BrHY92},
  keyword     ={HDL},
  month       ={June},
  organization={IFIP TC10/WG 10.2},
  pages       ={3--35},
  publisher   ={North-Holland},
  title       ={Introduction to a Formally Defined Hardware Description Language},
  year        ={1992}
}
@inproceedings{BrKM96,
  address     ={Palo Alto, CA, USA},
  author      ={B. Brock and M. Kaufmann and JS. Moore},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={BrKM96},
  month       ={November},
  pages       ={275--293},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{ACL2} Theorems about commercial microprocessors},
  volume      ={1166},
  year        ={1996}
}
@article{BrLe80,
  author      ={J.A. Brzozowski and E. Leiss},
  journal     ={Theoretical Computer Science},
  key         ={BrLe80},
  keyword     ={Rewrite omega},
  pages       ={19--35},
  title       ={On Equations for Regular Languages, Finite Automata, and Sequential Networks},
  volume      ={10},
  year        ={1980}
}
@inproceedings{BrMS95,
  address     ={Bangalore, India},
  author      ={I.A. Browne and Z. Manna and H. Sipma},
  booktitle   ={Conference on the Foundations of Software Technology and Theoretical Computer Science (FSTTCS)},
  key         ={BrMS95},
  month       ={December},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{G}eneralized {T}emporal {V}erification {D}iagrams},
  year        ={1995}
}
@inproceedings{BrMa94,
  address     ={Grenoble, France},
  author      ={K. O'Brien and S. Maginot},
  booktitle   ={European Design Automation Conference },
  key         ={BrMa94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={480--485},
  publisher   ={IEEE Computer Society Press},
  title       ={{N}on-{R}eversible {VHDL} {S}ource-{S}ource {E}ncryption},
  year        ={1994}
}
@techreport{BrNi92,
  address     ={Wolfson Building, Parks Road, Oxford OX1 3QD, UK},
  author      ={S.M. Brien and J.E. Nicholls},
  institution ={Oxford University Computing Laboratory},
  key         ={BrNi92},
  month       ={November},
  note        ={Accepted for ISO standardization under ISO/IEC JTC1/SC22},
  number      ={PRG-107},
  title       ={{Z} base standard},
  type        ={Technical Report},
  year        ={1992}
}
@inproceedings{BrPH85,
  author      ={F. Brglez and P. Pownall and R. Hum},
  booktitle   ={{IEEE} International Symposium on Circuits and Systems},
  key         ={BrPH85},
  keyword     ={hardware gatelevel test},
  title       ={Accelerating {ATPG} and Fault Grading via Testability Analysis},
  year        ={1985}
}
@inproceedings{BrRB90,
  address     ={Orlando, Florida},
  author      ={K.S. Brace and R.L. Rudell and R.E. Bryant},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={BrRB90},
  keyword     ={formalism propositionallogic BDD},
  month       ={June},
  organization={ACM/IEEE},
  pages       ={40--45},
  publisher   ={IEEE Computer Society Press},
  title       ={{E}fficient {I}mplementation of a {BDD} {P}ackage},
  year        ={1990}
}
@techreport{BrSc93,
  address     ={Universit\"{a}t Karlsruhe},
  author      ={C. Brzoska and K. Sch\"{a}fer},
  institution ={Fakult\"{a}t f\"{u}r Informatik},
  key         ={BrSc93},
  month       ={September},
  note        ={Language Specification User Manual},
  remark      ={An Extension of KA-Prolog for Temporal Reasoning},
  title       ={{LIMETTE}: Logic Programming Integrating Metric Temporal Extensions},
  type        ={Interner Bericht},
  year        ={1993}
}
@misc{BrSe90a,
  author      ={J.A. Brzozowski and C-J.H. Seger},
  howpublished={Bulletin of the European association of Theoretical Computer Science},
  key         ={BrSe90a},
  keyword     ={hardware verification general},
  month       ={October},
  title       ={Advances in asynchronous circuit theory part I},
  year        ={1990}
}
@inproceedings{BrSe91,
  address     ={New York},
  author      ={R.E. Bryant and C.-J.H. Seger},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={E.M. Clarke and R.P. Kurshan},
  key         ={BrSe91},
  organization={American Mathematical Society},
  publisher   ={Springer-Verlag},
  series      ={{DIMACS} Series in Discrete Mathematics and Theoretical Computer Science},
  title       ={Formal Verification of Digital Circuits Using Symbolic Ternary System Models},
  volume      ={3},
  year        ={1991}
}
@misc{BrSe91b,
  author      ={J.A. Brzozowski and C-J.H. Seger},
  howpublished={Bulletin of the European Association of Theoretical Computer Science},
  key         ={BrSe91b},
  keyword     ={hardware verification general},
  month       ={March},
  title       ={Advances in asynchronous circuit theory part {II}},
  year        ={1991}
}
@inproceedings{BrSt91,
  author      ={J. Bradfield and C. Stirling},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={K.G. Larsen and A. Skou},
  key         ={BrSt91},
  month       ={July},
  title       ={{L}ocal {M}odel {C}hecking for {I}nfinite {S}tate {S}paces},
  year        ={1991}
}
@inproceedings{BrSt94,
  address     ={L\"{u}beck, Germany},
  author      ={M. Broy and K. Stolen},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={BrSt94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={247--267},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{S}pecification and {R}efinement of {F}inite {D}ataflow {N}etworks - a {R}elational {A}pproach},
  volume      ={863},
  year        ={1994}
}
@techreport{BrTa88,
  address     ={Stanford, CA},
  author      ={A. Bronstein and C.L. Talcott},
  institution ={Stanford University},
  key         ={BrTa88},
  number      ={1210},
  title       ={String-functional Semantics for formal verification of synchronous circuits},
  year        ={1988}
}
@inproceedings{BrTa89,
  address     ={Grenoble, France},
  author      ={A. Bronstein and C.L. Talcott},
  booktitle   ={International Workshop on Automatic Verification Methods for Finite State Systems},
  key         ={BrTa89},
  pages       ={317--333},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Formal Verification of synchronous circuits based on string-functional semantics: The 7 Paillet Circuits in Boyer-Moore},
  volume      ={407},
  year        ={1989}
}
@inproceedings{Brac93,
  address     ={Vancouver, Canada},
  author      ={S.H. Brackin},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Brac93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={451--465},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Server-Process Restrictiveness in {HOL}},
  volume      ={780},
  year        ={1993}
}
@inproceedings{Brac94,
  address     ={Malta},
  author      ={S.H. Brackin},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={Brac94},
  month       ={September},
  pages       ={65--80},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Providing Tractable Security Analysis in {HOL}},
  volume      ={859},
  year        ={1994}
}
@inproceedings{Brac95,
  address     ={Aspen Grove, Utah, USA},
  author      ={S.H. Brackin},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={Brac95},
  month       ={September},
  pages       ={90--105},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{D}eciding {C}ryptographic {P}rotocol {A}dequacy with {HOL}},
  volume      ={971},
  year        ={1995}
}
@inproceedings{Brac96,
  address     ={Turku, Finland},
  author      ={S. H. Brackin},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harisson},
  key         ={Brac96},
  month       ={August},
  pages       ={61--76},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Deciding Cryptographic Protocol Adequacy with {HOL}},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{Bran93,
  address     ={Santa Clara, California},
  author      ={D. Brand},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={Bran93},
  keyword     ={verification},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={534--537},
  publisher   ={IEEE Computer Society Press},
  title       ={{V}erification of {L}arge {S}ynthesized {D}esigns},
  year        ={1993}
}
@book{Brau90,
  author      ={J. Brauer},
  key         ={Brau90},
  keyword     ={Design},
  publisher   ={Teubner Verlag},
  title       ={{D}atenhaltung in {VLSI}-{E}ntwurfssystemen},
  year        ={1990}
}
@phdthesis{Brod91,
  author      ={K. Broda},
  key         ={Brod91},
  school      ={Departement of Computing, Imperial College},
  title       ={The Application of Semantic Tableaux with Unification to Automated Deduction},
  year        ={1991}
}
@inproceedings{Brow86,
  address     ={Boston, Massachusetts},
  author      ={M.C. Browne},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={Brow86},
  month       ={June},
  pages       ={260--266},
  publisher   ={IEEE Computer Society Press},
  title       ={An {I}mproved {A}lgorithm for {A}utomatic {V}erification of {F}inite-{S}tate {M}achines {U}sing {T}emporal {L}ogic},
  year        ={1986}
}
@phdthesis{Brow89,
  author      ={M.C. Browne},
  key         ={Brow89},
  school      ={Carnegie Mellon University},
  title       ={{A}utomatic {V}erification of {F}inite {S}tate {M}achines {U}sing {T}emporal {L}ogic},
  year        ={1989}
}
@misc{Broy96,
  author      ={M. Broy},
  howpublished={Marktoberdorf Summer School 1996},
  key         ={Broy96},
  title       ={Mathematical Methods in System and Software Engeneering},
  year        ={1996}
}
@techreport{Broy97,
  author      ={M. Broy},
  institution ={University of Munich, Germany},
  key         ={Broy97},
  number      ={TUM-I9729},
  title       ={The Specification of System Components by State Transition Diagrams},
  type        ={Technical Report},
  year        ={1997}
}
@misc{Broy97a,
  author      ={M. Broy},
  key         ={Broy97a},
  title       ={Refinement of Time},
  year        ={1997}
}
@inproceedings{Brui94,
  address     ={Malta},
  author      ={N.G. de Bruijn},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={Brui94},
  month       ={September},
  pages       ={81--96},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Invited paper: Highlighting the Lambda-free Fragment of Automath},
  volume      ={859},
  year        ={1994}
}
@article{Brya84,
  author      ={R.E. Bryant},
  journal     ={{IEEE} Transactions on Computers},
  key         ={Brya84},
  keyword     ={simulation},
  month       ={February},
  number      ={2},
  pages       ={160--177},
  title       ={A Switch Level Model Simulator for {MOS} Digital Systems},
  volume      ={C-33},
  year        ={1984}
}
@inproceedings{Brya85,
  author      ={R.E. Bryant},
  booktitle   ={Formal Aspects of {VLSI} Design},
  editor      ={G. Milne and P.A. Subrahmanyam},
  key         ={Brya85},
  pages       ={125--136},
  publisher   ={North-Holland},
  title       ={Can a Simulator Verify a Circuit?},
  year        ={1985}
}
@inproceedings{Brya85a,
  address     ={Rockville, MD.},
  author      ={R.E. Bryant},
  booktitle   ={Chapel Hill Conference on {VLSI}},
  editor      ={H. Fuchs},
  key         ={Brya85a},
  pages       ={419--438},
  publisher   ={Computer Science Press},
  title       ={Symbolic Verification of {MOS} Circuits},
  year        ={1985}
}
@article{Brya86,
  author      ={R.E. Bryant},
  journal     ={IEEE Transactions on Computers},
  key         ={Brya86},
  keyword     ={formalism propositionallogic BDD tutorial},
  month       ={August},
  number      ={8},
  pages       ={677--691},
  title       ={{G}raph-{B}ased {A}lgorithms for {B}oolean {F}unction {M}anipulation},
  volume      ={C-35},
  year        ={1986}
}
@article{Brya87a,
  author      ={R.E. Bryant},
  journal     ={{IEEE} Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={Brya87a},
  month       ={July},
  number      ={4},
  pages       ={618--633},
  title       ={Algorithmic Aspects of Symbolic Switch Network Analysis},
  volume      ={CAD-6},
  year        ={1987}
}
@article{Brya87b,
  author      ={R.E. Bryant},
  journal     ={{IEEE} Transactions on Computer-Aided Design},
  key         ={Brya87b},
  keyword     ={hardware verification general},
  month       ={July},
  number      ={4},
  pages       ={634--649},
  title       ={Boolean Analysis of {MOS} Circuits},
  volume      ={CAD-6},
  year        ={1987}
}
@techreport{Brya87c,
  address     ={Pittsburgh},
  author      ={R.E. Bryant},
  institution ={Computer Science Department, Carnegie Mellon University},
  key         ={Brya87c},
  month       ={June},
  number      ={CMU-CS-87-128},
  title       ={A Methodology for Hardware Verification Based on Logic Simulation},
  year        ={1987}
}
@inproceedings{Brya88,
  author      ={R.E. Bryant},
  booktitle   ={{IEEE} Conference},
  key         ={Brya88},
  organization={IEEE},
  pages       ={354--357},
  title       ={Data Parallel Switch-Level Simulation},
  year        ={1988}
}
@inproceedings{Brya88a,
  address     ={Cambridge},
  author      ={R.E. Bryant},
  booktitle   ={{MIT} Conference on Advanced Research in {VLSI}},
  editor      ={J. Allen and F.T. Leighton},
  key         ={Brya88a},
  pages       ={335--349},
  publisher   ={MIT Press},
  title       ={Verifying a Static {RAM} design by logic Simulation},
  year        ={1988}
}
@inproceedings{Brya90,
  author      ={R.E. Bryant},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={Brya90},
  title       ={Graph-based algorithms for boolean function manipulation},
  year        ={1990}
}
@inproceedings{Brya91,
  address     ={Kawasaki 211, Japan},
  author      ={R.E. Bryant},
  booktitle   ={{VLSI} Logic Synthesis and Design},
  key         ={Brya91},
  keyword     ={hardware verification symbolicsimulation},
  organization={Fujitsu Laboratories, Ltd.},
  pages       ={125-131},
  title       ={Formal Hardware Verification by Symbolic Simulation},
  year        ={1991}
}
@article{Brya91a,
  author      ={R.E. Bryant},
  journal     ={{IEEE} Transactions on Computers},
  key         ={Brya91a},
  keyword     ={hardware modelling bdd abstraction general},
  month       ={February},
  number      ={2},
  pages       ={205--213},
  title       ={{O}n the {C}omplexity of {VLSI} {I}mplementations and {G}raph {R}epresentations of {B}oolean {F}unctions with {A}pplication to {I}nteger {M}ultiplication},
  volume      ={40},
  year        ={1991}
}
@techreport{Brya91b,
  author      ={R.E. Bryant},
  institution ={Carnegie Mellon University},
  key         ={Brya91b},
  keyword     ={hardware verification symbolicsimulation},
  title       ={Verification of Synchronous Circuits by Symbolic Logic Simulation},
  year        ={1991}
}
@article{Brya91c,
  author      ={R.E. Bryant},
  journal     ={IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={Brya91c},
  number      ={1},
  pages       ={94--102},
  title       ={Formal Verification of Memory-Circuits by Symbolic-Logic Simulation},
  volume      ={10},
  year        ={1991}
}
@article{Brya91d,
  author      ={R.E. Bryant},
  journal     ={Journal of the {ACM}},
  key         ={Brya91d},
  number      ={2},
  pages       ={299--328},
  title       ={A Method for Hardware Verification Based on Logic Simulation},
  volume      ={38},
  year        ={1991}
}
@article{Brya92,
  author      ={R.E. Bryant},
  journal     ={ACM Computing Surveys},
  key         ={Brya92},
  keyword     ={formalism propositionallogic BDD},
  month       ={September},
  number      ={3},
  pages       ={293--318},
  title       ={{S}ymbolic {B}oolean {M}anipulation with {O}rdered {B}inary-{D}ecision {D}iagrams},
  volume      ={24},
  year        ={1992}
}
@techreport{Brya92a,
  address     ={Pittsburgh, PA 15213},
  author      ={R.E. Bryant},
  institution ={School of Computer Science, Carnegie Mellon University},
  key         ={Brya92a},
  month       ={July},
  number      ={CMU-CS-92-160},
  title       ={Symbolic Boolean Manipulation with Ordered Binary Decision Diagrams},
  year        ={1992}
}
@techreport{Brya95,
  author      ={R. E. Bryant},
  institution ={Carnegie-Mellon University},
  key         ={Brya95},
  month       ={April},
  note        ={ftp://reports.adm.cs.cmu.edu/usr/anon/1995/CMU-CS-95-140.ps},
  number      ={CMU-CS-95-140},
  title       ={Bit-Level Analysis of an {SRT} Divider Circuit},
  year        ={1995}
}
@inproceedings{Brya95a,
  address     ={Liege, Belgium},
  author      ={R. E. Bryant},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={Brya95a},
  month       ={July},
  pages       ={1--3},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Multipliers and Dividers: Insights on Arithmetic Circuit Verification},
  volume      ={939},
  year        ={1995}
}
@article{Brzo64,
  author      ={J.A. Brzozowski},
  journal     ={Journal of the ACM},
  key         ={Brzo64},
  pages       ={481--494},
  title       ={{D}erivates of {R}egular {E}xpression},
  volume      ={11},
  year        ={1964}
}
@inproceedings{Brzo93,
  address     ={Ottawa, Canada},
  author      ={J.A. Brzozowski},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Brzo93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={383--384},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Timing Specifications in {HDL}'s},
  year        ={1993}
}
@inproceedings{BuBo93,
  address     ={Bad Herrenalb},
  author      ={O. Buckow and J. Bormann},
  booktitle   ={GI/ITG Workshop Formale Methoden zum Entwurf korrekter Systeme},
  editor      ={T. Kropf and R. Kumar and D. Schmid},
  key         ={BuBo93},
  keyword     ={1GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={25--34},
  publisher   ={Universit\"{a}t Karlsruhe, Interner Bericht Nr. 10/93},
  title       ={{F}ormale {S}pezifikation und {V}erifikation eines {SPARC}-kompatiblen {P}rozessors mit einem interaktiven {B}eweissystem},
  year        ={1993}
}
@inproceedings{BuCL90,
  address     ={Edinburgh, Scottland},
  author      ={J.R. Burch and E.M. Clarke and D.E. Long},
  booktitle   ={International Conference on Very Large Scale Integration (VLSI)},
  key         ={BuCL90},
  month       ={August},
  pages       ={49--58},
  title       ={{S}ymbolic {M}odel {C}hecking for {S}equential {C}ircuit {V}erification},
  year        ={1990}
}
@inproceedings{BuCL91,
  address     ={Los Alamitos, CA},
  author      ={J.R. Burch and E.M. Clarke and D.E. Long},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={BuCL91},
  month       ={June},
  pages       ={403--407},
  publisher   ={IEEE Computer Society Press},
  title       ={{R}epresenting {C}ircuits {M}ore {E}fficiently in {S}ymbolic {M}odel {C}hecking},
  year        ={1991}
}
@inproceedings{BuCL91a,
  author      ={J.R. Burch and E.M. Clarke and D.E. Long},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={BuCL91a},
  keyword     ={modelchecking},
  pages       ={403--407},
  title       ={Representing Circuits more efficiently in Symbolic Model Checking},
  year        ={1991}
}
@inproceedings{BuCL91b,
  address     ={Edinburgh, Scotland},
  author      ={J.R. Burch and E.M. Clarke and D.E. Long},
  booktitle   ={International Conference on Very Large Scale Integration (VLSI)},
  editor      ={A. Halaas and P.B. Denyer},
  key         ={BuCL91b},
  month       ={August},
  organization={IFIP Transactions},
  pages       ={49--58},
  publisher   ={North-Holland},
  title       ={Symbolic Model Checking with Partitioned Transition Relations},
  year        ={1991}
}
@techreport{BuCL91c,
  author      ={J.R. Burch and E.M. Clarke and D.E. Long},
  institution ={Carnegie Mellon University},
  key         ={BuCL91c},
  number      ={CMU-CS-91-195},
  title       ={Symbolic Model Checking with Partitioned Transition Relations},
  type        ={Technical Report},
  year        ={1991}
}
@inproceedings{BuCM90,
  author      ={J.R. Burch and E.M. Clarke and K.L. McMillan},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={BuCM90},
  pages       ={46-51},
  title       ={Sequential Circuit Verification Using Symbolic Model Checking},
  year        ={1990}
}
@inproceedings{BuDi94,
  address     ={Standford, California, USA},
  author      ={J. R. Burch and D. L. Dill},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={BuDi94},
  month       ={June},
  pages       ={68-80},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Automatic Verification of Pipelined Microprocessors Control},
  volume      ={818},
  year        ={1994}
}
@inproceedings{BuEc92,
  author      ={R. B\"{u}ndgen and H. Eckhardt},
  booktitle   ={Algebraic and Logic Programming},
  key         ={BuEc92},
  keyword     ={Rewrite},
  pages       ={291--305},
  publisher   ={Springer-Verlag},
  title       ={A fast algorithm for ground normal form analysis},
  year        ={1992}
}
@inproceedings{BuKK91,
  address     ={Amsterdam},
  author      ={F.P. Burns and D.J. Kinniment and A.M. Koelmans},
  booktitle   ={European Design Automation Conference },
  key         ={BuKK91},
  keyword     ={Formal_Verification_Techniques},
  month       ={February},
  organization={IEEE},
  pages       ={16--21},
  publisher   ={IEEE Computer Society Press},
  title       ={{C}orrect {I}nteractive {T}ransformational {S}ynthesis of {DSP} {H}ardware},
  year        ={1991}
}
@inproceedings{BuKu89,
  author      ={R. B\"{u}ndgen and W. K\"{u}chlin},
  booktitle   ={Conference on Rewriting Techniques and Applications (RTA)},
  key         ={BuKu89},
  keyword     ={Rewrite},
  pages       ={59--75},
  publisher   ={Springer-Verlag},
  title       ={Computing ground reducibility and inductively complete positions},
  year        ={1989}
}
@inproceedings{BuKu92,
  address     ={Grassau, Germany},
  author      ={R. B\"{u}ndgen and W. K\"{u}chlin},
  booktitle   ={{IFIP} Workshop on Hardware-Software Codesign},
  editor      ={J. Rosenblit},
  key         ={BuKu92},
  month       ={May},
  title       ={Term Rewriting as a Tool for Hardware and Software Design},
  year        ={1992}
}
@article{BuLa69,
  author      ={J.R. B\"{u}chi and L.H. Landweber},
  journal     ={Trans. Ameri. Math. Soc.},
  key         ={BuLa69},
  keyword     ={omega},
  pages       ={295--311},
  title       ={Solving sequential conditions finite-state strategies},
  volume      ={138},
  year        ={1969}
}
@inproceedings{BuLa96,
  address     ={Turku, Finland},
  author      ={M. Butler and T. Langbacka},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={BuLa96},
  month       ={August},
  pages       ={93--108},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Program Derivation Using The Refinement Calculator},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{BuMa87,
  author      ={S.M. Burns and A.J. Martin},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={BuMa87},
  title       ={A synthesis method for self-timed {VLSI} circuits},
  year        ={1987}
}
@inproceedings{BuMa88,
  address     ={Glasgow, Scotland},
  author      ={S.M. Burns and A.J. Martin},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={BuMa88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={99--116},
  publisher   ={North-Holland},
  title       ={Synthesis of Self-timed Circuits by Program Transformation},
  year        ={1988}
}
@inproceedings{BuSM92,
  address     ={Santa Clara, California},
  author      ={T.M. Burks and K.A. Sakallah and T.N. Mudge},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={BuSM92},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={137--141},
  publisher   ={IEEE Computer Society Press},
  title       ={{I}dentification of {C}ritical {P}ath in {C}ircuits with {L}evel-{S}ensitive {L}atches},
  year        ={1992}
}
@inproceedings{BuSV93,
  address     ={Ottawa, Canada},
  author      ={K. Buchenrieder and A. Sedlmeier and C. Veith},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={BuSV93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={55--68},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={{HW/SW} Co-Design With {PRAMs} Using Codes},
  year        ={1993}
}
@inproceedings{BuSa93,
  address     ={Santa Clara, California},
  author      ={T.M. Burks and K.A. Sakallah},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={BuSa93},
  keyword     ={Issues_in_System-Level_Timing},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={152--155},
  publisher   ={IEEE Computer Society Press},
  title       ={{M}in-{M}ax {L}inear {P}rogramming and the {T}iming {A}nalysis of {D}igital {C}ircuits},
  year        ={1993}
}
@inbook{BuSi73,
  author      ={J.R. B\"{u}chi and D. Siefkes},
  chapter     ={Axiomatization of the monadic second order theory of $\omega_1$},
  key         ={BuSi73},
  keyword     ={omega},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Mathematics},
  title       ={Decidable Theories {II}},
  volume      ={328},
  year        ={1973}
}
@article{BuSi87,
  author      ={W. Buettner and H. Simonis},
  journal     ={Journal of Symbolic Computation},
  key         ={BuSi87},
  keyword     ={Logic},
  title       ={Embedding boolean expressions into logic programming},
  year        ={1987}
}
@inproceedings{BuVe91,
  address     ={Los Alamitos, CA},
  author      ={H. Busch and G. Venzl},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={BuVe91},
  keyword     ={formalsynthesis registertransferlevel hardware formalism higherorderlogic HOL specification},
  month       ={June},
  organization={ACM/IEEE},
  pages       ={391--396},
  publisher   ={IEEE Computer Society Press},
  title       ={Proof-Aided Design of Verified Hardware},
  year        ={1991}
}
@article{Buec60a,
  author      ={J.R. B\"{u}chi},
  journal     ={Z. Math. Logik Grundlagen Math.},
  key         ={Buec60a},
  keyword     ={omega},
  pages       ={66--92},
  title       ={Weak second order arithmetic and finite automata},
  volume      ={6},
  year        ={1960}
}
@inproceedings{Buec60b,
  address     ={Stanford, CA},
  author      ={J.R. B\"{u}chi},
  booktitle   ={International Congress on Logic, Methodology and Philosophy of Science},
  editor      ={E. Nagel},
  key         ={Buec60b},
  keyword     ={omega},
  pages       ={1--12},
  publisher   ={Stanford University Press},
  title       ={On a Decision Method in Restricted Second Order Arithmetic},
  year        ={1960}
}
@inproceedings{Buec60c,
  author      ={J.R. B\"{u}chi},
  booktitle   ={International Congress on Logic, Methodology and Philosophy of Science},
  key         ={Buec60c},
  keyword     ={omega},
  note        ={June},
  pages       ={1--12},
  publisher   ={Stanford University Press},
  title       ={{O}n a {D}ecision {M}ethod in {R}estricted {S}econd {O}rder {A}rithmetic},
  year        ={1960}
}
@article{Buec83,
  author      ={J.R. B\"{u}chi},
  journal     ={Journal of Symbolic Logic},
  key         ={Buec83},
  keyword     ={omega},
  pages       ={1171--1198},
  title       ={State-strategies for games in $F_{\sigma\delta}\cap G_{\sigma\delta}$},
  volume      ={48},
  year        ={1983}
}
@mastersthesis{Buen87,
  author      ={R. B\"{u}ndgen},
  key         ={Buen87},
  keyword     ={Rewrite},
  school      ={University of Delaware, Newark, Delaware},
  title       ={Design, Implementation, and Application of and Extended Ground-Reducibility Test},
  year        ={1987}
}
@book{Bund83,
  author      ={A. Bundy},
  key         ={Bund83},
  keyword     ={Logic},
  publisher   ={Academic Press},
  title       ={The Computer Modelling of Mathematical Reasoning},
  year        ={1983}
}
@inproceedings{Burc89,
  address     ={Grenoble},
  author      ={J.R. Burch},
  booktitle   ={International Workshop on Automatic Verification Methods for Finite State Systems},
  key         ={Burc89},
  keyword     ={hardware verification modelchecking},
  pages       ={334--348},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Combining {CTL}, Trace Theory and Timing Models},
  volume      ={407},
  year        ={1989}
}
@inproceedings{Burc89a,
  address     ={Silver Spring, MD.},
  author      ={J.R. Burch},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={Burc89a},
  month       ={October},
  pages       ={208--211},
  publisher   ={IEEE Computer Science Press},
  title       ={Modeling Timing Assumptions with Trace Theory},
  year        ={1989}
}
@inproceedings{Burc91,
  address     ={Los Alamitos, CA},
  author      ={J.R. Burch},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={Burc91},
  keyword     ={hardware gatelevel verification formalism propositionallogic BDD},
  month       ={June},
  organization={ACM/IEEE},
  pages       ={408--412},
  publisher   ={IEEE Computer Society Press},
  title       ={Using {BDD}'s to Verify Multipiers},
  year        ={1991}
}
@phdthesis{Burc92a,
  address     ={Pittsburgh, PA},
  author      ={J.R. Burch},
  key         ={Burc92a},
  keyword     ={hardware verification general},
  school      ={Computer Science, Carnegie Mellon University},
  title       ={{A}utomatic {V}erification of {R}eal-{T}ime {C}oncurrent {S}ystems},
  year        ={1992}
}
@inproceedings{Burc92b,
  author      ={J.R. Burch},
  booktitle   ={{ACM} International Workshop on Timing Issues in the Specification and Synthesis of Digital Systems (TAU)},
  key         ={Burc92b},
  keyword     ={hardware verification general modelling},
  organization={IEEE},
  pages       ={270--275},
  title       ={{D}elay {M}odels for {V}erifying {S}peed-{D}ependent {A}synchronous {C}ircuits},
  year        ={1992}
}
@phdthesis{Burc92c,
  author      ={J.R. Burch},
  key         ={Burc92c},
  school      ={Carnegie Mellon University},
  title       ={{T}race {A}lgebra for {A}utomatic {V}erification of {R}eal-{T}ime {C}oncurrent {S}ystems},
  year        ={1992}
}
@article{Burs69,
  author      ={R.M. Burstall},
  journal     ={Computer Journal},
  key         ={Burs69},
  keyword     ={Rewrite},
  pages       ={41--48},
  title       ={Proving properties of programs by structural induction},
  volume      ={12},
  year        ={1969}
}
@inproceedings{Burs74,
  author      ={R.M. Burstall},
  booktitle   ={{IFIP} Congress on Information Processing},
  key         ={Burs74},
  pages       ={308--312},
  title       ={Program Proving Considered as hand Simulation plus Induction},
  year        ={1974}
}
@inproceedings{Burs87,
  author      ={R.M. Burstall},
  booktitle   ={IBM Computer Science Symposium},
  key         ={Burs87},
  keyword     ={Logic},
  note        ={Shizuoka, Japan},
  title       ={Research in interactive theorem proving at {E}dinburgh {U}niversity},
  year        ={1987}
}
@inproceedings{Busc92,
  address     ={Leuven, Belgium},
  author      ={H. Busch},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Busc92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={97--116},
  publisher   ={North-Holland},
  title       ={Unification Based Induction},
  year        ={1992}
}
@inproceedings{Busc94a,
  address     ={Malta},
  author      ={H. Busch},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={Busc94a},
  month       ={September},
  pages       ={97--112},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={First-Order Automation for Higher-Order-Logic Theorem Proving},
  volume      ={859},
  year        ={1994}
}
@inproceedings{Busc94b,
  address     ={Bad Herrenalb, Germany},
  author      ={H. Busch},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={Busc94b},
  keyword     ={tpcd94},
  month       ={September},
  note        ={published 1995},
  pages       ={280--285},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Reduced Instruction Set Proof Environment},
  volume      ={901},
  year        ={1994}
}
@inproceedings{Busc95,
  address     ={Aspen Grove, Utah, USA},
  author      ={H. Busch},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={Busc95},
  month       ={September},
  pages       ={106--121},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {P}ractical {M}ethod for {R}easoning {A}bout {D}istributed {S}ystems in a {T}heorem {P}rover},
  volume      ={971},
  year        ={1995}
}
@inproceedings{Busc96,
  address     ={Turku, Finland},
  author      ={H. Busch},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={Busc96},
  month       ={August},
  pages       ={77--92},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Proving Liveness of Fair Transition Systems},
  volume      ={1125},
  year        ={1996}
}
@article{Buss87,
  author      ={S.R. Buss},
  journal     ={Journal of Symbolic Logic},
  key         ={Buss87},
  keyword     ={Logic},
  number      ={4},
  pages       ={916--927},
  title       ={Polynomial sized proofs of the pigeonhole principle},
  volume      ={52},
  year        ={1987}
}
@book{CADE92,
  address     ={Saratoga Springs, New York},
  editor      ={D. Kapur},
  key         ={CADE92},
  keyword     ={logic},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Conference on Automated Deduction ({CADE})},
  volume      ={607},
  year        ={1992}
}
@inproceedings{CAMH94,
  address     ={Grenoble, France},
  author      ={W.R. Cyre and J. Armstrong and M. Manek-Honcharik and A.J. Honcharik},
  booktitle   ={European Design Automation Conference },
  key         ={CAMH94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={474--479},
  publisher   ={IEEE Computer Society Press},
  title       ={{G}enerating {VHDL} {M}odel from {N}atural {L}anguage {D}escriptions},
  year        ={1994}
}
@proceedings{CAV89,
  address     ={Grenoble},
  key         ={CAV89},
  keyword     ={hardware algorithmiclevel verification formalism fsm},
  month       ={June},
  title       ={Workshop on Automatic Verification Methods for Finite State Systems},
  year        ={1989}
}
@proceedings{CAV91,
  address     ={Aalborg},
  editor      ={K.G. Larsen and A. Skou},
  key         ={CAV91},
  keyword     ={formalism fsm hardware gatelevel verification},
  month       ={June},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Workshop on Computer-Aided Verification},
  year        ={1991}
}
@techreport{CBBG87,
  address     ={Pittsburgh, PA},
  author      ={E.M. Clarke and S. Bose and M.C. Browne and O. Grumberg},
  institution ={Computer Science Department, Carnegie Mellon University},
  key         ={CBBG87},
  month       ={July},
  number      ={CMU-CS-87-145},
  title       ={The Design and Verification of Finite State Hardware Controllers},
  year        ={1987}
}
@inproceedings{CBLX96,
  address     ={New Brunswick, NJ, USA},
  author      ={D. Clarke and H. Ben-Abdallah and I. Lee and H. L. Xie and O. Sokolsky},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={CBLX96},
  month       ={July/August},
  pages       ={402--405},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{XVERSA}: an Integrated graphical and textual toolset for the specification and analysis of resource-bound real-time systems},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{CBSB96,
  address     ={Palo Alto, CA, USA},
  author      ={F. J. Cantu and A. Bundy and A. Smaill and D. Basin},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={CBSB96},
  month       ={November},
  pages       ={94--108},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Experiments in automating hardware verification using inductive proof planning},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{CCCP92,
  author      ={G. Cabodi and P. Camurati and F. Corno and P. Prinetto and M.S. Reorda},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={CCCP92},
  keyword     ={formalism fsm symbolic_state_traversal BDD},
  pages       ={614--619},
  title       ={A New Model for Improving Symbolic Product Machine Traversal},
  year        ={1992}
}
@inproceedings{CCFP95,
  address     ={Paris},
  author      ={F. Corno and M. Cusinato and M. Ferrero and P. Prinetto},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={CCFP95},
  keyword     ={Application_of_Symbolic_Traversal_Techniques},
  month       ={March},
  pages       ={333--339},
  publisher   ={IEEE Computer Society Press},
  title       ={{P}roving {T}esting {P}reorders for {P}rocess {A}lgebra {D}escriptions},
  year        ={1995}
}
@inproceedings{CCHH96,
  address     ={Palo Alto, CA, USA},
  author      ={Y. -A. Chen and E. Clarke and P. -H. Ho and Y. Hoskote and T. Kam and M. Khaira and J. O'Leary and X. Zhao},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={CCHH96},
  month       ={November},
  pages       ={19--33},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification of all circuits in a floating-pont unit using Word-Level model checking},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{CCIK95,
  address     ={Austin, Texas},
  author      ={A. Chavan and S.-K. Chin and S. Ikram and J.D. Kim},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={CCIK95},
  keyword     ={verification},
  month       ={October},
  organization={Syracuse University, and Juin-Yeu Lu, National Semiconductor},
  title       ={{E}xtending {VLSI} {D}esign with {H}igher-{O}rder {L}ogic},
  year        ={1995}
}
@book{CCIT88,
  address     ={Melbourne},
  key         ={CCIT88},
  month       ={November},
  publisher   ={CCITT Vol. X - Fascicle X.1},
  title       ={Functional Specification and Description Language ({SDL}) Criteria for Using Formal Description Techniques ({FDT}'s)},
  volume      ={IXth Plenary Assembly},
  year        ={1988}
}
@inproceedings{CCLP97,
  address     ={Montreal, Canada},
  author      ={G. Cabodi and P. Camurati and A. Lioy and M. Poncino and S. Quer},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={H. F. Li and D. K. Probst},
  key         ={CCLP97},
  keyword     ={conference},
  month       ={October},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={A parallel approach to symbolic traversal based on set partitioning},
  year        ={1997}
}
@incollection{CCLS97,
  author      ={E. Cerny and F. Corella and M. Langevin and X. Song and S. Tahar and Z. Zhou},
  booktitle   ={Formal Hardware Verification -- Methods and Systems in Comparison},
  edition     ={State of the Art Report},
  editor      ={T. Kropf},
  key         ={CCLS97},
  keyword     ={SFB358 book lncs1287},
  month       ={August},
  pages       ={79--113},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification with Abstract State Machines Using {MDGs}},
  volume      ={1287},
  year        ={1997}
}
@techreport{CCMM94,
  address     ={Pittsburgh, PA 15213},
  author      ={S. Campos and E. Clarke and W. Marrero and M. Minea and H. Hiraishi},
  institution ={School of Computer Science, Carnegie Mellon University},
  key         ={CCMM94},
  month       ={May},
  number      ={CMU-CS-94-147},
  title       ={Computing Quantitive Charakteristics of Finite-State Real-Time Systems},
  year        ={1994}
}
@inproceedings{CCMM95,
  address     ={Austin, Texas},
  author      ={S. Campos and E.M. Clarke and W. Marrero and M. Minea},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={CCMM95},
  keyword     ={verification},
  month       ={October},
  organization={Carnegie Mellon University},
  remark      ={verification},
  title       ={{V}erifying the {P}erformance of the {PCI} {L}ocal {B}us using {S}ymbolic {T}echniques},
  year        ={1995}
}
@techreport{CCMM96,
  author      ={S. Campos and E.M. Clarke and W. Marrero and M. Minea},
  key         ={CCMM96},
  month       ={June},
  note        ={ftp://reports.adm.cs.cmu.edu/usr/anon/1996/CMU-CS-96-147.ps},
  number      ={CMU-CS-96-147},
  title       ={Verifying the Performance of the {PCI} Local Bus using Symbolic Techniques},
  year        ={1996}
}
@techreport{CCMM96a,
  author      ={S. Campos and E.M. Clarke and W. Marrero and M. Minea},
  key         ={CCMM96a},
  month       ={August},
  number      ={CMU-CS-96-159},
  title       ={Verus: A tool for Quantitative Analysis of Finite-State Real-Time Systems},
  year        ={1996}
}
@inproceedings{CCMM97,
  address     ={Grenoble, France},
  author      ={A. Cerone and A.J. Cowie and G.J. Milne and P.A. Moseley},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={CCMM97},
  pages       ={124-138},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Modeling a Time-Dependent Protocol Using the Circal Process Algebra},
  year        ={1997}
}
@inproceedings{CCPB94,
  address     ={Paris},
  author      ={P. Camurati and F. Corno and P. Prinetto and C. Bayol and B. Soulas},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={CCPB94},
  keyword     ={High-Level_Verification},
  month       ={February},
  pages       ={636--640},
  publisher   ={IEEE Computer Society Press},
  title       ={{S}ystem-{L}evel {M}odeling and {V}erification: {A} {C}omprehensive {D}esign {M}ethodology},
  year        ={1994}
}
@inproceedings{CDFG96,
  address     ={New Brunswick, NJ, USA},
  author      ={C. Capellmann and R. Demant and F. Fatahi-Vanani and R. Galvez-Estrada and U. Nitsche and P. Ochsenschlaeger},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={CDFG96},
  month       ={July/August},
  pages       ={466},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification by behavior abstraction: a case Study of service interaction detection in intelligent telephone networks},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{CGFN93,
  address     ={Barcelona, Spain},
  author      ={A. Costa and A. De Gloria and P. Faraboschi and G. Nateri and M. Olivieri},
  booktitle   ={{EUROMICRO93}},
  key         ={CGFN93},
  month       ={September},
  organization={{EUROMICRO}},
  remark      ={published on Microproc. & Microprogr.},
  title       ={An asynchronous approach to the {RISC} design of a micro-controller},
  year        ={1993}
}
@inproceedings{CGHJ93a,
  address     ={Ottawa, Canada},
  author      ={E.M. Clarke and O. Grumberg and H. Hiraishi and S. Jha and D.E. Long and K.L. McMillan and L.A. Ness},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={CGHJ93a},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={5--20},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={{V}erification of the {F}uturebus+ {C}ache {C}oherence {P}rotocol},
  year        ={1993}
}
@techreport{CGHJ93b,
  address     ={Berkeley},
  author      ={M. Chiodo and P. Giusto and H. Hsieh and A. Jurecska and L. Lavango and A. Sangiovanni-Vincentelli},
  institution ={University of California},
  key         ={CGHJ93b},
  keyword     ={software formalism fsm hardware algorithmiclevel synthesis},
  month       ={November},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/abstracts/abstract-CGHJ93.txt},
  number      ={UCB/ERL-93-49},
  title       ={{S}ynthesis of {M}ixed {S}oftware-{H}ardware {I}mplementations from {CFSM} {S}pecifications},
  year        ={1993}
}
@inproceedings{CGHJ93c,
  author      ={M. Chiodo and P. Giusto and H. Hsieh and A. Jurecska and L. Lavango and A. Sangiovanni-Vincentelli},
  booktitle   ={International Workshop on Hardware-Software Codesign},
  key         ={CGHJ93c},
  month       ={October},
  title       ={A Formal Specification Model for Hardware/Software Codesign},
  year        ={1993}
}
@inproceedings{CGHJ93d,
  author      ={M. Chiodo and P. Giusto and H. Hsieh and A. Jurecska and L. Lavango and A. Sangiovanni-Vincentelli},
  booktitle   ={International Workshop on Hardware-Software Codesign},
  key         ={CGHJ93d},
  month       ={October},
  title       ={Synthesis of Mixed Software-Hardware Implementation from {CFSM} Specifications},
  year        ={1993}
}
@inproceedings{CGMZ95,
  address     ={San Francisco, CA, USA},
  author      ={E.M. Clarke and O. Grumberg and K.L. McMillan and X. Zhao},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={CGMZ95},
  month       ={June},
  pages       ={427--432},
  title       ={{E}fficient {G}eneration of {C}ounterexamples and {W}itnesses in {S}ymbolic {M}odel {C}hecking},
  year        ={1995}
}
@inproceedings{CGPR91,
  author      ={P. Camurati and M. Gilli and P. Prinetto and M. Sonza Reorda},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  key         ={CGPR91},
  note        ={Turin},
  title       ={The product machine and implicit enumeration to prove {FSM}'s correct},
  year        ={1991}
}
@proceedings{CHAR93,
  address     ={Arles, France},
  editor      ={G.J. Milne and L. Pierre},
  key         ={CHAR93},
  month       ={May},
  organization={IFIP WG10.2 Advanced Research Working Conference},
  publisher   ={Springer-Verlag},
  title       ={{C}orrect {H}ardware {D}esign and {V}erification {M}ethods},
  year        ={1993}
}
@proceedings{CHDL89,
  address     ={Washington},
  editor      ={J.A. Darringer and F.J. Rammig},
  key         ={CHDL89},
  keyword     ={HDL verification synthesis},
  month       ={June},
  organization={IFIP WG 10.2},
  publisher   ={North-Holland},
  title       ={Computer Hardware Description Languages and their Applications},
  year        ={1989}
}
@proceedings{CHDL91,
  address     ={Marseille},
  editor      ={D. Borrione and R. Waxman},
  key         ={CHDL91},
  keyword     ={HDL verification synthesis},
  month       ={April},
  organization={IFIP WG 10.2},
  publisher   ={North-Holland},
  title       ={Computer Hardware Description Languages and their Applications},
  year        ={1991}
}
@inproceedings{CHJP90,
  author      ={H. Cho and G. Hachtel and S.-W. Jeong and B. Plessier and E. Schwarz and F. Somenzi},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={CHJP90},
  title       ={{ATPG} aspects of {FSM} verification},
  year        ={1990}
}
@inproceedings{CHMP93,
  author      ={H. Cho and G.D. Hachtel and E. Macii and B. Plessier and F. Somenzi},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={CHMP93},
  keyword     ={verification gatelevel hardware symbolic_state_traversal BDD fsm formalism modelling},
  pages       ={25--30},
  title       ={Algorithms for Approximate {FSM} Traversal},
  year        ={1993}
}
@inproceedings{CHMP94,
  address     ={Paris},
  author      ={H. Cho and G.D. Hachtel and E. Macii and M. Poncino and F. Somenzi},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={CHMP94},
  keyword     ={Finite_State_Machine_Verification},
  month       ={February},
  pages       ={137--141},
  publisher   ={IEEE Computer Society Press},
  title       ={{A} {S}tate {S}pace {D}ecomposition {A}lgorithm for {A}pproximate {FSM} {T}raversal},
  year        ={1994}
}
@inproceedings{CJSP93,
  address     ={Paris, France},
  author      ={H. Cho and S.W. Jeong and F. Somenzi and C. Pixley},
  booktitle   ={European Design Automation Conference },
  key         ={CJSP93},
  month       ={February},
  organization={IEEE},
  pages       ={494--498},
  publisher   ={IEEE Computer Society Press},
  title       ={{M}ultiple {O}bservation {T}ime {S}ingle {R}eference {T}est {G}eneration {U}sing {S}ynchronizing {S}equences},
  year        ={1993}
}
@book{CKLM92,
  author      ={E. M. Clarke and S. Kimura and D. E. Long and S. Michaylov and S. A. Schwab and J. P. Vidal},
  edition     ={Suzuki},
  key         ={CKLM92},
  title       ={Symbolic Computation Algorithms on Shared memory Multiprocessors},
  year        ={1992}
}
@inproceedings{CLCZ95,
  address     ={IBM Research (USA), GMD-SET (Germany), Montreal University},
  author      ={F. Corella and M. Langevin and E. Cerny and Z. Zhou and X. Song},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={CLCZ95},
  keyword     ={finite_state_systems},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={146--160},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{S}tate enumeration with abstract descriptions of state machines},
  volume      ={987},
  year        ={1995}
}
@inproceedings{CLSS96,
  address     ={New Brunswick, NJ, USA},
  author      ={R. Cleaveland and P. M. Lewis and S. A. Smolka and O. Sokolsky},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={CLSS96},
  month       ={July/August},
  pages       ={398--401},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The Concurrency Factory: a Development Environment for concurrent Systems},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{CMCH96,
  address     ={New Brunswick, NJ, USA},
  author      ={E. M. Clarke and K. L. McMillan and S. Campos and V. Hartonas-Garmhausen},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={CMCH96},
  month       ={July/August},
  pages       ={419--422},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Symbolic model checking},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{CMZF93,
  address     ={Dallas, TX},
  author      ={E. Clarke and K.L. McMillian and X. Zhao and M. Fujita and J.C.-Y. Yang},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={CMZF93},
  month       ={June},
  pages       ={54--60},
  title       ={{S}pectral {T}ransforms for large {B}oolean {F}unctions with {A}pplication to {T}echnologie {M}apping},
  year        ={1993}
}
@inproceedings{CORS95,
  address     ={Boca Raton, Florida},
  author      ={J. Crow and S. Owre and J. Rushby and N. Shankar and M. Srivas},
  booktitle   ={Workshop on Industrial-Strength Formal Specification Techniques (WIFT)},
  key         ={CORS95},
  month       ={April},
  publisher   ={Computer Science Laboratory, SRI International},
  title       ={A {T}utorial {I}ntroduction to {PVS}},
  year        ={1995}
}
@inproceedings{CPVM91,
  author      ={L. Claesen and F. Proesmans and E. Verlind and H. De Man},
  booktitle   ={International Workshop on Formal Methods in VLSI Design},
  key         ={CPVM91},
  month       ={January},
  title       ={{A} {M}ethodology for the {A}utomation {V}erification of {MOS} {T}ransistor {L}evel {I}mplementation from {H}igh {L}evel {B}ehavioral {S}pecifications},
  year        ={1991}
}
@inproceedings{CRSS94,
  address     ={Bad Herrenalb, Germany},
  author      ={D. Cyrluk and S. Rajan and N. Shankar and M.K. Srivas},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={CRSS94},
  keyword     ={tpcd94},
  month       ={September},
  note        ={published 1995},
  pages       ={203--222},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Effective Theorem Proving for Hardware Verification},
  volume      ={901},
  year        ={1994}
}
@inproceedings{CSSB92,
  address     ={Santa Clara, California},
  author      ={M. Chiodo and T.R. Shiple and A.L. Sangiovanni-Vincentelli and R.K. Brayton},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={CSSB92},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={172--178},
  publisher   ={IEEE Computer Society Press},
  title       ={{A}utomatic {C}ompositional {M}inimization in {CTL} {M}odel {C}hecking},
  year        ={1992}
}
@article{CVWY92,
  author      ={C. Courcoubetis and M.Y. Vardi and P. Wolper and M. Yannakakis},
  journal     ={Formal Methods in System Design},
  key         ={CVWY92},
  pages       ={275-288},
  title       ={Memory efficient algorithms for the verification of temporal properties},
  volume      ={1},
  year        ={1992}
}
@inproceedings{CZSL94,
  author      ={F. Corella and Z. Zhou and X. Song and M. Langevin and E. Cerny},
  booktitle   ={Formal Methods in System Design},
  key         ={CZSL94},
  title       ={Multiway decision graphs for automated hardware verification},
  volume      ={10(1)},
  year        ={1994}
}
@inproceedings{CaCG96,
  address     ={Rutgers, NJ},
  author      ={S. Campos and E.M. Clarke and O. Grumberg},
  booktitle   ={Conference on Computer-Aided Verification (CAV)},
  key         ={CaCG96},
  month       ={July},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Selective Quantitative Analysis and Interval Model Checking: 
		Verifying Different Facets of a System},
  year        ={1996}
}
@techreport{CaCM96,
  author      ={S. Campos and E. M. Clarke and M. Minea},
  key         ={CaCM96},
  month       ={June},
  note        ={ftp://reports.adm.cs.cmu.edu/usr/anon/1996/CMU-CS-96-148.ps},
  number      ={CMU-CS-96-148},
  title       ={Symbolic Techniques for Formally Verifying Industrial Systems},
  year        ={1996}
}
@inproceedings{CaCM97,
  author      ={S. Campos and E. Clarke and M. Minea},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={O. Grumberg},
  key         ={CaCM97},
  month       ={June},
  pages       ={452--455},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The Verus Tool: A Quantitative Approach to the Formal Verification of Real-Time Systems},
  volume      ={1254},
  year        ={1997}
}
@inproceedings{CaCP93,
  address     ={Arles,France},
  author      ={P. Camurati and F. Corno and P. Prinetto},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  key         ={CaCP93},
  month       ={May},
  pages       ={80-91},
  publisher   ={Springer-Verlag},
  title       ={A Methodology for System-Level Design for Verifiability},
  year        ={1993}
}
@inproceedings{CaCP93a,
  address     ={Arles, France},
  author      ={P. Camurati and F. Corno and P. Prinetto},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={CaCP93a},
  keyword     ={verification},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={80--91},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Methodology for System-Level Design for Verifiability},
  volume      ={683},
  year        ={1993}
}
@inproceedings{CaCP93b,
  address     ={Ottawa, Canada},
  author      ={P. Camurati and F. Corno and P. Prinetto},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={CaCP93b},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={21--34},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Exploiting symbolic traversal techniques for efficient Process Algebra Manipulation},
  year        ={1993}
}
@inproceedings{CaCQ94a,
  address     ={Turin, Italy},
  author      ={G. Cabodi and P. Camurati and S. Quer},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={CaCQ94a},
  month       ={October},
  organization={Politecnico di Torino},
  title       ={{E}fficient {S}tate {S}pace {P}runing in {S}ymbolic {B}ackward {T}raversal},
  year        ={1994}
}
@inproceedings{CaCQ94b,
  address     ={Grenoble, France},
  author      ={G. Cabodi and P. Camurati and S. Quer},
  booktitle   ={European Design Automation Conference },
  key         ={CaCQ94b},
  keyword     ={hardware verification modelchecking modelling bdd},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={22--27},
  publisher   ={IEEE Computer Society Press},
  title       ={{S}ymbolic {E}xploration of {L}arge {C}ircuits with {E}nhanced {F}orward/{B}ackward {T}raversals},
  year        ={1994}
}
@article{CaCR91,
  author      ={J.-P. Caisso and E. Cerny and N.C. Rubin},
  journal     ={{IEEE} Transactions on Computer-Aided Design},
  key         ={CaCR91},
  keyword     ={hardware abstraction timing},
  month       ={May},
  number      ={5},
  pages       ={589--595},
  title       ={A Recursive Technique for Computing Delays in Series-Parallel {MOS} Transistor Circuits},
  volume      ={10},
  year        ={1991}
}
@inproceedings{CaCa93,
  address     ={Arles, France},
  author      ={G. Cabodi and P. Camurati},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={CaCa93},
  keyword     ={verification},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={155--166},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Advancements in Symbolic Traversal Techniques},
  volume      ={683},
  year        ={1993}
}
@inproceedings{CaCl94,
  author      ={S.V. Campos and E. Clarke},
  booktitle   ={Theories and Experiences for Real-Time System Develpment},
  editor      ={T. Rus and C. Rattray},
  key         ={CaCl94},
  keyword     ={hardware verification modelchecking specification logic realtime},
  month       ={May},
  publisher   ={World Scientific Press, AMAST Series in Computing},
  series      ={{AMAST} Series in Computing},
  title       ={{R}eal-{T}ime {S}ymbolic {M}odel {C}hecking for {D}iscrete {T}ime {M}odels},
  year        ={1994}
}
@inproceedings{CaGM86,
  address     ={Amsterdam},
  author      ={A. Camilleri and M.J.C. Gordon and T.F. Melham},
  booktitle   ={From {HDL} Descriptions to Guaranteed Correct Circuit Designs},
  editor      ={D. Borrione},
  key         ={CaGM86},
  keyword     ={verification},
  month       ={September},
  pages       ={41--66},
  publisher   ={North-Holland},
  title       ={Hardware Verification using Higher Order Logic},
  year        ={1986}
}
@inproceedings{CaGr96,
  address     ={New Brunswick, NJ, USA},
  author      ={S. Campos and O. Grumberg},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={CaGr96},
  month       ={July/August},
  pages       ={257--268},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Selective quantitative analysis and interval model checking: Verifying different facets of a System},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{CaHH92,
  address     ={Leuven, Belgium},
  author      ={R. Cardell-Oliver and R. Hale and J. Herbert},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={CaHH92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={263--278},
  publisher   ={North-Holland},
  title       ={An Embedding of Timed Transition Systems in {HOL}},
  year        ={1992}
}
@misc{CaHJ91,
  author      ={R. Cardell-Oliver and J. Herbert and J.J. Joyce},
  howpublished={Tutorial Notes},
  key         ={CaHJ91},
  title       ={The {C}ambridge {HOL} System: An Introduction to Interactive Machine-Assisted Theorem-Proving in Higher-Order Logic},
  year        ={1991}
}
@inproceedings{CaJB78,
  author      ={W.C. Carter and W.H. Joyner and D. Brand},
  booktitle   ={National Computer Conference},
  key         ={CaJB78},
  organization={AFIPS Conference Proceedings},
  pages       ={657--664},
  volume      ={Microprogram {V}erification {C}onsidered {N}ecessary},
  year        ={1978}
}
@inproceedings{CaJB79,
  author      ={W.C. Carter and W.H. Joyner and D. Brand},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={CaJB79},
  pages       ={280--286},
  title       ={Symbolic Simulation for Correct Machine Design},
  year        ={1979}
}
@inproceedings{CaMP91,
  address     ={Amsterdam},
  author      ={P. Camurati and T. Margaria and P. Prinetto},
  booktitle   ={European Design Automation Conference },
  key         ={CaMP91},
  keyword     ={verification Formal_Verification_Techniques},
  month       ={February},
  organization={IEEE},
  pages       ={11--15},
  publisher   ={IEEE Computer Society Press},
  title       ={Resolution based correctness proofs of synchronous circuits},
  year        ={1991}
}
@techreport{CaMe92a,
  author      ={J. Camilleri and T.F. Melham},
  institution ={University of Cambridge Computer Laboratory},
  key         ={CaMe92a},
  keyword     ={Rewrite},
  month       ={August},
  number      ={265},
  title       ={Reasoning with Inductively Defined Relations in the {HOL} Theorem Prover},
  type        ={Technical Report},
  year        ={1992}
}
@techreport{CaMe92b,
  author      ={J. Camilleri and T.F. Melham},
  institution ={University of Cambridge Computer Laboratory},
  key         ={CaMe92b},
  number      ={265},
  title       ={Reasoning with Inductively Defined Relations in the {HOL} Theorem Prover},
  type        ={Technical Report},
  year        ={1992}
}
@inproceedings{CaPr87,
  author      ={P. Camurati and P. Prinetto},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  key         ={CaPr87},
  keyword     ={verification},
  pages       ={225--247},
  publisher   ={North-Holland},
  title       ={Formal verification of hardware correctness},
  year        ={1987}
}
@article{CaPr88,
  author      ={P. Camurati and P. Prinetto},
  journal     ={IEEE Computer},
  key         ={CaPr88},
  keyword     ={verification},
  month       ={July},
  number      ={7},
  pages       ={8--19},
  title       ={Formal Verification of Hardware Correctness: Introduction and Survey of current Research},
  volume      ={21},
  year        ={1988}
}
@inproceedings{CaQC95,
  address     ={Polit. di Torino (Italy), Udine University (Italy)},
  author      ={G. Cabodi and S. Quer and P. Camurati},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={CaQC95},
  keyword     ={finite_state_systems},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={161--170},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{T}ransforming boolean relations by symbolic encoding},
  volume      ={987},
  year        ={1995}
}
@inproceedings{CaTa89,
  address     ={Washington},
  author      ={R. Camposano and R.M. Tabet},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={J.A. Darringer and F.J. Rammig},
  key         ={CaTa89},
  keyword     ={flowgraph VHDL synthesis},
  month       ={June},
  organization={IFIP WG 10.2},
  pages       ={49--58},
  publisher   ={North-Holland},
  title       ={Design Representation for the Synthesis of Behavioral {VHDL} Models},
  year        ={1989}
}
@inproceedings{CaZa94,
  address     ={Malta},
  author      ={J. Camilleri and V. Zammit},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={CaZa94},
  month       ={September},
  pages       ={113--127},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Symbolic Animation as a Proof Tool},
  volume      ={859},
  year        ={1994}
}
@manual{Cade89,
  author      ={{Cadence Design Systems}},
  key         ={Cade89},
  month       ={July},
  organization={{CADENCE} Design Systems Inc.},
  title       ={{CADENCE} User Manuals},
  year        ={1989}
}
@inproceedings{Cala94,
  address     ={San Jose, California},
  author      ={N.L.V. Calazans},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={Cala94},
  keyword     ={sequential_optimization},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={702--706},
  publisher   ={IEEE Computer Society Press},
  title       ={{B}oolean {C}onstrained {E}ncoding: {A} {N}ew {F}ormulation and a {C}ase {S}tudy},
  year        ={1994}
}
@techreport{Cami88,
  author      ={J. Camilleri},
  institution ={University of Cambridge Computer Laboratory},
  key         ={Cami88},
  number      ={140},
  title       ={Executing Behavioural Definitions in Higher Order Logic},
  type        ={Technical Report},
  year        ={1988}
}
@techreport{Cami91,
  author      ={J. Camilleri},
  institution ={University of Cambridge Computer Laboratory},
  key         ={Cami91},
  number      ={240},
  title       ={Symbolic Compilation and Execution of Programs by Proof: a Case study in {HOL}},
  type        ={Technical Report},
  year        ={1991}
}
@inproceedings{Cami91a,
  address     ={Davis, California},
  author      ={A. Camilleri},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Cami91a},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Experience with Formal Methods in Industry},
  year        ={1991}
}
@inproceedings{Cami91b,
  address     ={Davis, California},
  author      ={A. Camilleri},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Cami91b},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Proof Systems},
  year        ={1991}
}
@inproceedings{Camp85,
  author      ={R. Camposano},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={Camp85},
  keyword     ={flowgraph synthesis},
  organization={IEEE},
  pages       ={475--481},
  title       ={Synthesis Techniques for Digital System Design},
  year        ={1985}
}
@inproceedings{Camp89,
  author      ={R. Camposano},
  booktitle   ={Mathematical Sciences Institute Workshop:},
  editor      ={M. Leeser and G. Brown},
  key         ={Camp89},
  keyword     ={flowgraph synthesis},
  month       ={July},
  pages       ={106--128},
  title       ={Behavior-Preserving Transformations for High-Level Synthesis},
  year        ={1989}
}
@article{Camp91a,
  author      ={R. Camposano},
  journal     ={IEEE Transactions on Computer Aided Design},
  key         ={Camp91a},
  keyword     ={flowgraph synthesis},
  month       ={January},
  number      ={1},
  pages       ={85--93},
  title       ={Path-Based Scheduling for Synthesis},
  volume      ={10},
  year        ={1991}
}
@book{Camp93,
  author      ={S. Campos},
  key         ={Camp93},
  month       ={April},
  title       ={The Priority Inversion Problem and real Time Symbolic model Checking},
  year        ={1993}
}
@inproceedings{Camp97,
  address     ={Toledo, Spain},
  author      ={R. Camposana},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={Camp97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Hardware description languages in practical design flows},
  year        ={1997}
}
@inproceedings{Card91,
  address     ={Davis, California},
  author      ={R. Cardell-Oliver},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Card91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={59--62},
  publisher   ={IEEE Computer Society Press},
  title       ={On the Use of the {HOL} System for Protocol Verification},
  year        ={1991}
}
@article{Carn87,
  author      ={W.A. Carnielli},
  journal     ={Systematization of finite many-valued logics through the method of tableaux},
  key         ={Carn87},
  pages       ={473-493},
  title       ={Journal of Symbolic Logic},
  volume      ={52},
  year        ={1987}
}
@inproceedings{Carr93,
  address     ={Vancouver, Canada},
  author      ={V. Carreno},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Carr93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={502--516},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification in Higher-Order Logic of Mutual Exclusion Algorithm},
  volume      ={780},
  year        ={1993}
}
@article{CeGe85,
  author      ={E. Cerny and J. Gecsei},
  journal     ={{IEEE} Transactions on Computer-Aided Design},
  key         ={CeGe85},
  month       ={October},
  number      ={4},
  pages       ={685--693},
  title       ={Simulation of {MOS} Circuits by Decision Diagrams},
  volume      ={CAD-4},
  year        ={1985}
}
@article{CeHR92,
  author      ={E. Cerny and J.P. Hayes and N.C. Rumin},
  journal     ={IEEE Transactions on Computer-Aided Design},
  key         ={CeHR92},
  keyword     ={hardware abstraction logic switchlevel},
  month       ={April},
  number      ={4},
  pages       ={443--452},
  title       ={Accuracy of Magnitude-Class Calculations in Switch-Level Modeling},
  volume      ={11},
  year        ={1992}
}
@inproceedings{Cern93,
  address     ={Ottawa, Canada},
  author      ={E. Cerny},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Cern93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={155--156},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Protocol Specification},
  year        ={1993}
}
@inproceedings{ChAb93,
  address     ={Paris, France},
  author      ={H. Chang and J.A. Abraham},
  booktitle   ={European Design Automation Conference },
  editor      ={C.O. Newton and M. Heydeman},
  key         ={ChAb93},
  month       ={February},
  pages       ={444--448},
  publisher   ={IEEE Computer Society Press},
  title       ={{CHAN:} An Efficient Critical Path Analysis Algorithm},
  year        ={1993}
}
@inproceedings{ChAr91,
  address     ={Marseille},
  author      ={C.H. Cho and R. Armstrong},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Borrione and R. Waxman},
  key         ={ChAr91},
  keyword     ={HDL VHDL test},
  month       ={April},
  organization={IFIP WG 10.2},
  pages       ={427--445},
  publisher   ={North-Holland},
  title       ={{VHDL} Semantics for Behavioral Test Generation},
  year        ={1991}
}
@inproceedings{ChBi91,
  address     ={Davis, California},
  author      ={S.-K. Chin and G. Birtwistle},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={ChBi91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={121--129},
  publisher   ={IEEE Computer Society Press},
  title       ={Implementing and Verifying Finite-State Machines Using Types in {HOL}},
  year        ={1991}
}
@inproceedings{ChCL93,
  address     ={Ottawa, Canada},
  author      ={T.-A. Chu and H.T. Cao and C.K.C. Leung},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={ChCL93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={403--420},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={{ESP}: An Executable Specification Language for Mixed Timing Control Circuits},
  year        ={1993}
}
@inproceedings{ChCM94,
  address     ={Paris},
  author      ={S.-C. Chang and D.I. Cheng and M. Marek-Sadowska},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={ChCM94},
  keyword     ={Techniques_and_Applications_for_BDDs},
  month       ={February},
  pages       ={620--624},
  publisher   ={IEEE Computer Society Press},
  title       ={{M}inimizing {ROBDD} {S}ize of {I}ncompletely {S}pecified {M}ultiple {O}utput {F}unctions},
  year        ={1994}
}
@inproceedings{ChCo93,
  address     ={Arles, France},
  author      ={J. Chazarain and H. Collavizza},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={ChCo93},
  keyword     ={verification},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={109--121},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Combining Symbolic Evaluation and Object Oriented Approach},
  volume      ={683},
  year        ={1993}
}
@inproceedings{ChFF94,
  address     ={Malta},
  author      ={N. Chapman and S. Finn and M.P. Fourman},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={ChFF94},
  month       ={September},
  pages       ={128--143},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Datatypes in {L2}},
  volume      ={859},
  year        ={1994}
}
@inproceedings{ChGR96,
  address     ={Oxford},
  author      ={P. Chalin and P. Grogono and T. Radhakrishnan},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={ChGR96},
  month       ={March},
  pages       ={385-404},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{I}dentification of and {S}olutions to {S}hortcomings of {LCL}, a {L}arch/{C} {I}nterface {S}pecification {L}anguage},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{ChHF97,
  address     ={Toledo, Spain},
  author      ={C.-T. Chou and J.-L. Huang and M. Fujita},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={ChHF97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={A high-level language for programming complex temporal behaviors and its translation into synchronous circuits},
  year        ={1997}
}
@article{ChHR91,
  author      ={Z. ChaoChen and C.A.R. Hoare and A.P. Ravn},
  journal     ={Information Processing Letters},
  key         ={ChHR91},
  number      ={5},
  pages       ={269-276},
  title       ={ A calculus of durations},
  volume      ={40},
  year        ={1991}
}
@inproceedings{ChHS91a,
  author      ={H. Cho and G.D. Hachtel and F. Somenzi},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={ChHS91a},
  keyword     ={formalism fsm symbolic_state_traversal BDD hardware gatelevel verification},
  pages       ={376--379},
  publisher   ={IEEE},
  title       ={Calculating Resetability and Reset Sequences},
  year        ={1991}
}
@inproceedings{ChHS91b,
  author      ={H. Cho and G.D. Hachtel and F. Somenzi},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={ChHS91b},
  keyword     ={formalism fsm symbolic_state_traversal BDD hardware gatelevel test},
  pages       ={77--80},
  publisher   ={IEEE},
  title       ={Redundancy Identification and Removal Based on Implicit State Enumeration},
  year        ={1991}
}
@inproceedings{ChHS91c,
  author      ={H. Cho and G.D. Hachtel and F. Somenzi},
  booktitle   ={International Test Conference (ITC)},
  key         ={ChHS91c},
  keyword     ={formalism fsm symbolic_state_traversal BDD hardware gatelevel test},
  pages       ={67--74},
  publisher   ={IEEE},
  title       ={Fast Sequential {ATPG} Based on Implicit State Enumeration},
  year        ={1991}
}
@article{ChHS93,
  author      ={H. Cho and G.D. Hachtel and F. Somenzi},
  journal     ={IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={ChHS93},
  keyword     ={formalism fsm symbolic_state_traversal BDD hardware gatelevel optimization test},
  month       ={July},
  number      ={7},
  pages       ={935--945},
  title       ={Redundancy Identification{/}Removal and Test Generation for Sequential Circuits Using Implicit State Enumeration},
  volume      ={12},
  year        ={1993}
}
@inproceedings{ChHo90,
  address     ={New York},
  author      ={Z. Chaochen and C.A.R. Hoare},
  booktitle   ={Workshop on Designing Correct Circuits},
  editor      ={G. Jones and M. Sheeran},
  key         ={ChHo90},
  pages       ={196--211},
  publisher   ={Springer-Verlag},
  title       ={A Model for Synchronous Switching Circuits and its theory of Correctness},
  year        ={1990}
}
@inproceedings{ChHw96,
  address     ={Dresden, Germany},
  author      ={R. Chapman and Deok-Hyun Hwang},
  booktitle   ={SIG-VHDL Spring '96 Working Conference},
  editor      ={W. Ecker},
  key         ={ChHw96},
  keyword     ={VHDL verification},
  month       ={May},
  pages       ={157--168},
  publisher   ={Shaker Verlag},
  remark      ={ISBN: 3-8265-1462-9},
  title       ={A Process-Algebraic Semantics for {VHDL}},
  year        ={1996}
}
@inproceedings{ChJK97,
  address     ={Enschede, The Netherlands},
  author      ={S. Christensen and J.B. Jorgensen and L.M. Kristensen},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={ChJK97},
  pages       ={209-223},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={Design/{CPN} -- A Computer Tool for Coloured Petri Nets},
  year        ={1997}
}
@article{ChKS81,
  author      ={A.K. Chandra and D. Kozen and L.J. Stockmeyer},
  journal     ={Journal of ACM},
  key         ={ChKS81},
  keyword     ={omega},
  pages       ={114--133},
  title       ={Alternation},
  volume      ={28},
  year        ={1981}
}
@inproceedings{ChKa89,
  author      ={P.K. Chan and K. Karplus},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={ChKa89},
  keyword     ={hardware abstraction timing},
  organization={IEEE},
  pages       ={485--490},
  title       ={Computing Signal Delay in General {RC} Networks by Tree/Link Partitioning},
  year        ={1989}
}
@inproceedings{ChKr93,
  author      ={K.-T. Cheng and A.S. Krishnakumar},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={ChKr93},
  keyword     ={formalism fsm hardware gatelevel test registertransferlevel},
  pages       ={86--91},
  title       ={Automatic Functional Test Generation Using The Extended Finite State Machine Model},
  year        ={1993}
}
@book{ChLe73,
  author      ={C.-L. Chang and R.C.-T. Lee},
  key         ={ChLe73},
  keyword     ={Logic},
  publisher   ={Academic Press},
  title       ={Symbolic Logic and mechanical Theorem Proving},
  year        ={1973}
}
@inproceedings{ChMP94a,
  address     ={Paris, France},
  author      ={E. Chang and Z. Manna and A. Pnueli},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={ChMP94a},
  pages       ={458--465},
  title       ={{C}ompositional {V}erification of {R}eal-{T}ime {S}ystems},
  year        ={1994}
}
@inproceedings{ChMa93,
  address     ={Paris, France},
  author      ={D.I. Cheng and M. Marek-Sadowska},
  booktitle   ={European Design Automation Conference },
  editor      ={T. Kropf and U. Schlichtmann},
  key         ={ChMa93},
  month       ={February},
  pages       ={81--85},
  publisher   ={IEEE Computer Society Press},
  title       ={Verifying Equivalence of Functions with Unknown Input Correspondence},
  year        ={1993}
}
@book{ChMi88,
  author      ={K.M. Chandry and J. Misra},
  key         ={ChMi88},
  publisher   ={Addison-Wesley},
  title       ={{P}arallel {P}rogram {D}esign: {A} {F}oundation},
  year        ={1988}
}
@book{ChMi89,
  address     ={Austin, Texas},
  author      ={K.M. Chandy and J. Misra},
  key         ={ChMi89},
  keyword     ={UNITY},
  month       ={May},
  publisher   ={Addison-Wesley},
  title       ={Parallel Program Design},
  year        ={1989}
}
@inproceedings{ChOB92,
  author      ={P. Chou and R. Ortega and G. Boriello},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={ChOB92},
  month       ={November},
  title       ={Synthesis of the hardware/software interface in microcontroller-based systems},
  year        ={1992}
}
@techreport{ChOB94,
  author      ={P. Chou and R. Ortega and G. Borriello},
  institution ={Department of Computer Science and Engineering, University of Washington},
  key         ={ChOB94},
  month       ={March},
  number      ={95-03-04},
  title       ={The {Chinook} Hardware/Software Co-Synthesis System},
  type        ={Technical Report},
  year        ={1994}
}
@inproceedings{ChPC88,
  author      ={S. Chandrasekhar and J.P. Privitera and K.W. Conradt},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={ChPC88},
  keyword     ={Rewrite Methods},
  title       ={Application of term rewriting techniques to hardware design verification},
  year        ={1988}
}
@article{ChSc89,
  author      ={P.K. Chan and M.D.F. Schlag},
  journal     ={{IEEE} Transactions on Computer-Aided Design},
  key         ={ChSc89},
  keyword     ={hardware abstraction timing},
  month       ={June},
  number      ={6},
  pages       ={581--589},
  title       ={Bounds on Signal Delay in {RC} Mesh Networks},
  volume      ={8},
  year        ={1989}
}
@article{ChTr77,
  author      ={S.S. Ching and J.H. Tracey},
  journal     ={IEEE Computer},
  key         ={ChTr77},
  keyword     ={HDL},
  month       ={June},
  pages       ={35--41},
  title       ={An Interactive Computer Graphics Language for the Design and Simulation of Digital Systems},
  year        ={1977}
}
@inproceedings{ChYF94,
  address     ={Paris},
  author      ={B. Chen and M. Yamazaki and M. Fujita},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={ChYF94},
  keyword     ={Finite_State_Machine_Verification},
  month       ={February},
  pages       ={132--136},
  publisher   ={IEEE Computer Society Press},
  title       ={Bug identification of a Real Chip Design by Symbolic Model Checking},
  year        ={1994}
}
@article{Chak93,
  author      ={S. Chakravarty},
  journal     ={IEEE Transactions on Computers},
  key         ={Chak93},
  keyword     ={formalism propositionallogic BDD},
  month       ={February},
  number      ={2},
  pages       ={129--137},
  title       ={A Characterization of Binary Decision Diagrams},
  volume      ={42},
  year        ={1993}
}
@article{Cham86,
  author      ={D. de Champeaux},
  journal     ={Journal of Computer and System Sciences},
  key         ={Cham86},
  keyword     ={Logic},
  pages       ={79--90},
  title       ={About the {P}aterson-{W}egman unification algorithm},
  volume      ={32},
  year        ={1986}
}
@article{Chan86a,
  author      ={P.K. Chan},
  journal     ={{IEEE} Transactions on Circuits and Systems},
  key         ={Chan86a},
  month       ={November},
  number      ={11},
  pages       ={1147--1149},
  title       ={An Extension of Elmore's Delay},
  volume      ={CAS-33},
  year        ={1986}
}
@article{Chan86b,
  author      ={P.K. Chan},
  journal     ={{IEEE} Transactions on Circuits and Systems},
  key         ={Chan86b},
  keyword     ={hardware abstraction timing},
  month       ={November},
  number      ={11},
  pages       ={1149--1152},
  title       ={An Extension of Elmore's Delay and its Application for Timing Analysis of {MOS} Pass Transistor Networks},
  volume      ={CAS-33},
  year        ={1986}
}
@inproceedings{Chen91,
  author      ={K.-T. Cheng},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={Chen91},
  keyword     ={test optimization gatelevel hardware},
  pages       ={372--375},
  title       ={An {ATPG}-Approach to Sequential Logic Optimization},
  year        ={1991}
}
@article{Chen93,
  author      ={K.-T. Cheng},
  journal     ={IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={Chen93},
  keyword     ={hardware gatelevel optimization formalism fsm symbolic_state_traversal BDD},
  number      ={1},
  pages       ={13--24},
  title       ={Redundancy Removal for Sequential Circuits Without Reset State},
  volume      ={12},
  year        ={1993}
}
@techreport{Chen95,
  author      ={A. Cheng},
  institution ={Basic Research in Computer Science, University of Aarhus},
  key         ={Chen95},
  number      ={RS-95-18},
  title       ={Complexity Results for Model Checking},
  type        ={BRICS Report},
  year        ={1995}
}
@techreport{Chen95a,
  author      ={A. Cheng},
  institution ={Basic Research in Computer Science, University of Aarhus},
  key         ={Chen95a},
  number      ={RS-95-39},
  title       ={Petri Nets, Traces, and Local Model Checking},
  type        ={BRICS Report},
  year        ={1995}
}
@article{Chin90,
  author      ={S.-K. Chin},
  journal     ={IEEE Transactions on CAD},
  key         ={Chin90},
  keyword     ={formalsynthesis algorithmiclevel hardware},
  month       ={August},
  number      ={8},
  pages       ={793--803},
  title       ={Synthesis of Arithmetic Hardware Using Hardware Metafunctions},
  volume      ={9},
  year        ={1990}
}
@inproceedings{Chin91a,
  address     ={Davis, California},
  author      ={S.-K. Chin},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Chin91a},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={22--31},
  publisher   ={IEEE Computer Society Press},
  title       ={Verifying Arithmetic Hardware in {HOL}},
  year        ={1991}
}
@inproceedings{Chin91b,
  address     ={Davis, California},
  author      ={S.-K. Chin},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Chin91b},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Hardware Verification},
  year        ={1991}
}
@article{Chin92,
  author      ={S.-K. Chin},
  journal     ={IEEE Transactions on Computer-Aided Design},
  key         ={Chin92},
  keyword     ={hardware algorithmiclevel formalsynthesis registertransferlevel verification},
  month       ={December},
  number      ={12},
  pages       ={1529--1558},
  title       ={Verified Functions for Generating Signed-Binary Arithmetic Hardware},
  volume      ={11},
  year        ={1992}
}
@article{Chou74,
  author      ={Y. Choueka},
  journal     ={Journal of Computer and System Sciences},
  key         ={Chou74},
  keyword     ={omega},
  pages       ={117--141},
  title       ={Theories of Automata on $\omega$-Tapes: A Simplified Approach},
  volume      ={8},
  year        ={1974}
}
@inproceedings{Chou92a,
  address     ={Leuven, Belgium},
  author      ={C.-T. Chou},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Chou92a},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={59--70},
  publisher   ={North-Holland},
  title       ={A Note on Interactive Theorem Proving with Theorem Continuation Functions},
  year        ={1992}
}
@inproceedings{Chou92b,
  address     ={Leuven, Belgium},
  author      ={C.-T. Chou},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Chou92b},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={71--80},
  publisher   ={North-Holland},
  title       ={A Sequent Formulation of a Logic of Predicates in {HOL}},
  year        ={1992}
}
@inproceedings{Chou93,
  address     ={Vancouver, Canada},
  author      ={C.-T. Chou},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Chou93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={310--324},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Predicates, Temporal Logic, and Simulations},
  volume      ={780},
  year        ={1993}
}
@inproceedings{Chou94a,
  address     ={Malta},
  author      ={C.-T. Chou},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={Chou94a},
  month       ={September},
  pages       ={144--157},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Formal Theory of Undirected Graphs in Higher-Order Logic},
  volume      ={859},
  year        ={1994}
}
@inproceedings{Chou94b,
  address     ={Malta},
  author      ={C.-T. Chou},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={Chou94b},
  month       ={September},
  pages       ={158--176},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Mechanical Verification of Distributed Algorithms in Higher-Order Logic},
  volume      ={859},
  year        ={1994}
}
@mastersthesis{Chri90,
  author      ={J. Christensen},
  key         ={Chri90},
  school      ={Department of Computer Science, Technical University of Denmark},
  title       ={Efficient Synthesis of Hierarchical Circuit Descriptions},
  year        ={1990}
}
@article{Chu65,
  author      ={Y. Chu},
  journal     ={Communications of the ACM},
  key         ={Chu65},
  keyword     ={HDL},
  month       ={October},
  number      ={10},
  pages       ={607--615},
  title       ={An {ALGOL}-like Computer Design Language},
  volume      ={8},
  year        ={1965}
}
@article{Chu86,
  author      ={T.-A. Chu},
  journal     ={Integration, the {VLSI} Journal},
  key         ={Chu86},
  pages       ={99--113},
  title       ={On the Models for Designing {VLSI} Asynchronous Digital Systems},
  volume      ={4},
  year        ={1986}
}
@article{Chur36,
  author      ={A. Church},
  journal     ={Journal of Symbolic Computation},
  key         ={Chur36},
  keyword     ={Logic},
  title       ={A note on the {E}ntscheidungsproblem},
  volume      ={1},
  year        ={1936}
}
@article{Chur40,
  author      ={A. Church},
  journal     ={Journal of Symbolic Logic},
  key         ={Chur40},
  pages       ={56-68},
  title       ={A formulation of the simple theory of types},
  volume      ={5},
  year        ={1940}
}
@inproceedings{Chur62,
  address     ={Stockholm},
  author      ={A. Church},
  booktitle   ={International Cong. Math},
  key         ={Chur62},
  keyword     ={omega},
  pages       ={23--35},
  title       ={Logic, Arithmetic and Automata},
  year        ={1962}
}
@inproceedings{Chur77,
  author      ={A. Church},
  booktitle   ={International Cong. Math},
  key         ={Chur77},
  keyword     ={omega},
  pages       ={23--35},
  title       ={Logic, arithmetic and automata},
  year        ={1977}
}
@inproceedings{Cing93,
  address     ={Arles, France},
  author      ={V. Cingel},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={Cing93},
  keyword     ={verification},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={1--14},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Graph-Based Method for Timing Diagrams Representation and Verification},
  volume      ={683},
  year        ={1993}
}
@inproceedings{ClDK90,
  address     ={New York},
  author      ={E.M. Clarke and I.A. Draghicescu and R.P. Kurshan},
  booktitle   ={Colloquium on Trees in Algebra and Programming},
  editor      ={A. Arnold and N.D. Jones},
  key         ={ClDK90},
  month       ={May},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {U}nified {A}pproach for {S}howing {L}anguage {C}ontainment and {E}quivalence {B}etween {V}arious {T}ypes of $\omega$-automata},
  volume      ={407},
  year        ={1990}
}
@article{ClDK93,
  author      ={E.M. Clarke and I.A. Draghicescu and R.P. Kurshan},
  journal     ={Information Processing Letters},
  key         ={ClDK93},
  pages       ={301--308},
  title       ={A Unified Approach for Showing Language Containment and Equivalence Between Various Types of $\omega$-automata},
  volume      ={46},
  year        ={1993}
}
@inproceedings{ClDr88,
  address     ={Noordwigherhout, Netherland},
  author      ={E.M. Clarke and I.A. Draghicescu},
  booktitle   ={Linear Time, Branching Time and Partial Order in Logics and Models for Concurrency},
  key         ={ClDr88},
  keyword     ={hardware specification logic ltl ctl},
  month       ={May/June},
  pages       ={428--437},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Expressibility Results for Linear-Time and Branching-Time Logics},
  volume      ={354},
  year        ={1988}
}
@article{ClDr93,
  author      ={E.M. Clarke and I.A. Draghicescu},
  journal     ={Information Processing Letters},
  key         ={ClDr93},
  month       ={July},
  pages       ={301-308},
  title       ={A unified approach for showing language inclusion and equivalence between various types of $\omega$-automata},
  volume      ={46},
  year        ={1993}
}
@inproceedings{ClES83,
  author      ={E.M. Clarke and E.A. Emerson and A.P. Sistla},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={ClES83},
  title       ={{A}utomatic {V}erification of {F}inite-{S}tate {C}oncurrent {S}ystems {U}sing {T}emporal {L}ogic},
  year        ={1983}
}
@article{ClES86,
  author      ={E.M. Clarke and E.A. Emerson and A.P. Sistla},
  journal     ={ACM Transactions on Programming Languages and Systems},
  key         ={ClES86},
  keyword     ={formalism temporallogic modelchecking fsm hardware verification general},
  month       ={April},
  number      ={2},
  pages       ={244--263},
  title       ={{A}utomatic {V}erification of {F}inite-{S}tate {C}oncurrent {S}ystems {U}sing {T}emporal {L}ogic {S}pecifications},
  volume      ={8},
  year        ={1986}
}
@inproceedings{ClEm81,
  address     ={Yorktown Heights, New York},
  author      ={E.M. Clarke and E.A. Emerson},
  booktitle   ={Workshop on Logics of Programs},
  editor      ={D. Kozen},
  key         ={ClEm81},
  month       ={May},
  pages       ={52--71},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{D}esign and {S}ynthesis of {S}ynchronization {S}keletons using {B}ranching {T}ime {T}emporal {L}ogic},
  volume      ={131},
  year        ={1981}
}
@inproceedings{ClEm81a,
  author      ={E.M. Clarke and E.A. Emerson},
  booktitle   ={International Colloquium on Automata, Languages and Programming (ICALP)},
  key         ={ClEm81a},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{C}haracterizing {P}roperties of {P}arallel {P}rograms as {F}ixpoints},
  volume      ={85},
  year        ={1981}
}
@inproceedings{ClEm81b,
  address     ={Yorktown Heights, New York},
  author      ={E.M. Clarke and E.A. Emerson},
  booktitle   ={Workshop on Logics of Programs},
  key         ={ClEm81b},
  month       ={May},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{S}ynthesis of {S}ynchronization {S}keletons for {B}ranching {T}ime {T}emporal {L}ogic},
  volume      ={131},
  year        ={1981}
}
@inproceedings{ClFJ93,
  author      ={E. M. Clarke and T. Filkorn and S. Jha},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={Courcoubetis},
  key         ={ClFJ93},
  month       ={June/July},
  pages       ={450--462},
  title       ={Exploiting Symmetry in Temporal Logic Model Checking},
  year        ={1993}
}
@techreport{ClFZ95,
  address     ={Pittsburgh, PA 15213},
  author      ={E. Clarke and M. Fujita and X. Zhao},
  institution ={School of Computer Science Carnegie Mellon University},
  key         ={ClFZ95},
  month       ={April},
  number      ={CMU-CS-95-160},
  title       ={Applications of Multi-Terminal Binary Decision Diagrams},
  year        ={1995}
}
@techreport{ClFZ95a,
  author      ={E. Clarke and  M. Fujita and X. Zhao},
  institution ={School of Computer Science, Carnegie Mellon University},
  key         ={ClFZ95a},
  month       ={April},
  note        ={ftp://reports.adm.cs.cmu.edu/usr/anon/1995/CMU-CS-95-159.ps},
  number      ={CMU-CS-95-159},
  title       ={Hybrid Decision Diagrams: Overcoming the Limitations of {MTBDDs} and {BMDs}},
  year        ={1995}
}
@inproceedings{ClGB86,
  address     ={New York},
  author      ={E.M. Clarke and O. Grumberg and M.C. Browne},
  booktitle   ={{ACM} Symposium on Principles of Distributed Computing},
  key         ={ClGB86},
  month       ={August},
  organization={ACM},
  pages       ={240--248},
  title       ={Reasoning About Networks with many Identical Finite-State Processes},
  year        ={1986}
}
@inproceedings{ClGH94,
  author      ={E.M. Clarke and O. Grumberg and K. Hamaguchi},
  booktitle   ={Temporal Logic},
  editor      ={D. Gabbay and H.J. Ohlbach},
  key         ={ClGH94},
  keyword     ={hardware verification general},
  month       ={July},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Artificial Intelligence},
  title       ={Another Look at {LTL} Model Checking},
  year        ={1994}
}
@inproceedings{ClGH94a,
  address     ={Standford, California, USA},
  author      ={E.M. Clarke and O. Grumberg and K. Hamaguchi},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={ClGH94a},
  month       ={June},
  pages       ={415--427},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Another Look at {LTL} Model Checking},
  volume      ={818},
  year        ={1994}
}
@inproceedings{ClGJ95,
  address     ={Philadelphia},
  author      ={E.M. Clarke and O. Grumberg and S. Jha},
  booktitle   ={Conference on Concurrency Theory (CONCUR)},
  key         ={ClGJ95},
  month       ={August},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verifying Parametrized Networks Using Abstraction and Regular Languages},
  year        ={1995}
}
@inproceedings{ClGK89,
  address     ={New York},
  author      ={E.M. Clarke and O. Grumberg and K.P. Kurshan},
  booktitle   ={Symposium on Logical Foundations of Computer Science: Logic at Botik '89},
  key         ={ClGK89},
  month       ={July},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Synthesis of Two Approaches for Verifying Finite State Concurrent Systems},
  volume      ={363},
  year        ={1989}
}
@article{ClGK92,
  author      ={E.M. Clarke and O. Grumberg and R.P. Kurshan},
  journal     ={Journal of Logic and Computation},
  key         ={ClGK92},
  number      ={5},
  pages       ={605-618},
  title       ={A Synthesis of Two Approaches for Verifying State Concurrent Systems},
  volume      ={2},
  year        ={1992}
}
@inproceedings{ClGL92,
  address     ={New York},
  author      ={E. Clarke and O. Grumberg and D. Long},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={ClGL92},
  keyword     ={hardware verification modelchecking abstraction logic},
  month       ={January},
  organization={ACM},
  title       ={{M}odel {C}hecking and {A}bstraction},
  year        ={1992}
}
@inproceedings{ClGL93,
  address     ={Noordwijkerhout, Netherlands},
  author      ={E. Clarke and O. Grumberg and D. Long},
  booktitle   ={A Decade of Concurrency-Reflections and Perspectives},
  editor      ={J.W. de Bakker and W.-P. de Roever and G. Rozenberg},
  key         ={ClGL93},
  keyword     ={hardware verification modelchecking},
  month       ={June},
  organization={REX School/Symposium},
  pages       ={124--175},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{V}erification {T}ools for {F}inite {S}tate {C}oncurrent {S}ystems},
  volume      ={803},
  year        ={1993}
}
@article{ClGL94,
  author      ={E. Clarke and O. Grumberg and D. Long},
  journal     ={{ACM} Transactions on Programming Languages and systems},
  key         ={ClGL94},
  month       ={September},
  number      ={5},
  pages       ={1512--1542},
  title       ={Model Checking and Abstraction},
  volume      ={16},
  year        ={1994}
}
@inproceedings{ClGL96,
  author      ={E.M. Clarke and O. Grumberg and D.E. Long},
  key         ={ClGL96},
  publisher   ={Springer-Verlag},
  series      ={Nato ASI Series F},
  title       ={Model Checking},
  volume      ={152},
  year        ={1996}
}
@inproceedings{ClGZ96,
  address     ={New Brunswick, NJ, USA},
  author      ={E. M. Clarke and S. M. German and X. Zhao},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={ClGZ96},
  month       ={July/August},
  pages       ={111--122},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verifying the {SRT} division algorithm using theorem proving techniques},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{ClGr87,
  address     ={New York},
  author      ={E.M. Clarke and O. Grumberg},
  booktitle   ={{ACM} Symposium on Principles of Distributed Computing},
  key         ={ClGr87},
  month       ={August},
  organization={ACM},
  pages       ={294--303},
  title       ={Avoiding the State Explosion Problem in Temporal Logic Model Checking Algorithms},
  year        ={1987}
}
@inproceedings{ClGr87a,
  address     ={Carnegie Mellon University, Pittsburgh},
  author      ={E.M. Clarke and O. Grumberg},
  booktitle   ={Review of Computer Science},
  key         ={ClGr87a},
  pages       ={269--290},
  title       ={{R}esearch on {A}utomatic {V}erification of {F}inite-{S}tate {C}oncurrent {S}ystems},
  year        ={1987}
}
@inproceedings{ClKZ96,
  author      ={E.M. Clarke and M. Khaira and X. Zhao},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={ClKZ96},
  month       ={June},
  publisher   ={IEEE Computer Society Press},
  title       ={Word level symbolic model checking -- a new approach for verifying arithmetic circuits},
  year        ={1996}
}
@article{ClKu96,
  author      ={E.~M. Clarke and R.~P. Kurshan},
  journal     ={IEEE Spectrum},
  key         ={ClKu96},
  number      ={6},
  pages       ={61--67},
  title       ={Computer-aided verification},
  volume      ={33},
  year        ={1996}
}
@inproceedings{ClLM89a,
  address     ={Washington D.C.},
  author      ={E.M. Clarke and D.E. Long and K.L. McMillan},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={ClLM89a},
  month       ={June},
  pages       ={353--361},
  publisher   ={IEEE Computer Society Press},
  title       ={{C}ompositional {M}odel {C}hecking},
  year        ={1989}
}
@inproceedings{ClLM89b,
  address     ={Amsterdam},
  author      ={E.M. Clarke and D.E. Long and K.L. McMillan},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={J.A. Darringer and F.J. Rammig},
  key         ={ClLM89b},
  pages       ={281--295},
  publisher   ={IFIP North-Holland},
  title       ={{A} {L}anguage for {C}ompositional {S}pecification and {V}erification of {F}inite {S}tate {H}ardware {C}ontrollers},
  year        ={1989}
}
@book{ClMe81,
  address     ={New York},
  author      ={W.F. Clocksin and C.S. Mellish},
  key         ={ClMe81},
  keyword     ={Logic},
  publisher   ={Springer-Verlag},
  title       ={Programming in {PROLOG}},
  year        ={1981}
}
@inproceedings{ClMi84,
  address     ={Berlin},
  author      ={E. M. Clarke and B. Mishra},
  booktitle   ={Workshop on Logics of Programs},
  key         ={ClMi84},
  pages       ={101--105},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Automatic Verification of Asynchronous Circuits},
  volume      ={164},
  year        ={1984}
}
@inproceedings{ClSi96,
  address     ={New Brunswick, NJ, USA},
  author      ={R. Cleaveland and S. Sims},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={ClSi96},
  month       ={July/August},
  pages       ={394--397},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The {NCSU} Concurrency Workbench},
  volume      ={1102},
  year        ={1996}
}
@techreport{ClWi96,
  author      ={E. M. Clarke and J. M. Wing},
  key         ={ClWi96},
  month       ={September},
  note        ={ftp://reports.adm.cs.cmu.edu/usr/anon/1996/CMU-CS-96-178.ps},
  number      ={CMU-CS-96-178},
  title       ={Formal Methods: State of the Art and Future Directions},
  year        ={1996}
}
@techreport{ClZh95,
  address     ={Pittsburgh, PA 15213},
  author      ={E. Clarke and X. Zhao},
  institution ={School of Computer Science, Carnegie Mellon University},
  key         ={ClZh95},
  month       ={May},
  number      ={CMU-CS-95-161},
  title       ={A New Approach for Verifying Arithmetic Circuits},
  year        ={1995}
}
@techreport{ClZh95a,
  author      ={E. Clarke and X. Zhao},
  key         ={ClZh95a},
  month       ={May},
  note        ={ftp://reports.adm.cs.cmu.edu/usr/anon/1995/CMU-CS-95-161.ps},
  number      ={CMU-CS-95-161},
  title       ={Word Level Symbolic Model Checking: A New Approach for Verifying Arithmetic Circuits},
  year        ={1995}
}
@inproceedings{Clae91a,
  address     ={Davis, California},
  author      ={L. Claesen},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Clae91a},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Survey of Hardware Verification in {HOL}},
  year        ={1991}
}
@inproceedings{Clae91b,
  address     ={Davis, California},
  author      ={L. Claesen},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Clae91b},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Program Verification},
  year        ={1991}
}
@inproceedings{Clae93,
  address     ={Ottawa, Canada},
  author      ={L. Claesen},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Clae93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={3--4},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={{BDD}-based Design and Analysis Techniques},
  year        ={1993}
}
@inproceedings{Clar93a,
  address     ={Ottawa, Canada},
  author      ={E.M. Clarke},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Clar93a},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={151--156},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Automatic Verification of Sequential Circuit Designs},
  year        ={1993}
}
@inproceedings{Clar93b,
  address     ={Ottawa, Canada},
  author      ={E.M. Clarke},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Clar93b},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={303--304},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Design Capture},
  year        ={1993}
}
@article{Clea90,
  author      ={R. Cleaveland},
  journal     ={Acta Informatica},
  key         ={Clea90},
  pages       ={725--747},
  title       ={{T}ableaux-{B}ased {M}odel {C}hecking in the {P}ropositional $\mu$-calculus},
  volume      ={27},
  year        ={1990}
}
@inproceedings{Clem96,
  address     ={Oxford},
  author      ={R. T. Clement},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={Clem96},
  month       ={March},
  pages       ={195-213},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{D}ata {R}eification whithout {E}xplicit {A}bstraction {F}unctions},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{CoBM89a,
  address     ={Grenoble, France},
  author      ={O. Coudert and C. Berthet and J.C. Madre},
  booktitle   ={International Workshop on Automatic Verification Methods for Finite State Systems},
  key         ={CoBM89a},
  month       ={June},
  pages       ={365--373},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification of Synchronous Sequential Machines Using Symbolic Execution},
  volume      ={407},
  year        ={1989}
}
@inproceedings{CoBM89b,
  address     ={Leuven, Belgium},
  author      ={O. Coudert and C. Berthet and J.C. Madre},
  booktitle   ={{IFIP} International Workshop on Applied Formal Methods for Correct {VLSI} Design},
  editor      ={L.J.M. Claesen},
  key         ={CoBM89b},
  keyword     ={formalism fsm symbolic_state_traversal BDD},
  month       ={November},
  pages       ={111--128},
  publisher   ={North-Holland},
  title       ={Verification of Sequential Machines Using Boolean Functional Vectors},
  year        ={1989}
}
@inproceedings{CoBM90a,
  author      ={O. Coudert and C. Berthet and J.C. Madre},
  booktitle   ={{IFIP} International Workshop on Applied Formal Methods for Correct {VLSI} Design},
  editor      ={L. Claesen},
  key         ={CoBM90a},
  keyword     ={verification},
  title       ={Verification of sequential machines using boolean functional vectors},
  year        ={1990}
}
@inproceedings{CoBM90b,
  author      ={O. Coudert and C. Berthet and J.C. Madre},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={R. P. Kurshan and E. M. Clarke},
  key         ={CoBM90b},
  month       ={June},
  title       ={Verifying Temporal Properties of Sequential Machines Without Building their State Diagrams},
  year        ={1990}
}
@article{CoBi83,
  author      ={J. Corbin and M. Bidoit},
  journal     ={Information Processing},
  key         ={CoBi83},
  keyword     ={Logic},
  pages       ={909--914},
  title       ={A rehabilitation of {R}obinson's unification algorithm},
  year        ={1983}
}
@inproceedings{CoCo95,
  address     ={Liege, Belgium},
  author      ={P. Cousot and R. Cousot},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={CoCo95},
  month       ={July},
  pages       ={293--308},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Compositional and Inductive semantic definitions in fixpoint, equational, constraint, closure-condition, rule-based and game-theoretic form},
  volume      ={939},
  year        ={1995}
}
@article{CoGo77,
  author      ={R.S. Cohen and A.Y. Gold},
  journal     ={Computer and System Science},
  key         ={CoGo77},
  keyword     ={omega},
  pages       ={169--184},
  title       ={Theory of $\omega$-languages},
  volume      ={15},
  year        ={1977}
}
@article{CoGo78a,
  author      ={R.S. Cohen and A.Y. Gold},
  journal     ={Computer and System Science},
  key         ={CoGo78a},
  keyword     ={omega},
  pages       ={275--300},
  title       ={$\omega$-computations of deterministic pushdown machines},
  volume      ={16},
  year        ={1978}
}
@article{CoGo78b,
  author      ={R.S. Cohen and A.Y. Gold},
  journal     ={Theoretical Computer Science},
  key         ={CoGo78b},
  keyword     ={omega},
  pages       ={1--23},
  title       ={$\omega$-computations on {T}uring machines},
  volume      ={6},
  year        ={1978}
}
@inproceedings{CoHa96,
  address     ={Oxford},
  author      ={J.J. Comuzzi and J.M. Hart},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={CoHa96},
  month       ={March},
  pages       ={557-575},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{P}rogram {S}licing using {W}eakest {P}reconditions},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{CoHe94,
  address     ={Standford, California, USA},
  author      ={B. Cousin and J. Helary},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={CoHe94},
  month       ={June},
  pages       ={364--376},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Performance Improvement of state space Exploration by Regular and Differential Hashing Functions},
  volume      ={818},
  year        ={1994}
}
@inproceedings{CoJa96,
  address     ={Turku, Finland},
  author      ={S. Coupet-Grimal and L. Jakubiec},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={CoJa96},
  month       ={August},
  pages       ={125--140},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Coq and Hardware Verification: A Case Study},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{CoMB91,
  address     ={New York},
  author      ={O. Coudert and J.C. Madre and C. Berthet},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={E.M. Clarke and R.P. Kurshan},
  key         ={CoMB91},
  organization={American Mathematical Society},
  publisher   ={Springer-Verlag},
  series      ={{DIMACS} Series in Discrete Mathematics and Theoretical Computer Science},
  title       ={Verifying Temporal Properties of Sequential Machines without Building their state Diagrams},
  volume      ={3},
  year        ={1991}
}
@techreport{CoMa89,
  address     ={Louvecienne, France},
  author      ={O. Coudert and J.C. Madre},
  institution ={Bull Research Center},
  key         ={CoMa89},
  title       ={Logics over Finite Domain of Interpretation: Proof and Resolution},
  year        ={1989}
}
@inproceedings{CoMa90,
  author      ={O. Coudert and J.C. Madre},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={CoMa90},
  month       ={November},
  publisher   ={{IEEE} Computer Society Press},
  title       ={A Unified Framework for the Formal Verification of Sequential Circuits},
  year        ={1990}
}
@inproceedings{CoMa91,
  author      ={O. Coudert and J.C. Madre},
  booktitle   ={{ACM} International Workshop on Formal Methods in {VLSI} Design},
  key         ={CoMa91},
  keyword     ={verification},
  note        ={Miami},
  title       ={Symbolic computation of the valid states of a sequential machine: algorithms and discussion},
  year        ={1991}
}
@inproceedings{CoPR95,
  address     ={Paris},
  author      ={F. Corno and P. Prinetto and M.S. Reorda},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={CoPR95},
  keyword     ={Application_of_Symbolic_Traversal_Techniques},
  month       ={March},
  pages       ={320--324},
  publisher   ={IEEE Computer Society Press},
  title       ={{U}sing {S}ymbolic {T}echniques to {F}ind the {M}aximum {C}lique in {V}ery {L}arge {S}parse {G}raphs},
  year        ={1995}
}
@article{CoRe77,
  author      ={S.A. Cook and R.A. Reckhow},
  journal     ={Journal of Symbolic Logic},
  key         ={CoRe77},
  number      ={1},
  pages       ={37-50},
  title       ={The Relative Complexity of Propositional Proof Systems},
  volume      ={44},
  year        ={1977}
}
@inproceedings{CoSZ97,
  address     ={Toledo, Spain},
  author      ={F. Corella and R. Shaw and C. Zhang},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={CoSZ97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={A formal proof of absence of deadlock for any acyclic network of {PCI} buses},
  year        ={1997}
}
@inproceedings{CoSy95,
  address     ={Aspen Grove, Utah, USA},
  author      ={G. Collins and D. Syme},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={CoSy95},
  month       ={September},
  pages       ={122--137},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {T}heory of {F}inite {M}aps},
  volume      ={971},
  year        ={1995}
}
@inproceedings{CoVW86,
  author      ={C. Courcoubetis and M. Y. Vardi and P. L. Wolper},
  booktitle   ={{ACM} Symposium on Theory of Computing},
  key         ={CoVW86},
  pages       ={283--294},
  title       ={Reasoning about Fair Concurrent Programs},
  year        ={1986}
}
@incollection{CoYa92,
  author      ={C. Courcoubetis and M. Yannakakis},
  booktitle   ={Formal Methods in System Design},
  chapter     ={1},
  key         ={CoYa92},
  keyword     ={hardware modelling transitionsystem abstraction timing finite-state_system timers verification reachability_analysis shortest_path},
  pages       ={385--415},
  publisher   ={Kluwer Academic Publishers},
  title       ={Minimum and Maximum Delay Problems in Real-Time Systems},
  year        ={1992}
}
@inproceedings{Coch93,
  address     ={Bad Herrenalb},
  author      ={E. Cochlovius},
  booktitle   ={GI/ITG Workshop Formale Methoden zum Entwurf korrekter Systeme},
  editor      ={T. Kropf and R. Kumar and D. Schmid},
  key         ={Coch93},
  keyword     ={1GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={13--24},
  publisher   ={Universit\"{a}t Karlsruhe, Interner Bericht Nr. 10/93},
  title       ={{F}unktionale {S}emantik von {P}ipeline-{P}rozessoren zur {U}ntersuchung von {S}pezifikations- und {I}mplementierungs-{M}odellen},
  year        ={1993}
}
@book{Coel89,
  author      ={D.R. Coelho},
  key         ={Coel89},
  keyword     ={verification},
  publisher   ={Kluwer Academic Publishers},
  title       ={The {VHDL} Handbook},
  year        ={1989}
}
@inproceedings{Cohn87,
  address     ={Boston},
  author      ={A. Cohn},
  booktitle   ={VLSI Specification, Verification and Synthesis},
  editor      ={G. Birtwistle and P.A. Subrahmanyam},
  key         ={Cohn87},
  keyword     ={verification},
  pages       ={27--71},
  publisher   ={Kluwer Academic Publishers},
  title       ={A Proof of Correctness of the {VIPER} Microprocessor: The First Level},
  year        ={1987}
}
@inproceedings{Cohn88,
  author      ={A. Cohn},
  booktitle   ={Current Trends in Hardware Verification and Automated Theorem Proving},
  key         ={Cohn88},
  keyword     ={verification},
  publisher   ={Springer-Verlag},
  title       ={Correctness Properties of the {V}iper Block Model: The Second Level},
  year        ={1988}
}
@article{Cohn89,
  author      ={A. Cohn},
  journal     ={Journal of Automated Reasoning},
  key         ={Cohn89},
  keyword     ={verification},
  number      ={4},
  pages       ={127--139},
  title       ={The Notion of Proof in Hardware Verification},
  volume      ={5},
  year        ={1989}
}
@inproceedings{Coll96,
  address     ={Turku, Finland},
  author      ={G. Collins},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={Coll96},
  month       ={August},
  pages       ={109--124},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Proof Tool Reasoning About Functional Programs},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{Como86,
  author      ={H. Comon},
  booktitle   ={Conference on Automated Deduction (CADE)},
  editor      ={J.Siekmann},
  key         ={Como86},
  keyword     ={Rewrite},
  publisher   ={Springer-Verlag},
  title       ={Sufficient completeness, term rewriting systems and `anti-unification'},
  year        ={1986}
}
@book{Cons86,
  address     ={Englewood Cliffs, New Jersey},
  author      ={R. Constable},
  key         ={Cons86},
  keyword     ={Nuprl HOL},
  publisher   ={Prentice--Hall},
  title       ={{I}mplementing {M}athematics with the {N}uprl {P}roof {D}evelopment {S}ystem},
  year        ={1986}
}
@inproceedings{Cook71,
  author      ={S.A. Cook},
  booktitle   ={{ACM} Symposium on the Theory of Computing},
  key         ={Cook71},
  title       ={{T}he {C}omplexity of {T}heorem {P}roving {P}rocedures},
  year        ={1971}
}
@techreport{Cook86,
  address     ={El Segundo, CA},
  author      ={J.V. Cook},
  institution ={Computer Science Laboratory, The Aerospace Corporation},
  key         ={Cook86},
  month       ={September},
  note        ={Export-controlled},
  number      ={ATR-86(6771)-3},
  title       ={Final {R}eport for the {C/30} {M}icrocode {V}erification {P}roject},
  year        ={1986}
}
@article{Cook92,
  author      ={J. Cooke},
  journal     ={The Computer Journal},
  key         ={Cook92},
  keyword     ={tutorial software verification systemlevel hardware},
  number      ={5},
  pages       ={419--423},
  title       ={Formal Methods - Mathematics, Theory, Recipes or what?},
  volume      ={35},
  year        ={1992}
}
@inproceedings{Core93,
  address     ={Ottawa, Canada},
  author      ={F. Corella},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Core93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={135--142},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Automated high-level verification against clocked algorithmic specification},
  year        ={1993}
}
@article{Core93a,
  author      ={F. Corella},
  journal     ={Journal of Automated Reasoning},
  key         ={Core93a},
  pages       ={79--93},
  title       ={What holds in a context?},
  volume      ={10},
  year        ={1993}
}
@article{Core94,
  author      ={F. Corella},
  journal     ={IEEE Transactions on Computers},
  key         ={Core94},
  keyword     ={microprocessor hardware systemlevel verification registertransferlevel},
  month       ={January},
  number      ={1},
  pages       ={115--117},
  title       ={Automated Verification of Behavioral Equivalence for Microprocessors},
  volume      ={43},
  year        ={1994}
}
@inproceedings{Cull88,
  address     ={Boston},
  author      ={W.J. Cullyer},
  booktitle   ={{VLSI} Specification, Verification, and Synthesis},
  editor      ={G. Birtwistle and P.A. Subrahmanyam},
  key         ={Cull88},
  pages       ={1--26},
  publisher   ={Kluwer Academic Publishers},
  title       ={Implementing Safety Critical Systems: The {VIPER} Microprocessor},
  year        ={1988}
}
@inproceedings{Curz91,
  address     ={Davis, California},
  author      ={P. Curzon},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Curz91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={253--262},
  publisher   ={IEEE Computer Society Press},
  title       ={A Verified Compiler for a Structured Assembly Language},
  year        ={1991}
}
@inproceedings{Curz92,
  address     ={Leuven, Belgium},
  author      ={P. Curzon},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Curz92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={327--346},
  publisher   ={North-Holland},
  title       ={Deriving Correctness Properties of Compiled Code},
  year        ={1992}
}
@inproceedings{Curz94,
  address     ={Malta},
  author      ={P. Curzon},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={Curz94},
  month       ={September},
  pages       ={177--192},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Tracking Design Changes with Formal Verification},
  volume      ={859},
  year        ={1994}
}
@techreport{Curz94a,
  author      ={P. Curzon},
  institution ={University of Cambridge, Computer Laboratory},
  key         ={Curz94a},
  month       ={March},
  number      ={328, 329},
  title       ={The formal verification of the fairisle {ATM} switching element},
  year        ={1994}
}
@inproceedings{Curz95,
  address     ={Aspen Grove, Utah, USA},
  author      ={P. Curzon},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={Curz95},
  month       ={September},
  pages       ={138--153},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{V}irtual {T}heories},
  volume      ={971},
  year        ={1995}
}
@inproceedings{Curz95a,
  address     ={Cambridge University, UK},
  author      ={P. Curzon},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={Curz95a},
  keyword     ={theorem_proving},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={56--70},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{P}roblems encountered in the machine-assisted proof of hardware},
  volume      ={987},
  year        ={1995}
}
@inproceedings{CyLS96,
  address     ={New Brunswick, NJ},
  author      ={D. Cyrluk and P. Lincoln and N. Shankar},
  booktitle   ={Conference on Automated Deduction (CADE)},
  editor      ={M.A. McRobbie and J.K. Slaney},
  key         ={CyLS96},
  month       ={July/August},
  pages       ={463--477},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Artificial Intelligence},
  title       ={On {S}hostak's {D}ecision {P}rocedure for {C}ombinations of {T}heories},
  volume      ={1104},
  year        ={1996}
}
@inproceedings{CyNa94,
  address     ={Standford, California, USA},
  author      ={D. Cyrluk and P. Narendran},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={CyNa94},
  month       ={June},
  pages       ={247--259},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Ground Temporal logic: A Logic for Hardware verification},
  volume      ={818},
  year        ={1994}
}
@inproceedings{CySr95,
  address     ={Austin, Texas},
  author      ={D. Cyrluk and M.K. Srivas},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={CySr95},
  keyword     ={verification},
  month       ={October},
  organization={Stanford/SRI, SRI International},
  title       ={{T}heorem {P}roving: {N}ot an {E}soteric {D}iversion, but the {U}nifying {F}ramework for {I}ndustrial {V}erification},
  year        ={1995}
}
@inproceedings{Cyre93,
  address     ={Ottawa, Canada},
  author      ={W.R. Cyre},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Cyre93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={471--488},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Textual/Graphical Design Concept-Level Synthesis},
  year        ={1993}
}
@article{Cyre94,
  author      ={W.R. Cyre},
  journal     ={IEEE Transactions on Computers},
  key         ={Cyre94},
  keyword     ={hardware gatelevel verification timing realtime},
  month       ={February},
  number      ={2},
  pages       ={186--200},
  title       ={Conceptual Representation of Waveforms for Temporal Reasoning},
  volume      ={43},
  year        ={1994}
}
@techreport{Cyrl93,
  address     ={Menlo Park, CA},
  author      ={D. Cyrluk},
  institution ={Computer Science Laboratory, SRI International},
  key         ={Cyrl93},
  month       ={December},
  number      ={SRI-CSL-93-12},
  title       ={Microprocessor {V}erification in {PVS}: {A} {M}ethodology and {S}imple {E}xample},
  year        ={1993}
}
@inproceedings{Cyrl96,
  address     ={Palo Alto, CA, USA},
  author      ={D. Cyrluk},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={Cyrl96},
  month       ={November},
  pages       ={172--186},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Inverting the abstraction mapping: A methodology for hardware verification},
  volume      ={1166},
  year        ={1996}
}
@proceedings{DAC86,
  key         ={DAC86},
  keyword     ={flowgraph},
  organization={ACM/IEEE},
  title       ={23nd Design Automation Conference},
  year        ={1986}
}
@inproceedings{DDGJ89,
  address     ={REX Workshop, Mook},
  author      ={W. Damm and G. D\"{o}hmen and V. Gerstner and B. Josko},
  booktitle   ={Stepwise Refinement of Distributed Systems},
  editor      ={J.W. de Bakker and W.-P. de Roever and G. Rozenberg},
  key         ={DDGJ89},
  keyword     ={AADL verification temporallogic},
  month       ={May/June},
  pages       ={180--207},
  title       ={Modular Verification of Petri Nets},
  year        ={1989}
}
@inproceedings{DDGK94,
  address     ={Stanford, CA},
  author      ={D. Dams and G. D\"{o}hmen and R. Gerth and P. Kelb and R. Herrmann and H. Pargmann},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  key         ={DDGK94},
  title       ={Design of {VHDL/S} model checker based on adaptive state and data abstraction},
  year        ={1994}
}
@inproceedings{DFOR91,
  address     ={Italy},
  author      ={M. Dalpasso and M. Favalli and P. Olivo and B. Ricc\`{o}},
  booktitle   ={European Test Conference (ETC)},
  key         ={DFOR91},
  organization={Universit\`{a} di Bologna},
  pages       ={181--190},
  title       ={Switch-Level Fault Simulation by Critical-Path Tracing},
  year        ={1991}
}
@inproceedings{DGDH94,
  address     ={Standford, California, USA},
  author      ={D. Dams and R. Gerth and G. Doehmen and R. Herrmann and P. Kelb and H. Pargmann},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={DGDH94},
  month       ={June},
  pages       ={455--467},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Model Checking Using Adaptive State and Data Abstraction},
  volume      ={818},
  year        ={1994}
}
@inproceedings{DKMW92,
  address     ={Santa Clara, California},
  author      ={S. Devadas and K. Keutzer and S. Malik and A. Wang},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={DKMW92},
  keyword     ={hardware verification general asynchronous gatelevel},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={188--195},
  publisher   ={IEEE Computer Society Press},
  title       ={{V}erification of {A}synchronous {I}nterface {C}ircuits with {B}ounded {W}ire {D}elays},
  year        ={1992}
}
@manual{DLMV90,
  key         ={DLMV90},
  keyword     ={hardware verification general},
  month       ={March},
  organization={The Institute of Technology Development, Advanced Microelectronics Devision},
  title       ={Scalable {CMOS} {(SCMOS)} Standard Cell Library (dlmV2.2)},
  year        ={1990}
}
@article{DMNS90,
  author      ={S. Devadas and H.-K.T. Ma and A.R. Newton and A. Sangiovanni-Vincentelli},
  journal     ={IEEE Transactions on Computer-Aided Design},
  key         ={DMNS90},
  keyword     ={hardware gatelevel optimization synthesis},
  month       ={January},
  number      ={1},
  pages       ={8--18},
  title       ={Irredundant Sequential Machines Via Optimal Logic Synthesis},
  volume      ={9},
  year        ={1990}
}
@inproceedings{DPRA90,
  author      ={D. Deschacht and P. Pinede and M. Robert and D. Auvergne},
  booktitle   ={European Design Automation Conference },
  key         ={DPRA90},
  keyword     ={hardware abstraction timing},
  organization={IEEE},
  pages       ={529--533},
  title       ={Path Runner: An Accurate and Fast Timing Analyser},
  year        ={1990}
}
@inproceedings{DSTB94,
  author      ={R. Drechsler and A. Sarabi and M. Theobald and B. Becker and M.A. Perkowski},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden im Systementwurf},
  editor      ={H. Eveking},
  key         ={DSTB94},
  keyword     ={2GI/ITG},
  month       ={March},
  organization={GI/ITG},
  publisher   ={Universit\"{a}t Frankfurt, Interner Bericht Nr. 6/94},
  title       ={{O}rdered {K}ronecker {F}unctional {D}ecision {D}iagrams: {A}n {E}fficient {T}ool for {S}ynthesis and {V}erification},
  year        ={1994}
}
@inproceedings{DaBi94,
  address     ={San Diego, CA},
  author      ={A.J. Daga and W. Birmingham},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={DaBi94},
  keyword     ={timing_analysis},
  month       ={June},
  note        ={ch. 8.4},
  publisher   ={San Diego Convention Center},
  title       ={{T}he {M}inimization and {D}ecomposition of {I}nterface {S}tate {M}achines},
  year        ={1994}
}
@inproceedings{DaBi95,
  address     ={Austin, Texas},
  author      ={A.J. Daga and W. Birmingham},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={DaBi95},
  keyword     ={verification},
  month       ={October},
  organization={Interconnectix, University of Michigan},
  title       ={{A} {S}ymbolic-{S}imulation {A}pproach to the {T}iming {V}erification of {I}nteracting {FSM}s},
  year        ={1995}
}
@incollection{DaDo89,
  author      ={W. Damm and G. D\"{o}hmen},
  booktitle   ={Languages for Parallel Architectures: Design, Semantics and Implementation Models},
  editor      ={J.W. de Bakker},
  key         ={DaDo89},
  pages       ={51--109},
  publisher   ={Wiley \& Sons},
  title       ={{AADL:} A net based Specification Method for Computer Architecture Design},
  year        ={1989}
}
@inproceedings{DaFJ97,
  address     ={Toledo, Spain},
  author      ={J.-M. Daveau and G. {Fernandes Marchioro} and A.A. Jerraya},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={DaFJ97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={{VHDL} generation from {SDL} specification},
  year        ={1997}
}
@article{DaFe91,
  author      ={M. Davis and R. Fechter},
  journal     ={Journal of Logic Computation},
  key         ={DaFe91},
  number      ={4},
  pages       ={431-451},
  title       ={A Free Variable Version of the first-order Predicate Calculus},
  volume      ={1},
  year        ={1991}
}
@article{DaGG97,
  author      ={D. Dams and R. Gerth and O. Grumberg},
  journal     ={ACM Transactions on Programming Languages and Systems (TOPLAS)},
  key         ={DaGG97},
  title       ={Abstract Interpretation of Reactive Systems},
  year        ={1997}
}
@inproceedings{DaGH95,
  address     ={Aarhus, Denmark},
  author      ={W. Damm and O. Grumberg and H. Hungar},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  key         ={DaGH95},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={What if Model Checking Must be Truly Symbolic},
  year        ={1995}
}
@techreport{DaJS92,
  author      ={W. Damm and B. Josko and R. Schl\"{o}r},
  institution ={{OFFIS}},
  key         ={DaJS92},
  month       ={September},
  note        ={OFFIS-1992-1},
  number      ={6128},
  title       ={Linking {VHDL} with formal verification tools: How to generate finite-state models out of {VHDL} designs},
  type        ={{ESPRIT} Project},
  year        ={1992}
}
@inproceedings{DaJS93,
  author      ={W. Damm and B. Josko and R. Schl\"{o}r},
  booktitle   ={European Design Automation Conference },
  key         ={DaJS93},
  organization={IEEE Computer Society},
  publisher   ={IEEE Computer Society Press},
  title       ={A net-based semantics for {VHDL}},
  year        ={1993}
}
@incollection{DaJS94,
  author      ={W. Damm and B. Josko and R. Schl\"{o}r},
  booktitle   ={Specification and Validation Methods for Programming Languages and Systems},
  editor      ={E. B\"{o}rger},
  key         ={DaJS94},
  publisher   ={Oxford University Press},
  title       ={Specification and Verification af {VHDL}-based System-level Hardware-design},
  year        ={1994}
}
@inproceedings{DaJo93,
  address     ={Vancouver, Canada},
  author      ={N. Day and J.J. Joyce},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={DaJo93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={338--352},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={The Semantics of Statecharts in {HOL}},
  volume      ={780},
  year        ={1993}
}
@article{DaMi93,
  author      ={M. Damiani and G. De Micheli},
  journal     ={IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={DaMi93},
  keyword     ={hardware gatelevel specification optimization},
  month       ={March},
  number      ={3},
  pages       ={365--388},
  title       ={Don't Care Set Specifications in Combinational and Synchronous Logic Circuits},
  volume      ={12},
  year        ={1993}
}
@inproceedings{DaPn97,
  address     ={Montreal, Canada},
  author      ={W. Damm and A. Pnueli},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={H. F. Li and D. K. Probst},
  key         ={DaPn97},
  keyword     ={conference},
  month       ={October},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Verifying out-of-order executions},
  year        ={1997}
}
@article{DaPu60,
  author      ={M. Davis and H. Putnam},
  journal     ={Journal of the ACM},
  key         ={DaPu60},
  pages       ={201-215},
  title       ={A computing procedure for quantification theory},
  volume      ={7},
  year        ={1960}
}
@inproceedings{Daeh86,
  address     ={Institut f\"{u}r Theoretische Elektrotechnik, Universit\"{a}t Hannover},
  author      ={W. Daehn},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={Daeh86},
  organization={ACM/IEEE},
  pages       ={334--338},
  title       ={{A} {U}nified {T}reatment of {PLA} {F}aults by {B}oolean {D}ifferences},
  year        ={1986}
}
@misc{Dam94,
  author      ={M. Dam},
  howpublished={Notes for the Sixth Summer School in Logic, Language, and Information},
  key         ={Dam94},
  title       ={Temporal Logic, Automata, and Classical Theories -- An Introduction},
  year        ={1994}
}
@inproceedings{Dami94,
  address     ={Paris},
  author      ={M. Damiani},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={Dami94},
  keyword     ={Synchronous_Finite_State_Machines},
  month       ={February},
  pages       ={192--199},
  publisher   ={IEEE Computer Society Press},
  title       ={{N}ondeterministic {F}inite-{S}tate {M}achines and {S}equential {D}on't {C}ares},
  year        ={1994}
}
@techreport{Damm92,
  address     ={Oldenburg},
  author      ={W. Damm},
  institution ={University of Oldenburg},
  key         ={Damm92},
  title       ={A formal semantics for {VHDL} based on interpreted petri nets},
  year        ={1992}
}
@inproceedings{Darr79,
  address     ={Los Alamitos},
  author      ={J.A. Darringer},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={Darr79},
  month       ={June},
  pages       ={375--381},
  publisher   ={IEEE Computer Society Press},
  title       ={The Application of Program Verification Techniques to Hardware Verification},
  year        ={1979}
}
@mastersthesis{Darw94,
  address     ={Department of Electrical Engineering},
  author      ={M. Darwish},
  key         ={Darw94},
  note        ={MASc Thesis},
  school      ={University of British Columbia},
  title       ={Formal Verification of a 32-Bit Pipelined {RISC} Processor},
  year        ={1994}
}
@article{Dasg85,
  author      ={S. Dasgupta},
  journal     ={IEEE Computer},
  key         ={Dasg85},
  keyword     ={HDL},
  month       ={February},
  pages       ={67--76},
  title       ={Hardware Description Languages in Microprogramming Systems},
  year        ={1985}
}
@inproceedings{Davi93,
  address     ={Ottawa, Canada},
  author      ={K.C Davis},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Davi93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={509--522},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={A Denotational Definition of the {VHDL} Simulation Kernel},
  year        ={1993}
}
@inproceedings{Day92,
  address     ={Leuven, Belgium},
  author      ={N. Day},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Day92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={247--262},
  publisher   ={North-Holland},
  title       ={A Comparison between Statecharts and State Transition Assertions},
  year        ={1992}
}
@techreport{Day93,
  author      ={N. Day},
  institution ={University of British Columbia},
  key         ={Day93},
  number      ={93-35},
  title       ={A Model Checker for Statecharts (Linking {CASE} Tools with Formal Methods},
  type        ={Technical Report},
  year        ={1993}
}
@inproceedings{DeBo95,
  address     ={Lab. ARTEMIS-IMAG, Grenoble University, France},
  author      ={D. D\'{e}harbe and D. Borrione},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={DeBo95},
  keyword     ={vhdl},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={293--310},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{S}emantics of a verification-oriented subset of {VHDL}},
  volume      ={987},
  year        ={1995}
}
@book{DeBr95,
  address     ={Madrid, Spain},
  editor      ={C. {Delgado Kloos} and P.T. Breuer},
  key         ={DeBr95},
  keyword     ={VHDL verification HDL formal_methods circuits system},
  month       ={March},
  publisher   ={Kluwer Academic Publishers},
  series      ={The Kluwer international series in engineering and computer science},
  title       ={Formal Semantics for {VHDL}},
  volume      ={307},
  year        ={1995}
}
@incollection{DeBr95a,
  address     ={Madrid, Spain},
  author      ={C. {Delgado Kloos} and P.T. Breuer},
  booktitle   ={Formal Semantics for {VHDL}},
  chapter     ={0},
  editor      ={C. {Delgado Kloos} and P.T. Breuer},
  key         ={DeBr95a},
  month       ={March},
  publisher   ={Kluwer Academic Publishers},
  series      ={The Kluwer international series in engineering and computer science},
  title       ={Giving Semantics to {VHDL}: an Introduction},
  volume      ={307},
  year        ={1995}
}
@inproceedings{DeDo90,
  address     ={Oxford},
  author      ={C. {Delgado Kloos} and W. Dosch},
  booktitle   ={Workshop on Designing Correct Circuits},
  editor      ={G. Jones and M. Sheeran},
  key         ={DeDo90},
  month       ={September},
  pages       ={212--230},
  publisher   ={Springer-Verlag},
  series      ={Workshop in Computing},
  title       ={Efficient Circuits as Implementations of Non-Strict Functions},
  year        ={1990}
}
@inproceedings{DeDo91,
  author      ={C. {Delgado Kloos} and W. Dosch},
  booktitle   ={Methods of Programming},
  editor      ={M. Broy and M. Wirsing},
  key         ={DeDo91},
  pages       ={217--237},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Transformational Development of Circuits Descriptions for Binary Adders},
  volume      ={544},
  year        ={1991}
}
@inproceedings{DeHa93,
  address     ={Ottawa, Canada},
  author      ={A. Dent and K. Hanna},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={DeHa93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={195--212},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Reasoning About Array Structures Using a Dependently Typed Logic},
  year        ={1993}
}
@inbook{DeJo90,
  author      ={N. Dershowitz and J.-P. Jouannaud},
  booktitle   ={Handbook of Theoretical Computer Science},
  chapter     ={Rewrite Systems},
  editor      ={J. van Leeuwen},
  key         ={DeJo90},
  keyword     ={Rewrite},
  pages       ={245--320},
  publisher   ={Elsevier Science Publishers},
  title       ={Handbook of Theoretical Computer Science},
  year        ={1990}
}
@article{DeKe91,
  author      ={S. Devadas and K. Keutzer},
  journal     ={IEEE Transactions on Computer-Aided Design},
  key         ={DeKe91},
  keyword     ={hardware gatelevel test synthesis},
  month       ={January},
  number      ={1},
  pages       ={39--50},
  title       ={A Unified Approach to the Synthesis of Fully Testable Sequential Machines},
  volume      ={10},
  year        ={1991}
}
@inproceedings{DeMN88,
  author      ={S. Devadas and H.-K.T. Ma and A.R. Newton},
  booktitle   ={{IEEE} Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={DeMN88},
  month       ={June},
  pages       ={713--722},
  title       ={On the Verification of Sequential Machines at Differing Levels of Abstraction},
  year        ={1988}
}
@article{DeMa79,
  author      ={N. Dershowitz and Z. Manna},
  journal     ={Communications of the Association for Computing Machinery},
  key         ={DeMa79},
  keyword     ={Rewrite},
  pages       ={465--476},
  title       ={Proving termination with multiset orderings},
  volume      ={22},
  year        ={1979}
}
@inproceedings{DeMa97,
  address     ={Montreal, Canada},
  author      ={D. Deharb and A. {Martins Moreira}},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={H. F. Li and D. K. Probst},
  key         ={DeMa97},
  keyword     ={conference},
  month       ={October},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Using induction and {BDD}s to model check invariants},
  year        ={1997}
}
@inproceedings{DeOS88,
  address     ={Argonne, Illinois, USA},
  author      ={N. Dershowitz and M. Okada and G. Sivakumar},
  booktitle   ={Conference on Automated Deduction (CADE)},
  key         ={DeOS88},
  keyword     ={Rewrite},
  publisher   ={Springer-Verlag},
  title       ={Canonical conditional rewrite systems},
  year        ={1988}
}
@inproceedings{DePR92,
  address     ={Santa Clara, California},
  author      ={S. Dey and M. Potkonjak and S.G. Rothweiler},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={DePR92},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={504--509},
  publisher   ={IEEE Computer Society Press},
  title       ={{P}erformance {O}ptimization of {S}equential {C}ircuits by {E}liminating {R}etiming {B}ottlenecks},
  year        ={1992}
}
@techreport{DeTa94,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={M. Dehof and S. Tahar},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={DeTa94},
  keyword     ={SFB358 techreport},
  month       ={March},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-1-94.ps.gz},
  number      ={SFB358-C2-1/94},
  title       ={{I}mplementierung des {DLX} {RISC}-{P}rocessors in einer {S}tandardzellen-{E}ntwurfsumgebung},
  year        ={1994}
}
@book{Delg87,
  author      ={C. {Delgado Kloos}},
  key         ={Delg87},
  keyword     ={verification},
  publisher   ={Springer-Verlag},
  title       ={Semantics of Digital Circuits},
  year        ={1987}
}
@inproceedings{Delg87a,
  author      ={C. {Delgado Kloos}},
  booktitle   ={{IEEE}},
  key         ={Delg87a},
  pages       ={319-322},
  title       ={Transformational Development of Digital Circuit Descriptions: A case study},
  year        ={1987}
}
@inproceedings{Delg93,
  address     ={Ottawa, Canada},
  author      ={C. {Delgado Kloos}},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Delg93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={193--194},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Formal Reasoning about Regular Structures},
  year        ={1993}
}
@techreport{Ders83,
  author      ={N. Dershowitz},
  institution ={Aerospace Corporation},
  key         ={Ders83},
  keyword     ={Rewrite},
  number      ={ATR-83(8478)-2},
  title       ={Applications of the Knuth-Bendix completion procedure},
  type        ={Technical Report},
  year        ={1983}
}
@inproceedings{Ders85,
  author      ={N. Dershowitz},
  booktitle   ={Conference on Rewriting Techniques and Applications (RTA)},
  key         ={Ders85},
  keyword     ={Rewrite Methods},
  pages       ={180--224},
  title       ={Termination},
  year        ={1985}
}
@article{Ders87,
  author      ={N. Dershowitz},
  journal     ={Journal of Symbolic Computation},
  key         ={Ders87},
  keyword     ={Rewrite Methods},
  number      ={1},
  pages       ={69--115},
  title       ={Termination of rewriting},
  volume      ={3},
  year        ={1987}
}
@inbook{Ders89,
  author      ={N. Dershowitz},
  chapter     ={Completion and its applications},
  key         ={Ders89},
  keyword     ={Rewrite},
  publisher   ={Academic Press},
  title       ={Resolution of Equations in Algebraic Structures},
  year        ={1989}
}
@article{Derv74,
  author      ={B. Dervisoglu},
  journal     ={IEEE Computer},
  key         ={Derv74},
  keyword     ={HDL},
  month       ={December},
  pages       ={64--66},
  title       ={Hardware Description Languages in {G}reat {B}ritain},
  year        ={1974}
}
@article{Deva91,
  author      ={S. Devadas},
  journal     ={IEEE Transaction of Computer-Aided Design},
  key         ={Deva91},
  keyword     ={hardware gatelevel specification optimization},
  month       ={December},
  number      ={12},
  pages       ={1473--1484},
  title       ={Optimizing Interacting Finite State Machines Using Sequential Don't Cares},
  volume      ={10},
  year        ={1991}
}
@inproceedings{Dhin87,
  address     ={Boston},
  author      ={I. Dhingra},
  booktitle   ={{VLSI} Specification, Verification, and Synthesis},
  editor      ={G. Birtwistle and P.A. Subrahmanyam},
  key         ={Dhin87},
  pages       ={293--322},
  publisher   ={Kluwer Academic Publishers},
  title       ={Formal Validation of an Integrated Circuit Design Methodology},
  year        ={1987}
}
@article{DiCl86,
  author      ={D.L. Dill and E.M. Clarke},
  journal     ={{IEE} Proceedings},
  key         ={DiCl86},
  keyword     ={hardware verification general modelchecking},
  month       ={September},
  number      ={5},
  pages       ={276--282},
  title       ={Automatic Verification of Asynchronous Circuits using Temporal Logic},
  volume      ={133 Part E},
  year        ={1986}
}
@article{DiDu92,
  author      ={D.L. Dietmeyer and J.R. Duely},
  journal     ={IEEE Design \& Test of Computers},
  key         ={DiDu92},
  keyword     ={HDL},
  month       ={September},
  pages       ={71--73},
  title       ={A Digital Systems Design Language {(DDL)}},
  year        ={1992}
}
@inproceedings{DiFi95,
  address     ={Liege, Belgium},
  author      ={J. Dingel and T. Filkorn},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={DiFi95},
  month       ={July},
  pages       ={54--69},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Model checking for infinite state systems using data abstraction, assumption-commitment Style Reasoning and Theorem Proving},
  volume      ={939},
  year        ={1995}
}
@article{DiHa86,
  author      ={V.J. Digricoli and M.C. Harrison},
  journal     ={Journal of the ACM},
  key         ={DiHa86},
  keyword     ={Rewrite},
  pages       ={253--289},
  title       ={Equality-based resolution},
  volume      ={33},
  year        ={1986}
}
@inproceedings{DiNS89,
  author      ={D.L. Dill and S.M. Nowick and R.F. Sproull},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={DiNS89},
  keyword     ={petrinet verification},
  organization={IEEE},
  pages       ={212--216},
  title       ={Automatic Verification of Speed-independent Circuits with Petri Net Specifications},
  year        ={1989}
}
@inproceedings{DiWo95,
  address     ={Liege, Belgium},
  author      ={D. Dill and H. Wong-Toi},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={DiWo95},
  month       ={July},
  pages       ={409--422},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification of real-time systems by successive over and under Approximation},
  volume      ={939},
  year        ={1995}
}
@incollection{Dijk72,
  author      ={E.W. Dijkstra},
  booktitle   ={Structured Programming},
  editor      ={O.-J. Dahl and E.W. Disjkstra and C.A.R. Hoare},
  key         ={Dijk72},
  publisher   ={Academic Press},
  remark      ={On page 6, there is the famous quote: 'Program testing can be used to show the presence of bugs, but never to show their absence!'},
  title       ={{N}otes on {S}tructured {P}rogramming},
  year        ={1972}
}
@book{Dijk76,
  author      ={E.W. Dijkstra},
  key         ={Dijk76},
  publisher   ={Prentice Hall},
  title       ={A Discipline of Programming},
  year        ={1976}
}
@phdthesis{Dill88,
  address     ={Pittsburgh, PA 15213},
  author      ={D.L. Dill},
  key         ={Dill88},
  school      ={Computer Science Department, Carnegie Mellon University},
  title       ={Trace Theory for Automatic Hierarchical Verification of Speed-Independent Circuits},
  year        ={1988}
}
@inproceedings{Dill88a,
  address     ={Cambridge, MA},
  author      ={D.L. Dill},
  booktitle   ={{MIT} Conference on Advanced Research in {VLSI}},
  editor      ={J. Allen and F.T. Leighton},
  key         ={Dill88a},
  publisher   ={MIT Press},
  title       ={Trace Theory for Automatic Hierarchical Verification of Speed-Independent Circuits},
  year        ={1988}
}
@inproceedings{Dill89,
  address     ={Grenoble, France},
  author      ={D.L. Dill},
  booktitle   ={International Workshop on Automatic Verification Methods for Finite State Systems},
  key         ={Dill89},
  pages       ={197--212},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Timing Assumptions and Verification of Finite-State Concurrent Systems},
  volume      ={407},
  year        ={1989}
}
@inproceedings{Dill96,
  address     ={New Brunswick, NJ, USA},
  author      ={D. L. Dill},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={Dill96},
  month       ={July/August},
  pages       ={390--393},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The Murphi Verification System},
  volume      ={1102},
  year        ={1996}
}
@article{Dixo88,
  author      ={P. Dixon},
  journal     ={Minute of The Futurebus and Working Group Meeting},
  key         ={Dixo88},
  month       ={December},
  title       ={Multilevel Cache Architectures},
  year        ={1988}
}
@techreport{DoHP94,
  author      ={G. D\"{o}hmen and R. Herrmann and H. Pargmann},
  institution ={OFFIS},
  key         ={DoHP94},
  title       ={A Case Study for the Generation of a Symbolic Model from {VHDL}},
  year        ={1994}
}
@article{DoHP95,
  author      ={G. D\"{o}hmen and R. Herrmann and H. Pargmann},
  journal     ={Formal Methods in System Design},
  key         ={DoHP95},
  keyword     ={VHDL},
  month       ={August},
  note        ={Kluwer Academic Publishers, ISSN: 0925-9856},
  number      ={1/2},
  title       ={{T}ranslating {VHDL} into {F}unctional {S}ymbolic {F}inite-{S}tate {M}odels},
  volume      ={7},
  year        ={1995}
}
@incollection{DoHe95,
  address     ={Madrid, Spain},
  author      ={G. D\"{o}hmen and R. Herrmann},
  booktitle   ={Formal Semantics for {VHDL}},
  chapter     ={6},
  editor      ={C. {Delgado Kloos} and P.T. Breuer},
  key         ={DoHe95},
  month       ={March},
  pages       ={170--204},
  publisher   ={Kluwer Academic Publishers},
  series      ={The Kluwer international series in engineering and computer science},
  title       ={A Deterministic Finite-State Model for {VHDL}},
  volume      ={307},
  year        ={1995}
}
@incollection{DoHe95a,
  author      ={G. Dohmen and R. Herrmann},
  booktitle   ={Special issue on Formel Methods for System Design on {VHDL} semantics},
  editor      ={D. Borrione},
  key         ={DoHe95a},
  publisher   ={Kluwer Academic Publishers},
  title       ={Translation {VHDL} into Functional Symbolic finite-state models},
  year        ={1995}
}
@inproceedings{Doeh94,
  address     ={Grenoble, France},
  author      ={G. D\"{o}hmen},
  booktitle   ={European Design Automation Conference },
  key         ={Doeh94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={572--577},
  publisher   ={IEEE Computer Society Press},
  title       ={{P}etri {N}ets as {I}ntermediate {R}epresentation between {VHDL} and {S}ymbolic {T}ransition {S}ystems},
  year        ={1994}
}
@inproceedings{Donn88,
  address     ={Glasgow, Scotland},
  author      ={J.T. O'Donnell},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={Donn88},
  keyword     ={verification},
  month       ={July},
  note        ={Donn88},
  organization={IFIP WG 10.2},
  pages       ={309--328},
  publisher   ={North-Holland},
  title       ={Hydra: Hardware Description in a Functional Language using Recursion Equations and High Order Combining Forms},
  year        ={1988}
}
@inproceedings{Dosc94,
  address     ={Universit\"{a}t Koblenz},
  author      ={W. Dosch},
  booktitle   ={Alternative {K}onzepte f\"{u}r {S}prachen und {R}echner},
  editor      ={J. Ebert},
  key         ={Dosc94},
  organization={Workshop GI FG 2.1.4},
  title       ={Algorithmics of Digital Counters},
  year        ={1994}
}
@inproceedings{DrBJ95,
  address     ={Passau},
  author      ={R. Drechsler and B. Becker and A. Jahnke},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden beim Entwurf von Hardwaresystemen},
  editor      ={W. Grass and M. Mutz},
  key         ={DrBJ95},
  keyword     ={3GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={98--107},
  publisher   ={Shaker Verlag},
  series      ={Berichte aus der Informatik},
  title       ={{O}n {V}ariable {O}rdering and {D}ecomposition {T}ype {C}hoice in {OKFDD}s},
  year        ={1995}
}
@inproceedings{DrBR95,
  address     ={Frankfurt, Germany},
  author      ={R. Drechsler and B. Becker and S. Ruppertz},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  key         ={DrBR95},
  month       ={October},
  title       ={{K*BMDs}: a new data structure for verification},
  year        ={1995}
}
@inproceedings{DrBR96,
  address     ={Paris, France},
  author      ={R. Drechsler and B. Becker and S. Ruppertz},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={DrBR96},
  month       ={March},
  pages       ={2--8},
  title       ={A New Data Structure of Verification},
  year        ={1996}
}
@inproceedings{DrBR97,
  address     ={Enschede, The Netherlands},
  author      ={R. Drechsler and B. Becker and S. Ruppertz},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={DrBR97},
  pages       ={4-18},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={Manipulation Algorithms for {K*BMDs}},
  year        ={1997}
}
@inproceedings{DrBT94,
  address     ={Grenoble, France},
  author      ={R. Drechsler and B. Becker and M. Theobald},
  booktitle   ={European Design Automation Conference },
  key         ={DrBT94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={2--7},
  publisher   ={IEEE Computer Society Press},
  title       ={{F}ast {OFDD} based {M}inimization of {F}ixed {P}olarity {R}eed-{M}uller {E}xpressions},
  year        ={1994}
}
@inproceedings{DrBe95,
  address     ={Paris},
  author      ={R. Drechsler and B. Becker},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={DrBe95},
  keyword     ={Combinational_Logic_Synthesis},
  month       ={March},
  pages       ={91--99},
  publisher   ={IEEE Computer Society Press},
  title       ={{S}ympathy: {F}ast {E}xact {M}inimization of {F}ixed {P}olarity {R}eed-{M}uller {E}xpressions for {S}ymmetric {F}unctions},
  year        ={1995}
}
@inproceedings{DrBe95a,
  address     ={Austin, Texas},
  author      ={R. Drechsler and B. Becker},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={DrBe95a},
  keyword     ={verification},
  month       ={October},
  organization={Johann Wolfgang Goethe-Universit\"{a}t, Frankfurt},
  title       ={{D}ynamic {M}inimization of {OKFDD}s},
  year        ={1995}
}
@inproceedings{DsBl95,
  address     ={Liege, Belgium},
  author      ={A. Dsouza and B. Bloom},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={DsBl95},
  month       ={July},
  pages       ={16--30},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Generating {BDD} Models for Process Algebra Terms},
  volume      ={939},
  year        ={1995}
}
@article{DuDi68,
  author      ={J.R. Duely and D.L. Dietmeyer},
  journal     ={IEEE Transactions on Computers},
  key         ={DuDi68},
  keyword     ={HDL DDL},
  month       ={September},
  number      ={9},
  pages       ={850--861},
  title       ={A Digital Systems Design Language {(DDL)}},
  volume      ={C-17},
  year        ={1968}
}
@book{DuKC92,
  author      ={M. Dusfresne and K. Khordoc and E. Cerny},
  key         ={DuKC92},
  keyword     ={VHDL flowgraph verification},
  publisher   ={Klumer},
  title       ={Using Formalized Timing Diagrams in {VHDL} Simulation},
  year        ={1992}
}
@inproceedings{DuKL92,
  author      ={G. Durrieu and K. Kessaci and M. Lemaitre},
  booktitle   ={Workshop on Designing Correct Circuits},
  key         ={DuKL92},
  pages       ={103-118},
  title       ={Transe: An Experimental Transformation Assistant Software for Digital Circuit Design},
  year        ={1992}
}
@inproceedings{DuMi87,
  address     ={Department of Computer Science, University of Manitoba, Winnipeg Canada},
  author      ={G.W. Dueck and D.M. Miller},
  booktitle   ={{IEEE} Symposium on MVL},
  key         ={DuMi87},
  organization={IEEE},
  pages       ={221--226},
  title       ={{A} {D}irect {C}over {MVL} {M}inimization using the {T}runcated {S}um},
  year        ={1987}
}
@inproceedings{Dudz93,
  address     ={Bad Herrenalb},
  author      ={H. Dudziak},
  booktitle   ={GI/ITG Workshop Formale Methoden zum Entwurf korrekter Systeme},
  editor      ={T. Kropf and R. Kumar and D. Schmid},
  key         ={Dudz93},
  keyword     ={1GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={79--80},
  publisher   ={Universit\"{a}t Karlsruhe, Interner Bericht Nr. 10/93},
  title       ={{E}ntwurf und {V}erifikation von zeitoptimalen {M}ehrtaktsystemen},
  year        ={1993}
}
@inproceedings{Dute96,
  address     ={Turku, Finland},
  author      ={B. Dutertre},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={Dute96},
  month       ={August},
  pages       ={141--156},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Elements of Mathematical Analysis in {PVS}},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{DwMo86,
  author      ={C. Dwork and Y. Moses},
  booktitle   ={Conference on Theoretical Aspects of Reasoning about Knowledge},
  editor      ={J. Y. Halpern},
  key         ={DwMo86},
  pages       ={149--170},
  title       ={Knowledge and Common Knowledge in a Byzantine Environment I: Crash Failures},
  year        ={1986}
}
@inproceedings{EBEA97,
  address     ={Enschede, The Netherlands},
  author      ={P. van Eijk and A. Belinfante and H. Eertink and H. Albas},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={EBEA97},
  pages       ={96-111},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={The Term Processor {Kimwitu}},
  year        ={1997}
}
@proceedings{EDAC94,
  address     ={Paris, France},
  key         ={EDAC94},
  month       ={March},
  publisher   ={IEEE Computer Society Press},
  title       ={European Design and Test Conference ({EDTC})},
  year        ={1994}
}
@misc{EDIF87,
  author      ={EDIF},
  key         ={EDIF87},
  month       ={May},
  title       ={Electronic Design Interchange Format, Version 2.00,},
  year        ={1987}
}
@inproceedings{EKPM92,
  address     ={Hamburg},
  author      ={P. Eles and K. Kuchcinski and Z. Peng and M. Minea},
  booktitle   ={European Design Automation Conference },
  key         ={EKPM92},
  keyword     ={VHDL flowgraph synthesis},
  organization={IEEE},
  pages       ={604--609},
  title       ={Compiling {VHDL} into a High-Level Synthesis Design Representation},
  year        ={1992}
}
@article{ELTT65,
  author      ={Y.L. Ershov and I.A. Lavrov and A.D. Taimanov and M.A. Taitslin},
  journal     ={Russ. Math. Survey},
  key         ={ELTT65},
  keyword     ={omega},
  pages       ={35--106},
  title       ={Elementary theories},
  volume      ={20},
  year        ={1965}
}
@article{EMSS92a,
  author      ={E.A. Emerson and A.K. Mok and A.P. Sistla and J. Srinivasan},
  journal     ={Journal of Real-Time Systems},
  key         ={EMSS92a},
  keyword     ={hardware verification modelchecking specification logic realtime},
  pages       ={331--352},
  title       ={{Q}uantitative {T}emporal {R}easoning},
  volume      ={4},
  year        ={1992}
}
@inproceedings{EPPT97,
  address     ={Montreal, Canada},
  author      ={G. Economakos and G. Papakonstantinou and K. Pekmestzi and P. Tsanakas},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={H. F. Li and D. K. Probst},
  key         ={EPPT97},
  keyword     ={conference},
  month       ={October},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Hardware compilation using attribute grammars},
  year        ={1997}
}
@book{EbFT78,
  author      ={H.D. Ebbinghaus and J. Flum and W. Thomas},
  key         ={EbFT78},
  keyword     ={Logic},
  publisher   ={Wissenschaftliche Buchgesellschaft Darmstadt},
  title       ={Einf\"{u}hrung in die mathematische Logik},
  year        ={1978}
}
@inproceedings{EbPe92,
  author      ={J.C. Ebergen and A.M.G. Peeters},
  booktitle   ={Workshop on Designing Correct Circuits},
  key         ={EbPe92},
  pages       ={27-46},
  title       ={Modulo-N Counters: Design and Analysis of Delay Insensitive Circuits},
  year        ={1992}
}
@inproceedings{EcGV94,
  address     ={Grenoble, France},
  author      ={W. Ecker and M. Glesner and A. Vombach},
  booktitle   ={European Design Automation Conference },
  key         ={EcGV94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={624--},
  publisher   ={IEEE Computer Society Press},
  title       ={{P}rotocol {M}erging: {A} {VHDL}-{B}ased {M}ethod for {C}lock {C}ycle {M}inimizing and {P}rotocol {P}reserving {S}cheduling of {IO}-{O}perations},
  year        ={1994}
}
@inproceedings{EcHo93,
  address     ={Santa Clara, California},
  author      ={W. Ecker and M. Hofmeister},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={EcHo93},
  keyword     ={Sequential_Logic_Optimization},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={392--397},
  publisher   ={IEEE Computer Society Press},
  title       ={{S}tate {L}ook {A}head {T}echniques for {C}ycle {O}ptimization of {I}nteracting {F}init {S}tate {M}achines},
  year        ={1993}
}
@inproceedings{EcMa93,
  address     ={Ottawa, Canada},
  author      ={W. Ecker and S. Maerz},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={EcMa93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={491--508},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={System-Level Specification and Design Using {VHDL}: A Case Study},
  year        ={1993}
}
@book{Echt90,
  author      ={K. Echtle},
  key         ={Echt90},
  keyword     ={textbook},
  publisher   ={Springer-Verlag},
  series      ={Studienreihe Informatik},
  title       ={Fehlertoleranzverfahren},
  year        ={1990}
}
@article{Eder85,
  author      ={E. Eder},
  journal     ={Journal of Symbolic Computation},
  key         ={Eder85},
  keyword     ={Logic},
  pages       ={31--46},
  title       ={Properties of substitutions and unifications},
  volume      ={1},
  year        ={1985}
}
@book{Eder91,
  author      ={E. Eder},
  key         ={Eder91},
  keyword     ={Logic},
  publisher   ={Vieweg Verlag},
  title       ={On the relative complexities of first order calculi},
  year        ={1991}
}
@phdthesis{Edwa97,
  author      ={S.A. Edwards},
  key         ={Edwa97},
  note        ={http://ptolemy.eecs.berkeley.edu/papers/97/sedwardsThesis/},
  school      ={University of California, Berkeley},
  title       ={The Specification and Execution of Heterogeneous Reactive Systems},
  year        ={1997}
}
@book{EhMa85,
  author      ={H. Ehrig and B. Mahr},
  key         ={EhMa85},
  keyword     ={Rewrite Methods},
  publisher   ={Springer-Verlag},
  title       ={Fundamentals of algebraic specifications},
  year        ={1985}
}
@article{EhOr67,
  author      ={A. Ehrenfeucht and E. Orlowska},
  journal     ={Bulletin de l'Academie Polonaise des sciences},
  key         ={EhOr67},
  number      ={1},
  pages       ={25-30},
  title       ={Mechanical Proof Procedure for Propositional Calculus},
  volume      ={15},
  year        ={1967}
}
@inproceedings{EiBK96,
  address     ={Turku, Finland},
  author      ={D. Eisenbiegler and C. Blumenroehr and R. Kumar},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={EiBK96},
  month       ={August},
  pages       ={157--172},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Implementation Issues About The Embedding of Existing High LevelSynthesis Algorithms in {HOL}},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{EiHC94,
  address     ={San Jose, California},
  author      ={H.-J. Eikerling and R. Hunstock and R. Camposano},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={EiHC94},
  keyword     ={sequential_optimization},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={707--713},
  publisher   ={IEEE Computer Society Press},
  title       ={{O}ptimization of {H}ierarchical {D}esign {U}sing {P}artitioning and {R}esynthesis},
  year        ={1994}
}
@inproceedings{EiJa94,
  address     ={Bad Herrenalb, Germany},
  author      ={C.A.J. van Eijk and G.L.J.M. Janssen},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={EiJa94},
  keyword     ={tpcd94},
  month       ={September},
  note        ={published 1995},
  pages       ={110--125},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Exploiting Structural Similarities in a {BDD}-Based Verification Method},
  volume      ={901},
  year        ={1994}
}
@inproceedings{EiJe96,
  address     ={Paris, France},
  author      ={C. A. J. van Eijk and J. A. G. Jess},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={EiJe96},
  month       ={March},
  pages       ={9--14},
  publisher   ={{IEEE} Computer Society Press (Los Alamitos, California)},
  title       ={Exploiting Functional Dependencies in Finite State Machine Verification},
  year        ={1996}
}
@inproceedings{EiKu95,
  address     ={Aspen Grove, Utah, USA},
  author      ={D. Eisenbiegler and R. Kumar},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={EiKu95},
  month       ={September},
  pages       ={154--169},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A}n {A}utomata {T}heory {D}edicated {T}owards {F}ormal {C}ircuit {S}ynthesis},
  volume      ={971},
  year        ={1995}
}
@inproceedings{EiKu95a,
  address     ={FZI Karlsruhe, Germany},
  author      ={D. Eisenbieger and R. Kumar},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={EiKu95a},
  keyword     ={formally_verified_synthesis},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={71--83},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{F}ormally embedding existing high level synthesis algorithms},
  volume      ={987},
  year        ={1995}
}
@inproceedings{EiMc95,
  address     ={Liege, Belgium},
  author      ={A. Th. Eiriksson and K. L. McMillan},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={EiMc95},
  month       ={July},
  pages       ={367--380},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Using formal verification/Analysis Methods on the critical path in system design: a case study},
  volume      ={939},
  year        ={1995}
}
@inproceedings{EiSK93a,
  address     ={Vancouver, Canada},
  author      ={D. Eisenbiegler and K. Schneider and R. Kumar},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={EiSK93a},
  keyword     ={SFB358 conference},
  month       ={August},
  organization={University of British Columbia},
  pages       ={99--113},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {F}unctional {A}pproach for {F}ormalizing {R}egular {H}ardware {S}tructures},
  volume      ={780},
  year        ={1993}
}
@techreport{EiSK93b,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={D. Eisenbiegler and K. Schneider and R. Kumar},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={EiSK93b},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/techreports/SFB358-C2-14-93.ps.gz},
  number      ={SFB358-C2-14/93},
  title       ={A Functional Approach for Formalizing Regular Hardware Structures},
  year        ={1993}
}
@techreport{EiSK93c,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={D. Eisenbiegler and K. Schneider and R. Kumar},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={EiSK93c},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-15-93.ps.gz},
  number      ={SFB358-C2-15/93},
  title       ={{E}in funktionaler {A}nsatz zur systematischen {F}ormalisierung regul\"{a}rer {S}chaltungen},
  year        ={1993}
}
@inproceedings{Eike94,
  author      ={H.-J. Eikerling},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden im Systementwurf},
  editor      ={H. Eveking},
  key         ={Eike94},
  keyword     ={2GI/ITG},
  month       ={March},
  organization={GI/ITG},
  publisher   ={Universit\"{a}t Frankfurt, Interner Bericht Nr. 6/94},
  title       ={{E}ntwurfsdarstellung durch {BDD}s f\"{u}r die {R}esynthese},
  year        ={1994}
}
@book{Eile74,
  author      ={S. Eilenberg},
  key         ={Eile74},
  keyword     ={omega},
  publisher   ={Academic Press},
  title       ={Automata, Languages, and Machines},
  year        ={1974}
}
@mastersthesis{Eise93,
  address     ={Karlsruhe},
  author      ={D. Eisenbiegler},
  key         ={Eise93},
  keyword     ={formalism verification SFB358},
  remark      ={betreut von K. Schneider und R. Kumar},
  school      ={Universit\"{a}t Karlsruhe},
  title       ={Ein funktionaler Ansatz zur systematischen Formalisierung regul\"{a}rer Schaltungen},
  year        ={1993}
}
@article{ElRa66,
  author      ={C.C. Elgot and M.O. Rabin},
  journal     ={Journal of Symbolic Logic},
  key         ={ElRa66},
  keyword     ={omega},
  pages       ={169--181},
  title       ={Decidability and undecidability of extensions of second (first) order theories of (generalized) successor},
  volume      ={31},
  year        ={1966}
}
@article{ElWr59,
  author      ={C.C. Elgot and J.B. Wright},
  journal     ={Mich. Math. Journal},
  key         ={ElWr59},
  keyword     ={omega},
  pages       ={65--69},
  title       ={Quantifier elimination in a problem of logical design},
  volume      ={31},
  year        ={1959}
}
@article{Elgo61,
  author      ={C.C. Elgot},
  journal     ={Trans. Amer. Math. Soc.},
  key         ={Elgo61},
  keyword     ={omega},
  pages       ={21--52},
  title       ={Decision problems of finite automata design and related arithmetics},
  volume      ={98},
  year        ={1961}
}
@article{Elmo48,
  author      ={W.C. Elmore},
  journal     ={Journal of Applied Physics},
  key         ={Elmo48},
  keyword     ={hardware abstraction timing},
  month       ={January},
  pages       ={55--63},
  title       ={The Transient Response of Damped Linear Networks with Particular Regard to Wideband Amplifiers},
  volume      ={19},
  year        ={1948}
}
@inproceedings{EmCl81,
  address     ={Berlin},
  author      ={E.A. Emerson and E.M. Clarke},
  booktitle   ={International Colloquium on Automata, Languages and Programming (ICALP)},
  key         ={EmCl81},
  pages       ={169--181},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Characterizing Correctness Properties of Parallel Programs as Fixpoints},
  volume      ={85},
  year        ={1981}
}
@article{EmCl82,
  author      ={E.A. Emerson and E.M. Clarke},
  journal     ={Science of Computer Programming},
  key         ={EmCl82},
  pages       ={241--266},
  title       ={{U}sing {B}ranching-{T}ime {T}emporal {L}ogic to {S}ynthesize {S}ynchronization {S}keletons},
  volume      ={2},
  year        ={1982}
}
@inproceedings{EmHa82,
  address     ={New York},
  author      ={E.A. Emerson and J.Y. Halpern},
  booktitle   ={{ACM} Symposium on Theory of Computing},
  key         ={EmHa82},
  organization={ACM},
  pages       ={169--180},
  title       ={Decision Procedures and Expressiveness in the Temporal Logic of Branching Time},
  year        ={1982}
}
@article{EmHa85,
  author      ={E.A. Emerson and J.Y. Halpern},
  journal     ={Journal of Computer and System Science},
  key         ={EmHa85},
  keyword     ={hardware specification logic ctl},
  pages       ={1--24},
  title       ={Decision Procedures and Expressiveness in the Temporal Logic of Branching Time},
  volume      ={30},
  year        ={1985}
}
@article{EmHa86,
  author      ={E.A. Emerson and J.Y. Halpern},
  journal     ={Journal of the {ACM}},
  key         ={EmHa86},
  keyword     ={hardware verification general omega},
  month       ={January},
  number      ={1},
  pages       ={151--178},
  title       ={''Sometimes'' and ''Not Never'' Revisited: On Branching versus Linear Time Temporal Logic},
  volume      ={33},
  year        ={1986}
}
@inproceedings{EmJP97,
  address     ={Enschede, The Netherlands},
  author      ={E.A. Emerson and S. Jha and D. Peled},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={EmJP97},
  pages       ={19-34},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={Combining Partial Order and Symmetry Reductions},
  year        ={1997}
}
@inproceedings{EmJu88,
  author      ={E.A. Emerson and C.S. Jutla},
  booktitle   ={{IEEE} Symposium on Foundations of Computer Science},
  key         ={EmJu88},
  pages       ={328--337},
  title       ={{T}he {C}omplexity of free {A}utomata and {L}ogics of {P}rograms},
  year        ={1988}
}
@inproceedings{EmJu89,
  author      ={E.A. Emerson and C.S. Jutla},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={EmJu89},
  keyword     ={omega},
  pages       ={333--342},
  title       ={On simultaneously determinizing and complementing $\omega$ automata},
  year        ={1989}
}
@inproceedings{EmLe85,
  address     ={New York},
  author      ={E.A. Emerson and C.-L. Lei},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={EmLe85},
  month       ={January},
  organization={ACM},
  pages       ={84--96},
  title       ={Modalities for Model Checking: Branching Time Strikes Back},
  year        ={1985}
}
@inproceedings{EmLe85a,
  address     ={North-Holland, CA},
  author      ={E.A. Emerson and C.-L. Lei},
  booktitle   ={Hawaii International Conference on System Sciences},
  key         ={EmLe85a},
  organization={Western Periodicals Company},
  pages       ={277--288},
  title       ={Temporal Model Checking under Generalized Fairness Constraints},
  volume      ={1},
  year        ={1985}
}
@inproceedings{EmLe86,
  address     ={Orsay, France},
  author      ={E.A. Emerson and C.-L. Lei},
  booktitle   ={Symposium on Theoretical Aspects of Computer Science},
  editor      ={B.Monien and G.Vidal-Naquet},
  key         ={EmLe86},
  month       ={January},
  pages       ={21--36},
  publisher   ={Springer-Verlag},
  title       ={Temporal Reasoning under Generalized Fairness Constraints},
  year        ={1986}
}
@inproceedings{EmLe86a,
  address     ={Washington, D.C.},
  author      ={E.A. Emerson and C.-L. Lei},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={EmLe86a},
  pages       ={267--278},
  publisher   ={IEEE Computer Society Press},
  title       ={Efficient Model Checking in Fragments of the Propositional Mucalculus},
  year        ={1986}
}
@article{EmLe87,
  author      ={E.A. Emerson and C.-L. Lei},
  journal     ={Science of Computer Programming},
  key         ={EmLe87},
  pages       ={275--306},
  title       ={Modalities for Model Checking: Branching Time Strikes Back},
  volume      ={8},
  year        ={1987}
}
@inproceedings{EmNa96,
  address     ={New Brunswick, NJ, USA},
  author      ={E. A. Emerson and K. S. Namjoshi},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={EmNa96},
  month       ={July/August},
  pages       ={87--98},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Automatic Verification of parameterized Synchronous Systems},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{EmSS89,
  author      ={E.A. Emerson and T. H. Sadler and J. Srinivasan},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={EmSS89},
  pages       ={166--178},
  title       ={Efficient Temporal Reasoning},
  year        ={1989}
}
@article{EmSS92,
  author      ={E.A. Emerson and T. Sadler and J. Srinivasan},
  journal     ={Journal of Logic Computation},
  key         ={EmSS92},
  number      ={2},
  pages       ={173--210},
  title       ={Efficient Temporal Satisfiability},
  volume      ={2},
  year        ={1992}
}
@inproceedings{EmSi84,
  author      ={E.A. Emerson and A.P. Sistla},
  booktitle   ={{ACM} Symposium on Theory of Computing},
  key         ={EmSi84},
  title       ={Deciding branching time logic},
  year        ={1984}
}
@article{EmSi84a,
  author      ={E.A. Emerson and A.P. Sistla},
  journal     ={Information and Control},
  key         ={EmSi84a},
  number      ={3},
  pages       ={175--201},
  title       ={Deciding Full Branching Time Logic},
  volume      ={61},
  year        ={1984}
}
@inproceedings{EmSi93,
  author      ={E. Emerson and A. P. Sistla},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={C. Courcoubetis},
  key         ={EmSi93},
  month       ={June/July},
  title       ={Symmetry and Model Checking},
  year        ={1993}
}
@inproceedings{EmSi95,
  address     ={Liege, Belgium},
  author      ={E. Emerson and A. P. Sistla},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={EmSi95},
  month       ={July},
  pages       ={309--324},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Utilizing symmetry when model checking under fairness assumptions: an automata-theoretic approach},
  volume      ={939},
  year        ={1995}
}
@inproceedings{EmSr88,
  author      ={E.A. Emerson and J. Srinivasan},
  booktitle   ={Linear Time, Branching Time and Partial Order in Logics and Models for Concurrency},
  key         ={EmSr88},
  keyword     ={hardware specification logic ctl},
  pages       ={123--172},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Branching Time Temporal Logic},
  volume      ={354},
  year        ={1988}
}
@article{Emer83,
  author      ={E.A. Emerson},
  journal     ={Theoretical Computer Science},
  key         ={Emer83},
  pages       ={121--130},
  title       ={Alternative Semantics for temporal Logics},
  volume      ={26},
  year        ={1983}
}
@article{Emer84,
  author      ={E.A. Emerson},
  journal     ={Information and Control},
  key         ={Emer84},
  pages       ={175-201},
  title       ={Deciding Full Branching Time Logic},
  volume      ={61},
  year        ={1984}
}
@inproceedings{Emer85,
  address     ={Berlin},
  author      ={E. A. Emerson},
  booktitle   ={Conference on Logics of Programs},
  editor      ={R. Parikh},
  key         ={Emer85},
  pages       ={79--88},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Automata Tableaux, and Temporal Logic},
  volume      ={193},
  year        ={1985}
}
@inproceedings{Emer90,
  address     ={Amsterdam},
  author      ={E.A. Emerson},
  booktitle   ={Handbook of Theoretical Computer Science},
  editor      ={J. van Leeuwen},
  key         ={Emer90},
  keyword     ={hardware verification general},
  pages       ={996-1072},
  publisher   ={Elsevier Science Publishers},
  title       ={{T}emporal and {M}odal {L}ogic},
  volume      ={B},
  year        ={1990}
}
@inbook{Emer90a,
  author      ={E.A. Emerson},
  chapter     ={16},
  key         ={Emer90a},
  keyword     ={hardware verification general},
  publisher   ={Elsevier Science Publishers (Editor: J. van Leeuwen)},
  title       ={Handbook of Theoretical Computer Science},
  year        ={1990}
}
@inbook{Emer90b,
  author      ={E.A. Emerson},
  chapter     ={Temporal and Modal Logics},
  key         ={Emer90b},
  keyword     ={omega},
  publisher   ={North-Holland},
  title       ={Handbook of Theoretical Computer Science},
  volume      ={B},
  year        ={1990}
}
@inbook{Emer90c,
  author      ={E.A. Emerson},
  chapter     ={16},
  key         ={Emer90c},
  keyword     ={textbook tutorial formalism},
  publisher   ={Elsevier Science Publishers},
  title       ={Temporal and Modal Logics},
  year        ={1990}
}
@inproceedings{Emer95,
  address     ={Liege, Belgium},
  author      ={E. A. Emerson},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={Emer95},
  month       ={July},
  pages       ={141},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Methods for mu-calculus Model checking},
  volume      ={939},
  year        ={1995}
}
@inproceedings{EnFM97,
  address     ={Enschede, The Netherlands},
  author      ={A. Engels and L. Feijs and S. Mauw},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={EnFM97},
  pages       ={384-398},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={Test Generation for Intelligent Networks Using Model Checking},
  year        ={1997}
}
@inproceedings{EnFT91,
  address     ={Aalborg, Denmark},
  author      ={R. Enders and T. Filkorn and D. Taubner},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={K.G. Larsen and A. Skou},
  key         ={EnFT91},
  keyword     ={hardware verification modelchecking modelling bdd},
  month       ={July},
  pages       ={203--213},
  publisher   ={Springer-Verlag},
  series      ={Lecture NOtes in Computer Science},
  title       ={{G}enerating {BDD}s for {S}ymbolic {M}odel {C}hecking in {CCS}},
  volume      ={575},
  year        ={1991}
}
@proceedings{EnLS95,
  address     ={Aarhus, Denmark},
  editor      ={U.H. Engberg and K.G. Larsen and A. Skou},
  key         ={EnLS95},
  month       ={May},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Conference on Tools and Algorithms for the Construction and Analysis of Systems ({TACAS})},
  year        ={1995}
}
@inproceedings{Encr95,
  address     ={Lab. MASI/IBP, Paris, France},
  author      ={E. Encrenaz},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={Encr95},
  keyword     ={vhdl},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={328},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {S}ymbolic {R}elation for a {S}ubset of {VHDL}'87 {D}escriptions and its {A}pplication to Symbolic {M}odel {C}hecking},
  volume      ={987},
  year        ={1995}
}
@book{Ende72,
  address     ={New York},
  author      ={H. B. Enderton},
  key         ={Ende72},
  publisher   ={Academic Press},
  title       ={A Mathematical Introduction to Logic},
  year        ={1972}
}
@phdthesis{Engb96,
  address     ={DK 8000 Aarhus C},
  author      ={U. Engberg},
  key         ={Engb96},
  month       ={August},
  school      ={Basic Research in Computer Science (BRICS), University of Aarhus, Denmark},
  title       ={Reasoning in the Temporal Logic of Actions},
  year        ={1996}
}
@inproceedings{ErHe92,
  address     ={Estes Park, Colorado},
  author      ={R. Ernst and J. Henkel},
  booktitle   ={International Workshop on Hardware-Software Codesign},
  key         ={ErHe92},
  title       ={Hardware-Software Codesign of Embedded Controllers Based on Hardware Extraction},
  year        ={1992}
}
@article{Ersh64,
  author      ={Y.L. Ershov},
  journal     ={Algebra i Logica},
  key         ={Ersh64},
  keyword     ={omega},
  pages       ={45--57},
  title       ={Decidability of certain non-elementary theories},
  year        ={1964}
}
@inproceedings{EsKi95,
  address     ={Liege, Belgium},
  author      ={J. Esparza and A. Kiehn},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={EsKi95},
  month       ={July},
  pages       ={353--366},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={On the model checking problem for branching time logics and basic parallel processes},
  volume      ={939},
  year        ={1995}
}
@techreport{Esch89,
  address     ={Karlsruhe},
  author      ={B. Eschermann},
  institution ={Universit\"{a}t Karlsruhe, Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  key         ={Esch89},
  month       ={November},
  title       ={{S}tate {A}ssignment {M}ethods for {S}ynchronous {S}equential {C}ircuits},
  year        ={1989}
}
@book{Esch93,
  author      ={B. Eschermann},
  key         ={Esch93},
  keyword     ={textbook hardware gatelevel synthesis},
  publisher   ={Springer-Verlag},
  title       ={{F}unktionaler {E}ntwurf digitaler {S}chaltungen},
  year        ={1993}
}
@proceedings{Euro92,
  address     ={Hamburg},
  key         ={Euro92},
  keyword     ={HDL VHDL verification},
  organization={IEEE},
  title       ={European Design Automation Conference ({EDAC'92})},
  year        ={1992}
}
@inproceedings{EvMa90,
  author      ={H. Eveking and C. Mai},
  booktitle   ={European Design Automation Conference },
  key         ={EvMa90},
  keyword     ={hardware verification general},
  organization={Institut f\"{u}r Datentechnik, TH Darmstadt},
  pages       ={512--517},
  publisher   ={IEEE Computer Society Press},
  title       ={Formal Verification of Timing Conditions},
  year        ={1990}
}
@inproceedings{Evek85,
  author      ={H. Eveking},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={Koomen/Moto-Oka},
  key         ={Evek85},
  keyword     ={verification},
  pages       ={167--178},
  publisher   ={North-Holland},
  title       ={The application of {CHDL}'s to the abstract specification of hardware},
  year        ={1985}
}
@inproceedings{Evek86a,
  author      ={H. Eveking},
  booktitle   ={EUROMICRO},
  key         ={Evek86a},
  keyword     ={verification},
  pages       ={549--558},
  publisher   ={North-Holland},
  title       ={{SMAX} - A {CONLAN} member language for verifiable hardware descriptions},
  year        ={1986}
}
@inproceedings{Evek86b,
  address     ={Amsterdam},
  author      ={H. Eveking},
  booktitle   ={From {HDL} Descriptions to Guaranteed Correct Circuit Designs},
  editor      ={D. Borrione},
  key         ={Evek86b},
  keyword     ={verification},
  pages       ={229--240},
  publisher   ={North-Holland},
  title       ={Verification, Synthesis and Correctness-Preserving Transformations-Cooperative Approaches to Correct Hardware Design},
  year        ={1986}
}
@inproceedings{Evek86c,
  author      ={H. Eveking},
  booktitle   ={From {HDL} Descriptions to Guaranteed Correct Circuit Designs},
  editor      ={D. Borrione},
  key         ={Evek86c},
  pages       ={229-240},
  publisher   ={North-Holland},
  title       ={Verification, synthesis and correctness-preserving transformations -- cooperative approaches to correct hardware design},
  year        ={1986}
}
@inproceedings{Evek87,
  author      ={H. Eveking},
  booktitle   ={EUROMICRO},
  key         ={Evek87},
  keyword     ={verification},
  pages       ={453--462},
  publisher   ={North-Holland},
  title       ={Formal reasoning about switch-level {MOS} descriptions},
  year        ={1987}
}
@inproceedings{Evek88a,
  author      ={H. Eveking},
  booktitle   ={{IFIP} TC-10 Working Conf. on Design Methodologies for {VLSI} and Computer Architecture},
  key         ={Evek88a},
  keyword     ={verification},
  pages       ={183--202},
  publisher   ={North-Holland},
  title       ={Behavioral consistency between register-transfer and switch-level descriptions},
  year        ={1988}
}
@inproceedings{Evek88b,
  address     ={Glasgow, Scotland},
  author      ={H. Eveking},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={Evek88b},
  keyword     ={verification},
  note        ={IFIP Transactions},
  organization={IFIP WG 10.2 Working Conf.},
  pages       ={253--266},
  publisher   ={North-Holland},
  title       ={How to Design Correct Hardware and Know it},
  year        ={1988}
}
@article{Evek90a,
  author      ={H. Eveking},
  journal     ={International Journal of {VLSI} Design},
  key         ={Evek90a},
  keyword     ={verification},
  pages       ={263--280},
  title       ={Axiomatizing hardware description languages},
  volume      ={2},
  year        ={1990}
}
@inproceedings{Evek90b,
  address     ={Rutgers University, New Jersey},
  author      ={H. Eveking},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  key         ={Evek90b},
  keyword     ={verification},
  pages       ={3--13},
  publisher   ={Springer-Verlag, published 1991},
  title       ={Automatic verification of extensions of hardware descriptions},
  year        ={1990}
}
@book{Evek91,
  author      ={H. Eveking},
  key         ={Evek91},
  publisher   ={Teubner Verlag},
  title       ={Verifikation digitaler Systeme},
  year        ={1991}
}
@inproceedings{Evek91a,
  author      ={H. Eveking},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Borrione and R. Waxman},
  key         ={Evek91a},
  keyword     ={verification},
  note        ={Marseille},
  publisher   ={North-Holland},
  title       ={Experience in designing formally verifiable {HDL}'s},
  year        ={1991}
}
@book{Evek91b,
  address     ={Stuttgart},
  author      ={H. Eveking},
  key         ={Evek91b},
  keyword     ={textbook hardware registertransferlevel verification},
  publisher   ={B.G. Teubner Verlag},
  series      ={Leitf\"{a}den und Mongraphien der Informatik},
  title       ={Verifikation digitaler Systeme},
  year        ={1991}
}
@inproceedings{Evek91c,
  address     ={Marseille},
  author      ={H. Eveking},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Borrione and R. Waxman},
  key         ={Evek91c},
  keyword     ={HDL verification SMAX},
  month       ={April},
  organization={IFIP WG 10.2},
  pages       ={321--334},
  publisher   ={North-Holland},
  title       ={Experience in Designing Formally Verifiable {HDL's}},
  year        ={1991}
}
@inproceedings{Evek93,
  address     ={Bad Herrenalb},
  author      ={H. Eveking},
  booktitle   ={GI/ITG Workshop},
  key         ={Evek93},
  keyword     ={tutorial hardware registertransferlevel verification formalsynthesis 1GI/ITG},
  month       ={March},
  remark      ={Folienkopien},
  title       ={{D}er {E}influss formaler {E}ntwurfsmethoden auf den {E}ntwurfsproze{\ss}},
  year        ={1993}
}
@inproceedings{Evek94,
  address     ={Grenoble, France},
  author      ={H. Eveking},
  booktitle   ={European Design Automation Conference },
  key         ={Evek94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={566--571},
  publisher   ={IEEE Computer Society Press},
  title       ={{(V)HDL}-based {V}erification of {H}eterogeneous {S}ynchronous/{A}synchronous {S}ystems},
  year        ={1994}
}
@inproceedings{FFFH89,
  author      ={S. Finn and M.P. Fourman and M.D. Francis and B. Harris},
  booktitle   ={{IFIP} International Workshop on Applied Formal Methods for Correct {VLSI} Design},
  key         ={FFFH89},
  keyword     ={verification},
  month       ={November},
  note        ={Leuven},
  title       ={Formal System Design - Interactive Synthesis based on Computer Assisted Formal Reasoning},
  year        ={1989}
}
@inproceedings{FFGM97,
  address     ={Enschede, The Netherlands},
  author      ={G. Ferrari and G. Ferro and S. Gnesi and U. Montanari and M. Pistore and G. Ristori},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={FFGM97},
  pages       ={275-290},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={An Automata Based Verification Environment for Mobile Processes},
  year        ={1997}
}
@inproceedings{FGKM96,
  address     ={New Brunswick, NJ, USA},
  author      ={J. -C. Fernandez and H. Garavel and A. Kerbrat and L. Mounier and R. Mateescu and M. Sighireanu},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={FGKM96},
  month       ={July/August},
  pages       ={437--440},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{CADP}: a protocol validation and verification toolbox},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{FJJV96,
  address     ={New Brunswick, NJ, USA},
  author      ={J. C. Fernandez and C. Jard and T. Jeron and G. Viho},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={FJJV96},
  month       ={July/August},
  pages       ={348--359},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Using on-the-fly verification techniques for the generation of test suites},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{FLPP91,
  address     ={Montpellier, France},
  author      ={M.L. Flottes and C. Landrault and S. Paul and S. Pravossoudovitch},
  booktitle   ={European Test Conference (ETC)},
  key         ={FLPP91},
  pages       ={273--281},
  title       ={Mixed Level Automatic Test Pattern Generation for {CMOS} Circuits},
  year        ={1991}
}
@proceedings{FMVD90,
  address     ={Leuven, Belgium},
  editor      ={L. Claesen},
  key         ={FMVD90},
  title       ={International Workshop on Applied Formal Methods for {VLSI} Design},
  year        ={1990}
}
@manual{FSSS94,
  address     ={Munich},
  author      ={T. Filkorn and H. A. Schneider and A. Scholz and A. Strasser and P. Warkentin},
  key         ={FSSS94},
  organization={Siemens AG, TR ZFE BT SE 1-SVE-1},
  title       ={{SVE} User's Guide},
  year        ={1994}
}
@inproceedings{FUKH96,
  address     ={Oxford},
  author      ={C. Fidge and M. Utting and P. Kearney and I. Hayes},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={FUKH96},
  month       ={March},
  pages       ={327-346},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{I}ntegrating {R}eal-{T}ime {S}cheduling {T}heory and {P}rogram {R}efinement},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{FYBS93,
  author      ={E. Felt and G. York and R. Brayton and A. Sangiovanni-Vincentelli},
  booktitle   ={European Design Automation Conference },
  key         ={FYBS93},
  organization={IEEE Computer Society},
  publisher   ={IEEE Computer Society Press},
  title       ={Dynamic Variable Reordering for {BDD} Minimization},
  year        ={1993}
}
@inproceedings{FaLo93,
  address     ={Ottawa, Canada},
  author      ={M. Faci and L. Logrippo},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={FaLo93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={305--312},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Specifying Hardware Systems in {LOTOS}},
  year        ={1993}
}
@techreport{FaMe87,
  address     ={Denmark},
  author      ={M. Fairtlough and M. Mendler},
  institution ={Department of Computer Science, University of Sheffield},
  key         ={FaMe87},
  title       ={An Intuitionistic Modal Logic with Applications to the Formal Verification of Hardware},
  year        ={1987}
}
@incollection{FaMe92,
  author      ={C. Le Faou and J. Mermet},
  booktitle   ={VHDL for Simulation, Synthesis and Formal Proofs of Hardware},
  editor      ={J. Mermet},
  key         ={FaMe92},
  keyword     ={HDL VHDL flowgraph},
  pages       ={291--307},
  publisher   ={Kluwer Academic Publishers},
  title       ={Introducing {CASCADE} control graphs in {VHDL}},
  year        ={1992}
}
@inproceedings{Fay79,
  author      ={M. Fay},
  booktitle   ={Workshop on Automated Deduction},
  key         ={Fay79},
  keyword     ={Logic},
  pages       ={161--167},
  title       ={First-order unification in an equational theory},
  year        ={1979}
}
@inproceedings{FeBD94,
  address     ={Grenoble, France},
  author      ={F.S. Fernandez and P.T. Breuer and C. {Delgado Kloos}},
  booktitle   ={European Design Automation Conference },
  key         ={FeBD94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={512--519},
  publisher   ={IEEE Computer Society Press},
  title       ={{P}roof {T}heory and a {V}alidation {C}ondition {G}enerator for {VHDL}},
  year        ={1994}
}
@inproceedings{FeKu91,
  address     ={Amsterdam},
  author      ={F. Feldbusch and R. Kumar},
  booktitle   ={European Design Automation Conference },
  key         ={FeKu91},
  keyword     ={Formal_Verification_Techniques},
  month       ={February},
  organization={IEEE},
  pages       ={22--27},
  publisher   ={IEEE Computer Society Press},
  title       ={{V}erification of {S}ynthesis {C}ircuits at {R}egister {T}ransfer {L}evel with {F}low {G}raphs},
  year        ={1991}
}
@phdthesis{Feld93,
  address     ={Germany},
  author      ={F. Feldbusch},
  key         ={Feld93},
  keyword     ={flowgraph verification},
  school      ={Universit\"{a}t Karlsruhe},
  title       ={Verifikation von Schaltungsbeschreibungen auf h\"{o}heren Ebenen durch R\"{u}ck\"{u}bersetzung},
  year        ={1993}
}
@inproceedings{FiAY91,
  address     ={Davis, California},
  author      ={G. Fink and M. Archer and L. Yang},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={FiAY91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={286--304},
  publisher   ={IEEE Computer Society Press},
  title       ={{PM}: A Proof Manager for {HOL} and Other Provers},
  year        ={1991}
}
@article{FiFG94,
  author      ={L. Fix and N. Francez and O. Grumberg},
  journal     ={Theoretical Computer Science},
  key         ={FiFG94},
  pages       ={139-179},
  title       ={Program Composition via Unification},
  volume      ={131},
  year        ={1994}
}
@inproceedings{FiFM91,
  address     ={Davis, California},
  author      ={S. Finn and M.P. Fourman and G. Musgrave},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={FiFM91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Interactive Synthesis in {HOL}-Abstract},
  year        ={1991}
}
@article{FiGr94,
  author      ={L. Fix and O. Grumberg},
  journal     ={Journal of Logic and Computation},
  key         ={FiGr94},
  title       ={Verification of Temporal Properties},
  year        ={1994}
}
@inproceedings{FiJo95,
  author      ={Kathryn Fisler and Steven D. Johnson},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and Their Applications (CHDL)},
  key         ={FiJo95},
  month       ={September},
  note        ={CHDL proceedings pp. 493-696 of the ``ACV'95'' held August 29 to September 1, 1995, Chiba, Japan},
  pages       ={669-674},
  publisher   ={IEEE Cat. No. 95TH8102},
  title       ={Integrating Design and Verification Environments Through a Logic Supporting Hardware Diagrams},
  year        ={1995}
}
@inproceedings{FiKU95,
  address     ={Liege, Belgium},
  author      ={C. Fidge and P. Kearney and M. Utting},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={FiKU95},
  month       ={July},
  pages       ={395--408},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Interactively verifying a simple real-time Scheduler},
  volume      ={939},
  year        ={1995}
}
@incollection{FiKu97,
  author      ={K. Fisler and P. Kurshan},
  booktitle   ={Formal Hardware Verification -- Methods and Systems in Comparison},
  edition     ={State of the Art Report},
  editor      ={T. Kropf},
  key         ={FiKu97},
  keyword     ={book lncs1287},
  month       ={August},
  pages       ={206--247},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verifying {VHDL} Designs with {COSPAN}},
  volume      ={1287},
  year        ={1997}
}
@article{FiLa79,
  author      ={M. Fisher and R. Ladner},
  journal     ={Journal of Computer and System Sciences},
  key         ={FiLa79},
  keyword     ={omega},
  number      ={2},
  pages       ={194--211},
  title       ={Propositional Dynamic Logic of Regular Programs},
  volume      ={18},
  year        ={1979}
}
@inproceedings{FiSc94,
  address     ={L\"{u}beck, Germany},
  author      ={L. Fix and F.B. Schneider},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={FiSc94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={1--18},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{H}ybrid {V}erification by {E}xploiting the {E}nvironment},
  volume      ={863},
  year        ={1994}
}
@inproceedings{Filk91,
  author      ={T. Filkorn},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Borrione and R. Waxman},
  key         ={Filk91},
  note        ={Marseille},
  pages       ={229-239},
  publisher   ={North-Holland},
  title       ={{A} {M}ethod for {S}ymbolic {V}erification of {S}ynchronous {C}ircuits},
  year        ={1991}
}
@inproceedings{Filk91a,
  address     ={Aalborg},
  author      ={T. Filkorn},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={K.G. Larsen and A. Skou},
  key         ={Filk91a},
  keyword     ={formalism temporallogic modelchecking},
  month       ={June},
  pages       ={291--300},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Functional Extension of Symbolic Model Checking},
  year        ={1991}
}
@inproceedings{Filk91b,
  address     ={Marseille},
  author      ={T. Filkorn},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Borrione and R. Waxman},
  key         ={Filk91b},
  keyword     ={formalism temporallogic modelchecking hardware gatelevel verification cve},
  month       ={April},
  pages       ={249--259},
  publisher   ={North-Holland},
  series      ={IFIP WG 10.2},
  title       ={A Method for Symbolic Verification of Synchronous Circuits},
  year        ={1991}
}
@inproceedings{Filk91c,
  author      ={T. Filkorn},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={K.G. Larsen and A. Skou},
  key         ={Filk91c},
  month       ={July},
  title       ={Functional Extension of Symbolic Model Checking},
  year        ={1991}
}
@inproceedings{Fisl94,
  address     ={Bad Herrenalb, Germany},
  author      ={K. Fisler},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={Fisl94},
  keyword     ={tpcd94},
  month       ={September},
  note        ={published 1995},
  pages       ={298},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Extending Formal Reasoning with Support for Hardware Diagrams},
  volume      ={901},
  year        ={1994}
}
@techreport{Fisl95,
  author      ={Kathryn Fisler},
  institution ={Indiana University Computer Science Department},
  key         ={Fisl95},
  month       ={September},
  number      ={416},
  title       ={A logical formalization of hardware design diagrams},
  type        ={Technical Report},
  year        ={1995}
}
@incollection{Fisl96,
  author      ={Kathryn Fisler},
  booktitle   ={Logical Reasoning with Diagrams},
  editor      ={Gerard Allwein and Jon Barwise},
  key         ={Fisl96},
  note        ={In press},
  publisher   ={Oxford University Press},
  title       ={Exploiting the Potential of Diagrams in Guiding Hardware Reasoning},
  year        ={1996}
}
@book{Fitt83,
  author      ={M. Fitting},
  key         ={Fitt83},
  publisher   ={Reidel Publishing Company},
  title       ={Proof Methods for Modal and Intuitionistic Logic},
  year        ={1983}
}
@article{Fitt88,
  author      ={M. Fitting},
  journal     ={Journal of Automated Reasoning},
  key         ={Fitt88},
  pages       ={191-213},
  title       ={First-Order Modal Tableaux},
  volume      ={4},
  year        ={1988}
}
@article{Fitt89,
  author      ={M. Fitting},
  journal     ={Journal of Philosophical Logic},
  key         ={Fitt89},
  month       ={August},
  number      ={3},
  pages       ={225--256},
  title       ={Bilattices and the Theory of Truth},
  volume      ={18},
  year        ={1989}
}
@book{Fitt90,
  author      ={M. Fitting},
  key         ={Fitt90},
  keyword     ={formalism firstorderlogic textbook},
  publisher   ={Springer-Verlag},
  series      ={Texts and Monographs in Computer Science},
  title       ={First-Order Logic and Automated Theorem Proving},
  year        ={1990}
}
@article{Fitt91,
  author      ={M. Fitting},
  journal     ={The Journal of Logic Programming},
  key         ={Fitt91},
  month       ={August},
  number      ={2},
  pages       ={91--116},
  title       ={Bilattices and the Semantics of Logic Programming},
  volume      ={11},
  year        ={1991}
}
@inproceedings{FlLP90,
  author      ={M.L. Flottes and C. Landrault and S. Pravossoudovitch},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={FlLP90},
  organization={IEEE},
  pages       ={407--412},
  title       ={Fault Modelling and Fault Equivalence in {CMOS} Technologie},
  year        ={1990}
}
@inproceedings{FlOl97,
  address     ={Grenoble, France},
  author      ={J.M. Flaus and G. Ollagnon},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={FlOl97},
  pages       ={213-227},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Hybrid Flow Nets for Hybrid Processes Modeling and Control},
  year        ={1997}
}
@inproceedings{Floy67,
  author      ={R.W. Floyd},
  booktitle   ={Symposia in Applied Mathematics: Mathematical Aspects of Computer Science},
  key         ={Floy67},
  pages       ={19--31},
  title       ={Assigning Meaning to Programs},
  volume      ={19},
  year        ={1967}
}
@inproceedings{FoHa89,
  author      ={M. P. Fourman and R. L. Harris},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={FoHa89},
  publisher   ={{ACM}},
  title       ={Lambda -- Logic and mathematics behind design automation},
  year        ={1989}
}
@inproceedings{FoHa96,
  address     ={Palo Alto, CA, USA},
  author      ={A. C. J. Fox and N. A. Harman},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={FoHa96},
  month       ={November},
  pages       ={346--361},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={An algebraic model of correctness for superscalar microprocessors},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{FoMa90,
  author      ={M.P. Fourman and E.M. Mayger},
  booktitle   ={International Conference on Very Large Scale Integration (VLSI)},
  editor      ={G. Musgrave and U. Lauter},
  key         ={FoMa90},
  pages       ={101--112},
  publisher   ={Elsevier Science Publishers (North-Holland)},
  title       ={Formally {B}ased {S}ystem {D}esign - {I}nteractive Hardware Scheduling},
  year        ={1990}
}
@book{Foel82,
  address     ={Frankfurt},
  author      ={O. F\"{o}llinger},
  edition     ={3},
  key         ={Foel82},
  publisher   ={AEG-Telefunken AG},
  title       ={{L}aplace- und {F}ourier-{T}ransformation},
  year        ={1982}
}
@inproceedings{Fors94,
  address     ={Malta},
  author      ={T. Forster},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={Fors94},
  month       ={September},
  pages       ={193--204},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Invited paper: Weak Systems of Set Theory Related to {HOL}},
  volume      ={859},
  year        ={1994}
}
@inproceedings{Four90,
  author      ={M.P. Fourman},
  booktitle   ={{ACM} International Workshop on Formal Methods in {VLSI} Design},
  editor      ={J. Staunstrup},
  key         ={Four90},
  keyword     ={hardware algorithmiclevel formalsynthesis},
  pages       ={191--236},
  publisher   ={North-Holland/Elsevier},
  title       ={Formal System Design},
  year        ={1990}
}
@inproceedings{FrEs91,
  author      ={J. Fr\"{o}{\ss}l and B. Eschermann},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={FrEs91},
  keyword     ={SFB358 conference},
  month       ={October},
  pages       ={26--29},
  title       ={Module Generation for {AND/EXOR}-Fields {(XPLAs)}},
  year        ={1991}
}
@inproceedings{FrGK95,
  address     ={Washington, Seattle},
  author      ={J. Fr\"{o}{\ss}l and J. Gerlach and T. Kropf},
  booktitle   ={{ACM} International Workshop on Timing Issues in the Specification and Synthesis of Digital Systems (TAU)},
  key         ={FrGK95},
  keyword     ={SFB358 workshop},
  month       ={November},
  title       ={{S}ymbol {M}odel {C}hecking for {R}eal-{T}ime {C}ircuits and {S}pecifications},
  year        ={1995}
}
@inproceedings{FrGK96,
  address     ={Paris, France},
  author      ={J. Fr\"{o}{\ss}l and J. Gerlach and T. Kropf},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={FrGK96},
  keyword     ={SFB358 conference},
  month       ={March},
  pages       ={15--21},
  publisher   ={{IEEE} Computer Society Press (Los Alamitos, California)},
  title       ={{A}n {E}fficient {A}lgorithm for {R}eal-{T}ime {M}odel {C}hecking},
  year        ={1996}
}
@inproceedings{FrKS96,
  author      ={J. Fr\"{o}{\ss}l and T. Kropf and K. Schneider},
  booktitle   ={GI/ITG/GME Workshop Methoden des Entwurfs und der Verifikation digitaler Systeme},
  editor      ={B. Straube and J. Schoenherr},
  key         ={FrKS96},
  keyword     ={SFB358 Workshop 4. GI/ITG/GME},
  month       ={March},
  pages       ={31--40},
  publisher   ={Shaker Verlag},
  title       ={Bewertung temporaler {Logiken} in der {Hardware}-{Verifikation}},
  year        ={1996}
}
@techreport{FrKS96a,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={J. Fr\"{o}{\ss}l and T. Kropf and K. Schneider},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={FrKS96a},
  keyword     ={SFB358 verification techreport},
  month       ={January},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-4-96.ps.gz},
  number      ={SFB358-C2-4/96},
  title       ={{E}insatz temporaler {L}ogik in der {H}ardwareverifikation},
  year        ={1996}
}
@inproceedings{FrKo84,
  author      ={N. Francez and D. Kozen},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={FrKo84},
  pages       ={46--53},
  title       ={Generalized Fair Termination},
  year        ={1984}
}
@inproceedings{FrKr93a,
  address     ={La Grande Motte, France},
  author      ={J. Fr\"{o}{\ss}l and T. Kropf},
  booktitle   ={International Workshop on Power and Timing Modelling and Optimization (PATMOS93)},
  key         ={FrKr93a},
  keyword     ={SFB358 conference},
  pages       ={86--99},
  title       ={{A} unified {M}odel for the {B}oolean and {T}iming {B}ehavior of {MOS} {T}ransistor {C}ircuits},
  year        ={1993}
}
@techreport{FrKr93b,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={J. Fr\"{o}{\ss}l and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={FrKr93b},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-5-93.ps.gz},
  number      ={SFB358-C2-5/93},
  title       ={A unified Model for the Boolean and Timing Behavior of {MOS} Transistor Circuits},
  year        ={1993}
}
@inproceedings{FrKr94a,
  author      ={J. Fr\"{o}{\ss}l and T. Kropf},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={FrKr94a},
  keyword     ={SFB358 hardware abstraction timing logic conference},
  pages       ={343--348},
  title       ={{A} {N}ew {M}odel to {U}niformly {R}epresent the {F}unction and {T}iming of {MOS} {T}ransistor {C}ircuits and its {A}pplication to {VHDL} {S}imulation},
  year        ={1994}
}
@inproceedings{FrKr94b,
  author      ={J. Fr\"{o}{\ss}l and T. Kropf},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden im Systementwurf},
  key         ={FrKr94b},
  keyword     ={SFB358 hardware verification general workshop},
  month       ={March},
  organization={GI/ITG},
  publisher   ={Universit\"{a}t Frankfurt, Interner Bericht Nr. 6/94},
  title       ={Verifikation des {Z}eitverhaltens von {MOS}-{T}ransistor-{S}chaltungen durch {M}odel {C}hecking},
  year        ={1994}
}
@techreport{FrKr94c,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={J. Fr\"{o}{\ss}l and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={FrKr94c},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-2-94.ps.gz},
  number      ={SFB358-C2-2/94},
  title       ={A New Model to Uniformly Represent the Function and Timing of {MOS} Transistor Circuits and its Application to {VHDL} Simulation},
  year        ={1994}
}
@techreport{FrKr94d,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={J. Fr\"{o}{\ss}l and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={FrKr94d},
  keyword     ={SFB358 hardware verification general techreport},
  number      ={SFB358-C2-3/94},
  title       ={Verifikation des {Z}eitverhaltens von {MOS}-{T}ransistor-{S}chaltungen durch {M}odel {C}hecking},
  year        ={1994}
}
@techreport{FrKr94e,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={J. Fr\"{o}{\ss}l and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={FrKr94e},
  keyword     ={SFB358 techreport},
  month       ={October},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-12-94.ps.gz},
  number      ={SFB358-C2-12/94},
  title       ={Layout-driven {F}ormal {V}erification of {MOS} {T}ransistor {C}ircuits},
  year        ={1994}
}
@inproceedings{FrKr95a,
  address     ={Paris},
  author      ={J. Fr\"{o}{\ss}l and T. Kropf},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={FrKr95a},
  keyword     ={SFB358 Application_of_Symbolic_Traversal_Techniques conference},
  month       ={March},
  pages       ={314--319},
  publisher   ={IEEE Computer Society Press},
  title       ={{V}erifying {R}eal-{T}ime {P}roperties of {MOS}-{T}ransistor {C}ircuits},
  year        ={1995}
}
@inproceedings{FrKr95b,
  address     ={Technical University Ilmenau},
  author      ={J. Fr\"{o}{\ss}l and T. Kropf},
  booktitle   ={International Scientific Kolloquium},
  key         ={FrKr95b},
  keyword     ={SFB358},
  title       ={{L}ayoutabh\"{a}ngige formale {V}erifikation von {MOS}-{T}ransistorschaltungen durch {M}odel-{C}hecking},
  year        ={1995}
}
@inproceedings{FrLa96,
  address     ={Oxford},
  author      ={R. B. Fr\"{o}hlich and P.G. Larsen},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={FrLa96},
  month       ={March},
  pages       ={179-194},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{C}ombining {VDM}-{SL} {S}pecifications with {C}++ {C}ode},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{FrSu90,
  author      ={S.J. Friedman and K.J. Supowit},
  booktitle   ={{IEEE} Transaction on Computers},
  key         ={FrSu90},
  pages       ={710--713},
  title       ={Finding the optimal variable ordering for binary decision diagrams},
  volume      ={39},
  year        ={1990}
}
@misc{Fram92,
  howpublished={Reference Manual},
  key         ={Fram92},
  month       ={February},
  title       ={{CADENCE} {Design} {Framework} {II} Version 4.2a},
  year        ={1992}
}
@book{Fran87,
  address     ={New York},
  author      ={N. Francez},
  key         ={Fran87},
  keyword     ={omega},
  publisher   ={Springer-Verlag},
  title       ={Fairness},
  year        ={1987}
}
@inproceedings{Frib84,
  author      ={L. Fribourg},
  booktitle   ={Conference on Automated Deduction (CADE)},
  key         ={Frib84},
  keyword     ={Rewrite},
  pages       ={259--281},
  publisher   ={Springer-Verlag},
  title       ={A narrowing procedure for theories with constructors},
  year        ={1984}
}
@inproceedings{Frib86,
  author      ={L. Fribourg},
  booktitle   ={International Colloquium on Automata, Languages and Programming (ICALP)},
  key         ={Frib86},
  keyword     ={Rewrite Methods},
  pages       ={105--115},
  title       ={A strong restriction of the inductive completion procedure},
  year        ={1986}
}
@article{Frib89,
  author      ={L. Fribourg},
  journal     ={Journal of Symbolic Computation},
  key         ={Frib89},
  keyword     ={Rewrite Methods},
  number      ={3},
  pages       ={253--276},
  title       ={A strong restriction of the inductive completion procedure},
  volume      ={8},
  year        ={1989}
}
@book{Froe96,
  author      ={J. Fr\"{o}{\ss}l},
  key         ={Froe96},
  keyword     ={SFB358 book},
  note        ={ISBN 3-8265-1400-9},
  publisher   ={{S}haker {V}erlag},
  series      ={Informatik},
  title       ={{F}ormale {V}erifikation von {MOS}-{T}ransistorschaltungen},
  year        ={1996}
}
@inproceedings{FuFK88,
  author      ={M. Fujita and H. Fujisawa and N. Kawato},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={FuFK88},
  keyword     ={hardware gatelevel verification formalism propositionallogic BDD},
  pages       ={2--5},
  publisher   ={{IEEE} Computer Society Press},
  title       ={Evaluation and Improvements of Boolean Comparison Method Based on Binary Decision Diagrams},
  year        ={1988}
}
@article{FuFM93,
  author      ={M. Fujita and H. Fujisawa and Y. Matsunaga},
  journal     ={IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={FuFM93},
  keyword     ={formalism propositionallogic BDD},
  month       ={January},
  number      ={1},
  pages       ={6--12},
  title       ={Variable Ordering Algorithms for Ordered Binary Decision Diagrams and Their Evaluation},
  volume      ={12},
  year        ={1993}
}
@inproceedings{FuFu88,
  author      ={M. Fujita and H. Fujisawa},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={FuFu88},
  pages       ={2-5},
  title       ={{E}valuation and {I}mprovements of {B}oolean {C}omparison {M}ethod {B}ased on {B}inary {D}ecision {D}iagrams},
  year        ={1988}
}
@inproceedings{FuFu89,
  address     ={Washington},
  author      ={M. Fujita and H. Fujisawa},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={J.A. Darringer and F.J. Rammig},
  key         ={FuFu89},
  keyword     ={formalism temporallogic ltl hardware gatelevel verification},
  month       ={June},
  organization={IFIP WG 10.2},
  pages       ={265--279},
  publisher   ={North-Holland},
  title       ={Specification, Verification and Synthesis of Control Circuits with Propositional Temporal Logic},
  year        ={1989}
}
@inproceedings{FuMK90,
  address     ={Kawasaki 211, Japan},
  author      ={M. Fujita and Y. Matsunaga and T. Kakuda},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={FuMK90},
  keyword     ={hardware verification general transistorlevel abstraction logic switchlevel},
  organization={Fujitsu Laboratories Ltd.},
  pages       ={38--41},
  title       ={Automatic and Semi-Automatic Verification of Switch-Level Circuits with Temporal Logic And Binary Decision Diagrams},
  year        ={1990}
}
@inproceedings{FuMK91,
  address     ={Amsterdam},
  author      ={M. Fujita and Y. Matsunaga and T. Kakuda},
  booktitle   ={European Design Automation Conference },
  key         ={FuMK91},
  keyword     ={Logic_Synthesis},
  month       ={February},
  organization={IEEE},
  pages       ={50--54},
  publisher   ={IEEE Computer Society Press},
  title       ={{O}n {V}ariable {O}rdering of {B}inary {D}ecision {D}iagrams for the {A}pplication of {M}ulti-{L}evel {L}ogic {S}ynthesis},
  year        ={1991}
}
@incollection{FuMe95,
  address     ={Madrid, Spain},
  author      ={M. Fuchs and M. Mendler},
  booktitle   ={Formal Semantics for {VHDL}},
  chapter     ={1},
  editor      ={C. {Delgado Kloos} and P.T. Breuer},
  key         ={FuMe95},
  month       ={March},
  publisher   ={Kluwer Academic Publishers},
  series      ={The Kluwer international series in engineering and computer science},
  title       ={A Functional Semantics for Delta-Delay {VHDL} Based on Focus},
  volume      ={307},
  year        ={1995}
}
@inproceedings{FuOH93,
  address     ={Santa Clara, California},
  author      ={H. Fujii and G. Ootomo and C. Hori},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={FuOH93},
  keyword     ={BDD},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={38--41},
  publisher   ={IEEE Computer Society Press},
  title       ={{I}nterleaving {B}ased {V}ariable {O}rdering {M}ethods for {O}rdered {B}inary {D}ecision {D}iagrams},
  year        ={1993}
}
@inproceedings{FuSo94,
  address     ={Malta},
  author      ={D.A. Fura and A.K. Somani},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={FuSo94},
  month       ={September},
  pages       ={205--220},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Interval-Semantic Component Models and the Efficient Verification of Transaction-Level Circuit Behavior},
  volume      ={859},
  year        ={1994}
}
@inproceedings{FuSt95,
  address     ={Passau},
  author      ={M. Fuchs and K. Stolen},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden beim Entwurf von Hardwaresystemen},
  editor      ={W. Grass and M. Mutz},
  key         ={FuSt95},
  keyword     ={3GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={126--135},
  publisher   ={Shaker Verlag},
  series      ={Berichte aus der Informatik},
  title       ={{D}evelopment of a {D}istributed {M}in/{M}ax {C}omponent},
  year        ={1995}
}
@inproceedings{FuTM83,
  address     ={Amsterdam},
  author      ={M. Fujita and H. Tanaka and T. Moto-oka},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={T. Uehara and M. Barbacci},
  key         ={FuTM83},
  organization={IFIP},
  pages       ={103--114},
  publisher   ={North-Holland},
  title       ={Verification with Prolog and Temporal Logic},
  year        ={1983}
}
@inproceedings{FuTM83a,
  address     ={Amsterdam},
  author      ={M. Fujita and H. Tanaka and T. Moto-oka},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C.J. Koomen and T. Moto-oka},
  key         ={FuTM83a},
  organization={IFIP},
  pages       ={129--138},
  publisher   ={North-Holland},
  title       ={Logic Design Assistance with Temporal Logic},
  year        ={1983}
}
@inproceedings{FuWS93,
  address     ={Vancouver, Canada},
  author      ={D.A. Fura and P.J. Windley and A.K. Somani},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={FuWS93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={267--281},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Abstraction Techniques for Modeling Real-World Interface Chips},
  volume      ={780},
  year        ={1993}
}
@inproceedings{Fuch96,
  address     ={Kreischa},
  author      ={Max Fuchs},
  booktitle   ={GI/ITG/GME Workshop Methoden des Entwurfs und der Verifikation Digitaler Systeme},
  editor      ={Bernd straube and Jens Schoenherr},
  key         ={Fuch96},
  keyword     ={4. GI/ITG/GME},
  month       ={March},
  organization={GI/ITG/GME},
  pages       ={1--10},
  publisher   ={Shaker Verlag, Aachen},
  series      ={Berichte aus der Informatik},
  title       ={Formal Design of a Modulo-N Counter},
  year        ={1996}
}
@inproceedings{Fuji92,
  author      ={M. Fujita},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={Fuji92},
  month       ={October},
  publisher   ={{IEEE} Computer Society Press},
  title       ={{RTL} Design Verification by Making Use of Datapath Information},
  year        ={1992}
}
@inproceedings{Fuji93,
  address     ={Paris, France},
  author      ={M. Fujita},
  booktitle   ={European Design Automation Conference },
  editor      ={T. Kropf and U. Schlichtmann},
  key         ={Fuji93},
  month       ={February},
  pages       ={76--80},
  publisher   ={IEEE Computer Society Press},
  title       ={Method for Automatic Design Error Correction in Sequential Circuits},
  year        ={1993}
}
@inproceedings{Fuji96,
  address     ={New Brunswick, NJ, USA},
  author      ={M. Fujita},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={Fuji96},
  month       ={July/August},
  pages       ={159--168},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification of Arithmetic Circuits by Comparing two Similar Circuits},
  volume      ={1102},
  year        ={1996}
}
@book{GDWL94,
  author      ={D. Gajski and N. Dutt and A. Wu and S. Lin},
  key         ={GDWL94},
  keyword     ={textbook},
  publisher   ={Kluwer Academic Publishers},
  title       ={High-Level Synthesis, Introduction to Chip and System Design},
  year        ={1994}
}
@inproceedings{GFLL96,
  address     ={Palo Alto, CA, USA},
  author      ={D. Geist and M. Farkas and A. Landver and Y. Lichtenstein and S. UR and Y. Wolfstahl},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={GFLL96},
  month       ={November},
  pages       ={143--158},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Coverage-Directed Test Generation Using Symbolic Techniques},
  volume      ={1166},
  year        ={1996}
}
@article{GGBM91,
  author      ={P. Le Guernic and T. Gauthier and M. Le Borgne and C. Le Maire},
  journal     ={{IEEE}},
  key         ={GGBM91},
  number      ={9},
  pages       ={1321-1336},
  title       ={Programming real-time applications with {SIGNAL}},
  volume      ={79},
  year        ={1991}
}
@inproceedings{GGHM97,
  address     ={Montreal, Canada},
  author      ={G. Gopalakrishnan and R. Ghughal and R. Hosabettu and A. Mokkedem and R. Nalumasu},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={H. F. Li and D. K. Probst},
  key         ={GGHM97},
  keyword     ={conference},
  month       ={October},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Formal modelling and validation applied to a commercial coherent bus: a case study},
  year        ={1997}
}
@inproceedings{GGLT93,
  address     ={Bad Herrenalb},
  author      ={W. Grass and C. Grobe and S. Lenk and W.-D. Tiedemann},
  booktitle   ={GI/ITG Workshop Formale Methoden zum Entwurf korrekter Systeme},
  editor      ={T. Kropf and R. Kumar and D. Schmid},
  key         ={GGLT93},
  keyword     ={1GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={104--110},
  publisher   ={Universit\"{a}t Karlsruhe, Interner Bericht Nr. 10/93},
  title       ={{S}pezifikation und {V}erfeinerung von {K}ommunikationswerken auf {S}ystemebene},
  year        ={1993}
}
@proceedings{GIIT94,
  address     ={Fachbereich Informatik, Universit\"{a}t Frankfurt},
  key         ={GIIT94},
  month       ={March},
  note        ={Kurzfassung der Beitr\"{a}ge},
  organization={GI/ITG-Workshop},
  publisher   ={Universit\"{a}t Frankfurt},
  series      ={Interner Bericht 6/94},
  title       ={{GI/ITG} Workshop Anwendung formaler Methoden im Systementwurf},
  year        ={1994}
}
@inproceedings{GJJK95,
  author      ={J. Gulmann and J. Jensen and M. J\orgensen and N. Klarlund and T. Rauhe and A. Sandholm},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={U.H. Engberg and K.G. Larsen and A. Skou},
  key         ={GJJK95},
  pages       ={58-73},
  publisher   ={Springer Verlag, LNCS},
  title       ={{Mona}: Monadic second-order logic in practice},
  year        ={1995}
}
@inproceedings{GKRM93,
  address     ={Ottawa, Canada},
  author      ={W. Glunz and T. Kruse and T. Roessel and D. Monjau},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={GKRM93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={175--192},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Integrating {SDL} and {VHDL} for System-Level Hardware Design},
  year        ={1993}
}
@manual{GMSB88,
  author      ={M.J.C. Gordon and T.F. Melham and D. Sheperd and R. Boulton},
  key         ={GMSB88},
  organization={Manual part of the {HOL} system},
  title       ={The {UNWIND} Library},
  year        ={1988}
}
@book{GNRR93,
  editor      ={R.L. Grossmann and A. Nerode and A.P. Ravn and H. Rischel},
  key         ={GNRR93},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{H}ybrid {S}ystems},
  volume      ={736},
  year        ={1993}
}
@inproceedings{GPSS80,
  address     ={New York},
  author      ={D. Gabbay and A. Pnueli and S. Shelah and J. Stavi},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={GPSS80},
  keyword     ={omega},
  organization={ACM},
  pages       ={163--173},
  title       ={On the temporal analysis of fairness},
  year        ={1980}
}
@inproceedings{GPVW95,
  address     ={Warsaw},
  author      ={R. Gerth and D. Peled and M.Y. Vardi and P. Wolper},
  booktitle   ={Protocol Specification, Testing, and Verification (PSTV)},
  key         ={GPVW95},
  month       ={June},
  publisher   ={North-Holland},
  title       ={Simple On-the-fly Automatic Verification of Linear Temporal Logic},
  year        ={1995}
}
@misc{GSM94,
  address     ={Beuth Verlag GmbH, 10772 Berlin},
  institution ={DIN Deutsches Institut f\"{u}r Normung e.V.},
  key         ={GSM94},
  number      ={ETS 300580-2},
  title       ={European digital cellular telecommunications systems, phase 2: full reate speech transcoding},
  type        ={{DIN} {Norm}},
  year        ={1994}
}
@inproceedings{GSRL96,
  address     ={Oxford},
  author      ={R. Groenboom and E. Saaman and E. Rotterdam and G. Renardel de Lavalette},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={GSRL96},
  month       ={March},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{F}ormalizing {A}naesthesia: a{C}ase {S}tudy in {F}ormal {S}pecification},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{GaDR89,
  author      ={S. Gaiotti and M.R. Dagenais and N.C. Rumin},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={GaDR89},
  keyword     ={hardware abstraction timing},
  organization={ACM/IEEE},
  pages       ={491--496},
  title       ={Worst-Case Estimation of Transistor Groups},
  year        ={1989}
}
@inproceedings{GaGB87,
  author      ={T. Gauthier and P. Le Guernic and L. Besnard},
  booktitle   ={Conference on Functional Programming Languages and Computer Architecture},
  key         ={GaGB87},
  publisher   ={Springer Verlag, LNCS 274},
  title       ={{SIGNAL}, a declarative language for synchronous programming of real-time systems},
  year        ={1987}
}
@inproceedings{GaGS88,
  address     ={Glasgow, Scotland},
  author      ={S.J. Garland and J. V. Guttag and J. Staunstrup},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={GaGS88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={329--346},
  publisher   ={North-Holland},
  title       ={Verification of {VLSI} Circuits using {LP}},
  year        ={1988}
}
@book{GaGu83,
  address     ={Boston},
  author      ={D. Gabbay and F. Guenthner},
  key         ={GaGu83},
  publisher   ={Kluwer Academic Publishers},
  title       ={Handbook of Philosophical Logic},
  year        ={1983}
}
@inproceedings{GaGu88,
  address     ={San Diego, California},
  author      ={S.J. Garland and J. v. Guttag},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={GaGu88},
  keyword     ={Rewrite},
  pages       ={219--228},
  title       ={Inductive methods for reasoning about abstract data types},
  year        ={1988}
}
@inproceedings{GaGu89,
  address     ={Chapel Hill, North Carolina, USA},
  author      ={S.J. Garland and J. v. Guttag},
  booktitle   ={Conference on Rewriting Techniques and Applications (RTA)},
  editor      ={N. Dershowitz},
  key         ={GaGu89},
  keyword     ={Rewrite},
  publisher   ={Springer-Verlag},
  title       ={An overview over {LP}, the {L}arch {P}rover},
  year        ={1989}
}
@book{GaJo79,
  address     ={San Francisco},
  author      ={M.R. Garey and D.S. Johnson},
  key         ={GaJo79},
  keyword     ={textbook complexity},
  publisher   ={W.H. Freeman and Company},
  series      ={Studienreihe Informatik},
  title       ={Computers and Intractability: {A} Guide to the Theory of {NP}-Completeness},
  year        ={1979}
}
@article{GaKu83,
  author      ={D.D. Gajski and R. Kuhn},
  journal     ={Computer},
  key         ={GaKu83},
  month       ={December},
  number      ={12},
  pages       ={11--14},
  title       ={Guest Editors' Introduction: New {VLSI} Tools},
  volume      ={16},
  year        ={1983}
}
@inproceedings{GaLM91,
  address     ={Singapore},
  author      ={S. Gai and A. Lioy and P.L. Montessoro},
  booktitle   ={{IEEE} International Symposium on Circuits and Systems},
  key         ={GaLM91},
  keyword     ={hardware abstraction timing},
  organization={IEEE},
  pages       ={2403--2406},
  title       ={An Accurate Timing Model for Gate-Level Simulation of {MOS} Circuits},
  year        ={1991}
}
@techreport{GaOh92,
  address     ={Saarbr\"{u}cken},
  author      ={D. Gabbay and H.J. Ohlbach},
  institution ={Max-Planck-Institut f\"{u}r Informatik},
  key         ={GaOh92},
  month       ={July},
  number      ={MPI-I-92-231},
  title       ={{Q}uantifier Elimination in Second-Order Predicate Logic},
  type        ={Technical Report},
  year        ={1992}
}
@inproceedings{GaWi91,
  address     ={Davis, California},
  author      ={J.W. Gambles and P.J. Windley},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={GaWi91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={An {HOL} Theory for Logic States with Indeterminate Strengths},
  year        ={1991}
}
@inproceedings{GaWi93,
  address     ={Ottawa, Canada},
  author      ={J.W. Gambles and P.J. Windley},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={GaWi93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={111--118},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Reasoning about the {VHDL} standard Logic Package Signal Data Type},
  year        ={1993}
}
@inproceedings{GaYF94,
  address     ={L\"{u}beck, Germany},
  author      ={V. Gafni and A. Yehudai and Y.A. Feldmann},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={GaYF94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={268--287},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A}ctivation-{O}riented {S}pecification of {R}eal-{T}ime {S}ystems},
  volume      ={863},
  year        ={1994}
}
@book{Gall86,
  author      ={J.H. Gallier},
  key         ={Gall86},
  keyword     ={Logic},
  publisher   ={Harper \& Row},
  series      ={Computer Science and Technology Series},
  title       ={Logic for Computer Science---Foundations of Automated Theorem Proving},
  year        ={1986}
}
@mastersthesis{Galt94,
  author      ={D. Galter},
  key         ={Galt94},
  school      ={Dept of Computer Science, University of Waterloo},
  title       ={Symbolic verification of instruction-set processors},
  year        ={1994}
}
@article{Ganz91,
  author      ={H. Ganzinger},
  journal     ={Journal of Symbolic Computation},
  key         ={Ganz91},
  keyword     ={Rewrite},
  pages       ={51--81},
  title       ={A Completion Procedure for Conditional Equations},
  volume      ={11},
  year        ={1991}
}
@mastersthesis{Garb95,
  address     ={Karlsruhe},
  author      ={R.-U. Garbe},
  key         ={Garb95},
  keyword     ={formalism verification SFB358},
  remark      ={betreut von K. Schneider},
  school      ={Universit\"{a}t Karlsruhe},
  title       ={Implementierung eines hierarchischen Verifikationsverfahrens
		mit $\omega$-Automaten},
  year        ={1995}
}
@inproceedings{GeBe94,
  address     ={Standford, California, USA},
  author      ={D. Geist and I. Beer},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={GeBe94},
  month       ={June},
  pages       ={299--310},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Efficient model Checking by Automated Ordering of Transition Relation},
  volume      ={818},
  year        ={1994}
}
@inproceedings{GeCD93,
  address     ={Paris, France},
  author      ={W. Geurts and F. Catthoor and H. DeMan},
  booktitle   ={European Design Automation Conference },
  editor      ={J.L. van Meerbergen and J. Rabaey},
  key         ={GeCD93},
  month       ={February},
  pages       ={552--556},
  publisher   ={IEEE Computer Society Press},
  title       ={Heuristic Techniques for the Synthesis of Complex Functional Units},
  year        ={1993}
}
@inproceedings{GeGL91,
  address     ={Davis, California},
  author      ={R. Gerber and E.L. Gunter and I. Lee},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={GeGL91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={144--154},
  publisher   ={IEEE Computer Society Press},
  title       ={Implementing a Real-Time Process Algebra in {HOL}},
  year        ={1991}
}
@inproceedings{GeKu87,
  address     ={Amsterdam},
  author      ={I. Gertner and R.P. Kurshan},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={M.R. Barbacci and C.J. Koomen},
  key         ={GeKu87},
  organization={IFIP},
  pages       ={47--67},
  publisher   ={North-Holland},
  title       ={Logical Analysis of Digital Circuits},
  year        ={1987}
}
@article{GeMe94,
  author      ={J. Gergov and C. Meinel},
  journal     ={IEEE Transactions on Computers},
  key         ={GeMe94},
  note        ={Techreport 92-10},
  pages       ={1197--1209},
  title       ={{E}fficient {A}nalysis and {M}anipulation of {OBDD}s can be extended to {FBDD}s},
  volume      ={43},
  year        ={1994}
}
@inproceedings{GeSh95,
  address     ={Passau},
  author      ={H.J. Genrich and R.M. Shapiro},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden beim Entwurf von Hardwaresystemen},
  editor      ={W. Grass and M. Mutz},
  key         ={GeSh95},
  keyword     ={3GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={118--125},
  publisher   ={Shaker Verlag},
  series      ={Berichte aus der Informatik},
  title       ={{A}synchronous {C}ircuit {D}esign {W}ith {C}oloured {P}etri {N}ets},
  year        ={1995}
}
@inproceedings{GeWa85,
  address     ={Silver Spring, MD},
  author      ={S.M. German and Y. Wang},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={GeWa85},
  pages       ={549--552},
  publisher   ={IEEE Computer Society Press},
  title       ={Formal Verification of Parameterized Hardware Designs},
  year        ={1985}
}
@manual{GenR88,
  address     ={United Kingdom},
  author      ={{GenRad Inc}},
  key         ={GenR88},
  keyword     ={HDL},
  organization={GenRad Inc},
  title       ={System {HILO} Reference Manual},
  year        ={1988}
}
@inproceedings{Gend90,
  author      ={A.J. van Genderen},
  booktitle   ={International Conference on Very Large Scale Integration (VLSI)},
  editor      ={G. Musgrave and U. Lauter},
  key         ={Gend90},
  keyword     ={hardware specification general simulation analog},
  organization={IFIP},
  pages       ={79--88},
  publisher   ={Elsevier Science Publishers (North-Holland)},
  title       ={{SLS:} An Efficient Switch-Level Timing Simulator Using Min-Max Voltage Waveforms},
  year        ={1990}
}
@article{Gent35,
  author      ={G. Gentzen},
  journal     ={Mathematische Zeitschrift},
  key         ={Gent35},
  keyword     ={Logic},
  pages       ={176--210},
  title       ={Untersuchungen \"{u}ber das logisches {S}chlie{\ss}en},
  volume      ={1},
  year        ={1935}
}
@inproceedings{Geor96,
  address     ={Oxford},
  author      ={C. George},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={Geor96},
  month       ={March},
  pages       ={499-517},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{A} {T}heory of {D}istributing {T}rain {R}escheduling},
  volume      ={1051},
  year        ={1996}
}
@mastersthesis{Gerl95,
  address     ={Karlsruhe},
  author      ={J. Gerlach},
  key         ={Gerl95},
  keyword     ={formalism verification SFB358},
  remark      ={betreut von J. Fr\"{o}{\ss}l},
  school      ={Universit\"{a}t Karlsruhe},
  title       ={Entwicklung und Implementierung von Algorithmen zur Modellpr\"{u}fung auf
		der Basis quantitativer verzweigender temporaler Logik},
  year        ={1995}
}
@article{GhDN93,
  author      ={A. Ghosh and S. Devadas and A.R. Newton},
  journal     ={IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={GhDN93},
  keyword     ={hardware gatelevel test synthesis registertransferlevel},
  month       ={May},
  number      ={5},
  pages       ={579--598},
  title       ={Sequential Test Generation and Synthesis for Testability at the Register-Transfer and Logic Level},
  volume      ={12},
  year        ={1993}
}
@book{GlDo85,
  author      ={L.A. Glasser and D.W. Dobberpuhl},
  key         ={GlDo85},
  keyword     ={hardware design general},
  publisher   ={Addison Wesley},
  series      ={{VLSI} Systems Series},
  title       ={The Design and Analysis of {VLSI} Circuits},
  year        ={1985}
}
@inproceedings{GlFO94,
  address     ={Rochester, NY},
  author      ={A. De Gloria and P. Faraboschi and M. Olivieri},
  booktitle   ={{ASIC} 94 Proc.},
  key         ={GlFO94},
  month       ={September},
  organization={IEEE},
  title       ={A delay insensitive interrupt controller: a case study in asynchronous micro-architecture design},
  year        ={1994}
}
@inproceedings{GlGo89,
  address     ={REX Workshop, Mook},
  author      ={R. van Glabbeek and U. Goltz},
  booktitle   ={Stepwise Refinement of Distributed Systems},
  editor      ={J.W. de Bakker and W.-P. de Roever and G. Rozenberg},
  key         ={GlGo89},
  keyword     ={refinement eventstructure petrinet},
  month       ={May/June},
  pages       ={267--300},
  publisher   ={Springer-Verlag},
  title       ={Refinement of Actions in Causality Based Models},
  year        ={1989}
}
@inproceedings{GlRo93,
  address     ={Ottawa, Canada},
  author      ={W. Glunz and T. Roessel},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={GlRo93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={523--536},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Checking {DFT} Rules with a {VHDL} Simulator},
  year        ={1993}
}
@inproceedings{GlSS86,
  author      ={M. Glesner and J. Schuck and R.B. Steck},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={GlSS86},
  keyword     ={verification},
  pages       ={220--226},
  title       ={Scat - a new statistical timing verifier in a silicon compiler system},
  year        ={1986}
}
@inproceedings{GlVe91,
  address     ={Edinburgh, Scotland},
  author      ={W. Glunz and G. Venzl},
  booktitle   ={International Conference on Very Large Scale Integration (VLSI)},
  editor      ={A. Halaas and P.B. Denyer},
  key         ={GlVe91},
  month       ={August},
  organization={IFIP Transactions},
  pages       ={237--246},
  publisher   ={North-Holland},
  title       ={Hardware Design Using {CASE} Tools},
  year        ={1991}
}
@inproceedings{GoDN90,
  author      ={A. Gosh and S. Devadas and A.R. Newton},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={GoDN90},
  keyword     ={formalism fsm hardware gatelevel verification},
  pages       ={213--219},
  title       ={Verification of Interacting Sequential Circuits},
  year        ={1990}
}
@book{GoDN92,
  author      ={A. Gosh and S. Devadas and A. R. Newton},
  key         ={GoDN92},
  publisher   ={Kluwer Academic Publishers},
  title       ={Sequential Logic Testing and Verification},
  year        ={1992}
}
@inproceedings{GoFe93,
  address     ={Ottawa, Canada},
  author      ={E.J. Golin and A.C. Feng},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={GoFe93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={453--470},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={A Visual Hardware Description Language},
  year        ={1993}
}
@article{GoFu93,
  author      ={G. Gopalakrishnan and R. Fujimoto},
  journal     ={ACM Transactions on Computer Systems},
  key         ={GoFu93},
  keyword     ={hardware systemlevel verification registertransferlevel},
  month       ={May},
  number      ={2},
  pages       ={109--145},
  title       ={Design and Verification of the Rollback Chip using {HOP}: A Case Study of Formal Methods Applied to Hardware Design},
  volume      ={11},
  year        ={1993}
}
@inproceedings{GoGB96,
  address     ={Paris, France},
  author      ={J. Gong and D. D. Gajski and S. Bakshi},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={GoGB96},
  month       ={March},
  pages       ={270--274},
  publisher   ={{IEEE} Computer Society Press (Los Alamitos, California)},
  title       ={Model Refinement for Hardware-Software Codesign},
  year        ={1996}
}
@article{GoHe86,
  author      ={M.J.C. Gordon and J. Herbert},
  journal     ={{IEE} 133},
  key         ={GoHe86},
  month       ={September},
  number      ={5},
  pages       ={255--270},
  title       ={Formal Hardware Verification Methodology and its Application to a Network Interface Chip},
  volume      ={Part E},
  year        ={1986}
}
@techreport{GoKu80,
  address     ={Murray Hill, NJ},
  author      ={B. Gopinath and R.P. Kurshan},
  institution ={At\&T Bell Laboratories},
  key         ={GoKu80},
  title       ={The Selection/Resolution Model of Coordinating Concurrent Processes},
  year        ={1980}
}
@inproceedings{GoLS90,
  address     ={Leuven, Belgium},
  author      ={M.J.C. Gordon and P. Loewenstein and M. Shahaf},
  booktitle   ={{IFIP} International Workshop on Applied Formal Methods for Correct {VLSI} Design},
  editor      ={L.J.M. Claesen},
  key         ={GoLS90},
  pages       ={409--417},
  publisher   ={North-Holland},
  title       ={Formal Verification of a Cell Library: A Case Study in Technology Transfer},
  volume      ={2},
  year        ={1990}
}
@book{GoMW79,
  address     ={New York},
  author      ={M.J.C. Gordon and R. Milner and C.P. Wadsworth},
  key         ={GoMW79},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Mechanized Logic of Computation},
  volume      ={78},
  year        ={1979}
}
@article{GoMa83,
  author      ={N.F. Goncalves and H.J. De Man},
  journal     ={IEEE SC-18},
  key         ={GoMa83},
  keyword     ={verification},
  pages       ={261--266},
  title       ={{NORA}: a racefree dynamic {CMOS} technique for pipelined logic structures},
  year        ={1983}
}
@book{GoMe93,
  author      ={M.J.C. Gordon and T.F. Melham},
  key         ={GoMe93},
  keyword     ={tutorial formalism temporallogic specification},
  publisher   ={Cambridge University Press},
  title       ={Introduction to {HOL}: {A} Theorem Proving Environment for Higher Order Logic},
  year        ={1993}
}
@inproceedings{GoMe96,
  address     ={Turku, Finland},
  author      ={A. D. Gordon and T. Melham},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={GoMe96},
  month       ={August},
  pages       ={173--190},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Five Axioms of Alpha-Conversion},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{GoPi93,
  address     ={Elounda},
  author      ={P. Godefroid and D. Pirottin},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  key         ={GoPi93},
  month       ={June},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Refining Dependencies Improves Partial-Order Verification Methods},
  year        ={1993}
}
@inproceedings{GoSi94,
  address     ={Standford, California, USA},
  author      ={R. Gorrieri and G. Siliprandi},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={GoSi94},
  month       ={June},
  pages       ={14-26},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Real-Time System Verification Using P/T Nets},
  volume      ={818},
  year        ={1994}
}
@article{GoWo93,
  author      ={P. Godefroid and P. Wolper},
  journal     ={Formal Methods in System Design},
  key         ={GoWo93},
  month       ={April},
  number      ={2},
  pages       ={149-164},
  title       ={Using Partial Orders for the Efficient Verification of Deadlock Freedom and Safety Properties},
  volume      ={2},
  year        ={1993}
}
@article{GoWo94,
  author      ={P. Godefroid and P. Wolper},
  journal     ={Information and Computation},
  key         ={GoWo94},
  month       ={May},
  number      ={2},
  pages       ={305--326},
  publisher   ={Academic Press, Inc.},
  title       ={A Partial Approach To Model Checking},
  volume      ={110},
  year        ={1994}
}
@inproceedings{Gode90,
  author      ={P. Godefroid},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={R. P. Kurshan and E. M. Clarke},
  key         ={Gode90},
  month       ={June},
  title       ={Using Partial Orders to Improve Automatic Verification Methods},
  year        ={1990}
}
@phdthesis{Gode95,
  author      ={P. Godefroid},
  key         ={Gode95},
  school      ={Universit\'{e} de Liege, Institut Montefiore},
  title       ={Partial-Order Methods for the Verification of Concurrent Systems -- An Approach to the State Explosion Problem},
  year        ={1995}
}
@techreport{Goeb86,
  author      ={R. G\"{o}bel},
  institution ={Universit\"{a}t Kaiserslautern, Germany},
  key         ={Goeb86},
  keyword     ={Rewrite},
  month       ={November},
  number      ={SEKI Report SR-86-18},
  title       ={Ground confluence},
  type        ={Technical Report},
  year        ={1986}
}
@article{Goed31,
  author      ={K. G\"{o}del},
  journal     ={Monatshefte f\"{u}r Mathematik und Physik},
  key         ={Goed31},
  keyword     ={Logic},
  pages       ={173--198},
  title       ={\"{U}ber formal unentscheidbare S\"{a}tze der {P}rincipia {M}athematica und verwandter {S}ysteme},
  volume      ={38},
  year        ={1931}
}
@book{Goer89,
  address     ={M\"{u}nchen},
  author      ={W. G\"{o}rke},
  key         ={Goer89},
  keyword     ={textbook},
  publisher   ={Oldenbourg Verlag},
  series      ={Handbuch der Informatik},
  title       ={{F}ehlertolerante {R}echensysteme},
  volume      ={2.1},
  year        ={1989}
}
@article{Gold81,
  author      ={D. Goldfarb},
  journal     ={Journal of Theoretical Computer Science},
  key         ={Gold81},
  keyword     ={Logic},
  pages       ={225--230},
  title       ={The Undecidability of the Second Order Unification},
  volume      ={13},
  year        ={1981}
}
@inproceedings{Gont96,
  address     ={New Brunswick, NJ, USA},
  author      ={G. Gonthier},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={Gont96},
  month       ={July/August},
  pages       ={462--463},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verifying the safety of a practical concurrent garbage collector},
  volume      ={1102},
  year        ={1996}
}

