% Here I copy and paste all three bib files from the survey paper

%%%%%%%%%%%bib file%%%%%%%%%%%%%%

@string{editor = "ed"}
@string{editors = "eds."}

@book{liberzon2011calculus,
  title={Calculus of variations and optimal control theory: a concise introduction},
  author={Liberzon, Daniel},
  year={2011},
  publisher={Princeton university press}
}

@book{camacho2013model,
  title={Model predictive control},
  author={Camacho, Eduardo F and Alba, Carlos Bordons},
  year={2013},
  publisher={Springer science \& business media}
}

@INPROCEEDINGS{Naik2020,

  author={Naik, Nikhil and Nuzzo, Pierluigi},

  booktitle={2020 18th ACM-IEEE International Conference on Formal Methods and Models for System Design (MEMOCODE)}, 

  title={Robustness Contracts for Scalable Verification of Neural Network-Enabled Cyber-Physical Systems}, 

  year={2020},

  volume={},

  number={},

  pages={1-12},

  keywords={Robustness;Contracts;Artificial neural networks;Safety;Programming;Cyber-physical systems;Complexity theory;Deep reinforcement learning;neural networks;contract-based design;verification;robustness},

  doi={10.1109/MEMOCODE51338.2020.9315118}}

@article{PasareanuGBCB08,
  author       = {Corina S. Pasareanu and
                  Dimitra Giannakopoulou and
                  Mihaela Gheorghiu Bobaru and
                  Jamieson M. Cobleigh and
                  Howard Barringer},
  title        = {Learning to divide and conquer: applying the L* algorithm to automate
                  assume-guarantee reasoning},
  journal      = {Formal Methods Syst. Des.},
  volume       = {32},
  number       = {3},
  pages        = {175--205},
  year         = {2008},
  url          = {https://doi.org/10.1007/s10703-008-0049-6},
  doi          = {10.1007/s10703-008-0049-6},
  timestamp    = {Fri, 13 Mar 2020 10:55:24 +0100},
  biburl       = {https://dblp.org/rec/journals/fmsd/PasareanuGBCB08.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{ASE02,
  author    = {Dimitra Giannakopoulou and
               Corina S. Pasareanu and
               Howard Barringer},
  title     = {Assumption Generation for Software Component Verification},
  booktitle = {17th {IEEE} International Conference on Automated Software Engineering
               {(ASE} 2002), 23-27 September 2002, Edinburgh, Scotland, {UK}},
  pages     = {3--12},
  publisher = {{IEEE} Computer Society},
  year      = {2002},
  url       = {https://doi.org/10.1109/ASE.2002.1114984},
  doi       = {10.1109/ASE.2002.1114984},
  timestamp = {Wed, 16 Oct 2019 14:14:55 +0200},
  biburl    = {https://dblp.org/rec/conf/kbse/GiannakopoulouPB02.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}


@inproceedings{BogomolovFGGPPS14,
  author       = {Sergiy Bogomolov and
                  Goran Frehse and
                  Marius Greitschus and
                  Radu Grosu and
                  Corina S. Pasareanu and
                  Andreas Podelski and
                  Thomas Strump},
  editor       = {Eran Yahav},
  title        = {Assume-Guarantee Abstraction Refinement Meets Hybrid Systems},
  booktitle    = {Hardware and Software: Verification and Testing - 10th International
                  Haifa Verification Conference, {HVC} 2014, Haifa, Israel, November
                  18-20, 2014. Proceedings},
  series       = {Lecture Notes in Computer Science},
  volume       = {8855},
  pages        = {116--131},
  publisher    = {Springer},
  year         = {2014},
  url          = {https://doi.org/10.1007/978-3-319-13338-6\_10},
  doi          = {10.1007/978-3-319-13338-6\_10},
  timestamp    = {Tue, 29 Dec 2020 18:38:06 +0100},
  biburl       = {https://dblp.org/rec/conf/hvc/BogomolovFGGPPS14.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{YalcinkayaTFS23,
  author       = {Beyazit Yalcinkaya and
                  Hazem Torfah and
                  Daniel J. Fremont and
                  Sanjit A. Seshia},
  editor       = {Panagiotis Katsaros and
                  Laura Nenzi},
  title        = {Compositional Simulation-Based Analysis of {AI}-Based Autonomous Systems
                  for Markovian Specifications},
  booktitle    = {Runtime Verification - 23rd International Conference, {RV} 2023, Thessaloniki,
                  Greece, October 3-6, 2023, Proceedings},
  series       = {Lecture Notes in Computer Science},
  volume       = {14245},
  pages        = {191--212},
  publisher    = {Springer},
  year         = {2023},
  url          = {https://doi.org/10.1007/978-3-031-44267-4\_10},
  doi          = {10.1007/978-3-031-44267-4\_10},
  timestamp    = {Sun, 12 Nov 2023 02:12:14 +0100},
  biburl       = {https://dblp.org/rec/conf/rv/YalcinkayaTFS23.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@article{DreossiDS19,
  author       = {Tommaso Dreossi and
                  Alexandre Donz{\'{e}} and
                  Sanjit A. Seshia},
  title        = {Compositional Falsification of Cyber-Physical Systems with Machine
                  Learning Components},
  journal      = {J. Autom. Reason.},
  volume       = {63},
  number       = {4},
  pages        = {1031--1053},
  year         = {2019},
  url          = {https://doi.org/10.1007/s10817-018-09509-5},
  doi          = {10.1007/S10817-018-09509-5},
  timestamp    = {Wed, 02 Sep 2020 13:29:47 +0200},
  biburl       = {https://dblp.org/rec/journals/jar/DreossiDS19.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@article{Pasareanu2018,
  author       = {Corina S. Pasareanu and
                  Divya Gopinath and
                  Huafeng Yu},
  title        = {Compositional Verification for Autonomous Systems with Deep Learning
                  Components},
  journal      = {CoRR},
  volume       = {abs/1810.08303},
  year         = {2018},
  url          = {http://arxiv.org/abs/1810.08303},
  eprinttype    = {arXiv},
  eprint       = {1810.08303},
  timestamp    = {Wed, 31 Oct 2018 14:24:29 +0100},
  biburl       = {https://dblp.org/rec/journals/corr/abs-1810-08303.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@article{Pavithra23,
  author       = {P. Habeeb and
                  Nabarun 
      Deka and
                  Deepak D'Souza and
                  Kamal Lodaya and
                  Pavithra Prabhakar},
  title        = {Verification of Camera-Based Autonomous Systems},
  journal      = {{IEEE} Trans. Comput. Aided Des. Integr. Circuits Syst.},
  volume       = {42},
  number       = {10},
  pages        = {3450--3463},
  year         = {2023},
  url          = {https://doi.org/10.1109/TCAD.2023.3240131},
  doi          = {10.1109/TCAD.2023.3240131},
  timestamp    = {Sat, 30 Sep 2023 10:27:50 +0200},
  biburl       = {https://dblp.org/rec/journals/tcad/PDDLP23.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@article{Pavithra24,
  author       = {P. Habeeb and
                  Deepak D'Souza and
                  Kamal Lodaya and
                  Pavithra Prabhakar},
  title        = {Interval Image Abstraction for Verification of Camera-Based
  Autonomous Systems},
  journal      = {{IEEE} Trans. Comput. Aided Des. Integr. Circuits Syst.},

  year         = {2024},
}

@INPROCEEDINGS{8263854,
  author={Chan, Nicole and Mitra, Sayan},
  booktitle={2017 IEEE 56th Annual Conference on Decision and Control (CDC)}, 
  title={Verified hybrid LQ control for autonomous spacecraft rendezvous}, 
  year={2017},
  volume={},
  number={},
  pages={1427-1432},
  doi={10.1109/CDC.2017.8263854}}

@INPROCEEDINGS{9926564,
  author={Hsieh, Chiao and Wu, Daniel and Koh, Yubin and Mitra, Sayan},
  booktitle={2022 IEEE 18th International Conference on Automation Science and Engineering (CASE)}, 
  title={Programming Abstractions for Simulation and Testing on Smart Manufacturing Systems}, 
  year={2022},
  volume={},
  number={},
  pages={2287-2292},
  doi={10.1109/CASE49997.2022.9926564}}

@INPROCEEDINGS{9564492,
  author={Hsieh, Chiao and Sibai, Hussein and Taylor, Hebron and Ni, Yifeng and Mitra, Sayan},
  booktitle={2021 IEEE International Intelligent Transportation Systems Conference (ITSC)}, 
  title={SkyTrakx: A Toolkit for Simulation and Verification of Unmanned Air-Traffic Management Systems}, 
  year={2021},
  volume={},
  number={},
  pages={372-379},
  doi={10.1109/ITSC48978.2021.9564492}}

@article{10.1002/cjce.23974,
author = {Yuan, Qingyun and Liu, Tan and Wang, Yonggang and Wang, Lina},
title = {Plant-wide optimization based on interval number for beneficiation and metallurgy},
journal = {The Canadian Journal of Chemical Engineering},
volume = {99},
number = {S1},
pages = {S485-S503},
keywords = {beneficiation and metallurgy, interval number, plant-wide optimization, qualitative model},
doi = {https://doi.org/10.1002/cjce.23974},
url = {https://onlinelibrary.wiley.com/doi/abs/10.1002/cjce.23974},
eprint = {https://onlinelibrary.wiley.com/doi/pdf/10.1002/cjce.23974},
abstract = {Abstract Considering the difficulty of accurate online-measurement of some key variables in the plant-wide process of beneficiation and metallurgy, the quantitative models of some procedures are difficult to establish and the plant-wide optimization control based on the quantitative models is difficult to realize. To address the problem, a plant-wide optimization method based on interval numbers is proposed. Firstly, through analyzing the plant-wide process of beneficiation and metallurgy, the framework of plant-wide optimization based on interval number is given. Secondly, according to expert knowledge and the site workers' experience, the fuzzy qualitative model of the flotation process is established. Combining the quantitative model of the subsequent metallurgy process with the qualitative model of the flotation process, the plant-wide optimization problem of beneficiation and metallurgy is established with the maximum economic benefits as the objective. Thirdly, for each output mode of the fuzzy qualitative model, interval number is used to represent the key variables that cannot be measured online, and combining the optimization algorithm based on interval number with the hierarchical decomposition optimization method, an optimization method is proposed to realize the plant-wide optimization of beneficiation and metallurgy. Finally, compared with the conventional plant-wide optimization method and the original hierarchical decomposition optimization method, the simulation results show that the proposed optimization method has a wider applicability, especially with its advantages in solving optimization problems with uncertainty.},
year = {2021}
}

@ARTICLE{788534,
  author={Atassi, A.N. and Khalil, H.K.},
  journal={IEEE Transactions on Automatic Control}, 
  title={A separation principle for the stabilization of a class of nonlinear systems}, 
  year={1999},
  volume={44},
  number={9},
  pages={1672-1687},
  doi={10.1109/9.788534}}

@ARTICLE{6506982,
  author={Georgiou, Tryphon T. and Lindquist, Anders},
  journal={IEEE Transactions on Automatic Control}, 
  title={The Separation Principle in Stochastic Control, {Redux}}, 
  year={2013},
  volume={58},
  number={10},
  pages={2481-2494},
  doi={10.1109/TAC.2013.2259207}}

@ARTICLE{6457409,
  author={Liu, Jun and Ozay, Necmiye and Topcu, Ufuk and Murray, Richard M.},
  journal={IEEE Transactions on Automatic Control}, 
  title={Synthesis of Reactive Switching Protocols From Temporal Logic Specifications}, 
  year={2013},
  volume={58},
  number={7},
  pages={1771-1785},
  doi={10.1109/TAC.2013.2246095}}

@Article{Prabhakar2015,
author={Prabhakar, Pavithra
and Duggirala, Parasara Sridhar
and Mitra, Sayan
and Viswanathan, Mahesh},
title={Hybrid automata-based CEGAR for rectangular hybrid systems},
journal={Formal Methods in System Design},
year={2015},
month={Apr},
day={01},
volume={46},
number={2},
pages={105-134},
abstract={In this paper, we present a counterexample guided abstraction refinement (CEGAR) framework for systems modelled as rectangular hybrid automata. The main difference, between our approach and previous proposals for CEGAR for hybrid automata, is that we consider the abstractions to be hybrid automata as well, as opposed to finite state systems. We show that the CEGAR scheme is semi-complete for the class of rectangular hybrid automata and complete for the subclass of initialized rectangular automata. We have implemented the CEGAR based algorithm in a tool called Hare, that makes calls to HyTech to analyze the abstract models and validate the counterexamples. The experimental evaluations demonstrate the merits of the approach.},
issn={1572-8102},
doi={10.1007/s10703-015-0225-4},
url={https://doi.org/10.1007/s10703-015-0225-4}
}

@article{ALUR19953,
title = {The algorithmic analysis of hybrid systems},
journal = {Theoretical Computer Science},
volume = {138},
number = {1},
pages = {3-34},
year = {1995},
note = {Hybrid Systems},
issn = {0304-3975},
doi = {https://doi.org/10.1016/0304-3975(94)00202-T},
url = {https://www.sciencedirect.com/science/article/pii/030439759400202T},
author = {R. Alur and C. Courcoubetis and N. Halbwachs and T.A. Henzinger and P.-H. Ho and X. Nicollin and A. Olivero and J. Sifakis and S. Yovine},
abstract = {We present a general framework for the formal specification and algorithmic analysis of hybrid systems. A hybrid system consists of a discrete program with an analog environment. We model hybrid systems as finite automata equipped with variables that evolve continuously with time according to dynamical laws. For verification purposes, we restrict ourselves to linear hybrid systems, where all variables follow piecewise-linear trajectories. We provide decidability and undecidability results for classes of linear hybrid systems, and we show that standard program-analysis techniques can be adapted to linear hybrid systems. In particular, we consider symbolic model-checking and minimization procedures that are based on the reachability analysis of an infinite state space. The procedures iteratively compute state sets that are definable as unions of convex polyhedra in multidimensional real space. We also present approximation techniques for dealing with systems for which the iterative procedures do not converge.}
}

@InProceedings{10.1007/978-3-319-41528-4_29,
author="Fan, Chuchu
and Qi, Bolun
and Mitra, Sayan
and Viswanathan, Mahesh
and Duggirala, Parasara Sridhar",
editor="Chaudhuri, Swarat
and Farzan, Azadeh",
title="Automatic Reachability Analysis for Nonlinear Hybrid Models with C2E2",
booktitle="Computer Aided Verification",
year="2016",
publisher="Springer International Publishing",
address="Cham",
pages="531--538",
abstract="C2E2 is a bounded reachability analysis tool for nonlinear dynamical systems and hybrid automaton models. Previously it required users to annotate each system of differential equations of the hybrid automaton with discrepancy functions, and since these annotations are difficult to get for general nonlinear differential equations, the tool had limited usability. This version of C2E2 is improved in several ways, the most prominent among which is the elimination of the need for user-provided discrepancy functions. It automatically computes piece-wise (or local) discrepancy functions around the reachable parts of the state space using symbolically computed Jacobian matrix and eigenvalue perturbation bounds. The special cases of linear and constant rate differential equations are handled with more efficient algorithm. In this paper, we discuss these and other new features that make the new C2E2 a usable tool for bounded reachability analysis of hybrid systems.",
isbn="978-3-319-41528-4"
}

@ARTICLE{4303247,
  author={Tabuada, Paulo},
  journal={IEEE Transactions on Automatic Control}, 
  title={Event-Triggered Real-Time Scheduling of Stabilizing Control Tasks}, 
  year={2007},
  volume={52},
  number={9},
  pages={1680-1685},
  doi={10.1109/TAC.2007.904277}}

@ARTICLE{4459804,
  author={Kloetzer, Marius and Belta, Calin},
  journal={IEEE Transactions on Automatic Control}, 
  title={A Fully Automated Framework for Control of Linear Systems from Temporal Logic Specifications}, 
  year={2008},
  volume={53},
  number={1},
  pages={287-297},
  doi={10.1109/TAC.2007.914952}}

