@article(AbdunabiARF13,
 author       = {Ramadan Abdunabi and Al{-}Lail, Mustafa and Indrakshi Ray and Robert B. France},
 year         = {2013},
 title        = {Specification, Validation, and Enforcement of a Generalized Spatio-Temporal Role-Based Access Control Model},
 journal      = {{IEEE} Systems Journal},
 volume       = {7},
 number       = {3},
 pages        = {501--515},
 doi          = {10.1109/JSYST.2013.2242751},
)
@book(EventB,
 author       = {Jean{-}Raymond Abrial},
 year         = {2010},
 title        = {Modeling in Event-B - System and Software Engineering},
 publisher    = {Cambridge University Press},
 doi          = {10.1017/CBO9781139195881},
 url          = {http://www.cambridge.org/uk/catalogue/catalogue.asp?isbn=9780521895569},
)
@article(AkeelFPGW16,
 author       = {Fatimah Y. Akeel and Asieh Salehi Fathabadi and Federica Paci and Andrew M. Gravell and Gary Wills},
 year         = {2016},
 title        = {Formal Modelling of Data Integration Systems Security Policies},
 journal      = {Data Science and Engineering},
 volume       = {1},
 number       = {3},
 pages        = {139--148},
 doi          = {10.1007/s41019-016-0016-y},
)
@inproceedings(BenaissaCM07,
 author       = {Bena{\"{\i}}ssa, Nazim and Dominique Cansell and Dominique M{\'{e}}ry},
 year         = {2007},
 title        = {Integration of Security Policy into System Modeling},
 booktitle    = {B 2007: Formal Specification and Development in B, 7th International Conference of {B} Users, Proceedings},
 series       = {Lecture Notes in Computer Science},
 volume       = {4355},
 publisher    = {Springer},
 pages        = {232--247},
 doi          = {10.1007/11955757_19},
)
@inproceedings(CunhaCRB11,
 author       = {E. Cunha and Marcelo Cust{\'{o}}dio and Herbert Rocha and Raimundo S. Barreto},
 year         = {2011},
 title        = {Formal Verification of {UML} Sequence Diagrams in the Embedded Systems Context},
 booktitle    = {Brazilian Symposium on Computing System Engineering, {SBESC} 2011},
 publisher    = {{IEEE} Computer Society},
 pages        = {39--45},
 doi          = {10.1109/SBESC.2011.18},
)
@article(FerraioloSGKC01,
 author       = {David F. Ferraiolo and Ravi S. Sandhu and Serban I. Gavrila and D. Richard Kuhn and Ramaswamy Chandramouli},
 year         = {2001},
 title        = {Proposed {NIST} standard for role-based access control},
 journal      = {{ACM} Trans. Inf. Syst. Secur.},
 volume       = {4},
 number       = {3},
 pages        = {224--274},
 doi          = {10.1145/501978.501980},
)
@article(FuchsPS11,
 author       = {Ludwig Fuchs and G{\"{u}}nther Pernul and Ravi S. Sandhu},
 year         = {2011},
 title        = {Roles in information security - {A} survey and classification of the research area},
 journal      = {Computers {\&} Security},
 volume       = {30},
 number       = {8},
 pages        = {748--769},
 doi          = {10.1016/j.cose.2011.08.002},
)
@article(Hoang2008,
 author       = {Thai Son Hoang and David Basin and Jean-Raymond Abrial},
 year         = {2009},
 title        = {Specifying Access Control in Event-B},
 journal      = {Technical report},
 volume       = {624},
 doi          = {10.3929/ethz-a-006733720},
)
@inproceedings(HofrichterGS13,
 author       = {Oliver Hofrichter and Martin Gogolla and Karsten Sohr},
 year         = {2013},
 title        = {{UML/OCL} based Design and Analysis of Role-Based Access Control Policies},
 booktitle    = {{(GEMOC} 2013) and {(AMINO} 2013) Co-located with {(MODELS} 2013)},
 series       = {{CEUR} Workshop Proceedings},
 volume       = {1102},
 publisher    = {CEUR-WS.org},
 pages        = {33--42},
 url          = {http://ceur-ws.org/Vol-1102/amino2013_submission_2.pdf},
)
@article(JaegerT01,
 author       = {Trent Jaeger and Jonathon Tidswell},
 year         = {2001},
 title        = {Practical safety in flexible access control models},
 journal      = {{ACM} Trans. Inf. Syst. Secur.},
 volume       = {4},
 number       = {2},
 pages        = {158--190},
 doi          = {10.1145/501963.501966},
)
@inproceedings(KimC00,