@unpublished{Goos90,
  author      ={K.G.W. Goossens},
  institution ={University of Edinburgh},
  key         ={Goos90},
  keyword     ={HDL verification},
  title       ={Semantics for pico{ELLA}},
  year        ={1990}
}

@unpublished{Goos89,
  author      ={K.G.W. Goossens},
  institution ={University of Edinburgh},
  key         ={Goos89},
  keyword     ={HDL verification},
  title       ={Embedding Computer Hardware Design and Description
		Languages in Proof Systems},
  year        ={1989},
  note        ={thesis proposal}
}

@phdthesis{Goos93a,
  author      ={K.G.W. Goossens},
  title       ={Embedding Computer Hardware Design and Description
		Languages in Proof Systems},
  school      ={University of Edinburgh},
  year        ={1993},
  key         ={Goos93a},
  keyword     ={HDL verification}
}
@techreport{Goos91,
  author      ={K.G.W. Goossens},
  institution ={University of Edinburgh},
  key         ={Goos91},
  keyword     ={HDL verification techreport},
  month       ={May},
  number      ={ECS-LFCS-91-155},
  title       ={Embedding a {CHDL} in a Proof System},
  type        ={LFCS Report Series},
  year        ={1991}
}

@inproceedings{Goos91a,
  author      ={K.G.W. Goossens},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P. Prinetto and P. Camurati},
  key         ={Goos91a},
  month       ={June},
  pages       ={359-374},
  publisher   ={North-Holland},
  title       ={Embedding a {CHDDL} in a Proof System},
  year        ={1991}
}
@inproceedings{Goos92,
  address     ={Leuven, Belgium},
  author      ={K.G.W. Goossens},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Goos92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={487--506},
  publisher   ={North-Holland},
  title       ={Operational Semantics Based Formal Symbolic Simulation},
  year        ={1992}
}

@techreport{Goos92a,
  author      ={K.G.W. Goossens},
  institution ={University of Edinburgh},
  key         ={Goos92a},
  keyword     ={HDL verification techreport},
  number      ={ECS-LFCS-92-231},
  title       ={Operational Semantics Based Formal Symbolic Simulation},
  type        ={LFCS Report Series},
  year        ={1992}
}