@inproceedings{10.1145/1967701.1967747,
author = {Wongpiromsarn, Tichakorn and Topcu, Ufuk and Ozay, Necmiye and Xu, Huan and Murray, Richard M.},
title = {{TuLiP}: A Software Toolbox for Receding Horizon Temporal Logic Planning},
year = {2011},
isbn = {9781450306294},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
url = {https://doi.org/10.1145/1967701.1967747},
doi = {10.1145/1967701.1967747},
abstract = {This paper describes TuLiP, a Python-based software toolbox for the synthesis of embedded control software that is provably correct with respect to an expressive subset of linear temporal logic (LTL) specifications. TuLiP combines routines for (1) finite state abstraction of control systems, (2) digital design synthesis from LTL specifications, and (3) receding horizon planning. The underlying digital design synthesis routine treats the environment as adversary; hence, the resulting controller is guaranteed to be correct for any admissible environment profile. TuLiP applies the receding horizon framework, allowing the synthesis problem to be broken into a set of smaller problems, and consequently alleviating the computational complexity of the synthesis procedure, while preserving the correctness guarantee.},
booktitle = {Proceedings of the 14th International Conference on Hybrid Systems: Computation and Control},
pages = {313–314},
numpages = {2},
keywords = {linear temporal logic, receding horizon control},
location = {Chicago, IL, USA},
series = {HSCC '11}
}

@article{sun2022learning,
  title={Learning Certifiably Robust Controllers Using Fragile Perception},
  author={Sun, Dawei and Musavi, Negin and Dullerud, Geir and Shakkottai, Sanjay and Mitra, Sayan},
  journal={5th Robot Learning Workshop: Trustworthy Robotics, part of {Neurips'22}},
  year={2022},
  month={December}
}

@INPROCEEDINGS{7798915,
  author={Cortés, Jorge and Dullerud, Geir E. and Han, Shuo and Le Ny, Jerome and Mitra, Sayan and Pappas, George J.},
  booktitle={2016 IEEE 55th Conference on Decision and Control (CDC)}, 
  title={Differential privacy in control and network systems}, 
  year={2016},
  volume={},
  number={},
  pages={4252-4272},
  doi={10.1109/CDC.2016.7798915}}

@INPROCEEDINGS{9659123,
  author={Musavi, Negin and Sun, Dawei and Mitra, Sayan and Dullerud, Geir and Shakkottai, Sanjay},
  booktitle={2021 IEEE Conference on Control Technology and Applications (CCTA)}, 
  title={{HooVer}: A Framework for Verification and Parameter Synthesis in Stochastic Systems using Optimistic Optimization}, 
  year={2021},
  volume={},
  number={},
  pages={923-930},
  doi={10.1109/CCTA48906.2021.9659123}}

@article{10.1145/3428300,
author = {Ghosh, Ritwika and Hsieh, Chiao and Misailovic, Sasa and Mitra, Sayan},
title = {Koord: A Language for Programming and Verifying Distributed Robotics Application},
year = {2020},
issue_date = {November 2020},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
volume = {4},
number = {OOPSLA},
url = {https://doi.org/10.1145/3428300},
doi = {10.1145/3428300},
abstract = {A robot’s code needs to sense the environment, control the hardware, and communicate with other robots. Current programming languages do not provide suitable abstractions that are independent of hardware platforms. Currently, developing robot applications requires detailed knowledge of signal processing, control, path planning, network protocols, and various platform-specific details. Further, porting applications across hardware platforms remains tedious. We present Koord—a domain specific language for distributed robotics—which abstracts platform-specific functions for sensing, communication, and low-level control. Koord makes the platform-independent control and coordination code portable and modularly verifiable. Koord raises the level of abstraction in programming by providing distributed shared memory for coordination and port interfaces for sensing and control. We have developed the formal executable semantics of Koord in the K framework. With this symbolic execution engine, we can identify assumptions (proof obligations) needed for gaining high assurance from Koord applications. We illustrate the power of Koord through three applications: formation flight, distributed delivery, and distributed mapping. We also use the three applications to demonstrate how platform-independent proof obligations can be discharged using the Koord Prover while platform-specific proof obligations can be checked by verifying the obligations using physics-based models and hybrid verification tools.},
journal = {Proc. ACM Program. Lang.},
month = {nov},
articleno = {232},
numpages = {30},
keywords = {Programming Language for Robotics, Distributed Robotics}
}

 @book{dullerud_paganini_2011, place={New York}, title={A course in robust control theory: A convex approach}, publisher={Springer}, author={Dullerud, Geir E. and Paganini, Fernando G.}, year={2011}} 

@misc{codeacar,
      title        = "Code a Car",
      author       = "{Y. Miao, R. Joshi and S. Mitra}",
      howpublished = "\url{https://popgri.github.io/Race/summercamp/}",
      year         = 2022
    }

 @misc{wyse, 
 title = "Worldwide Youth in Science and Engineering Program",
 howpublished = "\url{https://wyse.engineering.illinois.edu/}",
} 

@misc{
    f1tenth, 
    title={{F1TENTH} Competition}, 
    howpublished = "\url{https://f1tenth.org/}",
    journal={F1TENTH}
} 

@misc{
    dbf, 
    title={{AIAA} {Design/Build/Fly}}, 
    howpublished = "\url{https://www.aiaa.org/dbf}",
} 

 @article{opencv_library,
    author = {Bradski, G.},
    citeulike-article-id = {2236121},
    journal = {Dr. Dobb's Journal of Software Tools},
    keywords = {bibtex-import},
    posted-at = {2008-01-15 19:21:54},
    priority = {4},
    title = {{The OpenCV Library}},
    year = {2000}
} 

@INPROCEEDINGS{7743224,
  author={Fan, Chuchu and Kapinski, James and Jin, Xiaoqing and Mitra, Sayan},
  booktitle={2016 International Conference on Embedded Software (EMSOFT)}, 
  title={Locally optimal reach set over-approximation for nonlinear systems}, 
  year={2016},
  volume={},
  number={},
  pages={1-10},
  doi={10.1145/2968478.2968482}}

@article{10.1145/3371106,
author = {Abadi, Mart\'{\i}n and Plotkin, Gordon D.},
title = {A Simple Differentiable Programming Language},
year = {2019},
issue_date = {January 2020},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
volume = {4},
number = {POPL},
url = {https://doi.org/10.1145/3371106},
doi = {10.1145/3371106},
abstract = {Automatic differentiation plays a prominent role in scientific computing and in modern machine learning, often in the context of powerful programming systems. The relation of the various embodiments of automatic differentiation to the mathematical notion of derivative is not always entirely clear---discrepancies can arise, sometimes inadvertently. In order to study automatic differentiation in such programming contexts, we define a small but expressive programming language that includes a construct for reverse-mode differentiation. We give operational and denotational semantics for this language. The operational semantics employs popular implementation techniques, while the denotational semantics employs notions of differentiation familiar from real analysis. We establish that these semantics coincide.},
journal = {Proc. ACM Program. Lang.},
month = {dec},
articleno = {38},
numpages = {28},
keywords = {differentiable programming, automatic differentiation}
}


@misc{GRAICrace,
      title        = "{GRAIC}: A simulator framework for autonomous racing",
      author       = "{M. Jiang, Z. Liu, K. Miller, D. Sun, A. Datta, Y. Jia, S. Mitra and N. Ozay}",
      howpublished = "\url{https://popgri.github.io/Race/}",
      year         = 2021
    }

@misc{GRAIC-CI-OCAR21,
      title        = "Continuous Integration and Testing for Autonomous Racing Software: An Experience Report from {GRAIC}",
      author       = "{M. Jiang, K. Miller, D. Sun, Z. Liu, Y. Jia, A. Datta, N. Ozay and S. Mitra}",
      howpublished = "Presented at the Workshop on Opportunities and Challenges in Autonomous Racing (2021) at IEEE ICRA",
      url = "https://par.nsf.gov/servlets/purl/10296575",
      year         = 2021
    }  

@book{mitra_2021, 
    place={Cambridge, MA}, 
    title={Verifying cyber-physical systems: {A} path to safe autonomy}, 
    publisher={The MIT Press}, 
    author={Mitra, Sayan}, 
    year={2021}
} 

@inproceedings{python-control2021,
  title={The {Python} Control Systems Library (python-control)},
  author={Fuller, Sawyer and Greiner, Ben and Moore, Jason and Murray, Richard and van Paassen, Ren{\'e} and Yorke, Rory},
  booktitle={60th IEEE Conference on Decision and Control (CDC)},
  pages={4875--4881},
  year={2021},
  organization={IEEE}
}

@article{SCHULZ20181,
title = {A tutorial on {Gaussian} process regression: Modelling, exploring, and exploiting functions},
journal = {Journal of Mathematical Psychology},
volume = {85},
pages = {1-16},
year = {2018},
issn = {0022-2496},
doi = {https://doi.org/10.1016/j.jmp.2018.03.001},
url = {https://www.sciencedirect.com/science/article/pii/S0022249617302158},
author = {Eric Schulz and Maarten Speekenbrink and Andreas Krause},
keywords = {Gaussian process regression, Active learning, Exploration–exploitation, Bandit problems},
abstract = {This tutorial introduces the reader to Gaussian process regression as an expressive tool to model, actively explore and exploit unknown functions. Gaussian process regression is a powerful, non-parametric Bayesian approach towards regression problems that can be utilized in exploration and exploitation scenarios. This tutorial aims to provide an accessible introduction to these techniques. We will introduce Gaussian processes which generate distributions over functions used for Bayesian non-parametric regression, and demonstrate their use in applications and didactic examples including simple regression problems, a demonstration of kernel-encoded prior assumptions and compositions, a pure exploration scenario within an optimal design framework, and a bandit-like exploration–exploitation scenario where the goal is to recommend movies. Beyond that, we describe a situation modelling risk-averse exploration in which an additional constraint (not to sample below a certain threshold) needs to be accounted for. Lastly, we summarize recent psychological experiments utilizing Gaussian processes. Software and literature pointers are also provided.}
}

@inproceedings{NEURIPS2018_69386f6b,
 author = {Chen, Ricky T. Q. and Rubanova, Yulia and Bettencourt, Jesse and Duvenaud, David K},
 booktitle = {Advances in Neural Information Processing Systems},
 editor = {S. Bengio and H. Wallach and H. Larochelle and K. Grauman and N. Cesa-Bianchi and R. Garnett},
 pages = {},
 publisher = {Curran Associates, Inc.},
 title = {Neural Ordinary Differential Equations},
 url = {https://proceedings.neurips.cc/paper/2018/file/69386f6bb1dfed68692a24c8686939b9-Paper.pdf},
 volume = {31},
 year = {2018}
}

@inproceedings{47008,
title	= {Compiling machine learning programs via high-level tracing},
author	= {Roy Frostig and Matthew Johnson and Chris Leary},
year	= {2018},
URL	= {https://mlsys.org/Conferences/doc/2018/146.pdf}
}

@article{YU20131446,
title = {{DNAD}, a simple tool for automatic differentiation of {Fortran} codes using dual numbers},
journal = {Computer Physics Communications},
volume = {184},
number = {5},
pages = {1446-1452},
year = {2013},
issn = {0010-4655},
doi = {https://doi.org/10.1016/j.cpc.2012.12.025},
url = {https://www.sciencedirect.com/science/article/pii/S0010465513000027},
author = {Wenbin Yu and Maxwell Blair},
keywords = {Automatic differentiation, Sensitivity, Fortran 90/95/2003, Dual numbers, DNAD},
abstract = {DNAD (dual number automatic differentiation) is a simple, general-purpose tool to automatically differentiate Fortran codes written in modern Fortran (F90/ 95/2003) or legacy codes written in previous version of the Fortran language. It implements the forward mode of automatic differentiation using the arithmetic of dual numbers and the operator overloading feature of F90/ 95/2003. Very minimum changes of the source codes are needed to compute the first derivatives of Fortran programs. The advantages of DNAD in comparison to other existing similar computer codes are its programming simplicity, extensibility, and computational efficiency. Specifically, DNAD is more accurate and efficient than the popular complex-step approximation. Several examples are used to demonstrate its applications and advantages.
Program summary
Program title: DNAD Catalogue identifier: AEOS_v1_0 Program summary URL:http://cpc.cs.qub.ac.uk/summaries/AEOS_v1_0.html Program obtainable from: CPC Program Library, Queen’s University, Belfast, N. Ireland Licensing provisions: Standard CPC licence, http://cpc.cs.qub.ac.uk/licence/licence.html No. of lines in distributed program, including test data, etc.: 3922 No. of bytes in distributed program, including test data, etc.: 18275 Distribution format: tar.gz Programming language: Fortran 90/95/2003. Computer: All computers with a modern FORTRAN compiler. Operating system: All platforms with a modern FORTRAN compiler. Classification: 4.12, 6.2. Nature of problem: Derivatives of outputs with respect to inputs of a Fortran code are often needed in physics, chemistry, and engineering. The author of the analysis code may no longer be available and the user may not have a deep knowledge of the code. Thus a simple tool is necessary to automatically differentiate the code with very minimum change to the source codes. This can be achieved using dual number arithmetic and operator overloading. Solution method: A new data type is defined with the first scalar component holding the function value and the second array component holding the first derivatives. All the basic operations and functions are overloaded with the new definitions according to dual number arithmetic. To differentiate an existing code, all real numbers should be replaced with this new data type and the input/output of the code should also be modified accordingly. Running time: For each additional independent variable, DNAD takes less time than the running time of the original analysis code. However, the actual running time depends on the compiler, the computer, and the operations involved in the code to be differentiated.}
}

@ARTICLE{2015arXiv150205767G,
       author = {{Gunes Baydin}, Atilim and {Pearlmutter}, Barak A. and {Andreyevich Radul}, Alexey and {Siskind}, Jeffrey Mark},
        title = "{Automatic differentiation in machine learning: a survey}",
      journal = {arXiv e-prints},
     keywords = {Computer Science - Symbolic Computation, Computer Science - Machine Learning, Statistics - Machine Learning, 68W30, 65D25, 68T05, G.1.4, I.2.6},
         year = 2015,
        month = feb,
          eid = {arXiv:1502.05767},
        pages = {arXiv:1502.05767},
          doi = {10.48550/arXiv.1502.05767},
archivePrefix = {arXiv},
       eprint = {1502.05767},
 primaryClass = {cs.SC},
       adsurl = {https://ui.adsabs.harvard.edu/abs/2015arXiv150205767G},
      adsnote = {Provided by the SAO/NASA Astrophysics Data System}
}


@misc{50530,
title	= {{XLA}: Compiling Machine Learning for Peak Performance},
author	= {Amit Sabne},
year	= {2020}
}

@article{GORBUNOV2008374,
title = {Fast {SIMDized} {Kalman} filter based track fit},
journal = {Computer Physics Communications},
volume = {178},
number = {5},
pages = {374-383},
year = {2008},
issn = {0010-4655},
doi = {https://doi.org/10.1016/j.cpc.2007.10.001},
url = {https://www.sciencedirect.com/science/article/pii/S0010465507004262},
author = {S. Gorbunov and U. Kebschull and I. Kisel and V. Lindenstruth and W.F.J. Müller},
keywords = {High energy physics, CBM experiment, Data reconstruction, Track fit, Kalman filter, SIMD instruction set, Cell Broadband Engine},
abstract = {Modern high energy physics experiments have to process terabytes of input data produced in particle collisions. The core of many data reconstruction algorithms in high energy physics is the Kalman filter. Therefore, the speed of Kalman filter based algorithms is of crucial importance in on-line data processing. This is especially true for the combinatorial track finding stage where the Kalman filter based track fit is used very intensively. Therefore, developing fast reconstruction algorithms, which use maximum available power of processors, is important, in particular for the initial selection of events which carry signals of interesting physics. One of such powerful feature supported by almost all up-to-date PC processors is a SIMD instruction set, which allows packing several data items in one register and to operate on all of them, thus achieving more operations per clock cycle. The novel Cell processor extends the parallelization further by combining a general-purpose PowerPC processor core with eight streamlined coprocessing elements which greatly accelerate vector processing applications. In the investigation described here, after a significant memory optimization and a comprehensive numerical analysis, the Kalman filter based track fitting algorithm of the CBM experiment has been vectorized using inline operator overloading. Thus the algorithm continues to be flexible with respect to any CPU family used for data reconstruction. Because of all these changes the SIMDized Kalman filter based track fitting algorithm takes 1 μs per track that is 10000 times faster than the initial version. Porting the algorithm to a Cell Blade computer gives another factor of 10 of the speedup. Finally, we compare performance of the tracking algorithm running on three different CPU architectures: Intel Xeon, AMD Opteron and Cell Broadband Engine.}
}