 author       = {Soon{-}Kyeong Kim and David A. Carrington},
 year         = {2000},
 title        = {{An integrated framework with {UML} and Object-Z for developing a precise and understandable specification: the light control case study}},
 booktitle    = {7th Asia-Pacific Software Engineering Conference {(APSEC} 2000)},
 publisher    = {{IEEE} Computer Society},
 pages        = {240--248},
 doi          = {10.1109/APSEC.2000.896705},
)
@article(LPT17,
 author       = {Linas Laibinis and Inna Pereverzeva and Elena Troubitsyna},
 year         = {2017},
 title        = {Formal reasoning about resilient goal-oriented multi-agent systems},
 journal      = {Science of Computer Programming},
 volume       = {148},
 pages        = {66--87},
 doi          = {10.1016/j.scico.2017.05.008},
)
@inproceedings(LedangS02,
 author       = {Hung Ledang and Jeanine Souqui{\`{e}}res},
 year         = {2002},
 title        = {Integration of {UML} and {B} Specification Techniques: Systematic Transformation from {OCL} Expressions into {B}},
 booktitle    = {9th Asia-Pacific Software Engineering Conference {(APSEC} 2002)},
 publisher    = {{IEEE} Computer Society},
 pages        = {495},
 doi          = {10.1109/APSEC.2002.1183053},
)
@inproceedings(PereverzevaBFLT14,
 author       = {Inna Pereverzeva and Michael J. Butler and Asieh Salehi Fathabadi and Linas Laibinis and Elena Troubitsyna},
 year         = {2014},
 title        = {Formal Derivation of Distributed MapReduce},
 booktitle    = {Abstract State Machines, Alloy, B, TLA, VDM, and {Z} - 4th International Conference, {ABZ} 2014. Proceedings},
 series       = {Lecture Notes in Computer Science},
 volume       = {8477},
 publisher    = {Springer},
 pages        = {238--254},
 doi          = {10.1007/978-3-662-43652-3_21},
)
@inproceedings(PereverzevaLTHP13,
 author       = {Inna Pereverzeva and Linas Laibinis and Elena Troubitsyna and Markus Holmberg and Mikko P{\"{o}}ri},
 year         = {2013},
 title        = {Formal Modelling of Resilient Data Storage in Cloud},
 booktitle    = {Formal Methods and Software Engineering - 15th International Conference on Formal Engineering Methods, {ICFEM} 2013},
 series       = {Lecture Notes in Computer Science},
 volume       = {8144},
 publisher    = {Springer},
 pages        = {363--379},
 doi          = {10.1007/978-3-642-41202-8_24},
)
@inproceedings(PereverzevaTL12,
 author       = {Inna Pereverzeva and Elena Troubitsyna and Linas Laibinis},
 year         = {2012},
 title        = {{Formal Development of Critical Multi-agent Systems: {A} Refinement Approach}},
 booktitle    = {2012 Ninth European Dependable Computing Conference, 2012},
 publisher    = {{IEEE} Computer Society},
 pages        = {156--161},
 doi          = {10.1109/EDCC.2012.24},
)
@article(PereverzevaTL13,
 author       = {Inna Pereverzeva and Elena Troubitsyna and Linas Laibinis},
 year         = {2013},
 title        = {A refinement-based approach to developing critical multi-agent systems},
 journal      = {{IJCCBS}},
 volume       = {4},
 number       = {1},
 pages        = {69--91},
 doi          = {10.1504/IJCCBS.2013.053743},
)
@article(ProkhorovaLT15,
 author       = {Yuliya Prokhorova and Linas Laibinis and Elena Troubitsyna},
 year         = {2015},
 title        = {Facilitating construction of safety cases from formal models in Event-B},
 journal      = {Information {\&} Software Technology},
 volume       = {60},
 pages        = {51--76},
 doi          = {10.1016/j.infsof.2015.01.001},
)
@inproceedings(ProkhorovaT12,
 author       = {Yuliya Prokhorova and Elena Troubitsyna},
 year         = {2012},
 title        = {{Linking Modelling in Event-B with Safety Cases}},
 booktitle    = {Software Engineering for Resilient Systems - 4th International Workshop, {SERENE} 2012. Proceedings},
 series       = {Lecture Notes in Computer Science},
 volume       = {7527},
 publisher    = {Springer},
 pages        = {47--62},
 doi          = {10.1007/978-3-642-33176-3_4},
)
@inproceedings(RayKY06,
 author       = {Indrakshi Ray and Mahendra Kumar and Lijun Yu},
 year         = {2006},