@inproceedings{Goos93,
  address     ={Vancouver, Canada},
  author      ={K.G.W. Goossens},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Goos93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={73--87},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Structure and Behaviour in Hardware Verification},
  volume      ={780},
  year        ={1993}
}
@inproceedings{Goos95,
  address     ={Rome University, Italy},
  author      ={K.G.W. Goosens},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={Goos95},
  keyword     ={vhdl},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={311--327},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{R}easoning about {VHDL} using operational and observational semantics},
  volume      ={987},
  year        ={1995}
}
@techreport{Gord83,
  author      ={M.J.C. Gordon},
  institution ={Computer Laboratory, University of Cambridge},
  key         ={Gord83},
  title       ={{LCF\_ LSM}: A System for Specifying and Verifying Hardware},
  year        ={1983}
}
@techreport{Gord83b,
  author      ={M.J.C. Gordon},
  institution ={Computer Laboratory, University of Cambridge},
  key         ={Gord83b},
  number      ={TR 42},
  title       ={{P}roving a {C}omputer {C}orrect},
  year        ={1983}
}
@techreport{Gord85,
  author      ={M.J.C. Gordon},
  institution ={Computer Laboratory, University of Cambridge},
  key         ={Gord85},
  month       ={May},
  number      ={68},
  title       ={{HOL}: A Machine Oriented Formulation of Higher Order Logic},
  year        ={1985}
}
@incollection{Gord86,
  address     ={Computer Laboratory, University of Cambridge},
  author      ={M.J.C. Gordon},
  booktitle   ={Formal Aspects of {VLSI} Design},
  editor      ={G.J. Milne and P.A. Subrahmanyam},
  key         ={Gord86},
  keyword     ={verification},
  pages       ={153--177},
  publisher   ={North-Holland},
  remark      ={Technical Report 77},
  title       ={Why Higher-Order Logic is a Good Formalism for Specifying and Verifying Hardware},
  year        ={1986}
}
@inproceedings{Gord88a,
  address     ={Banff, Canada},
  author      ={M.J.C. Gordon},
  booktitle   ={Current Trends in Hardware Verification and Automated Theorem Proving},
  editor      ={G.M. Birtwistle and P.A. Subrahmanyam},
  key         ={Gord88a},
  keyword     ={softwareverification HOL},
  pages       ={387--439},
  publisher   ={Springer-Verlag, Berlin},
  title       ={Mechanizing Programming Logics in Higher-Order Logic},
  year        ={1988}
}
@incollection{Gord88b,
  address     ={Boston},
  author      ={M.J.C. Gordon},
  booktitle   ={{VLSI} Specification, Verification, and Synthesis},
  editor      ={G.M. Birtwistle and P.A. Subrahmanyam},
  key         ={Gord88b},
  keyword     ={HOL},
  pages       ={73--128},
  publisher   ={Kluwer Academic Publishers},
  title       ={{HOL}: A proof generating system for higher-order logic.},
  year        ={1988}
}
@book{Gord88c,
  author      ={M.J.C. Gordon},
  key         ={Gord88c},
  publisher   ={Prentice Hall},
  series      ={International Series in Computer Science},
  title       ={Programming Language Theory and its Implementation},
  year        ={1988}
}
@booklet{Gord89,
  address     ={University of Cambridge},
  author      ={M.J.C. Gordon},
  howpublished={{Course Notes}},
  key         ={Gord89},
  keyword     ={textbook formalism higherorderlogic specification hardware registertransferlevel verification},
  remark      ={Skriptum in Cambridge},
  title       ={Lectures on the Specification and Verification of Hardware},
  year        ={1989}
}
@inproceedings{Gord91a,
  address     ={Davis, California},
  author      ={M.J.C. Gordon},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Gord91a},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={2--3},
  publisher   ={IEEE Computer Society Press},
  title       ={Introduction to the {HOL} System},
  year        ={1991}
}
@inproceedings{Gord91b,
  address     ={Davis, California},
  author      ={M.J.C. Gordon},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Gord91b},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={A Formal Method for Hard Real-Time Programming},
  year        ={1991}
}
@inproceedings{Gord91c,
  address     ={Davis, California},
  author      ={M.J.C. Gordon},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Gord91c},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Reports on the {HOL} Theorem Proving System},
  year        ={1991}
}
@techreport{Gord92,
  author      ={M.J.C. Gordon},
  institution ={University of Cambridge, Computer Laboratory},
  key         ={Gord92},
  keyword     ={textbook formalism higherorderlogic specification hardware registertransferlevel verification},
  month       ={October},
  title       ={Specification and Verification of Hardware},
  type        ={Course Lecture Notes (Part II)},
  year        ={1992}
}
@inproceedings{Gord93,
  address     ={Vancouver, Canada},
  author      ={A. Gordon},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Gord93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={414--427},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={A Mechanisation of Name-Carrying Syntax up to Alpha-Conversion},
  volume      ={780},
  year        ={1993}
}
@techreport{Gord94,
  author      ={M.J.C. Gordon},
  institution ={University of Cambridge Computer Laboratory},
  key         ={Gord94},
  note        ={http://www.cl.cam.ac.uk/users/mjcg/papers/holst},
  number      ={353},
  title       ={Merging {HOL} with Set Theory: preliminary experiments},
  year        ={1994}
}
@inproceedings{Gord96,
  address     ={Turku, Finland},
  author      ={M. Gordon},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={Gord96},
  month       ={August},
  pages       ={191--202},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Set Theory, Higher Order Logic or Both?},
  volume      ={1125},
  year        ={1996}
}
@techreport{Goub92,
  address     ={Rue Jeach Jaures, 78340 Les Clayes-sous-Bois},
  author      ={J. Goubault},
  institution ={Bull System Products, Research and advanced development},
  key         ={Goub92},
  number      ={RAD/DMA/92018},
  title       ={A fast method for Proving Theorems in Classical first-order Logic},
  year        ={1992}
}
@article{GrKM98,
  author      ={W. Grass and T. Kropf and M. Mutz},
  journal     ={Informationstechnik und Technische Informatik (it\&ti)},
  key         ={GrKM98},
  keyword     ={SFB358},
  month       ={June},
  number      ={3},
  title       ={{Formale} {Methoden} bei der {Spezifikation} von {Hardware}},
  year        ={1998}
}
@inproceedings{GrKu94,
  address     ={Gmunden, \"{O}sterreich},
  author      ={O. Grumberg and R.P. Kurshan},
  booktitle   ={Temporal Logic},
  editor      ={D. Gabby and H.J. Ohlbach},
  key         ={GrKu94},
  keyword     ={hardware verification general},
  month       ={October},
  pages       ={180--194},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Artificial Intelligence},
  title       ={How Linear can Branching-time Be?},
  year        ={1994}
}
@inproceedings{GrLo91,
  address     ={New York},
  author      ={O. Grumberg and D. E. Long},
  booktitle   ={International Conference on Concurrency Theory (CONCUR)},
  editor      ={J. C. M. Baeten and J. F. Groote},
  key         ={GrLo91},
  month       ={August},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Model Checking and Modular Verification},
  volume      ={527},
  year        ={1991}
}
@inproceedings{GrLo93,
  address     ={Bad Herrenalb},
  author      ={S. Graf and C. Loiseaux},
  booktitle   ={GI/ITG Workshop Formale Methoden zum Entwurf korrekter Systeme},
  editor      ={T. Kropf and R. Kumar and D. Schmid},
  key         ={GrLo93},
  keyword     ={1GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={122--138},
  publisher   ={Universit\"{a}t Karlsruhe, Interner Bericht Nr. 10/93},
  title       ={{A} {T}ool for {S}ymbolic {P}rogram {V}erification and {A}bstraction},
  year        ={1993}
}
@article{GrLo94,
  author      ={O. Grumberg and D.E. Long},
  journal     ={{ACM} Transactions on Programming Languages and systems},
  key         ={GrLo94},
  month       ={May},
  number      ={3},
  pages       ={843--871},
  title       ={Model Checking and Modular Verification},
  volume      ={16},
  year        ={1994}
}
@inproceedings{GrMT94,
  address     ={Liverpool},
  author      ={W. Grass and M. Mutz and W. Tiedemann},
  booktitle   ={EUROMICRO},
  key         ={GrMT94},
  title       ={High Level Synthesis based on Formal Methods},
  year        ={1994}
}
@article{GrRe92,
  author      ={K.E. Grosspietsch and R. Reetz},
  journal     ={IEEE Micro},
  key         ={GrRe92},
  keyword     ={CAPRA},
  month       ={December},
  number      ={6},
  pages       ={58--67},
  title       ={The Associative Processor System {CAPRA}: Architecture and Applications},
  volume      ={12},
  year        ={1992}
}
@inproceedings{GrRo95,
  address     ={Liege, Belgium},
  author      ={E. P. Gribomont and D. Rossetto},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={GrRo95},
  month       ={July},
  pages       ={70--83},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{CAVEAT}: Technique and Tool for computer Aided Verification and transformation},
  volume      ={939},
  year        ={1995}
}
@inproceedings{GrSa96,
  address     ={New Brunswick, NJ, USA},
  author      ={S. Graf and H. Saidi},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={GrSa96},
  month       ={July/August},
  pages       ={196--207},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verifying Invariants Using Theorem Proving},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{GrSa97,
  author      ={S. Graf and H. Saidi},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={O. Grumberg},
  key         ={GrSa97},
  month       ={June},
  pages       ={72--83},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Scienece},
  title       ={Construction of Abstract State Graphs with {PVS}},
  volume      ={1254},
  year        ={1997}
}
@inproceedings{GrSc85,
  author      ={W. Grass and N. Schielow},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={Koomen/Moto-Oka},
  key         ={GrSc85},
  keyword     ={verification},
  pages       ={115--128},
  publisher   ={North-Holland},
  title       ={{VERENA} - a program for automatic verifications of the refinement of a register transfer description into a logic description},
  year        ={1985}
}
@inproceedings{GrSc98,
  author      ={W. Gr\"{u}newald and K. Schneider},
  booktitle   ={GI/ITG/GME Workshop: Methoden des Entwurfs und der Verifikation digitaler Schaltungen und Systeme und Beschreibungssprachen und Modellierung von Schaltungen und Systemen},
  key         ={GrSc98},
  keyword     ={SFB358 workshop},
  publisher   ={HNI-Verlagsschriften, ISBN 3-931466-35-3},
  title       ={Modeling and Verifying Abstract Multithreaded Systems},
  year        ={1998}
}
@inproceedings{GrSt90,
  author      ={S. Graf and B. Steffen},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={R. P. Kurshan and E. M. Clarke},
  key         ={GrSt90},
  month       ={June},
  title       ={Compositional Minimization of Finite State Processes},
  year        ={1990}
}
@inproceedings{GrUn96,
  author      ={W. Gr\"{u}newald and Th. Ungerer},
  booktitle   ={EUROMICRO},
  key         ={GrUn96},
  title       ={Towards Extremely Fast Context Switching in a Block-multithreaded Processor},
  year        ={1996}
}
@inproceedings{GrUn97,
  author      ={W. Gr\"{u}newald and Th. Ungerer},
  booktitle   ={Conference on Parallel and Distributed Computing},
  key         ={GrUn97},
  title       ={A Multithreaded Processor Designed for Distributed Shared Memory Systems},
  year        ={1997}
}
@inproceedings{Graf94,
  address     ={Standford, California, USA},
  author      ={S. Graf},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={Graf94},
  month       ={June},
  pages       ={207--219},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification of Distributed Cache Memory by Using Abstractions},
  volume      ={818},
  year        ={1994}
}
@book{Grah92,
  address     ={Boston/Dordrecht/London},
  author      ={B.T. Graham},
  key         ={Grah92},
  publisher   ={Kluwer Academic Publishers},
  title       ={The {SECD} Microprocessor: A Verification Case Study},
  year        ={1992}
}
@inproceedings{Grah94,
  address     ={Malta},
  author      ={B.T. Graham},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={Grah94},
  month       ={September},
  pages       ={221--234},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={An Interpretation of {NODEN} in {HOL}},
  volume      ={859},
  year        ={1994}
}
@inproceedings{Grah97,
  address     ={Enschede, The Netherlands},
  author      ={B. Grahlmann},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={Grah97},
  pages       ={65-80},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={The Reference Component of {PEP}},
  year        ={1997}
}
@inproceedings{Gram89,
  author      ={B. Gramlich},
  booktitle   ={Conference on Automated Deduction (CADE)},
  editor      ={M.E.Stickel},
  key         ={Gram89},
  keyword     ={Rewrite},
  pages       ={655--656},
  publisher   ={Springer-Verlag},
  title       ={{UNICOM}: a refined completion based inductive theorem-prover},
  year        ={1989}
}
@inproceedings{Gree92,
  author      ={M.R. Greenstreet},
  booktitle   ={Workshop on Designing Correct Circuits},
  key         ={Gree92},
  pages       ={215-236},
  title       ={Using Synchronized Transitions in the Design of a Multiprocessor},
  year        ={1992}
}
@inproceedings{Gree96,
  address     ={New Brunswick, NJ, USA},
  author      ={M. R. Greenstreet},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={Gree96},
  month       ={July/August},
  pages       ={277-287},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verifying Safety Properties of differential equations},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{Grib96,
  address     ={New Brunswick, NJ, USA},
  author      ={E. P. Gribomont},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={Grib96},
  month       ={July/August},
  pages       ={311--322},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Atomicity Refinement and Trace Reduction Theorems},
  volume      ={1102},
  year        ={1996}
}
@book{Grie81,
  author      ={D. Gries},
  key         ={Grie81},
  publisher   ={Springer-Verlag},
  title       ={The Science of Programming},
  year        ={1981}
}
@phdthesis{Grit95,
  author      ={Th. Gritzner},
  key         ={Grit95},
  school      ={University of Munich, Germany},
  title       ={wp-Kalk\"{u}l und relationale Spezifikation kommunizierender Systeme},
  year        ={1995}
}
@phdthesis{Grue98,
  author      ={W. Gr\"{u}newald},
  key         ={Grue98},
  school      ={Universit\"{a}t Karlsruhe},
  title       ={Rhamma -- eine entkoppelte mehrf\"{a}dige Prozessorarchitektur},
  year        ={1998}
}
@techreport{Grum94,
  address     ={Bonn, Germany},
  author      ={O. Grumberg},
  institution ={Computer Science Department Technion, Haifa. Israel},
  key         ={Grum94},
  month       ={July},
  title       ={{LTL} Model Checking},
  type        ={Tutorial auf der {ICTL}'94},
  year        ={1994}
}
@techreport{Grum94a,
  address     ={Bonn, Germany},
  author      ={O. Grumberg},
  institution ={Computer Science Department Technion, Haifa. Israel},
  key         ={Grum94a},
  month       ={July},
  title       ={Verification of Finite-State Systems Using Temporal Logic Model Checking},
  type        ={Tutorial auf der {ICTL}'94},
  year        ={1994}
}
@inproceedings{Grun92,
  address     ={Lloyd's Register, London},
  author      ={J. Grundy},
  booktitle   ={Refinement Workshop},
  editor      ={C.B. Jones and B.T. Denvir and R.C.F. Shaw},
  key         ={Grun92},
  keyword     ={refinement HOL},
  month       ={January},
  organization={BCS-FACS},
  pages       ={230--254},
  publisher   ={Springer-Verlag, London},
  title       ={A Window Inference Tool for Refinement},
  year        ={1992}
}
@inproceedings{Grun92a,
  address     ={Lloyd's Register, London, England},
  author      ={J. Grundy},
  booktitle   ={Refinement Workshop},
  editor      ={C.B. Jones and B.T. Denvir and R.C.F. Shaw},
  key         ={Grun92a},
  month       ={January},
  organization={BCS-FACS},
  pages       ={230--254},
  publisher   ={Springer-Verlag, London, England},
  title       ={A Window Inference Tool for Refinement},
  year        ={1992}
}
@inproceedings{GuCM92,
  author      ={R.K. Gupta and C.N. Coelho and G.D. Micheli},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={GuCM92},
  pages       ={225-230},
  title       ={Synthesis and Simulation of Digital Systems Containing Interacting Hardware and Software Components},
  year        ={1992}
}
@inproceedings{GuFi93,
  address     ={Santa Clara, California},
  author      ={A. Gupta and A.L. Fisher},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={GuFi93},
  keyword     ={BDD_Techniques},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={192--201},
  publisher   ={IEEE Computer Society Press},
  title       ={{R}epresentaion and {S}ymbolic {M}anipulation of {L}inearly {I}nductive {B}oolean {F}unctions},
  year        ={1993}
}
@inproceedings{GuHJ97,
  address     ={Grenoble, France},
  author      ={V. Gupta and T. Henzinger and R. Jagadeesan},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={GuHJ97},
  pages       ={331-345},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Robust Timed Automata},
  year        ={1997}
}
@article{GuHM78,
  author      ={J. v. Guttag and E. Horowitz and D. Musser},
  journal     ={Communcations of the {ACM}},
  key         ={GuHM78},
  keyword     ={Rewrite},
  pages       ={1048--1064},
  title       ={Abstract data types and software validation},
  volume      ={21},
  year        ={1978}
}
@article{GuHo78,
  author      ={J. v. Guttag and J.J. Horning},
  journal     ={Acta informatica},
  key         ={GuHo78},
  keyword     ={Rewrite},
  pages       ={27--52},
  title       ={The algebraic specification of abstract data types},
  volume      ={10},
  year        ={1978}
}
@book{GuHo93,
  address     ={New York},
  author      ={J.v. Guttag and J. Horning},
  key         ={GuHo93},
  publisher   ={Springer Verlag},
  title       ={{L}arch: Languages and Tools for Formal Specification},
  year        ={1993}
}
@inproceedings{GuLi95,
  address     ={Aspen Grove, Utah, USA},
  author      ={E.L. Gunter and L. Libkin},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={GuLi95},
  month       ={September},
  pages       ={170--185},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{I}nterfacing {HOL90} with a {F}unctional {D}atabase {Q}uery {L}anguage},
  volume      ={971},
  year        ={1995}
}
@article{GuNi89,
  author      ={I. Guessarian and W. Niar-Dinedane},
  journal     ={Inform. Theor. Appl},
  key         ={GuNi89},
  keyword     ={omega},
  pages       ={59--86},
  title       ={Fairness and regularity for {SCCS} processes},
  volume      ={23},
  year        ={1989}
}
@inproceedings{GuRo94,
  address     ={Grenoble, France},
  author      ={P. Gutberlet and W. Rosenstiel},
  booktitle   ={European Design Automation Conference },
  key         ={GuRo94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={618--623},
  publisher   ={IEEE Computer Society Press},
  title       ={{T}iming {P}reserving {I}nterface {T}ransformations for the {S}ynthesis of {B}ehavioural {VHDL}},
  year        ={1994}
}
@article{GuSh83,
  author      ={Y.S. Gurevich and S. Shelah},
  journal     ={Journal of Symbolic Logic},
  key         ={GuSh83},
  keyword     ={omega},
  pages       ={1105--1119},
  title       ={Rabin's uniformization problem},
  volume      ={48},
  year        ={1983}
}
@inproceedings{GuSi94,
  address     ={San Diego, CA},
  author      ={A.P. Gupta and D.P. Siewiorek},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={GuSi94},
  keyword     ={timing_analysis},
  month       ={June},
  note        ={ch. 8.3},
  publisher   ={San Diego Convention Center},
  title       ={{A}utomated {M}ulti-{C}ycle {S}ymbolic {T}iming {V}erification of {M}icroprocessor-{B}ased {D}esigns},
  year        ={1994}
}
@inproceedings{Gunt91,
  address     ={Davis, California},
  author      ={E.L. Gunter},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Gunt91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Theories and Packages},
  year        ={1991}
}
@inproceedings{Gunt92,
  address     ={Leuven, Belgium},
  author      ={E.L. Gunter},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Gunt92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={561--568},
  publisher   ={North-Holland},
  title       ={Why we can't have {SML}-style datatype Declarations in {HOL}},
  year        ={1992}
}
@inproceedings{Gunt93,
  address     ={Vancouver, Canada},
  author      ={E.L. Gunter},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Gunt93},
  keyword     ={HOL},
  month       ={August},
  organization={University of British Columbia},
  pages       ={140--154},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={A Broader Class of Trees for Recursive Type Definitions for {HOL}},
  volume      ={780},
  year        ={1993}
}
@article{Gupt92,
  author      ={A. Gupta},
  journal     ={Journal of Formal Methods in System Design},
  key         ={Gupt92},
  pages       ={151--238},
  title       ={{F}ormal {H}ardware {V}erification {M}ethods: {A} {S}urvey},
  volume      ={1},
  year        ={1992}
}
@phdthesis{Gupt94,
  author      ={V. Gupta},
  key         ={Gupt94},
  school      ={Stanford University},
  title       ={{Chu Spaces: A Model of Concurrency}},
  year        ={1994}
}
@article{Gure65,
  author      ={Y.S. Gurevich},
  journal     ={ACM Translations},
  key         ={Gure65},
  keyword     ={omega},
  pages       ={165--192},
  title       ={Elementary properties of ordered Abelian groups},
  volume      ={46},
  year        ={1965}
}
@inbook{Gure85,
  author      ={Y.S. Gurevich},
  chapter     ={Monadic second-order theories},
  key         ={Gure85},
  keyword     ={omega},
  publisher   ={Springer-Verlag},
  title       ={Model-theoretic Logics},
  year        ={1985}
}
@inproceedings{Gutt91,
  address     ={Davis, California},
  author      ={J.D. Guttman},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Gutt91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={An Interface Logic for Verification Environments},
  year        ={1991}
}
@inproceedings{HBBF97,
  address     ={Grenoble, France},
  author      ={M.S. Hajji and J.M. Bass and A.R. Browne and P.J. Fleming},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={HBBF97},
  pages       ={87-93},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Design Tools for Hybrid Control Systems},
  year        ={1997}
}
@article{HCRP91,
  author      ={N. Halbwachs and P. Caspi and P. Raymond and D. Pilaud},
  journal     ={Proceedings of the {IEEE}},
  key         ={HCRP91},
  month       ={sep},
  number      ={9},
  pages       ={1305-1320},
  title       ={The Synchronous Dataflow Programming Language {LUSTRE}},
  volume      ={79},
  year        ={1991}
}
@inproceedings{HDNS96,
  address     ={Oxford},
  author      ={J. Hoare and J. Dick and D. Neilson and I. Soerensen},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={HDNS96},
  month       ={March},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{A}pplying the {B} {T}echnologies to {CICS}},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{HFFM92,
  address     ={Leuven, Belgium},
  author      ={R.B. Hughes and M.D. Francis and S.P. Finn and G. Musgrave},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={HFFM92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={459--475},
  publisher   ={North-Holland},
  title       ={Formal Tools in Tri-State Design in Busses},
  year        ={1992}
}
@inproceedings{HHFM94,
  address     ={L\"{u}beck, Germany},
  author      ={J. He and C.A.R. Hoare and M. Fr\"{a}nzle and M. M\"{u}ller-Olm and E.-R. Olderog and M. Schenke and M.R. Hansen and A.P. Ravn and H. Rischel},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={HHFM94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={288--335},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{P}rovably {C}orrect {S}ystems},
  volume      ={863},
  year        ={1994}
}
@article{HHFY92,
  author      ={H. Hiraishi and K. Hamaguchi and H. Fujii and S. Yajima},
  journal     ={Journal of Information Processing},
  key         ={HHFY92},
  number      ={1},
  pages       ={129--138},
  title       ={Regular Temporal Logic Expressively Equivalent to Finite Automata and Its Application to Logic Design Verification},
  volume      ={15},
  year        ={1992}
}
@inproceedings{HIKB96,
  address     ={Palo Alto, CA, USA},
  author      ={R. Hojati and A. Isles and D. Kirkpatrick and R. K. Brayton},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={HIKB96},
  month       ={November},
  pages       ={218--232},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification using uninterpreted functions and finite instantiations},
  volume      ={1166},
  year        ={1996}
}
@book{HJJJ84,
  author      ={P. Huber and A. Jensen and L. Jepsen and K. Jensen},
  edition     ={{G. Rozenberg}},
  key         ={HJJJ84},
  series      ={Advances on Petri Nets},
  title       ={Towards Reachability Trees for High-Level Petri Nets},
  year        ={1984}
}
@inproceedings{HLDD89,
  address     ={Las Vegas},
  author      ={A.J. van der Hoeven and A. de Lange and E.F. Deprettere and P.M. Dewilde},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={HLDD89},
  keyword     ={flowgraph},
  month       ={June},
  organization={ACM/IEEE},
  pages       ={738--741},
  title       ={A new model for the high level description and simulation of {VLSI} networks},
  year        ={1989}
}
@inproceedings{HLSS96,
  address     ={Oxford},
  author      ={D. Hutter and B. Langenstein and C. Sengler and J.H. Siekmann and W. Stephan and A. Wolpers},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={HLSS96},
  month       ={March},
  pages       ={268-286},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{D}eduction in the {V}erification {S}upport {E}nvironment},
  volume      ={1051},
  year        ={1996}
}
@misc{HLSy92,
  key         ={HLSy92},
  note        ={ftp://mcnc.mcnc.org/pub/benchmark/},
  title       ={Benchmark-Circuits for High-Level Synthesis},
  year        ={1992}
}
@inproceedings{HLUE97,
  address     ={Grenoble, France},
  author      ={R. Huuck and Y. Lakhnech and L. Urbina and S. Engell and S. Kowalewsk and J. Preussig},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={HLUE97},
  pages       ={81-86},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Comparing Timed {C/E} Systems with Timed Automata},
  year        ={1997}
}
@inproceedings{HMGK91,
  address     ={Amsterdam},
  author      ={A. Hajjar and R. Marbot and A. Greiner and P. Kiani},
  booktitle   ={European Design Automation Conference },
  key         ={HMGK91},
  keyword     ={hardware abstraction timing Timing_Verification_and_Specification},
  month       ={February},
  organization={IEEE},
  pages       ={261--265},
  publisher   ={IEEE Computer Society Press},
  title       ={{TAS:} {A}n {A}ccurate {T}iming {A}nalyser for {CMOS} {VLSI}},
  year        ={1991}
}
@inproceedings{HMPS94,
  address     ={Paris},
  author      ={G.D. Hachtel and E. Macii and A. Pardo and F. Somenzi},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={HMPS94},
  keyword     ={BDD_Concepts},
  month       ={February},
  pages       ={214--219},
  publisher   ={IEEE Computer Society Press},
  title       ={{S}ymbolic {A}lgorithms to {C}alculate {S}teady-{S}tate {P}robabilities of a {F}inite {S}tate {M}achine},
  year        ={1994}
}
@inproceedings{HMPS94a,
  address     ={San Diego, CA},
  author      ={G.D. Hachtel and E. Macii and A. Pardo and F. Somenzi},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={HMPS94a},
  keyword     ={BDD_techniques_and_formal_verification},
  month       ={June},
  note        ={ch. 18.1},
  publisher   ={San Diego Convention Center},
  title       ={{P}robabilistic {A}nalysis of {L}arge {F}inite {S}tate {M}achines},
  year        ={1994}
}
@inproceedings{HNSY92,
  address     ={Santa-Cruz, California},
  author      ={T.A. Henzinger and X. Nicollin and J. Sifakis and S. Yovine},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={HNSY92},
  keyword     ={hardware verification modelchecking specification logic realtime},
  month       ={June},
  pages       ={394--406},
  publisher   ={IEEE Computer Scienty Press},
  title       ={{S}ymbolic {M}odel {C}hecking for {R}eal-{T}ime {S}ystems},
  year        ={1992}
}
@proceedings{HOL90,
  key         ={HOL90},
  publisher   ={unpublished},
  title       ={Third {HOL} Users Meeting},
  year        ={1990}
}
@proceedings{HOL91,
  address     ={Davis, California},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={HOL91},
  keyword     ={verification HOL},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={International Workshop on Higher Order Logic Theorem Proving and its Applications},
  year        ={1991}
}
@proceedings{HOL92,
  address     ={Leuven, Belgium},
  editor      ={L. Claesen and M.J.C. Gordon},
  key         ={HOL92},
  keyword     ={HOL verification},
  month       ={September},
  organization={IFIP TC10/WG10.2},
  publisher   ={Elsevier Science Publishers},
  title       ={International Workshop on Higher Order Logic Theorem Proving and its Applications},
  year        ={1992}
}
@manual{HOL93,
  key         ={HOL93},
  organization={University of Cambridge, DSTO, SRI Internatioal},
  title       ={Description of the {HOL}-System},
  year        ={1993}
}
@proceedings{HOL93b,
  address     ={Vancouver, Canada},
  editor      ={J. Joyce and C.-J. H. Seger},
  key         ={HOL93b},
  keyword     ={HOL verification},
  month       ={August},
  publisher   ={Springer Verlag, LNCS No. 780},
  title       ={Higher Order Logic Theorem Proving and Its Applications},
  year        ={1993}
}
@proceedings{HOL94,
  address     ={Valletta, Malta},
  editor      ={Th.F. Melham and J. Camilleri},
  key         ={HOL94},
  keyword     ={HOL verification},
  month       ={September},
  publisher   ={Springer Verlag, LNCS No. 859},
  title       ={Higher Order Logic Theorem Proving and Its Applications},
  year        ={1994}
}
@proceedings{HOL95,
  address     ={Aspen Grove, Utah, USA},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={HOL95},
  keyword     ={HOL verification},
  month       ={September},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={International Workshop on Higher Order Logic Theorem Proving and its Applications},
  volume      ={971},
  year        ={1995}
}
@inproceedings{HRSJ91,
  address     ={Amsterdam},
  author      ={G.D. Hachtel and J.K. Rho and F. Somenzi and R. Jacoby},
  booktitle   ={European Design Automation Conference },
  key         ={HRSJ91},
  keyword     ={Finite_State_Machine_Optimisation},
  month       ={February},
  organization={IEEE},
  pages       ={184--191},
  publisher   ={IEEE Computer Society Press},
  title       ={{E}xact and {H}euristic {A}lgorithms for the {M}inimization of {I}ncompletely {S}pecified {S}tate {M}achines},
  year        ={1991}
}
@inproceedings{HSBK93,
  author      ={R. Hojati and T.R. Shiple and R.K. Brayton and R.P. Kurshan},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={HSBK93},
  keyword     ={formalism temporallogic ctl modelchecking omegafsm},
  pages       ={475--481},
  title       ={A Unified Approach to Language Containment and Fair {CTL} Model Checking},
  year        ={1993}
}
@proceedings{HUG88,
  address     ={Glasgow, Scotland},
  editor      ={G.J. Milne},
  key         ={HUG88},
  note        ={IFIP Transactions},
  publisher   ={North-Holland},
  title       ={The fusion of hardware design and verification},
  year        ={1988}
}
@proceedings{HUG92,
  address     ={Leuven, Belgium},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={HUG92},
  publisher   ={North-Holland},
  title       ={Higher Order Logic Theorem Proving and its Applications},
  year        ={1992}
}
@inproceedings{HZBP96,
  address     ={Turku, Finland},
  author      ={M. R. Heckman and C. Zhang and B. R. Becker and D. Peticolas and K. N. Levitt and R. A. Olsson},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={HZBP96},
  month       ={August},
  pages       ={235--250},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Towards Applying the Composition Principle to Verify a Microkernel Operating System},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{HaAL92,
  address     ={Leuven, Belgium},
  author      ={W.L. Harrison and M. Archer and K.N. Levitt},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={HaAL92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={347--358},
  publisher   ={North-Holland},
  title       ={A {HOL} Mechanisation of the Axiomatic Semantics of a Simple Distributed Programming Language},
  year        ={1992}
}
@inproceedings{HaCa95,
  address     ={Passau},
  author      ={W. Hardt and P. Camposano},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden beim Entwurf von Hardwaresystemen},
  editor      ={W. Grass and M. Mutz},
  key         ={HaCa95},
  keyword     ={3GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={1--10},
  publisher   ={Shaker Verlag},
  series      ={Berichte aus der Informatik},
  title       ={{S}pecification {A}nalysis for {HW/SW} {P}artitioning},
  year        ={1995}
}
@inproceedings{HaCh92,
  author      ={M.R. Hansen and Z. Chaochen},
  booktitle   ={REX'91, Real-Time: Theory in Practice},
  editor      ={W-P. de Roever},
  key         ={HaCh92},
  publisher   ={Springer Verlag, LNCS 600},
  title       ={Semantics and completeness of Duration Calculus},
  year        ={1992}
}
@inproceedings{HaDH92,
  address     ={Nijmegen},
  author      ={F.K. Hanna and N. Daeche and G. Howells},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={V. Stavridon and T.F. Melham and R.T. Boute},
  key         ={HaDH92},
  keyword     ={formalism higherorderlogic tutorial},
  month       ={June},
  organization={IFIP TC10/WG 10.2},
  pages       ={77--94},
  publisher   ={North-Holland},
  title       ={Implementation of the {Veritas Design Logic}},
  year        ={1992}
}
@inproceedings{HaDa85,
  author      ={F.K. Hanna and N. Daeche},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C.J. Koomen and T. Moto-oka},
  key         ={HaDa85},
  keyword     ={verification HOL},
  pages       ={418--433},
  publisher   ={Elsevier Science Publishers, North-Holland},
  remark      ={relationale Schaltungsbeschreibungen in HOL},
  title       ={Specification and Verification Using Higher-Order Logic},
  year        ={1985}
}
@article{HaDa86,
  author      ={F.K. Hanna and N. Daeche},
  journal     ={{IEE} Proceedings},
  key         ={HaDa86},
  month       ={September},
  number      ={5},
  pages       ={242-254},
  title       ={Specification and Verification of Digital Systems Using Higher-Order Predicate Logic},
  volume      ={133 Part E},
  year        ={1986}
}
@article{HaDa92,
  author      ={F.K. Hanna and N. Daeche},
  journal     ={Phil. Trans. R. Soc. Lond.},
  key         ={HaDa92},
  pages       ={121-135},
  title       ={Dependent Types and Formal Synthesis},
  volume      ={339},
  year        ={1992}
}
@inproceedings{HaDa93,
  address     ={Arles, France},
  author      ={F.K. Hanna and N. Daeche},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={HaDa93},
  keyword     ={formalism higherorderlogic specification hardware verification registertransferlevel},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={39--54},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Strongly-typed Theory of Structures and Behaviours},
  volume      ={683},
  year        ={1993}
}
@inproceedings{HaFB93,
  address     ={Quebec, Canada},
  author      ={N. Halbwachs and J.-C. Fernandez and A. Bouajjanni},
  booktitle   ={Symposium on Lucid and Intensional Programming (ISLIP)},
  key         ={HaFB93},
  month       ={April},
  title       ={An executable temporal logic to express safety properties and its connection with the language {L}ustre},
  year        ={1993}
}
@inproceedings{HaFK91,
  address     ={Gmunden, \"{O}sterreich},
  author      ={O.F. Haberl and J. Fr\"{o}{\ss}l and T. Kropf},
  booktitle   ={Workshop Secure Design and Test of Crypto-Chips},
  key         ={HaFK91},
  keyword     ={SFB358 workshop},
  month       ={October},
  organization={IFIP WG 10.5},
  title       ={A Self-Testable Boundary-Scan Compatible Hardware Implementation of an Extended {DES} Algorithm},
  year        ={1991}
}
@inproceedings{HaHH94,
  address     ={Grenoble, France},
  author      ={W. Hahn and A. Hagerer and C. Herrmann},
  booktitle   ={European Design Automation Conference },
  key         ={HaHH94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={362--367},
  publisher   ={IEEE Computer Society Press},
  title       ={{C}ompiled-{C}ode-{B}ased {S}imulation with {T}iming {V}erification},
  year        ={1994}
}
@inproceedings{HaHK96,
  address     ={New Brunswick, NJ, USA},
  author      ={R. H. Hardin and Z. {Har'El} and R. P. Kurshan},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={HaHK96},
  month       ={July/August},
  pages       ={423--427},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{COSPAN}},
  volume      ={1102},
  year        ={1996}
}
@article{HaKP82,
  author      ={D. Harel and D. Kozen and R. Parikh},
  journal     ={Journal of Computer System Science},
  key         ={HaKP82},
  keyword     ={omega},
  number      ={2},
  pages       ={144--170},
  title       ={Process Logic: Expressiveness, Decidability, Completeness},
  volume      ={25},
  year        ={1982}
}
@inproceedings{HaKV97,
  address     ={Warsaw},
  author      ={D. Harel and O. Kupferman and M.Y. Vardi},
  booktitle   ={Conference on Concurrency Theory (CONCUR)},
  key         ={HaKV97},
  month       ={July},
  pages       ={258--272},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={On the Complexity of Verifying Concurrent Transition Systems},
  volume      ={1243},
  year        ={1997}
}
@inproceedings{HaKe93,
  address     ={Bad Herrenalb},
  author      ={R. H\"{a}hnle and W. Kernig},
  booktitle   ={GI/ITG Workshop Formale Methoden zum Entwurf korrekter Systeme},
  editor      ={T. Kropf and R. Kumar and D. Schmid},
  key         ={HaKe93},
  keyword     ={1GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={69--78},
  publisher   ={Universit\"{a}t Karlsruhe, Interner Bericht Nr. 10/93},
  title       ={{V}erifikation of {S}witch-{L}evel {D}esign with {M}any-{V}alued {L}ogic},
  year        ={1993}
}
@article{HaKo82,
  author      ={D. Harel and D. Kozen},
  journal     ={Journal of Computer and System Sciences},
  key         ={HaKo82},
  pages       ={144-170},
  title       ={Process Logic: Expressiveness, Decidability, Completeness},
  volume      ={25},
  year        ={1982}
}
@inproceedings{HaKr92a,
  address     ={Kalamazoo, Michigan},
  author      ={O.F. Haberl and T. Kropf},
  booktitle   ={Great Lakes Symposium on {VLSI} (GLS-VLSI)},
  key         ={HaKr92a},
  keyword     ={SFB358 conference},
  month       ={February},
  pages       ={16--21},
  title       ={{A} {C}hip {S}olution to {H}ierarchical and {B}oundary-{S}can {C}ompatible {B}oard {L}evel {BIST}},
  year        ={1992}
}
@inproceedings{HaKr92b,
  address     ={Atlantic City, New Jersey},
  author      ={O.F. Haberl and T. Kropf},
  booktitle   ={{IEEE} {VLSI} Test Symposium},
  key         ={HaKr92b},
  keyword     ={SFB358 conference},
  month       ={April},
  pages       ={37--42},
  title       ={{A} {M}ethodology for the {I}nsertion of a {H}ierarchical and {B}oundary-{S}can {C}ompatible {S}elf-{T}est},
  year        ={1992}
}
@inproceedings{HaKr92c,
  address     ={Baltimore},
  author      ={O.F. Haberl and T. Kropf},
  booktitle   ={International Test Conference (ITC)},
  key         ={HaKr92c},
  keyword     ={SFB358 conference},
  month       ={September},
  pages       ={732--741},
  title       ={{HIST}: {A} {M}ethodology for the {A}utomatic {I}nsertion of a {H}ierarchical {S}elf-{T}est},
  year        ={1992}
}
@inproceedings{HaKr93a,
  address     ={Charleston, South-Carolina, USA},
  author      ={O.F. Haberl and T. Kropf},
  booktitle   ={BIST-DFT Workshop},
  key         ={HaKr93a},
  keyword     ={SFB358 workshop},
  month       ={March},
  title       ={{A} {C}hip for a {H}ierarchical {B}oundary-{S}can {A}rchitecture},
  year        ={1993}
}
@inproceedings{HaKr93b,
  address     ={Holzau, Erzgebirge},
  author      ={O.F. Haberl and T. Kropf},
  booktitle   ={Workshop Testmethoden und Zuverl\"{a}{\ss}igkeit von Schaltungen und Systemen},
  key         ={HaKr93b},
  keyword     ={SFB358 workshop},
  month       ={March},
  organization={ITG/GI},
  title       ={Ein {C}hip zur {U}nterst\"{u}tzung des hierarchischen und Boundary-Scan kompatiblen {S}elbsttests f\"{u}r {B}augruppen und {S}ysteme},
  year        ={1993}
}
@inproceedings{HaKr94,
  address     ={Paris, France},
  author      ={O.F. Haberl and T. Kropf},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={HaKr94},
  keyword     ={SFB358 conference},
  month       ={March},
  pages       ={220--226},
  publisher   ={IEEE},
  title       ={{S}elf {T}estable {B}oards with {S}tandard {IEEE} 1149.5 {M}odule {T}est and {M}aintenance ({MTM})},
  year        ={1994}
}
@article{HaKr95,
  author      ={O. Haberl and Th. Kropf},
  journal     ={Journal of Electronic Testing: Theory and Applications (JETTA)},
  key         ={HaKr95},
  keyword     ={SFB358 journal},
  pages       ={85--106},
  title       ={{A} {H}ierarchical {S}elf {T}est {M}ethodology for {C}hips, {B}oards and {S}ystems},
  volume      ={6},
  year        ={1995}
}
@techreport{HaKu87,
  author      ={Z. {Har'El} and R. P. Kurshan},
  institution ={AT\&T Bell Laboratories},
  key         ={HaKu87},
  number      ={11211-871009-21TM},
  title       ={The {COSPAN} user's {G}uide},
  year        ={1987}
}
@techreport{HaKu90a,
  address     ={Murray Hill, NJ},
  author      ={Z. {Har'El} and R.P. Kurshan},
  institution ={AT\&T Bell Laboratories},
  key         ={HaKu90a},
  month       ={January},
  title       ={Software for Analytical Development of Communication Protocols},
  year        ={1990}
}
@article{HaKu90b,
  author      ={Z. {Har'El} and R.P. Kurshan},
  journal     ={AT\&T Technical journal},
  key         ={HaKu90b},
  month       ={January},
  pages       ={45-59},
  title       ={{S}oftware for {A}nalytical {D}evelopement of {C}ommunications {P}rotocols},
  volume      ={69(1)},
  year        ={1990}
}
@inproceedings{HaLD89,
  author      ={F.K. Hanna and M. Longley and N. Daeche},
  booktitle   ={{IFIP} International Workshop on Applied Formal Methods for Correct {VLSI} Design},
  editor      ={L. Claesen},
  key         ={HaLD89},
  publisher   ={North-Holland},
  title       ={Formal Synthesis of Digital Systems},
  year        ={1989}
}
@inproceedings{HaLP90,
  address     ={Washington, D.C.},
  author      ={E. Harel and O. Lichtenstein and A. Pnueli},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={HaLP90},
  month       ={June},
  pages       ={402--413},
  publisher   ={IEEE Computer Society Press},
  title       ={{E}xplicit {C}lock {T}emporal {L}ogic},
  year        ={1990}
}
@article{HaLR92,
  author      ={N. Halbwachs and F. Lagnier and C. Ratel},
  journal     ={IEEE Transactions on Software Engineering, Special Issue on the Specification and Analysis of Real-Time Systems},
  key         ={HaLR92},
  month       ={September},
  title       ={Programming and verifying critical systems by means of the synchronous data-flow programming language {L}ustre},
  year        ={1992}
}
@inproceedings{HaLR93,
  address     ={Twente},
  author      ={N. Halbwachs and F. Lagnier and P. Raymond},
  booktitle   ={Conference on Algebraic Methodology and Software Technology (AMAST)},
  key         ={HaLR93},
  month       ={June},
  publisher   ={Springer Verlag},
  title       ={Synchronous observers and the verification of reactive systems},
  year        ={1993}
}
@inproceedings{HaLe91b,
  address     ={Davis, California},
  author      ={W.L. Harrison and K.N. Levitt},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={HaLe91b},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Mechanizing Security in {HOL}},
  year        ={1991}
}
@inproceedings{HaMC94,
  address     ={Grenoble, France},
  author      ={E.A. Harcourt and J. Mauney and T. Cook},
  booktitle   ={European Design Automation Conference },
  key         ={HaMC94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={296--301},
  publisher   ={IEEE Computer Society Press},
  title       ={{F}ormal {S}pecification and {S}imulation of {I}nstruction-{L}evel {P}arallelism},
  year        ={1994}
}
@inproceedings{HaMM83,
  address     ={New York},
  author      ={J. Halpern and Z. Manna and B. Moszkowski},
  booktitle   ={International Colloquium on Automata, Languages and Programming (ICALP)},
  key         ={HaMM83},
  pages       ={278--291},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Hardware Semantics Based on Temporal Intervals},
  volume      ={154},
  year        ={1983}
}
@inproceedings{HaMo84,
  author      ={J. Y. Halpern and Y. Moses},
  booktitle   ={{ACM} Symposium on Principles of Distributed Computing},
  key         ={HaMo84},
  pages       ={50--61},
  title       ={Knowledge and Common Knowledge in a Distributed Environment},
  year        ={1984}
}
@article{HaNa96,
  author      ={D. Harel and A. Naamad},
  journal     ={{ACM} Transactions on Software Engenieering Methods},
  key         ={HaNa96},
  number      ={4},
  title       ={The {STATEMATE} Semantics of Statecharts},
  volume      ={5},
  year        ={1996}
}
@techreport{HaOl93,
  author      ={M.R. Hansen and E.-R. Olderog},
  institution ={University of Oldenburg},
  key         ={HaOl93},
  title       ={Constructing circuits from decidable Duration Calculus},
  type        ={Report},
  year        ={1993}
}
@inproceedings{HaOw80,
  author      ={J. Y. Hailpern and S. S. Owicki},
  booktitle   ={Trends and Applications 1980: Computer Network Protocols},
  key         ={HaOw80},
  pages       ={18--28},
  title       ={Verifying Network Protocols Using Temporal Logic},
  year        ={1980}
}
@inbook{HaPn85,
  author      ={D. Harel and A. Pnueli},
  chapter     ={On the development of reactive systems},
  key         ={HaPn85},
  publisher   ={Springer Verlag},
  series      ={{NATO} Advanced Study Institute on Logics and Models for Verification and Specification of Concurrent Systems},
  title       ={Logic and Models of Concurrent Systems},
  year        ={1985}
}
@article{HaSc93,
  author      ={R. H\"{a}hnle and P. Schmitt},
  journal     ={Journal of Automated Reasoning},
  key         ={HaSc93},
  keyword     ={Logic},
  title       ={The liberalized $\delta$-rule},
  year        ={1993}
}
@inproceedings{HaSe94,
  address     ={Standford, California, USA},
  author      ={S. Hazelhurst and C.-J.H. Seger},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={HaSe94},
  month       ={June},
  pages       ={273--285},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Composing Symbolic Trajectory Evaluation Results},
  volume      ={818},
  year        ={1994}
}
@article{HaSe95,
  author      ={S. Hazelhurst and C.-J.H. Seger},
  journal     ={IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={HaSe95},
  keyword     ={Symbolic_trajectory_evaluation compositional},
  month       ={April},
  number      ={4},
  pages       ={413--422},
  title       ={{A} {S}imple {T}heorem {P}rover {B}ased on {S}ymbolic {T}rajectory {E}valuation and {BDD}'s},
  volume      ={14},
  year        ={1995}
}
@techreport{HaSe95a,
  author      ={S. Hazelhurst and C.-J.H. Seger},
  institution ={Department of Computer Science, University of British Columbia},
  key         ={HaSe95a},
  keyword     ={symbolic_trajectory_evaluation benchmarks compositional_verification temporal_logic theorem_proving},
  month       ={October},
  note        ={ftp://ftp.cs.ubc.ca/pub/local/techreports/1995/TR-95-21.ps.gz},
  number      ={95-21},
  title       ={{V}erification of {B}enchmarks 17 and 22 of the {IFIP} {WG10.5} {B}enchmark {C}ircuit {S}uite},
  year        ={1995}
}
@incollection{HaSe97,
  author      ={S. Hazelhurst and C.-J.H. Seeger},
  booktitle   ={Formal Hardware Verification -- Methods and Systems in Comparison},
  edition     ={State of the Art Report},
  editor      ={T. Kropf},
  key         ={HaSe97},
  keyword     ={SFB358 book lncs1287},
  month       ={August},
  pages       ={3--78},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Symbolic Trajectory Evaluation},
  volume      ={1287},
  year        ={1997}
}
@inproceedings{HaSh84,
  author      ={S. Hart and M. Sharir},
  booktitle   ={{ACM} Symposium on Theory of Computing},
  key         ={HaSh84},
  pages       ={1--13},
  title       ={Probabilistic Temporal Logics For Finite and Bounded Models},
  year        ={1984}
}
@inproceedings{HaSh86,
  author      ={J. Y. Halpern and Y. Shoham},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={HaSh86},
  pages       ={279--292},
  title       ={A Propositional Modal Logic of Time Intervals},
  year        ={1986}
}
@inproceedings{HaSh96,
  address     ={Oxford, UK},
  author      ={K. Havelund and N. Shankar},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  key         ={HaSh96},
  month       ={March},
  pages       ={662--681},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Experiments in {T}heorem {P}roving and {M}odel {C}hecking for {P}rotocol {V}erification},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{HaSl94,
  address     ={Malta},
  author      ={J. Harrison and K. Slind},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  key         ={HaSl94},
  keyword     ={formalism higherorderlogic HOL},
  month       ={September},
  publisher   ={Short Paper},
  title       ={A Reference Version of {HOL}},
  year        ={1994}
}
@book{HaSt66,
  author      ={J. Hartmanis and R.E. Stearns},
  key         ={HaSt66},
  keyword     ={Logic},
  publisher   ={Prentice Hall},
  title       ={Algebraic Structure Theory of Sequential Machines},
  year        ={1966}
}
@inproceedings{HaTh87,
  address     ={Berlin},
  author      ={T. Hafer and W. Thomas},
  booktitle   ={International Colloquium on Automata, Languages and Programming (ICALP)},
  key         ={HaTh87},
  pages       ={269--279},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Computation Tree Logic {CTL} and Path Quantifiers in The Monadic Theory of The Binary Tree},
  volume      ={267},
  year        ={1987}
}
@inproceedings{HaTh93,
  address     ={Vancouver, Canada},
  author      ={J. Harrison and L. Thery},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={HaTh93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={174--185},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Extending the {HOL} Theorem Prover with a Computer Algebra System to Reason about the Reals},
  volume      ={780},
  year        ={1993}
}
@inproceedings{HaTu88,
  address     ={Glasgow, Scotland},
  author      ={N.A. Harman and J.V. Tucker},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={HaTu88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={375--396},
  publisher   ={North-Holland},
  title       ={Clocks, Retimings, and the Formal Specification of a {UART}},
  year        ={1988}
}
@inproceedings{HaTu93,
  address     ={Arles, France},
  author      ={N.A. Harman and J.V. Tucker},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={HaTu93},
  keyword     ={verification},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={92--108},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Algebraic Models and the Correctness of Microprocessors},
  volume      ={683},
  year        ={1993}
}
@inproceedings{HaVa86,
  author      ={J. Y. Halpern and M. Y. Vardi},
  booktitle   ={{ACM} Symposium on Theory of Computing},
  key         ={HaVa86},
  pages       ={304--315},
  title       ={The Complexity of Reasoning about Knowledge and Time (Extended Abstract)},
  year        ={1986}
}
@inproceedings{HaWi92,
  address     ={Leuven, Belgium},
  author      ={K.M. Hall and P.J. Windley},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={HaWi92},
  keyword     ={microprocessor hardware systemlevel specification simulation},
  month       ={September},
  organization={IFIP TC10/WG10.2},
  pages       ={507--526},
  publisher   ={North-Holland},
  title       ={Simulating Microprocessors from Formal Specifications},
  year        ={1992}
}
@article{Hagi91,
  author      ={M. Hagiya},
  journal     ={New Generation Computing},
  key         ={Hagi91},
  pages       ={403-420},
  title       ={Synthesis of Rewrite Programs by Higher-Order and Semantic Unification},
  volume      ={8},
  year        ={1991}
}
@book{Hail82,
  address     ={Berlin},
  author      ={B. T. Hailpern},
  key         ={Hail82},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verifying Concurrent Processes Using Temporal Logic},
  volume      ={129},
  year        ={1982}
}
@inproceedings{Hajj90,
  author      ={I.N. Hajj},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={Hajj90},
  organization={IEEE},
  pages       ={488--491},
  title       ={An Algebra for Switch-Level Simulation},
  year        ={1990}
}
@article{Hake85,
  author      ={A. Haken},
  journal     ={Theoretical Computer Science},
  key         ={Hake85},
  pages       ={297-308},
  title       ={Axiomatizing hardware description languages},
  volume      ={39},
  year        ={1985}
}
@book{Halb93,
  author      ={N. Halbwachs},
  key         ={Halb93},
  publisher   ={Kluwer Academic Publishers},
  title       ={Synchronous programming of reactive systems},
  year        ={1993}
}
@inproceedings{Hale87,
  address     ={England},
  author      ={R. Hale},
  booktitle   ={Temporal Logic in Specification},
  key         ={Hale87},
  organization={Computer Laboratory, University of Cambridge},
  pages       ={374--408},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Using Temporal Logic for Prototyping: The Design of a Lift Controller},
  volume      ={398},
  year        ={1987}
}
@inproceedings{Hale91a,
  address     ={Davis, California},
  author      ={R. Hale},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Hale91a},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={52--58},
  publisher   ={IEEE Computer Society Press},
  title       ={Reasoning about Software},
  year        ={1991}
}
@article{Hall90,
  author      ={A. Hall},
  journal     ={IEEE Software},
  key         ={Hall90},
  keyword     ={tutorial software verification systemlevel hardware},
  month       ={September},
  pages       ={11--19},
  title       ={Seven Myths of Formal Methods},
  year        ={1990}
}
@book{Halm74,
  address     ={New York},
  author      ={P. Halmos},
  key         ={Halm74},
  publisher   ={Springer-Verlag},
  title       ={Lecture on Boolean Algebras},
  year        ={1974}
}
@article{Halp87,
  author      ={J. Y. Halpern},
  journal     ={Annual Revue of Computer Science},
  key         ={Halp87},
  pages       ={37-68},
  title       ={Using Reasoning about Knowledge to Analyze Distributed Systems},
  volume      ={2},
  year        ={1987}
}
@misc{Hann84,
  author      ={K. Hanna},
  howpublished={{HOL}-Workshop, University of Kent},
  key         ={Hann84},
  keyword     ={hardware verification transistorlevel},
  month       ={September},
  title       ={{R}easoning about {R}eal {C}ircuits},
  year        ={1984}
}
@inproceedings{Hann94,
  address     ={Malta},
  author      ={K. Hanna},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={Hann94},
  month       ={September},
  pages       ={235--253},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Invited paper: Reasoning about Real Circuits},
  volume      ={859},
  year        ={1994}
}
@book{Hara69,
  author      ={F. Harary},
  key         ={Hara69},
  keyword     ={graph},
  publisher   ={Addison-Wesley},
  title       ={Graph Theory},
  year        ={1969}
}
@phdthesis{Hare79,
  author      ={D. Harel},
  key         ={Hare79},
  school      ={Laboratry for Computer Science, MIT},
  title       ={Dynamic Logic: Axiomatics and Expressive Power},
  year        ={1979}
}
@incollection{Hare84,
  address     ={Reidel, Boston, MA},
  author      ={D. Harel},
  booktitle   ={Handbook of Philosophical Logic},
  editor      ={D. Gabbay and F. Guenthner},
  key         ={Hare84},
  pages       ={497--604},
  series      ={Extensions of Classical Logic},
  title       ={Dynamic Logic},
  volume      ={II},
  year        ={1984}
}
@article{Hare87,
  author      ={D. Harel},
  journal     ={Science of Computing},
  key         ={Hare87},
  pages       ={231--274},
  title       ={Statecharts: A visual formalism for complex systems},
  year        ={1987}
}
@mastersthesis{Hare88,
  address     ={Rehovot, Israel},
  author      ={D. Harel},
  key         ={Hare88},
  school      ={The Weizmann Intistude of Science},
  title       ={{T}emporal {A}nalysis of {R}eal-{T}ime {S}ystems},
  year        ={1988}
}
@inproceedings{Harr92,
  address     ={Leuven, Belgium},
  author      ={J. Harrison},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Harr92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={145--164},
  publisher   ={North-Holland},
  title       ={Constructing the real numbers in {HOL}},
  year        ={1992}
}
@inproceedings{Harr93,
  address     ={Vancouver, Canada},
  author      ={J. Harrison},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Harr93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={427--438},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={A {HOL} Decision Procedure for Elementary Real Algebra},
  volume      ={780},
  year        ={1993}
}
@inproceedings{Harr94,
  address     ={Malta},
  author      ={J. Harrison},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={Harr94},
  month       ={September},
  pages       ={254--268},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Binary Decision Diagrams as a {HOL} Derived Rule},
  volume      ={859},
  year        ={1994}
}
@inproceedings{Harr95,
  address     ={Aspen Grove, Utah, USA},
  author      ={J. Harrison},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={Harr95},
  month       ={September},
  pages       ={186--199},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{F}loating {P}oint {V}erification in {HOL}},
  volume      ={971},
  year        ={1995}
}
@inproceedings{Harr95a,
  address     ={Aspen Grove, Utah, USA},
  author      ={J. Harrison},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={Harr95a},
  month       ={September},
  pages       ={200--213},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{I}nductive {D}efinitions: {A}utomation and {A}pplication},
  volume      ={971},
  year        ={1995}
}
@inproceedings{Harr96,
  address     ={Turku, Finland},
  author      ={J. Harrison},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={Harr96},
  month       ={August},
  pages       ={203--220},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Mizar Mode for {HOL}},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{Harr96a,
  address     ={Turku, Finland},
  author      ={J. Harrison},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={Harr96a},
  month       ={August},
  pages       ={221--234},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Stalmarck's Algorithm as a {HOL} Derived Rule},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{Harr96b,
  address     ={Palo Alto, CA, USA},
  author      ={J. Harrison},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={Harr96b},
  month       ={November},
  pages       ={265--269},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{HOL} Light: A Tutorial Introduction},
  volume      ={1166},
  year        ={1996}
}
@phdthesis{Harr96c,
  author      ={J. Harrison},
  key         ={Harr96c},
  school      ={University of Cambridge},
  title       ={Theorem Proving with the Real Numbers},
  year        ={1996}
}
@book{Hart77,
  author      ={R.W. Hartenstein},
  key         ={Hart77},
  keyword     ={HDL KARL},
  publisher   ={North-Holland},
  remark      ={Definition von KARL},
  title       ={Fundamentals of Structured Hardware Design},
  year        ={1977}
}
@book{Hart87,
  author      ={R.W. Hartenstein},
  key         ={Hart87},
  keyword     ={HDL},
  publisher   ={North-Holland},
  series      ={Advances in CAD for {VLSI}},
  title       ={Hardware Description Languages},
  volume      ={7},
  year        ={1987}
}
@article{Hase52,
  author      ={G. Hasenj\"{a}ger},
  journal     ={Journal of Symbolic Logic},
  key         ={Hase52},
  keyword     ={omega},
  pages       ={81--97},
  title       ={{\"{U}ber} omega-Unvollst\"{a}ndigkeit in der Peano-Arithmetik},
  volume      ={17},
  year        ={1952}
}
@book{Hatc82,
  address     ={Oxford, England},
  author      ={W.S. Hatcher},
  key         ={Hatc82},
  publisher   ={Pergamon Press},
  title       ={The Logical Foundations of Mathematics},
  year        ={1982}
}
@article{Haye82,
  author      ={J.P. Hayes},
  journal     ={IEEE {IEEE}},
  key         ={Haye82},
  keyword     ={verification},
  month       ={October},
  number      ={10},
  pages       ={1140--1151},
  title       ={A unified switching theory with applications to {VLSI} design},
  volume      ={70},
  year        ={1982}
}
@inproceedings{Haye82a,
  author      ={J.P. Hayes},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={Haye82a},
  organization={IEEE},
  pages       ={393--399},
  title       ={A Fault Simulation Methodology for {VLSI}},
  year        ={1982}
}
@inproceedings{Haye84a,
  author      ={J.P. Hayes},
  booktitle   ={{IEEE} Conference},
  key         ={Haye84a},
  organization={IEEE},
  pages       ={177--182},
  title       ={A Systematic Approach to Multivalued Digital Simulation},
  year        ={1984}
}
@article{Haye84b,
  author      ={J.P. Hayes},
  journal     ={{IEEE} Transactions on Computer-aided Design},
  key         ={Haye84b},
  month       ={July},
  number      ={3},
  pages       ={200--207},
  title       ={Fault Modeling for Digital {MOS} Integrated Circuits},
  volume      ={CAD-3},
  year        ={1984}
}
@article{Haye86,
  author      ={J.P. Hayes},
  journal     ={{IEEE} Transactions on Computer},
  key         ={Haye86},
  month       ={July},
  number      ={7},
  pages       ={602--612},
  title       ={Pseudo-Boolean Logic Circuits},
  volume      ={C-37},
  year        ={1986}
}
@book{Haye88,
  author      ={J.P. Hayes},
  edition     ={2.},
  key         ={Haye88},
  keyword     ={hardware systemlevel specification textbook},
  publisher   ={McGraw-Hill},
  title       ={Computer Architecture and Organization},
  year        ={1988}
}
@phdthesis{Haze96,
  address     ={Department of Computer Science},
  author      ={S. Hazelhurst},
  key         ={Haze96},
  school      ={University of British Columbia},
  title       ={Compositional Model Checking of Partially-Ordered State Spaces},
  year        ={1996}
}
@inproceedings{HeCr96,
  address     ={Turku, Finland},
  author      ={B. Heyd and P. Cregut},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={HeCr96},
  month       ={August},
  pages       ={251--266},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Modular Coding of Unity in Coq},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{HeEM97,
  address     ={Toledo, Spain},
  author      ={M. Heuchling and W. Ecker and M. Mrva},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={HeEM97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={The {Shall} {Design} test {Development} model for hardware systems},
  year        ={1997}
}
@inproceedings{HeHo95,
  address     ={Liege, Belgium},
  author      ={T. A. Henzinger and P. -H. Ho},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={HeHo95},
  month       ={July},
  pages       ={225--238},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Algorithmic analysis of Nonlinear Hybrid Systems},
  volume      ={939},
  year        ={1995}
}
@inproceedings{HeKR97,
  author      ={T.A. Henzinger and O. Kupferman and S. Rajamani},
  booktitle   ={Conference on Concurrency Theory (CONCUR)},
  key         ={HeKR97},
  month       ={July},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Fair simulation},
  volume      ={1243},
  year        ={1997}
}
@inproceedings{HeKV96,
  address     ={Pisa},
  author      ={T.A. Henzinger and O. Kupferman and M.Y. Vardi},
  booktitle   ={Conference on Concurrency Theory (CONCUR)},
  key         ={HeKV96},
  pages       ={514-529},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Space-Efficient On-the-fly Algorithm for Real-Time Model checking},
  volume      ={1119},
  year        ={1996}
}
@inproceedings{HeKe94,
  address     ={Paris},
  author      ={J. Helbig and P. Kelb},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={HeKe94},
  keyword     ={Finite_State_Machine_Verification},
  month       ={February},
  pages       ={142--151},
  publisher   ={IEEE Computer Society Press},
  title       ={{A}n {OBDD}-{R}epresentation of {S}tatecharts},
  year        ={1994}
}
@inproceedings{HeKo94,
  address     ={L\"{u}beck, Germany},
  author      ={T.A. Henzinger and P.W. Kopke},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={HeKo94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={351--372},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{V}erification {M}ethods for the {D}ivergent {R}uns of {C}lock {S}ystems},
  volume      ={863},
  year        ={1994}
}
@techreport{HeKr93,
  address     ={Universit\"{a}t Dortmund},
  author      ={P. Herrmann and H. Krumm},
  institution ={Fachbericht Informatik},
  key         ={HeKr93},
  note        ={http://ls4-www.informatik.uni-dortmund.de/RVS/puliste.html},
  number      ={485},
  title       ={{R}eport on {A}nalysis and {V}erification {T}echniques},
  year        ={1993}
}
@inproceedings{HeKu97,
  address     ={Grenoble, France},
  author      ={T. Henzinger and O. Kupferman},
  booktitle   ={Workshop on {H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={HeKu97},
  pages       ={48-62},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={From Quantity to Quality},
  year        ={1997}
}
@inproceedings{HeLM97,
  address     ={Grenoble, France},
  author      ={M. Heymann and F. Lin and G. Meyer},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={HeLM97},
  pages       ={376-390},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Control Synthesis for a Class of Hybrid systems subject to Configuration Based Safety Constraints},
  year        ={1997}
}
@article{HeLe96,
  author      ={M.P.E. Heimdahl and N.G. Leveson},
  journal     ={{IEEE} Transactions on Software Engineering},
  key         ={HeLe96},
  title       ={Completeness and Consistency in Hierarchical State-Based Requirements},
  year        ={1996}
}
@inproceedings{HeMP91,
  address     ={Mook},
  author      ={T.A. Henzinger and Z. Manna and A. Pnueli},
  booktitle   ={Real-Time: Theory in Practice},
  key         ={HeMP91},
  keyword     ={transitionsystem},
  month       ={June},
  pages       ={226--251},
  publisher   ={Springer-Verlag},
  title       ={Timed Transition Systems},
  year        ={1991}
}
@incollection{HeMP93,
  author      ={T. Henzinger and Z. Manna and A. Pnueli},
  booktitle   ={Hybrid Systems},
  editor      ={R.L. Grossmann and A. Nerode and A.P. Ravn and H. Rischel},
  key         ={HeMP93},
  pages       ={60--76},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{T}owards {R}efining {T}emporal {S}pecifications into {H}ybrid {S}ystems},
  volume      ={736},
  year        ={1993}
}
@article{HeMP94,
  author      ={T.A. Henzinger and Z. Manna and A. Pnueli},
  journal     ={Information and Computation},
  key         ={HeMP94},
  number      ={2},
  pages       ={273--337},
  title       ={{T}emporal {P}roof {M}ethodologies for {T}imed {T}ransition {S}ystems},
  volume      ={112},
  year        ={1994}
}
@article{HeMi85,
  author      ={M. Hennessy and R. Milner},
  journal     ={Jornal of the ACM},
  key         ={HeMi85},
  pages       ={137-161},
  title       ={{A}lgebraic {L}aws for {N}on-{D}eterminism and {C}oncurrency},
  volume      ={32},
  year        ={1985}
}
@book{HePa90,
  address     ={San Mateo, CA, USA},
  author      ={J.L. Hennessy and D.A. Patterson},
  key         ={HePa90},
  keyword     ={hardware systemlevel textbook microprocessor},
  publisher   ={Morgan Kaufmann Publishers Inc.},
  title       ={Computer Architecture: A quantitative Approach},
  year        ={1990}
}
@inproceedings{HePa94,
  address     ={Grenoble, France},
  author      ={R. Herrmann and H. Pargmann},
  booktitle   ={European Design Automation Conference },
  key         ={HePa94},
  keyword     ={VHDL},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={578--585},
  publisher   ={IEEE Computer Society Press},
  title       ={{C}omputing {B}inary {D}ecision {D}iagrams for {VHDL} {D}ata {T}ypes},
  year        ={1994}
}
@inproceedings{HeZh94,
  address     ={L\"{u}beck, Germany},
  author      ={J. He and J. Zheng},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={HeZh94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={336--350},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{S}imulation {A}pproach to {P}rovably {C}orrect {H}ardware {C}ompilation},
  volume      ={863},
  year        ={1994}
}
@book{Hell67,
  address     ={New York},
  author      ={H. Hellerman},
  key         ={Hell67},
  keyword     ={HDL},
  publisher   ={McGraw-Hill},
  title       ={Digital Computer Systems Principles},
  year        ={1967}
}
@article{Henk50,
  author      ={L. Henkin},
  journal     ={Journal of Symbolic Logic},
  key         ={Henk50},
  pages       ={81-91},
  title       ={Completeness in the theory of types},
  volume      ={15},
  year        ={1950}
}
@article{Henk53,
  author      ={L. Henkin},
  journal     ={Journal of Symbolic Logic},
  key         ={Henk53},
  keyword     ={omega},
  pages       ={201--208},
  title       ={Banishing the rule of substitution for functional variables},
  volume      ={18},
  year        ={1953}
}
@book{Henn88,
  author      ={M. Hennessy},
  key         ={Henn88},
  publisher   ={MIT Press},
  title       ={Algebraic Theory of Processes},
  year        ={1988}
}
@inproceedings{Henz90,
  author      ={T.A. Henzinger},
  booktitle   ={{ACM} Symposium on Principles of Distributed Computing},
  key         ={Henz90},
  pages       ={281--296},
  publisher   ={ACM Press},
  title       ={{H}alf-{O}rder {M}odal {L}ogic: {H}ow to {P}rove {R}eal-{T}ime {P}roperties},
  year        ={1990}
}
@phdthesis{Henz91,
  address     ={Stanford},
  author      ={T.A. Henzinger},
  key         ={Henz91},
  school      ={Stanford University},
  title       ={{T}he {T}emporal {S}pecification and {V}erification of {R}eal-{T}ime {S}ystems},
  year        ={1991}
}
@inproceedings{Herb88,
  address     ={Glasgow, Scotland},
  author      ={J. Herbert},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={Herb88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={1--26},
  publisher   ={North-Holland},
  title       ={Temporal Abstraction of Digital Designs},
  year        ={1988}
}
@techreport{Herb88a,
  author      ={J.M.J. Herbert},
  institution ={Computer Laboratory, University of Cambridge},
  key         ={Herb88a},
  number      ={124},
  title       ={Formal Verification of Basic Memory Devices},
  year        ={1988}
}
@inproceedings{Herb91a,
  address     ={Davis, California},
  author      ={J. Herbert},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Herb91a},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={13--21},
  publisher   ={IEEE Computer Society Press},
  title       ={Dealing with Temporal Complexity in Hardware Verification},
  year        ={1991}
}
@inproceedings{Herb91b,
  address     ={Davis, California},
  author      ={J. Herbert},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Herb91b},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Hardware Verification {II}},
  year        ={1991}
}
@book{Herm63,
  author      ={H. Hermes},
  key         ={Herm63},
  keyword     ={Logic},
  publisher   ={Teubner},
  title       ={{E}inf\"{u}hrung in die mathematische {L}ogik},
  year        ={1963}
}
@mastersthesis{Herr92,
  address     ={Oldenburg},
  author      ={R. Herrmann},
  key         ={Herr92},
  school      ={University of Oldenburg},
  title       ={Translation of Hardware oriented Data Types into {BDD}s},
  year        ={1992}
}
@book{Heus86,
  author      ={H. Heuser},
  key         ={Heus86},
  publisher   ={Teubner Verlag, Stuttgart},
  title       ={{L}ehrbuch der {A}nalysis},
  year        ={1986}
}
@book{HiAc72,
  author      ={D. Hilbert and W. Ackermann},
  key         ={HiAc72},
  keyword     ={Logic},
  publisher   ={Springer-Verlag},
  title       ={{G}rundz\"{u}ge der theoretischen {L}ogik},
  year        ={1972}
}
@article{HiHu77,
  author      ={F.J. Hill and B. Huey},
  journal     ={IEEE Computer},
  key         ={HiHu77},
  keyword     ={HDL test},
  month       ={June},
  pages       ={28--33},
  title       ={A Design Language Based Approach to Test Sequence Generation},
  year        ={1977}
}
@book{HiSe86,
  author      ={J.R. Hindley and J.P. Seldin},
  key         ={HiSe86},
  publisher   ={Cambrigde University Press},
  title       ={An Introduction to Combinators and the $\lambda$-calculus},
  year        ={1986}
}
@article{Hill92,
  author      ={F.J. Hill},
  journal     ={IEEE Design \& Test of Computers},
  key         ={Hill92},
  keyword     ={HDL},
  month       ={September},
  pages       ={73--75},
  title       ={{AHPL}: Then and Now},
  year        ={1992}
}
@article{Hint55,
  author      ={K.J.J. Hintikka},
  journal     ={Acta Philosophica Fennica},
  key         ={Hint55},
  pages       ={7-55},
  title       ={Form and Content in Quantification Theory},
  volume      ={8},
  year        ={1955}
}
@inproceedings{Hitc82,
  author      ={R.B. Hitchcock},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={Hitc82},
  keyword     ={verification},
  pages       ={594--603},
  title       ={Timing verification and the timing analysis program},
  year        ={1982}
}
@inproceedings{HoBr95,
  address     ={Liege, Belgium},
  author      ={R. Hojati and R. K. Brayton},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={HoBr95},
  month       ={July},
  pages       ={98--113},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Automatic Datapath Abstraction in Hardware Systems},
  volume      ={939},
  year        ={1995}
}
@inproceedings{HoDB97,
  address     ={Toledo, Spain},
  author      ={R. Hojati and D. Dill and R.K. Brayton},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={HoDB97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Verifying linear temporal properties of data intensive controllers using finite instantiations},
  year        ={1997}
}
@inproceedings{HoGG92,
  author      ={J.J. Horning and S.J. Garland and J. v. Guttag},
  booktitle   ={Workshop on Designing Correct Circuits},
  key         ={HoGG92},
  pages       ={1-26},
  title       ={Using Transformations and Verification in Circuit Design},
  year        ={1992}
}
@book{HoGo92,
  address     ={Hemel Hempstead, UK},
  booktitle   ={Mechanized Reasoning and Hardware Design},
  editor      ={C.A.R. Hoare and M.J.C. Gordon},
  key         ={HoGo92},
  publisher   ={Prentice Hall International Series in Computer Science},
  title       ={Mechanized {R}easoning and {H}ardware {D}esign},
  year        ={1992}
}
@inproceedings{HoKu88,
  author      ={D. Hofbauer and R.-D. Kutsche},
  booktitle   ={International Workshop on Algebraic and Logic Programming},
  key         ={HoKu88},
  keyword     ={Rewrite Methods},
  pages       ={180--190},
  title       ={Proving Inductive Theorems based on term rewriting systems},
  year        ={1988}
}
@book{HoKu89,
  author      ={D. Hofbauer and R.-D. Kutsche},
  key         ={HoKu89},
  keyword     ={Logic Rewrite},
  publisher   ={Vieweg Verlag},
  title       ={{G}rundlagen des maschinellen {B}eweisens},
  year        ={1989}
}
@inproceedings{HoMA95,
  address     ={Austin, Texas},
  author      ={Y.V. Hoskote and D. Moundanos and J.A. Abraham},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={HoMA95},
  keyword     ={verification},
  month       ={October},
  organization={The University of Texas at Austin},
  title       ={{A}utomatic {E}xtraction of the {C}ontrol {F}low {M}achine and {A}pplication to {E}valuating {C}overage of {V}erification {V}ectors},
  year        ={1995}
}
@inproceedings{HoMB94,
  address     ={Standford, California, USA},
  author      ={R. Hojati and R. Mueller-Thuns and R. K. Brayton},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={HoMB94},
  month       ={June},
  pages       ={391--403},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Improving Language Containment Using fairness Graphs},
  volume      ={818},
  year        ={1994}
}
@inproceedings{HoMa94,
  address     ={Malta},
  author      ={P.V. Homeier and D.F. Martin},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={HoMa94},
  month       ={September},
  pages       ={269--284},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Trustworthy Tools for Trustworthy Programs: A Verified Verification Condition Generator},
  volume      ={859},
  year        ={1994}
}
@inproceedings{HoPe96,
  address     ={New Brunswick, NJ, USA},
  author      ={G. J. Holzmann and D. Peled},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={HoPe96},
  month       ={July/August},
  pages       ={385--389},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The State of {SPIN}},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{HoRa72,
  author      ={R. Hossley and C. Rackoff},
  booktitle   ={{IEEE} Symposium on Switching and Automata Theory},
  key         ={HoRa72},
  pages       ={121--124},
  title       ={The Emptiness Problem for Automata on Infinite Trees},
  year        ={1972}
}
@inbook{HoRo86,
  author      ={H.J. Hoogeboom and G. Rozenberg},
  chapter     ={Infinitary languages: basic theory and applications to concurrent systems},
  key         ={HoRo86},
  keyword     ={omega},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Sciences},
  title       ={Current Trends in Concurrency},
  year        ={1986}
}
@inproceedings{HoTT88,
  address     ={Glasgow, Scotland},
  author      ={K.M. Hobley and B.C Thomson and J.V. Tucker},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={HoTT88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={347--374},
  publisher   ={North-Holland},
  title       ={Specification and Verification of Synchronous Concurrent Algorithms: a Case Study of a Convolution Algorithm},
  year        ={1988}
}
@book{HoUl79,
  author      ={J.E. Hopcroft and J.D. Ullman},
  key         ={HoUl79},
  keyword     ={Logic fsm textbook},
  publisher   ={Addison-Wesley},
  title       ={Introduction to Automata Theory, Languages and Computation},
  year        ={1979}
}
@inproceedings{HoWi89,
  author      ={J. Hooman and J. Widom},
  booktitle   ={Conference on Parallel Architectures and Languages Europe (PARLE)},
  editor      ={E. Odijk and M. Rem and J.-C. Syre},
  key         ={HoWi89},
  pages       ={424--441},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {T}emporal-{L}ogic-{B}ased {C}ompositional {P}roof {S}ystem for {R}eal-{T}ime {M}essage {P}assing},
  volume      ={366},
  year        ={1989}
}
@inproceedings{HoWo95,
  address     ={Liege, Belgium},
  author      ={P. -H. Ho and H. Wong-Toi},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={HoWo95},
  month       ={July},
  pages       ={381--394},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Automated analysis of an audio control protocol},
  volume      ={939},
  year        ={1995}
}
@article{Hoar69,
  author      ={C.A.R. Hoare},
  journal     ={Communications of the {ACM}},
  key         ={Hoar69},
  pages       ={576--580},
  title       ={An Axiomatic Basis for Computer Programming},
  volume      ={12},
  year        ={1969}
}
@article{Hoar72,
  author      ={C.A.R. Hoare},
  journal     ={Acta Informatica},
  key         ={Hoar72},
  pages       ={271--281},
  title       ={Proof of Correctness of Data Representations},
  volume      ={1},
  year        ={1972}
}
@article{Hoar78,
  author      ={C.A.R. Hoare},
  journal     ={Communications of the {ACM}},
  key         ={Hoar78},
  month       ={August},
  number      ={8},
  pages       ={666-677},
  title       ={Communicating Sequential Processes},
  volume      ={21},
  year        ={1978}
}
@book{Hoar85,
  author      ={C. A. R. Hoar},
  key         ={Hoar85},
  publisher   ={Prentice Hall},
  title       ={Communicating Sequential Processes},
  year        ={1985}
}
@inproceedings{Hoar96,
  address     ={Oxford},
  author      ={C.A.R. Hoare},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.C. Gaudel, J. Woodcock},
  key         ={Hoar96},
  month       ={March},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{H}ow {D}id {S}oftware {G}et {S}o {R}eliable {W}ithout {P}roof?},
  volume      ={1051},
  year        ={1996}
}
@mastersthesis{Hoer90,
  address     ={Darmstadt},
  author      ={S. H\"{o}reth},
  key         ={Hoer90},
  school      ={Technische Hochschule Darmstadt},
  title       ={{P}rogrammierung eines {T}autologienpr\"{u}fers in {C}},
  year        ={1990}
}
@inproceedings{Hoer94,
  author      ={S. H\"{o}reth},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden im Systementwurf},
  editor      ={H. Eveking},
  key         ={Hoer94},
  keyword     ={2GI/ITG},
  month       ={March},
  organization={GI/ITG},
  publisher   ={Universit\"{a}t Frankfurt, Interner Bericht Nr. 6/94},
  title       ={{MBDD}s - {H}ierarchische {E}ntscheidungsgraphen zur {D}arstellung und {M}anipulation boolescher {F}unktionen},
  year        ={1994}
}
@inproceedings{Hoer95,
  address     ={Passau},
  author      ={S. H\"{o}reth},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden beim Entwurf von Hardwaresystemen},
  editor      ={W. Grass and M. Mutz},
  key         ={Hoer95},
  keyword     ={3GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={88--97},
  publisher   ={Shaker Verlag},
  series      ={Berichte aus der Informatik},
  title       ={{N}-n\"{a}re {D}ekompositionen und kanonische {F}unktionsgraphen},
  year        ={1995}
}
@inproceedings{Hoer97,
  address     ={Montreal, Canada},
  author      ={S. H\"{o}reth},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={H. F. Li and D. K. Probst},
  key         ={Hoer97},
  keyword     ={conference},
  month       ={October},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Implementation of a multiple-domain decision diagram package},
  year        ={1997}
}
@mastersthesis{Hoff97,
  address     ={Karlsruhe},
  author      ={D. W. Hoffmann},
  key         ={Hoff97},
  keyword     ={SFB358},
  remark      ={betreut von T. Kropf und J. Ruf},
  school      ={Universit\"{a}t Karlsruhe},
  title       ={{K}ompositionale {V}erfahren f\"{u}r die {Z}eitbehaftete
{M}odellpr\"{u}fung},
  year        ={1997}
}
@article{Hold91,
  author      ={M. Holden},
  journal     ={Theoretical Computer Science},
  key         ={Hold91},
  pages       ={295-321},
  title       ={Weak logic theory},
  year        ={1991}
}
@phdthesis{Home95,
  author      ={P.V. Homeier},
  key         ={Home95},
  school      ={University of California at Los Angeles},
  title       ={Trustworthy Tools for Trustworthy Programs: A Mechanically Verified Verification Condition Generator for the Total Correctness of Procedures},
  year        ={1995}
}
@inproceedings{Hoom94,
  address     ={L\"{u}beck, Germany},
  author      ={J. Hooman},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={Hoom94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={19--40},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{C}orrectness of {R}eal {T}ime {S}ystems by {C}onstruction},
  volume      ={863},
  year        ={1994}
}
@inproceedings{Hoom95,
  address     ={Bangalore, India},
  author      ={J. Hooman},
  booktitle   ={Conference on the Foundations of Software Technology and Theoretical Computer Science (FSTTCS)},
  editor      ={P.S. Thiagarajan},
  key         ={Hoom95},
  month       ={December},
  pages       ={96--110},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verifying {P}art of the {ACCESS.bus} {P}rotocol {U}sing {PVS}},
  volume      ={Hoom95},
  year        ={1995}
}
@inproceedings{Horn92,
  address     ={Madrid, Spain},
  author      ={Ch. Horn},
  booktitle   ={{IFIP} World Computer Congress},
  editor      ={J. van Leeuwen},
  key         ={Horn92},
  month       ={September},
  pages       ={49-56},
  publisher   ={Elsevier Science Publishers},
  title       ={Oyster 2: Bringing Type Theory into Practice},
  year        ={1992}
}
@inproceedings{Hosh93,
  address     ={Ottawa, Canada},
  author      ={T. Hoshino},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Hosh93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={423--439},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={{UDL/I} version Two: A New Horizon of {HDL} Standards},
  year        ={1993}
}
@inbook{Howa80,
  author      ={W. Howard},
  chapter     ={The formulas-as-types notion of construction},
  key         ={Howa80},
  pages       ={479-490},
  publisher   ={Academic Press, New York},
  title       ={To {H}.{B}. {C}urry: {E}ssays on Combinatory Logic, Lambda-Calculus and Formalism},
  year        ={1980}
}
@inproceedings{Howe96,
  address     ={Turku, Finland},
  author      ={D. J. Howe},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={Howe96},
  month       ={August},
  pages       ={267--282},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Importing Mathematics from {HOL} into Nuprl},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{HsDe83,
  author      ={J. Hsiang and N. Dershowitz},
  booktitle   ={International Colloquium on Automata, Languages and Programming (ICALP)},
  key         ={HsDe83},
  keyword     ={Rewrite Methods},
  pages       ={331--346},
  title       ={Rewrite methods for clausal and non-clausal theorem proving},
  year        ={1983}
}
@inproceedings{HsRu86,
  author      ={J. Hsiang and M. Rusinowitch},
  booktitle   ={Conference on Automated Deduction (CADE)},
  editor      ={J.Siekmann},
  key         ={HsRu86},
  keyword     ={Rewrite},
  pages       ={141--152},
  publisher   ={Springer-Verlag},
  title       ={A new method for establishing refutational completeness in theorem proving},
  year        ={1986}
}
@inproceedings{HsRu87,
  author      ={J. Hsiang and M. Rusinowitch},
  booktitle   ={International Colloquium on Automata, Languages and Programming (ICALP)},
  key         ={HsRu87},
  keyword     ={Rewrite Methods},
  pages       ={54--71},
  title       ={On word problems in equational theories},
  year        ={1987}
}
@phdthesis{Hsia82,
  author      ={J. Hsiang},
  key         ={Hsia82},
  keyword     ={Rewrite},
  school      ={Departement of Computer Science, University of Illinois},
  title       ={Topics in Automated Theorem Proving},
  year        ={1982}
}
@article{Hsia85,
  author      ={J. Hsiang},
  journal     ={Artificial Intelligence},
  key         ={Hsia85},
  keyword     ={Rewrite Methods},
  pages       ={255--300},
  title       ={Refutational theorem proving using term-rewriting systems},
  year        ={1985}
}
@inproceedings{HuBr92,
  address     ={Hemel Hempstead, UK},
  author      ={W.A. Hunt and B.C. Brock},
  booktitle   ={Mechanized Reasoning and Hardware Design},
  editor      ={C.A.R. Hoare and M.J.C. Gordon},
  key         ={HuBr92},
  pages       ={35--47},
  publisher   ={Prentice Hall International Series in Computer Science},
  title       ={A {F}ormal {HDL} and its {U}se in the {FM9001} {V}erification},
  year        ={1992}
}
@inproceedings{HuBu95,
  address     ={Liege, Belgium},
  author      ={H. Hulgaard and S. M. Burns},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={HuBu95},
  month       ={July},
  pages       ={423--436},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Efficient timing analysis of a class of {P}etri {N}ets},
  volume      ={939},
  year        ={1995}
}
@book{HuCr68,
  author      ={G.E. Hughes and M.J. Cresswell},
  key         ={HuCr68},
  publisher   ={Methuen and Co. Ltd},
  title       ={An Introduction to Modal Logics},
  year        ={1968}
}
@book{HuCr82,
  author      ={G.E. Hughes and M.J. Creswel},
  key         ={HuCr82},
  publisher   ={Methuen, London},
  title       ={An {I}ntroduction to {M}odal {L}ogic},
  year        ={1982}
}
@inproceedings{HuDe93,
  address     ={Santa Clara, California},
  author      ={I.-J. Huang and A.M. Despain},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={HuDe93},
  keyword     ={processor_design},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={594--599},
  publisher   ={IEEE Computer Society Press},
  title       ={{H}ardware/{S}oftware {R}esolution of {P}ipeline {H}azards in {P}ipeline {S}ynthesis of {I}nstruction {S}et {P}rocessors},
  year        ={1993}
}
@inproceedings{HuDi93,
  author      ={A.J. Hu and D.L. Dill},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={HuDi93},
  keyword     ={BDD propositionallogic formalism},
  pages       ={266--271},
  title       ={Reducing {BDD} Size by Exploiting Functional Dependencies},
  year        ={1993}
}
@inproceedings{HuGD95,
  address     ={OFFIS Oldenburg (Germany), The Technion (Haifa, Israel) Oldenburg University (Germany)},
  author      ={H. Hungar and O. Grumberg and W. Damm},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={HuGD95},
  keyword     ={model_checking},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={1--20},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{W}hat if model checking must be truly symbolic},
  volume      ={987},
  year        ={1995}
}
@article{HuHu82,
  author      ={G. Huet and J.-M. Hullot},
  journal     ={Journal of Computer and System Sciences},
  key         ={HuHu82},
  keyword     ={Rewrite},
  pages       ={239--266},
  title       ={Proofs by Induction in Equational Theories with Constructors},
  volume      ={25},
  year        ={1982}
}
@inproceedings{HuMu92,
  address     ={Leuven, Belgium},
  author      ={R.B. Hughes and G. Musgrave},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={HuMu92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={395--406},
  publisher   ={North-Holland},
  title       ={Design-Flow Graph Partitioning},
  year        ={1992}
}
@inbook{HuOp80,
  author      ={G. Huet and D.C. Oppen},
  chapter     ={Equations and rewrite rules: a survey},
  key         ={HuOp80},
  keyword     ={Rewrite Methods},
  publisher   ={Academic Press},
  title       ={Formal Language Theory: perspectives and open problems},
  year        ={1980}
}
@inproceedings{HuPS93,
  address     ={Paris, France},
  author      ={S.-T. Huang and T.-M. Parng and J.-M. Shyu},
  booktitle   ={European Design Automation Conference },
  editor      ={C.O. Newton and M. Heydeman},
  key         ={HuPS93},
  month       ={February},
  pages       ={455--459},
  publisher   ={IEEE Computer Society Press},
  title       ={A New Method od Identifying Critical Paths for Performance Optimization},
  year        ={1993}
}
@article{HuPS94,
  author      ={S.-T. Huang and T.-M. Paarng and J.-M. Shyu},
  journal     ={IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={HuPS94},
  keyword     ={formalism propositionallogic hardware gatelevel timing asynchronous},
  month       ={March},
  number      ={3},
  pages       ={318--337},
  title       ={Timed Boolean Calculus and Its Applications in Timing Analysis},
  volume      ={13},
  year        ={1994}
}
@inproceedings{HuWo93,
  address     ={Santa Clara, California},
  author      ={S.C.-Y. Huang and W.H. Wolf},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={HuWo93},
  keyword     ={scheduling},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={446--449},
  publisher   ={IEEE Computer Society Press},
  title       ={{S}cheduling for {M}inimum {D}ependence in {FSM}s},
  year        ={1993}
}
@inproceedings{HuYD94,
  address     ={San Diego, CA},
  author      ={A.J. Hu and G. York and D.L. Dill},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={HuYD94},
  keyword     ={BDD_techniques_and_formal_verification},
  month       ={June},
  note        ={ch. 18.2},
  publisher   ={San Diego Convention Center},
  title       ={{N}ew {T}echniques for {E}fficient {V}erification with {I}mplicitly {C}onjoined {BDD}s},
  year        ={1994}
}
@mastersthesis{Hube91,
  author      ={M. Huber},
  key         ={Hube91},
  keyword     ={Rewrite},
  school      ={Technische Universit\"{a}t Berlin},
  title       ={Test-set approaches for ground reducibility in term rewriting systems},
  year        ={1991}
}
@article{Huet73a,
  author      ={G. Huet},
  journal     ={Information and Control},
  key         ={Huet73a},
  keyword     ={Logic Rewrite},
  number      ={3},
  pages       ={257--367},
  title       ={The Undecidability of Unification in Third Order Logic},
  volume      ={22},
  year        ={1973}
}
@inproceedings{Huet73b,
  author      ={G.P. Huet},
  booktitle   ={International Joint Conference on Artificial Intelligence (IJCAI)},
  key         ={Huet73b},
  keyword     ={Rewrite},
  pages       ={139--146},
  title       ={A mechanization of type theory},
  year        ={1973}
}
@article{Huet75,
  author      ={G.P. Huet},
  journal     ={Theoretical Computer Science},
  key         ={Huet75},
  keyword     ={Logic Rewrite},
  pages       ={27--57},
  title       ={A Unification algorithm for Typed $\lambda$-Calculus},
  volume      ={1},
  year        ={1975}
}
@article{Huet80,
  author      ={G. Huet},
  journal     ={Journal of the ACM},
  key         ={Huet80},
  keyword     ={Rewrite Methods},
  number      ={4},
  pages       ={797--821},
  title       ={Confluent reductions: abstract properties and applications to term rewriting systems},
  volume      ={27},
  year        ={1980}
}
@article{Huet81,
  author      ={G. Huet},
  journal     ={Journal of Computer and System Sciences},
  key         ={Huet81},
  keyword     ={Rewrite},
  number      ={1},
  pages       ={11--21},
  title       ={A complete proof of correctness of the {K}nuth-{B}endix completion algorithm},
  volume      ={23},
  year        ={1981}
}
@inproceedings{Hull80,
  author      ={J.-M. Hullot},
  booktitle   ={Conference on Automated Deduction (CADE)},
  key         ={Hull80},
  keyword     ={Rewrite Methods},
  pages       ={318--334},
  title       ={Canonical forms and unification},
  year        ={1980}
}
@inproceedings{Hum93,
  address     ={Ottawa, Canada},
  author      ={R. Hum},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Hum93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={421--422},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Textual and Graphical {HDL}'s},
  year        ={1993}
}
@inproceedings{Hung94,
  address     ={Standford, California, USA},
  author      ={H. Hungar},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={Hung94},
  month       ={June},
  pages       ={169--181},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Model Checking of Marco Processes},
  volume      ={818},
  year        ={1994}
}
@book{Hunt71,
  address     ={Berkley},
  author      ={G. Hunter},
  key         ={Hunt71},
  publisher   ={University of California Press},
  title       ={Metalogic: An Introduction to Metatheory of Standard First Order Logic},
  year        ={1971}
}
@phdthesis{Hunt85,
  address     ={Austin},
  author      ={W.A. Hunt},
  key         ={Hunt85},
  remark      ={Technical Report ICSCA-CMP-47},
  school      ={University of Texas},
  title       ={{FM8501}: A Verified Microprocessor},
  year        ={1985}
}
@inproceedings{Hunt86,
  address     ={Amsterdam},
  author      ={W.A. Hunt},
  booktitle   ={From {HDL} Descriptions to Guaranteed Correct Circuit Designs},
  editor      ={D. Borrione},
  key         ={Hunt86},
  keyword     ={verification},
  pages       ={89--132},
  publisher   ={North-Holland},
  title       ={The Mechanical Verification of a Microprocessor Design},
  year        ={1986}
}
@article{Hunt89,
  author      ={W.A. Hunt},
  journal     ={Journal of Automated Reasoning},
  key         ={Hunt89},
  number      ={4},
  pages       ={429--460},
  title       ={Microprocessor Design Verification},
  volume      ={5},
  year        ={1989}
}
@book{Hunt94,
  address     ={Berlin},
  author      ={W.A. Hunt},
  key         ={Hunt94},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Artificial Intelligence},
  title       ={{FM8501}: A {V}erified {M}icroprocessor},
  volume      ={795},
  year        ={1994}
}
@inproceedings{Huts96,
  address     ={Kreischa},
  author      ={Tino Hutschenreuther},
  booktitle   ={GI/ITG/GME Workshop Methoden des Entwurfs und der Verifikation Digitaler Systeme},
  editor      ={Bernd straube and Jens Schoenherr},
  key         ={Huts96},
  keyword     ={4. GI/ITG/GME},
  month       ={March},
  organization={GI/ITG/GME},
  pages       ={1--10},
  publisher   ={Shaker Verlag, Aachen},
  series      ={Berichte aus der Informatik},
  title       ={Erfahrung bei der Spezifikation von Kommunikationsprotokollen},
  year        ={1996}
}
@inproceedings{Hutt89,
  author      ={D. Hutter},
  booktitle   ={Conference on Automated Deduction (CADE)},
  editor      ={M.E.Stickel},
  key         ={Hutt89},
  keyword     ={Rewrite},
  pages       ={147--161},
  publisher   ={Springer-Verlag},
  title       ={Guiding inductive proofs},
  year        ={1989}
}
@manual{IEEE92,
  edition     ={Std 896.1-1991},
  key         ={IEEE92},
  month       ={March},
  title       ={{IEEE} Standard for Futurebus - Logical Protocol Specification},
  year        ={1992}
}
@manual{INTE93,
  edition     ={Order Number 241428},
  key         ={INTE93},
  organization={Intel Corporation},
  title       ={Pentium Processor User's Manual, Volume I: Pentium Processor Data Book},
  year        ={1993}
}
@inproceedings{ImVa97,
  author      ={N. Immerman and M.Y. Vardi},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  key         ={ImVa97},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Model Checking and Transitive-Closure Logic},
  year        ={1997}
}
@inproceedings{InGu93,
  address     ={Vancouver, Canada},
  author      ={M. van Inwegen and E.L. Gunter},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={InGu93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={59--73},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={{HOL-ML}},
  volume      ={780},
  year        ={1993}
}
@inproceedings{IpDi93,
  address     ={Ottawa, Canada},
  author      ={C.N. Ip and D.L. Dill},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={IpDi93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={87--100},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Better Verification Through Symmetry},
  year        ={1993}
}
@inproceedings{IpDi96,
  address     ={New Brunswick, NJ, USA},
  author      ={C.N. Ip and D.L. Dill},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={IpDi96},
  month       ={July/August},
  pages       ={147--158},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verifying Systems with Replicated Components in Mur{phi}},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{IsSY91,
  author      ={N. Ishura and H. Sawada and S. Yajima},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={IsSY91},
  keyword     ={formalism propositionallogic BDD},
  pages       ={472--475},
  publisher   ={IEEE},
  title       ={Minimization of Binary Decision Diagrams Based on Exchange of Variables},
  year        ={1991}
}
@inproceedings{IwNH96,
  author      ={H. Iwashite and T. Nakata and F. Hirose},
  booktitle   ={ICCAD 1996},
  key         ={IwNH96},
  organization={IEEE},
  pages       ={82--87},
  title       ={{CTL} Model Checking based on Forward State Traversal},
  year        ={1996}
}
@inproceedings{JABF92,
  address     ={Hamburg},
  author      ={J. Jain and M. Abadir and J. Bitner and D.S. Fusell and J.A. Abraham},
  booktitle   ={European Design Automation Conference },
  key         ={JABF92},
  month       ={March},
  organization={IEEE},
  pages       ={440--446},
  title       ={{IBDD}'s: {A}n {E}fficient {F}unctional {R}epresentation for {D}igital {C}ircuits},
  year        ={1992}
}
@inproceedings{JDCM90,
  address     ={Leuven, Belgium},
  author      ={P. Johannes and P. Das and L. Claesen and H. De Man},
  booktitle   ={European Design Automation Conference },
  key         ={JDCM90},
  keyword     ={hardware verification general transistorlevel},
  organization={IEEE},
  pages       ={518--523},
  title       ={{SLOCOP II}: A versatile timing verification system for {MOSVLSI}},
  year        ={1990}
}
@inproceedings{JEHO94,
  address     ={Grenoble, France},
  author      ={A. Jantsch and P. Ellervee and A. Hemani and J. \"{O}berg and H. Tenhunen},
  booktitle   ={European Design Automation Conference },
  key         ={JEHO94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={226--233},
  publisher   ={IEEE Computer Society Press},
  title       ={{H}ardware/{S}oftware {P}artitioning and {M}inimizing {M}emory {I}nterface {T}raffic},
  year        ={1994}
}
@techreport{JLMC96,
  author      ={S. Jha and Y. Lu and  M. Minea and E. M. Clarke},
  key         ={JLMC96},
  month       ={October},
  note        ={ftp://reports.adm.cs.cmu.edu/usr/anon/1996/CMU-CS-96-187.ps},
  number      ={CMU-CS-96-187},
  title       ={Equivalence Checking Using Abstract {BDDs}},
  year        ={1996}
}
@inproceedings{JNCK96,
  address     ={Palo Alto, CA, USA},
  author      ={J. Jain and A. Narayan and C. Coelho and S. P. Khatri and A. Sangiovanni-Vincentelli and R. K. Brayton and M. Fujita},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={JNCK96},
  month       ={November},
  pages       ={419--434},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Decomposition Techniques for Efficient {ROBDD} Construction},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{JPHS91a,
  author      ={S.-W. Jeong and B. Plessier and G.D. Hachtel and F. Somenzi},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={JPHS91a},
  keyword     ={formalism propositionallogic BDD},
  pages       ={464--467},
  publisher   ={IEEE},
  title       ={Extended {BDD}'s: Trading off Canonicity for Structure in Verification Algorithms},
  year        ={1991}
}
@inproceedings{JPHS91b,
  author      ={S.-W. Jeong and B. Plessier and G.D. Hachtel and F. Somenzi},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={JPHS91b},
  keyword     ={formalism propositionallogic fsm specification symbolic_state_traversal BDD},
  pages       ={476--479},
  publisher   ={IEEE},
  title       ={Variable Ordering and Selection for {FSM} Traversal},
  year        ={1991}
}
@inproceedings{JPXZ94,
  address     ={L\"{u}beck, Germany},
  author      ={W. Janssen and M. Poel and Q. Xu and J. Zwiers},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={JPXZ94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={393--417},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{L}ayering of {R}eal-{T}ime {D}istributed {P}rocesses},
  volume      ={863},
  year        ={1994}
}
@techreport{JaBi94,
  author      ={D. Jamsek and M. Bickford},
  institution ={Rome Laboratory, Griffiss Air Force Base, NY},
  key         ={JaBi94},
  month       ={March},
  number      ={RL-TR-94-3},
  title       ={Formal Verification of {VHDL} models},
  type        ={Technical Report},
  year        ={1994}
}
@inproceedings{JaBr91,
  author      ={A. Jain and R.E. Bryant},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={JaBr91},
  pages       ={219--222},
  title       ={Mapping switch-level simulation onto gate-level hardware accelerators},
  year        ={1991}
}
@inproceedings{JaCM96,
  address     ={Paris, France},
  author      ={M. Janssen and F. Catthoor and H. De Man},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={JaCM96},
  month       ={March},
  pages       ={138--143},
  publisher   ={{IEEE} Computer Society Press (Los Alamitos, California)},
  title       ={A Specification Invariant Technique for Regularity Improvement between Flow-Graph Clusters},
  year        ={1996}
}
@inproceedings{JaCT91,
  author      ={R. Jacobi and N. Calazans and C. Trullemans},
  booktitle   ={{IEEE} International Symposium on Circuits and Systems},
  key         ={JaCT91},
  keyword     ={formalism propositionallogic BDD},
  publisher   ={IEEE},
  title       ={Incremental Reduction of Binary Decision Diagrams},
  year        ={1991}
}
@article{JaGo94,
  author      ={P. Jain and G. Gopalakrishnan},
  journal     ={IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={JaGo94},
  month       ={August},
  number      ={8},
  pages       ={1005-1015},
  title       ={Efficient Symbolic Simulation-Based Verification Using the Parametric Form of Boolean Expressions},
  volume      ={13},
  year        ={1994}
}
@inproceedings{JaLM88,
  address     ={Washington, D.C.},
  author      ={F. Jahanian and R.S. Lee and A.K. Mok},
  booktitle   ={Hawaii International Conference on System Sciences},
  key         ={JaLM88},
  month       ={January},
  pages       ={479--489},
  publisher   ={IEEE Computer Society Press},
  title       ={Semantics of Modechart in Real-Time Logic},
  volume      ={II},
  year        ={1988}
}
@techreport{JaMS88,
  author      ={F. Jahanian and A. Mok and D.A. Stuart},
  institution ={Department of Computer Science, University of Texas at Austin},
  key         ={JaMS88},
  month       ={June},
  number      ={TR-88-25},
  title       ={{F}ormal {S}pecification of {R}eal-{T}ime {S}ystems},
  year        ={1988}
}
@inproceedings{JaMe93,
  author      ={B. Jacobs and T.F. Melham},
  booktitle   ={International Conference on typed Lambda Calculi and Applications},
  key         ={JaMe93},
  month       ={March},
  publisher   ={Springer-Verlag},
  title       ={{T}ranslating {D}ependent {T}ype {T}heory into {H}igher-{O}rder {L}ogic},
  year        ={1993}
}
@article{JaMo86,
  author      ={F. Jahanian and A. Mok},
  journal     ={{IEEE} Transactions on Software Engineering},
  key         ={JaMo86},
  number      ={9},
  pages       ={890--904},
  title       ={{S}afety {A}nalysis of {T}iming {P}roperties in {R}eal-{T}ime {S}ystems},
  volume      ={12},
  year        ={1986}
}
@inproceedings{JaNB96,
  address     ={Palo Alto, CA, USA},
  author      ={A. Jain and K. Nelson and R. E. Bryant},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={JaNB96},
  month       ={November},
  pages       ={109--125},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verifying Nondeterministic implementations of deterministic systems},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{JaPO95,
  address     ={Liege, Belgium},
  author      ={L. J. Jagadeesan and C. Puchol and J. E. Von Olnhausen},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={JaPO95},
  month       ={July},
  pages       ={127--140},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Safety Property verification of {E}sterel programs and applications to telecommunications software},
  volume      ={939},
  year        ={1995}
}
@article{JaPO95a,
  author      ={L. J. Jagadeesan and C. Puchol and J. E. Von Olnhausen},
  journal     ={Formal Methods in System Design},
  key         ={JaPO95a},
  number      ={2},
  pages       ={1-29},
  title       ={A Formal Approach to Reactive Systems Software: A Telecommunications Application in {E}sterel},
  volume      ={8},
  year        ={1995}
}
@inproceedings{JaSt88,
  address     ={New York},
  author      ={F. Jahanian and D.A. Stuart},
  booktitle   ={{IEEE} Real-Time Systems Symposium},
  key         ={JaSt88},
  month       ={December},
  organization={IEEE},
  pages       ={12--21},
  title       ={{A} {M}ethod for {V}erifying {P}roperties of {M}odechart {S}pecification},
  year        ={1988}
}
@inproceedings{Jack96,
  address     ={Oxford},
  author      ={D.M. Jackson},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={Jack96},
  month       ={March},
  pages       ={445-464},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{E}xperiences in {E}mbedded {S}cheduling},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{Jano94,
  address     ={L\"{u}beck, Germany},
  author      ={T. Janowski},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={Jano94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={373--392},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{F}ault-{T}olerant {B}isimulation and {P}rocesses {T}ransformations},
  volume      ={863},
  year        ={1994}
}
@inproceedings{Jans90,
  author      ={G.L.J.M. Janssen},
  booktitle   ={Formal {VLSI} Correctness Verification},
  editor      ={L. Claesen},
  key         ={Jans90},
  pages       ={159-168},
  publisher   ={Elsevier Science Publisher (North-Holland)},
  title       ={Hardware Verification using Temporal Logic: A Practical View},
  year        ={1990}
}
@manual{Jans93,
  author      ={G.L.J.M. Janssen},
  key         ={Jans93},
  month       ={October},
  organization={Department of Electrical Engineering, Eindhoven University of Technology},
  title       ={{ROBDD} Software},
  year        ={1993}
}
@inproceedings{JeBI93,
  address     ={Ottawa, Canada},
  author      ={A.A. Jerraya and K. O'Brian and T.B. Ismail},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={JeBI93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={331--338},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Linking System Design Tools and Hardware Design Tools},
  year        ={1993}
}
@techreport{JeJK94,
  author      ={J. Jensen and M. Jorgensen and N. Klarlund},
  institution ={Department of Computer Science, University of Aarhus},
  key         ={JeJK94},
  number      ={RS-94-10},
  title       ={Monadic Second Order Logic for Parameterized Verification},
  type        ={BRICS Report},
  year        ={1994}
}
@inproceedings{JePC91,
  address     ={Edinburgh, Scotland},
  author      ={A. Jerraya and P.G. Paulin and S. Curry},
  booktitle   ={International Conference on Very Large Scale Integration (VLSI)},
  editor      ={A. Halaas and P.B. Denyer},
  key         ={JePC91},
  month       ={August},
  organization={IFIP Transactions},
  pages       ={215--224},
  publisher   ={North-Holland},
  title       ={Meta {VHDL} for Higher Level Controller Modeling and Synthesis},
  year        ={1991}
}
@article{JePi76,
  author      ={D.C. Jensen and T. Pietrzykowski},
  journal     ={Theoretical Computer Science},
  key         ={JePi76},
  pages       ={123-171},
  title       ={Mechanizing $\omega$-order type theory through unification},
  volume      ={3},
  year        ={1976}
}
@book{Jeff66,
  author      ={R.C. Jeffrey},
  key         ={Jeff66},
  publisher   ={McGraw-Hill},
  title       ={Formal Logic: Its Scope and Limits},
  year        ={1966}
}
@inproceedings{Jens97,
  address     ={Enschede, The Netherlands},
  author      ={K. Jensen},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={Jens97},
  pages       ={203-209},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={A Brief Introduction to Coloured Petri Nets},
  year        ={1997}
}
@inproceedings{JiPB93,
  address     ={Arles, France},
  author      ={H. Jifeng and I. Page and J. Bowen},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={JiPB93},
  keyword     ={verification},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={214--225},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Towards a Provably Correct Hardware Implementation of {Occam}},
  volume      ={683},
  year        ={1993}
}
@inproceedings{Jife89,
  address     ={REX Workshop, Mook},
  author      ={H. Jifeng},
  booktitle   ={Stepwise Refinement of Distributed Systems},
  editor      ={J.W. de Bakker and W.-P. de Roever and G. Rozenberg},
  key         ={Jife89},
  keyword     ={transitionsystem refinement trace transitionsystemlabelled},
  month       ={May/June},
  pages       ={340--360},
  publisher   ={Springer-Verlag},
  remark      ={definition of up- and downsimulation for traces},
  title       ={Various Simulations and Refinements},
  year        ={1989}
}
@inproceedings{JoBo88,
  address     ={Glasgow, Scotland},
  author      ={S.D. Johnson and C.D. Boyer},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={JoBo88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={397--420},
  publisher   ={North-Holland},
  title       ={Modelling Transistors Applicatively},
  year        ={1988}
}
@techreport{JoCM91,
  address     ={Leuven, Belgium},
  author      ={P. Johannes and L. Claesen and H. De Man},
  institution ={Universiteit Leuven},
  key         ={JoCM91},
  title       ={{SLOCOP:} {A} {T}ool for {H}ierarchical {T}iming {V}erification and {C}haracterisation of {S}ynchronous {C}ircuits},
  year        ={1991}
}
@inproceedings{JoDD94,
  address     ={Malta},
  author      ={J.J. Joyce and N. Day and M. Donat},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={JoDD94},
  month       ={September},
  pages       ={285--299},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={S: A Machine Readable Specification Notation based on Higher Order Logic},
  volume      ={859},
  year        ={1994}
}
@inproceedings{JoDi95,
  address     ={San Jose, California, USA},
  author      ={R. B. Jones and D. L. Dill},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={JoDi95},
  month       ={November},
  title       ={Efficient validity checking for processor verification},
  year        ={1995}
}
@inproceedings{JoHW94,
  address     ={L\"{u}beck, Germany},
  author      ={B. Jonsson and C. Ho-Stuart and Y. Wang},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={JoHW94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={418--430},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{T}esting and {R}efinement for {N}ondeterministic and {P}robabilistic {P}rocesses},
  volume      ={863},
  year        ={1994}
}
@inproceedings{JoKe95,
  address     ={Liege, Belgium},
  author      ={B. Jonsson and L. Kempe},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={JoKe95},
  month       ={July},
  pages       ={42--53},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verifying Safety Properties of a class of infinite-state Distributed Algorithms},
  volume      ={939},
  year        ={1995}
}
@article{JoKi84,
  author      ={J.-P. Jouannaud and H. Kirchner},
  journal     ={{SIAM} Journal on Computing},
  key         ={JoKi84},
  keyword     ={Rewrite},
  pages       ={1155--1196},
  title       ={Completion of a Set of Rules Modulo a Set of Equations},
  volume      ={15},
  year        ={1984}
}
@article{JoKi86,
  author      ={J.-P. Jouannaud and H. Kirchner},
  journal     ={SIAM J. Comp.},
  key         ={JoKi86},