@InProceedings{pmlr-v120-zhang20a,
  title = 	 {Policy Optimization for $\mathcal{H}_{2}$ Linear Control with $\mathcal{H}_{\infty}$ Robustness Guarantee: Implicit Regularization and Global Convergence},
  author =       {Zhang, Kaiqing and Hu, Bin and Basar, Tamer},
  booktitle = 	 {Proceedings of the 2nd Conference on Learning for Dynamics and Control},
  pages = 	 {179--190},
  year = 	 {2020},
  editor = 	 {Bayen, Alexandre M. and Jadbabaie, Ali and Pappas, George and Parrilo, Pablo A. and Recht, Benjamin and Tomlin, Claire and Zeilinger, Melanie},
  volume = 	 {120},
  series = 	 {Proceedings of Machine Learning Research},
  month = 	 {10--11 Jun},
  publisher =    {PMLR},
  pdf = 	 {http://proceedings.mlr.press/v120/zhang20a/zhang20a.pdf},
  url = 	 {https://proceedings.mlr.press/v120/zhang20a.html},
  abstract = 	 {Policy optimization (PO) is a key ingredient for modern reinforcement learning (RL). For control design, certain constraints are usually enforced on the policies to optimize, accounting for either the stability, robustness, or safety concerns on the system. Hence, PO is by nature a constrained (nonconvex) optimization in most cases, whose global convergence is challenging to analyze in general. More importantly, some constraints that are safety-critical, e.g., the closed-loop stability, or the $\mathcal{H}_{\infty}$-norm constraint that guarantees the system robustness, can be difficult to enforce on the controller being learned as the PO methods proceed. In this paper, we study the convergence theory of PO for $\mathcal{H}_{2}$ linear control with $\mathcal{H}_{\infty}$ robustness guarantee. This general framework includes risk-sensitive linear control as a special case. One significant new feature of this problem, in contrast to the standard $\mathcal{H}_{2}$ linear control, namely, linear quadratic regulator (LQR) problems, is the lack of coercivity of the cost function. This makes it challenging to guarantee the feasibility, namely, the $\mathcal{H}_{\infty}$ robustness, of the iterates. Interestingly, we propose two PO algorithms that enjoy the implicit regularization property, i.e., the iterates preserve the $\mathcal{H}_{\infty}$ robustness, as if they are regularized by the algorithms. Furthermore, convergence to the globally optimal policies with globally sublinear and locally (super-)linear rates are provided under certain conditions, despite the nonconvexity of the problem. To the best of our knowledge, our work offers the first results on the implicit regularization property and global convergence of PO methods for robust/risk-sensitive control.}
}

@InProceedings{pmlr-v80-fazel18a,
  title = 	 {Global Convergence of Policy Gradient Methods for the Linear Quadratic Regulator},
  author =       {Fazel, Maryam and Ge, Rong and Kakade, Sham and Mesbahi, Mehran},
  booktitle = 	 {Proceedings of the 35th International Conference on Machine Learning},
  pages = 	 {1467--1476},
  year = 	 {2018},
  editor = 	 {Dy, Jennifer and Krause, Andreas},
  volume = 	 {80},
  series = 	 {Proceedings of Machine Learning Research},
  month = 	 {10--15 Jul},
  publisher =    {PMLR},
  pdf = 	 {http://proceedings.mlr.press/v80/fazel18a/fazel18a.pdf},
  url = 	 {https://proceedings.mlr.press/v80/fazel18a.html},
  abstract = 	 {Direct policy gradient methods for reinforcement learning and continuous control problems are a popular approach for a variety of reasons: 1) they are easy to implement without explicit knowledge of the underlying model, 2) they are an “end-to-end” approach, directly optimizing the performance metric of interest, 3) they inherently allow for richly parameterized policies. A notable drawback is that even in the most basic continuous control problem (that of linear quadratic regulators), these methods must solve a non-convex optimization problem, where little is understood about their efficiency from both computational and statistical perspectives. In contrast, system identification and model based planning in optimal control theory have a much more solid theoretical footing, where much is known with regards to their computational and statistical properties. This work bridges this gap showing that (model free) policy gradient methods globally converge to the optimal solution and are efficient (polynomially so in relevant problem dependent quantities) with regards to their sample and computational complexities.}
}


@article{FRANCIS1976457,
title = {The internal model principle of control theory},
journal = {Automatica},
volume = {12},
number = {5},
pages = {457-465},
year = {1976},
issn = {0005-1098},
doi = {https://doi.org/10.1016/0005-1098(76)90006-6},
url = {https://www.sciencedirect.com/science/article/pii/0005109876900066},
author = {B.A. Francis and W.M. Wonham},
abstract = {Abstract
The classical regulator problem is posed in the context of linear, time-invariant, finite-dimensional systems with deterministic disturbance and reference signals. Control action is generated by a compensator which is required to provide closed loop stability and output regulation in the face of small variations in certain system parameters. It is shown, using the geometric approach, that such a structurally stable synthesis must utilize feedback of the regulated variable, and incorporate in the feedback path a suitably reduplicated model of the dynamic structure of the disturbance and reference signals. The necessity of this control structure constitutes the Internal Model Principle. It is shown that, in the frequency domain, the purpose of the internal model is to supply closed loop transmission zeros which cancel the unstable poles of the disturbance and reference signals. Finally, the Internal Model Principle is extended to weakly nonlinear systems subjected to step disturbances and reference signals.}
}

@ARTICLE{238400,
  author={Nichols, R.A. and Reichert, R.T. and Rugh, W.J.},
  journal={IEEE Transactions on Control Systems Technology}, 
  title={Gain scheduling for {H-infinity} controllers: a flight control example}, 
  year={1993},
  volume={1},
  number={2},
  pages={69-79},
  doi={10.1109/87.238400}}

@ARTICLE{1099818,
  author={Athans, M.},
  journal={IEEE Transactions on Automatic Control}, 
  title={The role and use of the stochastic linear-quadratic-{Gaussian} problem in control system design}, 
  year={1971},
  volume={16},
  number={6},
  pages={529-552},
  doi={10.1109/TAC.1971.1099818}
}

@ARTICLE{6377468,
  author={Sucan, Ioan A. and Moll, Mark and Kavraki, Lydia E.},
  journal={IEEE Robotics \& Automation Magazine}, 
  title={The Open Motion Planning Library}, 
  year={2012},
  volume={19},
  number={4},
  pages={72-82},
  doi={10.1109/MRA.2012.2205651}
}

@inproceedings{henzinger95whats,
    author = "Thomas A. Henzinger and Peter W. Kopke and Anuj Puri and Pravin Varaiya",
    title = "What's decidable about hybrid automata?",
    booktitle = "{ACM} Symposium on Theory of Computing",
    pages = "373-382",
    year = "1995",
    url = "citeseer.nj.nec.com/henzinger95whats.html"
},

@Article{HKPV98,
	author = {Thomas A. Henzinger and Peter W. Kopke and Anuj Puri and Pravin Varaiya},
	title = {What's decidable about hybrid automata?},
	year  ={1998},
	journal = {Journal of Computer and System Sciences },
	volume = {57},
	pages = {94-124}
}
@book{mcmillan93symbolic,
    author = "{K.L. McMillan}",
    title = "{S}ymbolic {M}odel {C}hecking",
    publisher = "Kluwer Academic Publishers",
    address = "Norwell Massachusetts",
    year = "1993"
},

@inproceedings{HenzingerMajumdar2000,
	author = {Thomas A. Henzinger and Rupak Majumdar},
	title = {Symbolic Model Checking for Rectangular Hybrid Systems},
	booktitle = {Proceedings of the Sixth International Workshop on Tools and Algorithms for the Construction and Analysis of Systems (TACAS 2000)},
organization = {LNCS 1785,  Springer-Verlag},
pages = {142-156},
year = {2000}
},

@inproceedings{alurdiscrete,
author = {Rajeev Alur and Thomas Henzinger and  G. Lafferriere and George Pappas},
title = { Discrete abstractions of hybrid systems},
booktitle = {Proceedings of the IEEE},
year = {2000}
},


@article{Dutertre:avionics,
AUTHOR = "B. Dutertre and V. Stavridou",
TITLE = "Formal Requirements Analysis of an Avionics Control System",
JOURNAL = "IEEE Transactions on Software Engineering",
YEAR = "1997",
MONTH = "May",
VOLUME = "23",
NUMBER = "5",
PAGES = "267-278",
},


@ARTICLE{alur:tcs,
AUTHOR = "Rajeev Alur and David L. Dill",
TITLE = "A theory of timed automata",
JOURNAL = "Theoretical Computer Science",
YEAR = "1994",
VOLUME = "126",
PAGES = "183-235",
},

@ARTICLE{ lyn:fbs,
    author = "Nancy A. Lynch and Frits W. Vaandrager",
    title = "Forward and backward simulations -- Part {I}: untimed systems.",
    journal = "Information and Computation",
    month = "September",
    volume = "121",
    number = "2",
    pages = "214-233",
    year = "1995",
    url = "citeseer.nj.nec.com/lynch95forward.html" },

@ARTICLE{lyn:fbsII,
AUTHOR = "Nancy Lynch and Frits Vaandrager",
TITLE = "Forward and backward simulations - Part {II}: Timing-based systems",
JOURNAL = "Information and Computation",
YEAR = "1996",
MONTH = "July",
VOLUME = "128",
NUMBER = "1",
PAGES = "1-25",
},


@inproceedings{tut:mmt,
AUTHOR = "Michael Merritt and Francesmary Modugno and Mark Tuttle",
TITLE = "Time Constrained Automata",
BOOKTITLE="CONCUR '91: 2nd International Conference of Concurrency Theory",
EDITOR = "J. C. M. Baeten andJ. F. Goote",
YEAR = "1991",
VOLUME = "527",
PAGES = "408-423",
},



@mastersthesis{anna:mas,
AUTHOR = "Anna Chefter",
TITLE = " A simulator for the IOA language",
SCHOOL ="Department of Electrical Engineering and Computer Science, MIT",
ADDRESS = "Massachusetts Institute of Technology, Cambridge",
YEAR = "1997",
},

@mastersthesis{tut:mas,
AUTHOR = "Nancy Lynch and Mark R. Tuttle",
TITLE = "Hierarchial Correctness proofs for distributed algorithms ",
SCHOOL ="Department of Electrical Engineering and Computer Science, MIT",
ADDRESS = "Massachusetts Institute of Technology, Cambridge",
YEAR = "1987",
},


@ARTICLE{lyn:att,
AUTHOR = "Nancy Lynch and Hagit Attiya",
TITLE = "Using mappings to prove timing properties",
JOURNAL = "Distributed Computing",
VOLUME ="6",
NUMBER="2",
YEAR = "1992",
PAGES = "121-139",
},


@article{alur95algorithmic,
    author = "Rajeev Alur and Costas Courcoubetis and Nicolas Halbwachs and
Thomas A. Henzinger and P.-H. Ho and Xavier Nicollin and
Alfredo Olivero and Joseph Sifakis and Sergio Yovine",
    title = "The algorithmic analysis of hybrid systems",
    journal = "Theoretical Computer Science",
    volume = "138",
    number = "1",
    pages = "3--34",
    year = "1995",
    url = "citeseer.nj.nec.com/alur95algorithmic.html"
}

@ARTICLE{alur:hyb,
AUTHOR = "R. Alur and others ",
TITLE = "The algorithmic analysis of hybrid systems",
JOURNAL = "Theoretical Computer Science",
YEAR = "1995",
VOLUME = "138",
PAGES = "3-34",
},

@techreport{heti:pracfm,
AUTHOR="Constance Heitmeyer",
TITLE="On the Need for Practical Formal Methods",
INSTITUTION="Naval Research Laboratory",
ADDRESS="Code 5546, Washington, DC 20375, USA",
YEAR="1998",
},

@inproceedings{antsaklis98hybrid,
  author = "P. Antsaklis and X. Koutsoukos",
  title = "On hybrid control of complex systems: A survey",
  booktitle = "3rd International Conference ADMP'98, Automation of Mixed Processes: Dynamic Hybrid Systems",
  pages= "1--8",
  address= "Reims, France",
  month= "March",
  year = "1998",
  url = "citeseer.nj.nec.com/article/antsaklis98hybrid.html" },


@inproceedings{lyn:hybsurvey,
AUTHOR = "Nancy Lynch",
TITLE = " Modelling and verification of automated transit systems, using timed automata, invariants and simulations",
BOOKTITLE = " Hybrid Systems III: Verification and Control (DIMACS/SYCON Workshop on Verification and Control of Hybrid Systems",
EDITOR = " R. Alur, T. Henzinger and E. Sontag",
YEAR = "1995",
VOLUME = "1066",
SERIES="LNCS",
PAGES = "449-463",
},

@inproceedings{alur:fmrtc,
AUTHOR = "R. Alur and D.L. Dill",
TITLE = "Automata-theoretic verification of real-time systems",
BOOKTITLE = "Formal Methods for Real-Time Computing",
YEAR = "1996",
SERIES = "Trends in Software",
PUBLISHER = "John Wiley  Sons Publishers",
PAGES = "55-82",
},

@inproceedings{henz:thhybat,
AUTHOR = "Thomas A. Henzinger",
TITLE = "The Theory of Hybrid Automata",
BOOKTITLE = "11th Annual IEEE Symposium on Logic in Computer Science ",
YEAR = "1996",
PAGES = "278-292",
},


@techreport{felix:trans,
AUTHOR="Felix C. Gartner",
TITLE="Specification and Verification of Fault Tolerant Systems",
INSTITUTION="Darmstadt University of Technology",
ADDRESS="Department of Computer Science, Alexanderstrabe 10, D-64283 Darmstadt
, Germany",
YEAR="1999",
},


@ARTICLE{clarke:spec,
AUTHOR = "E. M. Clarke and R. P. Kurshan",
TITLE = "Computer-Aided Verification",
JOURNAL = "IEEE Spectrum Magazine",
YEAR = "1996",
NOTE="A general development of verification techniques mostly around hardware
verification. NONTECHNICAL. Model checking, reduction homomorphisms. AT Ts
research in verification. "
},

@ARTICLE{alurhenz:Embeded,
AUTHOR = "Rajeev Alur and Thomas A. Henzinger and Pei-Hsin Ho ",
TITLE = "Automatic Symbolic Verification of Embeded Systems",
JOURNAL = "IEEE Transactions in Software Engineering",
YEAR = "1996",
VOLUME = "22",
NUMBER = "3",
MONTH = "March",
PAGES = "181-201",
},

@ARTICLE{clarke:stateofart,
AUTHOR = "Edmund M. Clarke and Jeannette M. Wing and others",
TITLE = "Formal Methods: State of the Art and Future Directions",
JOURNAL = "ACM Computing Surveys",
YEAR = "1996",
VOLUME = "28",
NUMBER = "4",
MONTH = "December",
},

@inproceedings{henzho:Hytech,
AUTHOR = "Thomas A. Henzinger and Pei-Hsin Ho and Howard Wong-Toi",
TITLE = "HyTech: A Model Checker for Hybrid Systems",
BOOKTITLE= "Computer Aided Verification (CAV '97)",
SERIES= "LNCS",
YEAR = "1997",
VOLUME = "1254",
PAGES = "460-483",
},

@INPROCEEDINGS{halbwachs94b,
            AUTHOR={N. Halbwachs and Y.-E. Proy and P. Raymond},
            TITLE={Verification of linear hybrid systems by means of convex approximations},
            BOOKTITLE={International Static Analysis Symposium, SAS'94},
            ADDRESS={Namur (Belgium)},
            MONTH={September},
            YEAR= 1994
            },

@inproceedings{ halbwachs94verification,
    author = "N. Halbwachs and Y.-E. Proy and P. Raymond",
    title = "Verification of linear hybrid systems by means of convex approximations",
    booktitle = "Proceedings International Symposium on Static Analysis",
    volume = "818",
    publisher = "Springer-Verlag",
    pages = "223--237",
    year = "1994"
},