 title        = {{LRBAC:} {A} Location-Aware Role-Based Access Control Model},
 booktitle    = {Information Systems Security, Second International Conference, {ICISS} 2006, Proceedings},
 series       = {Lecture Notes in Computer Science},
 volume       = {4332},
 publisher    = {Springer},
 pages        = {147--161},
 doi          = {10.1007/11961635_10},
)
@inproceedings(RayLFK04,
 author       = {Indrakshi Ray and Na Li and Robert B. France and Dae{-}Kyoo Kim},
 year         = {2004},
 title        = {Using uml to visualize role-based access control constraints},
 booktitle    = {9th {ACM} Symposium on Access Control Models and Technologies, {SACMAT}},
 publisher    = {{ACM}},
 pages        = {115--124},
 doi          = {10.1145/990036.990054},
)
@inproceedings(RODINPLAT,
 author       = {{Rodin}},
 title        = {{Event-B platform}},
 url          = {http://www.event-b.org/},
)
@inproceedings(SereT99,
 author       = {Kaisa Sere and Elena Troubitsyna},
 year         = {1999},
 title        = {{Hazard Analysis in Formal Specification}},
 series       = {Lecture Notes in Computer Science},
 volume       = {1698},
 publisher    = {Springer},
 pages        = {350--360},
 doi          = {10.1007/3-540-48249-0_30},
)
@inproceedings(SereT99FM,
 author       = {Kaisa Sere and Elena Troubitsyna},
 year         = {1999},
 title        = {Safety Analysis in Formal Specification},
 booktitle    = {FM'99 - Formal Methods, World Congress on Formal Methods in the Development of Computing Systems, Proceedings, Volume {II}},
 series       = {Lecture Notes in Computer Science},
 volume       = {1709},
 publisher    = {Springer},
 pages        = {1564--1583},
 doi          = {10.1007/3-540-48118-4_33},
)
@inproceedings(ShafiqMJG05,
 author       = {Basit Shafiq and Ammar Masood and James Joshi and Arif Ghafoor},
 year         = {2005},
 title        = {A Role-Based Access Control Policy Verification Framework for Real-Time Systems},
 booktitle    = {10th {IEEE} International Workshop on Object-Oriented Real-Time Dependable Systems {(WORDS} 2005)},
 publisher    = {{IEEE} Computer Society},
 pages        = {13--20},
 doi          = {10.1109/WORDS.2005.11},
)
@article(SnookB06,
 author       = {Colin F. Snook and Michael J. Butler},
 year         = {2006},
 title        = {{UML-B:} Formal modeling and design aided by {UML}},
 journal      = {{ACM} Trans. Softw. Eng. Methodol.},
 volume       = {15},
 number       = {1},
 pages        = {92--122},
 doi          = {10.1145/1125808.1125811},
)
@inproceedings(SnookB08,
 author       = {Colin F. Snook and Michael J. Butler},
 year         = {2008},
 title        = {{UML-B:} {A} Plug-in for the Event-B Tool Set},
 booktitle    = {Abstract State Machines, {B} and Z, First International Conference, {ABZ} 2008. Proceedings},
 pages        = {344},
 doi          = {10.1007/978-3-540-87603-8_32},
)
@inproceedings(SunFR11,
 author       = {Wuliang Sun and Robert B. France and Indrakshi Ray},
 year         = {2011},
 title        = {Rigorous Analysis of {UML} Access Control Policy Models},
 booktitle    = {{POLICY} 2011, {IEEE} International Symposium on Policies for Distributed Systems and Networks},
 publisher    = {{IEEE} Computer Society},
 pages        = {9--16},
 doi          = {10.1109/POLICY.2011.30},
)
@inproceedings(Troubitsyna03IPDPS,
 author       = {Elena Troubitsyna},
 year         = {2003},
 title        = {{Integrating Safety Analysis into Formal Specification of Dependable Systems}},
 booktitle    = {17th International Parallel and Distributed Processing Symposium {(IPDPS} 2003), CD-ROM/Abstracts Proceedings},
 publisher    = {{IEEE} Computer Society},
 pages        = {215},
 doi          = {10.1109/IPDPS.2003.1213394},
)
@inproceedings(Troubitsyna08,
 author       = {Elena Troubitsyna},
 year         = {2008},
 title        = {{Elicitation and Specification of Safety Requirements}},
 booktitle    = {The Third International Conference on Systems, {ICONS} 2008},
 publisher    = {{IEEE} Computer Society},
 pages        = {202--207},
 doi          = {10.1109/ICONS.2008.56},
)