  keyword     ={Rewrite Methods},
  pages       ={1155--1194},
  title       ={Completion of a set of rules modulo a set of equations},
  volume      ={15},
  year        ={1986}
}
@article{JoKo82,
  author      ={J.-P. Jouannaud and E. Kounalis},
  journal     ={Information and Computation},
  key         ={JoKo82},
  keyword     ={Rewrite},
  pages       ={1--33},
  title       ={Automatic Proofs by Induction in Theories without Constructors},
  year        ={1982}
}
@inproceedings{JoKo86,
  address     ={Cambrigde, Massachusetts, USA},
  author      ={J.-P. Jouannaud and E. Kounalis},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={JoKo86},
  keyword     ={Rewrite Methods},
  pages       ={358--366},
  title       ={Automatic proofs by induction in equational theories without constructors},
  year        ={1986}
}
@article{JoKo89,
  author      ={J.-P. Jouannaud and E. Kounalis},
  journal     ={Information and Computation},
  key         ={JoKo89},
  keyword     ={Rewrite Methods},
  pages       ={1--33},
  title       ={Proofs by Induction in equational theories without constructors},
  volume      ={82},
  year        ={1989}
}
@inproceedings{JoMC94,
  address     ={Bad Herrenalb, Germany},
  author      ={S.D. Johnson and P.S. Miner and A. Camilleri},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={JoMC94},
  keyword     ={tpcd94},
  month       ={September},
  note        ={published 1995},
  pages       ={126--145},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Studies of the Single Pulser in Various Reasoning Systems},
  volume      ={901},
  year        ={1994}
}
@inproceedings{JoMU92,
  author      ={M. Josephs and R.H. Mak and J.T. Udding},
  booktitle   ={Workshop on Designing Correct Circuits},
  key         ={JoMU92},
  pages       ={261-274},
  title       ={High-Level Design of an Asynchronous Packet-routing Chip},
  year        ={1992}
}
@inproceedings{JoMi97,
  address     ={Montreal, Canada},
  author      ={S. Johnson and P. Miner},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={H. F. Li and D. K. Probst},
  key         ={JoMi97},
  keyword     ={conference},
  month       ={October},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Integrated reasoning support in system design: design derivation and theorem proving},
  year        ={1997}
}
@techreport{JoRe92,
  address     ={University of London, Mile End Road, London E1 4NS},
  author      ={R. Johnson and S. Reeves},
  institution ={Department of Computer Science, Queen Mary College},
  key         ={JoRe92},
  title       ={Necessary and possible set reconciliation and unification in semantic tableau systems},
  type        ={Technical Report},
  year        ={1992}
}
@article{JoRo92,
  author      ={B. Johnson and M. Roberts},
  journal     ={IEEE Design \& Test of Computers},
  key         ={JoRo92},
  keyword     ={HDL},
  month       ={September},
  pages       ={79--81},
  title       ={{TI-HDL}: {VHDL's} Strawman},
  year        ={1992}
}
@inproceedings{JoSD96,
  address     ={Palo Alto, CA, USA},
  author      ={R. B. Jones and C. -J. H. Seger and D. L. Dill},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={JoSD96},
  month       ={November},
  pages       ={159--171},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Self-consistency checking},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{JoSc94,
  author      ={K. Jopke and E. Schnieder},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden im Systementwurf},
  editor      ={H. Eveking},
  key         ={JoSc94},
  keyword     ={2GI/ITG},
  month       ={March},
  organization={GI/ITG},
  publisher   ={Universit\"{a}t Frankfurt, Interner Bericht Nr. 6/94},
  title       ={{M}odifizierte {S}trukturierte {A}nalyse beim {E}ntwurf sicherheitsrelevanter {L}eitsysteme},
  year        ={1994}
}
@inproceedings{JoSe91,
  address     ={Davis, California},
  author      ={J.J. Joyce and C.-J.H. Seger},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={JoSe91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={{COSHOL}: Symbolic Circuit Simulation + {HOL}},
  year        ={1991}
}
@inproceedings{JoSe93,
  address     ={Dallas, Texas},
  author      ={J.J. Joyce and C.-J.H. Seger},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={JoSe93},
  title       ={{L}inking {BDD}-{B}ased {S}ymbolic {E}valutation to {I}nteractive {T}heorem-{P}roving},
  year        ={1993}
}
@inproceedings{JoSe93a,
  address     ={Vancouver, Canada},
  author      ={J.J. Joyce and C.-J.H. Seger},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={JoSe93a},
  month       ={August},
  organization={University of British Columbia},
  pages       ={185--199},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={The {HOL}-{V}oss System: Model-Checking inside a General-Purpose Theorem-Prover},
  volume      ={780},
  year        ={1993}
}
@inproceedings{JoSe93b,
  author      ={J.J. Joyce and C.-J.H. Seger},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={JoSe93b},
  keyword     ={formalism propositionallogic BDD temporallogic specification hardware gatelevel verification},
  pages       ={469--474},
  title       ={Linking {BDD}-Based Symbolic Evaluation to Interactive Theorem Proving},
  year        ={1993}
}
@inproceedings{JoSh91a,
  address     ={Edinburgh, Scotland},
  author      ={G. Jones and M. Sheeran},
  booktitle   ={International Conference on Very Large Scale Integration (VLSI)},
  editor      ={A. Halaas and P.B. Denyer},
  key         ={JoSh91a},
  month       ={August},
  organization={IFIP Transactions},
  pages       ={71--80},
  publisher   ={North-Holland},
  title       ={Deriving Bit-Serial Circuits in Ruby},
  year        ={1991}
}
@techreport{JoSh91b,
  author      ={G. Jones and M. Sheeran},
  institution ={Oxford University Computing Laboratory},
  key         ={JoSh91b},
  title       ={Collecting Butterflies},
  year        ={1991}
}
@article{JoSm77,
  author      ={H.F. Jordan and B.J. Smith},
  journal     ={IEEE Computer},
  key         ={JoSm77},
  keyword     ={HDL},
  month       ={June},
  pages       ={43--49},
  title       ={The Assignment Statement in Hardware Description Languages},
  year        ={1977}
}
@book{Jone87,
  author      ={S.L.P. Jones},
  key         ={Jone87},
  publisher   ={Prentice Hall},
  title       ={The Implementation of Functional Programming Languages},
  year        ={1987}
}
@inproceedings{Jong89,
  author      ={G. de Jong},
  booktitle   ={{IFIP} International Workshop on Applied Formal Methods for Correct {VLSI} Design},
  key         ={Jong89},
  keyword     ={flowgraph verification},
  organization={IFIP WG 10.2/WG 10.5},
  pages       ={169--178},
  publisher   ={North-Holland, 1990},
  title       ={Verification of data flow graphs using temporal logic},
  year        ={1989}
}
@inproceedings{Jong90,
  author      ={G. Jong},
  booktitle   ={Formal {VLSI} Correctness Verification},
  editor      ={L. Claesen},
  key         ={Jong90},
  pages       ={169-178},
  publisher   ={Elsevier Science Publisher (North-Holland)},
  title       ={Verification of Data Flow Graphs using Temporal Logic},
  year        ={1990}
}
@inproceedings{Jong91,
  address     ={Amsterdam},
  author      ={G.G. de Jong},
  booktitle   ={European Design Automation Conference },
  key         ={Jong91},
  keyword     ={Formal_Verification},
  month       ={February},
  organization={IEEE},
  pages       ={401--407},
  publisher   ={IEEE Computer Society Press},
  title       ={{D}ata {F}low {G}raphs: {S}ystem {S}pecification with the {M}ost {U}nrestricted {S}emantics},
  year        ={1991}
}
@inproceedings{Jong91a,
  address     ={Aalborg},
  author      ={G.G de Jong},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={K.G. Larsen and A. Skou},
  key         ={Jong91a},
  month       ={July},
  pages       ={477-487},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={An Automata Theoretic Approach to Temporal Logic},
  volume      ={575},
  year        ={1991}
}
@inproceedings{Jong91b,
  author      ={G. de Jong},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  key         ={Jong91b},
  title       ={From Temporal Logic to Finite Automata},
  year        ={1991}
}
@phdthesis{Jong93,
  address     ={Eindhoven},
  author      ={G. de Jong},
  key         ={Jong93},
  keyword     ={flowgraph verification logic},
  month       ={October},
  school      ={University of Eindhoven},
  title       ={Generalized data flow graphs theory and applications},
  year        ={1993}
}
@inproceedings{Jons89,
  address     ={REX Workshop, Mook},
  author      ={B. Jonsson},
  booktitle   ={Stepwise Refinement of Distributed Systems},
  editor      ={J.W. de Bakker and W.-P. de Roever and G. Rozenberg},
  key         ={Jons89},
  keyword     ={transitionsystem transitionsystemfair trace transitionsystemlabelled},
  month       ={May/June},
  pages       ={361--385},
  publisher   ={Springer-Verlag},
  remark      ={definition of AADL},
  title       ={On Decomposing and Refining Specifications of Distributed Systems},
  year        ={1989}
}
@inproceedings{Josk87,
  address     ={Germany},
  author      ={B. Josko},
  booktitle   ={Temporal Logic in Specification},
  editor      ={B. Banieqbal and H. Barringer and A. Pnueli},
  key         ={Josk87},
  organization={University of Oldenburg},
  pages       ={165--187},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{MCTL}-An Extension of {CTL} for Modular Verification of Concurrent Systems},
  volume      ={398},
  year        ={1987}
}
@inproceedings{Josk89,
  address     ={REX Workshop, Mook},
  author      ={B. Josko},
  booktitle   ={Stepwise Refinement of Distributed Systems},
  editor      ={J.W. de Bakker and W.-P. de Roever and G. Rozenberg},
  key         ={Josk89},
  keyword     ={AADL modelchecking},
  month       ={May},
  pages       ={386--400},
  publisher   ={Springer-Verlag},
  remark      ={definition of AADL},
  series      ={Lecture Notes in Computer Science},
  title       ={Verifying the Correctness of {AADL} Modules using Model Checking},
  volume      ={430},
  year        ={1989}
}
@phdthesis{Josk93,
  address     ={Oldenburg},
  author      ={B. Josko},
  key         ={Josk93},
  school      ={University of Oldenburg},
  title       ={Modular Specification and Verification of Reactive Systems},
  year        ={1993}
}
@techreport{Joyc87,
  author      ={J.J. Joyce},
  institution ={University of Cambridge Computer Laboratory},
  key         ={Joyc87},
  month       ={July},
  number      ={109},
  title       ={Hardware Verification of {VLSI} Regular Structures},
  type        ={Technical Report},
  year        ={1987}
}
@inproceedings{Joyc88a,
  address     ={Glasgow, Scotland},
  author      ={J.J. Joyce},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={Joyc88a},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={51--76},
  publisher   ={North-Holland},
  title       ={{G}eneric {S}tructures in the {F}ormal {S}pecification and {V}erification of {D}igital {C}ircuits},
  year        ={1988}
}
@incollection{Joyc88b,
  author      ={J.J. Joyce},
  booktitle   ={VLSI Specification, Verification and Synthesis},
  editor      ={G. Birtwistle and P.A. Subrahmanyam},
  key         ={Joyc88b},
  keyword     ={hardware registertransferlevel verification microprocessor},
  pages       ={129--158},
  publisher   ={Kluwer Academic Publishers},
  title       ={Formal Verification and Implementation of a Microprocessor},
  year        ={1988}
}
@phdthesis{Joyc89,
  author      ={J.J. Joyce},
  key         ={Joyc89},
  month       ={December},
  school      ={University of Cambridge},
  title       ={Multilevel Verification of Microprocessor-Based Systems},
  year        ={1989}
}
@inbook{Joyc90,
  author      ={J.J. Joyce},
  key         ={Joyc90},
  keyword     ={hardware verification other transistorlevel},
  pages       ={113--122},
  publisher   ={Elsevier Science Publishers},
  series      ={IFIP},
  title       ={{F}ormal {S}pecification and {V}erification of {S}ynthesized {MOS} {S}tructures},
  year        ={1990}
}
@phdthesis{Joyc90a,
  author      ={J.J. Joyce},
  key         ={Joyc90a},
  school      ={Computer Laboratory, University of Cambridge},
  title       ={Multi-Level Verification of Microprocessor-Based Systems},
  year        ={1990}
}
@inproceedings{Joyc91,
  address     ={Miami, Florida},
  author      ={J.J. Joyce},
  booktitle   ={{ACM} International Workshop on Formal Methods in {VLSI} Design},
  key         ={Joyc91},
  title       ={More Reasons Why Higher-Order Logic is a Good Formalism for Specifying and Verifying Hardware},
  year        ={1991}
}
@inproceedings{Joyc91a,
  address     ={Miami, Florida},
  author      ={J.J. Joyce},
  booktitle   ={{ACM} International Workshop on Formal Methods in {VLSI} Design},
  key         ={Joyc91a},
  keyword     ={formalism higherorderlogic HOL hardware registertransferlevel verification tutorial},
  title       ={More Reasons Why Higher-Order Logic is a Good Formalism for Specifying and Verifying Hardware},
  year        ={1991}
}
@inproceedings{Joyc91b,
  address     ={Davis, California},
  author      ={J.J. Joyce},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Joyc91b},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={1},
  publisher   ={IEEE Computer Society Press},
  title       ={Tutorial Overview},
  year        ={1991}
}
@inproceedings{Joyc91c,
  address     ={Davis, California},
  author      ={J.J. Joyce},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Joyc91c},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Embedding Formalism in {HOL}},
  year        ={1991}
}
@inproceedings{Joyc91d,
  address     ={Davis, California},
  author      ={J.J. Joyce},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Joyc91d},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Real-Time and Temporal Issues},
  year        ={1991}
}
@inproceedings{JyMa94,
  address     ={San Diego, CA},
  author      ={H.-F. Jyu and S. Malik},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={JyMa94},
  keyword     ={timing_analysis},
  month       ={June},
  note        ={ch. 8.5},
  publisher   ={San Diego Convention Center},
  title       ={{S}tatistical {D}elay {M}odeling in {L}ogic {D}esign and {S}ynthesis},
  year        ={1994}
}
@inproceedings{KBES96,
  address     ={Palo Alto, CA, USA},
  author      ={R. Kumar and C. Blumenroehr and D. Eisenbiegler and D. Schmid},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={KBES96},
  month       ={November},
  pages       ={294--299},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Formal Synthesis in circuit design-A Classification and survey},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{KCPR95,
  address     ={Paris},
  author      ={A. Kondratyev and J. Cortadella and E. Pastor and O. Roig and M. Kishinevsky and A. Yakovlev},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={KCPR95},
  keyword     ={Application_of_Symbolic_Traversal_Techniques},
  month       ={March},
  pages       ={325--332},
  publisher   ={IEEE Computer Society Press},
  title       ={{C}hecking {S}ignal {T}ransition {G}raph {I}mplementability by {S}ymbolic {BDD} {T}raversal},
  year        ={1995}
}
@inproceedings{KCSL94,
  address     ={San Diego, CA},
  author      ={A. Kuehlmann and D.I. Cheng and A. Srinivasan and D.P. Lapotin},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={KCSL94},
  keyword     ={topics_in_verification_and_diagnosis},
  month       ={June},
  note        ={ch. 15.2},
  publisher   ={San Diego Convention Center},
  title       ={{E}rrors {D}iagnosis for {T}ransistor-{L}evel {V}erification},
  year        ={1994}
}
@inproceedings{KDCB93,
  address     ={Ottawa, Canada},
  author      ={K. Khordoc and M. Dufrsne and E. Cerny and P. Babkine and A. Silburt},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={KDCB93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={385--402},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Integrating Behavior and Timing in executable Specifications},
  year        ={1993}
}
@inproceedings{KFBG90,
  author      ={T. Kropf and J. Fr\"{o}{\ss}l and W. Beller and T. Giesler},
  booktitle   ={EUROMICRO},
  key         ={KFBG90},
  keyword     ={SFB358 hardware verification general conference},
  month       ={August},
  pages       ={59--66},
  publisher   ={North-Holland},
  title       ={{A} {H}ardware {I}mplementation of a {M}odified {DES}-{A}lgorithm},
  year        ={1990}
}
@article{KGHK99,
  author      ={T. Kropf and J. Gerlach and J. Haufe and M. Kortke and M. Wei{\ss}},
  journal     ={Informationstechnik und Technische Informatik (it\&ti)},
  key         ={KGHK99},
  keyword     ={SFB358},
  month       ={(to appear)},
  title       ={{M}ethodischer {HW/SW}-{E}ntwurf des {GSM} {S}prachtranscodec-{A}lgorithmus},
  year        ={1999}
}
@inproceedings{KHMP94,
  address     ={L\"{u}beck, Germany},
  author      ={A. Kapur and T.A. Henzinger and Z. Manna and A. Pnueli},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={KHMP94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={431--454},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{P}roving {S}afety {P}roperties of {H}ybrid {S}ystems},
  volume      ={863},
  year        ={1994}
}
@inproceedings{KMAM94,
  address     ={L\"{u}beck, Germany},
  author      ={J.K. Kishore and R.S. Manjunatha and V.K. Agrawal and N.K. Malik and P.S. Goel},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={KMAM94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={476--487},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {R}eal {T}ime {F}ault {T}olerant {M}icroprocessor based {O}n-{B}oard {C}omputer {S}ystem for {INSAT}-2 {S}pacecraft},
  volume      ={863},
  year        ={1994}
}
@inproceedings{KMHT94,
  address     ={Bad Herrenalb, Germany},
  author      ={J. Kitamichi and S. Morioka and T. Higashino and K. Taniguchi},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={KMHT94},
  keyword     ={tpcd94},
  month       ={September},
  note        ={published 1995},
  pages       ={165--184},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Automatic Correctness Proof of the Implementation of Synchronous Sequential Circuits Using an Algebraic Approach},
  volume      ={901},
  year        ={1994}
}
@inproceedings{KMMG97,
  address     ={Enschede, The Netherlands},
  author      ={P. Kelb and T. Margaria and M. Mendler and C. Gsottberger},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={KMMG97},
  pages       ={183-202},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={{MOSEL}: A Flexible Toolset for Monadic Second-Order Logic},
  year        ={1997}
}
@inproceedings{KMOS95,
  address     ={Liege, Belgium},
  author      ={R.P. Kurshan and M. Meritt and A. Orda and S.R. Sachs},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={KMOS95},
  month       ={July},
  pages       ={339--352},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Modelling Asynchrony with a synchronous model},
  volume      ={939},
  year        ={1995}
}
@inproceedings{KPBV95,
  address     ={Liege, Belgium},
  author      ={S. C. Krishnan and A. Puri and R. K. Brayton and P.P. Varaiya},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={KPBV95},
  month       ={July},
  pages       ={253--266},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The Rabin index chain automata, with applications to automata and games},
  volume      ={939},
  year        ={1995}
}
@inproceedings{KRFA96,
  address     ={Oxford},
  author      ={B. Kannikeswaran and R. Radhakrishnan and P. Frey and P. Alexander and P.A. Wilsey},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={KRFA96},
  month       ={March},
  pages       ={405-424},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{F}ormal {S}pecification and {V}erification of the p{GVT} {A}lgorithm},
  volume      ={1051},
  year        ={1996}
}
@book{KRPO93,
  author      ={M.H. Klein and T. Ralya and B. Pollak and R. Obenza and M. Gonza and L. Harbour},
  key         ={KRPO93},
  keyword     ={hardware verification general},
  note        ={ISBN 0-7923-9361-9},
  publisher   ={Kluwer Academic Publishers,},
  remark      ={kostet 68.25 britische Pfund},
  title       ={A Practitioners Handbook for Real-Time Analysis: Guide to Rate Monotonic Analysis for Real Time Systems},
  year        ={1993}
}
@inproceedings{KRSW98,
  author      ={T. Kropf and J. Ruf and K. Schneider and M. Wild},
  booktitle   ={GI/ITG/GME Workshop: Methoden des Entwurfs und der Verifikation digitaler Schaltungen und Systeme und Beschreibungssprachen und Modellierung von Schaltungen und Systemen},
  key         ={KRSW98},
  keyword     ={SFB358},
  publisher   ={HNI-Verlagsschriften, ISBN 3-931466-35-3},
  title       ={A Synchronous Language for Modeling and Verifying Real Time and Embedded Systems},
  year        ={1998}
}
@inproceedings{KRSW98a,
  address     ={Dresden, Germany},
  author      ={T. Kropf and J. Ruf and K. Schneider and M. Wild},
  booktitle   ={Open Project Workshop on System Design Automation (SDA98)},
  key         ={KRSW98a},
  keyword     ={SFB358},
  title       ={The Synchronous System Description Language {PURR}},
  year        ={1998}
}
@inproceedings{KaAL91,
  address     ={Miami, Florida},
  author      ={S. Kalvala and M. Archer and K.N. Levitt},
  booktitle   ={{ACM} International Workshop on Formal Methods in {VLSI} Design},
  key         ={KaAL91},
  keyword     ={verification},
  month       ={January},
  title       ={A Methodology for Integrating Hardware Design and Verification},
  year        ={1991}
}
@inproceedings{KaAL92,
  address     ={Leuven, Belgium},
  author      ={S. Kalvala and M. Archer and K.N. Levitt},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={KaAL92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={407--426},
  publisher   ={North-Holland},
  title       ={Implementation and Use of Annotations in {HOL}},
  year        ={1992}
}
@inproceedings{KaHa84,
  author      ={M. Kawai and J.P. Hayes},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={KaHa84},
  organization={IEEE},
  pages       ={2--9},
  title       ={An Experimental {MOS} Fault Simulation Program {CSASIM}},
  year        ={1984}
}
@article{KaHo94,
  author      ={R. Kao and M. Horowitz},
  journal     ={{IEEE} Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={KaHo94},
  keyword     ={hardware abstraction timing switchlevel},
  month       ={December},
  number      ={12},
  pages       ={1498--1512},
  title       ={Timing Analysis for Piecewise Linear Rsim},
  volume      ={13},
  year        ={1994}
}
@inproceedings{KaKu86,
  address     ={New York},
  author      ={J. Katzenelson and R.P. Kurshan},
  booktitle   ={{IEEE} International Conference on Computer Communications},
  key         ={KaKu86},
  organization={IEEE},
  pages       ={286--292},
  title       ={{S/R}: A Language for Specifying Protocols and other Communicating processes},
  year        ={1986}
}
@article{KaMN88,
  author      ={D. Kapur and D.R. Musser and P. Narendran},
  journal     ={Journal of Symbolic Computation},
  key         ={KaMN88},
  keyword     ={Rewrite},
  number      ={1},
  pages       ={19--36},
  title       ={Only Prime Superpositons Need be Considered in the Knuth-Bendix Completion Procedure},
  volume      ={6},
  year        ={1988}
}
@book{KaMo64,
  author      ={D. Kalish and R. Montague},
  key         ={KaMo64},
  keyword     ={Logic},
  publisher   ={World, Harcourt and Brace},
  title       ={Logic: Techniques of Formal Reasoning},
  year        ={1964}
}
@techreport{KaMo94,
  address     ={1717 West Sixth Street, Suite 290, Austin, Texas 78703-4776},
  author      ={M. Kaufmann and J.S. Moore},
  institution ={Computational Logic, Inc.},
  key         ={KaMo94},
  number      ={101},
  title       ={Design Goals for {ACL2}},
  type        ={Technical Report},
  year        ={1994}
}
@inproceedings{KaMu86,
  address     ={Cambridge, Massachusetts},
  author      ={D. Kapur and D. Musser},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={KaMu86},
  keyword     ={Rewrite},
  pages       ={367--377},
  title       ={Inductive reasoning for incomplete specifications},
  year        ={1986}
}
@article{KaMu87,
  author      ={D. Kapur and D. Musser},
  journal     ={Aritificial Intelligence},
  key         ={KaMu87},
  keyword     ={Rewrite},
  number      ={2},
  pages       ={125--157},
  title       ={Proof by consistency},
  volume      ={31},
  year        ={1987}
}
@article{KaNZ87,
  author      ={D. Kapur and P. Narendran and H. Zhang},
  journal     ={Acta Informatica},
  key         ={KaNZ87},
  keyword     ={Rewrite Methods},
  number      ={4},
  pages       ={395--415},
  title       ={On sufficient completeness and related properties of term rewriting systems},
  volume      ={24},
  year        ={1987}
}
@article{KaNZ91,
  author      ={D. Kapur and P. Narendran and H. Zhang},
  journal     ={Journal of Symbolic Computation},
  key         ={KaNZ91},
  keyword     ={Rewrite},
  pages       ={83--111},
  title       ={Automating Inductionless Induction using Test Sets},
  volume      ={11},
  year        ={1991}
}
@inproceedings{KaNa85,
  author      ={D. Kapur and P. Narendran},
  booktitle   ={International Joint Conference on Artificial Intelligence (IJCAI)},
  key         ={KaNa85},
  keyword     ={Rewrite},
  title       ={An equational approach to theorem proving in first-order predicate calculus},
  year        ={1985}
}
@inproceedings{KaOt96,
  address     ={Paris, France},
  author      ={I. Karkowski and R. H. J. M. Otten},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={KaOt96},
  month       ={March},
  pages       ={467--472},
  publisher   ={{IEEE} Computer Society Press (Los Alamitos, California)},
  title       ={An Automatic Hardware-Software Partitioner Based on The Possibilistic Programming},
  year        ={1996}
}
@inbook{KaRe89,
  author      ={S. Kaplan and J.-L. Remy},
  chapter     ={Completion algorithms for conditional reasoning},
  key         ={KaRe89},
  keyword     ={Rewrite},
  publisher   ={Academic Press},
  title       ={Resolution of Equations in Algebraic Structures},
  volume      ={2},
  year        ={1989}
}
@article{KaSW95,
  author      ={F. Kabanza and J.-M. St\'{e}venne and P. Wolper},
  journal     ={Journal of Computer and System Sciences},
  key         ={KaSW95},
  month       ={August},
  number      ={1},
  pages       ={3--17},
  title       ={Handling infinite temporal data},
  volume      ={51},
  year        ={1995}
}
@inproceedings{KaSa91,
  address     ={Amsterdam},
  author      ={L.N. Kannan and D. Sarma},
  booktitle   ={European Design Automation Conference },
  key         ={KaSa91},
  keyword     ={Finite_State_Machine_Optimisation},
  month       ={February},
  organization={IEEE},
  pages       ={192--196},
  publisher   ={IEEE Computer Society Press},
  title       ={{F}ast {H}euristic {A}lgorithms {F}or {F}inite {S}tate {M}achine {M}inimization},
  year        ={1991}
}
@inproceedings{KaSe96,
  address     ={Oxford},
  author      ={V. Kasurinen and K. Sere},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={KaSe96},
  month       ={March},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{I}ntergrating {A}ction {S}ystems and {Z} in a {M}edical {S}ystem {S}pecification},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{KaSh97,
  address     ={Grenoble, France},
  author      ={D. Kapur and R.K. Shyamasundar},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={KaSh97},
  pages       ={361-375},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Synthesizing Controllers for Hybrid Systems},
  year        ={1997}
}
@inproceedings{KaSu92,
  author      ={T. Kam and P.A. Subrahmanyam},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={KaSu92},
  keyword     ={hardware verification general},
  pages       ={588--591},
  title       ={Comparing Layouts with {HDL} Models: A Formal Verifikation Technique},
  year        ={1992}
}
@inproceedings{KaSu92a,
  address     ={Grenoble},
  author      ={T. Kam and P.A. Subrahmanyam},
  booktitle   ={European Design Automation Conference },
  key         ={KaSu92a},
  keyword     ={hardware verification transistorlevel abstraction logic switchlevel},
  organization={IEEE Computer Society},
  pages       ={92--97},
  publisher   ={IEEE Computer Society Press},
  title       ={{S}tate {M}achine {A}bstraction from {C}ircuit {L}ayouts using {BDD}'s {A}pplications in {V}erification and {S}ynthesis},
  year        ={1992}
}
@inproceedings{KaSu96,
  address     ={New Brunswick, NJ, USA},
  author      ={D. Kapur and M. Subramaniam},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={KaSu96},
  month       ={July/August},
  pages       ={135--146},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Mechanically verifying a Family of multiplier Circuits},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{KaSz93,
  address     ={Ottawa, Canada},
  author      ={S. Kang and S.A. Szygenda},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={KaSz93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={339--346},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Automatic {VHDL} Model Generation System},
  year        ={1993}
}
@inproceedings{KaZh88,
  author      ={D. Kapur and H. Zhang},
  booktitle   ={Conference on Automated Deduction (CADE)},
  editor      ={Lusk and Overbeek},
  key         ={KaZh88},
  keyword     ={Rewrite},
  pages       ={768--769},
  publisher   ={Springer-Verlag},
  title       ={{RRL}: a rewrite rule laboratory},
  year        ={1988}
}
@inproceedings{Kalk91,
  address     ={Amsterdam},
  author      ={T. Kalker},
  booktitle   ={European Design Automation Conference },
  key         ={Kalk91},
  keyword     ={Formal_Verification},
  month       ={February},
  organization={IEEE},
  pages       ={395--400},
  publisher   ={IEEE Computer Society Press},
  title       ={{F}ormal {M}ethods for {S}ilicon {C}ompilation},
  year        ={1991}
}
@phdthesis{Kalt96,
  author      ={M. Kaltenbach},
  key         ={Kalt96},
  school      ={The Univeristy of Texas at Berkeley},
  title       ={Interactive Verification Exploiting Design Knowledge: A Model Checker for {UNITY}},
  year        ={1996}
}
@inproceedings{Kalv91a,
  address     ={Davis, California},
  author      ={S. Kalvala},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Kalv91a},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={{HOL} Around the World},
  year        ={1991}
}
@inproceedings{Kalv91b,
  address     ={Davis, California},
  author      ={S. Kalvala},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Kalv91b},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={305--317},
  publisher   ={IEEE Computer Society Press},
  title       ={Developing an Interface for {HOL}},
  year        ={1991}
}
@inproceedings{Kalv93,
  address     ={Vancouver, Canada},
  author      ={S. Kalvala},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Kalv93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={516--521},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Using {I}sabelle to Prove Simple Theorems},
  volume      ={780},
  year        ={1993}
}
@inproceedings{Kalv95,
  address     ={Aspen Grove, Utah, USA},
  author      ={S. Kalvala},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={Kalv95},
  month       ={September},
  pages       ={214--228},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {F}ormulation of {TLA} in {I}sabelle},
  volume      ={971},
  year        ={1995}
}
@article{Kami85,
  author      ={M. Kaminski},
  journal     ={Theoretical Computer Science},
  key         ={Kami85},
  keyword     ={omega},
  pages       ={217--239},
  title       ={A classification of $\omega$-regular languages},
  volume      ={36},
  year        ={1985}
}
@phdthesis{Kamp68,
  address     ={Los Angeles},
  author      ={H.W. Kamp},
  key         ={Kamp68},
  keyword     ={omega},
  school      ={University of California},
  title       ={Tense Logic and the Theory of Linear Order},
  year        ={1968}
}
@article{Kapl84,
  author      ={S. Kaplan},
  journal     ={Theoretical Computer Science},
  key         ={Kapl84},
  keyword     ={Rewrite},
  pages       ={175--193},
  title       ={Conditional rewrite rules},
  volume      ={33},
  year        ={1984}
}
@inproceedings{Kapo95,
  address     ={Paris},
  author      ={B. Kapoor},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={Kapo95},
  keyword     ={Combinational_Logic_Synthesis},
  month       ={March},
  pages       ={86--91},
  publisher   ={IEEE Computer Society Press},
  title       ={{I}mproved {T}echnology {M}apping {U}sing a {N}ew {A}pproach to {B}oolean {M}atching},
  year        ={1995}
}
@inproceedings{Kauf91,
  address     ={Davis, California},
  author      ={M. Kaufmann},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Kauf91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={An Informal Discussion of Issues in Mechanically-Assisted Reasoning},
  year        ={1991}
}
@inproceedings{KeKr91,
  author      ={U. Kebschull and T. Kropf},
  booktitle   ={European Design Automation Conference },
  key         ={KeKr91},
  keyword     ={SFB358 conference},
  series      ={Poster Session},
  title       ={{E}fficient {R}epresentation of the {R}ing-{S}um {E}xpansion for {B}oolean {V}erification},
  year        ={1991}
}
@book{KeRi78,
  address     ={New Jersey},
  author      ={B.W. Kernighan and D.M. Ritchie},
  key         ={KeRi78},
  publisher   ={Prentice Hall},
  series      ={Software Series},
  title       ={The {C} Programming Language},
  year        ={1978}
}
@inproceedings{KeRo93,
  address     ={Paris, France},
  author      ={U. Kebschull and W. Rosenstiel},
  booktitle   ={European Design Automation Conference },
  editor      ={F. Poirot and A.-M. Trullemans},
  key         ={KeRo93},
  month       ={February},
  pages       ={278--283},
  publisher   ={IEEE Computer Society Press},
  title       ={Efficient Graph-Based Computation and Manipulation of Functional Decision Diagrams},
  year        ={1993}
}
@inproceedings{KeRo94,
  author      ={U. Kebschull and W. Rosenstiel},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden im Systementwurf},
  editor      ={H. Eveking},
  key         ={KeRo94},
  keyword     ={2GI/ITG},
  month       ={March},
  organization={GI/ITG},
  publisher   ={Universit\"{a}t Frankfurt, Interner Bericht Nr. 6/94},
  title       ={{G}raph-{B}ased {R}epresentations of {B}oolean {C}anonical {F}orms},
  year        ={1994}
}
@inproceedings{KeSR92,
  author      ={U. Kebschull and E. Schubert and W. Rosenstiel},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={KeSR92},
  pages       ={43--47},
  title       ={{M}ultilevel {L}ogic {S}ynthesis {B}ased on {F}unctional {D}ecision {D}iagrams},
  year        ={1992}
}
@inproceedings{KeUt94,
  address     ={L\"{u}beck, Germany},
  author      ={P. Kearney and M. Utting},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={KeUt94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={455--475},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {L}ayered {R}eal-{T}ime {S}pecification of a {RISC} {P}rocessor},
  volume      ={863},
  year        ={1994}
}
@article{Kell76,
  author      ={R.M. Keller},
  journal     ={Communications of the {ACM}},
  key         ={Kell76},
  keyword     ={transitionsystem},
  month       ={July},
  number      ={7},
  pages       ={371--384},
  title       ={Formal Verification of Parallel Programs},
  volume      ={19},
  year        ={1976}
}
@techreport{Kerb90,
  author      ={M. Kerber},
  institution ={University of Kaiserslautern},
  key         ={Kerb90},
  number      ={SR-90-19},
  title       ={How to prove Higher Order Theorems in First Order Logic},
  type        ={SEKI Report},
  year        ={1990}
}
@inproceedings{Kerb91,
  author      ={M. Kerber},
  booktitle   ={International Joint Conference on Artificial Intelligence (IJCAI)},
  key         ={Kerb91},
  title       ={How to Prove Higher Order Theorems in First Order Logic},
  year        ={1991}
}
@inproceedings{Kess93,
  address     ={Arles, France},
  author      ={J.L.W. Kessels},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={Kess93},
  keyword     ={verification},
  month       ={May},
  organization={Philips Research Laboratories},
  pages       ={203--213},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Calculational Derivation of a Counter with Bounded Response Time},
  volume      ={683},
  year        ={1993}
}
@inproceedings{Keut91,
  address     ={Davis, California},
  author      ={K. Keutzer},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Keut91},
  keyword     ={verification registertransferlevel hardware tutorial},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={77--86},
  publisher   ={IEEE Computer Society Press},
  title       ={The Need for Formal Verification in Hardware Design and What Formal Verification Has {NOT} Done for Me Lately},
  year        ={1991}
}
@inproceedings{Keut96,
  address     ={Palo Alto, CA, USA},
  author      ={K. Keutzer},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={Keut96},
  month       ={November},
  pages       ={1--18},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The for formal methods for integrated circuit design},
  volume      ={1166},
  year        ={1996}
}
@book{KfMA86,
  author      ={A.J. Kfoury and R.N. Moll and M.A. Arbib},
  key         ={KfMA86},
  publisher   ={Springer-Verlag},
  title       ={A Programming Approach to Computability},
  year        ={1986}
}
@inproceedings{KhDC91,
  address     ={D\'{e}p. d'informatique et de recherche op\'{e}rationelle, Universit\'{e} de Montr\'{e}al, Qu\'{e}bec, Canada},
  author      ={K. Khordoc and M. Dufresne and E. Cerny},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={KhDC91},
  organization={IEEE},
  pages       ={358--361},
  title       ={{A} {S}timulus/{R}esponse {S}ystem {B}ased on {H}ierarchical {T}iming {D}iagrams},
  year        ={1991}
}
@inproceedings{KiBa89,
  author      ={S. Kim and P. Banerjee},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={KiBa89},
  keyword     ={hardware abstraction timing},
  organization={IEEE},
  pages       ={76--79},
  title       ={An Accurate Timing Model For Fault Simulation in {MOS} Circuits},
  year        ={1989}
}
@inproceedings{KiCh95,
  address     ={Aspen Grove, Utah, USA},
  author      ={J.D. Kim and S.-K. Chin},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={KiCh95},
  keyword     ={verification},
  month       ={September},
  pages       ={229--244},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{F}ormal {V}erification of {S}erial {P}ipeline {M}ultipliers},
  volume      ={971},
  year        ={1995}
}
@inproceedings{KiKH92,
  address     ={Santa Clara, California},
  author      ={S. Kimura and S. Kashima and H. Haneda},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={KiKH92},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={526--532},
  publisher   ={IEEE Computer Society Press},
  title       ={{P}recise {T}iming {V}erification of {L}ogic {C}ircuits under {C}ombined {D}elay {M}odel},
  year        ={1992}
}
@inproceedings{KiKT91,
  address     ={Amsterdam},
  author      ={M.A. Kishinevky and A.Y. Kondratyev and A.R. Taubin},
  booktitle   ={European Design Automation Conference },
  key         ={KiKT91},
  keyword     ={Finite_State_Machine_Optimisation},
  month       ={February},
  organization={IEEE},
  pages       ={197--201},
  publisher   ={IEEE Computer Society Press},
  title       ={{F}ormal {M}ethod {F}or {S}elf-{T}imed {D}esign},
  year        ={1991}
}
@inproceedings{KiKV92,
  author      ={M. Kishinevsky and A. Kondratyev and V. Varshavsky},
  booktitle   ={Workshop on Designing Correct Circuits},
  key         ={KiKV92},
  pages       ={275-288},
  title       ={Analysis and Identification of Self-timed Circuits},
  year        ={1992}
}
@inproceedings{KiKo92,
  address     ={Nijmegen},
  author      ={D.J. Kinniment and A.M. Koelmans},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  key         ={KiKo92},
  keyword     ={flowgraph verification},
  month       ={June},
  organization={IFIP TC10/WG 10.2},
  pages       ={111--127},
  publisher   ={North-Holland},
  title       ={Modelling and Verification of Timing Conditions with the {B}oyer {M}oore Prover},
  year        ={1992}
}
@inproceedings{KiSt94,
  address     ={Bad Herrenalb, Germany},
  author      ={M. Kishinevsky and J. Staunstrup},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={KiSt94},
  keyword     ={tpcd94},
  month       ={September},
  note        ={published 1995},
  pages       ={146--164},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Mechanized Verification of Speed-independence},
  volume      ={901},
  year        ={1994}
}
@inproceedings{KlMi93,
  address     ={Bad Herrenalb},
  author      ={B. Kleinjohann and R. Milczewski},
  booktitle   ={GI/ITG Workshop Formale Methoden zum Entwurf korrekter Systeme},
  editor      ={T. Kropf and R. Kumar and D. Schmid},
  key         ={KlMi93},
  keyword     ={1GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={41--48},
  publisher   ={Universit\"{a}t Karlsruhe, Interner Bericht Nr. 10/93},
  title       ={{E}in einheitliches formales {M}odell zur {S}chnittstellenspezifikation und {H}ardwarebeschreibung},
  year        ={1993}
}
@inproceedings{KlTT97,
  address     ={Toledo, Spain},
  author      ={B. Kleinjohann and J. Tacken and C. Tahedl},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={KlTT97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP},
  publisher   ={Chapman and Hall},
  title       ={Towards a complete design method for embedded systems using {P}redicate/{T}ransition-{N}ets},
  year        ={1997}
}
@inproceedings{KlTj96,
  address     ={Oxford},
  author      ={S. Kleuker and H. Tjabben},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={KlTj96},
  month       ={March},
  pages       ={479-498},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{T}he {I}ncremental {D}evelopment of {C}orrect {S}pecifications for {D}istributed {S}ystems},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{Kleu97,
  address     ={Enschede, The Netherlands},
  author      ={S. Kleuker},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={Kleu97},
  pages       ={306-321},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={Incremental Development of Deadlock-Free Communicating Systems},
  year        ={1997}
}
@inproceedings{KnBe70,
  author      ={D.E. Knuth and P.B. Bendix},
  booktitle   ={Computational problems in Abstract Algebra},
  editor      ={J.Leech},
  key         ={KnBe70},
  keyword     ={Rewrite Methods},
  pages       ={263--297},
  publisher   ={Pergamon Press},
  title       ={Simple word problems in universal algebra},
  year        ={1970}
}
@inproceedings{KnWi89,
  author      ={D.W. Knapp and M. Winslett},
  booktitle   ={{IFIP} International Workshop on Applied Formal Methods for Correct {VLSI} Design},
  key         ={KnWi89},
  keyword     ={flowgraph verification},
  organization={IFIP WG 10.2/WG 10.5},
  pages       ={3--22},
  publisher   ={North-Holland, 1990},
  title       ={A formalization of correctness for linked representations of datapath hardware},
  year        ={1989}
}
@article{Knig89,
  author      ={K. Knight},
  journal     ={ACM Comp. Surveys},
  key         ={Knig89},
  keyword     ={Rewrite Methods},
  number      ={1},
  pages       ={93--124},
  title       ={Unification: A multidisciplinary survey},
  volume      ={21},
  year        ={1989}
}
@incollection{KoMa92,
  author      ={H. Konuk and F.E. Marschner},
  booktitle   ={VHDL for Simulation, Synthesis and Formal Proofs of Hardware},
  editor      ={J. Mermet},
  key         ={KoMa92},
  keyword     ={flowgraph VHDL synthesis},
  pages       ={101--115},
  publisher   ={Kluwer Academic Publishers},
  title       ={A {VHDL}-driven synthesis environment},
  year        ={1992}
}
@article{KoPa81,
  author      ={D. Kozen and R. Parikh},
  journal     ={Theoretical Computer Science},
  key         ={KoPa81},
  pages       ={113--118},
  title       ={An Elementary Proof of Completness for {PDL}},
  volume      ={14},
  year        ={1981}
}
@inproceedings{KoRe97,
  address     ={Grenoble, France},
  author      ={W. Kohn and J.B. Remmel},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={KoRe97},
  pages       ={391-396},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Hybrid Dynamic Programming},
  year        ={1997}
}
@inproceedings{KoRu90a,
  author      ={E. Kounalis and M. Rusinowitch},
  booktitle   ={International Symposium on Aritificial Intelligence and Mathematics},
  key         ={KoRu90a},
  keyword     ={Rewrite},
  title       ={A mechanization of conditional reasoning},
  year        ={1990}
}
@article{KoRu90b,
  author      ={E. Kounalis and M. Rusinowitch},
  journal     ={Bulletin of European Association for Theoretical Computer Science},
  key         ={KoRu90b},
  keyword     ={Rewrite},
  month       ={June},
  pages       ={216--226},
  title       ={Mechanizing inductive reasoning},
  volume      ={41},
  year        ={1990}
}
@inproceedings{KoSW96,
  address     ={Turku, Finland},
  author      ={Kolyang and T. Santen and B. Wolff},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={KoSW96},
  month       ={August},
  pages       ={283--298},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Structure Preserving Encoding of Z in Isabelle/{HOL}},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{KoSW96a,
  address     ={Oxford},
  author      ={Kolyang and T. Santen and B. Wolff},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={KoSW96a},
  month       ={March},
  pages       ={629-648},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{C}orrect and {U}ser-{F}riendly {I}mplementations of {T}ransformation {S}ystems},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{KoSc94,
  address     ={Paris},
  author      ={F. Korf and R. Schl\"{o}r},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={KoSc94},
  keyword     ={Specification_and_Synthesis_of_System_Interfaces},
  month       ={February},
  pages       ={385--394},
  publisher   ={IEEE Computer Society Press},
  title       ={{I}nterface {C}ontroller {S}ynthesis from {R}equirement {S}pecifications},
  year        ={1994}
}
@incollection{KoTi90,
  address     ={North-Holland, Amsterdam},
  author      ={D. Kozen and J. Tiuryn},
  booktitle   ={Handbook of Theoretical Computer Science},
  editor      ={J. Van Leeuwen},
  key         ={KoTi90},
  pages       ={789--840},
  title       ={Logics of Programs},
  volume      ={B},
  year        ={1990}
}
@inproceedings{KoUW96,
  address     ={New Brunswick, NJ, USA},
  author      ={F. Koob and M. Ullmann and S. Wittmann},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={KoUW96},
  month       ={July/August},
  pages       ={454--457},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification support environment},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{KoVR83,
  address     ={New York},
  author      ={R. Koymans and J. Vytopil and W.-P. de Roever},
  booktitle   ={{ACM} Symposium on Principles of Distributed Computing},
  key         ={KoVR83},
  organization={ACM},
  pages       ={187--197},
  title       ={Real-time Programming and Asynchronous Message Passing},
  year        ={1983}
}
@inproceedings{KoWe93,
  address     ={Paris, France},
  author      ={A.P. Kostelijk and A. van der Werf},
  booktitle   ={European Design Automation Conference },
  editor      ={L. Claesen and P. Prinetto},
  key         ={KoWe93},
  month       ={February},
  pages       ={99--104},
  publisher   ={IEEE Computer Society Press},
  title       ={Functional Verification for Retiming and Rebuffering Optimization},
  year        ={1993}
}
@inproceedings{KoYF92,
  address     ={Santa Clara, California},
  author      ={H. Komi and S. Yamada and K. Fukunaga},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={KoYF92},
  keyword     ={High-Level_Design},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={234--237},
  publisher   ={IEEE Computer Society Press},
  title       ={{A} {S}cheduling {M}ethod by {S}tepwise {E}xpansion in {H}igh-{L}evel {S}ynthesis},
  year        ={1992}
}
@inproceedings{Koep86,
  author      ={S. Koeppe},
  booktitle   ={International Test Conference (ITC)},
  key         ={Koep86},
  keyword     ={hardware simulation analog discrete},
  organization={IEEE},
  pages       ={530--536},
  title       ={Modeling and Simulation of Delay Faults in {CMOS} Logic Circuits},
  year        ={1986}
}
@book{Koha70,
  author      ={Z. Kohavi},
  key         ={Koha70},
  publisher   ={McGraw-Hill, New York},
  title       ={Switching and Finite Automata Theory},
  year        ={1970}
}
@book{Koho77,
  author      ={T. Kohonen},
  key         ={Koho77},
  keyword     ={hardware registertransferlevel textbook},
  publisher   ={Springer-Verlag},
  series      ={Communication and Cybernetics},
  title       ={Associative Memory},
  year        ={1977}
}
@book{Kore93,
  author      ={I. Koren},
  key         ={Kore93},
  publisher   ={Prentice-Hall},
  title       ={Computer {A}rithmetic {A}lgorithms},
  year        ={1993}
}
@article{Kowa75,
  author      ={R. Kowalski},
  journal     ={Journal of the ACM},
  key         ={Kowa75},
  keyword     ={Logic},
  number      ={4},
  pages       ={572--595},
  title       ={A proof procedure using connection graphs},
  volume      ={22},
  year        ={1975}
}
@inproceedings{Koym87,
  author      ={R. Koymans},
  booktitle   ={{ACM} Symposium on Principles of Distributed Computing},
  key         ={Koym87},
  pages       ={191--204},
  title       ={Specifying Message Buffers Requires Extending Temporal Logic},
  year        ={1987}
}
@phdthesis{Koym89,
  address     ={Netherland},
  author      ={R. Koymans},
  key         ={Koym89},
  school      ={Eindhoven University of Technology},
  title       ={Specifying Message-Passing and Time-Critical System with Temporal Logic},
  year        ={1989}
}
@article{Koym90,
  author      ={R. Koymans},
  journal     ={Real-Time Systems},
  key         ={Koym90},
  pages       ={255--299},
  title       ={{S}pecifying {R}eal-{T}ime {P}roperties with {M}etric {T}emporal {L}ogic},
  volume      ={2},
  year        ={1990}
}
@inproceedings{Koym91,
  address     ={Mook, The Netherlands},
  author      ={R. Koymans},
  booktitle   ={Real-Time: Theory in Practice},
  key         ={Koym91},
  month       ={June},
  organization={Philips Research Laboratories},
  pages       ={353--370},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={(Real) Time: A Philosophical Perspective},
  volume      ={600},
  year        ={1991}
}
@article{Koze83,
  author      ={D. Kozen},
  journal     ={Theoretical Computer Science},
  key         ={Koze83},
  month       ={December},
  pages       ={333--354},
  title       ={Results on the Propositional Mu-calculus},
  volume      ={27},
  year        ={1983}
}
@article{KrBB96,
  author      ={I. Kraan and D. Basin and A. Bundy},
  journal     ={Journal of Automated Reasoning},
  key         ={KrBB96},
  number      ={1--2},
  pages       ={113--145},
  title       ={Middle-Out Reasoning for Synthesis and Induction},
  volume      ={16},
  year        ={1996}
}
@inproceedings{KrCh94,
  address     ={San Diego, CA},
  author      ={A.S. Krishnakumar and K.-T. Cheng},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={KrCh94},
  keyword     ={formal_verification},
  month       ={June},
  note        ={ch. 38.4},
  publisher   ={San Diego Convention Center},
  title       ={{O}n the {C}omputation of the {S}et of {R}eachable {S}tates of {H}ybrid {M}odels},
  year        ={1994}
}
@inproceedings{KrKS92,
  address     ={Madrid},
  author      ={T. Kropf and R. Kumar and K. Schneider},
  booktitle   ={{IFIP} World Conference},
  key         ={KrKS92},
  keyword     ={SFB358 conference},
  month       ={September},
  organization={IFIP},
  title       ={Bridging the Gap between Hardware-Verification and Design},
  year        ={1992}
}
@inproceedings{KrKS93a,
  address     ={Arles, France},
  author      ={T. Kropf and R. Kumar and K. Schneider},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={KrKS93a},
  keyword     ={SFB358 verification conference},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={242--257},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{E}mbedding {H}ardware {V}erification within a {C}ommercial {D}esign {F}ramework},
  volume      ={683},
  year        ={1993}
}
@techreport{KrKS93b,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={T. Kropf and R. Kumar and K. Schneider},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={KrKS93b},
  keyword     ={SFB358 verification techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-6-93.ps.gz},
  number      ={SFB358-C2-6/93},
  title       ={{E}mbedding {H}ardware {V}erification within a {C}ommercial {D}esign {F}ramework},
  year        ={1993}
}
@techreport{KrKS93c,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={T. Kropf and R. Kumar and D. Schmid},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={KrKS93c},
  keyword     ={SFB358 techreport},
  month       ={February},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-3-93.ps.gz},
  number      ={SFB358-C2-3/93},
  title       ={Workshop {F}ormale {M}ethoden zum {E}ntwurf korrekter {S}ysteme},
  year        ={1993}
}
@inproceedings{KrMa94,
  address     ={San Diego, CA},
  author      ={S. Krishnamoorthy and F. Mailhot},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={KrMa94},
  keyword     ={sequential_synthesis},
  month       ={June},
  note        ={ch. 42.3},
  publisher   ={San Diego Convention Center},
  title       ={{B}oolean {M}atching of {S}equential {E}lements},
  year        ={1994}
}
@inproceedings{KrMo97,
  address     ={Enschede, The Netherlands},
  author      ={J.P. Krimm and L. Mounier},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={KrMo97},
  pages       ={239-258},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={Compositional State Space Generation from {Lotos} Programs},
  year        ={1997}
}
@inproceedings{KrRN97,
  address     ={Toledo, Spain},
  author      ={L. Kruse and D. Rabe and W. Nebel},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={KrRN97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={{VHDL} power simulator: power analysis at gate level},
  year        ={1997}
}
@techreport{KrRu96,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={T. Kropf and J. Ruf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={KrRu96},
  keyword     ={SFB358 verification techreport},
  month       ={August},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-5-96.ps.gz},
  number      ={SFB358-C2-5/96},
  title       ={Using {MTBDD}s for Discrete Timed Symbolic Model Checking},
  year        ={1996}
}
@inproceedings{KrRu97a,
  address     ={Paris, France},
  author      ={T. Kropf and J. Ruf},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={KrRu97a},
  keyword     ={SFB358 conference},
  month       ={March},
  pages       ={182--187},
  publisher   ={{IEEE} Computer Society Press (Los Alamitos, California)},
  title       ={Using {MTBDDs} for Discrete Timed Symbolic Model Checking},
  year        ={1997}
}
@inproceedings{KrSK94a,
  address     ={Bad Herrenalb, Germany},
  author      ={T. Kropf and K. Schneider and R. Kumar},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={KrSK94a},
  keyword     ={tpcd94 SFB358 conference},
  month       ={September},
  note        ={published 1995},
  pages       ={223--238},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {F}ormal {F}ramework for {H}igh {L}evel {S}ynthesis},
  volume      ={901},
  year        ={1994}
}
@techreport{KrSK94b,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={T. Kropf and K. Schneider and R. Kumar},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={KrSK94b},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-5-94.ps.gz},
  number      ={SFB358-C2-5/94},
  title       ={A formal framework for high-level synthesis},
  year        ={1994}
}
@inproceedings{KrWu90,
  address     ={Gut Ising, Chiemsee},
  author      ={T. Kropf and H.-J. Wunderlich},
  booktitle   ={Workshop Testmethoden und Zuverl\"{a}{\ss}igkeit von Schaltungen und Systemen},
  key         ={KrWu90},
  keyword     ={SFB358 workshop},
  month       ={March},
  organization={ITG/GI},
  title       ={Hierarchische {T}estmustergenerierung f\"{u}r sequentielle {S}chaltungen},
  year        ={1990}
}
@inproceedings{KrWu91a,
  address     ={Vail, Colorado},
  author      ={T. Kropf and H.-J. Wunderlich},
  booktitle   ={{IEEE} Workshop on Design for Testability},
  key         ={KrWu91a},
  keyword     ={SFB358 workshop},
  month       ={April},
  organization={IEEE},
  title       ={{A} {U}nified {A}pproach for {H}ardware {V}erification and {T}est {G}eneration},
  year        ={1991}
}
@inproceedings{KrWu91b,
  address     ={Nashville},
  author      ={T. Kropf and H.-J. Wunderlich},
  booktitle   ={International Test Conference (ITC)},
  key         ={KrWu91b},
  keyword     ={SFB358 conference},
  month       ={October},
  pages       ={57--66},
  title       ={{A} {C}ommon {A}pproach to {T}est {G}eneration and {H}ardware-{V}erification {B}ased on {T}emporal {L}ogic},
  year        ={1991}
}
@mastersthesis{Kreu96,
  author      ={J. Kreuzinger},
  howpublished={master thesis, University of Karlsruhe, Institute for Computer Design and Fault Tolerance},
  key         ={Kreu96},
  title       ={{E}ntwurf und {S}ynthese einer {P}rozessor-{P}ipeline mit schnellem {K}ontextwechsel},
  year        ={1996}
}
@inproceedings{Krip63,
  author      ={S.A. Kripke},
  booktitle   ={a Colloquium: Modal and Many Valued Logics},
  key         ={Krip63},
  keyword     ={hardware modelling fsm other},
  month       ={August},
  pages       ={83--94},
  series      ={Acta Philosophica Fennica},
  title       ={Semantical Considerations on Modal Logic},
  volume      ={16},
  year        ={1963}
}
@article{Krip75,
  author      ={S.A. Kripke},
  journal     ={Journal of Philosophy},
  key         ={Krip75},
  pages       ={690--716},
  title       ={Outline of a theory of truth},
  year        ={1975}
}
@inproceedings{Kris92,
  author      ={S. Krischer},
  booktitle   ={Workshop on Designing Correct Circuits},
  key         ={Kris92},
  pages       ={67-80},
  title       ={Incomplete {TRS}-Specifications of Boolean Functions and their Verification},
  year        ={1992}
}
@inproceedings{Kris93,
  address     ={Ottawa, Canada},
  author      ={S. Krischer},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Kris93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={143--150},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={The Backward Walk Approach in {FSM} Verification},
  year        ={1993}
}
@book{Kroe87,
  author      ={F. Kr\"{o}ger},
  key         ={Kroe87},
  keyword     ={software formalism temporallogic specification firstorderlogic},
  publisher   ={Springer-Verlag},
  series      ={EATCS Monographs on Theoretical Computer Science},
  title       ={Temporal Logic of Programs},
  volume      ={8},
  year        ={1987}
}
@book{Krop93,
  address     ={D\"{u}sseldorf},
  author      ={T. Kropf},
  key         ={Krop93},
  keyword     ={SFB358 book},
  note        ={ISBN 3-18-147409-6},
  publisher   ={VDI Verlag},
  series      ={Reihe 9: Elektronik},
  title       ={{Ein} einheitlicher {Ansatz} zur {Verifikation} und {Testerzeugung} f\"{u}r digitale {Schaltungen} mit temporaler {Logik}},
  volume      ={174},
  year        ={1993}
}
@misc{Krop93a,
  author      ={T. Kropf},
  howpublished={Vorlesung im SS'93},
  key         ={Krop93a},
  keyword     ={SFB358},
  note        ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz, Universit\"{a}t Karlsruhe},
  title       ={Hardware-Verifikation},
  year        ={1993}
}
@techreport{Krop94a,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={Krop94a},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-4-94.ps.gz},
  number      ={SFB358-C2-4/94},
  title       ={Benchmark-Circuits for Hardware-Verification},
  year        ={1994}
}
@inproceedings{Krop94b,
  address     ={Bad Herrenalb, Germany},
  author      ={T. Kropf},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={Krop94b},
  keyword     ={tpcd94 SFB358 conference},
  month       ={September},
  note        ={published 1995},
  pages       ={1--12},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{B}enchmark-{C}ircuits for {H}ardware-{V}erification},
  volume      ={901},
  year        ={1994}
}
@book{Krop95,
  address     ={Bonn},
  author      ={T. Kropf},
  key         ={Krop95},
  keyword     ={textbook tutorial SFB358 book},
  month       ={April},
  publisher   ={International Thomson Publishing},
  series      ={Thomson's Aktuelle Tutorien},
  title       ={{VLSI}-{E}ntwurf - {V}orgehen, {M}ethoden, {A}utomatisierung},
  volume      ={17},
  year        ={1995}
}
@misc{Krop97a,
  author      ={T. Kropf},
  howpublished={habilitation thesis (in German)},
  key         ={Krop97a},
  keyword     ={habil tutorial SFB358 book},
  month       ={May},
  title       ={{H}ardware-{V}erifikation -- {V}erfahren und {W}erkzeuge zum {E}ntwurf korrekter {S}chaltungen und {S}ysteme},
  year        ={1997}
}
@book{Krop97b,
  author      ={T. Kropf},
  edition     ={State of the Art Report},
  key         ={Krop97b},
  keyword     ={SFB358},
  month       ={August},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Formal Hardware Verification -- Methods and Systems in Comparison},
  volume      ={1287},
  year        ={1997}
}
@inproceedings{KuEi96,
  address     ={Kreischa},
  author      ={Ramayya Kumar and Dirk Eisenbiegler},
  booktitle   ={GI/ITG/GME Workshop Methoden des Entwurfs und der Verifikation Digitaler Systeme},
  editor      ={Bernd straube and Jens Schoenherr},
  key         ={KuEi96},
  keyword     ={4. GI/ITG/GME},
  month       ={March},
  organization={GI/ITG/GME},
  pages       ={11--20},
  publisher   ={Shaker Verlag, Aachen},
  series      ={Berichte aus der Informatik},
  title       ={Synthese von Verhaltensbeschreibungen in {VHDL} mittels logischer Transformationen},
  year        ={1996}
}
@inproceedings{KuFB94,
  address     ={San Jose, California},
  author      ={Y. Kukimoto and M. Fujita and R.K. Brayton},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={KuFB94},
  keyword     ={BDD},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={632--639},
  publisher   ={IEEE Computer Society Press},
  title       ={{A} {R}edesign {T}echnique for {C}ombinational {C}ircuits {B}ased on {G}ate {R}econnections},
  year        ={1994}
}
@article{KuGr94,
  author      ={O. Kupferman and O. Grumberg},
  journal     ={Information and Computation},
  key         ={KuGr94},
  title       ={Branching Time Temporal Logic and Amorphous Tree Automata},
  year        ={1994}
}
@article{KuGr96,
  author      ={O. Kupferman and O. Grumberg},
  journal     ={Journal of Logic and Computation},
  key         ={KuGr96},
  month       ={August},
  number      ={4},
  pages       ={523-539},
  title       ={Buy One, Get One Free!!!},
  volume      ={6},
  year        ={1996}
}
@inproceedings{KuKS91a,
  address     ={Davis, California},
  author      ={R. Kumar and T. Kropf and K. Schneider},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={KuKS91a},
  keyword     ={SFB358 verification conference},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={170--176},
  publisher   ={IEEE Computer Society Press},
  title       ={{I}ntegrating a {F}irst-{O}rder {A}utomatic {P}rover in the {HOL} {E}nvironment},
  year        ={1991}
}
@inproceedings{KuKS91b,
  address     ={Davis, California},
  author      ={R. Kumar and T. Kropf and K. Schneider},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={KuKS91b},
  keyword     ={SFB358 verification workshop},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={190--193},
  publisher   ={IEEE Computer Society Press},
  title       ={{F}irst {S}teps {T}owards {A}utomating {H}ardware {P}roofs in {HOL}},
  year        ={1991}
}
@inproceedings{KuKY97,
  address     ={Aarhus},
  author      ={O. Kupferman and R.P. Kurshan and M. Yannakakis},
  booktitle   ={Annual Conference of the {E}uropean Association for Computer Science Logic (CSL)},
  key         ={KuKY97},
  month       ={August},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Existence of reduction hierarchies},
  year        ={1997}
}
@proceedings{KuKr94,
  address     ={Berlin, Heidelberg},
  editor      ={R. Kumar and T. Kropf},
  key         ={KuKr94},
  month       ={September},
  organization={IFIP WG10.2},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={2nd {I}nternational {C}onference on {T}heorem {P}roving in {C}ircuit {D}esign},
  volume      ={901},
  year        ={1994}
}
@inproceedings{KuKr97,
  address     ={Anaheim, CA},
  author      ={Andreas Kuehlmann and Florian Krohm},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={KuKr97},
  month       ={June},
  title       ={Equivalence Checking Using Cuts and Heaps},
  year        ={1997}
}
@inproceedings{KuLe78,
  author      ={H.T. Kung and C.E. Leierson},
  booktitle   ={Sparse Matrics Proceedings},
  key         ={KuLe78},
  keyword     ={hardware algorithmiclevel},
  pages       ={256--282},
  publisher   ={Society for Industrial and Applied Mathematics 1979},
  title       ={Systolic Arrays (for {VLSI})},
  year        ={1978}
}
@inproceedings{KuMc89,
  address     ={New York},
  author      ={R.P. Kurshan and K.L. McMillan},
  booktitle   ={{ACM} Symposium on Principles of Distributed Computing},
  key         ={KuMc89},
  month       ={August},
  organization={ACM},
  pages       ={239--247},
  title       ={A Structural Induction Theorem for Processes},
  year        ={1989}
}
@article{KuMc91,
  author      ={R.P. Kurshan and K.L. McMillan},
  journal     ={{IEEE} Transactions on Computer-Aided Design Integrated Circuits and Systems},
  key         ={KuMc91},
  month       ={November},
  number      ={11},
  pages       ={1356--1371},
  title       ={Analysis of Digital Circuits Through Symbolic Reduction},
  volume      ={10},
  year        ={1991}
}
@article{KuSK93a,
  author      ={R. Kumar and K. Schneider and T. Kropf},
  journal     ={International Journal of Formal System Design},
  key         ={KuSK93a},
  keyword     ={SFB358 verification HOL journal},
  pages       ={165--230},
  title       ={{S}tructuring and {A}utomating {H}ardware {P}roofs in a {H}igher-{O}rder {T}heorem-{P}roving {E}nvironment},
  year        ={1993}
}
@techreport{KuSK93b,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={R. Kumar and K. Schneider and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={KuSK93b},
  keyword     ={SFB358 verification HOL techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-1-93.ps.gz},
  number      ={SFB358-C2-1/93},
  title       ={Structuring and Automating Hardware Proofs in a Higher-Order Theorem-Proving Environment},
  year        ={1993}
}
@inproceedings{KuSV96,
  address     ={Liege, Belgium},
  author      ={O. Kupferman and S. Safra and M. Y. Vardi},
  booktitle   ={Conference on Logic in Computer Science (LICS)},
  key         ={KuSV96},
  title       ={Relating Word and Tree Automata},
  year        ={1996}
}
@inproceedings{KuVa95,
  author      ={O. Kupferman and M.Y. Vardi},
  booktitle   ={Conference on Concurrency (CONCUR)},
  key         ={KuVa95},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={On the Complexity of Branching Modular Model Checking},
  year        ={1995}
}
@inproceedings{KuVa96,
  address     ={New Brunswick, NJ, USA},
  author      ={O. Kupferman and M. Y. Vardi},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={KuVa96},
  month       ={July/August},
  pages       ={75--86},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Module Checking},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{KuVa96a,
  address     ={New Brunswick, NJ, USA},
  author      ={O. Kupferman and M. Y. Vardi},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={KuVa96a},
  month       ={July/August},
  pages       ={372--384},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification of Fair Transition Systems},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{KuVa97a,
  author      ={O. Kupferman and M.Y. Vardi},
  booktitle   ={Israeli Symposium on Theory of Computing and Systems},
  key         ={KuVa97a},
  pages       ={147--158},
  publisher   ={{IEEE} Computer Society Press},
  title       ={Weak Alternating Automata Are Not That Weak},
  year        ={1997}
}
@inproceedings{KuVa97b,
  address     ={Manchester},
  author      ={O. Kupferman and M.Y. Vardi},
  booktitle   ={International Conference on Temporal Logic},
  key         ={KuVa97b},
  month       ={July},
  pages       ={91--106},
  title       ={Synthesis with incomplete information},
  year        ={1997}
}
@inproceedings{KuVa98a,
  address     ={New York},
  author      ={O. Kupferman and M.Y. Vardi},
  booktitle   ={{IFIP} Working Conference on Programming Concepts and Methods},
  key         ={KuVa98a},
  month       ={June},
  publisher   ={Chapman \& {H}all},
  title       ={Relating linear and branching model checking},
  year        ={1998}
}
@inproceedings{KuVa98b,
  address     ={Dallas},
  author      ={O. Kupferman and M.Y. Vardi},
  booktitle   ={ACM Symposium on Theory of Computing},
  key         ={KuVa98b},
  title       ={Weak alternating automata and tree automata emptiness},
  year        ={1998}
}
@inproceedings{KuVa98c,
  author      ={O. Kupferman and M.Y. Vardi},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science},
  key         ={KuVa98c},
  title       ={Freedom, Weakness, and Determinism: From Linear-time to Branching-time},
  year        ={1998}
}
@inproceedings{Kuch88,
  author      ={G.A. Kucherov},
  booktitle   ={Algebraic and Logic Programming},
  key         ={Kuch88},
  keyword     ={Rewrite},
  publisher   ={Springer-Verlag},
  title       ={A new quasi-reducibility testing algorithm and its applications to proofs by induction},
  year        ={1988}
}
@inproceedings{Kuec85,
  address     ={Linz, Austria},
  author      ={W. K\"{u}chlin},
  booktitle   ={Eurocal 85},
  editor      ={B.F.Caviness},
  key         ={Kuec85},
  keyword     ={Rewrite},
  month       ={April},
  pages       ={390--399},
  publisher   ={Springer-Verlag},
  title       ={A confluence criterion based on the generalised {K}nuth-{B}endix algorithm},
  year        ={1985}
}
@phdthesis{Kuec86,
  author      ={W. K\"{u}chlin},
  key         ={Kuec86},
  keyword     ={Rewrite},
  school      ={Swiss Federal Institute of Technology (ETH), Z\"{u}rich},
  title       ={Equational Completion by Proof Transformation},
  year        ={1986}
}
@techreport{Kuec86a,
  author      ={W. K\"{u}chlin},
  institution ={Swiss Federal Institute of Technology, Z\"{u}rich},
  key         ={Kuec86a},
  keyword     ={Rewrite},
  number      ={86--101},
  title       ={A Generalized {K}nuth-{B}endix algorithm},
  type        ={Technical Report},
  year        ={1986}
}
@inbook{Kuec89,
  author      ={W. K\"{u}chlin},
  chapter     ={Inductive completion by ground proof transformation},
  key         ={Kuec89},
  keyword     ={Rewrite},
  publisher   ={Academic Press},
  title       ={Resolution of Equations in Algebraic Structures},
  year        ={1989}
}
@mastersthesis{Kuec97,
  address     ={Karlsruhe},
  author      ={G. K\"{u}\c{c}\"{u}k},
  key         ={Kuec97},
  keyword     ={formalism verification SFB358},
  remark      ={betreut von K. Schneider},
  school      ={Universit\"{a}t Karlsruhe},
  title       ={Eine synchrone generische Hardwarebeschreibungssprache f\"{u}r
		die Verifikation mit induktiven Verfahren sowie Modellierung
		temporaler Logik},
  year        ={1997}
}
@article{Kung82,
  author      ={H.T. Kung},
  journal     ={IEEE Computer},
  key         ={Kung82},
  keyword     ={hardware algorithmiclevel},
  month       ={January},
  pages       ={37-46},
  title       ={Why Systolic Architectures},
  year        ={1982}
}
@inproceedings{Kunz93,
  address     ={Santa Clara, California},
  author      ={W. Kunz},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={Kunz93},
  keyword     ={verification},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={538--543},
  publisher   ={IEEE Computer Society Press},
  title       ={{HANNIBAL:} {A}n {E}fficient {T}ool for {L}ogic {V}erification {B}ased on {R}ecursive {L}earning},
  year        ={1993}
}
@phdthesis{Kupf95a,
  address     ={Sivan 5754, Haifa, Israel},
  author      ={O. Kupferman},
  key         ={Kupf95a},
  month       ={June},
  school      ={Israel Institute of Technology},
  title       ={Model Checking for Branching-Time Temporal Logics},
  year        ={1995}
}
@inproceedings{Kupf95b,
  address     ={Liege, Belgium},
  author      ={O. Kupferman},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={Kupf95b},
  month       ={July},
  pages       ={325--338},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Augmenting branching temporal logics with existential qualification over atomic propositions},
  volume      ={939},
  year        ={1995}
}
@techreport{Kurs86,
  address     ={Murray Hill, NJ},
  author      ={R.P. Kurshan},
  institution ={AT and Bell Labs.},
  key         ={Kurs86},
  number      ={1121-861010-33-TM},
  title       ={Testing Containment of Omega Regular Languages},
  year        ={1986}
}
@inproceedings{Kurs87,
  address     ={New York},
  author      ={R.P. Kurshan},
  booktitle   ={Discrete Event Systems: Models and Applications},
  editor      ={J.W. de Bakker and W.-P. de Roever},
  key         ={Kurs87},
  pages       ={19--39},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Control and Information Science},
  title       ={Reducibility in Analysis of Coordination},
  volume      ={103},
  year        ={1987}
}
@inproceedings{Kurs89,
  address     ={New York},
  author      ={R.P. Kurshan},
  booktitle   ={{REX} Workshop on Stepwise Refinement of Distributed Systems: Models, Formalisms, Correctness},
  editor      ={J.W. de Bakker and W.-P. de Roever and G. Rozenberg},
  key         ={Kurs89},
  month       ={May},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Analysis of Discrete Event Coordination},
  volume      ={430},
  year        ={1989}
}
@inproceedings{Kurs94,
  address     ={Standford, California, USA},
  author      ={R. P. Kurshan},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={Kurs94},
  month       ={June},
  pages       ={222--233},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Models whose Checks Don't Explode},
  volume      ={818},
  year        ={1994}
}
@book{Kurs94a,
  author      ={R. P. Kurshan},
  key         ={Kurs94a},
  publisher   ={Princeton Univ. Press},
  title       ={Computer-aided Verification of Coordinating Processes -- The Automata-Theoretic Approach},
  year        ={1994}
}
@inproceedings{LBCJ94,
  address     ={Standford, California, USA},
  author      ={D. E. Long and A. Browne and E. M. Clarke and S. Jha and W. R . Marrero},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={LBCJ94},
  month       ={June},
  pages       ={338--350},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={An Improved Algorithm for the Evaluation of Fixpoint Expressions},
  volume      ={818},
  year        ={1994}
}
@inproceedings{LCMC97,
  address     ={Montreal, Canada},
  author      ={X. Li and A. Cau and B. Moszkowski and N. Coleman},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={H. F. Li and D. K. Probst},
  key         ={LCMC97},
  keyword     ={conference},
  month       ={October},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Proving the correctness of the interlock mechanism in processor design},
  year        ={1997}
}
@inproceedings{LFMM92,
  address     ={Nijmegen},
  author      ={B. Levy and I. Filippenko and L. Marcus and T. Menas},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  key         ={LFMM92},
  keyword     ={HDL verification},
  month       ={June},
  organization={IFIP TC10/WG 10.2},
  pages       ={337--360},
  publisher   ={North-Holland},
  title       ={Using the State Delta Verification System {(SDVS)} for Hardware Verification},
  year        ={1992}
}
@misc{LGSy93,
  key         ={LGSy93},
  note        ={ftp://mcnc.mcnc.org/pub/benchmark/},
  title       ={Benchmark-Circuits for Logic Synthesis},
  year        ={1993}
}
@article{LHHR94,
  author      ={N.G. Leveson and M.P.E. Heimdahl and H. Hildreth and J.D. Reese},
  journal     ={{IEEE} Transactions on Software Engineering},
  key         ={LHHR94},
  title       ={Requirements Specification for Process-Control Systems},
  year        ={1994}
}
@inproceedings{LLHA94,
  address     ={Bad Herrenalb, Germany},
  author      ={J. O'Leary and M. Leeser and J. Hickey and M. Aagaard},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={LLHA94},
  keyword     ={tpcd94},
  month       ={September},
  note        ={published 1995},
  pages       ={52--71},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Non-Restoring Integer Square Root: A Case Study in Design by Principled Optimization},
  volume      ={901},
  year        ={1994}
}
@inproceedings{LLLA93,
  address     ={Ottawa, Canada},
  author      ={J. O'Leary and M. Linderman and M. Leeser and M. Aagaard},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={LLLA93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={313--320},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={{HML}: A Hardware Description Language Based on Standard {ML}},
  year        ={1993}
}
@inproceedings{LMMD97,
  address     ={Toledo, Spain},
  author      ={B. Landwehr and P. Marwedel and I. Markhof and R. D\"{o}mer},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={LMMD97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Exploiting isomorphism for speeding up instance-binding in an integrated scheduling allocation and assignment approach to architectural synthesis},
  year        ={1997}
}
@inproceedings{LTZS96,
  address     ={Austin, TX, USA},
  author      ={M. Langevin and S. Tahar and Z. Zhou and X. Song and E. Cerny},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={LTZS96},
  month       ={October},
  pages       ={20--26},
  title       ={Behavioral verification of an {ATM} switch fabric using implicit abstract state enumeration},
  year        ={1996}
}
@inproceedings{LWGL92,
  address     ={Santa Clara, California},
  author      ={T.-F. Lee and A.C.-H. Wu and D.D. Gajski and Y.-L. Lin},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={LWGL92},
  keyword     ={High-Level_Design},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={230--233},
  publisher   ={IEEE Computer Society Press},
  title       ={{A}n {E}ffective {M}ethodology for {F}unctional {P}ipelining},
  year        ={1992}
}
@inproceedings{LaBC88,
  address     ={Glasgow, Scotland},
  author      ={M. Langevin and C. Berthet and E. Cerny},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={LaBC88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={139--158},
  publisher   ={North-Holland},
  title       ={Verification of Input Constraints for Synchronous Circuits},
  year        ={1988}
}
@inproceedings{LaBS92,
  address     ={Santa Clara, California},
  author      ={W.K.C. Lam and R.K. Brayton and A.L. Sangiovanni-Vincentelli},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={LaBS92},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={518--525},
  publisher   ={IEEE Computer Society Press},
  title       ={{V}alid {C}locking in {W}avepipelined {C}ircuits},
  year        ={1992}
}
@inproceedings{LaBS94,
  address     ={San Diego, CA},
  author      ={W.K.C. Lam and R.K. Brayton and A. Sangiovanni-Vincentelli},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={LaBS94},
  keyword     ={timing_analysis},
  month       ={June},
  note        ={ch. 8.1},
  publisher   ={San Diego Convention Center},
  title       ={{E}xact {M}inimum {C}ycle {T}imes for {F}inite {S}tate {M}achines},
  year        ={1994}
}
@book{LaBr94a,
  author      ={W.K.C. Lam and R.K. Brayton},
  key         ={LaBr94a},
  keyword     ={hardware verification general},
  note        ={ISBN 0-7923-9454-2},
  publisher   ={Kluwer Academic Publishers},
  remark      ={kostet 70.50 britische Pfund},
  title       ={Timed Boolean Functions: A Unified Formalism for Exact Timing Analysis},
  year        ={1994}
}
@inproceedings{LaBr94b,
  address     ={Standford, California, USA},
  author      ={W.K.C. Lam and R.K. Brayton},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={LaBr94b},
  month       ={June},
  pages       ={27-40},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Criteria for the Simple Path Property in Timed Automata},
  volume      ={818},
  year        ={1994}
}
@inproceedings{LaCe91,
  address     ={North-Holland},
  author      ={M. Langewin and E. Cerny},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P. Prinetto and E. Camurati},
  key         ={LaCe91},
  month       ={June},
  title       ={Verification of processor-like circuits},
  year        ={1991}
}
@inproceedings{LaCe91a,
  author      ={M. Langewin and E. Cerny},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={K. G. Larsen and A. Skou},
  key         ={LaCe91a},
  month       ={July},
  publisher   ={Springer Verlag},
  title       ={Comparing generic state machines},
  year        ={1991}
}
@inproceedings{LaCe92,
  author      ={M. Langewin and E. Cerny},
  booktitle   ={Canadian Conference on {VLSI}},
  key         ={LaCe92},
  month       ={October},
  title       ={An approach for behavioral verification of circuit designs},
  year        ={1992}
}
@inproceedings{LaCe93,
  address     ={Paris, France},
  author      ={M. Langewin and E. Cerny},
  booktitle   ={European Design Automation Conference },
  editor      ={L. Claesen and P. Prinetto},
  key         ={LaCe93},
  month       ={February},
  pages       ={94--98},
  publisher   ={IEEE Computer Society Press},
  title       ={An Automata-Theoretic Approach to Local Microcode Generation},
  year        ={1993}
}
@inproceedings{LaCe94,
  address     ={Paris},
  author      ={M. Langevin and E. Cerny},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={LaCe94},
  keyword     ={omega BDD_Concepts},
  month       ={February},
  note        ={EDAC94},
  pages       ={208--303},
  publisher   ={IEEE Computer Society {Press}},
  title       ={An Extended {OBDD} Representation for Extended {FSM}s},
  year        ={1994}
}
@inproceedings{LaEv94,
  author      ={T. Lauer and H. Eveking},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden im Systementwurf},
  editor      ={H. Eveking},
  key         ={LaEv94},
  keyword     ={2GI/ITG},
  month       ={March},
  organization={GI/ITG},
  publisher   ={Universit\"{a}t Frankfurt, Interner Bericht Nr. 6/94},
  title       ={{ROBDD}-{B}asierte {C}odeerzeugung und {O}ptimierung},
  year        ={1994}
}
@inproceedings{LaGM92,
  address     ={Hamburg},
  author      ={M. Laurentin and A. Greiner and R. Marbot},
  booktitle   ={European Design Automation Conference },
  key         ={LaGM92},
  organization={IEEE},
  pages       ={22--27},
  title       ={{DESB}, a {F}unctional {A}bstractor for {CMOS} {VLSI} {C}ircuits},
  year        ={1992}
}
@inproceedings{LaGr98,
  address     ={Lisbon, Portugal},
  author      ={K. Laster and O. Grumberg},
  booktitle   ={Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  key         ={LaGr98},
  month       ={March},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Modular Model Checking of Software},
  year        ={1998}
}
@inproceedings{LaHK87,
  author      ={R.H. Lathrop and R.J. Hall and R.S. Kirk},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={LaHK87},
  organization={ACM},
  pages       ={822--828},
  title       ={Functional Abstraction From Structure in {VLSI} Simulation Models},
  year        ={1987}
}
@inproceedings{LaHo94,
  address     ={L\"{u}beck, Germany},
  author      ={Y. Lakhneche and J. Hooman},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={LaHo94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={488--510},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{R}easoning about {D}urations in {M}etric {T}emporal {L}ogic},
  volume      ={863},
  year        ={1994}
}
@techreport{LaLa95,
  author      ={F. Laroussinie and K.G. Larsen},
  institution ={Basic Research in Computer Science, University of Aarhus},
  key         ={LaLa95},
  number      ={RS-95-19},
  title       ={Compositional Model Checking of Real Time Systems},
  type        ={BRICS Report},
  year        ={1995}
}
@inproceedings{LaMD94,
  address     ={Grenoble, France},
  author      ={B. Landwehr and P. Marwedel and R. D\"{o}mer},
  booktitle   ={European Design Automation Conference },
  key         ={LaMD94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={90--95},
  publisher   ={IEEE Computer Society Press},
  title       ={{OSCAR}: {O}ptimum {S}imultaneous {S}cheduling, {A}llocation and {R}esource {B}inding {B}ased on {I}nteger {P}rogramming},
  year        ={1994}
}
@inproceedings{LaMe94,
  address     ={L\"{u}beck, Germany},
  author      ={L. Lamport and S. Merz},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={LaMe94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={41--76},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{S}pecifying and {V}erifying {F}ault-{T}olerant {S}ystems},
  volume      ={863},
  year        ={1994}
}
@inproceedings{LaMu98,
  address     ={Paderborn, Germany},
  author      ={N. Lange and M. Mutz},
  booktitle   ={Methoden und Beschreibungssprachen zur Modellierung und Verifikation von Schaltungen und
Systemen},
  key         ={LaMu98},
  month       ={March},
  organization={HNI},
  pages       ={67--74},
  title       ={Formale Verifikation eines funktionalen {VHDL} Modells der
{J1850} Busarbitrierung},
  year        ={1998}
}
@inproceedings{LaPV93,
  address     ={Santa Clara, California},
  author      ={Y.-T. Lai and M. Pedram and S.B.K. Vrudhula},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={LaPV93},
  keyword     ={BDD},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={685--691},
  publisher   ={IEEE Computer Society Press},
  title       ={{FGILP:} {A}n {I}nteger {L}inear {P}rogram {S}olver {B}ased on {F}unction {G}raphs},
  year        ={1993}
}
@inproceedings{LaPY97,
  author      ={K.G. Larsen and P. Pettersson and W. Yi},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={O. Grumberg},
  key         ={LaPY97},
  month       ={June},
  pages       ={456--459},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{UPPAAL}: Status \& Developments},
  volume      ={1254},
  year        ={1997}
}
@inproceedings{LaRW95,
  address     ={Aspen Grove, Utah, USA},
  author      ={T. Langbacka and R. Ruksenas and J. v. Wright},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={LaRW95},
  month       ={September},
  pages       ={245--260},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{TkWinHOL}: {A} {T}ool for {W}indow {I}nterference in {HOL}},
  volume      ={971},
  year        ={1995}
}
@inproceedings{LaRe86,
  author      ={R. Ladner and J. Reif},
  booktitle   ={Conference on Theoretical Aspects of Reasoning about Knowledge},
  editor      ={J. Halpern},
  key         ={LaRe86},
  pages       ={207--222},
  title       ={The Logic of Distributed Protocols},
  year        ={1986}
}
@inproceedings{LaSa92,
  author      ={Y.-T. Lai and S. Sastry},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={LaSa92},
  keyword     ={hardware registertransferlevel verification formalism propositionallogic BDD},
  pages       ={608--613},
  title       ={Edge-Valued Binary Decision Diagrams for Multi-Level Hierarchical Verification},
  year        ={1992}
}
@inproceedings{LaSh89,
  address     ={REX Workshop, Mook},
  author      ={S.S. Lam and A.U. Shankar},
  booktitle   ={Stepwise Refinement of Distributed Systems},
  editor      ={J.W. de Bakker and W.-P. de Roever and G. Rozenberg},
  key         ={LaSh89},
  keyword     ={verification transitionsystem transitionsystemfair refinement},
  month       ={May/June},
  pages       ={454--486},
  publisher   ={Springer-Verlag},
  title       ={Refinement and Projection of Relational Specifications},
  year        ={1989}
}
@inproceedings{LaWa97,
  address     ={Grenoble, France},
  author      ={L. Lai and P. Watson},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={LaWa97},
  pages       ={69-74},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={A Case Study in Timed {CSP}: The Railroad Crossing Problem},
  year        ={1997}
}
@article{Ladn77,
  author      ={R.E. Ladner},
  journal     ={Jorn. of Information and Control},
  key         ={Ladn77},
  pages       ={281-303},
  title       ={Application of model-theoretic games to discrete linear orders and finite automata},
  volume      ={33},
  year        ={1977}
}
@inproceedings{Laib96,
  address     ={Turku, Finland},
  author      ={L. Laibinis},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={Laib96},
  month       ={August},
  pages       ={315--330},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Using Lattice Theory in Higher Order Logic},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{Lamp80,
  address     ={New York},
  author      ={L. Lamport},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={Lamp80},
  keyword     ={hardware verification general},
  organization={ACM},
  pages       ={174--185},
  title       ={''Sometime'' is sometimes ''Not Never''-On the Temporal Logic of Programs},
  year        ={1980}
}
@article{Lamp83,
  author      ={L. Lamport},
  journal     ={{ACM} Transactions on Programming Languages and Systems},
  key         ={Lamp83},
  month       ={April},
  number      ={2},
  pages       ={190-222},
  title       ={Specifying Concurrent Program Modules},
  volume      ={5},
  year        ={1983}
}
@inproceedings{Lamp83a,
  address     ={Amsterdam},
  author      ={L. Lamport},
  booktitle   ={{IFIP} Congress on Information Processing},
  editor      ={R.E.A. Mason},
  key         ={Lamp83a},
  pages       ={657--667},
  publisher   ={North-Holland},
  title       ={What good is Temporal Logic?},
  year        ={1983}
}
@article{Land69,
  author      ={L.H. Landweber},
  journal     ={Math. Systems Theory},
  key         ={Land69},
  keyword     ={omega},
  pages       ={376--384},
  title       ={Decision problems for $\omega$ automata},
  volume      ={3},
  year        ={1969}
}
@inproceedings{Land94,
  author      ={B. Landwehr},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden im Systementwurf},
  editor      ={H. Eveking},
  key         ={Land94},
  keyword     ={2GI/ITG},
  month       ={March},
  organization={GI/ITG},
  publisher   ={Universit\"{a}t Frankfurt, Interner Bericht Nr. 6/94},
  title       ={{A} {M}odel for {S}imultaneous {S}cheduling, {A}llocation and {R}esource {B}inding in {A}rchitectural {S}ynthesis},
  year        ={1994}
}
@inproceedings{Lang94,
  address     ={Malta},
  author      ={T. Langbacka},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={Lang94},
  month       ={September},
  pages       ={332--345},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A {HOL} Formalisation of the Temporal Logic of Actions},
  volume      ={859},
  year        ={1994}
}
@inproceedings{Lann94,
  address     ={L\"{u}beck, Germany},
  author      ={G. Le Lann},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={Lann94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={511--528},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{S}cheduling in {C}ritical {R}eal-{T}ime {S}ystems: {A} {M}anifesto},
  volume      ={863},
  year        ={1994}
}
@techreport{Lapr90,
  author      ={J.C. Laprie},
  institution ={PDCS},
  key         ={Lapr90},
  keyword     ={tutorial},
  month       ={May},
  number      ={31},
  title       ={Dependability: Basic Concepts and Associated Terminology},
  year        ={1990}
}
@inproceedings{Lars88,
  address     ={Glasgow, Scotland},
  author      ={T. Larsson},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={Lars88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={231--252},
  publisher   ={North-Holland},
  title       ={Hardware Verification based on Algebraic Manipulation and Partial Evaluation},
  year        ={1988}
}
@inproceedings{Lars94,
  address     ={Malta},
  author      ={M. Larsson},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={Lars94},
  month       ={September},
  pages       ={300--316},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={An Engineering Approach to Formal Digital System Design},
  volume      ={859},
  year        ={1994}
}
@inproceedings{Lars96,
  address     ={Turku, Finland},
  author      ={M. Larsson},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={Lars96},
  month       ={August},
  pages       ={299--314},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Improving The Result of High-Level Synthesis Using Interactive Transformational Design},
  volume      ={1125},
  year        ={1996}
}
@phdthesis{Lave78,
  author      ={M. Laventhal},
  key         ={Lave78},
  school      ={MIT, Combridge, MA},
  title       ={Synthesis of Synchronization Code for Data Abstractions},
  year        ={1978}
}
@inproceedings{LeBi92,
  author      ={Y.-H. Leong and W.P. Birmingham},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={LeBi92},
  keyword     ={hardware systemlevel specification gatelevel asynchronous},
  pages       ={634--637},
  title       ={The Automatic Generation of Bus Interface Models},
  year        ={1992}
}
@inproceedings{LeCB74,
  author      ={G.B. Leeman and W.C. Carter and A. Birman},
  booktitle   ={Information Processing 74 (Proc.\ IFIP Congress 1974)},
  key         ={LeCB74},
  pages       ={76--80},
  publisher   ={North-Holland Publishing Co},
  title       ={Some {T}echniques for {M}icroprogram {V}alidation},
  year        ={1974}
}
@techreport{LeGS93,
  address     ={Vancouver, Canada},
  author      ={T.W.S. Lee and M.R. Greenstreet and C.-J.H. Seger},
  institution ={University of British Columbia Department of Computer Science},
  key         ={LeGS93},
  keyword     ={hardware verification general techreport asynchronous gatelevel},
  month       ={November},
  number      ={93--140},
  title       ={Automatic Verification of Asynchronous Circuits},
  year        ={1993}
}
@inproceedings{LeLU96,
  address     ={Palo Alto, CA, USA},
  author      ={D. M. Lewin and D. H. Lorenz and S. Ur},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={LeLU96},
  month       ={November},
  pages       ={126--142},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Methodology for Processor Implementation Verification},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{LeLe95,
  address     ={Austin, Texas},
  author      ={M. Leeser and J. O'Leary},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={LeLe95},
  keyword     ={verification},
  month       ={October},
  organization={Cornell University},
  title       ={{V}erification of a {S}ubtractive {R}adix-2 {S}quare {R}oot {A}lgorithm and {I}mplementation},
  year        ={1995}
}
@techreport{LeLi94,
  address     ={FZI Karlsruhe},
  author      ={C. Lewerentz and T. Lindner},
  institution ={{FZI}-Publication},
  key         ={LeLi94},
  month       ={January},
  title       ={Case Study 'Production Cell', A Comparative Study in Formal Software Development},
  year        ={1994}
}
@inproceedings{LeMR94,
  address     ={San Diego, CA},
  author      ={O. Levia and S. Maginot and J. Rouillard},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={LeMR94},
  keyword     ={design},
  month       ={June},
  note        ={ch. 28.2},
  publisher   ={San Diego Convention Center},
  title       ={{L}essons in {L}anguage {D}esign: {C}ost/{B}enefit {A}nalysis of {VHDL} {F}eatures},
  year        ={1994}
}
@article{LeMc91,
  author      ={I.M. Leslie and D.R. McAuley},
  journal     ={{ACM} Communication Review},
  key         ={LeMc91},
  month       ={September},
  number      ={4},
  pages       ={327--336},
  title       ={Fairisle: an {ATM} network for the local area},
  volume      ={19},
  year        ={1991}
}
@inproceedings{LePS81,
  address     ={New York},
  author      ={D. Lehmann and A. Pnueli and J. Stavi},
  booktitle   ={International Colloquium on Automata, Languages and Programming (ICALP)},
  key         ={LePS81},
  pages       ={264--277},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Impartiality, justice and fairness: The ethics of concurrent termination},
  volume      ={115},
  year        ={1981}
}
@article{LePa95,
  author      ={E.A. Lee and T.M. Parks},
  journal     ={Proceedings of the {IEEE}},
  key         ={LePa95},
  title       ={Dataflow Process Networks},
  year        ={1995}
}
@inproceedings{LeRa93,
  author      ={S. Lee and J.M. Rabaey},
  booktitle   ={International Workshop on Hardware-Software Codesign},
  key         ={LeRa93},
  month       ={October},
  title       ={A hardware-software co-simulation environment},
  year        ={1993}
}
@inproceedings{LeRa94,
  address     ={Standford, California, USA},
  author      ={I. Lee and S. Rajasekaran},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={LeRa94},
  month       ={June},
  pages       ={404--414},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Parallel Algorithm for Relational Coarsest Partition Problems and Its Implementation},
  volume      ={818},
  year        ={1994}
}
@techreport{LeSa93,
  address     ={Bristol, England},
  author      ={N.L.K. Lester and J.M. Saul},
  institution ={Department of Electrical and Electronic Engineering, University of Bristol},
  key         ={LeSa93},
  title       ={{T}echnology {M}apping of {M}ixed {P}olarity {R}eed-{M}uller {R}epresentations},
  year        ={1993}
}
@article{LeSh82,
  author      ={D. Lehmann and S. Shelah},
  journal     ={Information and Control},
  key         ={LeSh82},
  number      ={3},
  pages       ={165--198},
  title       ={Reasoning about Time and Chance},
  volume      ={53},
  year        ={1982}
}
@book{LeWS94,
  author      ={G. Lehmann and B. Wunder and M. Selz},
  key         ={LeWS94},
  keyword     ={textbook},
  publisher   ={Franzis'},
  title       ={{S}chaltungsdesign mit {VHDL}; {S}ynthese, {S}imulation und {D}okumentation digitaler {S}chaltungen},
  year        ={1994}
}
@article{LeYa94,
  author      ={D. Lee and M. Yannakakis},
  journal     ={IEEE Transactions on Computers},
  key         ={LeYa94},
  keyword     ={formalism fsm symbolic_state_traversal BDD hardware gatelevel test},
  month       ={March},
  number      ={3},
  pages       ={306--320},
  title       ={Testing Finite-State Machines: State Identification and Verification},
  volume      ={43},
  year        ={1994}
}
@phdthesis{Lees88a,
  author      ={M. Leeser},
  key         ={Lees88a},
  month       ={February},
  school      ={University of Cambridge Computer Laboratory},
  title       ={Reasoning about the Function and Timing of Integrated Circuits with {PROLOG} and Temporal Logic},
  year        ={1988}
}
@techreport{Lees88b,
  author      ={M. Leeser},
  institution ={University of Cambridge Computer Laboratory},
  key         ={Lees88b},
  month       ={April},
  number      ={132},
  title       ={Reasoning about the Function and Timing of Integrated Circuits with {PROLOG} and Temporal Logic},
  year        ={1988}
}
@article{Lees89,
  author      ={M. Leeser},
  journal     ={IEEE Transactions on Computer-Aided Design},
  key         ={Lees89},
  keyword     ={hardware verification general transistorlevel specification logic itl},
  month       ={December},
  number      ={12},
  pages       ={1233--1246},
  title       ={Reasoning About the Function and Timing of Integrated Circuits with Interval Temporal Logic},
  volume      ={8},
  year        ={1989}
}
@book{Leeu90,
  author      ={J. van Leeuwen},
  key         ={Leeu90},
  keyword     ={hardware verification general},
  publisher   ={Elsevier Science Publishers},
  title       ={Handbook of Theoretical Computer Science},
  year        ={1990}
}
@inproceedings{Lehm84,
  author      ={D. Lehmann},
  booktitle   ={{ACM} Symposium on Principles of Distributed Computing},
  key         ={Lehm84},
  pages       ={62--67},
  title       ={Knowledge, Common Knowledge and Related Puzzles},
  year        ={1984}
}
@article{Leis81,
  author      ={E. Leiss},
  journal     ={Theoretical Computer Science},
  key         ={Leis81},
  keyword     ={omega},
  pages       ={323--330},
  title       ={Succinct Representation of Regular Languages by Boolean Automata},
  volume      ={13},
  year        ={1981}
}
@inproceedings{Lenk94,
  address     ={Grenoble, France},
  author      ={S. Lenk},
  booktitle   ={European Design Automation Conference },
  key         ={Lenk94},
  keyword     ={hardware specification other},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={28--33},
  publisher   ={IEEE Computer Society Press},
  title       ={{E}xtended {T}iming {D}iagrams as a {S}pecification {L}anguage},
  year        ={1994}
}
@inproceedings{Leon91,
  address     ={Davis, California},
  author      ={T. Leonard},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Leon91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Computer Architecture Specifications},
  year        ={1991}
}
@inproceedings{Lesc95,
  address     ={Liege, Belgium},
  author      ={H. Lescow},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={Lesc95},
  month       ={July},
  pages       ={239--252},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={On Polynomial size Programs Winning Finite-State Games},
  volume      ={939},
  year        ={1995}
}
@inproceedings{Levi91,
  address     ={Davis, California},
  author      ={K.N. Levitt},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Levi91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={{HOL} and Other Theorem Proving Systems},
  year        ={1991}
}
@inproceedings{Levy91,
  author      ={B. Levy},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  key         ={Levy91},
  keyword     ={survey verification},
  month       ={January},
  organization={Miami, FL},
  title       ={An Overview of Hardware Verification Using the State Delta Verification System},
  year        ={1991}
}
@inproceedings{Lewi90,
  address     ={Washington, D.C.},
  author      ={H. Lewis},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={Lewi90},
  month       ={June},
  pages       ={380--389},
  publisher   ={IEEE Computer Society Press},
  title       ={{A} {L}ogic of {C}oncrete {T}ime {I}ntervals},
  year        ={1990}
}
@inproceedings{LiAB86,
  address     ={Philips Research Laboratories, Eindhoven, Netherlands},
  author      ={M.M. Ligthart and E.H.L. Aarts and F.P.M. Beenker},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={LiAB86},
  organization={ACM/IEEE},
  pages       ={339--345},
  title       ={{D}esign-for-{T}estability of {PLA}'s using {S}tatistical {C}ooling},
  year        ={1986}
}
@inproceedings{LiCh88,
  author      ={P. Lincoln and J. Christian},
  booktitle   ={Conference on Automated Deduction (CADE)},
  key         ={LiCh88},
  keyword     ={Rewrite},
  pages       ={358--367},
  publisher   ={Springer-Verlag},
  title       ={Adventures in Associative-Commutative Unification},
  year        ={1988}
}
@inproceedings{LiDG93,
  address     ={Santa Clara, California},
  author      ={S. Liao and S. Devadas and A. Ghosh},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={LiDG93},
  keyword     ={combinational_circuits},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={606--611},
  publisher   ={IEEE Computer Society Press},
  title       ={{B}oolean {F}actorization {U}sing {M}ultiple-{V}alued {M}inimization},
  year        ={1993}
}
@article{LiGu86,
  author      ={B. Liskov and J. Guttag},
  journal     ={MIT press},
  key         ={LiGu86},
  title       ={Abstraction and Specification in Program Developement},
  year        ={1986}
}
@inproceedings{LiJo94,
  address     ={L\"{u}beck, Germany},
  author      ={Z. Liu and M. Joseph},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={LiJo94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={529--546},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{S}tepwise {D}evelopment of {F}ault-{T}olerant {R}eactive {S}ystems},
  volume      ={863},
  year        ={1994}
}
@inproceedings{LiKL94,
  address     ={Paris},
  author      ={K.-J. Lin and J.-W. Kuo and C.-S. Lin},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={LiKL94},
  keyword     ={Synchronous_Finite_State_Machines},
  month       ={February},
  pages       ={178--183},
  publisher   ={IEEE Computer Society Press},
  title       ={{D}irect {S}ynthesis of {H}azard-{F}ree {A}synchronous {C}ircuits from {STG}s {B}ased on {L}ock {R}elation and {MG}-Decomposition {A}pproach},
  year        ={1994}
}
@article{LiLi92,
  author      ={H.-T. Liaw and C.-S. Lin},
  journal     ={IEEE Transactions on Computers},
  key         ={LiLi92},
  pages       ={661--664},
  title       ={{O}n the {OBDD} {R}epresentation of {G}eneral {B}oolean {F}unctions},
  volume      ={41},
  year        ={1992}
}
@inproceedings{LiLi92a,
  address     ={Santa Clara, California},
  author      ={K.-J. Lin and C.-S. Lin},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={LiLi92a},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={118--123},
  publisher   ={IEEE Computer Society Press},
  title       ={{O}nt the {V}erification of {S}tate-{C}oding in {STG}s},
  year        ={1992}
}
@article{LiMe84,
  author      ={T.-M. Lin and C.A. Mead},
  journal     ={{IEEE} Transactions on Computer-Aided Design},
  key         ={LiMe84},
  keyword     ={hardware abstraction timing},
  month       ={October},
  number      ={4},
  pages       ={331--349},
  title       ={Signal Delay in General {RC} Networks},
  volume      ={CAD-3},
  year        ={1984}
}
@inproceedings{LiPZ85,
  author      ={O. Lichtenstein and A. Pnueli and L. Zuck},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={LiPZ85},
  keyword     ={omega},
  pages       ={97--107},
  title       ={Checking that finite-state concurrent programs satisfy their specification},
  year        ={1985}
}
@inproceedings{LiPZ85a,
  address     ={New York},
  author      ={O. Lichtenstein and A. Pnueli and L. Zuck},
  booktitle   ={Conference on Logics of Programs},
  key         ={LiPZ85a},
  pages       ={196--218},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The Glory of the Past},
  volume      ={193},
  year        ={1985}
}
@inproceedings{LiPn85,
  address     ={New York},
  author      ={O. Lichtenstein and A. Pnueli},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={LiPn85},
  keyword     ={hardware verification general},
  month       ={January},
  organization={ACM},
  pages       ={97--107},
  title       ={Checking that Finite State Concurrent Programs Satisfy their Linear Specification},
  year        ={1985}
}
@book{LiSU93,
  author      ={R. Lipsett and C. Schaefer and C. Ussery},
  edition     ={12},
  key         ={LiSU93},
  keyword     ={textbook},
  publisher   ={Kluwer Academic Publishers},
  title       ={{VHDL:} Hardware Description and Design},
  year        ={1993}
}
@inproceedings{LiTL89,
  author      ={H.-T. Liaw and K.-T. Tran and C.-S. Lin},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={LiTL89},
  pages       ={435-440},
  title       ={{VVDS}: A Verification/Diagnosis System for {VHDL}},
  year        ={1989}
}
@article{LiZi75,
  author      ={B.H. Liskov and S.N. Zilles},
  journal     ={IEEE Trans. Software Eng.},
  key         ={LiZi75},
  keyword     ={verification},
  pages       ={7--19},
  title       ={Specification techniques for data abstractions},
  year        ={1975}
}
@article{Lind69,
  author      ={P. Lindstr\"{o}m},
  journal     ={Theoria},
  key         ={Lind69},
  keyword     ={Logic},
  title       ={On extensions of elementary logic},
  volume      ={35},
  year        ={1969}
}
@article{Linn76,
  author      ={M. Linna},
  journal     ={Information and Control},
  key         ={Linn76},
  keyword     ={omega},
  pages       ={272--293},
  title       ={On $\omega$-sets associated with context-free languages},
  volume      ={31},
  year        ={1976}
}
@article{Lipo77,
  author      ={G.J. Liposki},
  journal     ={IEEE Computer},
  key         ={Lipo77},
  keyword     ={HDL},
  month       ={June},
  pages       ={14--17},
  title       ={Hardware Description Languages: Voices from the Tower of Babel},
  year        ={1977}
}
@book{Lips81,
  editor      ={J. Lipson},
  key         ={Lips81},
  keyword     ={textbook},
  publisher   ={The Benjamin/Cummings Publishing Company, Inc.},
  title       ={Elements of Algebra and Algebraic Computing},
  year        ={1981}
}
@inproceedings{Lisp92,
  author      ={B. Lisper},
  booktitle   ={Workshop on Designing Correct Circuits},
  key         ={Lisp92},
  pages       ={139-157},
  title       ={Reasoning about permutations in regular arrays},
  year        ={1992}
}
@inproceedings{Llop94,
  address     ={Grenoble, France},
  author      ={R.P. Llopis},
  booktitle   ={European Design Automation Conference },
  key         ={Llop94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={380--387},
  publisher   ={IEEE Computer Society Press},
  title       ={{E}xact {P}ath {S}ensitization in {T}iming {A}nalysis},
  year        ={1994}
}
@book{Lloy87,
  author      ={J.W. Lloyd},
  key         ={Lloy87},
  keyword     ={Logic},
  publisher   ={Springer-Verlag},
  title       ={Foundations of Logic Programming},
  year        ={1987}
}
@inproceedings{LoDi91,
  address     ={New York},
  author      ={P. Loewenstein and D.L. Dill},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={E.M. Clarke and R.P. Kurshan},
  key         ={LoDi91},
  organization={American Mathematic Society},
  publisher   ={Springer-Verlag},
  series      ={{DIMACS} Series in Discrete Mathematics and Theoretical Computer Science},
  title       ={Verification of Multiprocessor Cache Protocol Using Simulation Relations and Higher-Order Logic},
  volume      ={3},
  year        ={1991}
}
@inproceedings{LoLM89,
  author      ={C. Loeffler and A. Ligtenberg and G. Moschytz},
  booktitle   ={International Conference on Acoustics, Speech, and Signal Processing 1989 (ICASSP '89)},
  key         ={LoLM89},
  pages       ={988-99},
  title       ={Practical Fast {1-D DCT} Algorithms with 11 Multiplications},
  year        ={1989}
}
@inproceedings{LoSt92,
  author      ={H. H. L\ovengreen and J. Staunstrup},
  booktitle   ={{IFIP} WG 10.2 International Conference on Theorem Provers in Circuit Design: Theory, Practice and Experience},
  editor      ={V. Stavridou and T. Melham},
  key         ={LoSt92},
  month       ={June},
  pages       ={95-110},
  publisher   ={Elsevier},
  title       ={Synchronous Realization of Asynchronous Computations},
  year        ={1992}
}
@inproceedings{Loew89a,
  address     ={New York},
  author      ={P. Loewenstein},
  booktitle   ={Workshop on Hardware Specification, Verification and Synthesis: Mathematical Aspects},
  editor      ={M. Leeser and G. Brown},
  key         ={Loew89a},
  keyword     ={formalism higherorderlogic HOL fsm},
  pages       ={67--89},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Reasoning about State Machines in Higher-Order Logic},
  volume      ={408},
  year        ={1989}
}
@inproceedings{Loew89b,
  author      ={P. Loewenstein},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={Loew89b},
  pages       ={204-207},
  title       ={Formal Verification of State-Machines Using Higher-Order Logic},
  year        ={1989}
}
@inproceedings{Loew91,
  address     ={Davis, California},
  author      ={P. Loewenstein},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Loew91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Learning to Use {HOL}},
  year        ={1991}
}
@inproceedings{Loew92,
  address     ={Leuven, Belgium},
  author      ={P. Loewenstein},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Loew92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={227--246},
  publisher   ={North-Holland},
  title       ={A Formal Theory of Simulations Between Infinite Automata},
  year        ={1992}
}
@inproceedings{Loew95,
  address     ={Aspen Grove, Utah, USA},
  author      ={P.N. Loewenstein},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={Loew95},
  keyword     ={verification},
  month       ={September},
  pages       ={261--276},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{F}ormal {V}erification of {C}ounterflow {P}ipeline {A}rchitecture},
  volume      ={971},
  year        ={1995}
}
@phdthesis{Long93,
  author      ={D.E. Long},
  key         ={Long93},
  school      ={Carnegie Mellon University},
  title       ={Model Checking, Abstraction, and Compositional Verification},
  year        ={1993}
}
@article{Lope67,
  author      ={E.G. K. Lopez-Escobar},
  journal     ={Fundamenta Mathematicae},
  key         ={Lope67},
  pages       ={93-103},
  title       ={A complete, infinitary axiomatization of weak second-order logic},
  year        ={1967}
}
@book{Love78,
  author      ={D.W. Loveland},
  key         ={Love78},
  keyword     ={Logic},
  publisher   ={North-Holland},
  title       ={Automated Theorem Proving},
  year        ={1978}
}
@inproceedings{LuCh93,
  address     ={Vancouver, Canada},
  author      ={J.-Y. Lu and S.-K. Chin},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={LuCh93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={199--213},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Linking {HOL} to a {VLSI} {CAD} System},
  volume      ={780},
  year        ={1993}
}
@inproceedings{LuCh94,
  address     ={Malta},
  author      ={J.-Y. Lu and S.-K. Chin},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={LuCh94},
  month       ={September},
  pages       ={316--331},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Generating Designs Using an Algorithmic Register Transfer Language with Formal Semantics},
  volume      ={859},
  year        ={1994}
}
@inproceedings{LuJo88,
  address     ={Glasgow, Scotland},
  author      ={W. Luk and G. Jones},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={LuJo88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={267--288},
  publisher   ={North-Holland},
  title       ={From Specification to Parameterised Architectures},
  year        ={1988}
}
@article{LuOv85,
  author      ={E. Lusk and R. Overbeek},
  journal     ={Journal of Automated Reasoning},
  key         ={LuOv85},
  pages       ={103-114},
  title       ={Non-Horn Problems},
  year        ={1985}
}
@inproceedings{LuSU96,
  address     ={Kreischa},
  author      ={P. G. Lucassen and L. Spaanenburg and J. T. Udding},
  booktitle   ={GI/ITG/GME Workshop Methoden des Entwurfs und der Verifikation Digitaler Systeme},
  editor      ={Bernd straube and Jens Schoenherr},
  key         ={LuSU96},
  keyword     ={4. GI/ITG/GME},
  month       ={March},
  organization={GI/ITG/GME},
  pages       ={111--120},