@inproceedings{asian99,
    author = {N. Halbwachs and P. Raymond},
    title = {Validation of Synchronous Reactive Systems:
    from Formal Verification to Automatic Testing},
    booktitle = {ASIAN'99, Asian Computing Science Conference},
    publisher={LNCS 1742, Springer Verlag},
    address={Phuket (Thailand)},
    year = 1999,
    month = {December},
    },

@INPROCEEDINGS{polys,
          AUTHOR={N. Halbwachs},
          TITLE={Delay analysis in synchronous programs},
          BOOKTITLE= {Fifth Conference on Computer-Aided Verification},
          ADDRESS={Elounda (Greece)},
          PUBLISHER = {LNCS 697, Springer Verlag},
          MONTH={July },
          YEAR=1993,
       },

@INPROCEEDINGS{mit:accel,
          AUTHOR="Nancy Lynch",
          TITLE="A Three-Level Analysis of a Simple Acceleration Maneuver, with
          Uncertainties",
          BOOKTITLE= "Proceedings of the Third AMAST Workshop on Real-Time
          Systems",
          ADDRESS="Salt Lake City, Utah",
          PUBLISHER = " World Scientific Publishing Company",
          MONTH="March",
          YEAR=1996,
          PAGES="1-22",
       },

@INPROCEEDINGS{mit:prot,
          AUTHOR="H. B. Weinberg and Nancy Lynch and Norman Delisle",
          TITLE="Verification of Automated Vehicle Protection Systems",
          BOOKTITLE= "Hybrid Systems III: Verification and Control
          Workshop on Verification and Control of Hybrid Systems)",
          EDITOR="R. Alur, T. Henzinger and E. Sontag",
          SERIES="LNCS",
          VOLUME="1066",
          PUBLISHER = "Springer-Verlag",
          MONTH="October",
          YEAR=1995,
          PAGES="101-113",
       },

@INPROCEEDINGS{mit:vcs,
          AUTHOR="H. B. Weinberg and Nancy Lynch",
          TITLE="Correctness of Vehicle Control Systems -- A Case Study",
          BOOKTITLE= "17th IEEE Real-Time Systems Symposium",
          ADDRESS="Washington, D. C.",
          MONTH="December",
          YEAR=1996,
          PAGES="62-72",
       },

@INPROCEEDINGS{mit:boiler,
          AUTHOR="Gunter Leeb and Nancy Lynch",
          TITLE="Proving Safety Properties of the Steam Boiler Controller",
          BOOKTITLE= "Formal Methods for Industrial Applications: Specifying and Programming the Steam Boiler Control",
          EDITOR="Jean Raymond Abrial, Egon Boerger and Hans Langmaack",
          SERIES="LNCS",
          VOLUME="11654",
          YEAR=1996,
       },

@inproceedings{mit:grc,
          AUTHOR="Connie Heitmeyer and Nancy Lynch",
          TITLE="The Generalized Railroad Crossing: A Case Study in Formal Verification of Real-Time System",
          BOOKTITLE= "Proceedings of the 15th IEEE Real-Time Systems Symposium",
          ADDRESS=" San Juan, Puerto Rico",
          PUBLISHER= " IEEE Computer Society Press",
          MONTH="December",
          YEAR=1994,
       },

@INPROCEEDINGS{mit:platoon,
          AUTHOR="Ekaterina Dolginova and Nancy Lynch",
          TITLE="Safety Verification for Automated Platoon Maneuvers: A Case Study",
          BOOKTITLE= "HART'97 (International Workshop on Hybrid and Real-Time Systems)",
	        SERIES="LNCS",
          VOLUME="1201",
          PUBLISHER="Springer Verlag",
          MONTH="March",
          YEAR=1997,
       },

@InProceedings{BDL96,
  author = 	 {Michael S. Branicky and Ekaterina Dolginova and Nancy A. Lynch},
  title = 	 {A Toolbox for Proving and Maintaining Hybrid Specifications},
  booktitle = 	 {Hybrid Systems},
  pages = 	 {18-30},
  year = 	 {1996},
},


@INPROCEEDINGS{mit:hioa,
          AUTHOR="Nancy Lynch and Roberto Segala and Frits Vaandrager and H. B. Weinberg",
          TITLE="Hybrid {I/O} automata",
          BOOKTITLE= "Hybrid Systems III",
          EDITOR="R. Alur, T. Henzinger and E. Sontag",
          ADDRESS="New Brunswick, New Jersey",
          SERIES="LNCS",
          VOLUME="1066",
          PUBLISHER = "Springer-Verlag",
          MONTH="October",
          YEAR=1995,
       },

@TECHREPORT{mit:ioa,
          AUTHOR="Stephen Garland and Nancy Lynch and Mandana Vaziri",
          TITLE="{IOA}: A language for Specifying, Programming and Validating
          Distributed Systems",
          INSTITUTION="Laboratory for Computer Science, Massachusetts Institute of Technology",
          ADDRESS="Cambridge, MA",
          MONTH="October",
          YEAR=1999,
       },

@inproceedings{DGM97,
        author = {Marco Devillers and  David Griffioen and  Olaf Muller},
        title = {Possibly Infinite Sequences in Theorem Provers: A Comparative Study},
        booktitle = {Theorem Proving in Higher Order Logics (TPHOL'97), LNCS 1275, 89-104.},
        year = {1997},
        publisher = {Springer-Verlag},
        editor = {Elsa Gunther},
        url = {http://www4.informatik.tu-muenchen.de/papers/TPHOL97_mueller_1997_Conference.html},
        CRClassification = {},
        CRGenTerms = {}

},

@inproceedings{ qadeerveri,
    author = "Shaz Qadeer and Natarajan Shankar",
    title = "Verifying a Self-Stabilizing Mutual Exclusion Algorithm",
    booktitle = "IFIP Working Conference on Programming Concepts and Methods (PROCOMET '98)",
    address = "Shelter Island, NY",
    year = "1998, to appear"
},


@manual{PVS:language,
        TITLE = {{PVS} Language Reference},
        AUTHOR = {S. Owre and N. Shankar and J. M. Rushby and D. W. J.
                Stringer-Calvert},
        MONTH = sep,
        YEAR = 1999,
        ORGANIZATION = {Computer Science Laboratory, SRI International},
        ADDRESS = {Menlo Park, CA}
},

@manual{PVS:prover,
        TITLE = {{PVS} Prover Guide},
        AUTHOR = {N. Shankar and S. Owre and J. M. Rushby and D. W. J.
                Stringer-Calvert},
        MONTH = sep,
        YEAR = 1999,
        ORGANIZATION = {Computer Science Laboratory, SRI International},
        ADDRESS = {Menlo Park, CA}
},

@manual{PVS:userguide,
        TITLE = {{PVS} System Guide},
        AUTHOR = {S. Owre and N. Shankar and J. M. Rushby and D. W. J.
                Stringer-Calvert},
        MONTH = sep,
        YEAR = 1999,
        ORGANIZATION = {Computer Science Laboratory, SRI International},
        ADDRESS = {Menlo Park, CA}
},

@techreport{PVS-Semantics:TR,
        TITLE = {The Formal Semantics of {PVS}},
        AUTHOR = {Sam Owre and Natarajan Shankar},
        NUMBER = {SRI-CSL-97-2},
        MONTH = aug,
        YEAR = 1997,
        INSTITUTION = {Computer Science Laboratory, SRI International},
        ADDRESS = {Menlo Park, CA}
},

@techreport{Butler:PVS-tut,
        TITLE = {An Elementary Tutorial on Formal Specification and Verification
                Using {PVS 2}},
        AUTHOR = {Ricky W. Butler},
        TYPE = {NASA Technical Memorandum},
        NUMBER = 108991,
        MONTH = jun,
        YEAR = 1993,
        INSTITUTION = {NASA Langley Research Center},
        ADDRESS = {Hampton, VA},
        NOTE = {Revised June 1995. Available, with PVS specification
                files, at \url{http://atb-www.larc.nasa.gov/ftp/larc/PVS-tutorial};
                use only files marked ``revised.''}
},

@misc{WIFT-Tut,
        TITLE = {A Tutorial Introduction to {PVS}},
        AUTHOR = {Judy Crow and Sam Owre and John Rushby and Natarajan
                Shankar and Mandayam Srivas},
        HOWPUBLISHED = {Presented at WIFT '95: Workshop on Industrial-Strength
                Formal Specification Techniques, Boca Raton, Florida},
        MONTH = apr,
        YEAR = 1995,
        INSTITUTION = {Computer Science Laboratory, SRI International},
        ADDRESS = {Menlo Park, CA},
        NOTE = {Available, with specification files, at \url{http://www.csl.sri.com/wift-tutorial.html}}
},

@manual{PVS:tutorial,
        TITLE = {PVS Tutorial},
        AUTHOR = {N. Shankar and S. Owre and J. M. Rushby},
        MONTH = feb,
        YEAR = 1993,
        ORGANIZATION = {Computer Science Laboratory, SRI International},
        ADDRESS = {Menlo Park, CA},
        NOTE = {Also appears in Tutorial Notes, {\em Formal Methods Europe
                '93: Industrial-Strength Formal Methods}, pages 357--406,
                Odense, Denmark, April 1993}
},

@techreport{Butler:PVS-tut,
        TITLE = {An Elementary Tutorial on Formal Specification and Verification
                Using {PVS 2}},
        AUTHOR = {Ricky W. Butler},
        TYPE = {NASA Technical Memorandum},
        NUMBER = 108991,
        MONTH = jun,
        YEAR = 1993,
        INSTITUTION = {NASA Langley Research Center},
        ADDRESS = {Hampton, VA},
        NOTE = {Revised June 1995. Available, with PVS specification
                files, at \url{http://atb-www.larc.nasa.gov/ftp/larc/PVS-tutorial};
                use only files marked ``revised.''}
},

@inproceedings{Devillers-etal97,
        TITLE = {Possibly Infinite Sequences in Theorem Provers: A Comparative
                Study},
        AUTHOR = {M. Devillers and D. Griffioen and O. Mueller},
        BOOKTITLE = {Theorem Proving in Higher Order Logics: 10th International
                Conference, {TPHOLs '97}},
        EDITOR = {Elsa Gunter and Amy Felty},
        PAGES = {89--104},
        PUBLISHER = {Springer-Verlag},
        SERIES = {LNCS},
        VOLUME = 1275,
        MONTH = aug,
        YEAR = 1997,
        ADDRESS = {Murray Hill, NJ}
},

@misc{ devillers97formalization,
    author = "M. Devillers and D. Griffioen",
    title = "A formalization of finite and infinite sequences in {PVS}",
    text = "M. Devillers and D. Griffioen. A formalization of finite and infinite sequences
      in pvs. Techn. Rep. CSI-R9702, Comput. Sci. Inst., Univ. of Nijmegen, 1997.",
    year = "1997"
},



@techreport{LSVW99,
  author =       {N.A. Lynch and R. Segala and F.W. Vaandrager and
                  H.B. Weinberg},
  title =        {Hybrid {I/O} Automata},
  year =         1999,
  month =        may,
  type =         {Report},
  institution =  {Computing Science Institute, University of Nijmegen},
  number =       {CSI-R9907}
},


},


@inproceedings{Hybrid01,
author = "Nancy A. Lynch and Roberto Segala and Frits W. Vaandrager",
title={Hybrid {I}/{O} Automata Revisited},
booktitle={Proceedings Fourth International Workshop on
Hybrid Systems: Computation and Control (HSCC'01), {\rm Rome, Italy}},
year= 2001,
month= mar,
editor ={Di Benedetto, M.D. and A.L. Sangiovanni-Vincentelli},
crossrefonly =  1,
key =           {HSCC'01},
series =        {LNCS},
pages ={403--417},
volume = 2034,
publisher =     {Springer}
}


@inproceedings{PVS96:CAV,
       AUTHOR = {{S.} Owre and {S.} Rajan and {J.M.} Rushby and {N.}
   Shankar and {M.K.} Srivas},
       TITLE = {{PVS:} {C}ombining Specification, Proof Checking, and
   Model Checking},
       BOOKTITLE = {Computer-Aided Verification, {CAV} '96},
       YEAR = {1996},
       EDITOR = {Rajeev Alur and Thomas {A.} Henzinger},
       SERIES = {LNCS},
       NUMBER = {1102},
       PAGES = {411--414},
       ADDRESS = {New Brunswick, {NJ}},
       MONTH = {July/August},
       PUBLISHER = {Springer-Verlag},
       URL = {http://www.csl.sri.com/papers/pvs-cav96/}
   },

@Book{lynch1996a,
  author =       "Nancy A. Lynch",
  title =        "Distributed Algorithms",
  publisher =    "Morgan Kaufmann Publishers Inc.",
  year =         1996,
  holder =       "book"
},

@mastersthesis{chefter98department,
    author = "A. Chefter",
    title = " A simulator for the IOA language",
    SCHOOL ="Department of Electrical Engineering and Computer Science, Massachusetts Institute of Technolog",
    ADDRESS = "Cambridge, MA",
    YEAR = "1998",
},


@mastersthesis{mit:hwmasters,
          AUTHOR="H. B. Weinberg",
          TITLE="Correctness of Vehicle Control Systems -- A Case Study",
          SCHOOL= "Department of Electrical Engineering and Computer Science, Massachusetts Institute of Technolog",
          ADDRESS="Cambridge",
          MONTH="February",
          YEAR=1996,
          },

@Book{Knuth:73,
    author =        "Donald E. Knuth",
    title =         "The art of computer programming / Volume 1: Fundamental Algorithms",
    publisher =     "Addison-Wesley",
    address =       "Reading, Mass.",
    year =          "1973"
},

@Book{Aho:86,
     author =       "A. V. Aho and R. Sethi and J. D. Ullman",
     title =        "Compilers principles, techniques, and tools",
     publisher =    "Addison-Wesley",
     address =      "Reading, MA",
     year =         "1986",
},

@Book{Hennessy:90,
     author =       "John L. Hennessy and David A. Patterson",
     title =        "Computer Architecture: {A} Quantitative Approach",
     publisher =    "Morgan Kaufmann",
     year =         "1990",
     address =      "San Mateo, CA",
},


@Book{Storer:88,
    author =        "James A. Storer",
    title =         "Data compression: methods and theory",
    publisher =     "Computer Science Press",
    year =          "1988",
    address =       "Rockville, Md."
},

@Book{Bell:90,
    author =        "Timothy C. Bell and John G. Cleary and  Ian H. Witten",
    title =         "Text Compression",
    publisher =     "Prentice Hall",
    year =          "1990",
    address =       "Englewood Cliffs, N.J."
},

@Book{Fisher:95,
    author =        "Fisher, Yuval",
    title =         "Fractal Image Comression: Theory and Application",
    publisher =     "Springer Verlag",
    year =          "1995",
    address =       "New York"
},

@Book{Foley:90,
    author =        "James D. Foley [et al.]",
    title =         "Computer graphics: principle and practice",
    publisher =     "Addison-Wesley",
    year =          "1990",
    address =       "Reading, Mass."
},

@Book{Mandelbrot:83,
    author =        "Benoit B. Mandelbrot",
    title =         "The fractal geometry of nature",
    publisher =     "W. H. Freeman",
    year =          "1983",
    address =       "New York"
},

@Book{Tanenbaum:92,
    author =        "Andrew S. Tanenbaum",
    title =         "Modern operating systems",
    publisher =     "Prentice Hall",
    year =          "1992",
    address =       "Englewood Cliffs, N.J."
},


@book{appel98modern,
    author = "Andrew W. Appel",
    title = "Modern Compiler Implementation in Java",
    publisher = "Cambridge University Press",
    address = "Cambridge",
    isbn = "0-521-58388-8",
    year = "1998"
},

@misc{liskov98polyj,
    author = "B. Liskov and N. Mathewson and A. Myers",
    title = "PolyJ: Parameterized types for Java",
    text = "Software release. Located at http://www.pmg.lcs.mit.edu/polyj, July 1998.",
    year ="1998",
    url ="http://www.pmg.lcs.mit.edu/poly"
},