  publisher   ={Shaker Verlag, Aachen},
  series      ={Berichte aus der Informatik},
  title       ={A Process-algebraic approach to high-level design and Verification of asynchronous circuits},
  year        ={1996}
}
@mastersthesis{Luda92,
  address     ={76128 Karlsruhe, Germany},
  author      ={B. Lud\"{a}scher},
  key         ={Luda92},
  school      ={University of Karlsruhe, Germany},
  title       ={Ein {D}eduktionssystem f\"{u}r die {P}r\"{a}dikatenlogik erster {S}tufe basierend auf {S}hannon-{G}raphen},
  year        ={1992}
}
@inproceedings{Luks94,
  address     ={Grenoble, France},
  author      ={P. Luksch},
  booktitle   ={European Design Automation Conference },
  key         ={Luks94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={368--373},
  publisher   ={IEEE Computer Society Press},
  title       ={{A} {P}ortable and {E}xtendible {T}estbed for {D}istributed {L}ogic {S}imulation},
  year        ={1994}
}
@article{Luo90,
  author      ={Z. Luo},
  journal     ={Information and Computation},
  key         ={Luo90},
  pages       ={107-137},
  title       ={A Higher-Order Calculus and Theory Abstraction},
  year        ={1990}
}
@inproceedings{LyTS97,
  address     ={Grenoble, France},
  author      ={J. Lygeros and C. Tomlin and S. Sastry},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={LyTS97},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Multiobjective Hybrid Controller Synthesis},
  year        ={1997}
}
@inproceedings{LyTu87,
  address     ={Vancouver, Canada},
  author      ={N.A. Lynch and M.R. Tuttle},
  booktitle   ={{ACM} Symposium on Principles of Distributed Computing},
  key         ={LyTu87},
  keyword     ={refinement transitionsystem transitionsystemlabelled},
  month       ={August},
  organization={ACM},
  pages       ={137--151},
  title       ={Hierarchical Correctness Proofs for Distributed Algorithms},
  year        ={1987}
}
@techreport{MABB94,
  address     ={Department of Computer Science},
  author      ={Z. Manna and A. Anuchitanukul and N. Bjorner and A. Browne and E. Chang and M. Colon and L. de Alfaro and H. Devarajan and H. Sipma and T. Uribe},
  institution ={Stanford University},
  key         ={MABB94},
  month       ={June},
  note        ={ftp://elib.stanford.edu/pub/reports/cs/tr/94/1518/CS-TR-94-1518.ps},
  number      ={CS-TR-94-1518},
  title       ={{STeP}: {T}he {S}tanford {T}emporal {P}rover},
  year        ={1994}
}
@inproceedings{MMEC89,
  author      ={M. Mahmood and F. Mavaddat and M.I. Elmasry and M.H.M. Cheng},
  booktitle   ={{IFIP} International Workshop on Applied Formal Methods for Correct {VLSI} Design},
  key         ={MMEC89},
  keyword     ={flowgraph},
  organization={IFIP WG 10.2/WG 10.5},
  pages       ={23--41},
  publisher   ={North-Holland, 1990},
  title       ={A formal language model of local microcode synthesis},
  year        ={1989}
}
@inproceedings{MMRK96,
  address     ={New Brunswick, NJ, USA},
  author      ={L. E. Moser and P. M. Melliar-Smith and Y. S. Ramakrishna and G. Kutty and L. K. Dillon},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={MMRK96},
  month       ={July/August},
  pages       ={446--449},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The real-time graphical interval logic toolset},
  volume      ={1102},
  year        ={1996}
}
@article{MRSC86,
  author      ={H. De Man and J. Rabaey and P. Six and L. Claesen},
  journal     ={IEEE Design and Test of Computers},
  key         ={MRSC86},
  keyword     ={verification},
  pages       ={73--85},
  title       ={Cathedral-{II}: a silicon compiler for digital signal processing},
  volume      ={3},
  year        ={1986}
}
@inproceedings{MWAS93,
  address     ={Paris, France},
  author      ={J. Moondanos and J.A. Wehbeh and J.A. Abraham and D.G. Saab},
  booktitle   ={European Design Automation Conference },
  editor      ={L. Claesen and P. Prinetto},
  key         ={MWAS93},
  keyword     ={hardware verification general},
  month       ={February},
  pages       ={111--116},
  publisher   ={IEEE Computer Society Press},
  title       ={{VERTEX}: {VER}ification of Transistor-Level Circuit Based on Model {EX}traction},
  year        ={1993}
}
@inproceedings{MWBS88,
  author      ={S. Malik and A.R. Wang and R.K. Brayton and A. Sangiovanni-Vincentelli},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={MWBS88},
  keyword     ={hardware gatelevel verification formalism propositionallogic BDD},
  month       ={November},
  pages       ={6--9},
  publisher   ={IEEE},
  title       ={{L}ogic {V}erification {U}sing {B}inary {D}ecision {D}iagrams in a {L}ogic {S}ynthesis {E}nvironment},
  year        ={1988}
}
@inproceedings{MYSW95,
  address     ={Austin, Texas},
  author      ={C. Montemayor and J.-T. Yen and M. Sullivan and P. Wilson and R. Evers},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={MYSW95},
  keyword     ={verification},
  month       ={October},
  organization={Motorola},
  title       ={{M}ultiprocessor {D}esign {V}erification for the {P}ower{PC} 620 {M}icroprocessor},
  year        ={1995}
}
@inproceedings{MaBD97,
  address     ={Montreal, Canada},
  author      ={N. Martinez Madrid and P. Breuer and C. {Delgado Kloos}},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={H. F. Li and D. K. Probst},
  key         ={MaBD97},
  keyword     ={conference},
  month       ={October},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={A semantic model for {VHDL-AMS}},
  year        ={1997}
}
@inproceedings{MaBi88,
  address     ={Los Alamitos, CA},
  author      ={J.C. Madre and J.P. Billon},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={MaBi88},
  keyword     ={verification},
  pages       ={205--210},
  publisher   ={IEEE Computer Society Press},
  title       ={Proving Circuit Correctness Using Formal Comparison between Expected and Extracted Behavior},
  year        ={1988}
}
@inproceedings{MaBr88,
  author      ={R. Manthey and F. Bry},
  booktitle   ={Conference on Automated Deduction (CADE)},
  key         ={MaBr88},
  publisher   ={Springer-Verlag},
  title       ={{SATCHMO}: A theorem prover implemented in {PROLOG}},
  year        ={1988}
}
@inproceedings{MaBr94,
  address     ={Grenoble, France},
  author      ={J. Madsen and J.P. Brage},
  booktitle   ={European Design Automation Conference },
  key         ={MaBr94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={486--491},
  publisher   ={IEEE Computer Society Press},
  title       ={{M}odeling {S}hared {V}ariables in {VHDL}},
  year        ={1994}
}
@inproceedings{MaCS95,
  address     ={Passau},
  author      ={T. Margaria and A. Cla{\ss}en and B. Steffen},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden beim Entwurf von Hardwaresystemen},
  editor      ={W. Grass and M. Mutz},
  key         ={MaCS95},
  keyword     ={3GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={11--20},
  publisher   ={Shaker Verlag},
  series      ={Berichte aus der Informatik},
  title       ={{C}omputer {A}ided {T}ool {S}ynthesis in {M}eta{FRAME}},
  year        ={1995}
}
@inproceedings{MaFP97,
  address     ={Toledo, Spain},
  author      ={R.J. Machado and J.M. Fernandes and A.J. Proenca},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={MaFP97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={{SOFHIA}: a {CAD} environment to design digital control systems},
  year        ={1997}
}
@inproceedings{MaFo91,
  address     ={Edinburgh, Scotland},
  author      ={E.M. Mayger and M.P. Fourman},
  booktitle   ={International Conference on Very Large Scale Integration (VLSI)},
  editor      ={A. Halaas and P.B. Denyer},
  key         ={MaFo91},
  keyword     ={verification},
  month       ={August},
  organization={IFIP Transactions},
  pages       ={59--70},
  publisher   ={North-Holland},
  title       ={Integration of formal Methods with System Design},
  year        ={1991}
}
@article{MaFu85,
  author      ={F. Maruyama and M. Fujita},
  journal     ={{IEEE} Computer},
  key         ={MaFu85},
  month       ={February},
  number      ={2},
  pages       ={22--32},
  title       ={Hardware Verification},
  volume      ={18},
  year        ={1985}
}
@techreport{MaGr91,
  address     ={The Technion},
  author      ={R. Marelly and O. Grumberg},
  key         ={MaGr91},
  month       ={October},
  number      ={697},
  title       ={{GORMEL}-{G}rammar {OR}iented {M}od{EL} {C}hecker},
  year        ={1991}
}
@inproceedings{MaGu94,
  address     ={Malta},
  author      ={S. Maharaj and E.L. Gunter},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={MaGu94},
  month       ={September},
  pages       ={346--361},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Studying the {ML} Module System in {HOL}},
  volume      ={859},
  year        ={1994}
}
@inproceedings{MaGu94a,
  address     ={L\"{u}beck, Germany},
  author      ={O. Maffeis and P. Le Guernic},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={MaGu94a},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={547--566},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{D}istributed {I}mplementation of {SIGNAL}: {S}cheduling \& {G}raph {C}lustering},
  volume      ={863},
  year        ={1994}
}
@inproceedings{MaHu96,
  address     ={Oxford},
  author      ={R. J. Martins and J.-P. Hubaux},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={MaHu96},
  month       ={March},
  pages       ={140-159},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{A} {N}ew {S}ystem {E}ngineering {M}ethodology {C}oupling {F}ormal {S}pecification},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{MaLe93,
  address     ={Arles, France},
  author      ={A.R. Martello and S.P. Levitan},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={MaLe93},
  keyword     ={verification},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={27--38},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Temporal Analysis of Time Bounded Digital Systems},
  volume      ={683},
  year        ={1993}
}
@inproceedings{MaMB93,
  author      ={Y. Matsunaga and P.C. McGeer and R.K. Brayton},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={MaMB93},
  keyword     ={verification gatelevel hardware symbolic_state_traversal BDD fsm formalism},
  pages       ={260--265},
  title       ={On Computing the Transitive Closure of a State Transition Relation},
  year        ={1993}
}
@inproceedings{MaMP91,
  address     ={Mook, Netherlands},
  author      ={O. Maler and Z. Manna and A. Pnueli},
  booktitle   ={Real-Time: Theory in Practice},
  key         ={MaMP91},
  month       ={June},
  pages       ={447--484},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={From Timed Hybrid Systems},
  volume      ={600},
  year        ={1991}
}
@incollection{MaMP92,
  author      ={O. Maler and Z. Manna and A. Pnueli},
  booktitle   ={Real-Time: Theory in Practice},
  editor      ={J.W. de Bakker and K. Huizing and W.-P. de Roever},
  key         ={MaMP92},
  pages       ={447--484},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={From timed to hybrid systems},
  volume      ={600},
  year        ={1992}
}
@inproceedings{MaMe96,
  address     ={Kreischa},
  author      ={Tiziana Margaria and Michael Mendler},
  booktitle   ={GI/ITG/GME Workshop Methoden des Entwurfs und der Verifikation Digitaler Systeme},
  editor      ={Bernd straube and Jens Schoenherr},
  key         ={MaMe96},
  keyword     ={4. GI/ITG/GME},
  month       ={March},
  organization={GI/ITG/GME},
  pages       ={21--30},
  publisher   ={Shaker Verlag, Aachen},
  series      ={Berichte aus der Informatik},
  title       ={Modeling Sequential Circuits in Second-Order Monadic Logic},
  year        ={1996}
}
@article{MaMo82,
  author      ={A. Martelli and U. Montanari},
  journal     ={ACM TOPLAS},
  key         ={MaMo82},
  keyword     ={Logic},
  pages       ={258--282},
  title       ={An Efficient Unification Algorithm},
  volume      ={4},
  year        ={1982}
}
@inproceedings{MaOw81,
  address     ={Rockville, MD},
  author      ={Y. Malachi and S.S. Owicki},
  booktitle   ={{VLSI} Systems and Computations},
  editor      ={H.T. Kung and B. Spoull and G. Steele},
  key         ={MaOw81},
  pages       ={203--212},
  publisher   ={Computer Science Press},
  title       ={Temporal Specifications of Self-Timed Systems},
  year        ={1981}
}
@inproceedings{MaPS92,
  address     ={Santa Clara, California},
  author      ={E. Macii and B. Plessier and F. Somenzi},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={MaPS92},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={179--182},
  publisher   ={IEEE Computer Society Press},
  title       ={{V}erification of {S}ystem {C}ontaining {C}ounters},
  year        ={1992}
}
@inproceedings{MaPn81,
  address     ={New York},
  author      ={Z. Manna and A. Pnueli},
  booktitle   ={Workshop on Logics of Programs},
  key         ={MaPn81},
  pages       ={200--252},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification of Concurrent Programs: {T}emporal Proof Principles},
  volume      ={131},
  year        ={1981}
}
@inproceedings{MaPn82,
  address     ={London},
  author      ={Z. Manna and A. Pnueli},
  booktitle   ={Correctness Problems in Computer Science},
  editor      ={R.S. Boyer and J.S. Moore},
  key         ={MaPn82},
  pages       ={215--273},
  publisher   ={Academic Press},
  title       ={Verification of Concurrent Programs: {T}he Temporal Framework},
  year        ={1982}
}
@inproceedings{MaPn82a,
  author      ={Z. Manna and A. Pnueli},
  booktitle   ={School on Advanced Programming},
  key         ={MaPn82a},
  pages       ={163--255},
  title       ={Verification of Concurrent Programs: A Temporal Proof System},
  year        ={1982}
}
@inproceedings{MaPn83,
  address     ={New York},
  author      ={Z. Manna and A. Pnueli},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={MaPn83},
  organization={ACM},
  pages       ={141--154},
  title       ={How to Cook a Temporal Proof System for your Pet Language},
  year        ={1983}
}
@article{MaPn84,
  author      ={Z. Manna and A. Pnueli},
  journal     ={Science of Computer Programming},
  key         ={MaPn84},
  number      ={3},
  pages       ={257--290},
  title       ={Adequate Proof Principles for Invariance and Liveness Properties of Concurrent Programs},
  volume      ={4},
  year        ={1984}
}
@inproceedings{MaPn87a,
  author      ={Z. Manna and A. Pnueli},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={MaPn87a},
  keyword     ={omega},
  pages       ={1--12},
  title       ={Specification and Verification of Concurrent Programs by $\forall$ Automata},
  year        ={1987}
}
@inproceedings{MaPn87b,
  address     ={Altrincham,UK},
  author      ={Z. Manna and A. Pnueli},
  booktitle   ={Temporal Logic in Specification},
  editor      ={B.Banieqbal and H.Barringer and A.Pnueli},
  key         ={MaPn87b},
  pages       ={124-164},
  publisher   ={Springer-Verlag},
  title       ={On the Relation of Programs and Computations to Models of Temporal Logic},
  year        ={1987}
}
@inproceedings{MaPn87c,
  author      ={Z. Manna and A. Pnueli},
  booktitle   ={{ACM} Symposium on Principles of Distributed Computing},
  key         ={MaPn87c},
  pages       ={205},
  title       ={A Hierarchy of Temporal Properties},
  year        ={1987}
}
@inproceedings{MaPn88,
  address     ={Noordwigherhout, Netherland},
  author      ={Z. Manna and A. Pnueli},
  booktitle   ={Linear Time, Branching Time and Partial Order in Logics and Models for Concurrency},
  key         ={MaPn88},
  keyword     ={hardware verification general specification logic ltl temporallogic reactive_systems concurrent_programs proof_systems classification_of_properties safety liveness recurrence responsiveness progress fairness fair_transition_system},
  month       ={May/June},
  pages       ={428--437},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The Anchored Version of the Temporal Framework},
  volume      ={354},
  year        ={1988}
}
@book{MaPn92,
  author      ={Z. Manna and A. Pnueli},
  key         ={MaPn92},
  keyword     ={hardware verification general specification logic},
  publisher   ={Springer-Verlag, New York, Berlin, Heidelberg},
  title       ={The temporal Logic of Reactive and Concurrent Systems},
  year        ={1992}
}
@article{MaPn93,
  author      ={Z. Manna and A. Pnueli},
  journal     ={Acta Informatica},
  key         ={MaPn93},
  pages       ={609--678},
  title       ={{M}odels for {R}eactivity},
  volume      ={30},
  year        ={1993}
}
@inproceedings{MaPn95,
  address     ={Spectre-Verimag (France), Weizmann Inst. (Israel)},
  author      ={O. Maler and A. Pnueli},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={MaPn95},
  keyword     ={finite_state_systems},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={189--205},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{T}iming analysis of asynchronous circuits using timed automata},
  volume      ={987},
  year        ={1995}
}
@inproceedings{MaPn95a,
  address     ={New Brunswick, NJ.},
  author      ={Z. Manna and A. Pnueli},
  booktitle   ={Workshop on Verification and Control of Hybrid Systems},
  key         ={MaPn95a},
  month       ={October},
  remark      ={A tribute to Prof. C.S.Tang on his 70th birthday},
  title       ={{C}locked {T}ransition {S}ystems},
  year        ={1995}
}
@techreport{MaPn96,
  author      ={M. Marcus and A. Pnueli},
  institution ={Weizmann Institute of Science},
  key         ={MaPn96},
  month       ={January},
  number      ={CS96-01},
  title       ={A Stuttering-Robust Temporal Logic with Next but without Previous},
  type        ={Technical Report},
  year        ={1996}
}
@inproceedings{MaRu88,
  author      ={D. Martin and N.C. Rumin},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={MaRu88},
  keyword     ={hardware abstraction timing},
  organization={IEEE},
  pages       ={358--361},
  title       ={Delay Computation in Switch-Level Models of Non-Treelike {MOS} Circuits},
  year        ={1988}
}
@inproceedings{MaSk88,
  address     ={New York},
  author      ={G.H. MacEwen and D.B. Skillicorn},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={M. Joseph},
  key         ={MaSk88},
  pages       ={36--66},
  publisher   ={Springer-Verlag},
  title       ={Using Higher-Order Logic for Modular Specification of Real-Time Distributed Systems},
  year        ={1988}
}
@inproceedings{MaSt93,
  address     ={Paris, France},
  author      ={T. Margaria and B. Steffen},
  booktitle   ={European Design Automation Conference },
  editor      ={L. Claesen and P. Prinetto},
  key         ={MaSt93},
  month       ={February},
  pages       ={105--110},
  publisher   ={IEEE Computer Society Press},
  title       ={Distinguished Formulas for Free},
  year        ={1993}
}
@article{MaTe74,
  author      ={F. Marcoz and O. Tedone},
  journal     ={IEEE Computer},
  key         ={MaTe74},
  keyword     ={HDL},
  month       ={December},
  pages       ={60--61},
  title       ={Hardware Description Languages in {I}taly},
  year        ={1974}
}
@inproceedings{MaTo91,
  address     ={Davis, California},
  author      ={D.F. Martin and R.J. Toal},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={MaTo91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={242--252},
  publisher   ={IEEE Computer Society Press},
  title       ={Case Studies in Compiler Correctness Using {HOL}},
  year        ={1991}
}
@inproceedings{MaVe93,
  address     ={Ottawa, Canada},
  author      ={R. Mandayam and R. Vemuri},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={MaVe93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={267--284},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Performance Specification and Measurement},
  year        ={1993}
}
@article{MaWa78,
  author      ={Z. Manna and R. Waldinger},
  journal     ={Communications {ACM}},
  key         ={MaWa78},
  number      ={2},
  pages       ={159--172},
  title       ={Is ''Sometimes'' sometimes better than ''Always''?: Intermittent Assertions in Proving Program Correctness},
  volume      ={21},
  year        ={1978}
}
@article{MaWo84,
  author      ={Z. Manna and P. Wolper},
  journal     ={{ACM} Transactions on Programming Languages and Systems},
  key         ={MaWo84},
  pages       ={68--93},
  title       ={Synthesis of Communicating Processes Form Temporal Logic Specifications},
  volume      ={6},
  year        ={1984}
}
@book{MaYo78,
  author      ={M. Machtey and P. Young},
  key         ={MaYo78},
  publisher   ={North-Holland},
  title       ={An Introduction to the General Theory of Algorithms},
  year        ={1978}
}
@inproceedings{MaZi97,
  address     ={Toledo, Spain},
  author      ={C. Mandal and R.M. Zimmer},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={MaZi97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={High-level synthesis of structured data paths},
  year        ={1997}
}
@inproceedings{Madr90,
  author      ={J.C. Madre},
  booktitle   ={{IFIP} International Workshop on Applied Formal Methods for Correct {VLSI} Design},
  editor      ={L. Claesen},
  key         ={Madr90},
  keyword     ={verification},
  pages       ={119--123},
  title       ={{B}enchmarks for {T}autology {C}hecking - {E}xperimental {R}esults},
  volume      ={2},
  year        ={1990}
}
@inproceedings{Mads91,
  author      ={J. Mads},
  booktitle   ={European Design Automation Conference },
  key         ={Mads91},
  keyword     ={hardware abstraction timing},
  organization={IEEE},
  pages       ={101--105},
  title       ={Delay Estimate for {CMOS} Functional Cells},
  year        ={1991}
}
@inproceedings{Mali93,
  address     ={Santa Clara, California},
  author      ={S. Malik},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={Mali93},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={618--627},
  publisher   ={IEEE Computer Society Press},
  title       ={{A}nalysis of {C}yclic {C}ombinational {C}ircuits},
  year        ={1993}
}
@inproceedings{Mann94,
  address     ={Standford, California, USA},
  author      ={Z. Manna},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={Mann94},
  month       ={June},
  pages       ={220-233},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Beyond Model Checking},
  volume      ={818},
  year        ={1994}
}
@techreport{Mann95,
  author      ={Z. Manna},
  institution ={STeP group, Computer Science Department, Stanford University},
  key         ={Mann95},
  month       ={July},
  number      ={STAN-CS-TR-94-1518},
  title       ={{STeP}: {T}he {S}tanford {T}emporal {P}rover},
  year        ={1995}
}
@inproceedings{Mara89a,
  author      ={F. Maraninchi},
  booktitle   ={International Workshop on Automatic Verification Methods for Finite State Systems},
  key         ={Mara89a},
  publisher   ={Springer Verlag, LNCS 407},
  title       ={Argonaute: graphical description, semantics and verification of reactive systems by using a process algebra},
  year        ={1989}
}
@inproceedings{Mare94,
  address     ={Bad Herrenalb, Germany},
  author      ={N. Maretti},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={Mare94},
  keyword     ={tpcd94},
  month       ={September},
  note        ={published 1995},
  pages       ={185--202},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Mechanized Verification of Refinement},
  volume      ={901},
  year        ={1994}
}
@phdthesis{Mare95,
  address     ={DK 2800, Lyngby, Denmark},
  author      ={N. Maretti},
  key         ={Mare95},
  month       ={June},
  school      ={Department of Computer Science,Technical University of Denmark},
  title       ={Mechanized Implementation Verification},
  year        ={1995}
}
@inproceedings{Marg92,
  address     ={Nijmegen},
  author      ={T. Margaria},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  key         ={Marg92},
  month       ={June},
  organization={IFIP TC10/WG 10.2},
  pages       ={129--156},
  publisher   ={North-Holland},
  title       ={Hierarchical mixed-mode verification of complex {FSM}'s described at the {RT} level},
  year        ={1992}
}
@inproceedings{Mark94,
  author      ={I. Markhof},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden im Systementwurf},
  editor      ={H. Eveking},
  key         ={Mark94},
  keyword     ={2GI/ITG},
  month       ={March},
  organization={GI/ITG},
  publisher   ={Universit\"{a}t Frankfurt, Interner Bericht Nr. 6/94},
  title       ={{H}igh-{L}evel-{S}ynthesis by {C}onstraint {L}ogic {P}rogramming},
  year        ={1994}
}
@article{Mart75,
  author      ={D.A. Martin},
  journal     ={Ann. Math.},
  key         ={Mart75},
  keyword     ={omega},
  pages       ={363--371},
  title       ={Borel determinacy},
  volume      ={102},
  year        ={1975}
}
@incollection{Mart80,
  author      ={P. Martin-L\"{o}f},
  booktitle   ={Logic, Methodology and Philosophy of Science IV},
  key         ={Mart80},
  pages       ={153-175},
  publisher   ={North-Holland},
  title       ={Constructive mathematics and computer programming},
  year        ={1980}
}
@inproceedings{Mart85,
  address     ={New York},
  author      ={A.J. Martin},
  booktitle   ={Chapel Hill Conference on {VLSI}},
  editor      ={H. Fuchs and W.H. Freeman},
  key         ={Mart85},
  pages       ={245--260},
  title       ={The Design of a Self-Timed Circuit for Distributed Mutual Exclusion},
  year        ={1985}
}
@inproceedings{Mart87,
  author      ={U. Martin},
  booktitle   ={Conference on Rewriting Techniques and Applications (RTA)},
  key         ={Mart87},
  keyword     ={Rewrite Methods},
  pages       ={42--53},
  title       ={How th choose the weights in the {K}nuth-{B}endix-ordering},
  year        ={1987}
}
@incollection{Mart89,
  author      ={A.J. Martin},
  booktitle   ={Workshop on Hardware Specification, Verification and Synthesis: Mathematical Aspects},
  chapter     ={408},
  key         ={Mart89},
  publisher   ={Springer-Verlag},
  title       ={The Design of a Delay Insensitive Microprocessor},
  year        ={1989}
}
@inproceedings{Mart90a,
  author      ={A.J. Martin},
  booktitle   ={{ACM} International Workshop on Formal Methods in {VLSI} Design},
  editor      ={J. Staunstrup},
  key         ={Mart90a},
  title       ={Synthesis of asynchronous {VLSI} circuits},
  year        ={1990}
}
@phdthesis{Mart93,
  address     ={Pittsburgh},
  author      ={A.R. Martello},
  key         ={Mart93},
  keyword     ={hardware verification},
  month       ={April},
  school      ={University of Pittsburgh},
  title       ={{T}emporal {A}nalysis for {T}ime-{B}ounded {C}ausal {D}igital {S}ystems},
  year        ={1993}
}
@book{Marw93,
  author      ={P. Marwedel},
  key         ={Marw93},
  keyword     ={textbook},
  publisher   ={Hanser},
  series      ={Hanser-Studienb\"{u}cher},
  title       ={{S}ynthese und {S}imulation von {VLSI}-{S}ystemen},
  year        ={1993}
}
@inproceedings{Marw93a,
  address     ={Santa Clara, California},
  author      ={P. Marwedel},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={Marw93a},
  keyword     ={processor_design},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={586--593},
  publisher   ={IEEE Computer Society Press},
  title       ={{T}ree-{B}ased {M}apping of {A}lgorithms to {P}redefined {S}tructures},
  year        ={1993}
}
@inproceedings{Marw94,
  author      ={P. Marwedel},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden im Systementwurf},
  editor      ={H. Eveking},
  key         ={Marw94},
  keyword     ={2GI/ITG},
  month       ={March},
  organization={GI/ITG},
  publisher   ={Universit\"{a}t Frankfurt, Interner Bericht Nr. 6/94},
  title       ={{T}echniques and {A}pplication {A}reas of {R}etargetable {C}ompiler in {CAD}},
  year        ={1994}
}
@inproceedings{McAl92,
  address     ={Leuven, Belgium},
  author      ={M. McAllister},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={McAl92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={211--226},
  publisher   ={North-Holland},
  title       ={Machine Abstraction in Microprocessor Specification},
  year        ={1992}
}
@book{McCl86,
  author      ={E.J. McCluskey},
  key         ={McCl86},
  keyword     ={verification},
  publisher   ={Prentice-Hall},
  title       ={Logic Design Principles},
  year        ={1986}
}
@article{McFa93,
  author      ={M.C. McFarland},
  journal     ={IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={McFa93},
  keyword     ={hardware gatelevel verification tutorial},
  month       ={June},
  number      ={5},
  pages       ={633--654},
  title       ={Formal Verification of Sequential Hardware: {A} Tutorial},
  volume      ={12},
  year        ={1993}
}
@inproceedings{McIs93,
  address     ={Vancouver, Canada},
  author      ={A. McIsaac},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={McIs93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={227--239},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={A Formalization of Abstraction in {LAMBDA}},
  volume      ={780},
  year        ={1993}
}
@inproceedings{McKo95,
  address     ={Boston College (USA), AT\&T Bell Labs., USA},
  author      ={M.C. McFarland and T.J. Kowalski},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={McKo95},
  keyword     ={process_algebras},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={103--123},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{S}ymbolic analysis and verification of {CPA} descriptions},
  volume      ={987},
  year        ={1995}
}
@phdthesis{McMi92a,
  address     ={Pittsburgh, PA},
  author      ={K.L. McMillan},
  key         ={McMi92a},
  keyword     ={hardware verification general},
  month       ={May},
  note        ={CMU-CS-92-131},
  school      ={School of Computer Science, Carnegie Mellon University},
  title       ={{S}ymbolic {M}odel {C}hecking: {A}n {A}pproach to the {S}tate {E}xplosion {P}roblem},
  year        ={1992}
}
@techreport{McMi92b,
  author      ={K.L. McMillan},
  institution ={Carnegie Mellon University},
  key         ={McMi92b},
  keyword     ={hardware verification general techreport},
  number      ={CMU-CS-92-131},
  title       ={The {SMV} system, Symbolic Model Checking - an approach},
  year        ={1992}
}
@inproceedings{McMi92c,
  address     ={Montreal, Canada},
  author      ={K. L. McMillan},
  booktitle   ={Proceedings of the 4th International Conference On Computer Aided Verification},
  key         ={McMi92c},
  month       ={June},
  pages       ={164-177},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Using Unfolding to Avoid the State Explosion Problem in the Verification of Asynchronous Circuits},
  volume      ={663},
  year        ={1992}
}
@book{McMi93a,
  address     ={Norwell Massachusetts},
  author      ={K.L. McMillan},
  key         ={McMi93a},
  publisher   ={Kluwer Academic Publishers},
  title       ={{S}ymbolic {M}odel {C}hecking},
  year        ={1993}
}
@inproceedings{McMi94a,
  address     ={San Diego, CA},
  author      ={K. McMillan},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={McMi94a},
  keyword     ={formal_verification},
  month       ={June},
  note        ={ch. 21A.1},
  publisher   ={San Diego Convention Center},
  title       ={{F}itting {F}ormal {M}ethods into the {D}esign {C}ycle},
  year        ={1994}
}
@inproceedings{McMi94b,
  address     ={Standford, California, USA},
  author      ={K. L. McMillan},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={McMi94b},
  month       ={June},
  pages       ={41-54},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Hierarchical Representations of Discrete Functions, with Application to Model Checking},
  volume      ={818},
  year        ={1994}
}
@inproceedings{McMi95,
  address     ={Liege, Belgium},
  author      ={K. L. McMillan},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={McMi95},
  month       ={July},
  pages       ={180--195},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Trace Theoretic Verification of asynchronous Circuits Using Unfoldings},
  volume      ={939},
  year        ={1995}
}
@inproceedings{McMi96,
  address     ={New Brunswick, NJ, USA},
  author      ={K. L. McMillan},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={McMi96},
  month       ={July/August},
  pages       ={13--25},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Conjunctively Decomposed Boolean Representation for Symbolic Model Checking},
  volume      ={1102},
  year        ={1996}
}
@article{McNa53,
  author      ={R. McNaughton},
  journal     ={Journal of Symbolic Logic},
  key         ={McNa53},
  keyword     ={omega},
  pages       ={136--144},
  title       ={Some formal relative consistency proofs},
  volume      ={18},
  year        ={1953}
}
@article{McNa61,
  author      ={R. McNaughton},
  journal     ={Adv. Comp.},
  key         ={McNa61},
  keyword     ={omega},
  pages       ={19--61},
  title       ={The theory of automata, a survey},
  volume      ={2},
  year        ={1961}
}
@article{McNa66,
  author      ={R. McNaughton},
  journal     ={Information and Control},
  key         ={McNa66},
  keyword     ={omega},
  pages       ={521--530},
  title       ={Testing and generating infinite sequences by a finite automaton},
  volume      ={9},
  year        ={1966}
}
@inproceedings{McPC88,
  author      ={M.C. McFarland and A.C. Parker and R. Camposano},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={McPC88},
  pages       ={330--336},
  title       ={Tutorial on High-Level Synthesis},
  year        ={1988}
}
@book{McPa71,
  author      ={R. McNaughton and S. Papert},
  key         ={McPa71},
  keyword     ={omega},
  publisher   ={{MIT} {P}ress, {C}ambridge, {USA}},
  title       ={Counter-free Automata},
  year        ={1971}
}
@inproceedings{McSc91,
  author      ={K.L. McMillan and J. Schwalbe},
  booktitle   ={International Symposium on Shared Memory Multiprocessors},
  key         ={McSc91},
  organization={(sponsored by Information Processing Society, Tokyo, Japan)},
  pages       ={242--251},
  title       ={Formal Verification of the Encore Gigamax Cache Consistency Protocol},
  year        ={1991}
}
@inproceedings{McSc92,
  author      ={K.L. McMillan and J. Schwalbe},
  booktitle   ={International Symposium on Shared Memory Multiprocessors},
  editor      ={N. Suzuki},
  key         ={McSc92},
  publisher   ={MIT Press},
  title       ={Formal Verification of the Gigamax Cache Consistency Protocol},
  year        ={1992}
}
@inproceedings{McSo61,
  author      ={O.L. McSorley},
  booktitle   ={IRE Trans. on Electron. Computers},
  key         ={McSo61},
  pages       ={67--91},
  title       ={High-speed {A}rithmetic in {B}inary {C}omputers},
  year        ={1961}
}
@inproceedings{McVa94,
  address     ={Standford, California, USA},
  author      ={J. McManis and P. Varaiya},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={McVa94},
  month       ={June},
  pages       ={105-117},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Suspension Automata: A Decidable Class of Hybrid Automata},
  volume      ={818},
  year        ={1994}
}
@inproceedings{McWi80,
  author      ={T.M. McWilliams},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={McWi80},
  keyword     ={verification},
  pages       ={139--147},
  title       ={Verification of timing constraints on large digital systems},
  year        ={1980}
}
@inproceedings{MeBa95,
  address     ={Manchester University, UK},
  author      ={A.C.V. de Melo and H. Barringer},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={MeBa95},
  keyword     ={process_algebras},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={124--145},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} foundation for formal reuse of hardware},
  volume      ={987},
  year        ={1995}
}
@book{MeCo80,
  author      ={C. Mead and L. Conway},
  edition     ={2.},
  key         ={MeCo80},
  keyword     ={textbook hardware transistorlevel layoutlevel},
  month       ={October},
  publisher   ={Addison-Wesley},
  title       ={Introduction to {VLSI} Design},
  year        ={1980}
}
@inproceedings{MeKR92,
  author      ={M.R. Mercer and R. Kapur and D.E. Ross},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={MeKR92},
  keyword     ={formalism propositionallogic BDD},
  pages       ={624--627},
  title       ={Functional Approaches to Generating Orderings for Efficient Symbolic Representations},
  year        ={1992}
}
@inproceedings{MeSt92,
  author      ={M. Mendler and T. Stroup},
  booktitle   ={Workshop on Designing Correct Circuits},
  key         ={MeSt92},
  pages       ={47-66},
  title       ={Newtonian Arbiters Cannot be Proven Correct},
  year        ={1992}
}
@inproceedings{MeSt94,
  address     ={Bad Herrenalb, Germany},
  author      ={N. Mellergaard and J. Staunstrup},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={MeSt94},
  keyword     ={tpcd94},
  month       ={September},
  note        ={published 1995},
  pages       ={239--257},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Tutorial on Design Verification with Synchronized Transitions},
  volume      ={901},
  year        ={1994}
}
@inproceedings{MeTh96,
  address     ={Palo Alto, CA, USA},
  author      ={C. Meinel and T. Theobald},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={MeTh96},
  month       ={November},
  pages       ={404--418},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Local Encoding Transformations for Optimizing {OBDD-Representations} of Finite State Machines},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{MeTr96,
  address     ={New Brunswick, NJ, USA},
  author      ={P. Merino and J. M. Troya},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={MeTr96},
  month       ={July/August},
  pages       ={406--410},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{EVP}: Integration of {FDT}s for the analysis and verification of communication protocols},
  volume      ={1102},
  year        ={1996}
}
@article{Meal55,
  author      ={G. H. Mealy},
  journal     ={Bell System Technical Journal},
  key         ={Meal55},
  pages       ={1045-1079},
  title       ={A Method for synthesizing sequential Circuits},
  volume      ={34(5)},
  year        ={1955}
}
@book{Mehl84,
  author      ={K. Mehlhorn},
  key         ={Mehl84},
  keyword     ={graph},
  publisher   ={Springer-Verlag},
  series      ={Monographs on Theoretical Computer Science},
  title       ={Data Structures and Algorithms 2: Graph Algorithms and {NP}-Completness},
  year        ={1984}
}
@techreport{Melh87,
  author      ={T.F. Melham},
  institution ={University of Cambridge, England},
  key         ={Melh87},
  keyword     ={hardware verification general techreport},
  month       ={May},
  number      ={106},
  title       ={Abstraction Mechanisms for Hardware Verification},
  year        ={1987}
}
@inproceedings{Melh88a,
  address     ={Boston},
  author      ={T.F. Melham},
  booktitle   ={{VLSI} Specification, Verification, and Synthesis},
  editor      ={G. Birtwistle and P.A. Subrahmanyam},
  key         ={Melh88a},
  keyword     ={formalism higherorderlogic HOL hardware registertransferlevel verification tutorial},
  pages       ={129--157},
  publisher   ={Kluwer Academic Publishers},
  title       ={Abstraction Mechanisms for Hardware Verification},
  year        ={1988}
}
@inproceedings{Melh88b,
  address     ={Glasgow, Scotland},
  author      ={T.F. Melham},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={G.J. Milne},
  key         ={Melh88b},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={27--50},
  publisher   ={North-Holland},
  title       ={Using Recursive Types to Reason about Hardware and Higher Order Logic},
  year        ={1988}
}
@inproceedings{Melh88c,
  address     ={Glasgow, Scotland},
  author      ={T.F. Melham},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={Melh88c},
  pages       ={27-50},
  publisher   ={North-Holland},
  title       ={Using Recursive Types to Reason about Hardware in Higher Order Logic},
  year        ={1988}
}
@techreport{Melh88d,
  address     ={Cambridge CB2 3QG, England},
  author      ={T.F. Melham},
  institution ={University of Cambridge Computer Laboratory},
  key         ={Melh88d},
  keyword     ={HOL type},
  month       ={September},
  number      ={146},
  title       ={Automating Recursive Type Definitions in Higher Order Logic},
  type        ={Technical Report},
  year        ={1988}
}
@manual{Melh90,
  address     ={Cambridge, England},
  author      ={T.F. Melham},
  key         ={Melh90},
  keyword     ={formalism higherorderlogic HOL tutorial},
  organization={University of Cambridge, Computer Laboratory},
  title       ={Introduction to the {HOL} theorem prover},
  year        ={1990}
}
@phdthesis{Melh90a,
  author      ={T.F. Melham},
  key         ={Melh90a},
  remark      ={Technical Report 201},
  school      ={Computer Laboratory, University of Cambridge},
  title       ={Formalizing Abstraction Mechanisms for Hardware Verification in Higher Order Logic},
  year        ={1990}
}
@inproceedings{Melh91a,
  address     ={Davis, California},
  author      ={T.F. Melham},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Melh91a},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Future Directions},
  year        ={1991}
}
@inproceedings{Melh91b,
  address     ={Davis, California},
  author      ={T.F. Melham},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Melh91b},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={A Report on {HOL88}},
  year        ={1991}
}
@inproceedings{Melh91c,
  address     ={Davis, California},
  author      ={T.F. Melham},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Melh91c},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={350--357},
  publisher   ={IEEE Computer Society Press},
  title       ={A Package for Inductive Relation Definitions in {HOL}},
  year        ={1991}
}
@inproceedings{Melh91d,
  address     ={Davis, California},
  author      ={T.F. Melham},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Melh91d},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Theories and Packages {II}},
  year        ={1991}
}
@inproceedings{Melh92,
  address     ={Leuven, Belgium},
  author      ={T.F. Melham},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Melh92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={3--18},
  publisher   ={North-Holland},
  title       ={The {HOL} Logic Extended with Quantification over Type Variables},
  year        ={1992}
}
@book{Melh93,
  author      ={T.F. Melham},
  key         ={Melh93},
  publisher   ={Cambridge University Press},
  series      ={Cambridge Tracts in Theoretical Computer Science},
  title       ={Higher Order Logic and Hardware Verification},
  year        ={1993}
}
@misc{Melh94,
  author      ={T. Melham},
  howpublished={Tutorial: TPCD94},
  key         ={Melh94},
  keyword     ={tpcd94 hardware verification transistorlevel other},
  month       ={September},
  note        ={Bad Herrenalb, Germany},
  title       ={Inductive Reasoning about Circuit Design},
  year        ={1994}
}
@inproceedings{Mell87,
  address     ={Menlo Park, CA 94025},
  author      ={P.M. Melliar-Smith},
  booktitle   ={Temporal Logic in Specification},
  key         ={Mell87},
  organization={SRI International},
  pages       ={224--242},
  series      ={Lecture Notes in Computer Science},
  title       ={Extending Interval Logic to Real Time Systems},
  volume      ={398},
  year        ={1987}
}
@phdthesis{Mell94,
  author      ={N. Mellergaard},
  key         ={Mell94},
  school      ={Department of Computer Science, Technical University of Denmark},
  title       ={Mechanized Design Verification},
  year        ={1994}
}
@book{Mend64,
  address     ={New York},
  author      ={E. Mendelson},
  key         ={Mend64},
  publisher   ={Van Nostrand},
  title       ={Introduction to Mathematical Logic},
  year        ={1964}
}
@inproceedings{Mend96,
  address     ={Kreischa},
  author      ={M. Mendel},
  booktitle   ={GI/ITG/GME Workshop Methoden des Entwurfs und der Verifikation Digitaler Systeme},
  editor      ={Bernd straube and Jens Schoenherr},
  key         ={Mend96},
  keyword     ={4. GI/ITG/GME},
  month       ={March},
  organization={GI/ITG/GME},
  pages       ={121--130},
  publisher   ={Shaker Verlag, Aachen},
  series      ={Berichte aus der Informatik},
  title       ={A Timing Refinement of Intuitionistic Proofs and its Application to the Timing Analysis of Combinational Circuits},
  year        ={1996}
}
@article{Merm74,
  author      ={J. Mermet},
  journal     ={IEEE Computer},
  key         ={Merm74},
  keyword     ={HDL},
  month       ={December},
  pages       ={55--56},
  title       ={Hardware Description Languages in {F}rance},
  year        ={1974}
}
@book{Merm92,
  author      ={J. Mermet},
  key         ={Merm92},
  keyword     ={VHDL flowgraph verification},
  publisher   ={Kluwer Academic Publisher},
  title       ={{VHDL} for Simulation, Synthesis and Formal Proofs of Hardware},
  year        ={1992}
}
@article{Meti83,
  author      ={Y. Metivier},
  journal     ={Information Processing Letters},
  key         ={Meti83},
  keyword     ={Rewrite Methods},
  number      ={1},
  pages       ={31--34},
  title       ={About the rewriting system produced by the {K}nuth-{B}endix completion},
  volume      ={16},
  year        ={1983}
}
@inproceedings{Meye75,
  author      ={A.R. Meyer},
  booktitle   ={Logic Colloquium},
  key         ={Meye75},
  keyword     ={omega},
  pages       ={132--154},
  publisher   ={Springer-Verlag},
  title       ={Weak Monadic Second Order Theory of Successor is not Elementary Recursive},
  year        ={1975}
}
@inproceedings{MiBD96,
  address     ={Dresden, Germany},
  author      ={J. Mirkowski and K. Bilinski and E. Dagless},
  booktitle   ={SIG-VHDL Spring '96 Working Conference},
  editor      ={W. Ecker},
  key         ={MiBD96},
  keyword     ={VHDL synthesis petrinet},
  month       ={May},
  pages       ={35--46},
  publisher   ={Shaker Verlag},
  remark      ={ISBN: 3-8265-1462-9},
  title       ={Petri Net Modelling of {VHDL} Simulation Cycle for High Level Synthesis Purposes},
  year        ={1996}
}
@article{MiCl85,
  author      ={B. Mishra and E.M. Clarke},
  journal     ={Theoretical Computer Science},
  key         ={MiCl85},
  pages       ={269--291},
  title       ={Hierarchical Verification of Asynchronous Circuits Using Temporal Logic},
  volume      ={38},
  year        ={1985}
}
@book{MiGr87,
  author      ={J. Millman and A. Grabel},
  edition     ={2},
  key         ={MiGr87},
  keyword     ={textbook},
  publisher   ={McGraw-Hill},
  series      ={Electrical \& Electronic Engineering Series},
  title       ={Microelectronics},
  year        ={1987}
}
@article{MiHa84,
  author      ={S. Miyano and T. Hayashi},
  journal     ={Theoretical Computer Science},
  key         ={MiHa84},
  keyword     ={omega},
  pages       ={321--330},
  title       ={Alternating automata on $\omega$-words},
  volume      ={32},
  year        ={1984}
}
@proceedings{MiHo81,
  editor      ={E. Miller and W.E. Howden},
  key         ={MiHo81},
  keyword     ={textbook},
  organization={IEEE},
  publisher   ={IEEE Computer Society Press},
  series      ={Tutorial},
  title       ={Software Testing \& Validation Techniques},
  volume      ={365},
  year        ={1981}
}
@inproceedings{MiIY90a,
  address     ={Los Alamitos, CA},
  author      ={S. Minato and N. Ishiura and S. Yajima},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={MiIY90a},
  keyword     ={formalism propositionallogic BDD},
  month       ={June},
  organization={ACM/IEEE},
  pages       ={52--57},
  publisher   ={IEEE Society Press},
  title       ={{S}hared {B}inary {D}ecision {D}iagram with {A}ttributed {E}dges for {E}fficient {B}oolean {F}unction {M}anipulation},
  year        ={1990}
}
@inproceedings{MiIY90b,
  author      ={S. Minato and N. Ishiura and S. Yajima},
  booktitle   ={{IFIP} International Workshop on Applied Formal Methods for Correct {VLSI} Design},
  editor      ={L. Claesen},
  key         ={MiIY90b},
  keyword     ={BDD},
  pages       ={107--112},
  title       ={{F}ast {T}autology {C}hecking {U}sing {S}hared {B}inary {D}ecision {D}iagrams-{B}enchmark {R}esults},
  volume      ={2},
  year        ={1990}
}
@inproceedings{MiJo96,
  address     ={Bastad, Sweden},
  author      ={P.S. Miner and S.D. Johnson},
  booktitle   ={Workshop on Designing Correct Circuits},
  key         ={MiJo96},
  month       ={September},
  title       ={Verification of an {O}ptimized {F}ault-{T}olerant {C}lock {S}ynchronization {C}ircuit: A {C}ase {S}tudy exploring the {B}oundary between {F}ormal {R}easoning {S}ystems},
  year        ={1996}
}
@article{MiKM90,
  author      ={G.D. Micheli and D.C. Ku and F. Mailhot},
  journal     ={Design \& Test Magazine},
  key         ={MiKM90},
  month       ={October},
  pages       ={37-53},
  title       ={The {OLYMPUS} Synthesis System for Digital Design},
  year        ={1990}
}
@inproceedings{MiKa96,
  address     ={New Brunswick, NJ, USA},
  author      ={H. Miller and S. Katz},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={MiKa96},
  month       ={July/August},
  pages       ={336--347},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Saving Space by Fully Exploiting invisible transitions},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{MiLe96,
  address     ={Palo Alto, CA, USA},
  author      ={P. S. Miner and J. F. Leathrum},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={MiLe96},
  month       ={November},
  pages       ={64--78},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification of {IEEE} compliant subtractive Division Algorithms},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{MiPa94,
  address     ={Standford, California, USA},
  author      ={M. Mihail and C. H. Papadimitriou},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={MiPa94},
  month       ={June},
  pages       ={132-141},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={On the Random Walk Method for Protocol Testing},
  volume      ={818},
  year        ={1994}
}
@inproceedings{MiPe88,
  address     ={Glasgow, Scotland},
  author      ={G.J. Milne and M. Pezze},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={MiPe88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={117--138},
  publisher   ={North-Holland},
  title       ={Typed {CIRCAL:} a High Level Framework for Hardware Verification},
  year        ={1988}
}
@book{MiSS96,
  address     ={Heidelberg},
  author      ={S. Middendorf and R. Singer and S. Strobel},
  key         ={MiSS96},
  note        ={ISBN 3-920993-38-1},
  publisher   ={dpunkt Verlag f\"{u}r digitale Technologie GmbH},
  title       ={{JAVA} Programmierhandbuch und Referenz},
  year        ={1996}
}
@inproceedings{MiSr95,
  address     ={Boca Raton, FL},
  author      ={S.P. Miller and M.K. Srivas},
  booktitle   ={Workshop on Industrial-Strength Formal Specification Techniques (WIFT)},
  key         ={MiSr95},
  organization={IEEE Computer Society},
  pages       ={2--16},
  title       ={Formal {V}erification of the {AAMP5} {M}icroprocessor: {A} {C}ase {S}tudy in the {I}ndustrial {U}se of {F}ormal {M}ethods},
  year        ={1995}
}
@inproceedings{Mill97,
  address     ={Grenoble, France},
  author      ={B.M. Miller},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={Mill97},
  pages       ={228-239},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Representation of Robust and Non-robust Solutions of Nonlinear Discrete-Continous Systems},
  year        ={1997}
}
@inproceedings{Miln71,
  author      ={R. Milner},
  booktitle   ={International Joint Conference on Artificial Intelligence (IJCAI)},
  key         ={Miln71},
  month       ={September},
  title       ={An Algebraic Definition of simulation between Programs},
  year        ={1971}
}
@book{Miln80,
  address     ={New York},
  author      ={R. Milner},
  key         ={Miln80},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Calculus of Communicating Systems},
  volume      ={92},
  year        ={1980}
}
@article{Miln83,
  author      ={G.J. Milne},
  journal     ={Integration, the {VLSI} Journal},
  key         ={Miln83},
  month       ={October},
  number      ={2--3},
  pages       ={121--160},
  title       ={{CIRCAL:} A calculus for Circuit Descriptions},
  volume      ={1},
  year        ={1983}
}
@inproceedings{Miln84,
  address     ={Los Alamitos, CA},
  author      ={G.J. Milne},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={Miln84},
  pages       ={251-257},
  publisher   ={IEEE Computer Society Press},
  title       ={A model for hardware description and verification},
  year        ={1984}
}
@proceedings{Miln88,
  address     ={Glasgow, Scotland},
  editor      ={G.J. Milne},
  key         ={Miln88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  publisher   ={North-Holland},
  title       ={The Fusion of Hardware Design and Verification},
  year        ={1988}
}
@inproceedings{Miln89,
  author      ={G.J. Milne},
  booktitle   ={Workshop on Hardware Specification, Verification and Synthesis: Mathematical Aspects},
  key         ={Miln89},
  keyword     ={verification},
  publisher   ={Cornell University},
  title       ={Design for verifiability},
  year        ={1989}
}
@book{Miln89a,
  address     ={London},
  author      ={R. Milner},
  key         ={Miln89a},
  publisher   ={Prentice-Hall International},
  title       ={Communication and Concurrency},
  year        ={1989}
}
@article{Miln91,
  author      ={G.J. Milne},
  journal     ={IEEE Transactions on Computers},
  key         ={Miln91},
  keyword     ={hardware gatelevel timing verification asynchronous},
  month       ={July},
  number      ={7},
  pages       ={811--826},
  title       ={The Formal Description and Verification of Hardware Timing},
  volume      ={40},
  year        ={1991}
}
@inproceedings{Mina93,
  address     ={Dallas, TX},
  author      ={S. Minato},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={Mina93},
  month       ={June},
  pages       ={272-277},
  title       ={{Z}ero-{S}uppressed {BDD}s for {S}et {M}anipulation in {C}ombinatorial {P}roblems},
  year        ={1993}
}
@inproceedings{Mina95,
  address     ={Paris},
  author      ={S. Minato},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={Mina95},
  month       ={March},
  pages       ={449--457},
  publisher   ={IEEE Computer Society Press},
  title       ={{I}mplicit {M}anipulation of {P}olynomials {U}sing {Z}ero {S}uppressed {BDD}},
  year        ={1995}
}
@techreport{Mine93,
  address     ={Hampton, VA},
  author      ={P.S. Miner},
  institution ={NASA Langley Research Center},
  key         ={Mine93},
  number      ={November},
  title       ={Verification of {F}ault-{T}olerant {C}lock {S}ynchronization {S}ystems},
  type        ={NASA Technical Paper},
  year        ={1993}
}
@inbook{Mitc90,
  author      ={J.C. Mitchell},
  chapter     ={type Systems for Programming Languages},
  editor      ={J. van Leeuwen},
  key         ={Mitc90},
  pages       ={365-458},
  publisher   ={Elsevier Science Publishers},
  title       ={Handbook of Theoretical Computer Science},
  year        ={1990}
}
@inproceedings{MoAP97,
  address     ={Toledo, Spain},
  author      ={V. Moser and H.-P. Amann and F. Pallandini},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={MoAP97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Behavioural modelling of sampled-data with {HDL-A} and {ABSynth}},
  year        ={1997}
}
@inproceedings{MoCh94,
  address     ={San Jose, California},
  author      ={C.R. Mohan and P.P. Chakrabarti},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={MoCh94},
  keyword     ={sequential_optimization},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={698--701},
  publisher   ={IEEE Computer Society Press},
  title       ={{A} {N}ew {A}pproach for {F}actorizing {FSM}'s},
  year        ={1994}
}
@inproceedings{MoHC97,
  address     ={Toledo, Spain},
  author      ={J. Mountjoy and P. Hartel and H. Corporaal},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={MoHC97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Modular operational semantic specification of transport triggered architectures},
  year        ={1997}
}
@inproceedings{MoMM95,
  address     ={Passau},
  author      ={J. Mohnke and P. Molitor and S. Malik},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden beim Entwurf von Hardwaresystemen},
  editor      ={W. Grass and M. Mutz},
  key         ={MoMM95},
  keyword     ={3GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={108--117},
  publisher   ={Shaker Verlag},
  series      ={Berichte aus der Informatik},
  title       ={\"{U}ber den {N}utzen von {S}ignaturen beim permutationsabh\"{a}ngigen {V}ergleich {B}oolescher {F}unktionen},
  year        ={1995}
}
@inproceedings{MoMW93,
  address     ={Santa Clara, California},
  author      ={D. M\"{o}ller and J. Mohnke and M. Weber},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={MoMW93},
  keyword     ={BDD},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={680--684},
  publisher   ={IEEE Computer Society Press},
  title       ={{D}etection of {S}ymmetry of {B}oolean {F}unctions {R}epresented by {ROBDD}s},
  year        ={1993}
}
@inproceedings{MoMa93,
  address     ={Paris, France},
  author      ={J. Mohnke and S. Malik},
  booktitle   ={European Design Automation Conference },
  editor      ={T. Kropf and U. Schlichtmann},
  key         ={MoMa93},
  month       ={February},
  pages       ={86--93},
  publisher   ={IEEE Computer Society Press},
  title       ={Permutation and Phase Independent Boolean Comparison},
  year        ={1993}
}
@inproceedings{MoPT85,
  author      ={J.D. Morison and N.E. Peeling and T.L. Thorp},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  key         ={MoPT85},
  keyword     ={verification},
  note        ={Tokyo},
  pages       ={303--320},
  title       ={The Design Rationale of {ELLA}, A Hardware Design and Description Language},
  year        ={1985}
}
@inproceedings{MoPT88,
  author      ={J.D. Morison and N.E. Peeling and T.L. Thorp},
  booktitle   ={International Conference on Circuits and Computers},
  key         ={MoPT88},
  pages       ={604--607},
  title       ={{ELLA}: {A} Hardware Description Language},
  year        ={1988}
}
@inproceedings{MoYo94,
  address     ={L\"{u}beck, Germany},
  author      ={R. Mori and N. Yonezaki},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={MoYo94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={567--582},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{D}erivation of the {I}nput {C}onditional {F}ormula from a {R}eactive {S}ystem {S}pecification in {T}emporal {L}ogic},
  volume      ={863},
  year        ={1994}
}
@inproceedings{Moha95,
  address     ={Aspen Grove, Utah, USA},
  author      ={O.A. Mohamed},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={Moha95},
  month       ={September},
  pages       ={1--16},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{M}echanizing a $\pi$-{C}alculus {E}quivalence within {HOL}},
  volume      ={971},
  year        ={1995}
}
@inproceedings{Moor56,
  address     ={Princeton, New Jersey},
  author      ={E.F. Moore},
  booktitle   ={Automata Studies},
  editor      ={C.E. Shannon and J. MacCarthy},
  key         ={Moor56},
  keyword     ={formalism fsm hardware gatelevel verification},
  pages       ={129--153},
  publisher   ={Princeton University Press},
  title       ={Gedanken-Experiments on Sequential Machines},
  year        ={1956}
}
@article{Moor89,
  author      ={J.S. Moore},
  journal     ={Journal of Automated Reasoning},
  key         ={Moor89},
  number      ={4},
  pages       ={461--492},
  title       ={A Mechanically Verified Language Implementation},
  volume      ={5},
  year        ={1989}
}
@article{Moor92,
  author      ={P. Moorby},
  journal     ={IEEE Design \& Test of Computers},
  key         ={Moor92},
  keyword     ={HDL},
  month       ={September},
  pages       ={62--63},
  title       ={History of {V}erilog},
  year        ={1992}
}
@article{More82,
  author      ={B.M.E. Moret},
  journal     ={ACM Computing Surveys},
  key         ={More82},
  keyword     ={BDD},
  pages       ={593--623},
  title       ={{D}ecision {T}rees and {D}iagrams},
  year        ={1982}
}
@inproceedings{Morl93,
  address     ={Vancouver, Canada},
  author      ={M.J. Morley},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Morl93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={465--476},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Safety in Railway Signaling Data: A Behavioural Analysis},
  volume      ={780},
  year        ={1993}
}
@inproceedings{Morr69,
  author      ={J.R. Morris},
  booktitle   ={International Joint Conference on Artificial Intelligence (IJCAI)},
  key         ={Morr69},
  pages       ={287-294},
  title       ={An extension of resolution to include the equality relation},
  year        ={1969}
}
@article{Most87,
  author      ={A.W. Mostowski},
  journal     ={Journal of Information Processing and Cybernetics},
  key         ={Most87},
  keyword     ={omega},
  pages       ={509--515},
  title       ={Hierarchies of weak monadic formulas for two successors arithmetic},
  volume      ={23},
  year        ={1987}
}
@phdthesis{Mosz83,
  address     ={Stanford, CA},
  author      ={B. Moszkowski},
  key         ={Mosz83},
  school      ={Stanford University},
  title       ={Reasoning about Digital Circuits},
  year        ={1983}
}
@techreport{Mosz84,
  author      ={B. Moszkowski},
  institution ={University of Cambridge Computer Laboratory},
  key         ={Mosz84},
  month       ={August},
  number      ={55},
  title       ={Executing Temporal Logic Programs},
  year        ={1984}
}
@article{Mosz85,
  author      ={B. Moszkowski},
  journal     ={IEEE Computer Magazine},
  key         ={Mosz85},
  keyword     ={hardware verification general specification logic itl},
  month       ={February},
  pages       ={10--19},
  title       ={A Temporal Logic for Multilevel Reasoning about Hardware},
  year        ={1985}
}
@techreport{Mosz85a,
  author      ={B. Moszkowski},
  institution ={University of Cambridge Computer Laboratory},
  key         ={Mosz85a},
  month       ={August},
  number      ={71},
  title       ={Executing Temporal Logic Programs},
  year        ={1985}
}
@article{Mosz85b,
  author      ={B. Moszkowski},
  journal     ={Computer},
  key         ={Mosz85b},
  pages       ={10-19},
  title       ={A temporal logic for multi-level reasoning about hardware},
  year        ={1985}
}
@inproceedings{MuBG94,
  address     ={Grenoble, France},
  author      ={W. Mueller and E. B\"{o}rger and U. Gl\"{a}sser},
  booktitle   ={European Design Automation Conference },
  key         ={MuBG94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={500--505},
  publisher   ={IEEE Computer Society Press},
  title       ={{T}he {S}emantics of {B}ehavioral {VHDL} '93 {D}escriptions},
  year        ={1994}
}
@inproceedings{MuJF95,
  address     ={Paris},
  author      ={R. Mukherjee and J. Jain and M. Fujita},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={MuJF95},
  month       ={March},
  pages       ={444--448},
  publisher   ={IEEE Computer Society Press},
  title       ={{VERIFUL:} {VER}ification {U}sing {FUN}nctional {L}earning},
  year        ={1995}
}
@inproceedings{MuNi95,
  author      ={O. M\"{u}ller and T. Nipkow},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma and W.R. Cleaveland and K.G. Larsen and T. Margaria and B. Steffen},
  key         ={MuNi95},
  pages       ={1--16},
  title       ={Combining Model Checking and Deduction for I/O-Automata},
  year        ={1995}
}
@inproceedings{MuSS86b,
  author      ={D.E. Muller and A. Saoudi and P.E. Schupp},
  booktitle   ={International Colloquium on Automata, Languages and Programming (ICALP)},
  editor      ={L. Kott},
  key         ={MuSS86b},
  keyword     ={omega},
  pages       ={275--283},
  publisher   ={Springer-Verlag},
  title       ={Alternating automata, the weak monadic theory of the tree, and its complexity},
  year        ={1986}
}
@inproceedings{MuSS88,
  author      ={D.E. Muller and A. Saoudi and P.E. Schupp},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={MuSS88},
  keyword     ={omega},
  pages       ={422--427},
  title       ={Weak alternating automata give a simple explanation of why most temporal and dynamic logics are decidable in exponential time},
  year        ={1988}
}
@article{MuSc85,
  author      ={D.E. Muller and P.E. Schupp},
  journal     ={Theoretical Computer Science},
  key         ={MuSc85},
  keyword     ={omega},
  pages       ={51--75},
  title       ={The theory of ends, pushdown automata, and second order logic},
  volume      ={37},
  year        ={1985}
}
@article{MuSc87,
  author      ={D.E. Muller and P.E. Schupp},
  journal     ={Theoretical Computer Science},
  key         ={MuSc87},
  keyword     ={omega},
  pages       ={267--276},
  title       ={Alternating automata on infinite trees},
  volume      ={54},
  year        ={1987}
}
@inproceedings{MuSc97,
  address     ={Grenoble, France},
  author      ={O. Mueller and P. Scholz},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={MuSc97},
  pages       ={273-285},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Functional Specification of Real-Time and Hybrid Systems},
  year        ={1997}
}
@inproceedings{Mull63,
  address     ={New York},
  author      ={D.E. Muller},
  booktitle   ={Symposium on Switching Circuit Theory and Logical Design},
  key         ={Mull63},
  keyword     ={omega},
  pages       ={3--16},
  title       ={Infinite Sequences and finite machines},
  year        ={1963}
}
@inproceedings{Muss80,
  author      ={D.R. Musser},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={Muss80},
  keyword     ={Rewrite},
  pages       ={154--162},
  title       ={On proving inductive properties of abstract data types},
  year        ={1980}
}
@inproceedings{Mutz91,
  author      ={M. Mutz},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  key         ={Mutz91},
  keyword     ={formalsynthesis verification registertransferlevel hardware gatelevel optimization},
  pages       ={355--366},
  title       ={Using the {HOL} Theorem Proving Environment for Proving the Correctness of Term Rewriting Rules reducing Terms of Sequential Behavior},
  year        ={1991}
}
@phdthesis{Mutz93,
  address     ={Passau},
  author      ={M. Mutz},
  key         ={Mutz93},
  keyword     ={HOL verification HDL VIOLA},
  month       ={July},
  school      ={Universit\"{a}t Passau},
  title       ={{F}ormale {B}eschreibung und automatisierte {V}erifikation von sequentiellen {H}ardwareverhalten auf der {B}asis von {L}ogik h\"{o}herer {O}rdnung},
  year        ={1993}
}
@inproceedings{Mutz93a,
  address     ={Bad Herrenalb},
  author      ={M. Mutz},
  booktitle   ={GI/ITG Workshop Formale Methoden zum Entwurf korrekter Systeme},
  editor      ={T. Kropf and R. Kumar and D. Schmid},
  key         ={Mutz93a},
  keyword     ={1GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={1--7},
  publisher   ={Universit\"{a}t Karlsruhe, Interner Bericht Nr. 10/93},
  title       ={{D}enotationale {S}emantik von {T}ermen einer {H}ardwarebeschreibungssprache zur {B}eschreibung der tr\"{a}gen {V}erz\"{o}gerungszeit},
  year        ={1993}
}
@inproceedings{Mutz94,
  address     ={Grenoble, France},
  author      ={M. Mutz},
  booktitle   ={European Design Automation Conference },
  key         ={Mutz94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={290--295},
  publisher   ={IEEE Computer Society Press},
  title       ={{A}n {A}utomatically {V}erified {G}eneralized {M}ultifunction {A}rithmetic {P}ipeline},
  year        ={1994}
}
@inproceedings{Mutz95,
  address     ={Passau},
  author      ={M. Mutz},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden beim Entwurf von Hardwaresystemen},
  editor      ={W. Grass and M. Mutz},
  key         ={Mutz95},
  keyword     ={3GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={41--50},
  publisher   ={Shaker Verlag},
  series      ={Berichte aus der Informatik},
  title       ={{L}inearisierung von Spezifikationen bei der automatischen {V}erifikation sequentieller digitaler {S}chaltungen mit {E}chtzeitbedingungen},
  year        ={1995}
}
@inproceedings{Mutz96,
  address     ={Dresden, Germany},
  author      ={M. Mutz},
  booktitle   ={SIG-VHDL Spring '96 Working Conference},
  editor      ={W. Ecker},
  key         ={Mutz96},
  keyword     ={VHDL formalsynthesis},
  month       ={May},
  pages       ={47--58},
  publisher   ={Shaker Verlag},
  remark      ={ISBN: 3-8265-1462-9},
  title       ={About the Benefits of Intermediate {VHDL} Semantics for Correct Transformational Synthesis},
  year        ={1996}
}
@inproceedings{Mutz96a,
  address     ={Kreischa},
  author      ={M. Mutz},
  booktitle   ={GI/ITG/GME Workshop Methoden des Entwurfs und der Verifikation Digitaler Systeme},
  editor      ={Bernd straube and Jens Schoenherr},
  key         ={Mutz96a},
  keyword     ={4. GI/ITG/GME},
  month       ={March},
  organization={GI/ITG/GME},
  pages       ={101--110},
  publisher   ={Shaker Verlag, Aachen},
  series      ={Berichte aus der Informatik},
  title       ={Der Zeitbehaftete(Zustands, Ereignis)-Ueberfuerungsgraph zur kombinierten Zeit-und Logikverifikation},
  year        ={1996}
}
@inproceedings{Mutz97,
  address     ={Montreal, Canada},
  author      ={M. Mutz},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={H. F. Li and D. K. Probst},
  key         ={Mutz97},
  keyword     ={conference},
  month       ={October},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Automatic post-synthesis verification support for high level synthesis step by using the {HOL} theorem proving system},
  year        ={1997}
}
@phdthesis{Mycr81,
  author      ={A. Mycroft},
  key         ={Mycr81},
  school      ={Univesity of Edinburgh},
  title       ={Abstract Interpretation and Optimizing Transformations for Applicative Programms},
  year        ={1981}
}
@article{NDOG86,
  author      ={V. Nguyen and A. Demers and S. Owicki and D. Gries},
  journal     ={Distributed Computing},
  key         ={NDOG86},
  number      ={1},
  pages       ={7--25},
  title       ={A Modal and Temporal Proof System for Networks of Processes},
  volume      ={1},
  year        ={1986}
}
@inproceedings{NFGL95,
  address     ={Rome University (Italy), Pisa University (Italy)},
  author      ={R. De Nicola and A. Fantechi and S. Gnesi and S. Larosa and G. Ristory},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={NFGL95},
  keyword     ={verification_environments},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={246--260},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{V}erifying hardware components with {JACK}},
  volume      ={987},
  year        ={1995}
}
@inproceedings{NHEV93,
  address     ={Ottawa, Canada},
  author      ={Z. Navabi and A. Hshemi and M. Eghtesad and M. Vai},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={NHEV93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={555--573},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Modeling Timing Behavior of Logic Circuits Using Piecewise Linear Models},
  year        ={1993}
}
@inproceedings{NaGa94,
  address     ={Paris},
  author      ={S. Narayan and D.D. Gajski},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={NaGa94},
  keyword     ={Specification_and_Synthesis_of_System_Interfaces},
  month       ={February},
  pages       ={395--401},
  publisher   ={IEEE Computer Society Press},
  title       ={{S}ynthesis of {S}ystem-{L}evel {B}us {I}nterfaces},
  year        ={1994}
}
@inproceedings{NaGo97,
  address     ={Toledo, Spain},
  author      ={R. Nalumasu and G. Gopalakrishnan},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={NaGo97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={A new partial order reduction algorithm for concurrent systems},
  year        ={1997}
}
@inproceedings{NaNi96,
  address     ={Turku, Finland},
  author      ={D. Nazareth and T. Nipkow},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={NaNi96},
  month       ={August},
  pages       ={331--346},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Formal Verification of Algorithm {W}: The Monomorphic Case},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{NaSi94,
  address     ={Standford, California, USA},
  author      ={V. G. Naik and A. P. Sistla},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={NaSi94},
  month       ={June},
  pages       ={194--206},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Modeling and Verification of Real Life Protocol Using Symbolic Model Checking},
  volume      ={818},
  year        ={1994}
}
@inproceedings{NaSt94,
  address     ={L\"{u}beck, Germany},
  author      ={S. Nadjm-Tehrani and J.-E. Str\"{o}mberg},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={NaSt94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={583--604},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{F}rom {P}hysical {M}odelling to {C}ompositional {M}odels of {H}ybrid {S}ystems},
  volume      ={863},
  year        ={1994}
}
@inproceedings{NaVG91,
  address     ={Amsterdam},
  author      ={S. Narayan and F. Vahid and D. Gajski},
  booktitle   ={European Design Automation Conference },
  key         ={NaVG91},
  keyword     ={Formal_Verification},
  month       ={February},
  organization={IEEE},
  pages       ={390--394},
  publisher   ={IEEE Computer Society Press},
  title       ={{T}ranslating {S}ystem {S}pecifications to {VHDL}},
  year        ={1991}
}
@inproceedings{NaVe96,
  address     ={Palo Alto, CA, USA},
  author      ={N. Narasimhan and R. Vemuri},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={NaVe96},
  month       ={November},
  pages       ={327--345},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Specification of control flow properties for verification of synthesized {VHDL} designs},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{Naur92,
  author      ={P. Naur},
  booktitle   ={Workshop on Designing Correct Circuits},
  key         ={Naur92},
  pages       ={97-102},
  title       ={Three Notions of Proof},
  year        ={1992}
}
@inproceedings{NeFr96,
  address     ={New Brunswick, NJ, USA},
  author      ={R. Nelken and N. Francez},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={NeFr96},
  month       ={July/August},
  pages       ={360--371},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Automatic translation of natural-language System specifications into temporal logic},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{Nesi92,
  address     ={Leuven, Belgium},
  author      ={M. Nesi},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Nesi92},
  keyword     ={formalism processalgebra higherorderlogic HOL},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={279--294},
  publisher   ={North-Holland},
  title       ={Formalizing a Modal Logic for {CSS} in the {HOL} Theorem Prover},
  year        ={1992}
}
@inproceedings{Nesi93,
  address     ={Vancouver, Canada},
  author      ={M. Nesi},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Nesi93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={352--366},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Value-{P}assing {CCS} in {HOL}},
  volume      ={780},
  year        ={1993}
}
@inproceedings{Newe91,
  address     ={Davis, California},
  author      ={M.C. Newe},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Newe91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={380--383},
  publisher   ={IEEE Computer Society Press},
  title       ={Proof Based Computation},
  year        ={1991}
}
@inproceedings{NiMa96,
  address     ={Paris, France},
  author      ={R. Niemann and P. Marwedel},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={NiMa96},
  month       ={March},
  pages       ={473--480},
  publisher   ={{IEEE} Computer Society Press (Los Alamitos, California)},
  title       ={Hardware/Software Partitioning Using Integer programming},
  year        ={1996}
}
@inproceedings{NiPi94,
  address     ={Grenoble, France},
  author      ={F. Nicoli and L. Pierre},
  booktitle   ={European Design Automation Conference },
  key         ={NiPi94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={560--565},
  publisher   ={IEEE Computer Society Press},
  title       ={{F}ormal {V}erification of {B}ehavioural {VHDL} {S}pecifications: {A} {C}ase {S}tudy},
  year        ={1994}
}
@inproceedings{NiWe82,
  author      ={T. Nipkow and G. Weikum},
  booktitle   ={Conference on Theoretical Computer Science},
  key         ={NiWe82},
  keyword     ={Rewrite},
  pages       ={257--268},
  publisher   ={Springer-Verlag},
  title       ={A decidability result about sufficient completeness of axiomatically specified abstract data types},
  year        ={1982}
}
@inproceedings{NiWo97,
  address     ={Santa Barbara},
  author      ={U. Nitsche and P. Wolper},
  booktitle   ={{ACM} Symposium on Principles of Distributed Computing},
  key         ={NiWo97},
  month       ={August},
  title       ={Relative Liveness and Behavior Abstraction},
  year        ={1997}
}
@phdthesis{Nieb97,
  author      ={P. Niebert},
  key         ={Nieb97},
  school      ={University of Hildesheim, Germany},
  title       ={A Temporal Logic for the Specification and Verification of Distributed Behaviour},
  year        ={1997}
}
@article{Niel82,
  author      ={F. Nielson},
  journal     ={Acta Informatica},
  key         ={Niel82},
  pages       ={265-287},
  title       ={A denotional framework for data flow analysis},
  volume      ={18},
  year        ={1982}
}
@inproceedings{Niwi88,
  address     ={Washington, D.C.},
  author      ={D. Niwinski},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={Niwi88},
  month       ={July},
  pages       ={402--409},
  publisher   ={IEEE Computer Society Press},
  title       ={Fixed Points vs. Infinite Generation},
  year        ={1988}
}
@inproceedings{NoMa89,
  author      ={L. Nowak and P. Marwedel},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={NoMa89},
  pages       ={441-447},
  title       ={Verification of Hardware Descriptions by Retargetable Code Generation},
  year        ={1989}
}
@inproceedings{OHMS84,
  author      ={J. Ousterhout and G.T. Hamachi and R.N. Mayo and W. Scott and G.S. Taylor},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={OHMS84},
  pages       ={152--159},
  title       ={Magic: A {VLSI} layout system},
  year        ={1984}
}
@inproceedings{OOMH93,
  address     ={Paris, France},
  author      ={S. Oguri and T. Okabe and S. Murai and S. Hosomi and H. Uzaki},
  booktitle   ={European Design Automation Conference },
  editor      ={C.O. Newton and M. Heydeman},
  key         ={OOMH93},
  month       ={February},
  pages       ={460--465},
  publisher   ={IEEE Computer Society Press},
  title       ={A Skew Assumption Logic Simulation Technique for Potential Spike Detection},
  year        ={1993}
}
@inproceedings{ORRS96,
  address     ={New Brunswick, NJ, USA},
  author      ={S. Owre and S. Rajan and J. M. Rushby and N. Shankar and M. K. Srivas},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={ORRS96},
  month       ={July/August},
  pages       ={411--414},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{PVS}: Combining specification, proof checking, and model checking},
  volume      ={1102},
  year        ={1996}
}
@article{ORSH95,
  author      ={S. Owre and J. Rushby and N. Shankar and F.W. von Henke},
  journal     ={IEEE Transactions on Software Engineering},
  key         ={ORSH95},
  pages       ={107--125},
  title       ={Formal {V}erification for {F}ault-{T}olerant {A}rchitectures: {P}rolegomena to the {D}esign of {PVS}},
  volume      ={February},
  year        ={1995}
}
@inproceedings{ORSS94,
  address     ={Bad Herrenalb, Germany},
  author      ={S. Owre and J.M. Rushby and N. Shankar and M.K. Srivas},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={ORSS94},
  keyword     ={tpcd94},
  month       ={September},
  note        ={published 1995},
  pages       ={258--279},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Tutorial on Using {PVS} for Hardware Verification},
  volume      ={901},
  year        ={1994}
}
@techreport{ObFl94,
  address     ={Stanford, CA 94305-2140},
  author      ={S.F. Oberman and M.J. Flynn},
  institution ={Dept. of Computer Science, Stanford University},
  key         ={ObFl94},
  month       ={December},
  number      ={CSL-TR-94-647},
  title       ={Design {I}ssues in {F}loating-{P}oint {D}ivision},
  year        ={1994}
}
@inproceedings{OcIY91,
  address     ={Los Alamitos, CA},
  author      ={H. Ochi and N. Ishiura and S. Yajima},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={OcIY91},
  keyword     ={formalism propositionallogic BDD},
  month       ={June},
  organization={ACM/IEEE},
  pages       ={413--416},
  publisher   ={IEEE Computer Society Press},
  title       ={Breadth-First Manipulation of {SBDD} of Boolean Functions for Vector Processing},
  year        ={1991}
}
@inproceedings{OcYY93,
  address     ={Santa Clara, California},
  author      ={H. Ochi and K. Yasuoka and S. Yajima},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={OcYY93},
  keyword     ={BDD},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={48--57},
  publisher   ={IEEE Computer Society Press},
  title       ={{B}readth-{F}irst {M}anipulation of {V}ery {L}arge {B}inary-{D}ecision {D}iagrams},
  year        ={1993}
}
@manual{Octt91,
  key         ={Octt91},
  keyword     ={hardware verification general},
  month       ={October},
  organization={University of California, Berkeley},
  title       ={Octtools Version 5.0},
  year        ={1991}
}
@inproceedings{Oczk96,
  address     ={Dresden, Germany},
  author      ={C. Oczko},
  booktitle   ={SIG-VHDL Spring '96 Working Conference},
  editor      ={W. Ecker},
  key         ={Oczk96},
  keyword     ={VHDL formalsynthesis},
  month       ={May},
  pages       ={121--132},
  publisher   ={Shaker Verlag},
  remark      ={ISBN: 3-8265-1462-9},
  title       ={Embedding of {VHDL} into a Formal Specification Environment},
  year        ={1996}
}
@inproceedings{OlCo93,
  address     ={Arles, France},
  author      ={S. Olcoz and J.M. Colom},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={OlCo93},
  keyword     ={verification VHDL},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={15--26},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Petri Net Approach for the Analysis of {VHDL} Descriptions},
  volume      ={683},
  year        ={1993}
}
@article{OlCo95,
  author      ={S. Olcoz and J.M. Colom},
  journal     ={Formal Methods in System Design},
  key         ={OlCo95},
  keyword     ={VHDL},
  month       ={August},
  note        ={Kluwer Academic Publishers, ISSN: 0925-9856},
  number      ={1/2},
  pages       ={101--124},
  title       ={{A} {C}olored {P}etri {N}et {M}odel of {VHDL}},
  volume      ={7},
  year        ={1995}
}
@inproceedings{OlSY94,
  address     ={Standford, California, USA},
  author      ={A. Olivero and J. Sifakis and S. Yovine},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={OlSY94},
  month       ={June},
  pages       ={81-94},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Using Abstractions for the Verification of Linear Hybrid Systems},
  volume      ={818},
  year        ={1994}
}
@incollection{Olco95a,
  address     ={Madrid, Spain},
  author      ={S. Olcoz},
  booktitle   ={Formal Semantics for {VHDL}},
  chapter     ={5},
  editor      ={C. {Delgado Kloos} and P.T. Breuer},
  key         ={Olco95a},
  keyword     ={VHDL},
  month       ={March},
  publisher   ={Kluwer Academic Publishers},
  series      ={The Kluwer international series in engineering and computer science},
  title       ={A Formal Model of {VHDL} Using Colored Petri Nets},
  volume      ={307},
  year        ={1995}
}
@inproceedings{OpSu86,
  author      ={F. Oppacher and E. Suen},
  booktitle   ={Conference on Automated Deduction (CADE)},
  key         ={OpSu86},
  pages       ={384-393},
  publisher   ={Springer-Verlag},
  title       ={Controlling deduction with proof condensation and heuristics},
  year        ={1986}
}
@article{OpSu88,
  author      ={F. Oppacher and E. Suen},
  journal     ={Journal of Automated Reasoning},
  key         ={OpSu88},
  keyword     ={Logic},
  pages       ={69--100},
  title       ={{HARP}: A Tableau-Based Theorem Prover},
  volume      ={4},
  year        ={1988}
}
@inproceedings{OrGa86,
  author      ={A. Orailoglu and D.D. Gajski},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={OrGa86},
  keyword     ={flowgraph},
  organization={ACM/IEEE},
  pages       ={263--270},
  title       ={F multi-paradigm approach to automatic data path synthesis},
  year        ={1986}
}
@article{Orlo69,
  author      ={E. Orlowska},
  journal     ={Bulletin de l'Academie polonaise des sciences math. astr.},
  key         ={Orlo69},
  number      ={3},
  pages       ={117-119},
  title       ={Automatic Theorem Proving in a Certain Class of Formulae of Predicate Calculus},
  volume      ={17},
  year        ={1969}
}
@techreport{Ostr89,
  author      ={J.S. Ostroff},
  institution ={University of Toronto},
  key         ={Ostr89},
  month       ={September},
  number      ={8618},
  title       ={Real-Time Computer Control of Discrete Event Systems Modeled by Extended State Machines: A Temporal Logic Approach},
  year        ={1989}
}
@inproceedings{Ostr89a,
  address     ={Grenoble, France},
  author      ={J.S. Ostroff},
  booktitle   ={International Workshop on Automatic Verification Methods for Finite State Systems},
  key         ={Ostr89a},
  pages       ={247--256},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Automated Verification of Timed Transition Models},
  volume      ={407},
  year        ={1989}
}
@article{Ostr90,
  author      ={J.S. Ostroff},
  journal     ={IEEE Transaction on Parallel and Distributed Systems},
  key         ={Ostr90},
  keyword     ={hardware modelling transpositionsystem verification specification logic realtime},
  month       ={April},
  number      ={2},
  pages       ={170--183},
  title       ={Deciding Properties of Timed Transition Models},
  volume      ={1},
  year        ={1990}
}
@article{Ostr90a,
  author      ={J.S. Ostroff},
  journal     ={Research Studies Press},
  key         ={Ostr90a},
  title       ={{T}emporal {L}ogic of {R}eal-{T}ime {S}ystems},
  year        ={1990}
}
@inproceedings{Ostr91,
  address     ={Mook, Netherlands},
  author      ={J.S. Ostroff},
  booktitle   ={Real-Time: Theory in Practice},
  key         ={Ostr91},
  month       ={June},
  pages       ={573--602},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification of Safety Critical Systems Using {TTM/RTTL}},
  volume      ={600},
  year        ={1991}
}
@techreport{Ostr94a,
  author      ={J.S. Ostroff},
  institution ={Department of Computer Science, York University},
  key         ={Ostr94a},
  keyword     ={hardware specification logic realtime},
  number      ={CS-ETR-94-08},
  title       ={Specifying and Verifying Real-Time Reactive Systems in {TTM/RTTL}},
  year        ={1994}
}
@book{OtWi94,
  author      ={D.E. Ott and T.J. Wilderotter},
  key         ={OtWi94},
  keyword     ={textbook},
  publisher   ={Kluwer Academic Publishers},
  title       ={A Designer's Guide to {VHDL} Synthesis},
  year        ={1994}
}
@inproceedings{Oust84,
  author      ={J.K. Ousterhout},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={Oust84},
  keyword     ={hardware abstraction timing},
  organization={IEEE},
  pages       ={489--495},
  title       ={Switch-Level Delay Models for Digital {MOS} {VLSI}},
  year        ={1984}
}
@inproceedings{OvHa88,
  author      ={D. Overhauser and I. Hajj},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={OvHa88},
  keyword     ={hardware abstraction timing simulation discrete},
  organization={IEEE},
  pages       ={70--73},
  title       ={A Tabular Macromodeling Approach to Fast Timing Simulation Including Parasitics},
  year        ={1988}
}
@article{OwLa92,
  author      ={S. Owicki and L. Lamport},
  journal     ={{ACM} Transactions on Programming Languages and Systems},
  key         ={OwLa92},
  month       ={July},
  number      ={3},
  pages       ={455--495},
  title       ={Proving Liveness Properties of Concurrent Programs},
  volume      ={4},
  year        ={1992}
}
@inproceedings{OwRS92,
  address     ={Saratoga, NY},
  author      ={S. Owre and J.M. Rushby and N. Shankar},
  booktitle   ={Conference on Automated Deduction (CADE)},
  editor      ={D. Kapur},
  key         ={OwRS92},
  pages       ={748--752},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Artificial Intelligence},
  title       ={{PVS}: A {P}rototype {V}erification {S}ystem},
  volume      ={June},
  year        ={1992}
}
@techreport{OwRS95,
  address     ={Menlo Park, CA},
  author      ={S. Owre and J. Rushby and N. Shankar},
  institution ={Computer Science Laboratory, SRI International},
  key         ={OwRS95},
  month       ={July},
  number      ={SRI-CSL-95-12},
  title       ={Analyzing {T}abular and {S}tate-{T}ransition {S}pecifications in {PVS}},
  year        ={1995}
}
@inproceedings{OwRS97,
  address     ={Enschede, The Netherlands},
  author      ={S. Owre and J. Rushby and N. Shankar},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={OwRS97},
  pages       ={366-383},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={Integration in {PVS}: Tables, Types, and Model Checking},
  year        ={1997}
}
@inproceedings{PLAK92,
  address     ={Leuven, Belgium},
  author      ={J. Pan and K.N. Levitt and M. Archer and S. Kalvala},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={PLAK92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={427--448},
  publisher   ={North-Holland},
  title       ={Towards a Formal Verification of a Floating Point},
  year        ={1992}
}
@inproceedings{PSAB94,
  address     ={San Jose, California},
  author      ={C. Pixley and V. Singhal and A. Aziz and R.K. Brayton},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={PSAB94},
  keyword     ={formal_verification},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={442--449},
  publisher   ={IEEE Computer Society Press},
  title       ={{M}ulti-{L}evel {S}ynthesis for {S}afe {R}eplaceability},
  year        ={1994}
}
@inproceedings{PYBJ95,
  address     ={Austin, Texas},
  author      ={M. Pandey and G. York and D. Beatty and A. Jain and S. Jain and R.E. Bryant},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={PYBJ95},
  keyword     ={verification},
  month       ={October},
  organization={Treacom, Motorola, CMU, DEC},
  title       ={{E}xtraction of {F}inite {S}tate {M}achines from {T}ransistor {N}etlists by {S}ymbolic {S}imulation},
  year        ={1995}
}
@inproceedings{PaDi96,
  address     ={New Brunswick, NJ, USA},
  author      ={S. Park and D. L. Dill},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={PaDi96},
  month       ={July/August},
  pages       ={300--310},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Protocol Verification by Aggregation of distributed Transactions},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{PaDi96a,
  address     ={Padua, Italy},
  author      ={S. Park and D.L. Dill},
  booktitle   ={{ACM} Symposium on Parallel Algorithms and Architectures},
  key         ={PaDi96a},
  month       ={June},
  pages       ={288--296},
  title       ={Verification of the {FLASH} {C}ache {C}oherence {P}rotocol by {A}ggregation of {D}istributed {T}ransactions},
  year        ={1996}
}
@inproceedings{PaFW92,
  address     ={Laguna Nigel, California},
  author      ={M. Payer and T. Filkorn and P. Warkentin},
  booktitle   ={International Workshop on High-Level Synthesis},
  key         ={PaFW92},
  title       ={Symbolic verification of sequential circuits synthesized with {CALLAS}},
  year        ={1992}
}
@techreport{PaHe94a,
  author      ={H. Pargmann and R. Herrmann},
  institution ={OFFIS},
  key         ={PaHe94a},
  title       ={Efficient Symbolic Transition Systems for {VHDL}},
  year        ={1994}
}
@techreport{PaHe94b,
  author      ={H. Pargmann and R. Herrmann},
  institution ={OFFIS},
  key         ={PaHe94b},
  title       ={Symbolic Transition Systems for {VHDL} Specifications},
  year        ={1994}
}
@inproceedings{PaHe95,
  address     ={Passau},
  author      ={H. Pargmann and R. Herrmann},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden beim Entwurf von Hardwaresystemen},
  editor      ={W. Grass and M. Mutz},
  key         ={PaHe95},
  keyword     ={3GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={32--40},
  publisher   ={Shaker Verlag},
  series      ={Berichte aus der Informatik},
  title       ={{R}educed {S}ymbolic {T}ransition {S}ystems for {VHDL}},
  year        ={1995}
}
@techreport{PaNi90,
  address     ={Cambridge},
  author      ={L. Paulson and T. Nipkow},
  institution ={University of Cambridge Computer Laboratory},
  key         ={PaNi90},
  keyword     ={formalism higherorderlogic HOL tutorial},
  month       ={January},
  number      ={189},
  title       ={Isabelle tutorial and user's manual},
  year        ={1990}
}
@article{PaPe85,
  author      ={M. Parigot and M. Pelz},
  journal     ={Theoretical Computer Science},
  key         ={PaPe85},
  keyword     ={omega},
  pages       ={155--169},
  title       ={A logical approach of Petri net languages},
  volume      ={39},
  year        ={1985}
}
@inproceedings{PaRM92,
  author      ={A. Pancholy and J. Rajski and L.J. McNaughton},
  booktitle   ={{IEEE} Design \& Test of Computers},
  key         ={PaRM92},
  organization={IEEE},
  pages       ={72--83},
  title       ={{F}ault {M}odels in {CMOS} {VLSI} {C}ircuits},
  year        ={1992}
}
@inproceedings{PaSP94,
  address     ={San Jose, California},
  author      ={S. Panda and F. Somenzi and B.F. Plessier},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={PaSP94},
  keyword     ={BDD},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={628--631},
  publisher   ={IEEE Computer Society Press},
  title       ={{S}ymmetry {D}etection and {D}ynamic {V}ariable {O}rdering of {D}ecision {D}iagrams},
  year        ={1994}
}
@article{PaWe78,
  author      ={M.S. Paterson and M.N. Wegman},
  journal     ={Journal of Computer and System Sciences},
  key         ={PaWe78},
  keyword     ={Logic},
  pages       ={181--186},
  title       ={Linear Unification},
  volume      ={16},
  year        ={1978}
}
@inproceedings{PaYa97,
  address     ={Enschede, The Netherlands},
  author      ={A.N. Parashkevov and J. Yantchev},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={PaYa97},
  pages       ={50-64},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={State Efficient Reachability Analysis Through Use of Pseudo-Root States},
  year        ={1997}
}
@techreport{Pail85,
  address     ={Grenoble},
  author      ={J.-L. Paillet},
  institution ={IMAG-ARTEMIS},
  key         ={Pail85},
  keyword     ={hardware registertransferlevel verification Benchmarks},
  month       ={June},
  number      ={546},
  title       ={{Un} {Modele} de {Fonctions} {Sequentielles} pour la {Verification} {Formelle} de {Systemes} {Digitaux}},
  year        ={1985}
}
@inproceedings{Pail86,
  author      ={J.-L. Paillet},
  booktitle   ={From {HDL} Descriptions to Guaranteed Correct Circuit Designs},
  editor      ={D. Borrione},
  key         ={Pail86},
  pages       ={21-42},
  publisher   ={North-Holland},
  title       ={A functional model for descriptions and specifications of digital devices},
  year        ={1986}
}
@inproceedings{Pari78,
  author      ={R. Parikh},
  booktitle   ={{IEEE} Symposium on Foundations of Computer Science},
  key         ={Pari78},
  pages       ={177--183},
  title       ={A Decidability Result for Second Order Process Logic},
  year        ={1978}
}
@incollection{Park70,
  author      ={D. Park},
  booktitle   ={Machine Intelligence},
  editor      ={B. Melzer and D. Michie},
  key         ={Park70},
  pages       ={59--78},
  publisher   ={Edinburgh University Press},
  title       ={Fixpoint Induction and Proof of Program Semantics},
  volume      ={5},
  year        ={1970}
}
@techreport{Park74,
  address     ={Warwick, England},
  author      ={D. Park},
  institution ={University of Warwick},
  key         ={Park74},
  number      ={3},
  title       ={Finiteness is Mu-ineffable},
  type        ={Theory of Computation Report},
  year        ={1974}
}
@inproceedings{Park80,
  address     ={Berlin},
  author      ={D. Park},
  booktitle   ={Abstract Software Specification},
  key         ={Park80},
  pages       ={504--524},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={On The Semantics of Fair Parallelism},
  volume      ={86},
  year        ={1980}
}
@inproceedings{Park81,
  address     ={New York},
  author      ={D. Park},
  booktitle   ={{GI}-Conference on Theoretical Computer Science},
  key         ={Park81},
  pages       ={167--183},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Concurrency and Automata on Infinite Sequences},
  volume      ={104},
  year        ={1981}
}
@inproceedings{Parn71,
  author      ={D. Parnas},
  booktitle   ={{IFIP} Congress},
  key         ={Parn71},
  keyword     ={verification},
  pages       ={339--344},
  title       ={Information distribution aspects of design methodology},
  year        ={1971}
}
@inproceedings{Parn77,
  author      ={D. Parnas},
  booktitle   ={{IFIP} Congress},
  key         ={Parn77},
  keyword     ={verification},
  pages       ={861--867},
  title       ={The use of precise specifications in the development of software},
  year        ={1977}
}
@inproceedings{Parn93,
  address     ={Vancouver, Canada},
  author      ={D. Parnas},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Parn93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={154--162},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Some Theorems We Should Prove},
  volume      ={780},
  year        ={1993}
}
@incollection{Parn95,
  author      ={D.L. Parnas},
  booktitle   ={Applications of Formal Methods},
  chapter     ={2},
  editor      ={Michael G. Hinchey and Jonathan P. Bowen},
  key         ={Parn95},
  pages       ={17--31},
  publisher   ={Prentice Hall},
  series      ={International Series in Computer Science},
  title       ={Using {M}athematical {M}odels in the {I}nspection of {C}ritical {S}oftware},
  year        ={1995}
}
@techreport{Paul84,
  author      ={L. Paulson},
  institution ={University of Cambridge Computer Laboratory},
  key         ={Paul84},
  month       ={August},
  number      ={50},
  title       ={Verifying the Unification Algorithm in {LCF}},
  type        ={Technical Report},
  year        ={1984}
}
@article{Paul86,
  author      ={L.C. Paulson},
  journal     ={Journal of Symbolic Logic Programming},
  key         ={Paul86},
  keyword     ={Logic},
  pages       ={237--258},
  title       ={Natural Deduction as higher-order resolution},
  volume      ={3},
  year        ={1986}
}
@book{Paul91,
  author      ={L.C. Paulson},
  key         ={Paul91},
  keyword     ={ML SML},
  publisher   ={Cambridge University Press},
  title       ={{ML} for the Working Programmer},
  year        ={1991}
}
@book{Paul94,
  author      ={L. Paulson},
  key         ={Paul94},
  keyword     ={Isabelle HOL},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{I}sabelle: {A} {G}eneric {T}heorem {P}rover},
  volume      ={828},
  year        ={1994}
}
@inproceedings{Paye87,
  address     ={M\"{u}nchen},
  author      ={M. Payer},
  booktitle   ={Microprocessing and Microprogramming},
  key         ={Paye87},
  keyword     ={hardware abstraction logic switchlevel},
  organization={Euromicro 87},
  pages       ={445--452},
  publisher   ={North-Holland},
  title       ={{V}erification and {V}alidation of {H}ierarchical {CMOS} {G}ate {A}rray {L}ayouts},
  year        ={1987}
}
@inproceedings{PeCM89,
  author      ={S. Perremans and L. Claesen and H. De Man},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={PeCM89},
  keyword     ={verification},
  pages       ={568--573},
  title       ={Static timing analysis of dynamically sensitizable paths},
  year        ={1989}
}
@inproceedings{PeHo94,
  address     ={Grenoble, France},
  author      ={M.A. Perkowski and P. Ho},
  booktitle   ={European Design Automation Conference },
  key         ={PeHo94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={8--13},
  publisher   ={IEEE Computer Society Press},
  title       ={{F}ree {K}ronecker {D}ecision {D}iagrams and their {A}pplication to {A}tmel 6000 {S}eries {FPGA} {M}apping},
  year        ={1994}
}
@inproceedings{PeLe97,
  address     ={Grenoble, France},
  author      ={S. Petersson and B. Lennartson},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={PeLe97},
  pages       ={240-254},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Controller Design of Hybrid Systems},
  year        ={1997}
}
@book{PeMi93,
  author      ={W.B. Pennebaker and J.L. Mitchell},
  key         ={PeMi93},
  publisher   ={Van Nostrand Reinhold, ISBN 0-442-01272-1},
  title       ={{JPEG} Still Image Data Compression Standard},
  year        ={1993}
}
@article{PePi86,
  author      ={D. Perrin and J.E. Pin},
  journal     ={Journal of Computer and System Sciences},
  key         ={PePi86},
  keyword     ={omega},
  pages       ={393--406},
  title       ={First order logic and star free sets},
  volume      ={32},
  year        ={1986}
}
@article{PeRo94,
  author      ={G. Pelz and U. Roettcher},
  journal     ={IEEE Transcations on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={PeRo94},
  keyword     ={hardware gatelevel verification registertransferlevel},
  month       ={February},
  number      ={2},
  pages       ={264--276},
  title       ={Pattern Matching and Refinement Hybrid Approach to Circuit Comparison},
  volume      ={13},
  year        ={1994}
}
@inproceedings{PeSc86,
  author      ={D. Perrin and P.E. Schupp},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={PeSc86},
  keyword     ={omega},
  pages       ={301-304},
  title       ={Automata on the integers, recurrence distinguishability, and the equivalence and decidability of monadic theories},
  year        ={1986}
}
@inproceedings{PeSi96,
  address     ={Oxford},
  author      ={J. Peleska and M. Siegel},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={PeSi96},
  month       ={March},
  pages       ={538-556},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{F}rom {T}esting {T}heory to {T}est {D}river {I}mplementation},
  volume      ={1051},
  year        ={1996}
}
@article{PeSt81,
  author      ={G. Peterson and M.E. Stickel},
  journal     ={Journal of the {ACM}},
  key         ={PeSt81},
  keyword     ={Rewrite},
  pages       ={223--264},
  title       ={Complete sets of reductions for some equational theories},
  volume      ={28},
  year        ={1981}
}
@inproceedings{PeWW96,
  address     ={Pisa},
  author      ={D. Peled and T. Wilke and P. Wolper},
  booktitle   ={International Conference on Concurrency Theory (CONCUR)},
  key         ={PeWW96},
  month       ={August},
  pages       ={596--610},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={An  Algorithmic Approach for Checking Closure Properties of omega-Regular Languages},
  volume      ={1119},
  year        ={1996}
}
@article{Pecu86,
  author      ={J.P. P\'{e}cuchet},
  journal     ={Theoretical Computer Science},
  key         ={Pecu86},
  keyword     ={omega},
  pages       ={95--98},
  title       ={On the complementation of B\"{u}chi automata},
  volume      ={47},
  year        ={1986}
}
@inproceedings{Pele94,
  address     ={Standford, California, USA},
  author      ={D. Peled},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={Pele94},
  month       ={June},
  pages       ={377--390},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Combining Partial Order Reductions with On-the-Fly Model-Checking},
  volume      ={818},
  year        ={1994}
}
@inproceedings{Pele96,
  address     ={Oxford},
  author      ={J. Peleska},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={Pele96},
  month       ={March},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{T}est {A}utomation {F}or {S}afety-{C}ritical {S}ystems: {I}ndustrial {A}pplication {A}nd {F}uture {D}evelopments},
  volume      ={1051},
  year        ={1996}
}
@article{Pell86,
  author      ={F.J. Pelletier},
  journal     ={Journal of Automated Reasoning},
  key         ={Pell86},
  keyword     ={Logic},
  pages       ={191--216},
  title       ={Seventy-Five Problems for Testing Automatic Theorem Provers},
  volume      ={2},
  year        ={1986}
}
@inproceedings{Penc97,
  address     ={Enschede, The Netherlands},
  author      ={W. Penczek},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={Penc97},
  pages       ={145-164},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={Model Checking for a Subclass of Event Structures},
  year        ={1997}
}
@inproceedings{Peng86,
  author      ={Z. Peng},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={Peng86},
  keyword     ={flowgraph},
  organization={ACM/IEEE},
  pages       ={278--284},
  title       ={Synthesis of {VLSI}-systems with the {CAMAD} design aid},
  year        ={1986}
}
@inbook{Perr84,
  author      ={D. Perrin},
  chapter     ={Recent results on automata and infinite words},
  key         ={Perr84},
  keyword     ={omega},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Mathematical Foundation of Computer Science},
  year        ={1984}
}
@inbook{Perr90,
  author      ={D. Perrin},
  chapter     ={Finite automata},
  key         ={Perr90},
  keyword     ={omega},
  publisher   ={North-Holland, Amsterdam},
  title       ={Handbook of Theoretical Computer Science},
  volume      ={B},
  year        ={1990}
}
@book{Perr91,
  address     ={New York},
  author      ={D.L. Perry},
  key         ={Perr91},
  publisher   ={McGraw-Hill},
  title       ={{VHDL}},
  year        ={1991}
}
@article{Pete81,
  author      ={G. L. Peterson},
  journal     ={Information Processing Letters},
  key         ={Pete81},
  number      ={3},
  pages       ={115--116},
  title       ={Myths about the Mutual Exclusion Problem},
  volume      ={12},
  year        ={1981}
}
@inproceedings{Pete93,
  address     ={Vancouver, Canada},
  author      ={K.D. Petersen},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Pete93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={16--29},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Graph model of {LAMBDA} in Higher-Order Logic},
  volume      ={780},
  year        ={1993}
}
@inproceedings{PhSc97,
  address     ={Toledo, Spain},
  author      ={J. Philipps and P. Scholz},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={PhSc97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={System-level hardware design with mu-charts},
  year        ={1997}
}
@inproceedings{PiBP91,
  address     ={Cambridge, MA},
  author      ={C. Pixley and G. Beihl and E. Pacas-Skewes},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={PiBP91},
  month       ={October},
  pages       ={245--249},
  title       ={Automatic Derivation of {FSM} Specification to Implementation Encoding},
  year        ={1991}
}
@techreport{PiBe90,
  address     ={Austin, Texas},
  author      ={C. Pixley and G. Beihl},
  institution ={Microelectronics and Computer Technology Corporation(MCC)},
  key         ={PiBe90},
  keyword     ={formalism fsm symbolic_state_traversal BDD hardware gatelevel verification},
  number      ={CAD 448-89},
  title       ={A Computational Theory and Implementation of Sequential Hardware Equivalence},
  year        ={1990}
}
@article{PiBo85,
  author      ={R. Piloty and D. Borrione},
  journal     ={IEEE Computer},
  key         ={PiBo85},
  keyword     ={HDL CONLAN verification},
  month       ={February},
  pages       ={81--92},
  title       ={The {CONLAN} project: concepts, implementations and applications},
  year        ={1985}
}
@inproceedings{PiJH92,
  author      ={C. Pixley and S.-W. Jeong and G.D. Hachtel},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={PiJH92},
  keyword     ={formalism fsm symbolic_state_traversal BDD},
  pages       ={620--623},
  title       ={Exact Calculation of Synchronization Sequences Based on Binary Decision Diagrams},
  year        ={1992}
}
@inproceedings{PiSa96,
  address     ={New Brunswick, NJ, USA},
  author      ={M. Pistore and D. Sangiorgi},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={PiSa96},
  month       ={July/August},
  pages       ={38--49},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Partition Refinement Algorithm for the Pi-Calculus},
  volume      ={1102},
  year        ={1996}
}
@article{PiSt83,
  author      ={V. Pitchumani and E.P. Stabler},
  journal     ={Transactions on Computers},
  key         ={PiSt83},
  month       ={December},
  number      ={12},
  pages       ={1073-1080},
  title       ={An inductive Assertion Method for Register Transfer Level Design Verification},
  volume      ={C-32},
  year        ={1983}
}
@inproceedings{PiWo84,
  author      ={S. Pinter and P. L. Wolper},
  booktitle   ={{ACM} Symposium on Principles of Distributed Computing},
  key         ={PiWo84},
  pages       ={28--37},
  title       ={A Temporal Logic for Reasoning about partially ordered Computations},
  year        ={1984}
}
@inproceedings{Pier90,
  author      ={L. Pierre},
  booktitle   ={{IFIP} International Workshop on Applied Formal Methods for Correct {VLSI} Design},
  editor      ={L. Claesen},
  key         ={Pier90},
  pages       ={329-348},
  title       ={The formal proof of sequential circuits described in {CASCADE} using the {B}oyer-{M}oore theorem prover},
  year        ={1990}
}
@incollection{Pier91,
  address     ={Marseille},
  author      ={L. Pierre},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Borrione and R. Waxman},
  key         ={Pier91},
  keyword     ={HDL verification},
  month       ={April},
  pages       ={21--41},
  publisher   ={North-Holland},
  title       ={From a {HDL} Description to Formal Proof Systems: Principles and Mechanization},
  year        ={1991}
}
@inproceedings{Pier93,
  address     ={Ottawa, Canada},
  author      ={L. Pierre},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Pier93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={213--230},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={{VHDL} Description and Formal Verification of Systolic Multipliers},
  year        ={1993}
}
@inproceedings{Pier94,
  address     ={Bad Herrenalb, Germany},
  author      ={L. Pierre},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={Pier94},
  keyword     ={tpcd94},
  month       ={September},
  note        ={published 1995},
  pages       ={72--91},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={An Automatic Generalization Method for the Inductive Proof of Replicated and Parallel Architectures},
  volume      ={901},
  year        ={1994}
}
@inproceedings{Pier95,
  address     ={Marseille University, France},
  author      ={L. Pierre},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={Pier95},
  keyword     ={theorem_proving},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={35--55},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Describing and verifying synchronous circuits with the {B}oyer-{M}oore theorem prover},
  volume      ={987},
  year        ={1995}
}
@article{Pilo74,
  author      ={R. Piloty},
  journal     ={IEEE Computer},
  key         ={Pilo74},
  keyword     ={HDL},
  month       ={December},
  pages       ={57--59},
  title       ={Hardware Description Languages in the {F}ederal {R}epublic of {G}ermany},
  year        ={1974}
}
@inproceedings{Pixl90,
  address     ={Rutgers University},
  author      ={C. Pixley},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={R. Kurshan and E. Clarke},
  key         ={Pixl90},
  month       ={June},
  title       ={{A} {C}omputational {T}heory and {I}mplementation of {S}equential {H}ardware {E}quivalence},
  year        ={1990}
}
@inproceedings{Pixl91,
  address     ={Providence, RI},
  author      ={C. Pixley},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  key         ={Pixl91},
  pages       ={293--320},
  title       ={{A} {C}omputational {T}heory and {I}mplementation of {S}equential {H}ardware {E}quivalence},
  year        ={1991}
}
@article{Pixl92,
  author      ={C. Pixley},
  journal     ={IEEE Transactions on Computer-Aided Design},
  key         ={Pixl92},
  keyword     ={hardware gatelevel verification formalism fsm symbolic_state_traversal BDD},
  month       ={December},
  number      ={12},
  pages       ={1469--1478},
  title       ={{A} {T}heory and {I}mplementation of {S}equential {H}ardware {E}quivalence},
  volume      ={11},
  year        ={1992}
}
@inproceedings{PlCM91,
  address     ={Davis, California},
  author      ={W. Ploegaerts and L. Claesen and H. De Man},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={PlCM91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={358--366},
  publisher   ={IEEE Computer Society Press},
  title       ={Defining Recursive Functions in {HOL}},
  year        ={1991}
}
@article{PlHS94,
  author      ={B. Plessier and G.D. Hachtel and F. Somenzi},
  journal     ={Formal Methods in System Design},
  key         ={PlHS94},
  keyword     ={formalism propositionallogic BDD},
  number      ={2},
  pages       ={167--186},
  title       ={Extended {BDD'}s: Trading off Canonicity for Structure in Verification Algorithms},
  volume      ={4},
  year        ={1994}
}
@article{Plai85,
  author      ={D. Plaisted},
  journal     ={Information and Control},
  key         ={Plai85},
  keyword     ={Rewrite},
  pages       ={182--215},
  title       ={Semantic confluence tests and completion methods},
  volume      ={65},
  year        ={1985}
}
@inproceedings{PnHa88,
  address     ={New York},
  author      ={A. Pnueli and E. Harel},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={M. Joseph},
  key         ={PnHa88},
  keyword     ={hardware verification general},
  pages       ={84--98},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A}pplications of {T}emporal {L}ogic to the {S}pecification of {R}eal {T}ime {S}ystems},
  volume      ={331},
  year        ={1988}
}
@inproceedings{PnRo82,
  author      ={A. Pnueli and W.-P. de Roever},
  booktitle   ={{SIGPLAN} {AdaTEC} Conference on Ada},
  key         ={PnRo82},
  pages       ={129--137},
  publisher   ={ACM Press},
  title       ={{R}endezvous with {A}da: {A} {P}roof-{T}heoretical {V}iew},
  year        ={1982}
}
@inproceedings{PnRo88,
  author      ={A. Pnueli and R. Rosner},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={PnRo88},
  pages       ={179--190},
  title       ={On The Synthesis of a Reactive Module},
  year        ={1988}
}
@article{PnSh81,
  author      ={A. Pnueli and R. Sherman},
  journal     ={Technical Report},
  key         ={PnSh81},
  note        ={The Weizmann Institute},
  pages       ={Cs81-82},
  title       ={Semantic tableau for temporal logik},
  year        ={1981}
}
@inproceedings{PnSh96,
  address     ={New Brunswick, NJ, USA},