@misc{javacup,
     author = "Scott Hudson",
     title ="Java {CUP: LALR} {P}arser {G}enerator for {J}ava",
     text = "Copyright 1996-1999 by Scott Hudson, Frank Flannery, C. Scott Ananian",
     year = "1999" ,
     url="http://www.cs.princeton.edu/~appel/modern/java/CUP/"
},


@inproceedings{bowen93formal,
    author = "J. P. Bowen",
    title = "Formal Methods in Safety-Critical Standards",
    booktitle = "Proc. 1993 Software Engineering Standards Symposium ({SESS}'93), Brighton, {UK}",
    month = "30 -- 3",
    publisher = "IEEE Computer Society Press",
    pages = "168--177",
    year = "1993",
    url = "http://citeseer.nj.nec.com/article/bowen93formal.html"
}

@article{moser90formal,
    author = "L. E. Moser and P. M. Melliar-Smith",
    title = "Formal Verification of Safety-Critical Systems",
    journal = "Software, Practice and Experience",
    volume = "20",
    number = "8",
    publisher = "John Wiley \& Sons",
    address = "New York, NY",
    pages = "799--822",
    year = "1990"
}


@misc{ioatoolkit,
     author = "Stephen J. Garland",
     title = "The {IOA} {L}anguage and {T}oolkit",
     text = "{IOA} {T}oolkit",
     url = "http://nms.lcs.mit.edu/~garland/IOA/"
},

@inproceedings{ archer97verifying,
    author = "M. Archer and C. Heitmeyer",
    title = "Verifying Hybrid Systems Modeled as Timed Automata: {A} Case Study",
    booktitle = "Proceedings of the International Workshop on Hybrid and Real-Time Systems ({HART}'97)",
    volume = "1201",
    publisher = "Springer-Verlag",
    address = "Grenoble, France",
    editor = "Oded Maler",
    pages = "171--185",
    year = "1997",
    url = "citeseer.nj.nec.com/archer97verifying.html"
},


@inproceedings { archer96mechanical,
    author = "Myla Archer and Constance Heitmeyer",
    title = "Mechanical Verification of Timed Automata: {A} Case Study",
    booktitle = "{IEEE} Real-Time Technology and Applications Symposium ({RTAS}'96)",
    publisher = "IEEE Computer Society",
    address = "Brookline, MA",
    pages = "192--203",
    year = "1996",
    url = "citeseer.nj.nec.com/archer98mechanical.html"
},

@inproceedings{archer98tame,
    author = "M. Archer and C. Heitmeyer and S. Sims",
    title = "{TAME}: A {PVS} interface to simplify proofs for automata models",
    booktitle = "Proceedings of UITP '98",
    month = "July",
    year = 1998
},

@misc{ alur97symbolic,
    author = "R. Alur and T. Henzinger and H. Wong-Toi",
    title = "Symbolic analysis of hybrid systems",
    text = "R. Alur, T. Henzinger, and H. Wong-Toi. Symbolic analysis of hybrid systems.
      In Proceedings of the 36th IEEE Conference on Decision and Control, pages
      702-707, 1997. Invited survey.",
    year = "1997"
},
@inproceedings{deshpande98shift,
    author = "A. Deshpande and A. Gollu and L. Semenzato",
    title = "The {SHIFT} programming language for dynamic networks for hybrid automata",
    booktitle = "IEEE Transactions on Automatic Control",
    volume =" 43(4)",
    pages ="584--587",
    month ="April",
    year = "1998"
},

@misc{ lynch91forward,
    author = "N. Lynch and F. Vaandrager",
    title = "Forward and backward simulations for timing-based systems",
    text = "N.A. Lynch and F.W. Vaandrager. Forward and backward simulations for timing-based
      systems. In Proceedings of the REX Workshop Real-Time: Theory in Practice,
      LNCS 600, pages 397--446, 1991.",
    year = "1991"
},



@inproceedings{ henzinger95algorithmic,
    author = "{T. A. Henzinger} and {P. -H. Ho}",
    title = "Algorithmic analysis of Nonlinear Hybrid Systems",
    booktitle = "Proceedings of the 7th International Conference On Computer Aided Verification",
    volume = "939",
    publisher = "Springer Verlag",
    address = "Liege, Belgium",
    editor = "{P. Wolper}",
    pages = "225--238",
    year = "1995",
    url = "citeseer.nj.nec.com/henzinger96algorithmic.html"
},

@inproceedings{ sipma96deductive,
    author = "{H. B. Sipma} and {T. E. Uribe} and {Z. Manna}",
    title = "Deductive Model Checking",
    booktitle = "Proceedings of the Eighth International Conference on Computer Aided Verification {CAV}",
    volume = "1102",
    month = "/",
    publisher = "Springer Verlag",
    address = "New Brunswick, NJ, USA",
    editor = "{Rajeev Alur} and {Thomas A. Henzinger}",
    pages = "208--219",
    year = "1996"
},


@inproceedings{sipma98hybrid,
  author = 	 "Zohar Manna and Henny Sipma",
  title = 	 "Deductive Verification of Hybrid Systems using {STeP}",
  booktitle = 	 " Hybrid Systems: Computation and Control",
  year = 	 1998,
  volume = 	 1386,
  series = 	 "LNCS",
  publisher = "Springer-Verlag",
},


@incollection{ lynch93forward,
    author = "Nancy A. Lynch and Frits W. Vaandrager",
    title = "Forward and backward simulations -- Part {II}: timing-based systems.",
    booktitle = "145",
    month = "31",
    publisher = "Centrum voor Wiskunde en Informatica (CWI)",
    address = "ISSN 0169-118X",
    pages = "36",
    year = "1993",
    url = "citeseer.nj.nec.com/99348.html"
},


@inproceedings{ maler91from,
    author = "O. Maler and Z. Manna and A. Pnueli",
    title = "From Timed to Hybrid Systems",
    booktitle = "Real-Time: Theory in Practice",
    volume = "600",
    month = "3--7~June",
    publisher = "Springer-Verlag",
    address = "Mook, The Netherlands",
    editor = "J. W. de Bakker and C. Huizing and W. P. de Roever and G. Rozenberg",
    pages = "447--484",
    year = "1991",
    url = "citeseer.nj.nec.com/maler92from.html"
},

@inproceedings{labinaz97control,
    AUTHOR="G. Labinaz, M.M. Bayoumi and K. Rudie",
    TITLE="A Survey of Modeling and Control of Hybrid Systems",
    booktitle = "Annual Reviews in Control",
    volume = "21",
    pages = "79--92",
    year = "1997",
   },
@inproceedings{labinaz96IFAC,
    AUTHOR="G. Labinaz and M.M. Bayoumi and K. Rudie",
    TITLE="Modeling and Control of Hybrid Systems: A Survey",
    booktitle = "Proceedings of the World IFAC Congress",
    address = "San Francisco, CA",
    pages = "293-304",
    year = "1996",
   },
@inproceedings{ boyer90theorem,
    author = "R.~S. Boyer and J~S. Moore",
    title = "A Theorem Prover for a Computational Logic",
    booktitle = "Proceedings 10th International Conference on Automated Deduction, Kaiserslautern (Germany)",
    volume = "449",
    publisher = "Springer-Verlag",
    editor = "M. Stickel",
    pages = "1--15",
    year = "1990",
    url = "citeseer.nj.nec.com/boyer90theorem.html"
},

@inproceedings{livadasRTSS99,
    author = " Carolos Livadas and John Lygeros and Nancy A. Lynch ",
    title = "High-Level Modeling and Analysis of {TCAS}",
    booktitle = "Proceedings of the 20th IEEE Real-Time Systems Symposium (RTSS'99),Phoenix, Arizona",
    pages = "115-125",
    month = "December",
    year = "1999"
},



@book{GordonMJCa1993a,
 author      ="Gordon and M. J. C. and Melham and  Thomas F.",
 title       ="Introduction to HOL: A theorem proving
               environment for higher order logic",
 publisher   ="Cambridge University Press",
 year        ="1993",
 abstractURL ="http://www.dcs.glasgow.ac.uk/~tfm/HOLbook.html"
},

@techreport{millerformal,
        TITLE = "Formal verification of of a commercial microprocessor",
        AUTHOR = "Steven P. Miller and Mandayam Sriva",
        NUMBER = {SRI-CSL-95-04},
        YEAR = 1995,
        INSTITUTION = {Computer Science Laboratory, SRI International},
        ADDRESS = {Menlo Park, CA}
},


@book{ kuo95automatic,
    author = "Benjamin C. Kuo",
    title = "Automatic Control Systems",
    publisher = "Pren{\-}tice-Hall",
    address = "Upper Saddle River, NJ 07458, USA",
    isbn = "0-13-304759-8",
    pages = "xxii + 897",
    year = "1995"
},

@misc{garland91guide,
    author = "Stephen Garland and John Guttag",
    title = "A guide to {LP}: The larch prover",
    year = "1991",
    url = "citeseer.nj.nec.com/garland91guide.html"
},


@misc{quanzerurl,
 author = {Quanser},
 title = {Control Challenges: 3 {DOF} helicopter \url{http://www.quanser.com/english/html/products/fs_product_challenge.asp?lang_code=english&pcat_code=exp-spe&prod_code=S1-3dofheli&tmpl=1}}
},

@misc{yongdof,
    author = "Yong Wang and Masha Ishutkina and Sayan Mitra and Nancy A. Lynch and Eric Feron ",
    title = "{Design of Supervisory Safety Control for {3DOF} Helicopter using {H}ybrid {I/O} {A}utomata}",
    note = "\url{http://gewurtz.mit.edu/ishut/darpa\_sec\_mit/papers/quanser.ps}",
    year = 2002,
},

@techreport{livadas97formal,
    author = "Carolos Livadas",
    title = "Formal Verification of Safety-Critical Hybrid Systems",
    INSTITUTION = "MIT Laboratory for Computer Science",
    address = "Cambridge, MA 02139",
    number = "MIT/LCS/TR-730",
    pages = "180",
    year = "1997",
    url = "citeseer.nj.nec.com/livadas97formal.html" },

@mastersthesis{mitra01masters,
AUTHOR = "Sayan Mitra",
TITLE = "{HIOA} - A Specification Language for Hybrid {I}nput/{O}utput
Automata",
SCHOOL ="Department of Computer Science and Automation, IISc",
ADDRESS = "Indian Institute of Science, Bangalore",
YEAR = 2001,
url = "http://theory.lcs.mit.edu/mitras/research/mastersthesis.ps.gz",
},


@misc{hioalang,
AUTHOR = "Sayan Mitra",
TITLE = "Language for {H}ybrid {I}nput/{O}utput {A}utomata",
institution = "MIT Laboratory for Computer Science",
address = "work in progress, Cambridge, MA 02139",
YEAR = 2002,
note = "Work in progress. http://theory.lcs.mit.edu/mitras/research/composing\_activities.ps",
},



@book{luenberger,
    author = "David G. Luenberger",
    title = "Introduction to Dynamic Systems: Theory, Models, and Applications",
    publisher = "John Wiley and Sons, Inc.",
    address = "New York",
    year = "1979"
},

@misc{elson02finegrained,
  author = "J. Elson and L. Girod and D. Estrin",
  title = "Fine-Grained Network Time Synchronization using Reference Broadcasts",
  text = "Jeremy Elson, Lewis Girod and Deborah Estrin, Fine-Grained Network Time
    Synchronization using Reference Broadcasts. Submitted for review, February
    2002.",
  year = "2002",
  url = "citeseer.nj.nec.com/elson02finegrained.html" },

@inproceedings{Park00,
    author = "S. Park, A. Savvides and M. B. Srivastava",
    title = "SensorSim: a simulation framework for sensor networks",
    booktitle = "Proceedings of the 3rd ACM international workshop on Modeling, analysis and simulation of wireless and mobile systems",
    address = "Boston, MA USA",
    pages = "104-111",
    year = "2000",
},

@misc{elson-time,
  author = "Jeremy Elson",
  title = "Time Synchronization Services for Wireless Sensor Networks",
  url = "citeseer.nj.nec.com/article/elson01time.html" },

@misc{cerpa01habitat,
  author = "A. Cerpa and J. Elson and D. Estrin and L. Girod and M. Hamilton and J.
    Zhao",
  title = "Habitat monitoring: Application driver for wireless communications technology",
  text = "A. Cerpa, J. Elson, D. Estrin, L. Girod, M. Hamilton, and J. Zhao. Habitat
    monitoring: Application driver for wireless communications technology. In
    Proceedings of the 2001 ACM SIGCOMM Workshop on Data Communications in Latin
    America and the Caribbean, April 2001.",
  year = "2001",
  url = "citeseer.nj.nec.com/cerpa01habitat.html" },

@article{368229,
 author = {Shiann-Jeng Yu and Fang-Biau Ueng},
 title = {Blind adaptive beamforming based on generalized sidelobe canceller},
 journal = {Signal Processing},
 volume = {80},
 number = {12},
 year = {2000},
 issn = {0165-1684},
 pages = {2497--2506},
 publisher = {Elsevier North-Holland, Inc.},
 },





@TechReport{quantr02,
  author = 	 {Sayan Mitra and Yong Wang and Nancy Lynch and Eric Feron},
  title = 	 {Application of {H}ybrid {I/O} {A}utomata in Safety Verification of  Pitch Controller for Model  Helicopter System},
  institution =  {MIT Laboratory for Computer Science},
  year = 	 {2002},
  address = 	 {Cambridge, MA 02139},
  month = 	 {October},
  note = 	 {\url{http://people.csail.mit.edu/mitras/research/QuanTR02.ps}},
},


@inproceedings{asarin00effective,
  author = "Eugene Asarin and Olivier Bournez and Thao Dang and Amir Pnueli and Oded Maler",
  title = "Effective Synthesis of Switching Controllers for Linear Systems",
  booktitle = "Proceedings of IEEE",
  pages ="1011-1025",
  year = "2000",
  volume = "88",
  number = "7",
  month = "July"},


@InProceedings{lygeros99controllers,
  author = "John Lygeros and Claire Tomlin and Shankar Sastry",
  title = "Controllers for reachability specifications for hybrid systems",
  booktitle = 	 {Automatica},
  year = 	 {1999},
  volume = 	 {35},
  number = 	 {3},
  month = 	 {March}
},

@InProceedings{alex02hscc,
  author = 	 {Alexandre M. Bayen and Eva Cruck and Claire Tomlin},
  title = 	 {Guaranteed overapproximations of unsafe sets for continuous and hybrid systems: solving the Hamilton-Jacobi equation using viability techniques},
  booktitle = 	 {HSCC},
  pages = 	 {90-104},
  year = 	 {2002},
},



@InProceedings{FK98hscc,
  author = 	 {Enrique D. Ferreira and  Bruce H. Krogh},
  title = 	 { Switching Controllers Based on Neural Network: Estimates of Stability Regions and Controller Performance},
  booktitle = 	 {Hybrid Systems: Computation and Control 1998},
  pages = 	 {126-142},
  year = 	 {1998},
},


@inproceedings{MWLF-hscc03,
author={Sayan Mitra and Yong Wang and Nancy Lynch and Eric Feron},
title={Safety Verification of Model Helicopter Controller using Hybrid {I}nput/{O}utput Automata},
booktitle={HSCC},
year={2003},
crossref={HSCC2003},
pages = {343-358}
},

@techreport{MWLF-tr,
author={Sayan Mitra and Yong Wang and Nancy Lynch and Eric Feron},
title={Application of Hybrid {I/O} Automata in Safety Verification of Pitch
Controller for Model Helicopter System},
type={Technical Report},
number={MIT-LCS-TR-880},
month={January},
year={2003},
institution={MIT Laboratory for Computer Science},
address={Cambridge, MA 02139},
note= {\url{http://people.csail.mit.edu/mitras/research/QuanTR02.ps}}
},

@misc{Mitra:HIOA-PVS,
author={Sayan Mitra},
title={{HIOA+}: Specification Language and Proof Tools for Hybrid Systems},
year={2003},
note={preprint \url{http://theory.lcs.mit.edu/~mitras/research/LCPTHIOA.ps}},
},

 @Article{LSV02,
  author = 	 {Nancy Lynch and Roberto Segala and Frits Vaandrager},
  title = 	 {Hybrid {I/O} Automata},
  journal = 	 {Information and Computation},
  year = 	 2003,
  volume = 	 185,
  number = 	 1,
  pages = 	 {105-157},
  month = 	 {August}
}


@techreport{LSV-tr,
author={Nancy Lynch and Roberto Segala and Frits Vaandrager},
title={Hybrid {I/O} Automata},
institution={Laboratory for Computer Science, Massachusetts Institute
of Technology},
address={Cambridge, MA 02139},
number={MIT/LCS/TR-827d},
type={Technical Memo},
year=2003,
month={January 13}
},

@Article{GB81,
  author = 	 { E. Gafni and D. Bertsekas},
  title = 	 { Distributed algorithms for generating loop-free routes in networks with frequently changing topology},
  journal = 	 { IEEE Transactions on Communications},
  year = 	 {1981},
  volume = 	 {C-29},
  number = 	 {1},
  pages = 	 {11-18}
}

@InProceedings{PC97:infocom,
  author = 	 {Vincent D. Park and M. Scott Corson},
  title = 	 {A Highly Adaptive Distributed Routing Algorithm for Mobile Wireless Networks},
  booktitle = 	 { Proceedings of IEEE INFOCOM '97},
  year = 	 {1997},
  address = 	 {Kobe, Japan},
  month = 	 {April}
},

@inproceedings{MWV:2000,
 author = {Navneet Malpani and Jennifer L. Welch and Nitin Vaidya},
 title = {Leader election algorithms for mobile ad hoc networks},
 booktitle = {Proceedings of the 4th international workshop on Discrete  algorithms and methods for mobile computing and communications},
 year = {2000},
 isbn = {1-58113-301-4},
 pages = {96--103},
 location = {Boston, Massachusetts, United States},
 doi = {http://doi.acm.org/10.1145/345848.345871},
 publisher = {ACM Press},
 },


@InProceedings{MVW:01,
  author = 	 {Navneet Malpani and Nitin Vaidya and Jennifer L. Welch },
  title = 	 { Distributed token circulation in mobile ad hoc networks},
  booktitle = 	 {Proceedings of the 9th International Conference on Network Protocols (ICNP)},
  year = 	 {2001},
  month = 	 {Nov}
},

@Book{Bhatia:1967:DSS,
  author =       "N. P. Bhatia and G. P. Szeg{{\"o}}",
  title =        "Dynamical Systems: Stability Theory and Applications",
  volume =       35,
  publisher =    "Springer-Verlag",
  address =      "Berlin; New York",
  pages =        "6 + 416",
  year =         1967,
  LCCN =         "QA3 .L35 v.35",
  series =       "Lecture notes in mathematics",
  annote =       "dynamical systems",
},




@article{branicky98multiple,
  author = "M. Branicky",
  title = "Multiple Lyapunov functions and other analysis tools for switched and hybrid systems",
  journal = "IEEE Transactions on Automatic Control",
  volume =  "43",
  pages =  "475--482",
  year = "1998",
  },



@article{chutinan99verification,
    author = "Alongkrit Chutinan and Bruce H. Krogh",
    title = "Verification of Polyhedral-Invariant Hybrid Automata Using Polygonal Flow Pipe Approximations",
    journal = "LNCS",
    volume = 1569,
    pages = "76--91",
    year = 1999,
    url = "citeseer.nj.nec.com/chutinan99verification.html" },


@InProceedings{ddt:2000,
  author = 	 { E. Asarin and O. Bournez and T. Dang and O. Maler},
  title = 	 { Approximate Reachability Analysis of Piecewise-Linear Dynamical Systems},
  booktitle = 	 { Hybrid Systems: Computation and Control},
  pages = 	 {20--31},
  year = 	 {2000},
  editor = 	 { B. Krogh and N. Lynch},
  volume = 	 {1790},
  series = 	 {LNCS},
  publisher =    {Hybrid Systems: Computation and Control},
},

@inproceedings{ alur00modular,
    author = "Rajeev Alur and Radu Grosu and Yerang Hur and Vijay Kumar and Insup Lee",
    title = "Modular Specification of Hybrid Systems in {CHARON}",
    booktitle = "{HSCC}",
    pages = "6-19",
    year = "2000",
    url = "citeseer.nj.nec.com/article/alur00modular.html" },


@Book{amann1990,
  author = 	 { Herbert Amann},
  title = 	 {Ordinary Differential Equations},
  publisher = 	 {de Gruyter Studies in Mathematics},
  year = 	 {1990},
},


@InProceedings{HJL:93,
  author = 	 {C. L. Heitmeyer and R. D. Jeffords and B. G. Labaw},
  title = 	 { A benchmark for comparing different approaches for specifying and verifying real-time systems},
  booktitle = 	 { 10th International Workshop on Real-Time Operating Systems and Software},
  year = 	 {1993},
  month = 	 { May}
},



@InProceedings{BMSU:97,
   author = "Nikolaj S. Bjrner and Zohar Manna and Henny B. Sipma and Toms
    E. Uribe",
   title = "Deductive Verification of Real-time Systems Using {STeP}",
  booktitle = 	 " 4th International AMAST Workshop on Real-Time Systems",
  year = 	 "1997",
  month = 	 "May"
},



@InProceedings{Kell:disco96,
  author = 	 {Pertti Kellom{{\"a}}ki},
  title = 	 {Mechanical Verification of {DisCo} Specifications},
  booktitle = {Israeli-Finnish Binational Symposium on Specification, Development, and Verification of Concurrent Systems},
  year = 	 {1996},
  address = 	 {Technion, Haifa},
  month = 	 {January}
},


@InProceedings{Kell:JAS95,
  author = 	 {Pertti Kellom{{\"a}}ki},
  title = 	 {Mechanizing Invariant Proofs of Joint Action Systems},
  booktitle = {Proceedings of the Fourth Symposium on Programming Languages and Software Tools},
  pages = 	 {141-152},
  year = 	 {1995},
  address = 	 {Visegrad, Hungary},
  month = 	 {June}
},



@PhdThesis{Urban1995,
  author = 	 {Urban Engberg},
  title = 	 {Reasoning in the Temporal Logic of Actions - The Design and Implementation of an Interactive Computer System},
  school = 	 {University of Aarhus},
  year = 	 {1995},
  address = 	 {Denmark},
  url = "citeseer.nj.nec.com/engberg96reasoning.html"
},

@inproceedings{kalvala95formulation,
    author = "{S. Kalvala}",
    title = "{A} {F}ormulation of {TLA} in {I}sabelle",
    booktitle = "8th International Workshop on Higher Order Logic Theorem Proving and its Applications",
    volume = "971",
    publisher = "Springer-Verlag",
    address = "Aspen Grove, Utah, USA",
    editor = "{E.T. Schubert} and {P.J. Windley} and {J. Alves-Foss}",
    pages = "214--228",
    year = "1995",
    url = "citeseer.nj.nec.com/kalvala95formulation.html" },


@inproceedings{ abadi90axiomatization,
  author = "M. Abadi",
  title = "An axiomatization of Lamport's Temporal Logic of Actions",
  booktitle = "CONCUR'90, Proc. Conf. Concurrency Theory",
  volume = "458",
  publisher = "Springer-Verlag",
  pages ="57-69",
  year = "1990",
  url = "citeseer.nj.nec.com/abadi93axiomatization.html" },


@Article{archer:amai2001,
  author = 	 {Myla Archer},
  title = 	 {{TAME}: {PVS} {S}trategies for Special Purpose Theorem Proving },
  journal = 	 {Annals of Mathematics and Artificial Intelligence},
  year = 	 {2001},
  volume = 	 {29},
  number = 	 {1/4},
  month = 	 {February}
},


@phdthesis{muller98,
AUTHOR = "{Olaf M\"{u}ller}",
TITLE = "A Verification Environment for {I}/{O} Automata Based on Formalized
         Meta-Theory",
SCHOOL = "{Technische Universit\"{a}t M\"{u}nchen}",
YEAR = {1998},
MONTH = {Sept.}
},

@inproceedings{mullerTPHOLS98,
 author = {O. M\"{u}ller},
 title = {{I/O} Automata and Beyond: Temporal Logic and Abstraction in {Isabelle}},
 booktitle = {Proceedings of the 11th International Conference on {T}heorem {P}roving in {H}igher {O}rder {L}ogics},
 year = {1998},
 isbn = {3-540-64987-5},
 pages = {331--348},
 publisher = {Springer-Verlag},
 address = {London, UK},
 }

@unpublished{tipinvsproofs,
author = {M. Devillers},
title = {Verification of a Tree-Identity Protocol},
note = {\\URL {\tt http://www.cs.kun.nl/$\sim$marcod/1394.html}},
year = 1997
},


@article{ieee1394,
author = {M. Devillers and D. Griffioen and J. Romijn and F. Vaandrager},
title =  {Verification of a Leader Election Protocol---Formal Methods
          Applied to {IEEE} 1394},
journal = {Formal Methods in System Design},
volume = {16},
number = {3},
year = {2000},
month = {June},
pages = {307--320},
publisher = {Kluwer}
},

@unpublished{mylasays,
author		= {Myla Archer},
title		= {Personal communication},
note = {NRL, 2003}
}

@unpublished{pvsfortame,
author		= {John Rushby},
title		= {{PVS} Enhancements for {TAME}},
note = {SRI, 2003}
}

@TECHREPORT{Owre-rept-2001,
AUTHOR          = "S. Owre and N. Shankar",
TITLE           = "Theory Interpretations in {PVS}",
INSTITUTION     = "Computer Science Lab., SRI Intl., Menlo Park, CA",
YEAR            = 2001
}



@techreport{archer2003tamemanual,
        TITLE = "TAME User Manual",
        AUTHOR = "Myla Archer",
        NUMBER = {},
        YEAR = 2003,
        INSTITUTION = {Naval Research Laboratory, Code 5546},
        ADDRESS = {Washington, DC 20375}
},



@InProceedings{strat03tutorial,
  author = 	 {Myla Archer and Ben Di Vito and Cesar Munoz},
  title = 	 {Developing User Strategies in {PVS}: A Tutorial},
  booktitle = 	 {STRATA 2003},
  OPTcrossref =  {},
  OPTkey = 	 {},
  OPTpages = 	 {},
  year = 	 {2003},
  address = 	 {Rome, Italy},
},

@InProceedings{MA03PVS,
  author = 	 {Sayan Mitra and Myla Archer},
  title = 	 {Developing Strategies for Specialized Theorem Proving about Untimes, Timed, and Hybrid {I/O} Automata},
  booktitle = 	 {STRATA 2003},
  OPTcrossref =  {},
  OPTkey = 	 {},
  OPTpages = 	 {},
  year = 	 {2003},
  address = 	 {Rome, Italy},
  OPTmonth = 	 {September},
}


@InProceedings{JR94,
  author = 	 {Judi Romijn},
  title = 	 { Tackling the {RPC}-Memory Specification Problem with {I}/{O} {A}utomata},
  booktitle = 	 { Formal Systems Specification},
  pages = 	 {437-475},
  year = 	 {1994}
},



@Book{DL2003,
  author = 	 {Daniel Liberzon},
  title = 	 {Switching in Systems and Control},
  publisher = 	 {Birkhauser},
  year = 	 {2003},
  series = 	 {Systems and Control: Foundations and Applications},
  address = 	 {Boston},
  month = 	 {June},
},


@InProceedings{hespanha99stability,
  author = 	 {J.P. Hespanha and A. Morse},
  title = 	 {Stability of switched systems with average dwell-time},
  booktitle = {Proceedings of 38th IEEE Conference on Decision and Control},
  pages = {2655-2660},
  year = 	 {1999}
},



@Article{HLM2003,
  author = 	 {J.P. Hespanha and D. Liberzon and A.S. Morse},
  title = 	 {Hysteresis-based switching algorithms for supervisory control of uncertain systems},
  journal = 	 {Automatica},
  year = 	 {2003},
  volume = 	 {39},
  pages = 	 {263-272}
},

@Article{Morse1996,
  author = 	 {Morse A. S.},
  title = 	 {Supervisory control of families of linear setpoint controllers-Part1: Exact matching},
  journal = 	 {IEEE Trans. Automatic Control},
  year = 	 { 1996},
  volume = 	 {41},
  number = 	 {7},
  pages = 	 {1413-1431}
},

@Book{vdSS2000,
  author = 	 {A. van der Schaft and H. Schumacher},
  title = 	 {An Introduction to Hybrid Dynamical Systems},
  publisher = 	 {Springer},
  year = 	 {2000},
  address = 	 {London}
}

@Article{BBM98,
  author = 	 {M. Branicky and V. Borkar and S. Mitter},
  title = 	 {A unified framework for hybrid control: model and optimal control theory},
  journal = 	 {IEEE Transactions on Automatic Control},
  pages = 	 {31--45},
  year = 	 {1998},
  volume = 	 {43},
  number = 	 {1}
},


@InProceedings{KLSV2003a,
  author = 	 {Dilsun K. Kaynar and Nancy Lynch and Roberto Segala and Frits Vaandrager},
  title = 	 {Timed {I}/{O} Automata: A Mathematical Framework for Modeling and Analyzing Real-Time System},
  booktitle = 	 {RTSS 2003: The 24th IEEE International Real-Time Systems Symposium},
  year = 	 2003,
  address = 	 {Cancun,Mexico},
  month = 	 {December}
},


@techreport{KLSV2003b,
author={D. Kaynar and N. Lynch and R. Segala and F. Vaandrager},
title={The Theory of Timed {I/O} Automata},
year = 2004,
institution =   {MIT Laboratory for Computer Science},
number = {MIT/LCS/TR-917a},
note={Available at \url{http://theory.lcs.mit.edu/tds/reflist.html}}
}

@article{morse-super-part1,
author= "A. S. Morse",
title=  "Supervisory control of families of linear set-point controllers, part 1: exact matching",
journal= "IEEE Transactions on Automatic Control",
volume= "41",
pages= "1413-1431",
year= "1996"
},


@book{willia1book90,
author="H.P. Williams",
title="Model building in mathematical programming",
publisher="J. Wiley",
address="New York",
note="third edition",
year=1990
},



@InProceedings{ACHH93,
  author = 	 {R. Alur and C. Courcoubetis T. A. Henzinger and P. -H. Ho.},
  title = 	 {Hybrid automata: an algorithmic approach to the specification and verification of hybrid systems},
  booktitle = 	 { Hybrid Systems},
  pages = 	 {209-229},
  year = 	 {1993},
  editor = 	 {R. L. Grossman and A. Nerode and A. P. Ravn and H. Rischel},
  volume = 	 {736},
  series = 	 {LNCS},
  publisher = { Springer-Verlag}
},

@inproceedings{lygeros95gametheoretic,
    author = "John Lygeros and Datta N. Godbole and Shankar Sastry",
    title = "A Game-Theoretic Approach to Hybrid System Design",
    booktitle = "Hybrid Systems",
    pages = "1-12",
    year = "1995",
    url = "citeseer.ist.psu.edu/lygeros95game.html" }


@Misc{glpkurl,
  author ="GNU",
  title = 	 {{GLPK} - {GNU} Linear Programming Kit},
  note = 	 {Available from \url{http://www.gnu.org/directory/libs/glpk.html}}
},


@inproceedings{mattsson99modelica,
  author = "S. Mattsson and M. Otter and H. Elmqvist",
  title = "Modelica hybrid modeling and efficient simulation",
  booktitle = "Proceedings of the 38th IEEE Conference
    on Decision and Control",
  pages =  "3502--3507",
  address =  "Phoenix, Arizona",
  month ="December",
  year = "1999",
  url = "citeseer.ist.psu.edu/mattsson99modelica.html" },

@inproceedings{otter99hybrid,
  author = "M. Otter and H. Elmqvist and S. Mattsson",
  title = "Hybrid modeling in Modelica based on the synchronous data flow principle",
  booktitle = "CACSD'99",
  month = "August",
  address = "Hawaii",
  year = "1999",
  url = "citeseer.ist.psu.edu/otter99hybrid.html" },

@inproceedings{ henzinger96theory,
    author = "Thomas Henzinger",
    title = "The Theory of Hybrid Automata",
    booktitle = "Proceedings of the 11th Annual {IEEE} Symposium on Logic in Computer Science ({LICS} '96)",
    address = "New Brunswick, New Jersey",
    pages = "278--292",
    year = "1996",
    url = "citeseer.ist.psu.edu/henzinger96theory.html" },