  author      ={A. Pnueli and E. Shahar},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={PnSh96},
  month       ={July/August},
  pages       ={184},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Platform Combining Deductive with Algorithmic Verification},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{Pnue77a,
  address     ={New York},
  author      ={A. Pnueli},
  booktitle   ={Symposium on Foundations of Computer Science},
  key         ={Pnue77a},
  keyword     ={hardware verification general transition system temporallogic},
  organization={IEEE},
  pages       ={46--57},
  title       ={The Temporal Logic of Programs},
  volume      ={18},
  year        ={1977}
}
@inproceedings{Pnue77b,
  author      ={A. Pnueli},
  booktitle   ={Symposium on Foundations of Computer Science},
  key         ={Pnue77b},
  title       ={The Temporal semantics of concurrent Programs},
  year        ={1977}
}
@inproceedings{Pnue81,
  author      ={A. Pnueli},
  booktitle   ={Theoretical Computer Science},
  key         ={Pnue81},
  pages       ={45-60},
  title       ={The Temporal Semantics of concurrent Programs},
  volume      ={13},
  year        ={1981}
}
@inproceedings{Pnue83,
  author      ={A. Pnueli},
  booktitle   ={{ACM} Symposium on Theory of Computing},
  key         ={Pnue83},
  pages       ={278--290},
  title       ={On the extremely Fair Termination of Probabilistic Algorithms},
  year        ={1983}
}
@inproceedings{Pnue84,
  address     ={New York},
  author      ={A. Pnueli},
  booktitle   ={Logic and Models of Concurrent Systems},
  editor      ={K. Apt},
  key         ={Pnue84},
  pages       ={123--144},
  publisher   ={Springer-Verlag},
  series      ={{NATO} {ASI} series in Computer and System Sciences},
  title       ={In Transition from Global to Modular Temporal Reasoning about Programs},
  volume      ={13},
  year        ={1984}
}
@inproceedings{Pnue85,
  address     ={New York},
  author      ={A. Pnueli},
  booktitle   ={International Colloquium on Automata, Languages and Programming (ICALP)},
  key         ={Pnue85},
  pages       ={15--32},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Linear and Branching Structures in the Semantics and Logics of Reactive Systems},
  volume      ={194},
  year        ={1985}
}
@inproceedings{Pnue86,
  address     ={New-York},
  author      ={A. Pnueli},
  booktitle   ={Current Trends in Concurrency},
  editor      ={J.W. Baker and W.-P. de Roever and G. Rozenberg},
  key         ={Pnue86},
  pages       ={510--584},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Applications of Temporal Logic to the Specification and Verification of Reactive Systems: A Survey of Current Trends},
  volume      ={224},
  year        ={1986}
}
@inproceedings{Pnue94,
  address     ={L\"{u}beck, Germany},
  author      ={A. Pnueli},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={Pnue94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={77--85},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{D}evelopment of {H}ybrid {S}ystems},
  volume      ={863},
  year        ={1994}
}
@article{PoAr81,
  author      ={G. Pomper and J.R. Armstrong},
  journal     ={IEEE Transactions on Computers},
  key         ={PoAr81},
  month       ={September},
  number      ={9},
  pages       ={674--679},
  title       ={{R}epresentation of {M}ultivalued {F}unctions {U}sing the {D}irect {C}over {M}ethod},
  volume      ={C-30},
  year        ={1981}
}
@inproceedings{PoRe93,
  address     ={Santa Clara, California},
  author      ={I. Pomeranz and S.M. Reddy},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={PoRe93},
  keyword     ={Verification_and_Diagnostics},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={500--507},
  publisher   ={IEEE Computer Society Press},
  title       ={{O}n {D}iagnosis and {C}orrection on {D}esign {E}rrors},
  year        ={1993}
}
@article{PoRe94,
  author      ={I. Pomeranz and S.M. Reddy},
  journal     ={IEEE Transcations on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={PoRe94},
  keyword     ={formalism fsm hardware gatelevel test},
  month       ={March},
  number      ={3},
  pages       ={378--386},
  title       ={{O}n {A}chieving {C}omplete {F}ault {C}overage for {S}equential {M}achines},
  volume      ={13},
  year        ={1994}
}
@inproceedings{PoRe94a,
  address     ={San Diego, CA},
  author      ={I. Pomeranz and S.M. Reddy},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={PoRe94a},
  keyword     ={fault_simulation_and_diagnosis},
  month       ={June},
  note        ={ch. 32.1},
  publisher   ={San Diego Convention Center},
  title       ={{O}n {I}mproving {F}ault {D}iagnosis for {S}ynchronous {S}equential Circuits},
  year        ={1994}
}
@inproceedings{PoRe94b,
  address     ={San Jose, California},
  author      ={I. Pomeranz and S.M. Reddy},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={PoRe94b},
  keyword     ={diagnosis_and_verification},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={568--575},
  publisher   ={IEEE Computer Society Press},
  title       ={{O}n {E}rror {C}orrection in {M}acro-{B}ased {C}ircuits},
  year        ={1994}
}
@inproceedings{PoSc93,
  author      ={J. Posegga and K. Schneider},
  booktitle   ={Workshop on Theorem Proving with Analytic Tableaux and Related Methods},
  key         ={PoSc93},
  keyword     ={SFB358 workshop},
  organization={Max-Planck-Institut f\"{u}r Informatik},
  title       ={{D}eduction with {F}irst-{O}rder {BDD}s},
  year        ={1993}
}
@inproceedings{PoSc94,
  author      ={J. Posegga and K. Schneider},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden im Systementwurf},
  editor      ={H. Eveking},
  key         ={PoSc94},
  keyword     ={SFB358 hardware verification general 2GI/ITG workshop},
  month       ={March},
  organization={GI/ITG},
  publisher   ={Universit\"{a}t Frankfurt, Interner Bericht Nr. 6/94},
  title       ={{A} {F}irst-{O}rder {C}alculus {B}ased on {P}ropositional {BDD}s},
  year        ={1994}
}
@article{Popp67,
  author      ={R.J. Popplestone},
  journal     ={Machine Intelligence},
  key         ={Popp67},
  pages       ={31-46},
  title       ={Beth-tree methods in automatic theorem proving},
  year        ={1967}
}
@phdthesis{Pose93,
  author      ={J. Posegga},
  key         ={Pose93},
  month       ={July},
  school      ={University of Karlsruhe},
  title       ={{D}eduktion mit {S}hannongraphen f\"{u}r die {P}r\"{a}dikatenlogik erster {S}tufe},
  year        ={1993}
}
@inproceedings{Pott92,
  address     ={Leuven, Belgium},
  author      ={G. Pottinger},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Pott92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={81--96},
  publisher   ={North-Holland},
  title       ={A Classical Type Theory with Transfinite Types},
  year        ={1992}
}
@inproceedings{PrLi90,
  author      ={D. K. Probst and H. F. Li},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={R. P. Kurshan and E. M. Clarke},
  key         ={PrLi90},
  month       ={June},
  title       ={Using partial order semantics to avoid the state explosion problem in asynchronous systems},
  year        ={1990}
}
@book{PrLo89,
  author      ={B. Preas and M. Lorenzetti},
  key         ={PrLo89},
  keyword     ={hardware verification general},
  note        ={ISBN 0-8053-0142-9 kostet ?},
  publisher   ={Benjamin Cummings},
  title       ={Physical Design Automation of {VLSI}-Systems},
  year        ={1989}
}
@book{PrWi87,
  address     ={Englewood Cliffs NJ},
  author      ={F. Prosser and D. Winkel},
  edition     ={Second},
  key         ={PrWi87},
  publisher   ={Prentice Hall},
  title       ={The Art of Digital Design},
  year        ={1987}
}
@inproceedings{Pras93a,
  address     ={Vancouver, Canada},
  author      ={W. Prasetya},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Pras93a},
  month       ={August},
  organization={University of British Columbia},
  pages       ={476--490},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={On the Style of Mechanical Proving},
  volume      ={780},
  year        ={1993}
}
@inproceedings{Pras93b,
  address     ={Vancouver, Canada},
  author      ={W. Prasetya},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Pras93b},
  month       ={August},
  organization={University of British Columbia},
  pages       ={324--338},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Formalization of Variables Access Constraints to Support Compositionality of Liveness Properties},
  volume      ={780},
  year        ={1993}
}
@inproceedings{Pras94,
  address     ={Malta},
  author      ={W. Prasetya},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={Pras94},
  month       ={September},
  pages       ={362--377},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Towards a mechanically Supported and Compositional Calculus},
  volume      ={859},
  year        ={1994}
}
@inproceedings{Pras97,
  address     ={Enschede, The Netherlands},
  author      ={I.S.W.B> Prasetya},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={Pras97},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={Mechanically Verified Self-Stabilizing Hierarchical Algorithms},
  year        ={1997}
}
@inproceedings{Prat76,
  author      ={V. Pratt},
  booktitle   ={{IEEE} Symposium on Foundations of Computer Science},
  key         ={Prat76},
  pages       ={109--121},
  title       ={Semantical Considerations on Floyd-Hoare Logic},
  year        ={1976}
}
@inproceedings{Prat79,
  author      ={V. Pratt},
  booktitle   ={{IEEE} Symposium on Foundations of Computer Science},
  key         ={Prat79},
  pages       ={115--122},
  title       ={Models of Program Logics},
  year        ={1979}
}
@inproceedings{Prat81,
  address     ={New York},
  author      ={V. Pratt},
  booktitle   ={Symposium on Foundations of Computer Science},
  key         ={Prat81},
  organization={IEEE},
  pages       ={421--427},
  title       ={A Decidable Mu-calculus},
  year        ={1981}
}
@inproceedings{Prat95,
  author      ={V. Pratt},
  booktitle   ={TAPSOFT'95: Theory and Practice of Software Development},
  editor      ={P.D. Mosses and M. Nielsen and M.I. Schwartzbach},
  key         ={Prat95},
  month       ={May},
  number      ={915},
  pages       ={97--107},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Anatomy of the {P}entium {B}ug},
  year        ={1995}
}
@article{Praw60,
  author      ={D. Prawitz},
  journal     ={Theoria},
  key         ={Praw60},
  title       ={An Improved Proof Procedure},
  volume      ={26},
  year        ={1960}
}
@book{Prio67,
  author      ={A. Prior},
  key         ={Prio67},
  publisher   ={Clarendon Press, Oxford},
  title       ={Past, Present and Future},
  year        ={1967}
}
@article{PuDa60,
  author      ={D. Putnam and R. Davis},
  journal     ={Journal of the ACM},
  key         ={PuDa60},
  keyword     ={Logic},
  number      ={3},
  pages       ={201--215},
  title       ={A computing procedure for quantification theory},
  volume      ={7},
  year        ={1960}
}
@inproceedings{PuJO95,
  address     ={Liege, Belgium},
  author      ={C. Puchol and L.J. Jagadeesan and J. Von Olnhausen},
  booktitle   ={Conference on Computer-Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={PuJO95},
  publisher   ={Springer Verlag},
  title       ={Safety Property Verification of {E}sterel Programs and Applications to Telecommunications Software},
  year        ={1995}
}
@inproceedings{PuMS95,
  address     ={Pisa, Italy},
  author      ={C. Puchol and A.K. Mok and D.A. Stuart},
  booktitle   ={{IEEE} Real-Time Systems Symposium},
  key         ={PuMS95},
  title       ={Compiling Modechart Specifications},
  year        ={1995}
}
@inproceedings{PuMo94,
  author      ={C. Puchol and A.K. Mok},
  booktitle   ={International Workshop on Parallel and Distributed Real-Time Systems},
  key         ={PuMo94},
  title       ={The Integration of Control and Dataflow Structures in Distributed Hard Real-Time Systems},
  year        ={1994}
}
@inproceedings{PuTr96,
  address     ={Oxford},
  author      ={R. Pugliese and E. Tronci},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={PuTr96},
  month       ={March},
  pages       ={425-444},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{A}utomatic {V}erification of a {H}ydroelectric {P}ower {P}lant},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{PuVa94,
  address     ={Standford, California, USA},
  author      ={A. Puri and P. Varaiya},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={PuVa94},
  month       ={June},
  pages       ={95-104},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Decidability of Hybrid Systems with Rectangular Differential Inclusions},
  volume      ={818},
  year        ={1994}
}
@techreport{Puch95,
  author      ={C. Puchol},
  institution ={University of Texas at Austin},
  key         ={Puch95},
  number      ={UTCS-TR95-05},
  title       ={A Solution to the Generalized Railroad Crossing Problem in {E}sterel},
  type        ={Technical Report},
  year        ={1995}
}
@inproceedings{Pusc96,
  address     ={Turku, Finland},
  author      ={C. Pusch},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={Pusc96},
  month       ={August},
  pages       ={347--362},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification of Compiler Correctness for the {WAM}},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{Pygo88,
  address     ={Glasgow, Scotland},
  author      ={C.H. Pygott},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={Pygo88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={211--230},
  publisher   ={North-Holland},
  title       ={{NODEN-HDL:} an Engineering Approach to Hardware Verification},
  year        ={1988}
}
@inproceedings{Qiwe97,
  address     ={Grenoble, France},
  author      ={X. Qiwen},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={Qiwe97},
  pages       ={301-316},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Semantics and Verification of Extended Phase Transition Systems},
  year        ={1997}
}
@inproceedings{QuSi81,
  author      ={J.P. Queille and J. Sifakis},
  booktitle   ={International Symposium in Programming},
  key         ={QuSi81},
  title       ={Specification and Verification of Concurrent Systems in {CESAR}},
  year        ={1981}
}
@inproceedings{QuSi82,
  address     ={New York},
  author      ={J.P. Queille and J. Sifakis},
  booktitle   ={International Symposium in Programming},
  key         ={QuSi82},
  pages       ={337--351},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Specification and Verification of Concurrent Systems in {CESAR}},
  volume      ={137},
  year        ={1982}
}
@article{QuSi83,
  author      ={J.P. Queille and J. Sifakis},
  journal     ={Acta Informatica},
  key         ={QuSi83},
  pages       ={195--220},
  title       ={Fairness and Related Properties in Transition Systems},
  volume      ={19},
  year        ={1983}
}
@inproceedings{RBKM91,
  address     ={Amsterdam},
  author      ={D.E. Ross and K.M. Butler and R. Kapur and M.R. Mercer},
  booktitle   ={European Design Automation Conference },
  key         ={RBKM91},
  keyword     ={Formal_Verification_Techniques},
  month       ={February},
  organization={IEEE},
  pages       ={4--10},
  publisher   ={IEEE Computer Society Press},
  title       ={{F}ast {F}unctional {E}valuation of {C}andidate {OBDD} {V}ariable {O}rdering},
  year        ={1991}
}
@proceedings{REAL91,
  address     ={Mooh, The Netherlands},
  key         ={REAL91},
  keyword     ={hardware asynchronous realtime textbook},
  month       ={June},
  publisher   ={Springer-Verlag},
  title       ={Real-Time: Theory in Practice},
  year        ={1991}
}
@book{RETI91,
  address     ={Mook},
  key         ={RETI91},
  keyword     ={verification transitionsystem},
  month       ={June},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Real-Time: Theory in Practice},
  volume      ={600},
  year        ={1991}
}
@proceedings{REX89,
  address     ={REX Workshop, Mook},
  key         ={REX89},
  keyword     ={verification transitionsystem},
  month       ={May/June},
  publisher   ={Springer-Verlag},
  title       ={Stepwise Refinement of Distributed Systems},
  year        ={1989}
}
@book{ROTH89,
  address     ={University of Illinois},
  author      ={V.B. Rao and D.V. Overhauser and T.N. Trick and I.N. Hajj},
  key         ={ROTH89},
  publisher   ={Kluwer Academic Publishers},
  title       ={{S}witch-{L}evel {T}iming {S}imulation of {MOS} {VLSI} {C}ircuits},
  year        ={1989}
}
@inproceedings{RPHS96,
  address     ={Palo Alto, CA, USA},
  author      ={K. Ravi and A. Pardo and G. D. Hachtel and F. Somenzi},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={RPHS96},
  month       ={November},
  pages       ={49--63},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Modular verification of multipliers},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{RSBT93,
  address     ={Ottawa, Canada},
  author      ={M. Ryba and W. Seibold and U.G. Baitinger and U. Thelen},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={RSBT93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={537--554},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Parameterized {VHDL} entities for the simulation of hybrid circuits},
  year        ={1993}
}
@incollection{RaHR91,
  address     ={Marseille},
  author      ={S. Rajgopal and K. Hedlund and D. Reeves},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Borrione and R. Waxman},
  key         ={RaHR91},
  keyword     ={HDL verification},
  month       ={April},
  pages       ={153--163},
  publisher   ={North-Holland},
  title       ={Integrating Hardware Verification with {CHDL}'s},
  year        ={1991}
}
@inproceedings{RaJS93,
  address     ={Vancouver, Canada},
  author      ={S. Rajan and J.J. Joyce and C.-J.H. Seger},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={RaJS93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={490--502},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={From Abstract Data Types to Shift Registers: A Case Study in Formal Specification and Verification at Differing Levels of Abstraction using Theorem Proving and Symbolic Simulation},
  volume      ={780},
  year        ={1993}
}
@inproceedings{RaJo93,
  address     ={Ottawa, Canada},
  author      ={K. Rath and S.D. Johnson},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={RaJo93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={157--174},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Toward a Basis for Protocol Specification and Process Decomposition},
  year        ={1993}
}
@inproceedings{RaKe80,
  author      ={K. Ramarithram and R. Keller},
  booktitle   ={International Conference on Parallel Processing},
  key         ={RaKe80},
  pages       ={311--321},
  title       ={Specification and Synthesis of Synchronizers},
  year        ={1980}
}
@inproceedings{RaKu93,
  address     ={Paris, France},
  author      ={D.S. Rao and F.J. Kurdahi},
  booktitle   ={European Design Automation Conference },
  editor      ={J.L. van Meerbergen and J. Rabaey},
  key         ={RaKu93},
  month       ={February},
  pages       ={557},
  publisher   ={IEEE Computer Society Press},
  title       ={An Approach to Scheduling and Allocation Using Regularity Extraction},
  year        ={1993}
}
@book{RaOH89,
  author      ={V.B. Rao and D.V. Overhauser and I.N. Hajj},
  key         ={RaOH89},
  keyword     ={hardware abstraction layout switchlevel timing},
  publisher   ={Kluwer Academic Publishers},
  title       ={Switch-Level Timing Simulation of {MOS} {VLSI} Circuits},
  year        ={1989}
}
@inproceedings{RaPA93,
  address     ={Paris, France},
  author      ={S.R. Rao and B.-Y. Pan and J.R. Armstrong},
  booktitle   ={European Design Automation Conference },
  editor      ={A. Ambler},
  key         ={RaPA93},
  month       ={February},
  pages       ={175--183},
  publisher   ={IEEE Computer Society Press},
  title       ={Hierarchical Test Generation for {VHDL} Behavior Models},
  year        ={1993}
}
@article{RaRH93,
  author      ={A.P. Ravn and H. Rischel and K.M. Hansen},
  journal     ={{IEEE} Transactions on Software Engineering},
  key         ={RaRH93},
  month       ={January},
  number      ={1},
  pages       ={41-55},
  title       ={Specifying and verifying requirements of real-time systems},
  volume      ={19},
  year        ={1993}
}
@manual{RaRe92,
  address     ={M\"{u}nchen, Germany},
  key         ={RaRe92},
  organization={Racal-Redac-Design-System GmbH},
  title       ={{VHDL2000} Simulator},
  year        ={1992}
}
@inproceedings{RaSS95,
  address     ={Liege, Belgium},
  author      ={S. Rajan and N. Shankar and M. K. Srivas},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={RaSS95},
  month       ={July},
  pages       ={84--97},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={An Integration of Model Checking with Automated Proof Checking},
  volume      ={939},
  year        ={1995}
}
@inproceedings{RaSc97,
  address     ={Enschede, The Netherlands},
  author      ={J.F. Raskin and P.Y. Schobbens},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={RaSc97},
  pages       ={165-182},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={Real-Time Logic: Fictitious Clock as an Abstraction of Dense Time},
  year        ={1997}
}
@article{Rabi69,
  author      ={M.O. Rabin},
  journal     ={Trans. Amer.Math.Soc.},
  key         ={Rabi69},
  keyword     ={omega},
  pages       ={1--35},
  title       ={Decidability of second-order theories and automata on infinite trees},
  volume      ={141},
  year        ={1969}
}
@article{Rabi72,
  author      ={M.O. Rabin},
  journal     ={Amer.Math.Soc.Providence, RI},
  key         ={Rabi72},
  keyword     ={omega},
  title       ={Automata on Infinite Objects and Church's Problem},
  year        ={1972}
}
@inbook{Rabi77,
  author      ={M.O. Rabin},
  chapter     ={Decidable theories},
  key         ={Rabi77},
  keyword     ={omega},
  publisher   ={North-Holland, Amsterdam},
  title       ={Handbook of Mathematical Logic},
  year        ={1977}
}
@inproceedings{Raja92,
  address     ={Leuven, Belgium},
  author      ={P.S. Rajan},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Raja92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={527--538},
  publisher   ={North-Holland},
  title       ={Executing {HOL} Specifications: Towards an Evalutation Semantics for Classical Higher Order Logic},
  year        ={1992}
}
@book{Ramm89,
  address     ={Stuttgart},
  author      ={F.J. Rammig},
  key         ={Ramm89},
  keyword     ={Design textbook},
  publisher   ={Teubner},
  title       ={Systematischer Entwurf digitaler Systeme},
  year        ={1989}
}
@inproceedings{Ramm93,
  address     ={Ottawa, Canada},
  author      ={F.J. Rammig},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Ramm93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={53--54},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={{HDL}-based Design Methods},
  year        ={1993}
}
@article{Rams29,
  author      ={F.P. Ramsey},
  journal     ={London Math. Society},
  key         ={Rams29},
  keyword     ={omega},
  pages       ={264--286},
  title       ={On a problem of formal logic},
  volume      ={30},
  year        ={1929}
}
@inproceedings{Rauz95,
  address     ={Liege, Belgium},
  author      ={A. Rauzy},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={Rauz95},
  month       ={July},
  pages       ={114--126},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Toupie = mu-calculus + Constraints},
  volume      ={939},
  year        ={1995}
}
@inproceedings{ReAJ84,
  author      ={S.M. Reddy and V.D. Agrawal and S.K. Jain},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={ReAJ84},
  organization={IEEE},
  pages       ={504--509},
  publisher   ={IEEE},
  title       ={A Gate Model for {CMOS} Combinational Logic Circuits with Application to Fault Detection},
  year        ={1984}
}
@inproceedings{ReEd94,
  address     ={San Diego, CA},
  author      ={S. Read and M. Edwards},
  booktitle   ={International Conference on Concurrent Engineering and EDA},
  key         ={ReEd94},
  keyword     ={VHDL},
  organization={SCSI},
  title       ={{A} {F}ormal {S}emantics of {VHDL} in {B}oyer--{M}oore {L}ogic},
  year        ={1994}
}
@inproceedings{ReKL85,
  author      ={P. Rety and C. Kirchner and P. Lescanne},
  booktitle   ={Conference on Rewriting Techniques and Applications (RTA)},
  key         ={ReKL85},
  keyword     ={Rewrite Methods},
  pages       ={141--157},
  title       ={{NARROWER}: a new algorithm for unification and its application to logic programming},
  year        ={1985}
}
@inproceedings{ReKr93a,
  address     ={Bad Herrenalb},
  author      ={R. Reetz and T. Kropf},
  booktitle   ={GI/ITG Workshop Formale Methoden zum Entwurf korrekter Systeme},
  editor      ={T. Kropf and R. Kumar and D. Schmid},
  key         ={ReKr93a},
  keyword     ={SFB358 flowgraph HDL 1GI/ITG workshop},
  month       ={March},
  organization={GI/ITG},
  pages       ={49--60},
  publisher   ={Universit\"{a}t Karlsruhe, Interner Bericht Nr. 10/93},
  title       ={Ein formales {F}lu{\ss}graphmodell zur {I}ntegration von {H}ardwarebeschreibungssprachen in die {H}ardware-{V}erifikation},
  year        ={1993}
}
@techreport{ReKr93b,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={R. Reetz and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={ReKr93b},
  keyword     ={SFB358 HDL verification flowgraph techreport},
  month       ={September},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-4-93.ps.gz},
  number      ={SFB358-C2-4/93},
  title       ={Hardwarebeschreibungssprachen und formale {V}erifikation},
  year        ={1993}
}
@inproceedings{ReKr94a,
  address     ={Oberwiesenthal, Germany},
  author      ={R. Reetz and T. Kropf},
  booktitle   ={Rechnergest\"{u}tzter Entwurf und Architektur mikroelektronischer Systeme},
  editor      ={D. Monjau},
  key         ={ReKr94a},
  keyword     ={SFB358 verification HDL VHDL flowgraph conference},
  month       ={May},
  organization={Society for Computer Science (GI) e.V.},
  pages       ={193--202},
  title       ={{F}ormalisierung eines {F}lu{\ss}graphmodells in {L}ogik h\"{o}herer {O}rdnung und dessen {A}nwendung in der {H}ardware--{V}erifikation},
  year        ={1994}
}
@inproceedings{ReKr94b,
  address     ={Malta},
  author      ={R. Reetz and T. Kropf},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={ReKr94b},
  keyword     ={SFB358 verification compiler HOL conference},
  month       ={September},
  pages       ={378--390},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{S}implifying {D}eep {E}mbedding: {A} {F}ormalised {C}ode {G}enerator},
  volume      ={859},
  year        ={1994}
}
@inproceedings{ReKr94c,
  address     ={Las Navas del Marqu\'{e}, \'{A}vila, Spain},
  author      ={R. Reetz and T. Kropf},
  booktitle   ={EuroFORM workshop},
  editor      ={C. {Delgado Kloos}},
  key         ={ReKr94c},
  keyword     ={SFB358 workshop},
  month       ={January},
  organization={Universidad Polit\'{e}cnica de Madrid, Spain},
  title       ={{A} {F}lowgraph {M}odel for {F}ormalizing the {S}emantics of {VHDL} in {HOL}},
  year        ={1994}
}
@techreport{ReKr94d,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={R. Reetz and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={ReKr94d},
  keyword     ={SFB358 techreport},
  month       ={September},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-7-94.ps.gz},
  number      ={SFB358-C2-7/94},
  title       ={{S}implifying {D}eep {E}mbedding: {G}enerating {F}ormal {C}ompilers in {HOL}},
  year        ={1994}
}
@techreport{ReKr94e,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={R. Reetz and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={ReKr94e},
  keyword     ={SFB358 verification compiler HOL techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-8-94.ps.gz},
  number      ={SFB358-C2-8/94},
  title       ={{S}implifying {D}eep {E}mbedding: {A} {F}ormalised {C}ode {G}enerator},
  year        ={1994}
}
@techreport{ReKr94f,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={R. Reetz and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={ReKr94f},
  keyword     ={SFB358 techreport},
  month       ={September},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-11-94.ps.gz},
  number      ={SFB358-C2-11/94},
  title       ={{A} {F}lowgraph {S}emantics of {VHDL}: {T}oward a {VHDL} verification workbench in {HOL}},
  year        ={1994}
}
@techreport{ReKr94g,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={R. Reetz and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={ReKr94g},
  keyword     ={SFB358 verification HDL VHDL flowgraph techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-6-94.ps.gz},
  number      ={SFB358-C2-6/94},
  title       ={{F}ormalisierung eines {F}lu{\ss}graphmodells in {L}ogik h\"{o}herer {O}rdnung und dessen {A}nwendung in der {H}ardware--{V}erifikation},
  year        ={1994}
}
@incollection{ReKr95a,
  address     ={Madrid, Spain},
  author      ={R. Reetz and T. Kropf},
  booktitle   ={Formal Semantics for {VHDL}},
  chapter     ={7},
  editor      ={C. {Delgado Kloos} and P.T. Breuer},
  key         ={ReKr95a},
  keyword     ={SFB358 VHDL verification book},
  month       ={March},
  pages       ={205--238},
  publisher   ={Kluwer Academic Publishers},
  series      ={The Kluwer international series in engineering and computer science},
  title       ={{A} {F}lowgraph {S}emantics of {VHDL}: {A} {B}asis for {H}ardware {V}erification with {VHDL}},
  volume      ={307},
  year        ={1995}
}
@article{ReKr95b,
  author      ={R. Reetz and T. Kropf},
  journal     ={Formal Methods in System Design},
  key         ={ReKr95b},
  keyword     ={VHDL verification SFB358 journal},
  month       ={August},
  note        ={Kluwer Academic Publishers, ISSN: 0925-9856},
  number      ={1/2},
  pages       ={73--100},
  title       ={{A} {F}lowgraph {S}emantics of {VHDL}: {T}oward a {VHDL} {V}erification {W}orkbench in {HOL}},
  volume      ={7},
  year        ={1995}
}
@techreport{ReKr96a,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={R. Reetz and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={ReKr96a},
  keyword     ={SFB358 techreport VHDL HOL HDL},
  month       ={January},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-1-96.ps.gz},
  number      ={SFB358-C2-1/96},
  title       ={{E}valuating {P}ossibilities for {F}ormally {S}ound {S}imulation and {V}erification of {VHDL}},
  year        ={1996}
}
@inproceedings{ReKr96b,
  address     ={Dresden, Germany},
  author      ={R. Reetz and T. Kropf},
  booktitle   ={SIG-VHDL Spring '96 Working Conference},
  editor      ={W. Ecker},
  key         ={ReKr96b},
  keyword     ={SFB358 VHDL verification higherorderlogic SML},
  month       ={May},
  pages       ={133--144},
  publisher   ={Shaker Verlag},
  remark      ={ISBN: 3-8265-1462-9},
  title       ={Principles of formal verification tools for {VHDL}},
  year        ={1996}
}
@inproceedings{ReKr96c,
  address     ={Baastad, Sweden},
  author      ={R. Reetz and T. Kropf},
  booktitle   ={Workshop on Designing Correct Circuits},
  editor      ={S. Singh and M. Sheeran},
  key         ={ReKr96c},
  keyword     ={SFB358},
  month       ={September},
  publisher   ={Springer Verlag},
  series      ={Electronic Workshops in Computing},
  title       ={Evaluating Possibilities for Formally Sound Simulation and Verification of {VHDL}},
  year        ={1996}
}
@inproceedings{ReRA85,
  author      ={M.K. Reddy and S.M. Reddy and P. Agrawal},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={ReRA85},
  organization={IEEE},
  pages       ={825--828},
  title       ={Transistor Level Test Generation for {CMOS} Circuits},
  year        ={1985}
}
@article{ReRe86,
  author      ={S.M. Reddy and M.K. Reddy},
  journal     ={{IEEE} Transactions on Computers},
  key         ={ReRe86},
  month       ={August},
  number      ={8},
  pages       ={742--754},
  title       ={Testable Realization for {FET} Stuck-Open Faults in {CMOS} Combinational Logic Circuits},
  volume      ={C-35},
  year        ={1986}
}
@article{ReSK88,
  author      ={S.M. Reddy and K.K. Saluja and M.G. Karpovsky},
  journal     ={IEEE-Transactions on Computers},
  key         ={ReSK88},
  month       ={September},
  number      ={9},
  pages       ={1151--1156},
  title       ={{A} {D}ata {T}echnique for {B}uilt-{I}n {S}elf-{T}est},
  volume      ={37},
  year        ={1988}
}
@inproceedings{ReSK97a,
  address     ={Holzhau, Deutschland},
  author      ={R. Reetz and K. Schneider and T. Kropf},
  booktitle   ={GI/ITG/GME Workshop Hardwarebeschreibungssprachen und Modellierungsparadigmen},
  editor      ={D. Monjau},
  key         ={ReSK97a},
  keyword     ={SFB358 workshop},
  month       ={February},
  pages       ={94--103},
  title       ={{V}erificationbench: {F}ormale {S}pezifikation in {VHDL}},
  year        ={1997}
}
@inproceedings{ReSK97b,
  address     ={Linz, \"{O}sterreich},
  author      ={R. Reetz and K. Schneider and T. Kropf},
  booktitle   ={GI/ITG/GMM Workshop Methoden des Entwurfs und der Verifikation digitaler Systeme},
  editor      ={R. Hagelauer},
  key         ={ReSK97b},
  keyword     ={SFB358 workshop},
  month       ={April},
  pages       ={97-108},
  title       ={{F}ormale {S}pezifikation und {V}erifikation mit {VHDL}},
  year        ={1997}
}
@inproceedings{ReSK98,
  author      ={R. Reetz and K. Schneider and T. Kropf},
  booktitle   ={Design, Automation and Test in Europe (DATE' 98)},
  key         ={ReSK98},
  keyword     ={sfb358},
  month       ={February},
  publisher   ={IEEE Computer Society Press},
  title       ={Formal Specification in {VHDL} for Formal Hardware Verification},
  year        ={1998}
}
@book{ReSo74,
  author      ={F. Reinhardt and H. Soeder},
  key         ={ReSo74},
  keyword     ={textbook},
  publisher   ={Deutscher Taschenbuch Verlag},
  title       ={dtv-{A}ltas zur {M}athematik},
  year        ={1974}
}
@book{ReUr71,
  address     ={Wien},
  author      ={N. Rescher and A. Urquhart},
  key         ={ReUr71},
  publisher   ={Springer-Verlag},
  title       ={Temporal Logic},
  year        ={1971}
}
@inproceedings{Redd90,
  address     ={Kaiserslautern, Germany},
  author      ={U.S. Reddy},
  booktitle   ={Conference on Automated Deduction (CADE)},
  editor      ={M.E.Stickel},
  key         ={Redd90},
  keyword     ={Rewrite},
  pages       ={162--177},
  publisher   ={Springer-Verlag},
  title       ={Term rewriting induction},
  year        ={1990}
}
@article{Redz85,
  author      ={R.R. Redziejowski},
  journal     ={Theoretical Computer Science},
  key         ={Redz85},
  keyword     ={omega},
  pages       ={59--79},
  title       ={Infinite-word languages and continuous mappings},
  volume      ={43},
  year        ={1985}
}
@book{Reet92,
  address     ={St.Augustin, Germany},
  author      ={R. Reetz},
  key         ={Reet92},
  keyword     ={CAPRA},
  month       ={May},
  note        ={ISBN: 3-88457-207-5},
  publisher   ={Gesellschaft f\"{u}r Mathmatik und Datenverarbeitung mbh},
  series      ={GMD--Studien},
  title       ={{P}arallele {A}lgorithmen und {A}nwendungen f\"{u}r das assoziative {P}rozessorsystem {CAPRA}},
  volume      ={207},
  year        ={1992}
}
@inproceedings{Reet95,
  address     ={Aspen Grove, Utah, USA},
  author      ={R. Reetz},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={Reet95},
  keyword     ={HDL VHDL SFB358 HOL conference},
  month       ={September},
  pages       ={277--292},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{D}eep {E}mbedding {VHDL}},
  volume      ={971},
  year        ={1995}
}
@techreport{Reet95a,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={R. Reetz},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={Reet95a},
  keyword     ={SFB358 techreport},
  month       ={March},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-1-95.ps.gz},
  number      ={SFB358-C2-1/95},
  title       ={{S}implifying {D}eep {E}mbedding: {G}enerating {F}ormal {C}ompilers in {HOL}.Version 2.0.},
  year        ={1995}
}
@techreport{Reet95b,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={R. Reetz},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={Reet95b},
  keyword     ={SFB358 techreport VHDL HOL HDL},
  month       ={July},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-2-95.ps.gz},
  number      ={SFB358-C2-2/95},
  title       ={Deep Embedding {VHDL}},
  year        ={1995}
}
@techreport{Reet95c,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={R. Reetz},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={Reet95c},
  keyword     ={SFB358 techreport},
  month       ={March},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-3-95.ps.gz},
  number      ={SFB358-C2-3/95},
  title       ={{S}implifying {D}eep {E}mbedding: {G}enerating {F}ormal {C}ompilers in {HOL}.Version 2.2.},
  year        ={1995}
}
@techreport{Reet95d,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={R. Reetz},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={Reet95d},
  keyword     ={SFB358 techreport VHDL HOL HDL},
  month       ={July},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-4-95.ps.gz},
  number      ={SFB358-C2-4/95},
  title       ={A {F}lowgraph {S}emantics of {VHDL}: {T}oward a {VHDL} verification workbench in {HOL}},
  year        ={1995}
}
@techreport{Reev87,
  address     ={University of London, Mile End Road, London E1 4NS},
  author      ={S.V. Reeves},
  institution ={Department of Computer Science, Queen Mary College,},
  key         ={Reev87},
  title       ={Semantic tableau as a framework for automated theorem proving},
  year        ={1987}
}
@techreport{Reev87a,
  author      ={S.V. Reeves},
  institution ={Department of Computer Science, Queen Mary College, University of London},
  key         ={Reev87a},
  keyword     ={techreport},
  title       ={Semantic tableau as a framework for automated theorem proving},
  year        ={1987}
}
@article{Reev87b,
  author      ={S.V. Reeves},
  journal     ={Journal of Automated Reasoning},
  key         ={Reev87b},
  keyword     ={Logic},
  pages       ={225--246},
  title       ={Adding equality to semantic tableaux},
  volume      ={3},
  year        ={1987}
}
@techreport{Reev87c,
  address     ={University of London, Mile End Road, London E1 4NS},
  author      ={S. Reeves},
  institution ={Department of Computer Science and Statistics, Queen Mary College},
  key         ={Reev87c},
  month       ={April},
  number      ={402},
  title       ={Implementation of a Theorem-Prover based on Semantic Tableaux},
  type        ={Technical Report},
  year        ={1987}
}
@techreport{Reev89,
  address     ={University of London, Mile End Road, London E1 4NS},
  author      ={S. Reeves},
  institution ={Department of Computer Science, Queen Mary College},
  key         ={Reev89},
  month       ={August},
  number      ={545},
  title       ={Some Extensions to Semantic Tableaux},
  type        ={Technical Report},
  year        ={1989}
}
@inproceedings{Rege95,
  address     ={Aspen Grove, Utah, USA},
  author      ={F. Regensburg},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={Rege95},
  month       ={September},
  pages       ={293--307},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{HOLCF}: {H}igher {O}rder {L}ogic of {C}omputable {F}unctions},
  volume      ={971},
  year        ={1995}
}
@inproceedings{Reif95,
  author      ={W. Reif},
  booktitle   ={{KORSO}: Methods, Languages and Tools for the Construction of Correct Software},
  editor      ={M. Broy and S. J\"{a}hnichen},
  key         ={Reif95},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{T}he {KIV} {A}pproach to {S}oftware {V}erification},
  volume      ={1009},
  year        ={1995}
}
@inproceedings{Rem85,
  address     ={New York},
  author      ={M. Rem},
  booktitle   ={Control Flow and Data Flow: Concepts of Distributed Programming},
  editor      ={M. Broy},
  key         ={Rem85},
  organization={Computer and System Science},
  pages       ={399-437},
  publisher   ={Springer-Verlag},
  series      ={{NATO} {ASI} Series, Series F},
  title       ={Concurrent Computation and {VLSI} Circuits},
  volume      ={14},
  year        ={1985}
}
@inproceedings{Reus96,
  address     ={Turku, Finland},
  author      ={B. Reus},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={Reus96},
  month       ={August},
  pages       ={363--380},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Synthetic Domain Theory in Type Theory},
  volume      ={1125},
  year        ={1996}
}
@techreport{RhHS91,
  address     ={University of Colorado at Boulder},
  author      ={J.-K. Rho and G. Hachtel and F. Somenzi},
  institution ={Department of Electrical and Computer Engineering},
  key         ={RhHS91},
  title       ={Don't Care Sequences and the Optimization of Interacting Finite State Machines},
  year        ={1991}
}
@inproceedings{RhSP93,
  author      ={J.-K. Rho and F. Somenzi and C. Pixley},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={RhSP93},
  keyword     ={verification gatelevel hardware symbolic_state_traversal BDD fsm formalism},
  pages       ={463--468},
  title       ={Minimum Length Synchronizing Sequences of Finite State Machines},
  year        ={1993}
}
@inproceedings{RhSo92,
  author      ={J.-K. Rho and F. Somenzi},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={RhSo92},
  keyword     ={formalism propositionallogic BDD hardware gatelevel verification},
  pages       ={628--633},
  title       ={Inductive Verification of Iterative Systems},
  year        ={1992}
}
@article{RhSo94,
  author      ={J.-K. Rho and F. Somenzi},
  journal     ={IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={RhSo94},
  keyword     ={formalism fsm specification hardware gatelevel optimization},
  month       ={July},
  number      ={7},
  pages       ={865--874},
  title       ={Don't Care Sequences and the Optimization of Interacting Finite State Machines},
  volume      ={13},
  year        ={1994}
}
@inproceedings{RoCa85,
  author      ={W. Rosenstiel and R. Camposano},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={Koomen/Moto-Oka},
  key         ={RoCa85},
  keyword     ={verification},
  pages       ={391--402},
  title       ={Synthesizing circuits from behavioral level specifications},
  year        ={1985}
}
@inproceedings{RoHa91,
  address     ={Chateau de Bonas},
  author      ={F. Rocheteau and N. Halbwachs},
  booktitle   ={Conference on Algorithms and Parallel {VLSI} Architectures {II}},
  editor      ={P. Quinton and Y. Robert},
  key         ={RoHa91},
  title       ={Pollux, A {L}ustre-based hardware design environment},
  year        ={1991}
}
@inproceedings{RoMy94,
  address     ={Standford, California, USA},
  author      ={T. G. Rokicki and C. J. Myers},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={RoMy94},
  month       ={June},
  pages       ={468},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Automatic Verification of Timed Circuits},
  volume      ={818},
  year        ={1994}
}
@inproceedings{RoNe91,
  address     ={Davis, California},
  author      ={R. Roxas and M. Newey},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={RoNe91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={223--230},
  publisher   ={IEEE Computer Society Press},
  title       ={Proof of Program Transformations},
  year        ={1991}
}
@inproceedings{RoSh92,
  author      ={L. Rossen and R. Sharp},
  booktitle   ={Workshop on Designing Correct Circuits},
  key         ={RoSh92},
  pages       ={159-172},
  title       ={Sequence Semantics of Ruby},
  year        ={1992}
}
@inproceedings{Robe58,
  author      ={J.E. Robertson},
  booktitle   ={IRE Trans. on Electron. Computers},
  key         ={Robe58},
  pages       ={218--222},
  title       ={A new {C}lass of {D}igital {D}ivision {M}ethods},
  volume      ={EC-7},
  year        ={1958}
}
@article{Robi65,
  author      ={J.A. Robinson},
  journal     ={Journal of Automated Reasoning},
  key         ={Robi65},
  keyword     ={Logic},
  number      ={1},
  pages       ={23--41},
  title       ={A Machine Oriented Logic Based on the Resolution Principle},
  volume      ={12},
  year        ={1965}
}
@inproceedings{Rodr93,
  address     ={Ottawa, Canada},
  author      ={D. Rodrigues},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Rodr93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherlan},
  title       ={Analog-{VHDL}: As an application, a real example},
  year        ={1993}
}
@inproceedings{Roes87,
  author      ={W. Roesner},
  booktitle   ={{IEEE}},
  key         ={Roes87},
  pages       ={311-314},
  title       ={A Hardware Design Language for Logic Simulation and Synthesis in {VLSI}},
  year        ={1987}
}
@book{Roev76,
  address     ={Amsterdam},
  author      ={W. P. Roever},
  key         ={Roev76},
  publisher   ={Centre for Mathematics and Computer Science},
  title       ={Recursive Program Schemas: Semantics and Proof Theory, Mathematical Centre Tracts},
  volume      ={70},
  year        ={1976}
}
@article{Rohr88,
  author      ={R.A. Rohrer},
  journal     ={{IEEE} Transactions on Circuits and Systems},
  key         ={Rohr88},
  keyword     ={hardware abstraction timing},
  month       ={January},
  number      ={1},
  pages       ={2--5},
  title       ={Circuit Partitioning Simplified},
  volume      ={CAS-35},
  year        ={1988}
}
@mastersthesis{Ron84,
  address     ={Rehovot, Israel},
  author      ={D. Ron},
  key         ={Ron84},
  school      ={The Weizmann Institude of Science},
  title       ={{T}emporal {V}erification of {C}ommunication {P}rotocols},
  year        ={1984}
}
@book{Rose82,
  author      ={J.G. Rosenstein},
  key         ={Rose82},
  keyword     ={omega},
  publisher   ={Academic Press, New York},
  title       ={Linear Orderings},
  year        ={1982}
}
@article{Rose92,
  author      ={C.W. Rose},
  journal     ={IEEE Design \& Test of Computers},
  key         ={Rose92},
  keyword     ={HDL},
  month       ={September},
  pages       ={77--79},
  title       ={{ISP'} Retrospective},
  year        ={1992}
}
@inproceedings{Roxa93,
  address     ={Vancouver, Canada},
  author      ={R. Roxas},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Roxa93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={127--140},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={A {HOL} Package for Reasoning about Relations Defined by Mutual Induction},
  volume      ={780},
  year        ={1993}
}
@inproceedings{RuKr97,
  address     ={Grenoble, France},
  author      ={J. Ruf and T. Kropf},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={RuKr97},
  keyword     ={SFB358},
  pages       ={18-32},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={A New Algorithm for Discrete Timed Symbolic Model Checking},
  year        ={1997}
}
@techreport{RuKr97a,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={J. Ruf and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={RuKr97a},
  keyword     ={SFB358 verification techreport},
  month       ={April},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-1-97.ps.gz},
  number      ={SFB358-C2-1/97},
  title       ={Symbolic Model Checking for a Discrete Clocked Temporal Logic with Intervals},
  year        ={1997}
}
@inproceedings{RuKr97b,
  address     ={Montreal, Canada},
  author      ={J. Ruf and T. Kropf},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={E. Cerny and D.K. Probst},
  key         ={RuKr97b},
  keyword     ={SFB358 verification},
  month       ={October},
  organization={IFIP WG 10.5},
  pages       ={146--166},
  publisher   ={Chapman and Hall},
  title       ={Symbolic Model Checking for a Discrete Clocked Temporal Logic with Intervals},
  year        ={1997}
}
@techreport{RuKr98a,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={J. Ruf and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={RuKr98a},
  keyword     ={SFB358 verification techreport},
  month       ={January},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-1-98.ps.gz},
  number      ={SFB358-C2-1/98},
  title       ={Using {MTBDD}s for Composition and Model Checking of Real-Time Systems},
  year        ={1998}
}
@article{RuKr98b,
  author      ={J. Ruf and T. Kropf},
  journal     ={Multiple-Valued Logic -- An International Journal},
  key         ={RuKr98b},
  keyword     ={SFB358 journal},
  note        ={Special Issue on Decision Diagrams, to appear},
  title       ={Using {MTBDDs} for Discrete Timed Symbolic Model Checking},
  year        ={1998}
}
@article{RuPH83,
  author      ={J. Rubinstein and P. Penfield and M.A. Horowitz},
  journal     ={{IEEE} Transactions on Computer-Aided Design},
  key         ={RuPH83},
  keyword     ={hardware abstraction timing},
  month       ={July},
  number      ={3},
  pages       ={202--211},
  title       ={Signal Delay in {RC} Tree Networks},
  volume      ={CAD-2},
  year        ={1983}
}
@article{RuPr89,
  author      ={P. Ruzicka and I. Privara},
  journal     ={Acta Informatica},
  key         ={RuPr89},
  keyword     ={Rewrite},
  pages       ={61--71},
  title       ={An Almost Linear Robinson Unification Algorithm},
  volume      ={27},
  year        ={1989}
}
@inproceedings{RuSS96,
  address     ={New Brunswick, NJ, USA},
  author      ={H. Rue{\ss} and N. Shankar and M. K. Srivas},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={RuSS96},
  month       ={July/August},
  pages       ={123--134},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Modular Verification of {SRT} Division},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{RuSr93,
  address     ={Vancouver, Canada},
  author      ={J. Rushby and M. Srivas},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={RuSr93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={162--174},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Using {PVS} to Prove Some Theorems Of {D}avid {P}arnas},
  volume      ={780},
  year        ={1993}
}
@techreport{RuSt95,
  address     ={Menlo Park, CA},
  author      ={J. Rushby and D.W.J. Stringer-Calvert},
  institution ={Computer Science Laboratory, SRI International},
  key         ={RuSt95},
  month       ={June},
  number      ={SRI-CSL-95-10},
  title       ={A {L}ess {E}lementary {T}utorial for the {PVS} {S}pecification and {V}erification {S}ystem},
  year        ={1995}
}
@inproceedings{Rude93,
  address     ={Santa Clara, California},
  author      ={R. Rudell},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={Rude93},
  keyword     ={BDD},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={42--47},
  publisher   ={IEEE Computer Society Press},
  title       ={{D}ynamic {V}ariable {O}rdering for {O}rdered {B}inary {D}ecision {D}iagrams},
  year        ={1993}
}
@inproceedings{Rues96,
  address     ={Palo Alto, CA, USA},
  author      ={H. Ruess},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={Rues96},
  month       ={November},
  pages       ={79--93},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Hierarchical verification of Two-Dimensional High-Speed Multiplication in {PVS}: A case study},
  volume      ={1166},
  year        ={1996}
}
@mastersthesis{Ruf96,
  author      ={J. Ruf},
  key         ={Ruf96},
  month       ={March},
  school      ={Universit\"{a}t Karlsruhe},
  title       ={Untersuchung von erweiterten Zellularautomaten mit variabler Nachbarschaft},
  year        ={1996}
}
@inproceedings{Rush91,
  address     ={Davis, California},
  author      ={J. Rushby},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Rush91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Design Choices in Specification Languages and Verification Systems},
  year        ={1991}
}
@incollection{Rush93,
  address     ={Boston, Dordecht, London},
  author      ={J. Rushby},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  chapter     ={5},
  editor      ={J. Vytopil},
  key         ={Rush93},
  pages       ={109--136},
  publisher   ={Kluwer},
  series      ={Kluwer International Series in Engineering and Computer Science},
  title       ={A {F}ault-{M}asking and {T}ransient-{R}ecovery {M}odel for {D}igital {F}light-{C}ontrol {S}ystems},
  year        ={1993}
}
@inproceedings{Rush94,
  address     ={Los Angeles, CA},
  author      ={J. Rushby},
  booktitle   ={{ACM} Symposium on Principles of Distributed Computing},
  key         ={Rush94},
  month       ={August},
  organization={Association for Computing Machinery},
  pages       ={304--313},
  title       ={A {F}ormally {V}erified {A}lgorithm for {C}lock {S}ynchronization {U}nder a {H}ybrid {F}ault {M}odel},
  year        ={1994}
}
@inproceedings{Rush96,
  address     ={New Brunswick, NJ, USA},
  author      ={J. M. Rushby},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={Rush96},
  month       ={July/August},
  pages       ={169--183},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Automated Deduction and Formal Methods},
  volume      ={1102},
  year        ={1996}
}
@article{Rusi87,
  author      ={M. Rusinowitch},
  journal     ={Journal of Symbolic Computation},
  key         ={Rusi87},
  keyword     ={Rewrite},
  pages       ={117--131},
  title       ={Path of Subterms Ordering and Recursive Decomposition Ordering Revisited},
  volume      ={3},
  year        ={1987}
}
@incollection{Russ94,
  address     ={Oxford},
  author      ={D.M. Russinoff},
  booktitle   ={Specification and Validation Methods},
  editor      ={E. B\"{o}rger},
  key         ={Russ94},
  keyword     ={VHDL},
  publisher   ={Oxford University Press},
  title       ={Specification and verification of gate--level {VHDL} models of synchronous and asynchronous circuits},
  year        ={1994}
}
@article{Russ95,
  author      ={D.M. Russinoff},
  journal     ={{F}ormal {M}ethods in {S}ystem {D}esign},
  key         ={Russ95},
  keyword     ={VHDL},
  month       ={August},
  note        ={Kluwer Academic Publishers, ISSN: 0925-9856},
  number      ={1/2},
  pages       ={7--26},
  title       ={{A} {F}ormalization of a {S}ubset of {VHDL} in the {B}oyer-{M}oore {L}ogic},
  volume      ={7},
  year        ={1995}
}
@inproceedings{Rusu97,
  address     ={Grenoble, France},
  author      ={V. Rusu},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={Rusu97},
  pages       ={63-68},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Verifying Periodic Task-Control Systems},
  year        ={1997}
}
@incollection{RySa92,
  address     ={Oxford},
  author      ={M. Ryan and M. Sadler},
  booktitle   ={Handbook of Logic in Computer Science},
  chapter     ={1},
  key         ={RySa92},
  pages       ={1--78},
  publisher   ={Clarendon Press},
  title       ={Valuation Systems and Consequence Relations},
  volume      ={1 (Background: Mathematical Structures)},
  year        ={1992}
}
@inproceedings{SABF94,
  address     ={Grenoble, France},
  author      ={D. Sciuto and S. Antoniazzi and A. Balboni and W. Fornaciari},
  booktitle   ={European Design Automation Conference },
  key         ={SABF94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={612--617},
  publisher   ={IEEE Computer Society Press},
  title       ={{T}he {R}ole of {VHDL} within the {TOSCA} {H}ardware/{S}oftware {C}odesign {F}ramework},
  year        ={1994}
}
@inproceedings{SAGB92,
  address     ={Grenoble},
  author      ={R. Stewart and V. Anjubault and P. Garcin and J. Benkoski},
  booktitle   ={European Design Automation Conference },
  key         ={SAGB92},
  keyword     ={hardware verification transistorlevel abstraction logic switchlevel},
  organization={IEEE Computer Society},
  pages       ={28--31},
  publisher   ={IEEE Computer Society Press},
  title       ={Automatic Import of Custom Design into a Cell-Based Environment using Switch-Level Analysis and Circuit Simulation},
  year        ={1992}
}
@article{SCFM84,
  author      ={A.P. Sistla and E.M. Clarke and N. Frances and A.M. Meyer},
  journal     ={Information and Control},
  key         ={SCFM84},
  number      ={1},
  pages       ={88-112},
  title       ={Can Message Buffers be Axiomatized in Temporal Logic?},
  volume      ={63},
  year        ={1984}
}
@article{SGGH94,
  author      ={J.B. Saxe and S.J. Garland and J.V. Guttag and J.J. Horning},
  journal     ={Formal Methods in System Design},
  key         ={SGGH94},
  number      ={1},
  pages       ={181--210},
  title       ={Using {T}ransformations and {V}erification in {C}ircuit {D}esign},
  volume      ={4},
  year        ={1994}
}
@inproceedings{SHSB94,
  address     ={San Diego, CA},
  author      ={T.R. Shimple and R. Hojati and A. Sangiovanni-Vincentelli and R.K. Brayton},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={SHSB94},
  keyword     ={topics_in_verification_and_diagnosis},
  month       ={June},
  note        ={ch. 15.3},
  publisher   ={San Diego Convention Center},
  title       ={{H}euristic {M}inimization of {BDD}s {U}sing {D}on't {C}ares},
  year        ={1994}
}
@inproceedings{SKMB90,
  author      ={A. Srinivasan and T. Kam and S. Malik and R.K. Brayton},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={SKMB90},
  organization={IEEE},
  pages       ={92--95},
  title       ={Algorithms for Discrete Function Manipulation},
  year        ={1990}
}
@article{SLMS85,
  author      ={M. Shahdad and R. Lipsett and E. Marschner and K. Sheehan and H. Cohen},
  journal     ={IEEE Computer},
  key         ={SLMS85},
  keyword     ={HDL VHDL},
  month       ={February},
  pages       ={94--103},
  title       ={{VHSIC} Hardware Description Language},
  year        ={1985}
}
@inproceedings{SMCB96,
  address     ={New Brunswick, NJ, USA},
  author      ={B. Steffen and T. Margaria and A. Classen and V. Braun},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={SMCB96},
  month       ={July/August},
  pages       ={450--453},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The {METAFrame}'95 environment},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{SNGR91,
  author      ={A.D. Stein and T.V. Nguyen and B.J. George and R.A. Rohrer},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={SNGR91},
  keyword     ={hardware abstraction timing},
  organization={ACM/IEEE},
  pages       ={26--31},
  title       ={{ADAPTS:} A Digital Transient Simulation Strategy for Integrated Circuits},
  year        ={1991}
}
@inproceedings{SSBS92,
  author      ={N.V. Shenoy and K.J. Singh and R.K. Brayton and A. Sangiovanni-Vincentelli},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={SSBS92},
  pages       ={405--409},
  title       ={On the Temporal Equivalence of Sequential Circuits},
  year        ={1992}
}
@inproceedings{SSFS98,
  author      ={I. Schreiber and J. Sch\"{o}nherr and E. Fordran and K. Schneider and B. Straube},
  booktitle   ={GI/ITG/GME Workshop: Methoden des Entwurfs und der Verifikation digitaler Schaltungen und Systeme und Beschreibungssprachen und Modellierung von Schaltungen und Systemen},
  key         ={SSFS98},
  keyword     ={SFB358 workshop},
  publisher   ={HNI-Verlagsschriften, ISBN 3-931466-35-3},
  title       ={{K}ontrollflu{\ss}-{V}erifikation von {A}lgorithmen mittels {M}odellpr\"{u}fung},
  year        ={1998}
}
@techreport{SSSK94,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={A. Schneider and B. Straube and K. Schneider and T. Kropf},
  institution ={FHG Dresden/Universit\"{a}t Karlsruhe},
  key         ={SSSK94},
  keyword     ={SFB358 techreport},
  number      ={SFB358-C-1/94},
  title       ={{V}erifikation eines digitalen {N}etzwerkes mit {H}ilfe des {B}eweissystems {HOL}},
  year        ={1994}
}
@inproceedings{SSSS96,
  address     ={Kreischa},
  author      ={J. Schoenherr and I. Schreiber and B. Straube and R. Spallek},
  booktitle   ={GI/ITG/GME Workshop Methoden des Entwurfs und der Verifikation Digitaler Systeme},
  editor      ={Bernd straube and Jens Schoenherr},
  key         ={SSSS96},
  keyword     ={4. GI/ITG/GME},
  month       ={March},
  organization={GI/ITG/GME},
  pages       ={91--100},
  publisher   ={Shaker Verlag, Aachen},
  series      ={Berichte aus der Informatik},
  title       ={Ein Vergleich von Verfahren zur Traversierung des Zustandsraums abstrakter Produktautomaten},
  year        ={1996}
}
@inproceedings{SSVH97,
  address     ={Toledo, Spain},
  author      ={J.-P. Soininen and J. Saarikettu and V. Veijalainen and T. Huttunen},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={SSVH97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Triple{S} - a formal validation environment for functional specifications},
  year        ={1997}
}
@inproceedings{SWWA93,
  address     ={Ottawa, Canada},
  author      ={B. Singh and J. Wicks and P. Wright and J.R. Amstrong},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={SWWA93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={347--354},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={The Modeler's Assistant: a {CAD} Tool for Behavior Model Development},
  year        ={1993}
}
@inproceedings{SaBr90,
  address     ={Orlando, USA},
  author      ={H. Savoj and R.K. Brayton},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={SaBr90},
  keyword     ={test optimization gatelevel hardware},
  month       ={June},
  pages       ={297--301},
  title       ={The use of observability and external don't cares for the simplification of multi-level networks},
  year        ={1990}
}
@article{SaEF93,
  author      ={J. Saul and B. Eschermann and J. Fr\"{o}{\ss}l},
  journal     ={IEE Proceedings},
  key         ={SaEF93},
  keyword     ={SFB358 journal},
  title       ={Two-Level Logic Circuits Using {EXOR}-Sums of Products},
  volume      ={part E},
  year        ={1993}
}
@inproceedings{SaMu97,
  address     ={Enschede, The Netherlands},
  author      ={R. Sandner and O. M\"{u}ller},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={SaMu97},
  pages       ={351-365},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={A Theorem Prover Support for the Refinement of Stream Processing Functions},
  year        ={1997}
}
@article{SaSa98,
  author      ={V. Sabelfeld and A. Sabelfeld},
  journal     ={Theoretical Computer Science},
  key         ={SaSa98},
  keyword     ={recursion scheme, equivalent transformation},
  remark      ={(to appear)},
  title       ={The tree equivalence of linear recursion schemes},
  year        ={1998}
}
@inproceedings{SaVa89,
  author      ={S. Safra and M.Y. Vardi},
  booktitle   ={Symposium on Theory of Computing},
  key         ={SaVa89},
  keyword     ={omega},
  pages       ={127--137},
  title       ={On $\omega$ automata and temporal logic},
  year        ={1989}
}
@inproceedings{Safr88,
  author      ={S. Safra},
  booktitle   ={{IEEE} Symp.on Foundations of Computer Science},
  key         ={Safr88},
  keyword     ={omega},
  pages       ={319--327},
  title       ={On the complexity of $\omega$ automata},
  year        ={1988}
}
@phdthesis{Sale92,
  author      ={A.M. Salem},
  key         ={Sale92},
  keyword     ={hardware verification algorithmiclevel HDL VHDL},
  month       ={October},
  school      ={University of Grenoble},
  title       ={Verification formelle des circuits digitaux decrits en {VHDL} (in french)},
  year        ={1992}
}
@inproceedings{Sand97,
  address     ={Grenoble, France},
  author      ={E. Sandewall},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={Sand97},
  pages       ={3-17},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Relating High-Level and Low-Level Action Descriptions in a Logic of Actions and Change},
  year        ={1997}
}
@inproceedings{ScBr84,
  address     ={California Institute of Technology},
  author      ={M.D. Schuster and R.E. Bryant},
  booktitle   ={Conference on Advanced Research in {VLSI}, {M.I.T}},
  key         ={ScBr84},
  keyword     ={switchlevel simulation},
  organization={Department of Computer Science},
  pages       ={219--228},
  title       ={Concurrent Fault Simulation of {MOS} Digital Circuits},
  year        ={1984}
}
@inproceedings{ScDa93,
  address     ={Paris, France},
  author      ={R. Schl\"{o}r and W. Damm},
  booktitle   ={European Design Automation Conference },
  editor      ={G. Goossens and B. Lin},
  key         ={ScDa93},
  month       ={February},
  pages       ={518--524},
  publisher   ={IEEE Computer Society Press},
  title       ={Specification and Verification of System-Level Hardware Design Using Timing Diagrams},
  year        ={1993}
}
@inproceedings{ScGo97,
  address     ={Enschede, The Netherlands},
  author      ={P.H. Schmitt and J. Goubault-Larrecq},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={ScGo97},
  pages       ={130-144},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={A Tableau System for Linear-{TIME} Temporal Logic},
  year        ={1997}
}
@inproceedings{ScHB96,
  address     ={Oxford},
  author      ={B. Sch\"{a}tz and H Hu{\ss}mann and M. Broy},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={ScHB96},
  month       ={March},
  pages       ={248-267},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{G}raphical {D}evelopment of {C}onsistent {S}ystem {S}pecifications},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{ScKK91a,
  address     ={Edinburgh, Scotland},
  author      ={K. Schneider and R. Kumar and T. Kropf},
  booktitle   ={International Conference on Very Large Scale Integration (VLSI)},
  editor      ={A. Halaas and P.B. Denyer},
  key         ={ScKK91a},
  keyword     ={SFB358 verification conference},
  month       ={August},
  organization={IFIP Transactions},
  pages       ={81--90},
  publisher   ={North-Holland},
  title       ={{S}tructuring {H}ardware {P}roofs: {F}irst steps towards {A}utomation in a {H}igher-{O}rder {E}nvironment},
  year        ={1991}
}
@inproceedings{ScKK91b,
  address     ={Aalborg},
  author      ={K. Schneider and R. Kumar and T. Kropf},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={K.G. Larsen and A. Skou},
  key         ={ScKK91b},
  keyword     ={SFB358 verification conference},
  month       ={July},
  pages       ={365--375},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A}utomating most {P}arts of {H}ardware {P}roofs in {HOL}},
  volume      ={575},
  year        ={1991}
}
@inproceedings{ScKK92a,
  address     ={Saratoga Springs, New York},
  author      ={K. Schneider and R. Kumar and T. Kropf},
  booktitle   ={Conference on Automated Deduction (CADE)},
  editor      ={D. Kapur},
  key         ={ScKK92a},
  keyword     ={SFB358 logic conference},
  pages       ={766--770},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The {FAUST} prover},
  volume      ={607},
  year        ={1992}
}
@inproceedings{ScKK92b,
  address     ={Leuven, Belgium},
  author      ={K. Schneider and R. Kumar and T. Kropf},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={ScKK92b},
  keyword     ={SFB358 conference},
  month       ={September},
  pages       ={39-58},
  publisher   ={North-Holland},
  title       ={{E}fficient {R}epresentation and {C}omputation of {T}ableau {P}roofs},
  year        ={1992}
}
@inproceedings{ScKK92c,
  address     ={Leuven, Belgium},
  author      ={K. Schneider and R. Kumar and T. Kropf},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L. Claesen and M.J.C. Gordon},
  key         ={ScKK92c},
  keyword     ={SFB358 verification workshop},
  month       ={September},
  organization={IFIP TC10/WG10.2},
  pages       ={419--429},
  publisher   ={Elsevier Science Publishers},
  title       ={{M}odelling generic {H}ardware {S}tructures by {A}bstract {D}atatypes},
  year        ={1992}
}
@inproceedings{ScKK93a,
  address     ={Ottawa, Canada},
  author      ={K. Schneider and R. Kumar and T. Kropf},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={ScKK93a},
  keyword     ={SFB358 verification conference},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={35--52},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={{H}ardware-{V}erification using {F}irst {O}rder {BDDs}},
  year        ={1993}
}
@techreport{ScKK93b,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={K. Schneider and T. Kropf and R. Kumar},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={ScKK93b},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-2-93.ps.gz},
  number      ={SFB358-C2-2/93},
  title       ={{A}ccelerating {T}ableaux {P}roofs using {C}ompact {R}epresentations},
  year        ={1993}
}
@inproceedings{ScKK93c,
  address     ={Vancouver, Canada},
  author      ={K. Schneider and R. Kumar and T. Kropf},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={ScKK93c},
  keyword     ={SFB358 conference},
  month       ={August},
  organization={University of British Columbia},
  pages       ={386--400},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={{E}liminating {H}igher-{O}rder {Q}uantifiers to {O}btain {D}ecision {P}rocedures for {H}ardware {V}erification},
  volume      ={780},
  year        ={1993}
}
@inproceedings{ScKK93d,
  address     ={Vancouver, Canada},
  author      ={K. Schneider and R. Kumar and T. Kropf},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={ScKK93d},
  keyword     ={SFB358 conference},
  month       ={August},
  organization={University of British Columbia},
  pages       ={213--227},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={{A}lternative {P}roof {P}rocedures for {F}inite-{S}tate {M}achines in {H}igher-{O}rder {L}ogic},
  volume      ={780},
  year        ={1993}
}
@inproceedings{ScKK93e,
  address     ={T\"{u}bingen},
  author      ={K. Schneider and T. Kropf and R. Kumar},
  booktitle   ={E.I.S.-Workshop (Entwurf integrierter Schaltungen)},
  key         ={ScKK93e},
  keyword     ={SFB358 workshop},
  month       ={November},
  pages       ={249--256},
  title       ={{K}ontrollpfad-orientierte {V}erifikation generischer {D}atenpfade},
  year        ={1993}
}
@techreport{ScKK93f,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={K. Schneider and R. Kumar and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={ScKK93f},
  keyword     ={SFB358 verification techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-7-93.ps.gz},
  number      ={SFB358-C2-7/93},
  title       ={{H}ardware-{V}erification using {F}irst {O}rder {BDD}'s},
  year        ={1993}
}
@techreport{ScKK93g,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={K. Schneider and R. Kumar and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={ScKK93g},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-8-93.ps.gz},
  number      ={SFB358-C2-8/93},
  title       ={{A}lternative {P}roof {P}rocedures for {F}inite-{S}tate {M}achines in {H}igher-{O}rder {L}ogic},
  year        ={1993}
}
@techreport{ScKK93h,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={K. Schneider and R. Kumar and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={ScKK93h},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-9-93.ps.gz},
  number      ={SFB358-C2-9/93},
  title       ={{E}liminating {H}igher-{O}rder {Q}uantifiers to {O}btain {D}ecision {P}rocedures for {H}ardware {V}erification},
  year        ={1993}
}
@inproceedings{ScKK94a,
  address     ={Paris, France},
  author      ={K. Schneider and T. Kropf and R. Kumar},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={ScKK94a},
  keyword     ={SFB358 High-Level_Verification conference},
  month       ={March},
  pages       ={648--652},
  publisher   ={IEEE Computer Society Press},
  title       ={{C}ontrol-{P}ath {O}riented {V}erification of {S}equential {G}eneric {C}ircuits with {C}ontrol and {D}ata {P}ath},
  year        ={1994}
}
@article{ScKK94b,
  author      ={K. Schneider and T. Kropf and R. Kumar},
  journal     ={Journal of Formal Methods in System Design},
  key         ={ScKK94b},
  keyword     ={SFB358 journal},
  pages       ={145--176},
  title       ={{A}ccelerating {T}ableaux {P}roofs using {C}ompact {R}epresentations},
  volume      ={5},
  year        ={1994}
}
@inproceedings{ScKK94c,
  address     ={Malta},
  author      ={K. Schneider and T. Kropf and R. Kumar},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  key         ={ScKK94c},
  keyword     ={SFB358 verification modelchecking conference},
  title       ={{W}hy {H}ardware {V}erification {N}eeds more than {M}odel {C}hecking},
  year        ={1994}
}
@inproceedings{ScKK94d,
  address     ={Malta},
  author      ={K. Schneider and R. Kumar and T. Kropf},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={ScKK94d},
  keyword     ={SFB358 conference},
  month       ={September},
  pages       ={391--406},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A}utomating {V}erification by {F}unctional {A}bstraction at the {S}ystem {L}evel},
  volume      ={859},
  year        ={1994}
}
@techreport{ScKK94e,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={K. Schneider and T. Kropf and R. Kumar},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={ScKK94e},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-9-94.ps.gz},
  number      ={SFB358-C2-9/94},
  title       ={Control-Path Oriented Verification of Sequential Generic Circuits with Control and Data Path},
  year        ={1994}
}
@techreport{ScKK94f,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={K. Schneider and T. Kropf and R. Kumar},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={ScKK94f},
  keyword     ={SFB358 verification modelchecking techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-10-94.ps.gz},
  number      ={SFB358-C2-10/94},
  title       ={Why Hardware Verification Needs more than Model Checking},
  year        ={1994}
}
@techreport{ScKK94g,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={K. Schneider and R. Kumar and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={ScKK94g},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-13-94.ps.gz},
  number      ={SFB358-C2-13/94},
  title       ={Automating Verification by Functional Abstraction at the System Level},
  year        ={1994}
}
@inproceedings{ScKK94h,
  author      ={K. Schneider and T. Kropf and R. Kumar},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden im Systementwurf},
  editor      ={H. Eveking},
  key         ={ScKK94h},
  keyword     ={SFB358 hardware verification general 2GI/ITG workshop},
  month       ={March},
  organization={GI/ITG},
  publisher   ={Universit\"{a}t Frankfurt, Interner Bericht Nr. 6/94},
  title       ={{H}ardwareverifikation braucht mehr als {M}odel-{C}hecking},
  year        ={1994}
}
@techreport{ScKT95a,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={K. Schneider and T. Kropf and T. Thiessenhusen},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={ScKT95a},
  keyword     ={SFB358 verification techreport},
  month       ={January},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-A1C2-1-95.ps.gz},
  number      ={SFB358-A1C2-1/95},
  title       ={{S}pezifikation und {V}erifikation systolischer {F}elder mit {L}ogik h\"{o}herer {O}rdnung},
  year        ={1995}
}
@inproceedings{ScKT95b,
  address     ={Passau},
  author      ={K. Schneider and T. Kropf and T. Thiessenhusen},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden beim Entwurf von Hardwaresystemen},
  editor      ={W. Grass and M. Mutz},
  key         ={ScKT95b},
  keyword     ={SFB358 hardware verification general 3GI/ITG workshop},
  month       ={March},
  organization={GI/ITG},
  pages       ={71--78},
  publisher   ={Shaker Verlag},
  series      ={Berichte aus der Informatik},
  title       ={{S}pezifikation und {V}erifikation systolischer {F}elder mit {L}ogik h\"{o}herer {O}rdnung},
  year        ={1995}
}
@techreport{ScKr95,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={K. Schneider and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={ScKr95},
  keyword     ={SFB358 verification techreport},
  month       ={December},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-5-95.ps.gz},
  number      ={SFB358-C2-5/95},
  title       ={{V}erifying {H}ardware {C}orrectness by {C}ombining {T}heorem {P}roving and {M}odel {C}hecking},
  year        ={1995}
}
@techreport{ScKr96a,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={K. Schneider and T. Kropf},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={ScKr96a},
  keyword     ={SFB358 verification techreport},
  month       ={December},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-2-96.ps.gz},
  number      ={SFB358-C2-2/96},
  title       ={{V}erifying {H}ardware {C}orrectness by {C}ombining {T}heorem {P}roving and {M}odel {C}hecking},
  year        ={1996}
}
@inproceedings{ScKr96b,
  author      ={K. Schneider and T. Kropf},
  booktitle   ={GI/ITG/GME Workshop Methoden des Entwurfs und der Verifikation digitaler Systeme},
  editor      ={B. Straube and J. Schoenherr},
  key         ={ScKr96b},
  keyword     ={SFB358 Workshop 4. GI/ITG/GME},
  month       ={March},
  pages       ={131--141},
  publisher   ={Shaker Verlag},
  title       ={A Unified Approach for Combining Different Formalisms for Hardware Verification},
  year        ={1996}
}
@inproceedings{ScKr96c,
  address     ={Palo Alto, USA},
  author      ={K. Schneider and T. Kropf},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={ScKr96c},
  keyword     ={SFB358},
  month       ={November},
  pages       ={202--217},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Unified Approach for Combining Different Formalisms for Hardware Verification},
  volume      ={1166},
  year        ={1996}
}
@incollection{ScKr97a,
  author      ={K. Schneider and T. Kropf},
  booktitle   ={Formal Hardware Verification -- Methods and Systems in Comparison},
  edition     ={State of the Art Report},
  editor      ={T. Kropf},
  key         ={ScKr97a},
  keyword     ={SFB358 book lncs1287},
  month       ={August},
  pages       ={248--329},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The {C@S} System: Combining Proof Strategies for System Verification},
  volume      ={1287},
  year        ={1997}
}
@inproceedings{ScMV83,
  author      ={R. Schwartz and P. Melliar-Smith and F. Vogt},
  booktitle   ={{ACM} Symposium on Principles of Distributed Computing},
  key         ={ScMV83},
  pages       ={173--186},
  title       ={An Interval Logic for higher-level Temporal Reasoning},
  year        ={1983}
}
@inproceedings{ScMo95,
  address     ={Aspen Grove, Utah, USA},
  author      ={T. Schubert and S. Mocas},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={ScMo95},
  month       ={September},
  pages       ={308--323},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {M}echanized {L}ogic for {S}ecure {K}ey {E}scrow {P}rotocol {V}erification},
  volume      ={971},
  year        ={1995}
}
@inproceedings{ScMo97,
  address     ={Grenoble, France},
  author      ={B.De Schutter and B.D. Moor},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={ScMo97},
  pages       ={409-414},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Generalized Linear Complementarity Problems and the Analysis of Continously Variable Systems and Discrete Event Systems},
  year        ={1997}
}
@inproceedings{ScRS93,
  address     ={T\"{u}bingen, Germany},
  author      ={D. Schmid and R. Reetz and K. Schneider},
  booktitle   ={E.I.S.-Workshop (Entwurf integrierter Schaltungen)},
  key         ={ScRS93},
  keyword     ={SFB358 conference},
  publisher   ={GMD Studien},
  title       ={{E}in {P}raktikum zur {H}ardware-{V}erifikation},
  year        ={1993}
}
@inproceedings{ScSc97,
  address     ={Grenoble, France},
  author      ={A.J. van der Schaft and J.M. Schumacher},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={ScSc97},
  pages       ={403-408},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Hybrid Systems Described by the Complementarity Formalism},
  year        ={1997}
}
@techreport{ScUl72,
  address     ={Massachusetts},
  author      ={D.M. Schuler and E.G. Ulrich},
  institution ={GTE Laboratories},
  key         ={ScUl72},
  title       ={{C}lustering and {L}inear {P}lacement},
  year        ={1972}
}
@techreport{ScWe94,
  address     ={Dortmund},
  author      ={O. Schr\"{o}der and I. Wegener},
  institution ={Fachbereich Informatik, Universit\"{a}t Dortmund},
  key         ={ScWe94},
  number      ={552/1994},
  title       ={{T}he {T}heory of {Z}ero-{S}uppressed {BDD}s and the {N}umber of {K}night {T}ours},
  type        ={Forschungsbericht},
  year        ={1994}
}
@techreport{ScWe96,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={K. Schneider and H. Weindel},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={ScWe96},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-6-96.ps.gz},
  number      ={SFB358-C2-6/96},
  title       ={An Efficient Decision Procedure for {S1S}},
  year        ={1996}
}
@inproceedings{ScWe97,
  author      ={K. Schneider and H. Weindel},
  booktitle   ={GI/ITG/GMM Workshop Methoden des Entwurfs und der Verifikation digitaler Systeme},
  editor      ={M.Pfaff and R. Hagelauer},
  key         ={ScWe97},
  keyword     ={SFB358 workshop},
  pages       ={129-138},
  title       ={An Efficient Decision Procedure for {S1S}},
  year        ={1997}
}
@mastersthesis{Scha97,
  address     ={Karlsruhe},
  author      ={R. Schaufler},
  key         ={Scha97},
  keyword     ={SFB358},
  remark      ={betreut von T. Kropf und J. Ruf},
  school      ={Universit\"{a}t Karlsruhe},
  title       ={Vergleichsaussagen logischer Beweisverfahren f\"{u}r die
Hardware-Verifikation},
  year        ={1997}
}
@inproceedings{Sche93,
  address     ={Bad Herrenalb},
  author      ={M. Schenke},
  booktitle   ={GI/ITG Workshop Formale Methoden zum Entwurf korrekter Systeme},
  editor      ={T. Kropf and R. Kumar and D. Schmid},
  key         ={Sche93},
  keyword     ={1GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={111--115},
  publisher   ={Universit\"{a}t Karlsruhe, Interner Bericht Nr. 10/93},
  title       ={{C}orrect {T}ransformation of {T}ime {S}pecifications},
  year        ={1993}
}
@inproceedings{Sche94,
  address     ={L\"{u}beck, Germany},
  author      ={M. Schenke},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={Sche94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={605--620},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{S}pecification and {T}ransformation of {R}eactive {S}ystems with {T}ime {R}estrictions and {C}oncurrency},
  volume      ={863},
  year        ={1994}
}
@inproceedings{Schl90,
  address     ={Germany},
  author      ={B.-H. Schlingloff},
  booktitle   ={{ESPRIT} {BRA} {ASMICS} Workshop on Logics and Recognizable Sets},
  key         ={Schl90},
  title       ={Modal definability of Omega-Tree Languages},
  year        ={1990}
}
@inproceedings{Schl93,
  address     ={Bad Herrenalb},
  author      ={T. Schlipf},
  booktitle   ={GI/ITG Workshop Formale Methoden zum Entwurf korrekter Systeme},
  editor      ={T. Kropf and R. Kumar and D. Schmid},
  key         ={Schl93},
  keyword     ={1GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={95--103},
  publisher   ={Universit\"{a}t Karlsruhe, Interner Bericht Nr. 10/93},
  title       ={{S}imulation und formale {A}nalyse als {E}lemente eines {D}esign-Verifikationskonzeptes},
  year        ={1993}
}
@book{Schm79,
  address     ={Stuttgart},
  author      ={V. Schmidt},
  key         ={Schm79},
  keyword     ={textbook hardware systemlevel microprocessor},
  note        ={(in german)},
  publisher   ={B.G. Teubner Verlag},
  title       ={{D}igitalschaltungen mit {M}ikroprozessoren},
  year        ={1979}
}
@techreport{Schm87,
  address     ={University Kaiserslautern},
  author      ={M. Schmidt-Schauss},
  institution ={SEKI-Report},
  key         ={Schm87},
  keyword     ={Logic techreport},
  number      ={SR-87-16},
  title       ={Unification in a combination of arbitrary disjoint equational theories},
  year        ={1987}
}
@article{Schm88,
  author      ={U.R. Schmerl},
  journal     ={Acta Informatica},
  key         ={Schm88},
  pages       ={425-438},
  title       ={Resolution on Formula Trees},
  volume      ={25},
  year        ={1988}
}
@inbook{Schm92,
  author      ={P.H. Schmitt},
  key         ={Schm92},
  note        ={Skriptum SS'92},
  pages       ={73--89},
  publisher   ={Universit\"{a}t Karlsruhe},
  title       ={{N}ichtklassische {L}ogiken},
  year        ={1992}
}
@mastersthesis{Schm97,
  address     ={Karlsruhe},
  author      ={F. Schmiedle},
  key         ={Schm97},
  keyword     ={SFB358},
  remark      ={betreut von T. Kropf und J. Ruf},
  school      ={Universit\"{a}t Karlsruhe},
  title       ={Ein neues Verfahren zur symbolischen Modellpr\"{u}fung
f\"{u} endliche Automaten},
  year        ={1997}
}
@mastersthesis{Schn91,
  address     ={Karlsruhe},
  author      ={K. Schneider},
  key         ={Schn91},
  keyword     ={formalism gatelevel verification SFB358},
  remark      ={betreut von T. Kropf und R. Kumar},
  school      ={Universit\"{a}t Karlsruhe},
  title       ={Ein {S}equenzenkalk\"{u}l f\"{u}r {HOL}},
  year        ={1991}
}
@book{Schn91a,
  address     ={M\"{u}nchen Wien},
  editor      ={H.-J. Schneider},
  key         ={Schn91a},
  keyword     ={textbook tutorial},
  publisher   ={Oldenbourg Verlag},
  title       ={{L}exikon der {I}nformatik und {D}atenverarbeitung},
  year        ={1991}
}
@techreport{Schn94,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={K. Schneider},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={Schn94},
  keyword     ={SFB358 verification techreport},
  month       ={December},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-16-94.ps.gz},
  number      ={SFB358-C2-16/94},
  title       ={{E}in automatentheoretischer {A}nsatz zur {S}trukturabstraktion f\"{u}r die hierarchische {V}erifikation},
  year        ={1994}
}
@techreport{Schn95a,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={K. Schneider},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={Schn95a},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-1-95.ps.gz},
  number      ={SFB358-C2-1/95},
  title       ={Beweise der Dissertation},
  year        ={1995}
}
@inproceedings{Schn95c,
  address     ={Passau},
  author      ={K. Schneider},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden beim Entwurf von Hardwaresystemen},
  editor      ={W. Grass M. Mutz},
  key         ={Schn95c},
  keyword     ={SFB358 hardware verification general 3GI/ITG workshop},
  month       ={March},
  organization={GI/ITG},
  pages       ={79--87},
  publisher   ={Shaker Verlag},
  series      ={Berichte aus der Informatik},
  title       ={{E}in automatentheoretischer {A}nsatz zur {S}trukturabstraktion f\"{u}r die hierarchische {V}erifikation},
  year        ={1995}
}
@book{Schn96a,
  address     ={{S}ankt {A}ugustin},
  author      ={K. Schneider},
  key         ={Schn96a},
  keyword     ={SFB358 book},
  note        ={ISBN 3-89601-116-2},
  publisher   ={{I}nfix {V}erlag},
  series      ={{DISKI} ({D}issertationen zur {K}\"{u}nstlichen {I}ntelligenz)},
  title       ={{Ein} einheitlicher {Ansatz} zur {Unterst\"{u}tzung} von {Abstraktionsmechanismen} der {H}ardwareverifikation},
  volume      ={116},
  year        ={1996}
}
@techreport{Schn96b,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={K. Schneider},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={Schn96b},
  keyword     ={SFB358 verification techreport},
  month       ={January},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-3-96.ps.gz},
  number      ={SFB358-C2-3/96},
  title       ={{T}ranslating {LTL} {M}odel {C}hecking to {CTL} {M}odel {C}hecking},
  year        ={1996}
}
@techreport{Schn96e,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={K. Schneider},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={Schn96e},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-3-96.ps.gz},
  number      ={SFB358-C2-3/96},
  title       ={Translating {LTL} Model Checking to {CTL} Model Checking},
  year        ={1996}
}
@inproceedings{Schn97a,
  address     ={Toledo,Spain},
  author      ={K. Schneider},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos}},
  key         ={Schn97a},
  keyword     ={SFB358 conference},
  month       ={April},
  organization={IFIP},
  pages       ={40-59},
  publisher   ={Chapman and Hall},
  title       ={{CTL} and Equivalent Sublanguages of {CTL*}},
  year        ={1997}
}
@inproceedings{Schn97b,
  author      ={K. Schneider},
  booktitle   ={GI/ITG/GMM Workshop Methoden des Entwurfs und der Verifikation digitaler Systeme},
  editor      ={M.Pfaff and R. Hagelauer},
  key         ={Schn97b},
  keyword     ={SFB358 workshop},
  pages       ={149-158},
  title       ={Translating Linear Temporal Logic to Deterministic $\omega$-Automata},
  year        ={1997}
}
@book{Scho80,
  author      ={U. Sch\"{o}ning},
  key         ={Scho80},
  keyword     ={verification},
  publisher   ={Vieweg Verlag},
  title       ={Einf\"{u}hrung in die Logik f\"{u}r Informatiker},
  year        ={1980}
}
@book{Scho87,
  address     ={Universit\"{a}t Ulm},
  author      ={U. Sch\"{o}ning},
  edition     ={3},
  key         ={Scho87},
  keyword     ={formalism firstorderlogic textbook},
  publisher   ={BI Wissenschaftsverlag},
  series      ={Reihe Informatik},
  title       ={{L}ogik f\"{u}r {I}nformatiker},
  volume      ={56},
  year        ={1987}
}
@book{Scho92,
  address     ={Universit\"{a}t Ulm},
  author      ={U. Sch\"{o}ning},
  edition     ={3},
  key         ={Scho92},
  keyword     ={textbook},
  publisher   ={BI Wissenschaftsverlag},
  title       ={{T}heoretische {I}nformatik kurz gefasst},
  year        ={1992}
}
@inproceedings{Schu91a,
  address     ={Davis, California},
  author      ={E.T. Schubert},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Schu91a},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Verification of Integrated Subsystems},
  year        ={1991}
}
@inproceedings{Schu91b,
  address     ={Davis, California},
  author      ={E.T. Schubert},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Schu91b},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={88--95},
  publisher   ={IEEE Computer Society Press},
  title       ={Verification of Composed Hardware Systems Using {CCS}},
  year        ={1991}
}
@inproceedings{Schu91c,
  address     ={Davis, California},
  author      ={T. Schubert},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Schu91c},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Verifying Computer Systems},
  year        ={1991}
}
@inproceedings{Schu94,
  address     ={Standford, California, USA},
  author      ={E. T. Schubert},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={Schu94},
  month       ={June},
  pages       ={260--272},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Hybrid Model for Reasoning about Composed Hardware Systems},
  volume      ={818},
  year        ={1994}
}
@inproceedings{SeBr90,
  author      ={C.-J.H. Seger and R.E. Bryant},
  booktitle   ={Formal {VLSI} Correctness Verification},
  editor      ={L.J.M. Claesen},
  key         ={SeBr90},
  keyword     ={hardware verification general symbolicsimulation},
  pages       ={23--37},
  publisher   ={Elsevier, North-Holland},
  title       ={Modeling of Circuit Delays in Symbolic Simulation},
  year        ={1990}
}
@techreport{SeBr93,
  address     ={Vancouver, Canada},
  author      ={C.-J.H. Seger and R.E. Bryant},
  institution ={University of British Columbia Computer Science Department},
  key         ={SeBr93},
  keyword     ={hardware gatelevel verification switchlevel formalism transitionsystem trajectoryevaluation modelchecking voss transistorlevel},
  month       ={July},
  number      ={Tr-93-08},
  title       ={{F}ormal {V}erification by {S}ymbolic {E}valuation of {P}artially-{O}rdered {T}rajectories},
  year        ={1993}
}
@article{SeBr95,
  author      ={C.-J.H. Seger and R.E. Bryant},
  journal     ={Formal Methods in Systems Design},
  key         ={SeBr95},
  month       ={March},
  pages       ={147--189},
  title       ={Formal Verification by Symbolic Evaluation of Partially-Ordered Trajectories},
  volume      ={6},
  year        ={1995}
}
@techreport{SeJo91,
  address     ={Vancouver. B.C., Canada},
  author      ={C.-J. Seger and J.J. Joyce},
  institution ={Department of Computer Science, University of British Columbia},
  key         ={SeJo91},
  month       ={June},
  number      ={91-10},
  title       ={A Two-Level Formal Verification Methodology using {HOL} and {COSMOS}},
  year        ={1991}
}
@inproceedings{SeWi96,
  address     ={Oxford},
  author      ={C. Seguin and V. Wiels},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={SeWi96},
  month       ={March},
  pages       ={347- 366},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{U}sing a {L}ogical and {C}ategorical {A}pproach for the {V}alidation of {F}ault-{T}olerant {S}ystems},
  volume      ={1051},
  year        ={1996}
}
@techreport{Sege92,
  address     ={Vancouver},
  author      ={C.-J.H. Seger},
  institution ={University of British Columbia, Computer Science Department},
  key         ={Sege92},
  keyword     ={verification registertransferlevel hardware tutorial},
  number      ={TR-92-13},
  title       ={An Introduction to Formal Hardware Verification},
  year        ={1992}
}
@techreport{Sege93,
  author      ={C.-J.H. Seger},
  institution ={Department of Computer Science, University of British Columbia},
  key         ={Sege93},
  month       ={November},
  note        ={ftp://ftp.cs.ubc.ca/pub/local/techreports/1993/TR-93-45.ps.gz.},
  number      ={93-45},
  title       ={Voss --- A Formal Hardware Verification System User's Guide},
  type        ={Technical Report},
  year        ={1993}
}
@article{Seit80,
  author      ={C.L. Seitz},
  journal     ={Lambda},
  key         ={Seit80},
  number      ={4},
  title       ={Ideas about arbiters},
  volume      ={10},
  year        ={1980}
}
@mastersthesis{Seit92,
  address     ={Karlsruhe},
  author      ={O. Seitz},
  key         ={Seit92},
  keyword     ={formalism fsm symbolic_state_traversal BDD hardware gatelevel verification},
  month       ={May},
  remark      ={betreut von T. Kropf},
  school      ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz, Universit\"{a}t Karlsruhe},
  title       ={{A}lgorithmen zum {N}achweis der \"{A}quivalenz von sequentiellen {S}chaltungen},
  year        ={1992}
}
@inproceedings{Seli93,
  address     ={Ottawa, Canada},
  author      ={B. Selic},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Seli93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={321--330},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={An Efficient Object-Oriented Variation of the Statecharts Formalism for Distributed Real-Time Systems},
  year        ={1993}
}
@inbook{Seme84,
  author      ={A.L. Semenov},
  chapter     ={Decidability of monadic theories},
  key         ={Seme84},
  keyword     ={omega},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Mathematical Foundation of Computer Science},
  year        ={1984}
}
@inproceedings{Sent96,
  address     ={Palo Alto, CA, USA},
  author      ={E. M. Sentovich},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={Sent96},
  month       ={November},
  pages       ={389--403},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Brief Study of {BDD} Package Performance},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{ShAb86,
  author      ={H. Shih and J.A. Abraham},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={ShAb86},
  organization={IEEE},
  pages       ={243--249},
  title       ={Transistor-Level Test Generation For Physical Failures in {CMOS} Circuits},
  year        ={1986}
}
@inproceedings{ShBS92,
  address     ={Santa Clara, California},
  author      ={N. Shenoy and R.K. Brayton and A.L. Sangiovanni-Vincentelli},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={ShBS92},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={132--136},
  publisher   ={IEEE Computer Society Press},
  title       ={{G}raph {A}lgorithms for {C}lock {S}chedule {O}ptimization},
  year        ={1992}
}
@inproceedings{ShBS94,
  address     ={Grenoble, France},
  author      ={A. Shahid and M.S.T. Benten and S.M. Sait},
  booktitle   ={European Design Automation Conference },
  key         ={ShBS94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={84--89},
  publisher   ={IEEE Computer Society Press},
  title       ={{GSA}: {S}cheduling and {A}llocation {U}sing {G}enetic {A}lgorithm},
  year        ={1994}
}
@inproceedings{ShBT96,
  address     ={Paris, France},
  author      ={T. Shiple and G. Berry and H. Touati},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={ShBT96},
  publisher   ={IEEE Computer Society {Press}},
  title       ={Constructive Analysis of Cyclic Circuits},
  year        ={1996}
}
@inproceedings{ShCh96,
  address     ={Paris, France},
  author      ={Y. Shin and K. Choi},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={ShCh96},
  month       ={March},
  pages       ={275-281},
  publisher   ={{IEEE} Computer Society Press (Los Alamitos, California)},
  title       ={Thread-Based Software Synthesis for Embedded System Design},
  year        ={1996}
}
@inproceedings{ShDG93,
  address     ={Santa Clara, California},
  author      ={A. Shen and S. Devadas and A. Ghosh},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={ShDG93},
  keyword     ={verification},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={544--551},
  publisher   ={IEEE Computer Society Press},
  title       ={{P}robabilistic {C}onstruction and {M}anipulation of {F}ree {B}oolean {D}iagrams},
  year        ={1993}
}
@inproceedings{ShFr88,
  address     ={Rye Town Hill},
  author      ={B.L. Shing and M.A. Franklin},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={ShFr88},
  month       ={October},
  organization={IEEE},
  pages       ={277--282},
  title       ={Classical Fault Analysis for {MOS} {VLSI} Circuits},
  year        ={1988}
}
@inproceedings{ShGr89,
  address     ={Grenoble, France},
  author      ={Z. Shtadler and O. Grumberg},
  booktitle   ={International Workshop on Automatic Verification Methods for Finite State Systems},
  editor      ={J. Sifakis},
  key         ={ShGr89},
  month       ={June},
  publisher   ={Springer-Verlag},
  series      ={of Lecture Notes in Computer Science},
  title       ={{N}etwork {G}rammars, {C}ommunication {B}ehaviors and {A}utomatic {V}erification},
  volume      ={407},
  year        ={1989}
}
@inproceedings{ShGr90,
  author      ={G. Shurek and O. Grumberg},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={R. P. Kurshan and E. M. Clarke},
  key         ={ShGr90},
  month       ={June},
  title       ={The {M}odular {F}ramework of {C}omputer-{A}ided {V}erification: {M}otivation, {S}olutions and {E}valuation {C}riteria},
  year        ={1990}
}
@inproceedings{ShHR96,
  address     ={New Brunswick, NJ, USA},
  author      ={S. K. Shukla and H. B. Hunt and D. J. Rosenkrantz},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={ShHR96},
  month       ={July/August},
  pages       ={99--110},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{HORNSAT}, Model Checking, Verification and Games},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{ShJo87,
  author      ={M. Sheeran and G. Jones},
  booktitle   ={{IEEE}},
  key         ={ShJo87},
  pages       ={303-306},
  title       ={Relations + Higher-Order Functions = Hardware Descriptions},
  year        ={1987}
}
@inproceedings{ShNi96,
  address     ={Oxford},
  author      ={L. Shi and P. Nixon},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={ShNi96},
  month       ={March},
  pages       ={518-537},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{A}n {I}mproved {T}ranslation of {SA}/{RT} {S}pecification {M}odel to {H}igh-{L}evel {T}imed {P}etri {N}ets},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{ShPE84,
  author      ={D.E. Shasha and A. Pnueli and W. Ewald},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={ShPE84},
  pages       ={54--65},
  publisher   ={ACM Press},
  title       ={{T}emporal {V}erification of {C}arrier-{S}ense {L}ocal {A}rea {N}etwork {P}rotocols},
  year        ={1984}
}
@inproceedings{ShRa93,
  address     ={Arles,France},
  author      ={R. Sharp and O. Rasmussen},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  key         ={ShRa93},
  month       ={May},
  pages       ={226-241},
  publisher   ={Springer-Verlag},
  title       ={Rewriting with Constraints in {T}-{R}uby},
  year        ={1993}
}
@inproceedings{ShRa93a,
  address     ={Arles, France},
  author      ={R. Sharp and O. Rasmussen},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={ShRa93a},
  keyword     ={verification},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={226--241},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Rewriting with Constraints in T-Ruby},
  volume      ={683},
  year        ={1993}
}
@inproceedings{ShRa93b,
  address     ={Ottawa, Canada},
  author      ={R. Sharp and O. Rasmussen},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={ShRa93b},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={231--248},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Transformational Rewriting with Ruby},
  year        ={1993}
}
@inproceedings{ShRa94,
  address     ={L\"{u}beck, Germany},
  author      ={R.K. Shyamasundar and S. Ramesh},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={ShRa94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={621--640},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{L}anguages for {R}eactive {S}pecifications: {S}ynchrony {V}s {A}synchrony},
  volume      ={863},
  year        ={1994}
}
@inproceedings{ShSl97,
  address     ={Montreal, Canada},
  author      ={S. Shankar and J. Slagle},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={H. F. Li and D. K. Probst},
  key         ={ShSl97},
  keyword     ={conference},
  month       ={October},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={A polymodal semantics for {VHDL}},
  year        ={1997}
}
@article{Shan38,
  author      ={C.E. Shannon},
  journal     ={Trans. AIEE},
  key         ={Shan38},
  keyword     ={Logic},
  pages       ={713--723},
  title       ={A symbolic analysis of relay and switching circuits},
  year        ={1938}
}
@article{Shan48,
  author      ={C.E. Shannon},
  journal     ={Bell Systems Technical Journal},
  key         ={Shan48},
  keyword     ={formalism propositionallogic},
  title       ={The Synthesis of Two-Terminal Switching Circuits},
  year        ={1948}
}
@inproceedings{Shan92,
  address     ={Nijmegen, The Netherlands},
  author      ={N. Shankar},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={J. Vytopil},
  key         ={Shan92},
  month       ={January},
  pages       ={217--236},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Mechanical {V}erification of a {G}eneralized {P}rotocol for {Byzantine} {F}ault-{T}olerant {C}lock {S}ynchronization},
  volume      ={571},
  year        ={1992}
}
@inproceedings{Shan93,
  address     ={Elounda, Greece},
  author      ={N. Shankar},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Costas Courcoubetis},
  key         ={Shan93},
  month       ={June/July},
  pages       ={280--291},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification of {R}eal-{T}ime {S}ystems {U}sing {PVS}},
  volume      ={697},
  year        ={1993}
}
@inproceedings{Shan96,
  address     ={Palo Alto, CA, USA},
  author      ={N. Shankar},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={Shan96},
  month       ={November},
  pages       ={257--264},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{PVS}: Combining Specification, proof checking, and Model checking},
  volume      ={1166},
  year        ={1996}
}
@techreport{Shaw79,
  author      ={A.C. Shaw},
  institution ={ETH Z\"{u}rich},
  key         ={Shaw79},
  month       ={June},
  title       ={Software Specifications Language Based on Regular Expressions},
  year        ={1979}
}
@article{Shaw92,
  author      ={A.C. Shaw},
  journal     ={IEEE Transaction on Software Engineering},
  key         ={Shaw92},
  number      ={9},
  pages       ={805--816},
  title       ={Communicating Real-Time State Machines},
  volume      ={18},
  year        ={1992}
}
@phdthesis{Shee83,
  address     ={England},
  author      ={M. Sheeran},
  key         ={Shee83},
  school      ={University of Oxford},
  title       ={{uFP}, An Algebraic {VLSI} Design Language},
  year        ={1983}
}
@article{Shee86,
  author      ={M. Sheeran},
  journal     ={IEE E- Special Issue on Digital Design Verification},
  key         ={Shee86},
  keyword     ={verification},
  month       ={September},
  number      ={Part E(5)},
  pages       ={295--304},
  title       ={Design and Verification of Regular Synchronous Circuits},
  volume      ={133},
  year        ={1986}
}
@inproceedings{Shee88,
  address     ={Glasgow, Scotland},
  author      ={M. Sheeran},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={Shee88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={289--308},
  publisher   ={North-Holland},
  title       ={Retiming and Slowdown in Ruby},
  year        ={1988}
}
@article{Shel75,
  author      ={S. Shelah},
  journal     ={Ann. of Math.},
  key         ={Shel75},
  keyword     ={omega},
  pages       ={379--419},
  title       ={The monadic theory of order},
  volume      ={102},
  year        ={1975}
}
@inproceedings{Shep91,
  address     ={Davis, California},
  author      ={D. Shepherd},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Shep91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={162--169},
  publisher   ={IEEE Computer Society Press},
  title       ={Using {HOL} to Produce Custom Verification Tools},
  year        ={1991}
}
@book{Shoe67,
  author      ={J.R. Shoenfield},
  key         ={Shoe67},
  keyword     ={Logic},
  publisher   ={Addison-Wesley},
  title       ={Mathematical Logic},
  year        ={1967}
}
@inproceedings{Shos83,
  address     ={Amsterdam},
  author      ={R.E. Shostak},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={T. Uehara and M. Barbacci},
  key         ={Shos83},
  organization={IFIP},
  publisher   ={North-Holland},
  title       ={Formal Verification of Circuit Designs},
  year        ={1983}
}
@article{Shos84,
  author      ={R.E. Shostak},
  journal     ={Journal of the ACM},
  key         ={Shos84},
  month       ={January},
  number      ={1},
  pages       ={1--12},
  title       ={Deciding {C}ombinations of {T}heories},
  volume      ={31},
  year        ={1984}
}
@inproceedings{SiCl82,
  author      ={A.P. Sistla and E. Clarke},
  booktitle   ={{ACM} Symposium on Theory of Computing},
  key         ={SiCl82},
  pages       ={159-167},
  title       ={The complexity of Propositional Temporal Logic},
  year        ={1982}
}
@article{SiCl85,
  author      ={A.P. Sistla and E.M. Clarke},
  journal     ={Journal of Assoc. Comput. Mach.},
  key         ={SiCl85},
  keyword     ={omega hardware specification logic ltl},
  month       ={July},
  number      ={3},
  pages       ={733--749},
  title       ={The Complexity of Propositional Linear Temporal Logics},
  volume      ={32},
  year        ={1985}
}
@inproceedings{SiGe87,
  address     ={Washington, D.C.},
  author      ={A.P. Sistla and S. German},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={SiGe87},
  organization={IEEE},
  pages       ={138--152},
  publisher   ={IEEE Society Press},
  title       ={Reasoning with many Processes},
  year        ={1987}
}
@inproceedings{SiMa94,
  address     ={L\"{u}beck, Germany},
  author      ={H.B. Sipma and Z. Manna},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={SiMa94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={641--659},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{S}pecification and {V}erification of {C}ontrolled {S}ystems},
  volume      ={863},
  year        ={1994}
}
@inproceedings{SiND88,
  address     ={Glasgow, Scotland},
  author      ={H. Simonis and N. Nguyen and M. Dincbas},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={SiND88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={421--442},
  publisher   ={North-Holland},
  title       ={Verification of Digital Circuits using {CHIP}},
  year        ={1988}
}
@inproceedings{SiPi94,
  address     ={Standford, California, USA},
  author      ={V. Singhal and C. Pixley},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={SiPi94},
  month       ={June},
  pages       ={311--323},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The Verification Problem for safe Replaceability},
  volume      ={818},
  year        ={1994}
}
@inproceedings{SiRe94,
  address     ={Standford, California, USA},
  author      ={R. de Simone and A. Ressouche},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={SiRe94},
  month       ={June},
  pages       ={441--454},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Compositional Semantics of {E}sterel and Verification by Compositional Reductions},
  volume      ={818},
  year        ={1994}
}
@inproceedings{SiUM96,
  address     ={New Brunswick, NJ, USA},
  author      ={H. B. Sipma and T. E. Uribe and Z. Manna},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={SiUM96},
  month       ={July/August},
  pages       ={208--219},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Deductive Model Checking},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{SiVW85,
  address     ={New York},
  author      ={A.P. Sistla and M.Y. Vardi and P. Wolper},
  booktitle   ={International Colloquium on Automata, Languages and Programming (ICALP)},
  key         ={SiVW85},
  pages       ={465--474},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The Complementation Problem for B\"{u}chi Automata with Applications to Temporal Logic},
  volume      ={194},
  year        ={1985}
}
@article{SiVW87,
  author      ={A.P. Sistla and M.Y. Vardi and P. Wolper},
  journal     ={Theoretical Computer Science},
  key         ={SiVW87},
  keyword     ={omega},
  pages       ={217--237},
  title       ={The Complementation Problem for B\"{u}chi Automata with Applications to Temporal Logic},
  volume      ={49},
  year        ={1987}
}
@unpublished{SiWe93,
  author      ={D. Sieling and I. Wegener},
  key         ={SiWe93},
  note        ={was submitted to EDAC93},
  title       ={Reduction of {BDD}s in Linear Time},
  year        ={1993}
}
@article{SiWe95,
  author      ={D. Sieling and I. Wegener},
  journal     ={Theoretical Computer Science},
  key         ={SiWe95},
  pages       ={283--310},
  title       ={{G}raph driven {BDD}s - {A} new data structure for {B}oolean {F}unctions},
  volume      ={141},
  year        ={1995}
}
@book{Sief70,
  author      ={D. Siefkes},
  key         ={Sief70},
  keyword     ={omega},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Mathematics},
  title       ={Decidable Theories I: B\"{u}chi's Monadic Second Order Successor Arithmetic},
  year        ={1970}
}
@article{Sief75,
  author      ={D. Siefkes},
  journal     ={Arch. Math. Logik},
  key         ={Sief75},
  keyword     ={omega},
  pages       ={71--80},
  title       ={The recursive sets in certain monadic second order fragments of arithmetic},
  volume      ={17},
  year        ={1975}
}
@article{Siek89,
  author      ={J. Siekmann},
  journal     ={Journal of Symbolic Computation},
  key         ={Siek89},
  keyword     ={Logic},
  pages       ={207--274},
  title       ={Unification Theory},
  volume      ={7},
  year        ={1989}
}
@book{Sifa87,
  author      ={J. Sifakis},
  key         ={Sifa87},
  title       ={Personal Communication},
  year        ={1987}
}
@techreport{Sina94,
  address     ={Netherlands},
  author      ={P. Sinander},
  institution ={Onboard Data Division},
  key         ={Sina94},
  note        ={http://vhdl.org/vi/vhdlsynth/guidelines/ModelGuide.ps},
  title       ={{VHDL} Modelling Guidelines},
  year        ={1994}
}
@inproceedings{Sinc97,
  address     ={Grenoble, France},
  author      ={D. Sinclair},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={Sinc97},
  pages       ={186-198},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Using an Object-Oriented Methodology to Bring a Hybrid System from Initial concept to Formal Definition},
  year        ={1997}
}
@inproceedings{Sing92,
  author      ={S. Singh},
  booktitle   ={Workshop on Designing Correct Circuits},
  key         ={Sing92},
  pages       ={119-138},
  title       ={Circuit Analysis by Non-Standard Interpretation},
  year        ={1992}
}
@phdthesis{Sist83,
  address     ={Cambridge, MA},
  author      ={A. P. Sistla},
  key         ={Sist83},
  school      ={Harvard University},
  title       ={Theoretical Issues in the Design of Distributed and Concurrent Systems},
  year        ={1983}
}
@inproceedings{Sist85,
  author      ={A. P. Sistla},
  booktitle   ={{ACM} Symposium on Principles of Distributed Computing},
  key         ={Sist85},
  pages       ={39--48},
  title       ={Characterization of Safety and Liveness Properties in Temporal Logic},
  year        ={1985}
}
@inproceedings{Sive96,
  address     ={Oxford},
  author      ={T. Sivertsen},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={Sive96},
  month       ={March},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{A} {C}ase {S}tudy on the {F}ormal {D}evelopment of a {R}eactor {S}afety {S}ystem},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{SkSh94,
  address     ={L\"{u}beck, Germany},
  author      ={J.U. Skakkebaek and N. Shankar},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={SkSh94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={660--679},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{T}owards a {D}uration {C}alculus {P}roof {A}ssistant in {PVS}},
  volume      ={863},
  year        ={1994}
}
@article{Skol20,
  author      ={T. Skolem},
  journal     ={Videnskapsselskapets skrifter, I. Mathematisk-naturvidenskabelig klasse},
  key         ={Skol20},
  title       ={Logisch-kombinatorische {U}ntersuchungen \"{u}ber die {E}rf\"{u}llbarkeit oder {B}eweisbarkeit mathematischer {S}\"{a}tze nebst einem {T}heoreme \"{u}ber dichte {M}engen},
  volume      ={4},
  year        ={1920}
}
@article{Skol28,
  author      ={T. Skolem},
  journal     ={Norsk mathemtisk tidsskrift},
  key         ={Skol28},
  pages       ={125-142},
  title       ={\"{U}ber die mathematische {L}ogik},
  volume      ={10},
  year        ={1928}
}
@inproceedings{Slin91,
  address     ={Davis, California},
  author      ={K. Slind},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Slin91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={{HOL90}: {N}ot {J}ust an {U}gly {R}umor!},
  year        ={1991}
}
@techreport{Slin91a,
  author      ={K. Slind},
  institution ={University of Calgary, Computer Science Department},
  key         ={Slin91a},
  keyword     ={HOL90 HOL},
  number      ={91--419--03},
  title       ={{A}n {I}mplementation of {H}igher {O}rder {L}ogic},
  year        ={1991}
}
@inproceedings{Slin92,
  address     ={Leuven, Belgium},
  author      ={K. Slind},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Slin92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={549--561},
  publisher   ={North-Holland},
  title       ={{A}dding {N}ew {R}ules to an {LCF}-{S}tyle {L}ogic {I}mplementation},
  year        ={1992}
}
@unpublished{Slin92a,
  author      ={K. Slind},
  title       ={Completion as a Derived Rule of Inference},
  year        ={1992}
}