@InProceedings{ML:CDC04,
  author ={Sayan Mitra and Daniel Liberzon},
  title ={Stability of hybrid automata with average dwell time: an invariant approach},
  booktitle ={Proceedings of the 43rd {IEEE} Conference on Decision and Control},
  month = {February},
  year = {2005},
  address = {Paradise Island, Bahamas}
},


@misc{ML:CDC04-full,
  author ={Sayan Mitra and Daniel Liberzon},
  title ={Stability of hybrid automata with average dwell time: an invariant approach},
  note ={http://theory.lcs.mit.edu/\~{}mitras/research/cdc04-full.ps.gz},
},


@inproceedings{pioa-2004,
  author ={L. Cheung and N. A. Lynch and R. Segala and F. Vaandrager},
  title ={ Switched Probabilistic {I/O} Automata},
  booktitle = {First International Colloquium on Theoretical Aspects of Computing},
  year = {2004},
  adress ={Guiyang, China,},
  month = {July}
},

@inproceedings{CL:CDC04,
  author ={D. Chatterjee and D. Liberzon},
  title ={On Stability of Stochastic Switched Systems},
  booktitle = {Proceedings of the 43rd Conference on Decision and Control},
  year ={2004},
pages = {4125--4127},
  address = {Paradise Island, Bahamas},
  month = {December}
},

@InProceedings{MA04strat,
  author =  {Sayan Mitra and Myla Archer},
  title =   {Reusable {PVS} Proof Strategies for Proving Abstraction Properties of  {I}/{O} Automata},
  booktitle = {STRATEGIES 2004, IJCAR Workshop on strategies in automated deduction},
  year = {2004},
  address = {Cork, Ireland},
  month = {July}
},

@techreport{MM01,
        author = "C. Mu{\~n}oz and M. Mayero",
        title = "Real Automation in the Field",
        institution = "ICASE-NASA Langley",
        number = "NASA/CR-2001-211271 Interim ICASE Report No. 39",
        address = "ICASE Mail Stop 132C, NASA Langley Research Center,
                  Hampton VA 23681-2199, USA",
        month =  "December",
        year = "2001"
},

@TechReport{ben-pvs,
	author = {Ben Di Vito},
	title  ={A {PVS} Prover Strategy Package for Common Manipulations},
	year = {2002},
	institution = {{NASA} Langley Research Center},
	url = 	{citeseer.ist.psu.edu/611573.html}
},


@InProceedings{KLM04,
  author = 	 {Dilsun Kaynar and Nancy Lynch and Sayan Mitra},
  title = 	 {Specifying and Proving Timing Properties with {TIOA} Tools},
  booktitle = 	 {In the work in progress session of the 25th {IEEE} International Real-Time Systems Symposium ({RTSS-WIP})},
  year = 	 {2004},
  address = 	 {Lisbon, Portugal},
  month = 	 {December}
},

@inproceedings{DISCvmn,
  author    = {Shlomi Dolev and
               Seth Gilbert and
               Nancy A. Lynch and
               Elad Schiller and
               Alexander A. Shvartsman and
               Jennifer L. Welch},
  title     = {Virtual Mobile Nodes for Mobile Ad Hoc Networks.},
  booktitle = {18th International Symposium on Distributed Computing {(DISC)}},
  year      = {2004},
  pages     = {230-244},
},

@InProceedings{DISCgeoquo,
  author = {Shlomi Dolev and
  			Seth Gilbert and
  			Nancy Lynch and
  			Alex Shvartsman
	and Jennifer Welch},
  title = {GeoQuorums: Implementing Atomic Memory in Ad Hoc Networks},
  booktitle = {Distributed algorithms},
  year = {2003},
  editor = {Faith Ellen Fich},
  volume = {2848/2003},
  series = {Lecture Notes in Computer Science},
  pages = {306--320},
  month = {Oct},
  pubisher = {Springer-Verlag Heidelberg},
  timestamp = {2007.03.07}
},

@article{geoquorums2,
  author = {Shlomi Dolev and
  			Seth Gilbert and
  			Nancy A. Lynch and
  			Alex A. Shvartsman and
  			Jennifer Welch},
  title = {GeoQuorums: Implementing Atomic Memory in Mobile Ad Hoc Networks},
  journal = {Distributed Computing},
  year = {2005},
  editor = {Faith Fich},
  publisher = {Springer-Verlag},
},

@inproceedings{netcontrol:Mobihoc04,
 author = {David Kiyoshi Goldenberg and Jie Lin and A. Stephen Morse},
 title = {Towards mobility as a network control primitive},
 booktitle = {MobiHoc '04: Proceedings of the 5th ACM international symposium on Mobile ad hoc networking and computing},
 year = {2004},
 isbn = {1-58113-849-0},
 pages = {163--174},
 location = {Roppongi Hills, Tokyo, Japan},
 doi = {http://doi.acm.org/10.1145/989459.989481},
 publisher = {ACM Press},
 },

@Article{coverage:IEEErobotics04,
  author = 	 {Jorge Cortes and  and Sonia Martinez and  Timur Karatas and Francesco Bullo},
  title = 	 {Coverage control for mobile sensing networks},
  journal = 	 {IEEE Transactions on Robotics and Automation},
  year = 	 {2004},
  volume = 	 {20},
  number = 	 {2},
  pages = 	 {243-255},
},

@Article{SY99:SIAM,
  author = 	 {I. Suzuki and M. Yamashita},
  title = 	 {Distributed autonomous mobile robots: Formation of geometric patterns},
  journal = 	 {{SIAM} Journal of computing },
  year = 	 {1999},
  volume = 	 {28},
  number = 	 {4},
  pages = 	 {1347-1363}
},



@Article{JLM03:TAC,
  author = 	 {A. Jadbabaie and J. Lin and A. S. Morse},
  title = 	 {Coordination of groups of mobile autonomous agents using nearest neighbor rules},
  journal = 	 {{IEEE} {T}ransactions on {A}utomatic {C}ontrol},
  year = 	 {2003},
  volume = 	 {48},
  number = 	 {6},
  pages = 	 {988-1001},
},



@Article{GP03:TAC,
  author = 	 {V. Gazi and K. M. Passino},
  title = 	 {Stability analysis of swarms},
  journal = 	 {{IEEE} {T}ransactions on {A}utomatic {C}ontrol},
  year = 	 {2003},
  volume = 	 {48},
  number = 	 {4},
  pages = 	 {692-697}
},

@Article{AOSY99:TRA,
  author = 	 {H. Ando and Y. Oasa and I. Suzuki and M. Yamashita},
  title = 	 {Distributed memoryless point convergence algorithm for mobile robots with limited visibility},
  journal = 	 {{IEEE} {T}ransactions on {R}obotics and {A}utomation},
  year = 	 {1999},
  volume = 	 {15},
  number = 	 {5},
  pages = 	 {818-828}
},

@InProceedings{LMA03:CDC,
  author = 	 {J. Lin and  A. Morse and B. Anderson.},
  title = 	 {Multi-agent rendezvous problem},
  booktitle = 	 {42nd {IEEE}  Conference on Decision and Control},
  year = 	 {2003}
},


 @InProceedings{MCB05:IFAC,
  author = 	 {Sonia Martinez and Jorge Cortes and Francesco Bullo },
  title = 	 {On robust rendezvous for mobile autonomous agents},
  booktitle = 	 {{IFAC} World Congress},
  year = 	 {2005},
  address = 	 {Prague, Czech Republic},
   note = 	 {To appear}
},


@InProceedings{JLT:2004,
  author =  {Joshua A. Tauber and Nancy A. Lynch and Michael J. Tsai},
  title = 	 {Compiling {IOA} without Global Synchronization},
  booktitle = {Proceedings of the The 3rd {IEEE} International Symposium on Network Computing and Applications, ({IEEE NCA04})},
  pages = 	 {121-130},
  year = 	 {2004},
  month =  {September}
},

@PhdThesis{JAT:2004,
  author =  {Joshua A. Tauber},
  title = 	 {Verifiable Compilation of {I/O} Automata without Global Synchronization},
  school =  {Massachusetts Institute of Technology},
  year = 	 {2004},
  address = {Cambridge,MA},
  month =	 {September}
},

@article{MitraA05,
  author    = {Sayan Mitra and Myla Archer},
  title     = {{PVS} Strategies for Proving Abstraction Properties of Automata.},
  journal   = {Electronic Notes in Theoretical Computer Science},
  volume    = 125,
  number    = 2,
  year      = 2005,
  pages     = {45-65},
  ee        = {http://dx.doi.org/10.1016/j.entcs.2005.01.005},
  bibsource = {DBLP, http://dblp.uni-trier.de},
},



@InProceedings{CLMT:disc05,
  author = 	 {Gregory Chockler and Nancy Lynch and Sayan Mitra and Joshua Tauber},
  title = 	 { Proving atomicity: an assertional approach},
  booktitle = 	 {Proceedings of  Nineteenth International Symposium on Distributed Computing ({DISC'05})},
  pages = 	 {152 - 168},
  year = 	 {2005},
  editor = 	 {Pierre Fraigniaud},
  volume = 	 { 3724},
  OPTnumber = 	 {},
  series = 	 {LNCS},
  address = 	 { Cracow, Poland },
  month = 	 {September},
  OPTorganization = {},
  publisher = {Springer},
  OPTnote = 	 {},
  OPTannote = 	 {}
},

@InProceedings{LKLM:formats05,
  author = 	 {Hongping Lim and  Dilsun Kaynar and  Nancy Lynch and Sayan Mitra},
  title = 	 {Translating timed {I/O} automata specifications for theorem proving in {PVS}},
  booktitle =  {Proceedings of  Formal Modelling and Analysis of Timed Systems ({FORMATS'05})},
  OPTpages = 	 {},
  year = 	 {2005},
  OPTeditor = 	 {},
  OPTvolume = 	 {3829},
  number = 	 {3829},
  series = 	 {LNCS},
  address =  {Uppsala, Sweden},
  month =  {September},
  publisher = {Springer},
},


@InProceedings{LML:icnp05,
  author = 	 {Ben Leong and Sayan Mitra and Barbara Liskov},
  title = 	 {Path vector face routing: Geographic routing with local face information},
  booktitle = 	 { Proceedings of  13th {IEEE} International Conference on Network Protocols ({ICNP'05})},
  OPTcrossref =  {},
  OPTkey = 	 {},
  OPTpages = 	 {},
  year = 	 {2005},
  OPTeditor = 	 {},
  OPTvolume = 	 {},
  OPTnumber = 	 {},
  OPTseries = 	 {},
  address = 	 {Boston, Massachusetts},
  month = 	 {November},
  OPTorganization = {},
  OPTpublisher = {},
  OPTnote = 	 {},
  OPTannote = 	 {}
},

@InProceedings{LMN:cdc05,
  author = 	 {Nancy Lynch and Sayan Mitra and Tina Nolte},
  title = 	 {Motion coordination using virtual nodes},
  booktitle = 	 { Proceedings of  44th {IEEE} Conference on Decision and Control ({CDC05})},
  OPTcrossref =  {},
  OPTkey = 	 {},
  OPTpages = 	 {},
  year = 	 {2005},
  OPTeditor = 	 {},
  OPTvolume = 	 {},
  OPTnumber = 	 {},
  OPTseries = 	 {},
  address = 	 {Seville, Spain},
  month = 	 {December},
  OPTorganization = {},
  OPTpublisher = {},
  OPTnote = 	 {},
  OPTannote = 	 {}
},


@phdthesis{mueller98,
AUTHOR = "{Olaf M\"{u}ller}",
TITLE = "A Verification Environment for {I}/{O} Automata Based on Formalized
         Meta-Theory",
SCHOOL = "{Technische Universit\"{a}t M\"{u}nchen}",
YEAR = {1998},
MONTH = {Sept.}
},

@Article{ChatLib:siam05,
  author = 	 {Debasish Chatterjee and Daniel Liberzon},
  title = 	 {Stability analysis of deterministic and stochastic switched systems via a comparison principle and multiple Lyapunov functions},
  journal = 	 {SIAM Journal on Control and Optimization},
  year = 	 {2006},
  OPTkey = 	 {},
  volume = 	 {45},
  number = 	 {1},
  pages = 	 {174-206},
  month = 	 {March}
  },


@Manual{IOAManual,
	title = {{IOA} User Guide and Reference Manual},
	author = {S. Garland and N. Lynch and J. Tauber and M. Vaziri},
	organization = {MIT Computer Science and Artificial Intelligence Laboratory},
	address = {Cambridge, MA},
	year = {2003},
	url= {http://theory.lcs.mit.edu/tds/ioa.html},
	note={Available at \url{http://theory.lcs.mit.edu/tds/ioa.html}}
},

@book{CormenLeRi90,
author = 	{Cormen, Thomas H. and Charles E. Leiserson and  Ronald L. Rivest},
title = 	{Introduction to Algorithms},
publisher = 	{MIT Press/McGraw-Hill},
year = 		1990
},

@book{HopcroftUl79,
author = 	"John E. Hopcroft and Jeffrey D. Ullman",
title = 	"Introduction to Automata Theory, Languages, and Computation",
publisher = 	"Addison-Wesley",
year = 		1979
},

@book{Knuth68I,
author = 	"Donald E. Knuth",
title = 	"{\sortby{a}}Fundamental Algorithms",
series =	"The Art of Computer Programming",
publisher = 	"Addison-Wesley",
volume = 	1,
year = 		1968,
note =		"Second edition, 1973."
},

@book{Knuth69II,
author = 	"Donald E. Knuth",
title = 	"{\sortby{b}}Seminumerical Algorithms",
series =	"The Art of Computer Programming",
publisher = 	"Addison-Wesley",
year =		1969,
volume = 	2,
note =		"Second edition, 1981."
},

@book{Knuth73III,
author = 	"Donald E. Knuth",
title = 	"{\sortby{c}}Sorting and Searching",
series =	"The Art of Computer Programming",
publisher = 	"Addison-Wesley",
volume = 	3,
year =		1973
},

@Article{lynchtechreview,
  author = 	 {Erika Jonietz},
  title = 	 {10 Emerging Technologies That Will Change the World: Software Assurance},
  journal = 	 {Technology Review},
  year = 	 {2003},
  OPTkey = 	 {},
  OPTvolume = 	 {},
  OPTnumber = 	 {},
  OPTpages = 	 {},
  month = 	 {February},
  OPTnote = 	 {},
  OPTannote = 	 {}
},

@PhdThesis{SegalaPhD,
  author = 	 { Roberto Segala},
  title = 	 {Modeling and Verification of Randomized Distributed Real-Time Systems},
  school = 	 { Laboratory for Computer Science, Massachusetts Institute of Technology},
  year = 	 {1995},
  OPTkey = 	 {},
  OPTtype = 	 {},
  OPTaddress = 	 {},
  month = 	 {June },
  OPTnote = 	 {},
  OPTannote = 	 {}
},

@InProceedings{HLS:hscc00,
  author = 	 {J. Hu and J. Lygeros and S. Sastry},
  title = 	 {Towards a theory of stochastic hybrid systems},
  booktitle = 	 {Hybrid Systems: Computation and Control, 3rd Int. Workshop ({HSCC} 2000)},
  pages = 	 { 160-173, 2000},
  year = 	 2000,
  editor = 	 {N. Lynch and B. H. Krogh},
  volume =	 1790,
  series = 	 {LNCS}
}


@InProceedings{hesh:hscc04,
  author = 	 {Jo{\~a}o P. Hespanha},
  title = 	 {Stochastic Hybrid Systems: Application to Communication Networks},
  booktitle = {Hybrid Systems: Computation and Control: 7th International Workshop, HSCC 2004},
  pages = 	 {387 - 401},
  year = 	 2004,
  crossref  = {HSCC2004}
},


@InProceedings{ioa2lsla,
	author = {A. Bogdanov and S. Garland and N.  Lynch},
	title = {Mechanical translation of {I}/{O} automaton specifications into first-order logic},
	booktitle = {Formal Techniques for Networked and Distributed Sytems - FORTE 2002 : 22nd IFIP WG 6.1 International Conference},
	month = {November},
	year = {2002},
	address = {Texas, Houston, USA},
	pages = {364--368}
}