@inproceedings{Slin93,
  address     ={Vancouver, Canada},
  author      ={K. Slind},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Slin93},
  keyword     ={HOL},
  month       ={August},
  organization={University of British Columbia},
  pages       ={438--451},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={{AC} {U}nification in {HOL90}},
  volume      ={780},
  year        ={1993}
}
@inproceedings{Slin94,
  address     ={Malta},
  author      ={K. Slind},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={Slin94},
  keyword     ={formalism higherorderlogic HOL},
  month       ={September},
  pages       ={407--423},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {P}arameterized {P}roof {M}anager},
  volume      ={859},
  year        ={1994}
}
@inproceedings{Slin96,
  address     ={Turku, Finland},
  author      ={K. Slind},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={Slin96},
  month       ={August},
  pages       ={381--398},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Function Definition in Higher Order Logic},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{SmGr96,
  address     ={Turku, Finland},
  author      ={A. Smail and I. Green},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={SmGr96},
  month       ={August},
  pages       ={399--414},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Higher Order Annotated Terms for Proof Search},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{SmZw92,
  author      ={S.F. Smith and A.E. Zwarico},
  booktitle   ={Workshop on Designing Correct Circuits},
  key         ={SmZw92},
  pages       ={237-260},
  title       ={{P}rovably {C}orrect {S}ynthesis of {A}synchronous {C}ircuits},
  year        ={1992}
}
@inproceedings{SmZw93,
  address     ={Arles, France},
  author      ={S.F. Smith and A.E. Zwarico},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={SmZw93},
  keyword     ={verification},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={179--190},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{C}orrect {C}ompilation of {S}pecifications to {D}eterministic {A}synchronous {C}ircuits},
  volume      ={683},
  year        ={1993}
}
@book{Smul68,
  author      ={R.M. Smullyan},
  key         ={Smul68},
  keyword     ={Logic},
  publisher   ={Springer-Verlag},
  title       ={{F}irst {O}rder {L}ogic},
  year        ={1968}
}
@phdthesis{Sneu83,
  address     ={Netherlands},
  author      ={J.L.A. van de Sneupscheut},
  key         ={Sneu83},
  school      ={Department of Computing Science, Eindhove University of Technology},
  title       ={{T}race {T}heory and {VLSI} {D}esign},
  year        ={1983}
}
@article{SoGa86,
  author      ={F. Somenzi and S. Gai},
  journal     ={IEEE},
  key         ={SoGa86},
  month       ={May},
  number      ={5},
  pages       ={655--668},
  title       ={{F}ault {D}etection in {P}rogrammable {L}ogic {A}rrays},
  volume      ={74},
  year        ={1986}
}
@inproceedings{SoSm94,
  address     ={Standford, California, USA},
  author      ={O. V. Sokolsky and S. A. Smolka},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={SoSm94},
  month       ={June},
  pages       ={351--363},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Incremental Model Checking in the Modal Mu-Calculus},
  volume      ={818},
  year        ={1994}
}
@inproceedings{SoSm95,
  address     ={Liege, Belgium},
  author      ={O. V. Sokolsky and S. A. Smolka},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={SoSm95},
  month       ={July},
  pages       ={211--224},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Local model checking for real-time systems},
  volume      ={939},
  year        ={1995}
}
@inproceedings{SpBa92,
  address     ={York, United Kingdom},
  author      ={C. Sporrer and H. Bauer},
  booktitle   ={European Simulation Multiconference (ESM)},
  key         ={SpBa92},
  month       ={June},
  pages       ={409--413},
  title       ={{P}artitioning {VLSI}-{C}ircuits for {D}istributed {L}ogic {S}imulation},
  year        ={1992}
}
@article{SpSt93,
  author      ={J. Spars{\o} and J. Staunstrup},
  journal     ={{INTEGRATION}, the {VLSI} Journal, North-Holland},
  key         ={SpSt93},
  number      ={3},
  title       ={Delay-insensitive Multi-ring Structures},
  volume      ={15},
  year        ={1993}
}
@inproceedings{SrAg86,
  author      ={N.C.E. Srinivas and V.D. Agrawal},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={SrAg86},
  keyword     ={verification},
  pages       ={306--309},
  title       ={{P}rove: {P}rolog {B}ased {V}erifier},
  year        ={1986}
}
@article{SrBi90,
  author      ={M.K. Srivas and M. Bickford},
  journal     ={IEEE Software},
  key         ={SrBi90},
  month       ={sep},
  number      ={5},
  pages       ={52--64},
  title       ={Formal {V}erification of a {P}ipelined {M}icroprocessor},
  volume      ={7},
  year        ={1990}
}
@inproceedings{SrMi95,
  address     ={Chiba, Japan},
  author      ={M. K. Srivas and S. P. Miller},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  key         ={SrMi95},
  month       ={August},
  title       ={Applying formal verification to a commercial microprocessor},
  year        ={1995}
}
@incollection{SrMi95a,
  address     ={Hemel Hempstead, UK},
  author      ={M.K. Srivas and S.P. Miller},
  booktitle   ={Applications of Formal Methods},
  chapter     ={7},
  editor      ={Michael G. Hinchey and Jonathan P. Bowen},
  key         ={SrMi95a},
  pages       ={125--180},
  publisher   ={Prentice Hall},
  series      ={Prentice Hall International Series in Computer Science},
  title       ={Formal Verification of the {AAMP5} Microprocessor},
  year        ={1995}
}
@article{SrMi96,
  author      ={M.K. Srivas and S.P. Miller},
  journal     ={Formal Methods in Systems Design},
  key         ={SrMi96},
  month       ={March},
  number      ={2},
  pages       ={153--188},
  title       ={Applying {F}ormal {V}erification to the {AAMP5} {M}icroprocessor: A {C}ase {S}tudy in the {I}ndustrial {U}se of {F}ormal {M}ethods},
  volume      ={8},
  year        ={1996}
}
@incollection{SrRC97,
  author      ={M. Srivas and H. Rue{\ss} and D. Cyrluk},
  booktitle   ={Formal Hardware Verification -- Methods and Systems in Comparison},
  edition     ={State of the Art Report},
  editor      ={T. Kropf},
  key         ={SrRC97},
  keyword     ={SFB358 book lncs1287},
  month       ={August},
  pages       ={156--205},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Hardware Verification Using {PVS}},
  volume      ={1287},
  year        ={1997}
}
@inproceedings{StBE88,
  author      ={V. Stavridou and H. Barringer and D.A. Edwards},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={StBE88},
  keyword     ={survey verification},
  pages       ={197--203},
  title       ={{F}ormal {S}pecification and {V}erification of {H}ardware: {A} {C}omparative {C}ase {S}tudy},
  year        ={1988}
}
@techreport{StBr93,
  address     ={Berkeley},
  author      ={P.R. Stephan and R.K. Brayton},
  institution ={University of California},
  key         ={StBr93},
  keyword     ={hardware asynchronous transistorlevel specification verification gatelevel formalsynthesis},
  month       ={December},
  number      ={UCB/ERL-93-33},
  title       ={{P}hysically {R}ealizable {G}ate {M}odels},
  year        ={1993}
}
@inproceedings{StDi95,
  address     ={Stanford University, USA},
  author      ={U. Stern and D.L. Dill},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={StDi95},
  keyword     ={finite_state_systems},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={206--224},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{I}mproved {P}robabilistic {V}erification by {H}ash {C}ompaction},
  volume      ={987},
  year        ={1995}
}
@inproceedings{StDi96,
  address     ={Kreischa},
  author      ={U. Stern and D.L. Dill},
  booktitle   ={GI/ITG/GME Workshop Methoden des Entwurfs und der Verifikation Digitaler Systeme},
  editor      ={Bernd straube and Jens Schoenherr},
  key         ={StDi96},
  keyword     ={4. GI/ITG/GME},
  month       ={March},
  organization={GI/ITG/GME},
  pages       ={81--90},
  publisher   ={Shaker Verlag, Aachen},
  series      ={Berichte aus der Informatik},
  title       ={Combining State Space Caching and Hash Compaction},
  year        ={1996}
}
@inproceedings{StEm84,
  author      ={R.S. Streett and E.A. Emerson},
  booktitle   ={International Colloquium on Automata, Languages and Programming (ICALP)},
  key         ={StEm84},
  keyword     ={omega},
  pages       ={465--472},
  publisher   ={Springer-Verlag},
  title       ={{T}he {P}ropositional $\mu$ {C}alculus is {E}lementary},
  year        ={1984}
}
@inproceedings{StGG89,
  author      ={J. Staunstrup and S. J. Garland and J. V. Guttag},
  booktitle   ={Workshop on Automatic Verification Methods for Finite State Systems},
  key         ={StGG89},
  number      ={407},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={Localized Verification of Circuit Descriptions},
  year        ={1989}
}
@inproceedings{StGG92,
  author      ={J. Staunstrup and S. J. Garland and J. V. Guttag},
  booktitle   ={{IFIP} WG 10.2 International Conference on Theorem Provers in Circuit Design: Theory, Practice and Experience},
  editor      ={V. Stavridou and T. Melham},
  key         ={StGG92},
  month       ={June},
  pages       ={277--300},
  publisher   ={Elsevier},
  title       ={Mechanized Verification of Circuit Descriptions using the {Larch Prover}},
  year        ={1992}
}
@inproceedings{StMF97,
  address     ={Grenoble, France},
  author      ={T. Stauner and O. Mueller and M. Fuchs},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={StMF97},
  pages       ={139-153},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Using {HYTECH} to Verify an Automotive Control System},
  year        ={1997}
}
@inproceedings{StMa92,
  address     ={New Jersey},
  author      ={A.D. Stoyenko and T.J. Marlowe},
  booktitle   ={Real-Time Systems},
  key         ={StMa92},
  pages       ={307--329},
  publisher   ={Kluwer Academic Publisher},
  title       ={{P}olynomial-{T}ime {T}ransformations and {S}chedulability {A}nalysis of {P}arallel {R}eal-{T}ime {P}rograms with {R}estricted {R}esource {C}ontention},
  volume      ={4},
  year        ={1992}
}
@article{StMe95,
  author      ={J. Staunstrup and N. Mellergaard},
  journal     ={Formal Methods in System Design (Kluwer Academic Publishers)},
  key         ={StMe95},
  number      ={6},
  pages       ={295--320},
  title       ={Localized Verification of Modular Designs},
  volume      ={3},
  year        ={1995}
}
@book{StST90,
  author      ={E. Sternheim and R. Singh and Y. Trivedi},
  key         ={StST90},
  publisher   ={Automata Publishing Company},
  series      ={Design Automation Series},
  title       ={Digital Design with {V}erilog {HDL}},
  year        ={1990}
}
@inproceedings{StSa90,
  author      ={G. St{\aa}lmarck and M. S\"{a}flund},
  booktitle   ={Safety of Computer Control Systems (SAFECOMP)},
  editor      ={B.K. Daniels},
  key         ={StSa90},
  pages       ={31-36},
  publisher   ={Pergamon Press, Oxford},
  title       ={Modelling and Verifying Systems and Software in Propositional Logic},
  year        ={1990}
}
@inproceedings{StSe93,
  address     ={Santa Clara, California},
  author      ={T. Stanion and C. Sechen},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={StSe93},
  keyword     ={BDD},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={674--679},
  publisher   ={IEEE Computer Society Press},
  title       ={{M}aximum {P}rojections of {D}on't {C}are {C}onditions in {B}oolean {N}etwork},
  year        ={1993}
}
@book{StSh86,
  author      ={L. Sterling and E. Shapiro},
  key         ={StSh86},
  keyword     ={Logic},
  publisher   ={MIT Press},
  title       ={{T}he {A}rt of {PROLOG}},
  year        ={1986}
}
@article{StWa74,
  author      ={L. Staiger and K.W. Wagner},
  journal     ={Elektron. Informationsverarb. Kybernet.},
  key         ={StWa74},
  pages       ={379-392},
  title       ={{A}utomatentheoretische {C}harakterisierungen topologischer {K}lassen regul\"{a}rer {F}olgenmengen},
  volume      ={10},
  year        ={1974}
}
@inproceedings{StWa89,
  author      ={C. Stirling and D. J. Walker},
  booktitle   ={International Joint Conference on Theory and Practice of Software Development},
  editor      ={J. Diaz and F. Orejas},
  key         ={StWa89},
  month       ={March},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{L}ocal {M}odel {C}hecking in the {M}odal {M}u-{C}alculus},
  volume      ={351-352},
  year        ={1989}
}
@article{Stai83,
  author      ={L. Staiger},
  journal     ={Journal of Computer and System Sciences},
  key         ={Stai83},
  keyword     ={omega},
  pages       ={434--448},
  title       ={{F}inite {S}tate $\omega$ {L}anguages},
  volume      ={27},
  year        ={1983}
}
@article{Stai86,
  author      ={L. Staiger},
  journal     ={Journal of Inform. Process. Cybernetics},
  key         ={Stai86},
  keyword     ={omega},
  pages       ={219--241},
  title       ={{H}ierarchies of {R}ecursive $\omega$ {L}anguages},
  volume      ={22},
  year        ={1986}
}
@article{Stai87,
  author      ={L. Staiger},
  journal     ={Journal of Computer and System Sciences},
  key         ={Stai87},
  keyword     ={omega},
  pages       ={415--439},
  title       ={{R}esearch in the {T}heory of $\omega$ {L}anguages},
  volume      ={23},
  year        ={1987}
}
@article{Stau89,
  author      ={A. Stauffer},
  journal     ={Presses Polytechniques Romandes},
  key         ={Stau89},
  title       ={Systemes numeriques cables et microprogrammes},
  year        ={1989}
}
@misc{Stau93,
  author      ={J. Staunstrup},
  key         ={Stau93},
  keyword     ={hardware algorithmiclevel verification registertransferlevel formalsynthesis Benchmarks},
  month       ={November},
  title       ={{IFIP} {WG} 10.2 {C}ollection of {C}ircuit {V}erification {E}xamples},
  year        ={1993}
}
@incollection{Stau94,
  author      ={J. Staunstrup},
  booktitle   ={Codesign: Computer Aided Software/Hardware Engineering},
  key         ={Stau94},
  publisher   ={IEEE Press},
  title       ={{T}owards a {C}ommon {M}odel of {S}oftware and {H}ardware {C}omponents},
  year        ={1994}
}
@book{Stau94a,
  author      ={J\orgen Staunstrup},
  key         ={Stau94a},
  publisher   ={Kluwer Academic Publishers},
  title       ={A Formal Approach to Hardware Design\/},
  year        ={1994}
}
@incollection{Stau97,
  author      ={J. Staunstrup},
  booktitle   ={Formal Hardware Verification -- Methods and Systems in Comparison},
  edition     ={State of the Art Report},
  editor      ={T. Kropf},
  key         ={Stau97},
  keyword     ={SFB358 book lncs1287},
  month       ={August},
  pages       ={114--155},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Design Verification using {Synchronized} {Transitions}},
  volume      ={1287},
  year        ={1997}
}
@techreport{Stav90,
  author      ={V. Stavridou},
  institution ={Department of Computer Science, University of London},
  key         ={Stav90},
  month       ={November},
  number      ={CSD-TR-636},
  title       ={{F}ormal {S}pecification and {V}erification of {S}tate {T}ransition {M}achines},
  type        ={Technical Report},
  year        ={1990}
}
@inproceedings{Ster95,
  address     ={Stanford University},
  author      ={U. Stern},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={Ster95},
  keyword     ={model_checking},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={21--34},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A}utomatic {V}erification of the {SCI} {C}ache {C}oherence {P}rotocol},
  volume      ={987},
  year        ={1995}
}
@article{Stew77,
  author      ={J.H. Stewart},
  journal     ={IEEE Computer},
  key         ={Stew77},
  keyword     ={HDL},
  month       ={June},
  pages       ={18--26},
  title       ={{LOGAL}: {A} {CHDL} for {L}ogic {D}esign an {S}ynthesis of {C}omputers},
  year        ={1977}
}
@article{Stic81,
  author      ={M.E. Stickel},
  journal     ={Journal of the ACM},
  key         ={Stic81},
  keyword     ={Logic},
  pages       ={423--434},
  title       ={{A} {U}nification {A}lgorithm for {A}ssociative-{C}ommutative {F}unctions},
  year        ={1981}
}
@article{Stic85,
  author      ={M.E. Stickel},
  journal     ={Journal of Automated Reasoning},
  key         ={Stic85},
  keyword     ={Logic},
  number      ={4},
  pages       ={333--355},
  title       ={{A}utomated {D}eduction by {T}heory {R}esolution},
  volume      ={1},
  year        ={1985}
}
@article{Stic86,
  author      ={M.E. Stickel},
  journal     ={Journal of Automated Reasoning},
  key         ={Stic86},
  keyword     ={Logic},
  number      ={1},
  pages       ={89--101},
  title       ={{S}chubert's {S}teamroller {P}roblem: {F}ormulation and {S}olutions},
  volume      ={2},
  year        ={1986}
}
@incollection{Stir92,
  address     ={Oxford},
  author      ={C. Stirling},
  booktitle   ={Handbook of Logic in Computer Science},
  editor      ={S. Abramsky and D.M. Gabbay and T.S. Maibaum},
  key         ={Stir92},
  pages       ={477--563},
  publisher   ={Clarendon Press},
  title       ={Modal and Temporal Logics},
  volume      ={2 (Background: Computational Structures)},
  year        ={1992}
}
@article{Ston36,
  author      ={M.H. Stone},
  journal     ={Trans. Americ. Math. Society},
  key         ={Ston36},
  keyword     ={Rewrite},
  pages       ={37--111},
  title       ={{T}he {T}heory of {R}epresentation for {B}oolean {A}lgebras},
  volume      ={40},
  year        ={1936}
}
@article{Stre82,
  author      ={R.S. Streett},
  journal     ={Information and Control},
  key         ={Stre82},
  keyword     ={omega},
  pages       ={121--141},
  title       ={{P}ropositional {D}ynamic {L}ogic of {L}ooping and {C}onverse},
  volume      ={54},
  year        ={1982}
}
@book{Stro86,
  author      ={B. Stroustrup},
  key         ={Stro86},
  publisher   ={Addison-Wesley Publishing Company},
  series      ={Series in Computer Science},
  title       ={The {C++} Programming Language},
  year        ={1986}
}
@article{Su77,
  author      ={S.Y.H. Su},
  journal     ={IEEE Computer},
  key         ={Su77},
  keyword     ={HDL},
  month       ={June},
  pages       ={10--13},
  title       ={{H}ardware {D}escription {L}anguage {A}pplications: {A}n {I}ntroduction and {P}rognosis},
  year        ={1977}
}
@inproceedings{SuDB96,
  address     ={Palo Alto, CA, USA},
  author      ={J. X. Su and D. L. Dill and C. W. Barett},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={SuDB96},
  month       ={November},
  pages       ={377--388},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Automatic generation of invariants in processor verification},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{SuFr86,
  author      ={K.J. Supowit and S.J. Friedman},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={SuFr86},
  keyword     ={formalism fsm hardware gatelevel verification},
  organization={ACM/IEEE},
  pages       ={200--207},
  publisher   ={IEEE},
  title       ={{A} {N}ew {M}ethod for {V}erifying {S}equential {C}ircuits},
  year        ={1986}
}
@inproceedings{SuPK93,
  address     ={Ottawa, Canada},
  author      ={S. Sutarwala and P.G. Paulin and Y. Kumar},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={SuPK93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={355--362},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={{I}nsulin: {A}n {I}nstruction {S}et {S}imulation {E}nvironment},
  year        ={1993}
}
@manual{SuSY93,
  address     ={via anonymous ftp flop.informatik.tu-muenchen.de},
  author      ={C. Suttner and G. Sutcliff and T. Yemenis},
  edition     ={TPTPv1.0.0},
  key         ={SuSY93},
  keyword     ={formalism firstorderlogic Benchmarks},
  organization={TU M\"{u}nchen, Germany and James Cook University, Australia},
  title       ={{T}he {TPTP} ({T}housands of {P}roblems for {T}heorem {P}rovers) {P}roblem {L}ibrary},
  year        ={1993}
}
@inproceedings{Subr88,
  address     ={Glasgow, Scotland},
  author      ={P.A. Subrahmanyam},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={Subr88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={159--184},
  publisher   ={North-Holland},
  title       ={{C}ontextual {C}onstraints, {T}emporal {A}bstraction and {O}bservational {E}quivalence in {VLSI} {D}esign},
  year        ={1988}
}
@inproceedings{Subr93,
  address     ={Arles, France},
  author      ={P.A. Subrahmanyam},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={Subr93},
  keyword     ={verification hardware transistorlevel general},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={135--154},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{T}owards {V}erifying {L}arge(r) {S}ystems: {A} {S}trategy and an {E}xperiment},
  volume      ={683},
  year        ={1993}
}
@article{Suzu85,
  author      ={N. Suzuki},
  journal     ={IEEE Computer},
  key         ={Suzu85},
  keyword     ={HDL PROLOG},
  month       ={February},
  pages       ={33--40},
  title       ={{C}oncurrent {P}rolog as an {E}fficient {VLSI} {D}esign {L}anguage},
  year        ={1985}
}
@inproceedings{SwBr94,
  address     ={San Jose, California},
  author      ={G.M. Swamy and R.K. Brayton},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={SwBr94},
  keyword     ={formal_verification},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={458--467},
  publisher   ={IEEE Computer Society Press},
  title       ={{I}ncremental {F}ormal {D}esign {V}erification},
  year        ={1994}
}
@inproceedings{SwSB95,
  address     ={Austin, Texas},
  author      ={G. Swamy and V. Singhal and R.K. Brayton},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={SwSB95},
  keyword     ={verification},
  month       ={October},
  organization={University of California, Berkeley},
  title       ={{I}ncremental {M}ethods for {FSM} {T}raversal},
  year        ={1995}
}
@techreport{Syme92,
  author      ={D. Syme},
  institution ={Australian National University},
  key         ={Syme92},
  month       ={November},
  note        ={ftp://ftp.cl.cam.ac.uk/hvg/papers/MLinHOL.thesis.ps.gz},
  title       ={{M}achine {A}ssisted {R}easoning {A}bout {S}tandard {ML} {U}sing {HOL}},
  year        ={1992}
}
@inproceedings{Syme93,
  address     ={Vancouver, Canada},
  author      ={D. Syme},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Syme93},
  month       ={August},
  note        ={ftp://ftp.cl.cam.ac.uk/hvg/papers/MLinHOL.hug93.ps.gz},
  organization={University of British Columbia},
  pages       ={43--59},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={{R}easoning with the {F}ormal {D}efinition of {S}tandard {ML} in {HOL}},
  volume      ={780},
  year        ={1993}
}
@inproceedings{Syme95,
  address     ={Aspen Grove, Utah, USA},
  author      ={D. Syme},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={Syme95},
  month       ={September},
  pages       ={324--339},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {N}ew {I}nterface for {HOL} - {I}deas, {I}ssues and {I}mplementations},
  volume      ={971},
  year        ={1995}
}
@manual{Syno94,
  address     ={Mountain View, USA},
  edition     ={V3.2a},
  key         ={Syno94},
  organization={Synopsis Inc},
  title       ={{VHDL} {C}ompiler {R}eference {M}anual},
  year        ={1994}
}
@inproceedings{SzSh92,
  address     ={Santa Clara, California},
  author      ={T.G. Szymanski and N. Shenoy},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={SzSh92},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={124--131},
  publisher   ={IEEE Computer Society Press},
  title       ={{V}erifying {C}lock {S}chedule},
  year        ={1992}
}
@inproceedings{THNT94,
  address     ={Grenoble, France},
  author      ={J. Toivanen and J. Honkola and J. Nurmi and J. Tuominen},
  booktitle   ={European Design Automation Conference },
  key         ={THNT94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={492--499},
  publisher   ={IEEE Computer Society Press},
  title       ={{A} {VHDL}-{B}ased {B}us {M}odel for {M}ulti-{PCB} {S}ystem {D}esign},
  year        ={1994}
}
@inproceedings{THSJ93,
  address     ={Paris, France},
  author      ={A.H. Timmer and M.J.M. Heijligers and L. Stok and J.A.G. Jess},
  booktitle   ={European Design Automation Conference },
  editor      ={J.L. van Meerbergen and J. Rabaey},
  key         ={THSJ93},
  month       ={February},
  pages       ={547--551},
  publisher   ={IEEE Computer Society Press},
  title       ={{M}odule {S}election and {S}cheduling {U}sing {U}nrestricted {L}ibraries},
  year        ={1993}
}
@techreport{TIMK92,
  author      ={H. Terada and M. Iwata and S. Miyata and S. Komori},
  institution ={Mitsubishi {RAPID}},
  key         ={TIMK92},
  remark      ={Dataflow, Overview of Qx series: Qv-1, Sharp LH993XX, Mitsubishi RAPID, Sharp 12-bit processor},
  title       ={{S}uperpipelined {D}ata-{D}riven {VLSI} {P}rocessors},
  year        ={1992}
}
@article{TNAO87,
  author      ={T. Terada and H. Nishikawa and K. Asada and T. Okamoto and S. Miyata and H. Asano and T. Tokura and M. Shimizu and S. Hara and S. Komori and K. Shima},
  journal     ={Journal of Information Processing},
  key         ={TNAO87},
  number      ={4},
  pages       ={245--251},
  title       ={{D}esign {P}hilosophy of a {D}ata-{D}riven {P}rocessor: {Q}-p},
  volume      ={10},
  year        ={1987}
}
@proceedings{TPCD92,
  address     ={Nijmegen},
  editor      ={V. Stavridon and T.F. Melham and R.T. Boute},
  key         ={TPCD92},
  keyword     ={verification},
  month       ={June},
  organization={IFIP TC10/WG 10.2},
  publisher   ={North-Holland},
  title       ={{P}roceedings of the {I}nternational {C}onference on {T}heorem {P}rovers in {C}ircuit {D}esign: {T}heory, {P}ractice and {E}xperience},
  year        ={1992}
}
@inproceedings{TSLB90,
  author      ={H.J. Touati and H. Savoj and B. Lin and R.S. Brayton and A. Sangiovanni-Vincentelli},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={TSLB90},
  keyword     ={formalism fsm symbolic_state_traversal BDD tutorial},
  organization={ACM/IEEE},
  pages       ={130--132},
  title       ={{I}mplicit {S}tate {E}numeration of {F}inite {S}tate {M}achines using {BDD}'s},
  year        ={1990}
}
@inproceedings{TSPK97,
  address     ={Grenoble, France},
  author      ={P. Terwiesch and E. Scheiben and A.J. Petersen and T. Keller},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={TSPK97},
  pages       ={199-213},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={A Digital Real-Time Simulator for Rail-Vehicle Control System Testing},
  year        ={1997}
}
@manual{TTVE94,
  key         ={TTVE94},
  title       ={{T}he {TGI} {VHDL} {E}laborator {R}eference {M}anual {V}ersion 1.1},
  year        ={1994}
}
@inproceedings{TYSH94,
  address     ={San Diego, CA},
  author      ={M. Tomita and T. Yamamoto and F. Sumikawa and K. Hirano},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={TYSH94},
  keyword     ={topics_in_verification_and_diagnosis},
  month       ={June},
  note        ={ch. 15.1},
  publisher   ={San Diego Convention Center},
  title       ={{R}ectification of {M}ultiple {L}ogic {D}esign {E}rrors in {M}ultiple {O}utput {C}ircuits},
  year        ={1994}
}
@inproceedings{TZSC96,
  address     ={Iowa, USA},
  author      ={S. Tahar and Z. Zhou and X. Song and E. Cerny and M. Langevin},
  booktitle   ={Great Lakes Symposium on {VLSI} (GLS-VLSI)},
  key         ={TZSC96},
  month       ={March},
  publisher   ={{IEEE} Computer Society Press},
  title       ={Formal verification of an {ATM} switch fabric using multiway decision graphs},
  year        ={1996}
}
@inproceedings{TaCu96,
  address     ={Turku, Finland},
  author      ={S. Tahar and P. Curzon},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={TaCu96},
  month       ={August},
  pages       ={415--430},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Comparison of {MDG} and {HOL} for Hardware Verification},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{TaHB95,
  address     ={University of California, Berkeley, USA},
  author      ={S. Tasiran and R. Hojati and R.K. Brayton},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={TaHB95},
  keyword     ={language_containment},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={261--277},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{L}anguage containment of non-deterministic $\omega$-automata},
  volume      ={987},
  year        ={1995}
}
@inproceedings{TaHe89,
  author      ={J. van Tassel and D. Hemmendinger},
  booktitle   ={{IFIP} International Workshop on Applied Formal Methods for Correct {VLSI} Design},
  key         ={TaHe89},
  keyword     ={HDL VHDL verification},
  organization={IFIP WG 10.2/WG 10.5},
  pages       ={409--418},
  publisher   ={North-Holland, 1990},
  title       ={{T}oward {F}ormal {V}erification of {VHDL} {S}pecifications},
  year        ={1989}
}
@inproceedings{TaKu93a,
  address     ={Bad Herrenalb},
  author      ={S. Tahar and R. Kumar},
  booktitle   ={GI/ITG Workshop Formale Methoden zum Entwurf korrekter Systeme},
  editor      ={T. Kropf and R. Kumar and D. Schmid},
  key         ={TaKu93a},
  keyword     ={SFB358 1GI/ITG workshop},
  month       ={March},
  organization={GI/ITG},
  pages       ={35--40},
  publisher   ={Universit\"{a}t Karlsruhe, Interner Bericht Nr. 10/93},
  title       ={{E}in hierarchisches {M}odell zur formalen {V}erifikation von {RISC}-{P}rozessoren},
  year        ={1993}
}
@inproceedings{TaKu93b,
  address     ={Vancouver, Canada},
  author      ={S. Tahar and R. Kumar},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={TaKu93b},
  keyword     ={SFB358 conference},
  month       ={August},
  organization={University of British Columbia},
  pages       ={281--295},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={{I}mplementing a {M}ethodology for {F}ormally {V}erifying {RISC} {P}rocessors in {HOL}},
  volume      ={780},
  year        ={1993}
}
@inproceedings{TaKu93c,
  address     ={Munich, Germany},
  author      ={S. Tahar and R. Kumar},
  booktitle   ={European Informatics Congress Computing Systems Architecture,},
  editor      ={P. Spies},
  key         ={TaKu93c},
  keyword     ={SFB358 specification verification RISC conference},
  month       ={October},
  publisher   ={Springer-Verlag},
  title       ={{A} {F}ormalization of a {H}ierarchical {M}odel for {RISC} {P}rocessors},
  year        ={1993}
}
@inproceedings{TaKu93d,
  address     ={Cambridge, Massachusetts},
  author      ={S. Tahar and R. Kumar},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Design (ICCD)},
  key         ={TaKu93d},
  keyword     ={SFB358 verification RISC conference},
  month       ={October},
  publisher   ={IEEE Computer Society Press},
  title       ={{T}owards a {M}ethodology for the {F}ormal {H}ierarchical {V}erification of {RISC} {P}rocessors},
  year        ={1993}
}
@techreport{TaKu93e,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={S. Tahar and R. Kumar},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={TaKu93e},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-10-93.ps.gz},
  number      ={SFB358-C2-10/93},
  title       ={{E}in hierarchisches {M}odell zur formalen {V}erifikation von {RISC}-{P}rozessoren},
  year        ={1993}
}
@techreport{TaKu93f,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={S. Tahar and R. Kumar},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={TaKu93f},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-11-93.ps.gz},
  number      ={SFB358-C2-11/93},
  title       ={{I}mplementing a {M}ethodology for {F}ormally {V}erifying {RISC} {P}rocessors in {HOL}},
  year        ={1993}
}
@techreport{TaKu93g,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={S. Tahar and R. Kumar},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={TaKu93g},
  keyword     ={SFB358 specification verification RISC techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-12-93.ps.gz},
  number      ={SFB358-C2-12/93},
  title       ={{A} {F}ormalization of a {H}ierarchical {M}odel for {RISC} {P}rocessors},
  year        ={1993}
}
@techreport{TaKu93h,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={S. Tahar and R. Kumar},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={TaKu93h},
  keyword     ={SFB358 verification RISC techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-13-93.ps.gz},
  number      ={SFB358-C2-13/93},
  title       ={{T}owards a {M}ethodology for the {F}ormal {H}ierarchical {V}erification of {RISC} {P}rocessors},
  year        ={1993}
}
@inproceedings{TaKu94a,
  author      ={S. Tahar and R. Kumar},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={TaKu94a},
  keyword     ={SFB358 conference},
  month       ={September},
  pages       ={424--439},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{I}mplementational {I}ssues for {V}erifying {RISC}-{P}ipeline {C}onflicts in {HOL}},
  volume      ={854},
  year        ={1994}
}
@inproceedings{TaKu94b,
  address     ={Grenoble, France},
  author      ={S. Tahar and R. Kumar},
  booktitle   ={European Design Automation Conference },
  key         ={TaKu94b},
  keyword     ={SFB358 conference},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={285--289},
  publisher   ={IEEE Computer Society Press},
  title       ={{F}ormal {V}erification of {P}ipeline {C}onflicts in {RISC}-{P}rocessors},
  year        ={1994}
}
@techreport{TaKu94c,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={S. Tahar and R. Kumar},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={TaKu94c},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-14-94.ps.gz},
  number      ={SFB358-C2-14/94},
  title       ={{I}mplementational {I}ssues for {V}erifying {RISC}-{P}ipeline {C}onflicts in {HOL}},
  year        ={1994}
}
@techreport{TaKu94d,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={S. Tahar and R. Kumar},
  institution ={Universit\"{a}t Karlsruhe},
  key         ={TaKu94d},
  keyword     ={SFB358 techreport},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/SFB358-C2-15-94.ps.gz},
  number      ={SFB358-C2-15/94},
  title       ={{F}ormal {V}erification of {P}ipeline {C}onflicts in {RISC}-{P}rocessors},
  year        ={1994}
}
@article{TaKu95,
  author      ={S. Tahar and R. Kumar},
  journal     ={The Computer Journal},
  key         ={TaKu95},
  keyword     ={SFB358 verification RISC pipeline journal},
  number      ={2},
  pages       ={111--120},
  remark      ={CJ95.ps},
  title       ={{F}ormal {S}pecification and {V}erification {T}echniques for {RISC} {P}ipeline {C}onflicts},
  volume      ={38},
  year        ={1995}
}
@phdthesis{Taha94,
  address     ={Institut f\"{u}r Rechnerentwurf und Fehlertoleranz},
  author      ={S. Tahar},
  key         ={Taha94},
  keyword     ={SFB358 book},
  month       ={December},
  school      ={Universit\"{a}t Karlsruhe},
  title       ={Eine {Methode} zur formalen {Verifikation} von {RISC}-{Prozessoren}},
  year        ={1994}
}
@inproceedings{Tami93,
  address     ={Santa Clara, California},
  author      ={T. Tamisier},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={Tami93},
  keyword     ={BDD_Techniques},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={184--187},
  publisher   ={IEEE Computer Society Press},
  title       ={{C}omputing the {O}bservable {E}quivalence {R}elation of a {F}inite {S}tate {M}achine},
  year        ={1993}
}
@article{Tars36,
  author      ={A. Tarski},
  journal     ={Studia Philos.},
  key         ={Tars36},
  title       ={{D}er {W}ahrheitsbegriff in formalisierten {S}prachen},
  volume      ={1},
  year        ={1936}
}
@article{Tars55,
  author      ={A. Tarski},
  journal     ={Pacific J. Math},
  key         ={Tars55},
  pages       ={285--309},
  title       ={{A} {L}attice-{T}heoretical {F}ixpoint {T}heorem and its {A}pplications},
  volume      ={5},
  year        ={1955}
}
@inproceedings{Tass92a,
  author      ={J.P. Van Tassel},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  key         ={Tass92a},
  keyword     ={HDL VHDL verification},
  month       ={September},
  organization={IFIP WG 10.2},
  pages       ={213--228},
  title       ={A Formalisation of the {VHDL} Simulation Cycle},
  year        ={1992}
}
@incollection{Tass95,
  address     ={Madrid, Spain},
  author      ={J.P. Van Tassel},
  booktitle   ={Formal Semantics for {VHDL}},
  chapter     ={3},
  editor      ={C. {Delgado Kloos} and P.T. Breuer},
  key         ={Tass95},
  month       ={March},
  publisher   ={Kluwer Academic Publishers},
  series      ={The Kluwer international series in engineering and computer science},
  title       ={An Operational Semantics for a Subset of {VHDL}},
  volume      ={307},
  year        ={1995}
}
@inproceedings{Tayl81,
  author      ={G.S. Taylor},
  booktitle   ={Symposium on Computer Arithmetic},
  key         ={Tayl81},
  pages       ={127--134},
  publisher   ={IEEE Computer Society Press},
  title       ={Compatible {H}ardware {F}or {D}ivision and {S}quare {R}oot},
  year        ={1981}
}
@inproceedings{ThAn91,
  address     ={Davis, California},
  author      ={L. Thery and I. Antipolis},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={ThAn91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Centaur as a Front-End of {HOL}},
  year        ={1991}
}
@inproceedings{ThBe92,
  author      ={G. Thuau and B. Berkane},
  booktitle   ={Workshop on Designing Correct Circuits},
  key         ={ThBe92},
  pages       ={81-96},
  title       ={Using the language {L}ustre for Sequential Circuit Verification},
  year        ={1992}
}
@inproceedings{ThEw97,
  address     ={Toledo, Spain},
  author      ={K. Thirunarayan and R. Ewing},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={ThEw97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Characterizing a portable subset of behavioural {VHDL-93}},
  year        ={1997}
}
@inproceedings{ThMP85,
  author      ={T.L. Thorp and J.D. Morison and N.E. Peeling},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={Koomen/Mot-Oka},
  key         ={ThMP85},
  keyword     ={verification},
  pages       ={303--320},
  publisher   ={North-Holland},
  title       ={The design rationale of {ELLA}, a hardware design and description language},
  year        ={1985}
}
@inproceedings{ThSi93,
  address     ={Bad Herrenalb},
  author      ={E.M. Thurner and F. Simon},
  booktitle   ={GI/ITG Workshop Formale Methoden zum Entwurf korrekter Systeme},
  editor      ={T. Kropf and R. Kumar and D. Schmid},
  key         ={ThSi93},
  keyword     ={1GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={61--68},
  publisher   ={Universit\"{a}t Karlsruhe, Interner Bericht Nr. 10/93},
  title       ={{V}erfahren zur {U}msetzung von {Z}eitdiagrammen in zeitbehaftete {P}etri-{N}etze},
  year        ={1993}
}
@inproceedings{Ther91,
  address     ={Davis, California},
  author      ={L. Thery},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Ther91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={New Interfaces for {HOL}},
  year        ={1991}
}
@inproceedings{Ther93,
  address     ={Vancouver, Canada},
  author      ={L. Thery},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Ther93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={113--127},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={A Proof Development System for {HOL}},
  volume      ={780},
  year        ={1993}
}
@article{Thom79,
  author      ={W. Thomas},
  journal     ={Information and Control},
  key         ={Thom79},
  keyword     ={omega},
  pages       ={148--156},
  title       ={Star free regular sets of $\omega$ sequences},
  volume      ={42},
  year        ={1979}
}
@article{Thom81,
  author      ={W. Thomas},
  journal     ={Information and Control},
  key         ={Thom81},
  keyword     ={omega},
  pages       ={261--283},
  title       ={A combinatorial approach to the theory of $\omega$ automata},
  volume      ={48},
  year        ={1981}
}
@article{Thom82,
  author      ={W. Thomas},
  journal     ={Journal of Computer and System Sciences},
  key         ={Thom82},
  keyword     ={omega},
  pages       ={360--376},
  title       ={Classifying regular events in symbolic logic},
  volume      ={25},
  year        ={1982}
}
@inproceedings{Thom90,
  author      ={W. Thomas},
  booktitle   ={Ann.Symp.STACS90},
  editor      ={C.Choffrut and T.Lengauer},
  key         ={Thom90},
  keyword     ={omega},
  pages       ={263--277},
  publisher   ={Springer-Verlag},
  title       ={Infinite trees and automaton definable relations over $\omega$ words},
  year        ={1990}
}
@inproceedings{Thom90a,
  address     ={Amsterdam},
  author      ={W. Thomas},
  booktitle   ={Handbook of Theoretical Computer Science},
  editor      ={J. van Leeuwen},
  key         ={Thom90a},
  pages       ={133--191},
  publisher   ={Elsevier Science Publishers},
  title       ={Automata on Infinite Objects},
  volume      ={B},
  year        ={1990}
}
@article{Thom93,
  author      ={M. Thomas},
  journal     ={Microprocessors and Microsystems},
  key         ={Thom93},
  keyword     ={tutorial software verification systemlevel hardware},
  number      ={1},
  pages       ={31--36},
  title       ={The industrial use of formal methods},
  volume      ={17},
  year        ={1993}
}
@techreport{Thom96,
  author      ={W. Thomas},
  institution ={Christian-Albrechts-Universit\"{a}t Kiel, Institut f\"{u}r Informatik und Praktische Mathematik},
  key         ={Thom96},
  month       ={May},
  number      ={9607},
  title       ={{Languages, Automata, and Logic}},
  type        ={Technical Report},
  year        ={1996}
}
@inproceedings{TiBu88,
  author      ={P. Tirumalai and J.T. Butler},
  booktitle   ={{IEEE} Symposium on MVL},
  key         ={TiBu88},
  organization={IEEE},
  pages       ={226--236},
  title       ={{A}nalysis of {M}inimization {A}lgorithms for {M}ultiple-{V}alued {P}rogrammable {L}ogic {A}rrays},
  year        ={1988}
}
@book{TiSc86,
  author      ={U. Tietze and C. Schenk},
  edition     ={8},
  key         ={TiSc86},
  keyword     ={hardware design general},
  note        ={ISBN 3-540-16720-x},
  publisher   ={Springer-Verlag},
  title       ={Halbleiter Schaltungstechnik},
  year        ={1986}
}
@inproceedings{Tide88,
  address     ={Glasgow, Scotland},
  author      ={E. Tiden},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={Tide88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={465--487},
  publisher   ={North-Holland},
  title       ={Symbolic Verification of Switch-Level Circuits using a Prolog Enhanced with Unification in Finite Algebras},
  year        ={1988}
}
@inproceedings{Tied95,
  address     ={Passau},
  author      ={W.-D. Tiedemann},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden beim Entwurf von Hardwaresystemen},
  editor      ={W. Grass and M. Mutz},
  key         ={Tied95},
  keyword     ={3GI/ITG},
  month       ={March},
  organization={GI/ITG},
  pages       ={21--31},
  publisher   ={Shaker Verlag},
  series      ={Berichte aus der Informatik},
  title       ={{S}ynthese von synchronen {S}teuerwerken mit {E}chtzeitbedingungen},
  year        ={1995}
}
@inproceedings{Tjar91,
  address     ={Amsterdam},
  author      ={R. Tjarnstrom},
  booktitle   ={European Design Automation Conference },
  key         ={Tjar91},
  keyword     ={Timing_Verification_and_Specification},
  month       ={February},
  organization={IEEE},
  pages       ={271--277},
  publisher   ={IEEE Computer Society Press},
  title       ={{C}lock {I}ndependent {T}iming {V}erification of {L}evel-{S}ensitive {L}atches},
  year        ={1991}
}
@inproceedings{ToBK91,
  author      ={H. J. Touati and R. K. Brayton and R. P. Kurshan},
  booktitle   ={{ACM} International Workshop on Formal Methods in {VLSI} Design},
  key         ={ToBK91},
  month       ={January},
  title       ={Testing Language Containment for Omega-Automata using {BDD}s},
  year        ={1991}
}
@inproceedings{ToBe93,
  address     ={Lake Tahoe},
  author      ={H. Touati and G. Berry},
  booktitle   ={International Workshop on Logic Synthesis},
  key         ={ToBe93},
  publisher   ={IEEE Computer Society Press},
  title       ={Optimized Controller Synthesis Using {E}sterel},
  year        ={1993}
}
@inproceedings{ToRa92,
  address     ={Old Dominion University},
  author      ={S. Toida and N.S.V. Rao},
  booktitle   ={{IEEE} {VLSI} Test Symposium},
  key         ={ToRa92},
  keyword     ={hardware test},
  organization={Department on Computer Science},
  pages       ={113--118},
  title       ={On Tests Generation for Combinational Circuits Consisting of {AND} and {EXOR} Gates},
  year        ={1992}
}
@inproceedings{ToSB96,
  author      ={H. Toma and E. Sentovitch and G. Berry},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={ToSB96},
  organization={ACM/IEEE},
  publisher   ={IEEE Computer Society Press},
  title       ={Latch Optimization in Circuits Generated from High-Level Descriptions},
  year        ={1996}
}
@inproceedings{Toch58,
  author      ={K.D. Tochter},
  booktitle   ={Quart. J. Mech. Appl. Match},
  key         ={Toch58},
  pages       ={364--384},
  title       ={Techniques of {M}ultiplication and {D}ivision for {A}utomatic {B}inary {C}omputers},
  volume      ={Part~3},
  year        ={1958}
}
@inproceedings{Toft97,
  address     ={Enschede, The Netherlands},
  author      ={C. Tofts},
  booktitle   ={Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  editor      ={E. Brinksma},
  key         ={Toft97},
  pages       ={290-305},
  publisher   ={Springer Verlag, LNCS 1217},
  title       ={Compositional Performance Analysis},
  year        ={1997}
}
@techreport{Tour89,
  address     ={Saint Martin d'Heres, France},
  author      ={T. Boy de la Tour},
  institution ={Laboratoire d'Informatique Fondamentale et d'Intelligence Artificielle},
  key         ={Tour89},
  keyword     ={Logic techreport},
  title       ={A locally optimal transformation into clause form using partial formula renaming},
  year        ={1989}
}
@inproceedings{TrYo96,
  address     ={New Brunswick, NJ, USA},
  author      ={S. Tripakis and S. Yovine},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={TrYo96},
  month       ={July/August},
  pages       ={232--243},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Analysis of Timed Systems Based on Time-Abstracting bisimulations},
  volume      ={1102},
  year        ={1996}
}
@article{Tric87,
  author      ={H. Trickey},
  journal     ={Transactions on Computer-Aided Design},
  key         ={Tric87},
  keyword     ={flowgraph},
  month       ={March},
  number      ={2},
  pages       ={259--269},
  title       ={Flamel: a high-level hardware compiler},
  volume      ={6},
  year        ={1987}
}
@inproceedings{TuPP97,
  address     ={Grenoble, France},
  author      ={A.L. Turk and S.T. Probst and G.J. Powers},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={TuPP97},
  pages       ={259-272},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Verification of Real Time Chemical Processing Systems},
  year        ={1997}
}
@inproceedings{UMSK81,
  author      ={T. Uehara and F. Maruyama and T. Saito and N. Kawato},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={M. Breuer and R. Hartenstein},
  key         ={UMSK81},
  keyword     ={verification},
  pages       ={51--64},
  publisher   ={North-Holland},
  title       ={{DDL} Verifier},
  year        ={1981}
}
@book{Unge69,
  address     ={Columbia University},
  author      ={S.H. Unger},
  key         ={Unge69},
  publisher   ={Robert E. Krieger Publishing Company},
  title       ={{A}synchronous {S}equential {S}witching {C}ircuits},
  year        ={1969}
}
@book{Unge87,
  author      ={M. Ungerer},
  key         ={Unge87},
  keyword     ={Design},
  publisher   ={Springer-Verlag},
  title       ={{CAD--S}chnittstellen und {D}atentransferformate im {E}lektronikbereich},
  year        ={1987}
}
@article{Urqu87,
  author      ={A. Urquhart},
  journal     ={Journal of the Association for Computing Machinery},
  key         ={Urqu87},
  month       ={January},
  number      ={1},
  pages       ={209-219},
  title       ={Hard Examples for Resolution},
  volume      ={34},
  year        ={1987}
}
@inproceedings{UsCu97,
  address     ={Toledo, Spain},
  author      ={C. Ussery and S. Curry},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={C. {Delgado Kloos} and E. Cerny},
  key         ={UsCu97},
  keyword     ={conference},
  month       ={April},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Verification of large systems in silicon},
  year        ={1997}
}
@inproceedings{Ushi97,
  address     ={Grenoble, France},
  author      ={T. Ushio},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={Ushi97},
  pages       ={397-402},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Invariance Principle in Hybrid Systems Modeled by Mixed Mappings},
  year        ={1997}
}
@inproceedings{VBFG97,
  address     ={Montreal, Canada},
  author      ={W. Visser and H. Barringer and D. Fellows and G. Gough and A. Williams},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={H. F. Li and D. K. Probst},
  key         ={VBFG97},
  keyword     ={conference},
  month       ={October},
  organization={IFIP WG 10.5},
  publisher   ={Chapman and Hall},
  title       ={Efficient {CTL*} model checking for analysis of rainbow designs},
  year        ={1997}
}
@article{VBVT91,
  author      ={J. Vlach and J.A. Barby and A. Vannelli and T. Talkhan and C.J. Shi},
  journal     ={{IEEE} Transactions on Computer-Aided Design},
  key         ={VBVT91},
  keyword     ={hardware abstraction timing},
  month       ={July},
  number      ={7},
  pages       ={949--953},
  title       ={Group Delay as an Estimate of Delay in Logic},
  volume      ={10},
  year        ={1991}
}
@manual{VEFS94,
  key         ={VEFS94},
  title       ={{VHDL} Elaborated Format Schema Definition Version 1.0},
  year        ={1994}
}
@manual{VHDL87,
  address     ={New York, USA},
  author      ={ANSI/IEEE Std 1076--1987},
  key         ={VHDL87},
  keyword     ={HDL VHDL},
  month       ={March},
  organization={IEEE},
  title       ={{IEEE} Standard {VHDL} Language Reference Manual},
  year        ={1988}
}
@misc{VHDL90,
  howpublished={IEEE Standard 1076-CONC-1990},
  key         ={VHDL90},
  keyword     ={VHDL},
  remark      ={This publication is the companion document to IEEE Std 1076-1987. It clarifies ambiguities and editorial errors in IEEE Std 1076-1987 and contains accepted requests for new language features. Order Code SH13326},
  title       ={The {Sense} of {VASG}},
  year        ={1990}
}
@misc{VHDL91,
  howpublished={IEEE Standard 1076/INT-1991},
  key         ={VHDL91},
  keyword     ={VHDL},
  remark      ={Order Code: SH148941991},
  title       ={{IEEE} {S}tandard {I}nterpretations: {IEEE} {S}tandard {VHDL} {L}anguage {R}eference Manual},
  year        ={1991}
}
@misc{VHDL92,
  author      ={VHDL},
  key         ={VHDL92},
  keyword     ={HDL VHDL},
  month       ={November},
  title       ={{VHDL} {N}ewsletter},
  year        ={1992}
}
@manual{VHDL93,
  address     ={New York, USA},
  key         ={VHDL93},
  keyword     ={HDL VHDL},
  month       ={June},
  organization={IEEE},
  publisher   ={{ANSI/IEEE Std 1076--1993}},
  title       ={{IEEE} Standard {VHDL} Language Reference Manual},
  year        ={1994}
}
@inproceedings{VJCM88,
  address     ={Glasgow, Scotland},
  author      ={D. Verkest and P. Johannes and L. Claesen and H. De Man},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={VJCM88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={77--98},
  publisher   ={North-Holland},
  title       ={Formal Techniques for Proving Correctness of Parameterised Hardware using Correctness Preserving Transformation},
  year        ={1988}
}
@inproceedings{VJCM90,
  address     ={Glasgow},
  author      ={D. Verkest and P. Johannes and L. Claesen and H. De Man},
  booktitle   ={European Design Automation Conference },
  key         ={VJCM90},
  publisher   ={IEEE Computer Society Press},
  title       ={Correctness Proofs of Parameterized Hardware Modules in the Cathedrale-{II} Synthesis Environment},
  year        ={1990}
}
@inproceedings{VKJL94,
  address     ={San Diego, CA},
  author      ={E. Verlind and T. Kolks and G. De Jong and B. Lin and H. De Man},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={VKJL94},
  keyword     ={formal_verification},
  month       ={June},
  note        ={ch. 38.3},
  publisher   ={San Diego Convention Center},
  title       ={{A} {T}ime {A}bstraction {M}ethod for {E}fficient {V}erification of {C}ommunicating {S}ystems},
  year        ={1994}
}
@inproceedings{VLGM92,
  address     ={Santa Clara, California},
  author      ={P. Vanbekbergen and B. Lin and G. Goosens and H. De Man},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={VLGM92},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={112--117},
  publisher   ={IEEE Computer Society Press},
  title       ={{A} {G}eneralized {S}tate {A}ssignment {T}heory for {T}ransformations on {S}ignal {T}ransition {G}raphs},
  year        ={1992}
}
@techreport{VRMK91,
  address     ={ECE Dept., University of Cincinnati, Ohio, USA},
  author      ={R. Vemuri and J. Roy and P. Mamtora and N. Kumar},
  institution ={Laboratory for Digital Design Environments},
  key         ={VRMK91},
  keyword     ={hardware algorithmiclevel synthesis Benchmarks},
  month       ={November},
  number      ={ECE-DDE-91-11},
  title       ={Benchmarks for High-Level Synthesis},
  year        ={1991}
}
@inproceedings{VYLM94,
  address     ={Paris},
  author      ={P. Vabekbergen and C. Ykman-Couvreur and B. Lin and H. De Man},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={VYLM94},
  keyword     ={Specification_and_Synthesis_of_System_Interfaces},
  month       ={February},
  pages       ={378--384},
  publisher   ={IEEE Computer Society Press},
  title       ={{A} {G}eneralized {S}ignal {T}ransition {G}raph {M}odel for {S}pecification of {C}omplex {I}nterfaces},
  year        ={1994}
}
@inproceedings{VaGG94,
  address     ={Grenoble, France},
  author      ={F. Vahid and D.D. Gajski and J. Gong},
  booktitle   ={European Design Automation Conference },
  key         ={VaGG94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={214--219},
  publisher   ={IEEE Computer Society Press},
  title       ={{A} {B}inary-{C}onstraint {S}earch {A}lgorithm for {M}inimizing {H}ardware {D}uring {H}ardware/{S}oftware {P}artitioning},
  year        ={1994}
}
@inproceedings{VaSe96,
  address     ={Oxford},
  author      ={A. Valmari and M. Set\"{a}l\"{a}},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={VaSe96},
  month       ={March},
  pages       ={228-247},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{V}isual {V}erification of {S}afety and {L}iveness},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{VaSo91,
  author      ={E. Vandris and G. Sobelman},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={VaSo91},
  organization={IEEE},
  pages       ={138--143},
  title       ={Algorithms for Fast, Memory Efficient Switch-Level Simulation},
  year        ={1991}
}
@inproceedings{VaSt85,
  author      ={M. Vardi and L. Stockmeyer},
  booktitle   ={{ACM} Symposium on Theory of Computing},
  key         ={VaSt85},
  pages       ={240--251},
  title       ={Improved Upper and Lower Bounds for Modal Logics of Programs},
  year        ={1985}
}
@inproceedings{VaWo84,
  address     ={Berlin},
  author      ={M. Vardi and P. Wolper},
  booktitle   ={Workshop on Logics of Programs},
  key         ={VaWo84},
  pages       ={501--512},
  publisher   ={Springer-Verlag},
  title       ={yet another Process Logic},
  volume      ={164},
  year        ={1984}
}
@article{VaWo86,
  author      ={M.Y. Vardi and P. Wolper},
  journal     ={Journal of Computer and System Sciences},
  key         ={VaWo86},
  keyword     ={omega},
  month       ={April},
  number      ={2},
  pages       ={183--221},
  title       ={Automata Theoretic Techniques for Modal Logics of Programs},
  volume      ={32},
  year        ={1986}
}
@inproceedings{VaWo86a,
  author      ={M.Y. Vardi and P. Wolper},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={VaWo86a},
  month       ={June},
  pages       ={332--344},
  publisher   ={IEEE Computer Society Press, D.C.},
  title       ={An Automata-Theoretic Approach to Automatic Program Verification},
  year        ={1986}
}
@article{Valk83,
  author      ={R. Valk},
  journal     ={Theoretical Computer Science},
  key         ={Valk83},
  keyword     ={omega},
  pages       ={311--341},
  title       ={Infinite behaviour of petri nets},
  volume      ={25},
  year        ={1983}
}
@inproceedings{Valm89,
  author      ={A. Valmari},
  booktitle   ={International Conference on Application and Theory of Petri Nets},
  key         ={Valm89},
  title       ={{S}tubborn {S}ets for {R}educed {S}tate {S}pace {G}eneration},
  year        ={1989}
}
@inproceedings{Valm90,
  author      ={A. Valmari},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  editor      ={R. P. Kurshan and E.M. Clarkes},
  key         ={Valm90},
  month       ={June},
  title       ={A {S}tubborn {A}ttack on the {S}tate {E}xplosion {P}roblem},
  year        ={1990}
}
@inproceedings{Vard85a,
  address     ={Berlin},
  author      ={M. Vardi},
  booktitle   ={Workshop on Logics of Programs},
  key         ={Vard85a},
  pages       ={413--424},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The Taming of Converse: Reasoning about Two-Way Computations},
  volume      ={193},
  year        ={1985}
}
@inproceedings{Vard87a,
  author      ={M. Vardi},
  booktitle   ={{IEEE} Symposium on Logic in Computer Science (LICS)},
  key         ={Vard87a},
  pages       ={167--176},
  title       ={Verification of Concurrent Programs: The Automata-Theoretic Framework},
  year        ={1987}
}
@inproceedings{Vard88,
  address     ={San Diego, California},
  author      ={M.Y. Vardi},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  editor      ={G.J. Milne},
  key         ={Vard88},
  pages       ={250-269},
  title       ={A Temporal Fixpoint Calculus},
  year        ={1988}
}
@inproceedings{Vard94,
  author      ={M. Vardi},
  booktitle   ={Banff'94},
  key         ={Vard94},
  title       ={An automata-theoretic approach to linear temporal logic},
  year        ={1994}
}
@inproceedings{Vard95,
  address     ={Liege, Belgium},
  author      ={M. Y. Vardi},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={P. Wolper},
  key         ={Vard95},
  month       ={July},
  pages       ={267--278},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={An automata-theoretic approach to fair realizability and synthesis},
  volume      ={939},
  year        ={1995}
}
@article{Vauc74,
  author      ={J. Vaucher},
  journal     ={IEEE Computer},
  key         ={Vauc74},
  keyword     ={HDL},
  month       ={December},
  pages       ={53--54},
  title       ={Hardware Description Languages in {C}anada},
  year        ={1974}
}
@inproceedings{VeCM90,
  author      ={D. Verkest and L. Claesen and H. De Man},
  booktitle   ={{IFIP} International Workshop on Applied Formal Methods for Correct {VLSI} Design},
  editor      ={L. Claesen},
  key         ={VeCM90},
  keyword     ={verification},
  pages       ={99--116},
  title       ={On the use of the {B}oyer-{M}oore theorem prover for},
  year        ={1990}
}
@inproceedings{VeCM92,
  author      ={D. Verkest and L. Claesen and H. De Man},
  booktitle   ={Workshop on Designing Correct Circuits},
  key         ={VeCM92},
  pages       ={173-193},
  title       ={A Proof of the Non-restoring Division Algorithm and its Implementation on the Cathedral-{II}},
  year        ={1992}
}
@inproceedings{VeCl90,
  author      ={D. Verkest and L. Claesen},
  booktitle   ={{IFIP} International Workshop on Applied Formal Methods for Correct {VLSI} Design},
  editor      ={L. Claesen},
  key         ={VeCl90},
  keyword     ={verification},
  pages       ={81--82},
  title       ={Special benchmark session on tautology checking},
  year        ={1990}
}
@inproceedings{VeLe93,
  address     ={Hildesheim, Germany},
  author      ={B. Vergauwen and J. Lewi},
  booktitle   ={International Conference on Concurrency Theory (CONCUR)},
  editor      ={E. Best},
  key         ={VeLe93},
  month       ={August},
  pages       ={447--461},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {L}inear {L}ocal {M}odel {C}hecking {A}lgorithm for {CTL}},
  volume      ={715},
  year        ={1993}
}
@inproceedings{Venz92,
  author      ={G. Venzl},
  booktitle   ={Workshop on Designing Correct Circuits},
  key         ={Venz92},
  pages       ={193-214},
  title       ={Formal Design in an Industrial Research Laboratory: Lessons and Perspectives},
  year        ={1992}
}
@inproceedings{ViAb93,
  address     ={Paris, France},
  author      ={P. Vishakantaiah and J.A. Abraham},
  booktitle   ={European Design Automation Conference },
  editor      ={A. Ambler},
  key         ={ViAb93},
  month       ={February},
  pages       ={170--174},
  publisher   ={IEEE Computer Society Press},
  title       ={High Level Testability Analysis Using {VHDL} Descriptions},
  year        ={1993}
}
@inproceedings{ViBu92,
  author      ={B.L. Di Vito and R.W. Butler},
  booktitle   ={Dependable Computing for Critical Applications---3},
  editor      ={C.E. Landwehr and B. Randell and L. Simoncini},
  key         ={ViBu92},
  month       ={September},
  pages       ={163--188},
  publisher   ={Springer-Verlag, Vienna, Austria},
  series      ={Dependable Computing and Fault-Tolerant Systems},
  title       ={Formal {T}echniques for {S}ynchronized {F}ault-{T}olerant {S}ystems},
  volume      ={8},
  year        ={1992}
}
@inproceedings{ViMo94,
  address     ={Standford, California, USA},
  author      ={B. Victor and F. Moller},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={ViMo94},
  month       ={June},
  pages       ={428--440},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The Mobility Workbench: A Tool for the Pi-Calculus},
  volume      ={818},
  year        ={1994}
}
@article{Viss84,
  author      ={A. Visser},
  journal     ={Journal of Philosophical Logic},
  key         ={Viss84},
  month       ={May},
  number      ={2},
  pages       ={181--212},
  title       ={Four Valued Semantics and the Liar},
  volume      ={13},
  year        ={1984}
}
@inproceedings{Vito96,
  address     ={Oxford},
  author      ={R. Ben L. Di Vito},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={Vito96},
  month       ={March},
  pages       ={160-178},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{A} {N}ew {F}ormalizing {N}ew {N}avigation {R}equirements for {NASA}'s {S}pace {S}huttle},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{VoTr88,
  address     ={Glasgow, Scotland},
  author      ={F. Vos and C. Trullemans},
  booktitle   ={Fusion of Hardware Design and Verification},
  editor      ={G.J. Milne},
  key         ={VoTr88},
  keyword     ={verification},
  month       ={July},
  organization={IFIP WG 10.2},
  pages       ={443--464},
  publisher   ={North-Holland},
  title       ={A Tunable Symbolic Simulator},
  year        ={1988}
}
@misc{Voge91,
  author      ={H. Vogelsang},
  howpublished={Studienarbeit, Institut f\"{u}r Rechnerentwurf und Fehlertoleranz, Universit\"{a}t Karlsruhe},
  key         ={Voge91},
  month       ={June},
  title       ={Hardware Verifikation mit {O}tter},
  year        ={1991}
}
@inproceedings{Voor92,
  address     ={Leuven, Belgium},
  author      ={M. van der Voort},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Voor92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={117--132},
  publisher   ={North-Holland},
  title       ={Introducing well-founded function definitions in {HOL}},
  year        ={1992}
}
@proceedings{Vyto92,
  address     ={Nijmegen, The Netherlands},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={J. Vytopil},
  key         ={Vyto92},
  month       ={January},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Formal Techniques in Real-Time and Fault-Tolerant Systems},
  volume      ={571},
  year        ={1992}
}
@proceedings{WDCC92,
  address     ={Lyngby, Denmark},
  editor      ={J. Staunstrup and R. Starp},
  key         ={WDCC92},
  month       ={January},
  title       ={2nd Workshop on Designing Correct Circuits},
  year        ={1992}
}
@inproceedings{WGGK87,
  author      ={N. Wehn and M. Glesner and K. Gebauer and T. Kropf},
  booktitle   ={IASTED},
  key         ={WGGK87},
  keyword     ={SFB358 conference},
  title       ={{A} {N}ew {F}loorplanning {A}pproach for {H}ierarchical {M}acrocell {D}esign},
  year        ={1987}
}
@inproceedings{WHLL92,
  address     ={Leuven, Belgium},
  author      ={J. von Wright and J. Hekanaho and P. Luostarinen and T. Langbacka},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={WHLL92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={307--326},
  publisher   ={North-Holland},
  title       ={Mechanising some Advanced Refinement Concepts},
  year        ={1992}
}
@article{WHLL93,
  author      ={J. von Wright and J. Hekanaho and P. Loustarinen and P. L\aangbaka},
  journal     ={Formal Methods in System Design},
  key         ={WHLL93},
  keyword     ={refinement HOL},
  month       ={August},
  number      ={1/2},
  title       ={Mechanising Some Advanced Refinement Concepts},
  volume      ={3},
  year        ={1993}
}
@inproceedings{WMWP89,
  address     ={Rome},
  author      ={J.S. Ward and J.D. Morison and E.V. Whiting and N.E. Peeling and M.G. Hill},
  booktitle   ={European Simulation Multiconference (ESM)},
  key         ={WMWP89},
  month       ={June},
  pages       ={277-282},
  title       ={New Developments in {ELLA}},
  year        ={1989}
}
@book{WOLB84,
  author      ={L. Wos and R. Overbeek and E. Lusk and J. Boyle},
  key         ={WOLB84},
  keyword     ={Logic},
  publisher   ={Prentice-Hall},
  title       ={Automated Reasoning: Introduction and Applications},
  year        ={1984}
}
@article{WPHB85,
  author      ={L. Wos and F. Pereira and R. Hong and R.S. Boyer and J.S. Moore and W.W. Bledsoe and L.J. Henschen and B.G. Buchman and G. Wrightson and C. Green},
  journal     ={Journal of Automated Reasoning},
  key         ={WPHB85},
  pages       ={5-48},
  title       ={An Overview of Automated Reasoning and Related Fields},
  volume      ={1},
  year        ={1985}
}
@inproceedings{WaAa93,
  address     ={Arles, France},
  author      ={A.M. Wahba and E. Aas},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={WaAa93},
  keyword     ={verification},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={55--67},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification and Diagnosis of Digital Systems by Ternary Reasoning},
  volume      ={683},
  year        ={1993}
}
@inproceedings{WaBa93,
  address     ={Ottawa, Canada},
  author      ={R. Waxman and P. Bakowski},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={WaBa93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={489--490},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={{VHDL}},
  year        ={1993}
}
@inproceedings{WaBo94,
  address     ={San Diego, CA},
  author      ={E.A. Walkup and G. Boriello},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={WaBo94},
  keyword     ={timing_analysis},
  month       ={June},
  note        ={ch. 8.2},
  publisher   ={San Diego Convention Center},
  title       ={{I}nterface {T}iming {V}erification with {A}pplication to {S}ynthesis},
  year        ={1994}
}
@inproceedings{WaBo95,
  address     ={Lab. ARTEMIS-IMAG, Grenoble University, France},
  author      ={A. Wahba and D. Borrione},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={WaBo95},
  keyword     ={finite_state_systems},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={171--188},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{D}esign error diagnosis in sequential circuits},
  volume      ={987},
  year        ={1995}
}
@inproceedings{WaBr93,
  address     ={Santa Clara, California},
  author      ={Y. Watanabe and R.K. Brayton},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={WaBr93},
  keyword     ={system_design},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={316--320},
  publisher   ={IEEE Computer Society Press},
  title       ={{T}he {M}aximum {S}et of {P}ermissible {B}ehaviors for {FSM} {N}etworks},
  year        ={1993}
}
@inproceedings{WaBr93a,
  address     ={Santa Clara, California},
  author      ={H.-Y. Wang and R.K. Brayton},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={WaBr93a},
  keyword     ={system_design},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={321--329},
  publisher   ={IEEE Computer Society Press},
  title       ={{I}nput {D}on't {C}are {S}equences in {FSM} {N}etworks},
  year        ={1993}
}
@inproceedings{WaBr94,
  address     ={Paris},
  author      ={Y. Watanabe and R.K. Brayton},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={WaBr94},
  keyword     ={Synchronous_Finite_State_Machines},
  month       ={February},
  pages       ={184--191},
  publisher   ={IEEE Computer Society Press},
  title       ={{S}tate {M}inimization of {P}seudo {N}on-{D}eterministic {FSM}'s},
  year        ={1994}
}
@inproceedings{WaBr94a,
  address     ={San Diego, CA},
  author      ={H.Y. Wang and R.K. Brayton},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={WaBr94a},
  keyword     ={sequential_synthesis},
  month       ={June},
  note        ={ch. 42.1},
  publisher   ={San Diego Convention Center},
  title       ={{P}ermissible {O}bservability {R}elations in {FSM} {N}etworks},
  year        ={1994}
}
@article{WaFu74,
  author      ={H. Watanabe and K. Fujino},
  journal     ={IEEE Computer},
  key         ={WaFu74},
  keyword     ={HDL},
  month       ={December},
  pages       ={62--63},
  title       ={Hardware Description Languages in {J}apan},
  year        ={1974}
}
@inproceedings{WaHC93,
  address     ={Paris, France},
  author      ={K.H. Wang and T.T. Hwang and C. Chen},
  booktitle   ={European Design Automation Conference },
  editor      ={F. Poirot and A.-M. Trullemans},
  key         ={WaHC93},
  month       ={February},
  pages       ={261--265},
  publisher   ={IEEE Computer Society Press},
  title       ={Restructuring Binary Decision Diagrams Based on Functional Equivalence},
  year        ={1993}
}
@inproceedings{WaLo96,
  address     ={Oxford},
  author      ={F. Wang and C.-T. Lo},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={WaLo96},
  month       ={March},
  pages       ={682- 701},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{P}rocedure-{L}evel of {R}eal-time {C}oncurrent {S}ystems},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{WaMe95,
  address     ={Edinburgh University (UK), University of Denmark (Denmark)},
  author      ={L.G. Wang and M. Mendler},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={P.E. Camurati and H. Eveking},
  key         ={WaMe95},
  keyword     ={formally_verified_synthesis},
  month       ={October},
  organization={IFIP WG10.5 Advanced Research Working Conference CHARME'95},
  pages       ={84--102},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{F}ormal design of a class of computers},
  volume      ={987},
  year        ={1995}
}
@inproceedings{WaSe86,
  author      ={D.E. Wallace and C.H. Sequin},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={WaSe86},
  keyword     ={verification},
  pages       ={683--689},
  title       ={Plug-in timing models for an abstract timing verifier},
  year        ={1986}
}
@inproceedings{WaSe96,
  address     ={Oxford},
  author      ={M. Walden and K. Sere},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={WaSe96},
  month       ={March},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{R}efining {A}ction {S}ystems within {B}-{T}ool},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{WaSt91,
  address     ={Davis, California},
  author      ={X. Wang and E.P. Stabler},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={WaSt91},
  keyword     ={HDL VHDL synthesis},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={106--120},
  publisher   ={IEEE Computer Society Press},
  title       ={Formalization of {VHDL} Synthesis Procedures in {HOL}},
  year        ={1991}
}
@inproceedings{WaTh85,
  author      ={R.A. Walker and D.E. Thomas},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={WaTh85},
  keyword     ={Design},
  pages       ={453--457},
  title       ={A Model of Design Representation and Synthesis},
  year        ={1985}
}
@article{Wagn76,
  author      ={K. Wagner},
  journal     ={Journ. of Inform. Cybernetics},
  key         ={Wagn76},
  keyword     ={omega},
  pages       ={337--354},
  title       ={Eine {A}xiomatisierung der {T}heorie der regul\"{a}ren {F}olgenmengen},
  volume      ={12},
  year        ={1976}
}
@phdthesis{Wagn77,
  address     ={Stanford, CA},
  author      ={T.J. Wagner},
  key         ={Wagn77},
  school      ={Stanford University},
  title       ={Hardware Verification},
  year        ={1977}
}
@inproceedings{Wagn77a,
  address     ={New York},
  author      ={T.J. Wagner},
  booktitle   ={International Symposium on Design Automation and Microprocessors},
  key         ={Wagn77a},
  organization={IEEE},
  pages       ={50--53},
  title       ={Verification of Hardware Designs through Symbolic Manipulation},
  year        ={1977}
}
@article{Wagn79,
  author      ={K. Wagner},
  journal     ={Information and control},
  key         ={Wagn79},
  keyword     ={omega},
  pages       ={123--177},
  title       ={On $\omega$ regular sets},
  volume      ={43},
  year        ={1979}
}
@inproceedings{Wagn93,
  address     ={Paris, France},
  author      ={F.R. Wagner},
  booktitle   ={European Design Automation Conference },
  editor      ={J. Janse and P. van der Wolf},
  key         ={Wagn93},
  month       ={February},
  pages       ={41--45},
  publisher   ={IEEE Computer Society Press},
  title       ={A Framework-Based Realization of an Environment for Formal Hardware Verification},
  year        ={1993}
}
@inproceedings{Wagn93a,
  address     ={Ottawa, Canada},
  author      ={F. Wagner},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Wagn93a},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={69--86},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Prevail-{DM}: A Framework-Based Environment for Formal Hardware Verification},
  year        ={1993}
}
@inproceedings{Wagn93b,
  address     ={Ottawa, Canada},
  author      ={F. Wagner},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={Wagn93b},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={249--250},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={High Level Synthesis},
  year        ={1993}
}
@article{Wall91,
  author      ={G.K. Wallace},
  journal     ={Communications of the ACM},
  key         ={Wall91},
  month       ={April},
  number      ={4},
  pages       ={30-44},
  title       ={The {JPEG} Still Picture Compression Standard},
  volume      ={34},
  year        ={1991}
}
@inproceedings{Walu96,
  address     ={New Brunswick, NJ, USA},
  author      ={I. Walukiewicz},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={Rajeev Alur and Thomas A. Henzinger},
  key         ={Walu96},
  month       ={July/August},
  pages       ={62--74},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Pushdown Processes: Games and Model Checking},
  volume      ={1102},
  year        ={1996}
}
@inproceedings{Wang92,
  address     ={Leuven, Belgium},
  author      ={L. Wang},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Wang92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={449--458},
  publisher   ={North-Holland},
  title       ={Deriving a Correct Computer},
  year        ={1992}
}
@inproceedings{Wang94,
  address     ={L\"{u}beck, Germany},
  author      ={Y. Wang},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={Wang94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={680--693},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A}lgebraic {R}easoning for {R}eal-{T}ime {P}robabilistic {P}rocesses with {U}ncertain {I}nformation},
  volume      ={863},
  year        ={1994}
}
@inproceedings{WeBP91,
  address     ={Edinburgh, Scotland},
  author      ={N. Wehn and J. Biesenack and M. Pilsl},
  booktitle   ={International Conference on Very Large Scale Integration (VLSI)},
  editor      ={A. Halaas and P.B. Denyer},
  key         ={WeBP91},
  month       ={August},
  organization={IFIP Transactions},
  pages       ={203--214},
  publisher   ={North-Holland},
  title       ={A New Approach to Multiplexer Minimisation in the {CALLAS} Synthesis Environment},
  year        ={1991}
}
@book{WeEs85,
  author      ={N. Weste and K. Eshraghian},
  key         ={WeEs85},
  keyword     ={hardware design general},
  publisher   ={Addison-Wesley},
  series      ={{VLSI} Systems Series},
  title       ={Principles of {CMOS} {VLSI} Design},
  year        ={1985}
}
@inproceedings{WeLe97,
  address     ={Grenoble, France},
  author      ={C. Weise and D. Lenzkes},
  booktitle   ={{H}ybrid and {R}eal-{T}ime {S}ystems},
  editor      ={O. Maler},
  key         ={WeLe97},
  pages       ={316-330},
  publisher   ={Springer Verlag, LNCS 1201},
  title       ={Weak Refinement for Modal Hybrid Systems},
  year        ={1997}
}
@inproceedings{Webe96,
  address     ={Oxford},
  author      ={M. Weber},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={Webe96},
  month       ={March},
  pages       ={307-326},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{C}ombining {S}tatecharts and {Z} for the {D}esign of {S}afety-{C}ritical {C}ontrol {S}ystems},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{Wege94,
  author      ={I. Wegener},
  booktitle   ={GI/ITG Workshop Anwendung formaler Methoden im Systementwurf},
  editor      ={H. Eveking},
  key         ={Wege94},
  keyword     ={2GI/ITG},
  month       ={March},
  organization={GI/ITG},
  publisher   ={Universit\"{a}t Frankfurt, Interner Bericht Nr. 6/94},
  title       ={{G}eneral {R}emarks on {BDD} {L}ike {R}epresentations of {B}oolean {F}unctions},
  year        ={1994}
}
@mastersthesis{Wein97,
  address     ={Karlsruhe},
  author      ={H. Weindel},
  key         ={Wein97},
  keyword     ={formalism verification SFB358},
  remark      ={betreut von K. Schneider},
  school      ={Universit\"{a}t Karlsruhe},
  title       ={Verifikation von Zeitbedingungen mittels arithmetischer Entscheidungsverfahren},
  year        ={1997}
}
@inproceedings{Weis87,
  author      ={D. Weise},
  booktitle   ={{ACM}/{IEEE} Design Automation Conference (DAC)},
  key         ={Weis87},
  keyword     ={verification},
  organization={Computer System Laboratory, Stanford University},
  pages       ={265--271},
  title       ={Functional Verification of {MOS} Circuits},
  year        ={1987}
}
@techreport{Weis88,
  author      ={D. Weise},
  institution ={Computer System Laboratory, Stanford University},
  key         ={Weis88},
  title       ={Constraints, Abstraction, and Verification},
  year        ={1988}
}
@article{Weis90,
  author      ={D. Weise},
  journal     ={{IEEE} Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  key         ={Weis90},
  month       ={April},
  number      ={4},
  pages       ={341--351},
  title       ={Multilevel Verification of {MOS} Circuits},
  volume      ={9},
  year        ={1990}
}
@inproceedings{Weli95,
  address     ={Aspen Grove, Utah, USA},
  author      ={M. Welinder},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={Weli95},
  month       ={September},
  pages       ={340--352},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{V}ery {E}fficient {C}onversions},
  volume      ={971},
  year        ={1995}
}
@inproceedings{WiBu96,
  address     ={Palo Alto, CA, USA},
  author      ={P. J. Windley and J. R. Burch},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={WiBu96},
  month       ={November},
  pages       ={362--376},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Mechanically checking a Lemma used in an automatic verification Tool},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{WiCo94,
  address     ={Bad Herrenalb, Germany},
  author      ={P.J. Windley and M.L. Coe},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={WiCo94},
  keyword     ={tpcd94},
  month       ={September},
  note        ={published 1995},
  pages       ={33--51},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Correctness Model for Pipelined Microprocessors},
  volume      ={901},
  year        ={1994}
}
@inproceedings{WiMS91,
  address     ={Edinburgh, Scotland},
  author      ={P.A. Wilsey and T.J. McBrayer and D. Sims},
  booktitle   ={International Conference on Very Large Scale Integration (VLSI)},
  editor      ={A. Halaas and P.B. Denyer},
  key         ={WiMS91},
  month       ={August},
  organization={IFIP Transactions},
  pages       ={225--236},
  publisher   ={North-Holland},
  title       ={Towards a Formal Model of {VLSI} Systems Compatible with {VHDL}},
  year        ={1991}
}
@inproceedings{WiPn89,
  address     ={Rehovot, Israel},
  author      ={A. Wilk and A. Pnueli},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={WiPn89},
  keyword     ={hardware verification general},
  month       ={November},
  organization={Department of Computer Science, The Weizmann Institude of Science},
  pages       ={460--463},
  title       ={{S}pecification and {V}erification of {VLSI} {S}ystems},
  year        ={1989}
}
@book{WiPr80,
  author      ={D. Winkel and F. Prosser},
  key         ={WiPr80},
  keyword     ={hardware registertransferlevel gatelevel textbook},
  publisher   ={Prentice-Hall Inc.},
  title       ={The Art of Digital Design},
  year        ={1980}
}
@techreport{WiSA93,
  address     ={Munich, Germany},
  author      ={H.C. Wittmann and B.H. Seiss and K.J. Anstreich},
  institution ={Institude of Electronic Design Automation, Department of Electrical Engineering, Technical University of Munich},
  key         ={WiSA93},
  title       ={{U}sing {C}ircuit {H}ierarchical for {F}ault {S}imulation in {C}ombinational and {S}equential {C}ircuits},
  year        ={1993}
}
@inproceedings{WiWo96,
  address     ={New Brunswick},
  author      ={B. Willems and P. Wolper},
  booktitle   ={Symposium on Logic in Computer Science (LICS)},
  key         ={WiWo96},
  month       ={July},
  pages       ={294--303},
  title       ={Partial-Order Methods for Model Checking: From Linear Time to Branching Time},
  year        ={1996}
}
@techreport{Wilk93,
  address     ={Christian-Albrechts Universit\"{a}t zu Kiel, 24098 Kiel},
  author      ={Th. Wilke},
  institution ={Institut f\"{u}r Informatik und Praktische Mathematik},
  key         ={Wilk93},
  month       ={July},
  number      ={9313},
  title       ={Algebras for Classifying Regular Tree Languages and an Application to Frontier Testability},
  type        ={Technical Report},
  year        ={1993}
}
@inproceedings{Wilk94,
  address     ={L\"{u}beck, Germany},
  author      ={T. Wilke},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={Wilk94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={694--715},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{S}pecifying {T}imed {S}tate {S}equences in {P}owerful {D}ecidable {L}ogics and {T}imed {A}utomata},
  volume      ={863},
  year        ={1994}
}
@phdthesis{Wilk94a,
  author      ={Th. Wilke},
  key         ={Wilk94a},
  school      ={Christian-Albrechts Universit\"{a}t zu Kiel},
  title       ={{A}utomaten und {L}ogiken zur {B}eschreibung zeitabh\"{a}ngiger {S}ysteme},
  year        ={1994}
}
@book{Wind71,
  author      ={T.G. Windeknecht},
  key         ={Wind71},
  keyword     ={verification},
  publisher   ={Academic Press},
  title       ={General Dynamical Processes},
  year        ={1971}
}
@phdthesis{Wind90,
  address     ={Davis},
  author      ={P.J. Windley},
  key         ={Wind90},
  keyword     ={microprocessor hardware specification verification},
  month       ={June},
  school      ={University of California, Division of Computer Science},
  title       ={The Formal Verification of Generic Interpreters},
  year        ={1990}
}
@inproceedings{Wind91,
  author      ={P.J. Windley},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  key         ={Wind91},
  pages       ={32-37},
  publisher   ={IEEE Press},
  title       ={Microprocessor Verification},
  year        ={1991}
}
@inproceedings{Wind91a,
  author      ={P.J. Windley},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  key         ={Wind91a},
  keyword     ={verification},
  pages       ={32--37},
  publisher   ={IEEE Press},
  title       ={Microprocessor Verification},
  year        ={1991}
}
@inproceedings{Wind91b,
  address     ={Davis, California},
  author      ={P.J. Windley},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Wind91b},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={32--37},
  publisher   ={IEEE Computer Society Press},
  title       ={The Practical Verification of Microprocessor Design},
  year        ={1991}
}
@inproceedings{Wind92,
  address     ={Leuven, Belgium},
  author      ={P.J. Windley},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={L.J.M. Claesen and M.J.C. Gordon},
  key         ={Wind92},
  month       ={September},
  note        ={IFIP Transactions},
  organization={IFIP TC10/WG10.2},
  pages       ={197--210},
  publisher   ={North-Holland},
  title       ={Abstract Theories in {HOL}},
  year        ={1992}
}
@inproceedings{Wind93,
  address     ={Arles,France},
  author      ={P.J. Windley},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  key         ={Wind93},
  month       ={May},
  pages       ={122-134},
  publisher   ={Springer-Verlag},
  title       ={A Theory of Generic Interpreters},
  year        ={1993}
}
@inproceedings{Wind93a,
  address     ={Vancouver, Canada},
  author      ={P.J. Windley},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Wind93a},
  month       ={August},
  organization={University of British Columbia},
  pages       ={267--281},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Abstraction Techniques for Modeling Real-World Interface Chips},
  volume      ={780},
  year        ={1993}
}
@inproceedings{Wind93b,
  address     ={Arles, France},
  author      ={P.J. Windley},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={Wind93b},
  keyword     ={verification},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={122--134},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Theory of Genetic Interpreters},
  volume      ={683},
  year        ={1993}
}
@inproceedings{Wind94,
  address     ={Malta},
  author      ={P.J. Windley},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={Wind94},
  month       ={September},
  pages       ={440--456},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Specifying Instruction-Set Architectures in {HOL}: A Primer},
  volume      ={859},
  year        ={1994}
}
@article{Wing90,
  author      ={J.M. Wing},
  journal     ={IEEE Computer Magazine},
  key         ={Wing90},
  keyword     ={survey verification},
  month       ={September},
  number      ={9},
  pages       ={8--24},
  title       ={A Specifier's Introduction to Formal Methods},
  volume      ={23},
  year        ={1990}
}
@techreport{Wink83,
  author      ={F. Winkler},
  institution ={Universit\"{a}t Linz, Austria},
  key         ={Wink83},
  keyword     ={Rewrite},
  number      ={83--140},
  title       ={A criterion for eliminating unnecessary reductions in the {K}nuth-{B}endix algorithm},
  type        ={Technical Report},
  year        ={1983}
}
@inproceedings{Wink85,
  address     ={Linz, Austria},
  author      ={F. Winkler},
  booktitle   ={Eurocal 85},
  editor      ={B.F.Caviness},
  key         ={Wink85},
  keyword     ={Rewrite},
  month       ={April},
  pages       ={378--389},
  publisher   ={Springer-Verlag},
  title       ={Reducing the complexity of the {K}nuth-{B}endix completion algorithm: a `unification' of different approaches},
  year        ={1985}
}
@techreport{Wins85,
  author      ={G. Winskel},
  institution ={University of Cambridge Computer Laboratory},
  key         ={Wins85},
  month       ={September},
  number      ={78},
  title       ={A Complete Proof System for {SCCS} with modal assertions},
  type        ={Technical Report},
  year        ={1985}
}
@inproceedings{Wins87,
  address     ={Boston},
  author      ={G. Winskel},
  booktitle   ={{VLSI} Specification, Verification, and Synthesis},
  editor      ={G. Birtwistle and P.A. Subrahmanyam},
  key         ={Wins87},
  pages       ={323--347},
  publisher   ={Kluwer Academic Publishers},
  title       ={A Compositional Model of {MOS} Circuits},
  year        ={1987}
}
@inproceedings{Wins89,
  author      ={G. Winskel},
  booktitle   ={International Colloquium on Automata, Languages and Programming (ICALP)},
  key         ={Wins89},
  title       ={{M}odel {C}hecking in the {M}odal n-Calculus},
  year        ={1989}
}
@inproceedings{WoBo95,
  address     ={Glasgow},
  author      ={P. Wolper and B. Boigelot},
  booktitle   ={Static Analysis Symposium},
  key         ={WoBo95},
  month       ={September},
  pages       ={21-32},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={An Automata-Theoretic Approach to Presburger Arithmetic Constraints},
  volume      ={983},
  year        ={1995}
}
@inproceedings{WoGo93,
  address     ={Hildesheim},
  author      ={P. Wolper and P. Godefroid},
  booktitle   ={Conference on Concurrency (CONCUR)},
  key         ={WoGo93},
  month       ={August},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Partial Order Methods for Temporal Verification},
  year        ={1993}
}
@inproceedings{WoLe93,
  address     ={Elounda, Crete},
  author      ={P. Wolper and D. Leroy},
  booktitle   ={Workshop on Computer Aided Verification (CAV)},
  key         ={WoLe93},
  month       ={June},
  pages       ={59-70},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Reliable Hashing Without Collision Detection},
  volume      ={697},
  year        ={1993}
}
@inproceedings{WoLo89,
  address     ={Grenoble, France},
  author      ={P. Wolper and V. Lovinfosse},
  booktitle   ={International Workshop on Automatic Verification Methods for Finite State Systems},
  key         ={WoLo89},
  pages       ={68--80},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Verifying Properties of Large Sets of Processes with Network Invariants},
  volume      ={407},
  year        ={1989}
}
@inproceedings{WoVS83,
  address     ={New York},
  author      ={P. Wolper and M.Y. Vardi and A.P. Sistla},
  booktitle   ={Symposium on Foundations of Computer Science},
  key         ={WoVS83},
  organization={IEEE},
  pages       ={185--194},
  title       ={Reasoning about Infinite Computations Paths},
  year        ={1983}
}
@book{Wolf85,
  address     ={Institut f\"{u}r Nachrichtensysteme, Universit\"{a}t Karlsruhe},
  author      ={H. Wolf},
  edition     ={2},
  key         ={Wolf85},
  publisher   ={Springer-Verlag},
  title       ={{L}ineare {S}ysteme und {N}etzwerke},
  year        ={1985}
}
@inproceedings{Wolp81,
  address     ={New York},
  author      ={P. Wolper},
  booktitle   ={Symposium on Foundations of Computer Science},
  key         ={Wolp81},
  keyword     ={formalism temporallogic hardware specification logic ltl},
  organization={IEEE},
  pages       ={340--348},
  title       ={Temporal Logic Can Be More Expressive},
  year        ={1981}
}
@phdthesis{Wolp82,
  address     ={Palo Alto, CA},
  author      ={P. Wolper},
  key         ={Wolp82},
  school      ={Standford University},
  title       ={Synthesis of Communicating Processes from Temporal Logic Specifications},
  year        ={1982}
}
@article{Wolp83,
  author      ={P. Wolper},
  journal     ={Information and Control},
  key         ={Wolp83},
  keyword     ={omega formalism temporallogic hardware specification logic ltl},
  pages       ={72--99},
  title       ={Temporal Logic Can Be More Expressive},
  volume      ={56},
  year        ={1983}
}
@article{Wolp85,
  author      ={P. Wolper},
  journal     ={Logique et Analyse},
  key         ={Wolp85},
  pages       ={119--136},
  title       ={The Tableau Method for Temporal Logic: An Overview},
  volume      ={28},
  year        ={1985}
}
@inproceedings{Wolp86,
  address     ={New York},
  author      ={P. Wolper},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={Wolp86},
  month       ={January},
  organization={ACM},
  pages       ={184--192},
  title       ={Expressing Interesting Properties of Programs in Propositional Temporal Logic},
  year        ={1986}
}
@inproceedings{Wolp87,
  address     ={Altrincham, UK},
  author      ={P. Wolper},
  booktitle   ={Temporal Logic in Specification},
  editor      ={B. Banieqbal and H. Barringer and A. Pnueli},
  key         ={Wolp87},
  pages       ={75-123},
  publisher   ={Springer-Verlag},
  title       ={On the Relation of Programs and Computations to Models of Temporal Logic},
  year        ={1987}
}
@article{Wolp97,
  author      ={P. Wolper},
  journal     ={International Journal on Software Tools for Technology Transfer},
  key         ={Wolp97},
  note        ={to appear},
  publisher   ={Springer-Verlag},
  title       ={The meaning of ``Formal'': from Weak to Strong Formal Methods},
  year        ={1997}
}
@inproceedings{Wong91,
  address     ={Davis, California},
  author      ={W. Wong},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Wong91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={395--410},
  publisher   ={IEEE Computer Society Press},
  title       ={A Simple Graph Theory and its Application in Railway Signaling},
  year        ={1991}
}
@inproceedings{Wong93,
  address     ={Vancouver, Canada},
  author      ={W. Wong},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={Wong93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={372--386},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Modelling Bit Vectors in {HOL}: the word Library},
  volume      ={780},
  year        ={1993}
}
@inproceedings{Wong95,
  address     ={Aspen Grove, Utah, USA},
  author      ={W. Wong},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={Wong95},
  month       ={September},
  pages       ={353--368},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{R}ecording and {C}hecking {HOL} {P}roofs},
  volume      ={971},
  year        ={1995}
}
@techreport{Wood89,
  address     ={Pittsburgh Pa 15213},
  author      ={W.G. Wood},
  institution ={Carnegie Mellon University, Software Engineering Institute},
  key         ={Wood89},
  title       ={Temporal Logic Case Study},
  year        ={1989}
}
@inproceedings{WrSe91,
  address     ={Davis, California},
  author      ={J. von Wright and K. Sere},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={P.J. Windley and M. Archer and K.N. Levitt and J.J. Joyce},
  key         ={WrSe91},
  keyword     ={refinement HOL},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  pages       ={231--239},
  publisher   ={IEEE Computer Society Press},
  title       ={Program Transformations and Refinements in {HOL}},
  year        ={1991}
}
@article{Wrig85,
  author      ={G. Wrightson},
  journal     ={Journal of Automated Reasoning},
  key         ={Wrig85},
  keyword     ={Logic},
  number      ={1},
  title       ={Non-Classical Logic Theorem Proving},
  volume      ={1},
  year        ={1985}
}
@inproceedings{Wrig87,
  author      ={G. Wrightson},
  booktitle   ={AI'87 Conference},
  key         ={Wrig87},
  keyword     ={verification},
  title       ={Semantic Tableaux with Links},
  year        ={1987}
}
@inproceedings{Wrig91,
  address     ={Davis, California},
  author      ={J. von Wright},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={M. Archer and J.J. Joyce and K.N. Levitt and P.J. Windley},
  key         ={Wrig91},
  month       ={August},
  organization={IEEE Computer Society, ACM SIGDA},
  publisher   ={IEEE Computer Society Press},
  title       ={Mechanizing the Temporal Logic of Actions in {HOL}},
  year        ={1991}
}
@inproceedings{Wrig94,
  address     ={Malta},
  author      ={J. von Wright},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={T.F. Melham and J. Camilleri},
  key         ={Wrig94},
  month       ={September},
  pages       ={456},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Representing higher-order logic proofs in {HOL}},
  volume      ={859},
  year        ={1994}
}
@inproceedings{WuMa93,
  address     ={Paris, France},
  author      ={Y.-L. Wu and M. Marek-Sadowska},
  booktitle   ={European Design Automation Conference },
  editor      ={F. Poirot and A.-M. Trullemans},
  key         ={WuMa93},
  month       ={February},
  pages       ={273--277},
  publisher   ={IEEE Computer Society Press},
  title       ={Heuristic of Cover Pattern Processing},
  year        ={1993}
}
@inproceedings{WuWe94,
  address     ={Paris},
  author      ={B. Wurth and N. Wehn},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={WuWe94},
  keyword     ={Techniques_and_Applications_for_BDDs},
  month       ={February},
  pages       ={630--635},
  publisher   ={IEEE Computer Society Press},
  title       ={{E}fficient {C}alculation of {B}oolean {R}elations for {M}ultiple-{L}evel {L}ogic {O}ptimization},
  year        ={1994}
}
@book{Wund91,
  author      ={H.-J. Wunderlich},
  key         ={Wund91},
  keyword     ={textbook},
  publisher   ={Springer-Verlag},
  title       ={{H}ochintegrierte {S}chaltungen: {P}r\"{u}fgerechter {E}ntwurf und {T}est},
  year        ={1991}
}
@article{Wyat85,
  author      ={J.L. Wyatt},
  journal     ={{IEEE} Transactions on Circuits and Systems},
  key         ={Wyat85},
  keyword     ={hardware abstraction timing},
  month       ={May},
  number      ={5},
  pages       ={507--510},
  title       ={Signal Delay in {RC} Mesh Networks},
  volume      ={CAS-32},
  year        ={1985}
}
@inproceedings{Wyat87,
  author      ={J.L. Wyatt},
  booktitle   ={Circuit Analysis, Simulation and Design},
  editor      ={A. Ruehli},
  key         ={Wyat87},
  keyword     ={hardware abstraction timing},
  pages       ={254--291},
  publisher   ={Elsevier Science Publishers},
  title       ={Signal Propagation Delay in {RC} Models for Interconnect},
  year        ={1987}
}
@inproceedings{XiBR94,
  address     ={Grenoble, France},
  author      ={X. Xiong and E. Barros and W. Rosenstiel},
  booktitle   ={European Design Automation Conference },
  key         ={XiBR94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={220--225},
  publisher   ={IEEE Computer Society Press},
  title       ={{A} {M}ethod for {P}artitioning {UNITY} {L}anguage in {H}ardware and {S}oftware},
  year        ={1994}
}
@book{Xili89,
  address     ={San Jose},
  key         ={Xili89},
  publisher   ={Xilinx},
  title       ={Xilinx Programmable Gate Array Data Book},
  year        ={1989}
}
@inproceedings{XuIs93,
  address     ={Ottawa, Canada},
  author      ={X. Xu and M. Ishizuka},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={XuIs93},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={119--126},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={An Efficient Data-Path Synthesis Based on Algorithmic Description under the Constraints of Time and Area},
  year        ={1993}
}
@inproceedings{YHTM96,
  address     ={Palo Alto, CA, USA},
  author      ={T. Yoneda and H. Hatori and A. Takahara and S-i Minato},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  editor      ={M. Srivas and A. Camilleri},
  key         ={YHTM96},
  month       ={November},
  pages       ={435--449},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{BDDs} vs. Zero-suppressed {BDDs}: For {CTL} Symbolic Model Checking of Petri Nets},
  volume      ={1166},
  year        ={1996}
}
@inproceedings{YICW94,
  address     ={Grenoble, France},
  author      ={T.Y. Yen and A. Ishii and A. Casavant and W. Wolf},
  booktitle   ={European Design Automation Conference },
  key         ={YICW94},
  keyword     ={hardware verification},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={34--39},
  publisher   ={IEEE Computer Society Press},
  title       ={Efficient Algorithms for Interface Timing Verification},
  year        ={1994}
}
@inproceedings{YLGD93,
  address     ={Paris, France},
  author      ={C. Ykman-Couvreur and B. Lin and G. Goossens and H. DeMan},
  booktitle   ={European Design Automation Conference },
  editor      ={G. Goossens and B. Lin},
  key         ={YLGD93},
  month       ={February},
  pages       ={512--517},
  publisher   ={IEEE Computer Society Press},
  title       ={Synthesis and Optimization of Asynchronous Controllers Based on Extended},
  year        ={1993}
}
@inproceedings{YWCI94,
  address     ={Grenoble, France},
  author      ={T. Yen and W. Wolf and A. Casavant and A. Ishii},
  booktitle   ={European Design Automation Conference },
  key         ={YWCI94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={34--41},
  publisher   ={IEEE Computer Society Press},
  title       ={{E}fficient {A}lgorithms for {I}nterface {T}iming {V}erification},
  year        ={1994}
}
@inproceedings{YWZP94,
  address     ={L\"{u}beck, Germany},
  author      ={X. Yu and J. Wang and C. Zhou and P.K. Pandya},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={YWZP94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={738--755},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{F}ormal {D}esign of {H}ybrid {S}ystems},
  volume      ={863},
  year        ={1994}
}
@techreport{YaHo91,
  address     ={Cambridge, CB2 1PZ, England},
  author      ={H.G. Yang and D.M. Holburn},
  institution ={Cambridge University Engineering Department},
  key         ={YaHo91},
  title       ={A Hierarchical Approach to Timing Verification in {CMOS} {VLSI} Design},
  year        ={1991}
}
@inproceedings{YaHo91a,
  address     ={Amsterdam},
  author      ={H.G. Yang and D.M. Holburn},
  booktitle   ={European Design Automation Conference },
  key         ={YaHo91a},
  keyword     ={Timing_Verification_and_Specification},
  month       ={February},
  organization={IEEE},
  pages       ={266--270},
  publisher   ={IEEE Computer Society Press},
  title       ={{A} {H}ierarchical {A}pproach to {T}iming {V}erification in {CMOS} {VLSI} {D}esign},
  year        ={1991}
}
@inproceedings{YaLS92,
  address     ={Santa Clara, California},
  author      ={A. Yankovlev and L. Lavagno and A. Sangiovanni-Vincentelli},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={YaLS92},
  keyword     ={simulation},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={104--111},
  publisher   ={IEEE Computer Society Press},
  title       ={{A} {U}nified {S}ignal {T}ransition {G}raph {M}odel for {A}synchronous {C}ontrol {C}ircuit {S}ynthesis},
  year        ={1992}
}
@inproceedings{YaNH95,
  address     ={Aspen Grove, Utah, USA},
  author      ={M. Yamamoto and S. Nishizaki and M. Hagiya},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={YaNH95},
  month       ={September},
  pages       ={369--384},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{F}ormalization of {P}lanar {G}raphs},
  volume      ={971},
  year        ={1995}
}
@techreport{Yoel90,
  address     ={Los Alamitos},
  author      ={M. Yoeli},
  institution ={IEEE Computer Society Press},
  key         ={Yoel90},
  title       ={Formal Verification of Hardware Design},
  year        ={1990}
}
@article{Youn89,
  author      ={W.D. Young},
  journal     ={Journal of Automated Reasoning},
  key         ={Youn89},
  number      ={4},
  pages       ={493--518},
  title       ={A Mechanically Verified Code Generator},
  volume      ={5},
  year        ={1989}
}
@techreport{Yu93,
  address     ={Palo Alto, California},
  author      ={Yuan Yu},
  institution ={Digital Systems Research Center},
  key         ={Yu93},
  month       ={October},
  number      ={114},
  title       ={Automated Proofs of Object Code for a Widely Used Microprocessor},
  type        ={Technical Report},
  year        ={1993}
}
@inproceedings{YuDN93,
  address     ={Paris, France},
  author      ={K.Y. Yun and D.L. Dill and S.M. Nowick},
  booktitle   ={European Design Automation Conference },
  editor      ={G. Goossens and B. Lin},
  key         ={YuDN93},
  month       ={February},
  pages       ={525--532},
  publisher   ={IEEE Computer Society Press},
  title       ={Practical Generalizations of Asynchronous State Machines},
  year        ={1993}
}
@inproceedings{YuDi92,
  address     ={Santa Clara, California},
  author      ={K.Y. Yun and D.L. Dill},
  booktitle   ={{IEEE}/{ACM} International Conference on Computer Aided Design (ICCAD)},
  key         ={YuDi92},
  keyword     ={synthesis},
  month       ={November},
  organization={ACM/IEEE},
  pages       ={576--580},
  publisher   ={IEEE Computer Society Press},
  title       ={{A}utomatic {S}ynthesis of 3{D} {A}synchronous {S}tate {M}achines},
  year        ={1992}
}
@inproceedings{YuPS94,
  address     ={L\"{u}beck, Germany},
  author      ={H. Yu and P.K. Pandyz and Y. Sun},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={YuPS94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={716--737},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {C}alculus for {H}ybrid {S}ampled {D}ata {S}ystem},
  volume      ={863},
  year        ={1994}
}
@inproceedings{ZBHL95,
  address     ={Aspen Grove, Utah, USA},
  author      ={C. Zhang and B.R. Becker and M.R. Heckman and K. Levitt and R.A. Olsson},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={E.T. Schubert and P.J. Windley and J. Alves-Foss},
  key         ={ZBHL95},
  month       ={September},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {H}ierarchical {M}ethod for {R}easoning {A}bout {D}istributed {P}rogramming {L}anguages},
  volume      ={971},
  year        ={1995}
}
@inproceedings{ZHLR96,
  address     ={Oxford},
  author      ={J. Zwiers and U. Hannemann and Y. Lakhneche and W.-P. de Roever and F. Stomp},
  booktitle   ={Formal Methods in Europe: Industrial Benefit and Advances in Formal Methods (FME)},
  editor      ={M.-C. Gaudel, J. Woodcock},
  key         ={ZHLR96},
  month       ={March},
  pages       ={595-608},
  publisher   ={Springer Verlag},
  series      ={LNCS},
  title       ={{M}odular {C}ompleteness: {I}ntergrating the {R}euse of {S}pecified {S}oftware in {T}op-{D}own {P}rogram {D}evelopment},
  volume      ={1051},
  year        ={1996}
}
@inproceedings{ZSCC95,
  address     ={Baffulo, USA},
  author      ={Z. Zhou and X. Song and F. Corella and E. Cerny and M. Langevin},
  booktitle   ={Great Lakes Symposium on {VLSI} (GLS-VLSI)},
  key         ={ZSCC95},
  publisher   ={{IEEE} Computer Society Press},
  title       ={Partitioning transition relations efficiently and automatically},
  year        ={1995}
}
@inproceedings{ZSCC95a,
  author      ={Z. Zhou and X. Song and F. Corella and E. Cerny and M. Langevin},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  key         ={ZSCC95a},
  title       ={Description and verification of {RTL} designs using multiway decision graphs},
  year        ={1995}
}
@inproceedings{ZSOL93,
  address     ={Vancouver, Canada},
  author      ={C. Zhang and R. Shaw and R. Olsson and K.N. Levitt and M. Archer and M. Heckman and G. Benson},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={ZSOL93},
  keyword     ={HOL},
  month       ={August},
  organization={University of British Columbia},
  pages       ={29--43},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Mechanizing a Programming Logic for the Concurrent Programming Language micro{SR} in {HOL}},
  volume      ={780},
  year        ={1993}
}
@inproceedings{ZSTC96,
  address     ={USA},
  author      ={Z. Zhou and X. Song and S. Tahar and E. Cerny and F. Corella and M. Langevin},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  key         ={ZSTC96},
  pages       ={233-247},
  title       ={Formal verification of the island tunnel controller using multiway decision graphs},
  year        ={1996}
}
@article{ZaCa93,
  author      ={A. Zanardo and J. Carmo},
  journal     ={Journal of Logic Computer},
  key         ={ZaCa93},
  number      ={3},
  pages       ={249--268},
  title       ={Ockhamist Computational Logic: Past-Sensitive Necessitation in {CTL}},
  volume      ={3},
  year        ={1993}
}
@techreport{ZaZa93,
  address     ={Lausanne, Switzerland},
  author      ={S. Zaker and J. Zahnd},
  institution ={Laboratoire de syst\`{e}mes logiques Ecole polytechniques f\'{e}d\'{e}rale de Lausanne},
  key         ={ZaZa93},
  title       ={{OPTIMOS:} {A} {B}ranch-{L}evel {D}igital {C}ircuit {O}ptimizer},
  year        ={1993}
}
@inproceedings{Zamm96,
  address     ={Turku, Finland},
  author      ={V. Zammit},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J. Von Wright and J. Grundy and J. Harrison},
  key         ={Zamm96},
  month       ={August},
  pages       ={431--446},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Mechanization of Computability Theory in {HOL}},
  volume      ={1125},
  year        ={1996}
}
@inproceedings{ZeCe94,
  address     ={Grenoble, France},
  author      ={J. Zejda and E. Cerny},
  booktitle   ={European Design Automation Conference },
  key         ={ZeCe94},
  month       ={September},
  organization={IEEE Computer Society},
  pages       ={374--379},
  publisher   ={IEEE Computer Society Press},
  title       ={{G}ate-{L}evel {T}iming {V}erification {U}sing {W}aveform {N}arrowing},
  year        ={1994}
}
@techreport{ZhBo95,
  author      ={Z. Zhou and N. Bouleric},
  institution ={University of Montreal},
  key         ={ZhBo95},
  title       ={{MDG} tools user's manual},
  year        ={1995}
}
@inproceedings{ZhJS93,
  address     ={Vancouver, Canada},
  author      ={Z. Zhu and J. Joyce and C.-J.H. Seger},
  booktitle   ={Higher Order Logic Theorem Proving and its Applications},
  editor      ={J.J. Joyce and C.-J.H. Seger},
  key         ={ZhJS93},
  month       ={August},
  organization={University of British Columbia},
  pages       ={253--267},
  publisher   ={Springer-Verlag, published 1994},
  series      ={Lecture Notes in Computer Science},
  title       ={Verification of the {T}amarack-3 Microprocessor in a Hybrid Verification Environment},
  volume      ={780},
  year        ={1993}
}
@inproceedings{ZhJo93a,
  address     ={Ottawa, Canada},
  author      ={Z. Zhu and S.D. Johnson},
  booktitle   ={{IFIP} Conference on Computer Hardware Description Languages and their Applications (CHDL)},
  editor      ={D. Agnew and L. Claesen and R. Camposano},
  key         ={ZhJo93a},
  month       ={April},
  organization={IFIP WG10.2, CHDL'93, IEEE COMPSOC},
  pages       ={285--302},
  publisher   ={Elsevier Science Publishers B.V., Amsterdam, Netherland},
  title       ={Automatic Synthesis of Sequential Synchronizations},
  year        ={1993}
}
@techreport{ZhJo93b,
  address     ={Bloomington},
  author      ={Z. Zhu and S.D. Johnson},
  institution ={Indiana University, Computer Science Department},
  key         ={ZhJo93b},
  keyword     ={registertransferlevel hardware formalsynthesis algorithmiclevel},
  note        ={ftp://goethe.ira.uka.de/pub/hvg/techreports/abstracts/abstract-ZhJo93.txt},
  number      ={TR383},
  title       ={An Example of Interactive Hardware Transformation},
  year        ={1993}
}
@inproceedings{ZhKK88,
  address     ={Argonne, Illinois, USA},
  author      ={H. Zhang and D. Kapur and M.S. Krishnamoorthy},
  booktitle   ={Conference on Automated Deduction (CADE)},
  editor      ={E.Lusk and R.Overbeek},
  key         ={ZhKK88},
  keyword     ={Rewrite},
  pages       ={162--181},
  publisher   ={Springer-Verlag},
  title       ={A mechanizable induction principle for equational specifications},
  year        ={1988}
}
@inproceedings{ZhKa88,
  author      ={H. Zhang and D. Kapur},
  booktitle   ={Conference on Automated Deduction (CADE)},
  key         ={ZhKa88},
  keyword     ={Rewrite},
  pages       ={1--19},
  title       ={First-order theorem proving using Conditional Rewrite Rules},
  year        ={1988}
}
@inproceedings{ZhSe94,
  address     ={Standford, California, USA},
  author      ={Z. Zhu and C. -J. H. Seger},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  editor      ={David L. Dill},
  key         ={ZhSe94},
  month       ={June},
  pages       ={286--298},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={The Completness of a Hardware Inference System},
  volume      ={818},
  year        ={1994}
}
@inproceedings{ZhTr93,
  address     ={Arles, France},
  author      ={Q. Zhang and C. Trullemans},
  booktitle   ={Conference on Correct Hardware Design and Verification Methods (CHARME)},
  editor      ={G.J. Milne and L. Pierre},
  key         ={ZhTr93},
  keyword     ={verification},
  month       ={May},
  organization={IFIP WG10.2},
  pages       ={68--79},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={Logic Verification of Incomplete Functions and Design Error Location},
  volume      ={683},
  year        ={1993}
}
@inproceedings{ZhZh94,
  address     ={L\"{u}beck, Germany},
  author      ={Y. Zheng and C. Zhou},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={ZhZh94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={756--775},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{A} {F}ormal {P}roof of the {D}eadline {D}riven {S}cheduler},
  volume      ={863},
  year        ={1994}
}
@phdthesis{Zhan88,
  author      ={H. Zhang},
  key         ={Zhan88},
  keyword     ={Rewrite},
  school      ={Rensselaer Polytechnic Institute, Department of Computer Science, Troy, New York},
  title       ={Reduction, Superposition and Induction},
  year        ={1988}
}
@inproceedings{Zhou94,
  address     ={L\"{u}beck, Germany},
  author      ={C. Zhou},
  booktitle   ={Formal Techniques in Real-Time and Fault Tolerant Systems (FTRTFT)},
  editor      ={H. Langmaack and W.-P. de Roever and J. Vytopil},
  key         ={Zhou94},
  month       ={September},
  organization={Third International Symposium Organized Jointly with the Working Group Provably Correct Systems-ProCoS},
  pages       ={86--109},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={{L}inear {D}uration {I}nvariants},
  volume      ={863},
  year        ={1994}
}
@techreport{Zhou95,
  author      ={Z. Zhou},
  institution ={University of Montreal},
  key         ={Zhou95},
  title       ={{MDG} tools developer's manual},
  year        ={1995}
}
@inproceedings{Zhu94,
  address     ={Bad Herrenalb, Germany},
  author      ={Z. Zhu},
  booktitle   ={International Conference on Theorem Provers in Circuit Design (TPCD)},
  editor      ={T. Kropf and R. Kumar},
  key         ={Zhu94},
  keyword     ={tpcd94},
  month       ={September},
  note        ={published 1995},
  pages       ={92--109},
  publisher   ={Springer-Verlag},
  series      ={Lecture Notes in Computer Science},
  title       ={A Compositional Circuit Model and Verification by Composition},
  volume      ={901},
  year        ={1994}
}
@article{Zimm80,
  author      ={G. Zimmermann},
  journal     ={Journal of Digital Systems},
  key         ={Zimm80},
  keyword     ={Design},
  pages       ={337--369},
  title       ={{MDS}- the {MIMOLA} design method},
  year        ={1980}
}
@phdthesis{Zuck86,
  address     ={Rehovot, Israel},
  author      ={L. Zuck},
  key         ={Zuck86},
  school      ={Weizmann Institute},
  title       ={Past Temporal Logic},
  year        ={1986}
}
@inproceedings{ZwLe85,
  address     ={New York},
  author      ={A.E. Zwarico and L. Lee},
  booktitle   ={{IEEE} Real-Time Systems Symposium},
  key         ={ZwLe85},
  month       ={December},
  organization={IEEE},
  pages       ={169--177},
  title       ={Proving a Network of Real-Time Processes Correct},
  year        ={1985}
}
@article{EmSi96,
  author      ={E.A. Emerson and A.P. Sistla},
  title       ={Symmetry and Model Checking},
  journal     ={Formal Methods in System Design},
  year        ={1996},
  volume      ={9},
  pages       ={105-131},
  key         ={EmSi96}
}

@inproceedings{ABHQ97,
  author      ={R. Alur and R.K. Brayton and T.A. Henzinger and S. Qadeer and S.K. Rajamani},
  title       ={Partial-Order Reduction in Symbolic State Space Exploration},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  year        ={1997},
  pages       ={340-351},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  key         ={ABHQ97}
}
@techreport{Abad93,
  author      ={M. Abadi},
  institution ={Digital Equipment Cooperation},
  number      ={65},
  key         ={Abad93},
  title       ={An Axiomatization of {L}amport's Temporal Logic of Actions},
  year        ={1993}
}
@techreport{Lamp91,
  author      ={L. Lamport},
  institution ={Digital Equipment Cooperation},
  number      ={79},
  key         ={Lamp91},
  title       ={The Temporal Logic of Actions},
  year        ={1991}
}

@techreport{Lamp93,
  author      ={L. Lamport},
  institution ={Digital Equipment Cooperation},
  number      ={94},
  key         ={Lamp93},
  title       ={How To Write A Proof},
  year        ={1993}
}

@techreport{Bowe94,
  author      ={J. Bowen},
  institution ={Oxford University Computing Laboratory},
  number      ={PRG-TR-9-94},
  key         ={Bowe94},
  title       ={A brief history of Algebra and Computing: An eclectic oxonian view},
  year        ={1994}
}

@techreport{SeJo92,
  address     ={Vancouver. B.C., Canada},
  author      ={C.-J. Seger and J.J. Joyce},
  institution ={Department of Computer Science, University of British Columbia},
  key         ={SeJo92},
  number      ={TR-92-34},
  title       ={A Mathematically Precise Two-Level Formal Hardware Verification Methodology},
  year        ={1992}
}


@techreport{JoSe93c,
  address     ={Vancouver. B.C., Canada},
  author      ={C.-J. Seger and J.J. Joyce},
  institution ={Department of Computer Science, University of British Columbia},
  key         ={JoSe93c},
  number      ={TR-93-18},
  title       ={Linking {BDD}-based Symbolic Evaluation to Interactive Theorem Proving},
  year        ={1993}
}
		  
@inproceedings{DrFe96,
  author      ={W. Drescher and G. Fettweis},
  title       ={{VLSI} {A}rchitectures for {M}ultiplication in {$GF(2^m)$} for
    {A}pplication {T}ailored {D}igital {S}ignal {P}rocessors},
  booktitle   ={Workshop on VLSI Signal Processing IX, San Francisco / CA},
  year        ={1996},
  key         ={DrFe96}
}
@book{Elie87,
  author      ={R.J. Mc Eliece},
  title       ={Finite Fields for Computer Scientists and Engineers},
  publisher   ={Kluwer Academic Publishers},
  year        ={1987},
  address     ={Boston, MA},
  key         ={Elie87}
}
@article{WTSD85,
  author      ={C.C. Wang and T.K. Troung and H.M. Shao and L.J. Deutsch and I.S.Reed},
  title       ={{VLSI} Architectures For Computing Multiplications and Inverses in {${GF}(2^m)$}},
  journal     ={IEEE Transactions on Computers},
  year        ={1985},
  volume      ={c-34},
  pages       ={709-717},
  month       ={August},
  key         ={WTSD85}
}
@book{LiCo83,
  author      ={S. Lin and Costello, Jr, D.J.},
  title       ={Error Control Coding: Fundamentals and Applications},
  publisher   ={Prentice Hall},
  year        ={1983},
  key         ={LiCo83}
}
@article{YeRT84,
  author      ={C.S. Yeh and I.S. Reed and T.K. Troung},
  title       ={Systolic Multipliers For Finite Fields {${GF}(2^m)$}},
  journal     ={IEEE Transactions on Computers},
  year        ={1984},
  volume      ={c-33},
  pages       ={pp. 357-360},
  month       ={April},
  key         ={YeRT84}
}

@inproceedings{Moor98,
  author      ={J.S. Moore},
  title       ={Ongoing Commercial Applications of the {ACL}2 Theorem Prover},
  booktitle   ={Proceedings of the 10th International Conference on
Computer-Aided Verification (CAV '98)},
  year        ={1998},
  editor      ={Alan J. Hu and Moshe Y. Vardi},
  volume      ={1427},
  series      ={Lecture Notes in Computer Scienc},
  pages       ={357-368},
  publisher   ={Springer-Verlag},
  month       ={August},
  key         ={Moor98}
}
@inproceedings{Schn98,
  address     ={Palo Alto, CA},
  author      ={K. Schneider},
  booktitle   ={Formal Methods in Computer-Aided Design},
  editor      ={G.C. Gopalakrishnan and P.J. Windley},
  key         ={Schn98},
  keyword     ={SFB358 verification},
  month       ={November},
  volume      ={1522},
  series      ={Lecture Notes in Computer Scienc},
  pages       ={483-500},
  publisher   ={Springer Verlag},
  title       ={Model Checking on Product Structures},
  year        ={1998}
}
@inproceedings{GHRW98,
  author      ={Th. Gehrke and M. Huhn and  A. Rensink and H. Wehrheim},
  title       ={An Algebraic Semantics for Message Sequence Chart Documents},
  booktitle   ={Formal Description Techniques and Protocol Specification, Testing and Verifikation (FORTE/PSTV)},
  year        ={1998},
  keyword     ={SFB358, specification},
  editor      ={S. Budkowski and A. Cavalli},
  publisher   ={Kluwer},
  month       ={November},
  key         ={GHRW98}
}
@article{SSHL99,
  author      ={D. Schmid and K. Schneider and M. Huhn and G. Logothetis and V. Sabelfeld},
  journal     ={Informationstechnik und Technische Informatik (it\&ti)},
  key         ={SSHL99},
  keyword     ={SFB358},
  month       ={January},
  number      ={2},
  title       ={Formale {V}erifikation eingebetteter {S}ysteme},
  year        ={1999}
}
@inproceedings{ScHu99,
  author      ={K. Schneider and M. Huhn},
  title       ={Comparing Model-Checking and Term-Rewriting in the Verification of an Embedded System},
  booktitle   ={DIPES98: International IFIP Workshop on Distributed and Parallel Embedded Systems},
  year        ={1999},
  keyword     ={SFB358},
  editor      ={F.J. Rammig},
  pages       ={93-102},
  publisher   ={Kluwer},
  month       ={January},
  key         ={ScHu99}
}
@inproceedings{RuKr98c,
  author      ={J{\"{u}}rgen Ruf and Thomas Kropf},
  title       ={Using {MTBDD}s for Composition and Model Checking of Real-Time Systems},
  booktitle   ={FMCAD 1998},
  year        ={1998},
  publisher   ={Springer},
  month       ={November},
  key         ={RuKr98c},
  keyword     ={sfb358}
}

@book{Wolf91,
  author      ={S. Wolfram},
  title       ={Mathematica - A System for Doing Mathematics by Computer},
  publisher   ={},
  year        ={1991},
  key         ={Wolf91}
}
@book{CGGL92,
  author      ={B.W. Char and K.O. Geddes and G.H. Gonnet and B.L. Leong 
		and M.B. Monagan and St.M. Watt},
  title       ={Maple V Language Reference Manual},
  publisher   ={},
  year        ={1992},
  key         ={CGGL92}
}

@inbook{WiNi95,
  author      ={G. Winskel and M. Nielsen},
  title       ={Handbook of Logic in Computer Science},
  chapter     ={Models for concurrency},
  publisher   ={Oxford University Press},
  year        ={1995},
  volume      ={4},
  key         ={WiNi95}
}@article{JNFS97,
  author      ={J. Jain and A. Narayan and M. Fujita and A. Sangiovanni-Vincentelli},
  title       ={Formal Verification of Combinatorial Circuits},
  journal     ={VLSI Design},
  year        ={1997},
  key         ={JNFS97}
}
@inproceedings{Hu97,
  author      ={Alan J. Hu},
  title       ={Formal Hardware Verification with {BDD}s: An Introduction},
  booktitle   ={{IEEE} Pacific Rim Conference on
    Communications, Computers, and Signal Processing (PACRIM)},
  year        ={1997},
  pages       ={677--682},
  month       ={October},
  key         ={Hu97}
}
@article{Brya92b,
  author      ={R.E. Bryant},
  title       ={Symbolic Boolean Manipulation with Ordered Binary Decision Diagrams},
  journal     ={ACM Computing Surveys},
  year        ={1992},
  volume      ={24},
  number      ={3},
  pages       ={293--318},
  month       ={September},
  key         ={Brya92b}
}
@inproceedings{BSAC96,
  author      ={R. K. Brayton and A. L. Sangiovanni-Vincentelli and A. Aziz and S.-T. Cheng and S. Edwards and S. Khatri and Y. Kukimoto and S. Qadeer and R. K. Ranjan and T. R. Shiple and G. Swamy and T. Villa and G. D. Hachtel and F. Somenzi and A. Pardo and S. Sarwary},
  title       ={{VIS}: A System for Verification Synthesis},
  booktitle   ={Computer-Aided Verification},
  year        ={1996},
  address     ={New Brunswick,
NJ},
  month       ={July-August},
  key         ={BSAC98}
}
@misc{HoKr98,
  author      ={D.W. Hoffmann and T. Kropf},
  title       ={{V}erification of a ${GF}(2^m)$ {M}ultiplier-{C}ircuit for {D}igital {S}ignal {P}rocessing},
  howpublished={Internal Report 22/98, University of Karlsruhe},
  year        ={1998},
  key         ={HoKr98}
}
@article{SAE95,
  author      ={SAE},
  title       ={J1850 class {B} data communication network interface},
  journal     ={The Engeneering Society For Advancing Mobility Land Sea Air and Space},
  year        ={1995},
  month       ={October},
  key         ={SAE95}
}
@proceedings{LeLi95,
  title       ={Formal Development of Reactive Systems - Case Study Production Cell},
  year        ={1995},
  editor      ={Claus Lewerentz and Thomas Lindner},
  number      ={891},
  series      ={Lecture Notes in Computer Science (LNCS)},
  publisher   ={Springer Verlag},
  key         ={LeLi95}
}

@article{CoCo92,
  author      ={P. Cousot and R. Cousot},
  title       ={Abstract interpretation and application to logic programs},
  journal     ={Journal of Logic Programming},
  year        ={1992},
  volume      ={13},
  number      ={2-3},
  pages       ={103--179},
  key         ={CoCo92}
}

@inbook{Cous90,
  author      ={P. Cousot},
  title       ={Handbook of Theoretical Computer Science},
  chapter     ={Methods and Logics for Proving Programs.},
  pages	      ={843--993},
  publisher   ={Elsevier Science Publishers B.V.},
  year        ={1990},
  volume      ={B},
  address     ={Amsterdam, The Netherlands},
  key         ={Cous90}
}

@article{Cous96,
  author      ={P. Cousot},
  title       ={Abstract Interpretation},
  journal     ={ACM Computing Surveys},
  year        ={1996},
  volume      ={28},
  number      ={2},
  pages       ={324--328},
  month       ={June},
  key         ={Cous96}
}@inproceedings{HuCC96,
  author      ={S.Y. Huang and K.C. Chen and K.T. Cheng},
  title       ={Error Correction Based on Verification Techniques},
  booktitle   ={Proceedings of the 33rd Design Automation Conference (DAC)},
  year        ={1996},
  key         ={HuCC96}
}
@inproceedings{MaCB89,
  author      ={J.C. Madre and O. Coudert and J.P. Billon},
  title       ={Automating the Diagnosis and the Rectification of Design Errors with {PRIAM}},
  booktitle   ={Proceedings of ICCAD},
  year        ={1989},
  pages       ={30--33},
  key         ={MaCB89}
}
@article{AbFK88,
  author      ={M.S. Abadir and J. Ferguson and T.E. Kirkland},
  title       ={Logic Design Verification Via Test Generation},
  journal     ={IEEE Transactions on CAD},
  year        ={1988},
  volume      ={7},
  number      ={1},
  pages       ={138--148},
  month       ={January},
  key         ={AbFK88}
}
@article{WaBo96,
  author      ={A. Wahba and D. Borrione},
  title       ={A Method for Automatic Design Error Location and Correction in Combinational
Logic Circuits},
  journal     ={Journal of Electronic Testing: Theory and Applications},
  year        ={1996},
  volume      ={8},
  number      ={2},
  pages       ={113--127},
  month       ={April},
  key         ={WaBo96}
}
@inproceedings{ChWH93,
  author      ={P.Y. Chung and Y.M. Wang and I.N. Hajj},
  title       ={Diagnosis and Correction of Logic Design Errors in Digital Circuits},
  booktitle   ={Proceedings of the 30th Design Automation Conference (DAC)},
  year        ={1993},
  key         ={ChWH93}
}
@inproceedings{ToJi90,
  author      ={M. Tomita and H.H. Jiang},
  title       ={An Algorithm for Locating Logic Design Errors},
  booktitle   ={IEEE International Conference of Computer Aided Design (ICCAD)},
  year        ={1990},
  key         ={ToJi90}
}
@inproceedings{TYSH94a,
  author      ={M. Tomita and T. Yamamoto and F. Sumikawa and K. Hirano},
  title       ={Rectification of Multiple Logic Design Errors in Multiple Output Circuits},
  booktitle   ={Proceedings of the 31st Design Automation Conference (DAC)},
  year        ={1994},
  key         ={TYSH94a}
}
@inproceedings{WaBo97,
  author      ={A. Wahba and D. Borrione},
  title       ={Connection errors location and correction in combinational circuits},
  booktitle   ={European Design and Test Conference ED\&TC-97},
  year        ={1997},
  address     ={Paris, France},
  month       ={March},
  key         ={WaBo97}
}
@inproceedings{WaBo95a,
  author      ={A. Wahba and D. Borrione},
  title       ={Design Error Diagnosis in Sequential Circuits},
  booktitle   ={Correct Hardware Design and Verification Methods, IFIP WG 10.5 Advanced
Research Working Conference, CHARME '95},
  year        ={1995},
  editor      ={Springer Verlag},
  volume      ={987},
  series      ={Lecture
Notes in Computer Science},
  address     ={Frankfurt(M), Germany},
  month       ={October},
  key         ={WaBo95a}
}
@inproceedings{WaBo95b,
  author      ={A. Wahba and D. Borrione},
  title       ={Design Error Diagnosis in Sequential Circuits},
  booktitle   ={Correct Hardware Design and Verification Methods, IFIP WG 10.5 Advanced
Research Working Conference, CHARME '95},
  year        ={1995},
  volume      ={987},
  series      ={Lecture
Notes in Computer Science},
  publisher   ={Springer Verlag},
  address     ={Frankfurt(M), Germany},
  month       ={October},
  key         ={WaBo95b}
}
@inproceedings{Bran93a,
  author      ={D. Brand},
  title       ={Verification of Large Synthesized Designs"},
  booktitle   ={Proceedings of ICCAD},
  year        ={1993},
  pages       ={534--537},
  key         ={Bran93a}
}
@inproceedings{ReKP95,
  author      ={S.M. Reddy and W. Kunz and D.K. Pradhan},
  title       ={{N}ovel {V}erification {F}ramework {C}ombining {S}tructural and {OBDD} {M}ethods in a {S}ynthesis {E}nvironment},
  booktitle   ={ACM/IEEE Design Automation Conference},
  year        ={1995},
  pages       ={414--419},
  key         ={ReKP95}
}
@article{CoCo99,
  author      ={P Cousot and R. Cousot},
  title       ={Refining Model Checking by Abstract Interpretation},
  journal     ={Automated Software Engineering Journal},
  year        ={1999},
  volume      ={6},
  number      ={1},
  pages       ={},
  key         ={CoCo99}
}
@inproceedings{ShBo98,
  author      ={M. Sheeran and A. Bor{\"{a}}lv},
  title       ={{H}ow to {P}rove {P}roperties of {R}ecursively {D}efined {C}ircuits {U}sing {S}talmarck's {M}ethod},
  booktitle   ={Workshop on Formal Techniques for Hardware and Hardware-like Systems},
  year        ={1998},
  address     ={Marstrand},
  month       ={June},
  key         ={ShBo98}
}
@inproceedings{Bora97a,
  author      ={A. Bor{\"{a}}lv},
  title       ={{T}he {I}ndustrial {S}uccess of {V}erification {T}ools {B}ased on {S}talmarck's {M}ethod},
  booktitle   ={Proceedings of the Ninth International Conference on Computer Aided Verification},
  year        ={1997},
  editor      ={Orna
Grumberg},
  volume      ={1254},
  series      ={Lecture Notes in Computer Science},
  pages       ={7--10},
  publisher   ={Springer Verlag},
  month       ={October},
  key         ={Bora97a}
}
@inproceedings{SGZA98,
  author      ={K. Sajid and A. Goel and H. Zhou and A. Aziz and V. Singhal},
  title       ={{BDD} based procedures for a theory of equality with uninterpreted functions},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  year        ={1998},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  key         ={SGZA98}
}
@inproceedings{BBCZ98,
  author      ={S. Berezin and A. Biere and E. Clarke and Y. Zhu},
  title       ={Combining Symbolic Model Checking with Uninterpreted Functions for Out-of-Order
		Processor Verification},
  booktitle   ={International Conference on Formal Methods in Computer Aided Design (FMCAD)},
  year        ={1998},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  key         ={BBCZ98}
}
@inproceedings{SkJD98,
  author      ={J.U. Skakkebaek and R.B. Jones and D.L. Dill},
  title       ={Formal verification of out-of-order execution using incremental flushing},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  year        ={1998},
  publisher   ={Springer Verlag},
  series      ={Lecture Notes in Computer Science},
  key         ={SkJD98}
}

@article{KaZh95,
  author      ={D. Kapur and H. Zhang},
  title       ={{A}n {O}verview of the {R}ewrite {R}ule {L}aboratory},
  journal     ={Journal of Mathematics of Computation},
  year        ={1995},
  key         ={KaZh95}
}

@inproceedings{BrFu85,
  author      ={F. Brglez and H. Fujiwara},
  title       ={A Neutral Netlist of 10 Combinatorial Benchmark Circuits and a Target Translator in {FORTRAN}},
  booktitle   ={Int. Symposium on Circuits and Systems, Special Session on ATPG and Fault Simulation},
  year        ={1985},
  key         ={BrFu85},
  created     ={Thu Oct 29 18:36:53 GMT+03:30 1998 by hoff at i80s7}
}

@phdthesis{Bald98,
  author      ={M. Baldamus},
  title       ={Semantics and Logic of Higher-order Processes:
		Characterizing Late Context Bisimulation},
  school      ={Universit\"{a}t Berlin},
  year        ={1998},
  key         ={Bald98}
}@inproceedings{TaGH97,
  author      ={P. Tafertshofer and A. Ganz and M. Henftling},
  title       ={{A} {{SAT}}-{B}ased {I}mplication {E}ngine for {E}fficient {{ATPG}}, {E}quivalence {C}hecking, and {O}ptimization of {N}etlists},
  booktitle   ={Proceedings of the International Conference on Computer-Aided Design, ICCAD},
  year        ={1997},
  pages       ={648--657},
  month       ={November},
  key         ={TaGH97},
  created     ={Fri Oct 30 11:35:03 GMT+03:30 1998 by hoff at i80s7}
}
@book{KuSt97,
  author      ={W. Kunz and D. Stoffel},
  title       ={Reasoning in Boolean Networks},
  publisher   ={Kluwer Academic Publishers},
  year        ={1997},
  key         ={KuSt97},
  created     ={Fri Oct 30 11:40:22 GMT+03:30 1998 by hoff at i80s7}
}
@inproceedings{FeLi90,
  author      ={E. Feig and E. Linzer},
  title       ={Discrete Cosine Transform Algorithms for Image Data Compression},
  booktitle   ={Proceedings Electronic Imaging'90 East},
  year        ={1990},
  pages       ={84-87},
  address     ={Boston, MA},
  key         ={FeLi90}
}
@article{CoTu65,
  author      ={J.W. Cooley and J.W. Tukey},
  title       ={An algorithm for the machine calculations of complex {F}ourier series},
  journal     ={Mathemtical Computation},
  year        ={1965},
  volume      ={19},
  pages       ={297-301},
  key         ={CoTu65}
}
@article{DuVe90,
  author      ={P. Duhamel and M. Vetterli},
  title       ={Fast Fourier Transforms: A Tutorial Review and a State of the Art},
  journal     ={Signal Processing},
  year        ={1990},
  volume      ={19},
  pages       ={259-299},
  key         ={DuVe90}
}
@article{ChSF77,
  author      ={W. Chen and C.H. Smith and S.C. Fralick},
  title       ={A Fast Computational Algorithm for the Discrete Cosine Transform},
  journal     ={{IEEE} Transactions on Communication},
  year        ={1977},
  volume      ={25},
  number      ={9},
  pages       ={1004-1009},
  key         ={ChSF77}
}@unpublished{HoKr98a,
  author      ={Dirk W. Hoffmann and Thomas Kropf},
  title       ={Using {{BDD}}-based Decomposition for Automatic Error Correction in Combinatorial Circuits},
  note        ={submitted},
  month       ={December},
  year        ={1998},
  key         ={HoKr98a},
  created     ={Mon Dec 14 15:55:23 GMT+03:30 1998 by hoff at i80s7}
}
@inproceedings{DOTY96,
  author      ={C. Daws and A. Olivero and S. Tripakis and S. Yovine},
  title       ={The tool {{KRONOS}}},
  booktitle   ={Hybrid Systems III},
  year        ={1996},
  volume      ={LNCS},
  publisher   ={Springer},
  key         ={DOTY96},
  created     ={Tue Dec 15 16:39:55 GMT+03:30 1998 by ruf at i80s2}
}
@inproceedings{YiPD94,
  author      ={Wang Yi and Paul Patterson and Mats Davis},
  title       ={Automatic Verification of Real-Time Communicating Systems by Constraint Solving},
  booktitle   ={7th International Conference on Formal Description Techniques},
  year        ={1994},
  publisher   ={Springer},
  address     ={Bern, Switzerland},
  month       ={Oktober},
  key         ={YiPD94},
  created     ={Tue Dec 15 16:54:11 GMT+03:30 1998 by ruf at i80s2}
}
@inproceedings{BeMy98,
  author      ={Wndy Belluomini and Chris Myers},
  title       ={Verification of Timed Systems Using {{POSET}s}},
  booktitle   ={Conference on Computer Aided Verification (CAV)},
  year        ={1998},
  series      ={LNCS},
  publisher   ={Springer},
  key         ={BeMy98},
  created     ={Tue Dec 15 16:56:57 GMT+03:30 1998 by ruf at i80s2}
}
@proceedings{PePH96,
  title       ={Partial Order Methods in Verification},
  year        ={1996},
  editor      ={Doron a. Peled and Vaughan R. Pratt and Gerad J. Holzman},
  volume      ={29},
  series      ={DIMACS},
  publisher   ={AMS},
  key         ={PePH96},
  created     ={Tue Dec 15 17:24:53 GMT+03:30 1998 by ruf at i80s2}
}
@inproceedings{CCLQ97,
  address     ={Paris, France},
  author      ={G. Cabodi and P. Camurati and L. Lavagno and S. Quer},
  booktitle   ={European Design and Test Conference (EDTC)},
  key         ={CCLQ97},
  month       ={March},
  pages       ={176-181},
  publisher   ={{IEEE} Computer Society Press},
  title       ={Verification and Synthesis of Counters based on Symbolic Techniques},
  year        ={1997}
}
@inproceedings{CoCo77,
  author      ={P. Cousot and R. Cousot},
  booktitle   ={{ACM} Symposium on Principles of Programming Languages (POPL)},
  key         ={CoCo77},
  organization={ACM},
  pages       ={238-252},
  title       ={Abstract Interpretation: A Unified Lattice Model for Static Analysis of 
		Programs by Construction or Approximation of Fixpoints},
  year        ={1977}
}
@inproceedings{ScLo99,
  address     ={Braunschweig, Germany},
  author      ={K. Schneider and G. Logothetis},
  booktitle   ={GI/ITG/GMM Workshop: Methoden und Beschreibungssprachen zur
		Modellierung und Verifikation von Schaltungen und Systemen},
  editor      ={M. Mutz},
  key         ={ScLo99},
  month       ={March},
  pages       ={??--??},
  publisher   ={},
  title       ={Abstraction of Systems with Counters for Symbolic Model Checking},
  year        ={1999}
}
@mastersthesis{Zimm98,
  address     ={Karlsruhe},
  author      ={J. Zimmermann},
  key         ={Zimm98},
  keyword     ={formalism verification SFB358},
  remark      ={betreut von K. Schneider und M. Huhn},
  school      ={Universit\"{a}t Karlsruhe},
  title       ={Verifikation der diskreten Cosinus-Transformation mittels Modellpr\"{u}fung},
  year        ={1998}
}
@mastersthesis{Schr98,
  address     ={Karlsruhe},
  author      ={J. Schr\"{o}der-Babo},
  key         ={Schr98},
  keyword     ={formalism verification SFB358},
  remark      ={betreut von M. Huhn und K. Schneider},
  school      ={Universit\"{a}t Karlsruhe},
  title       ={Anwendung spezieller Modellpr\"{u}fungstechniken bei der
		Verifikation einer mehrf\"{a}hdigen Prozessorarchitektur},
  year        ={1998}
}
@inproceedings{HSKL99,
  author      ={M. Huhn and K. Schneider and Th. Kropf and G. Logothetis},
  booktitle   ={Design, Automation and Test in Europe (DATE' 98)},
  key         ={HSKL99},
  keyword     ={sfb358},
  month       ={February},
  publisher   ={IEEE Computer Society Press},
  title       ={Verifying Imprecisely Working Arithmetic Circuits},
  year        ={1999}
}
@article{Dam94a,
  author      ={M. Dam},
  title       ={CTL* and ECTL* as fragments of the modal $\mu$-calculus},
  journal     ={Theoretical Computer Science},
  year        ={1994},
  volume      ={126},
  pages       ={77-96},
  key         ={Dam94a}
}
@article{Thom88,
  author      ={W. Thomas},
  title       ={Computation tree logic and regular $\omega$-languages},
  journal     ={Lecture Notes in Computer Science},
  year        ={1988},
  volume      ={354},
  pages       ={690-713},
  key         ={Thom88}
}
@article{RaSc59,
  author      ={M.O. Rabin and D. Scott},
  title       ={Finite automata and their decision problems},
  journal     ={{IBM} Journal of Research and Development},
  year        ={1959},
  volume      ={3},
  pages       ={115-125},
  key         ={RaSc59}
}
@phdthesis{Hoss70,
  author      ={R. Hossley},
  title       ={Finite Tree Automata and $\omega$-Automata},
  school      ={MIT, Cambridge, Massachusetts},
  year        ={1970},
  key         ={Hoss70},
  keyword     ={omega}
}
@article{TrBa70,
  author      ={B.A. Trachtenbrot and J.M. Barsdin},
  title       ={Finite Automata,. Behaviour and Synthesis.},
  journal     ={Mir,Moscow (in russian)},
  year        ={1970},
  key         ={TrBa70},
  keyword     ={omega}
}
@phdthesis{Wagn76a,
  author      ={K. Wagner},
  title       ={Zur {T}heorie der regul\"{a}ren {F}olgenmengen},
  school      ={Friedrich Schiller Universit\"{a}t},
  year        ={1976},
  address     ={Jena},
  key         ={Wagn76a},
  keyword     ={omega}
}
@article{VaWo94,
  author      ={M.Y.Vardi and P. Wolper},
  title       ={Reasoning about infinite computations},
  journal     ={Information and Computation},
  year        ={1994},
  volume      ={115},
  number      ={1},
  pages       ={1-37},
  key         ={VaWo94},
  keyword     ={omega}
}