@mastersthesis{ioa2lslb,
	author = {A. Bogdanov},
	title = {Formal verification of simulations between {I}/{O} automata},
	year = {2000},
	school = {Massachusetts Institute of Technology},
	organization = {MIT Computer Science and Artificial Intelligence Laboratory},
	address = {Cambridge, MA},
	note={Available at \url{http://theory.lcs.mit.edu/tds/ioa.html}}
}

@mastersthesis{ioa2isabelle,
	author = {Ne Win, Toh},
	title = {Theorem-proving distributed algorithms with dynamic analysis},
	school = {Massachusetts Institute of Technology},
	address = {Cambridge, MA},
	month = May,
	year = {2003}
}


@inproceedings{Owre-etal98:FM-TRENDS,
	AUTHOR = {Sam Owre and John Rushby and {N.} Shankar and David Stringer-Calvert},
	TITLE = {{PVS:} An Experience Report},
	BOOKTITLE = {Applied Formal Methods---FM-Trends 98},
	YEAR = {1998},
	EDITOR = {Dieter Hutter and Werner Stephan and Paolo Traverso and Markus Ullman},
	SERIES = {LNCS},
	VOLUME = {1641},
	PAGES = {338--345},
	ADDRESS = {Boppard, Germany},
	MONTH = {oct},
	PUBLISHER = {Springer-Verlag},
	URL = {http://www.csl.sri.com/papers/fmtrends98/}
}


@techreport{larch,
	author= {Stephen J. Garland and John V. Guttag},
	title= {A guide to {L}{P}, the {L}arch prover},
	year = {1991},
	institution = {DEC Systems Research Center},
	url= {http://nms.lcs.mit.edu/Larch/LP},
	note={Available at \url{http://nms.lcs.mit.edu/Larch/LP}}
}

@techreport{isabelle,
	author= {Lawrence C. Paulson},
	title= {The {I}sabelle reference manual},
	year = {1993},
	number = {283},
	institution = {University of Cambridge}
}

@techreport{devillers99,
	author= {Marco Devillers},
	title= {Translating {IOA} automata to {PVS}},
	year = {1999},
	month = {February},
	institution = {Computing Science Institute, University of Nijmegen},
	number = {CSI-R9903},
	url= {http://www.cs.ru.nl/research/reports/info/CSI-R9903.html},
	note={Available at \url{http://www.cs.ru.nl/research/reports/info/CSI-R9903.html}}
},

@book{dolevBook00,
 author = {Shlomi Dolev},
 title = {Self-stabilization},
 year = {2000},
 isbn = {0-262-04178-2},
 publisher = {MIT Press},
 address = {Cambridge, MA, USA},
 },

@article{NesAroura02,
 author = {Mikhail Nesterenko and Anish Arora},
 title = {Stabilization-preserving atomicity refinement},
 journal = {J. Parallel Distrib. Comput.},
 volume = {62},
 number = {5},
 year = {2002},
 issn = {0743-7315},
 pages = {766--791},
 doi = {http://dx.doi.org/10.1006/jpdc.2001.1828},
 publisher = {Academic Press, Inc.},
 address = {Orlando, FL, USA},
 }

@InProceedings{JGHP:hscc03,
  author = 	 { H. de Jong and  J.-L. Gouz and C. Hernandez and M. Page and T. Sari, J. Geiselmann},
  title = 	 {Hybrid modeling and simulation of genetic regulatory networks: A qualitative approach},
  booktitle = 	 {HSCC},
  crossref =  {HSCC2003},
  OPTkey = 	 {},
  pages = 	 {267-282},
  year = 	 {2003},
}

% http://theory.lcs.mit.edu/~rivest/algorithms2.bib

@inproceedings{lincoln:hscc04,
  author    = {Patrick Lincoln and  Ashish Tiwari},
  title     = {Symbolic Systems Biology: Hybrid Modeling and Analysis of
               Biological Networks.},
  booktitle = {HSCC},
  year      = {2004},
  pages     = {660-672},
  crossref  = {HSCC2004},
}

@proceedings{HSCC2004,
  editor    = {Rajeev Alur and
               George J. Pappas},
  title     = {Hybrid Systems: Computation and Control, 7th International
               Workshop, HSCC 2004, Philadelphia, PA, USA, March 25-27,
               2004, Proceedings},
  booktitle = {HSCC},
  publisher = {Springer},
  series    = {LNCS},
  volume    = {2993},
  year      = {2004},
  isbn      = {3-540-21259-0},
}

@inproceedings{Neogi04,
  author    = {Natasha A. Neogi},
  title     = {Dynamic Partitioning of Large Discrete Event Biological   Systems for Hybrid Simulation and Analysis.},
  booktitle = {HSCC},
  year      = {2004},
  pages     = {463-476},
  ee        = {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=2993{\&}spage=463},
  crossref  = {DBLP:conf/hybrid/2004},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@Manual{TIOALanguage,
	title = {{TIOA} Language},
	author = {D. Kaynar and N. Lynch and S. Mitra and S. Garland},
	organization = {MIT Computer Science and Artificial Intelligence Laboratory},
	address = {Cambridge, MA},
	year = {2005},
	url= {http://tioa.csail.mit.edu/moin.cgi/ProjectDocuments}
}

@Article{VSN,
  author = 	 {S. Dolev and
 S. Gilbert and
L. Lahiani and
N. A. Lynch and
T. A. Nolte},
  title = 	 {Virtual Stationary Automata for Mobile Networks },
  journal = {Technical Report MIT-LCS-TR-979},
  OPTpages = 	 {},
  year = 	 {2005},
  OPTeditor = 	 {},
  OPTvolume = 	 {},
  OPTnumber = 	 {},
  OPTseries = 	 {},
  OPTaddress = 	 {},
  OPTmonth = 	 {},
  OPTorganization = {},
  OPTpublisher = {},
  OPTnote = 	 {},
  OPTannote = 	 {}
}

@PhdThesis{branickyPhd,
  author =       {M. Branicky},
  title =        {Studies in hybrid systems: modeling, analysis, and control},
  school =       {MIT},
  year =         {1995},
  OPTkey =       {},
  OPTtype =      {},
  address =      {Cambridge, MA},
  month =        {June},
  OPTnote =      {},
  OPTannote =    {}
}


 @inproceedings{TiwariK02,
   author    = {Ashish Tiwari and   Gaurav Khanna},
   title     = {Series of Abstractions for Hybrid Automata.},
   booktitle = {5th International Workshop on Hybrid Systems: Computation and Control, },
   year      = {2002},
   pages     = {465-478},
   crossref  = {HSCC2002}
 }


 @proceedings{HSCC2002,
   editor    = {Claire Tomlin and  Mark R. Greenstreet},
   title     = {Hybrid Systems: Computation and Control, 5th International
                Workshop, HSCC 2002, Stanford, CA, USA, March 25-27, 2002,
                Proceedings},
   booktitle = {HSCC},
   publisher = {Springer},
   series    = {LNCS},
   volume    = {2289},
   year      = {2002},
   isbn      = {3-540-43321-X}
 }

 @InProceedings{Ant1993,
   author =     {P. J. Antsakis and J. A. Stiver and M. D. Lemmon},
   title =      {Hybrid system modeling and autonomous control systems},
   booktitle =          {Hybrid Systems},
   OPTcrossref =  {},
   OPTkey =     {},
   OPTpages =   {},
   year =       {1993},
   editor =     {R. L. Grossman and others},
   volume =     {736},
   OPTnumber =          {},
   series =     {LNCS},
   address =    {New York},
   OPTmonth =   {},
   OPTorganization = {},
   OPTpublisher = {},
   OPTnote =    {},
   OPTannote =          {}
 }

 @InProceedings{Back1993,
   author =     {A. Back and J. Guckenheimer and M. Myers},
   title =      {A dynamical simulation facility for hybrid systems},
   booktitle =          {Hybrid Systems},
   OPTcrossref =  {},
   OPTkey =     {},
   OPTpages =   {},
   year =       {1993},
   editor =     {R. L. Grossman and others},
   volume =     {736},
   OPTnumber =          {},
   series =     {LNCS},
   address =    {New York},
   OPTmonth =   {},
   OPTorganization = {},
   OPTpublisher = {},
   OPTnote =    {},
   OPTannote =          {}
 }

 @InProceedings{brockett1991,
   author =     {R. W. Brockett},
   title =      {Hybrid models for motion control systems},
   booktitle =          {Essays in Control: Perspectives in the Theory and its Applications},
   OPTcrossref =  {},
   OPTkey =     {},
   pages =      {20-53},
   year =       {1994},
   editor =     {H. L. Trentelman and J. C. Willems},
   OPTvolume =          {},
   OPTnumber =          {},
   OPTseries =          {},
   address =    {Boston},
   OPTmonth =   {},
   OPTorganization = {},
   publisher = {Birkhauser},
   OPTnote =    {},
   OPTannote =          {}
}

 @InProceedings{Nerodekohn1993,
   author =     {A. Nerode and W. Kohn},
   title =      {Models for  hybrid systems: Automata, topologies, stability},
   booktitle =          {Hybrid Systems},
   OPTcrossref =  {},
   OPTkey =     {},
   OPTpages =   {},
   year =       {1993},
   editor =     {R. L. Grossman and others},
   volume =     {736},
   OPTnumber =          {},
   series =     {LNCS},
   address =    {New York},
   OPTmonth =   {},
   OPTorganization = {},
   OPTpublisher = {},
   OPTnote =    {},
   OPTannote =          {}
 }



 @InProceedings{segala96:concur,
   author =     {R. Segala},
   title =      {Testing Probabilistic Automata},
   booktitle =          {Proceedings of the 7th International Conference on Concurrency Theory (CONCUR '
96)},
   OPTcrossref =  {},
   OPTkey =     {},
   pages =      {299-314},
   year =       { 1996},
   OPTeditor =          {},
   volume =     {1119},
   OPTnumber =          {},
   series =     { LNCS},
   address =    { Pisa, Italy},
   month =      {August}
 }


 @InProceedings{segala95:concur,
   author =     { R. Segala},
   title =      {A Compositional Trace-Based Semantics for Probabilistic Automata},
   booktitle =          {Proceedings of the 6th International Conference on Concurrency Theory (CONCUR '
95)},
   OPTcrossref =  {},
   OPTkey =     {},
   pages =      { 234-248},
   year =       {1995},
   OPTeditor =          {},
   volume =     {962},
   OPTnumber =          {},
   series =     {LNCS},
   address =    {Philadelphia, PA, USA},
   month =      {August}
 }


 @InProceedings{auto:hscc2000,
   author =     {A. Balluchi and L. Benvenuti and  M. D. Di Benedetto and  G. M. Miconi and  U. Pozzi an
d  T. Villa and
  H. Wong-Toi  and A. L. Sangiovanni-Vincentelli},
   title =      {Maximal Safe Set Computation for Idle Speed Control of an Automotive Engine},
   booktitle =          {Hybrid Systems: Computation and Control (HSCC 2000)},
   OPTcrossref =  {},
   OPTkey =     {},
   pages =      {32--44},
   OPTyear =    {2000},
   editor =     {Nancy Lynch and Bruce H. Krogh},
   volume =     { 1790},
   OPTnumber =          {},
   series =     {LNCS},
   address =    {New York},
   OPTmonth =   {},
   OPTorganization = {},
   publisher = {Springer-Verlag},
   OPTnote =    {},
   OPTannote =          {}
 }


 @PhdThesis{alurthesis,
   author =     {R. Alur},
   title =      {Techniques for automatic verification of real-time systems},
   school =     {Stanfor University},
   year =       {1991},
   OPTkey =     {},
   OPTtype =    {},
   OPTaddress =         {},
   OPTmonth =   {},
   OPTnote =    {},
   OPTannote =          {}
 }

 @Article{HNSY:1994,
   author =     {T. A. Henzinger and X. Nicollin and J. Sifakis and S. Yovine},
   title =      {Symbolic model checking for real-time systems},
   journal =    {Information and Computation},
   year =       {1994},
   OPTkey =     {},
   volume =     {111},
   number =     {2},
   pages =      {193-244},
   OPTmonth =   {},
   OPTnote =    {},
   OPTannote =          {}
 }

 @Article{clarkeemerson86,
   author =     {E. Clarke and E. A. Emerson and A. P. Sistla},
   title =      {Automatic verification of finite-state concurrent systems using
 temporal logic specifications},
   journal =    {ACM Transactions on Programming Languages and Systems},
   year =       {1986},
   OPTkey =     {},
   volume =     {8},
   number =     {2},
   pages =      {244-263},
   OPTmonth =   {},
   OPTnote =    {},
   OPTannote =          {}
 }




 @InBook{mannaPnueli81,
   author =     {Z. Manna and A. Pnueli},
   ALTeditor =          {R. Boyer and J. Moore},
   title =      {The Correctness problem in Computer Science},
   chapter =    {The temporal framework for concurrent programs},
   publisher =          {Academic Press},
   year =       {1981},
   OPTkey =     {},
   OPTvolume =          {},
   OPTnumber =          {},
   OPTseries =          {},
   OPTtype =    {},
   OPTaddress =         {},
   OPTedition =         {},
   OPTmonth =   {},
   OPTpages =   {},
   OPTnote =    {},
   OPTannote =          {}
 }


 @InProceedings{Pnueli77,
   author =     {A. Pnueli},
   title =      {The temporal logic of programs},
   booktitle =          {IEEE Symposium on Foundations of Computer Science},
   OPTcrossref =  {},
   OPTkey =     {},
   pages =      {46-77},
   year =       {1977},
   OPTeditor =          {},
   OPTvolume =          {},
   OPTnumber =          {},
   OPTseries =          {},
   OPTaddress =         {},
   OPTmonth =   {},
   OPTorganization = {},
   OPTpublisher = {},
   OPTnote =    {},
   OPTannote =          {}
 }

 @InProceedings{clockGTA97,
   author =     {R. DePrisco and Butler Lampson and Nancy Lynch},
   title =      {Revisitng the Paxos algorithm},
   OPTcrossref =  {},
   OPTkey =     {},
   booktitle = {Distributed Algorithms 11th Workshop {WDAG'97}},
   pages =      {111-125},
   year =       {1997},
   OPTeditor =          {},
   OPTvolume =          {},
   OPTnumber =          {},
   OPTseries =          {},
   address =    {Berlin-Heidelberg},
   OPTmonth =   {},
   OPTorganization = {},
   OPTpublisher = {},
   OPTnote =    {},
   OPTannote =          {}
 }

 @Misc{MLL:hscc06-full,
   author =     {S. Mitra and N. Lynch and D. Liberzon},
   title =      {Verifying  Average Dwell Time by Solving Optimization Problems},
   month =      {September},
   year =       {2005},
   note =       {Available from: http://theory.lcs.mit.edu/\~{}mitras/research/hscc06-full.pdf}
 }


@Article{menaldi2000,
  author = 	 {A. Bensoussan and J.L. Menaldi},
  title = 	 { Stochastic Hybrid Control  },
  journal = 	 {Journal of Mathematical Analysis and Applications },
  year = 	 2000,
  volume = 	 { 249 },
  pages = 	 {261-288}
}

 @TechReport{OTtr:2005,
  author = 	 {Ran Canetti and Ling Cheung and
 Dilsun Kirli and Moses Liskov and Nancy Lynch, Olivier Pereira and Roberto Segala},
  title = 	 {Using Probabilistic {I/O} Automata to Analyze an Oblivious Transfer Protocol},
  institution =  { MIT LCS Technical Reports - MIT-LCS-TR-1001},
  year = 	 2005,
  month = 	 {August},
  note = 	 {Also in MIT CSAIL Technical Reports - MIT-CSAIL-TR-2005-055}
}

@InProceedings{CSKN:fossacs05,
  author = 	 {Stefano Cattani and Roberto Segala and Marta Z. Kwiatkowska and Gethin Norman},
  title = 	 {Stochastic Transition Systems for Continuous State Spaces and Non-determinism},
  booktitle = 	 { FoSSaCS'05},
  publisher = {Springer},
  series    = {LNCS},
  volume    = {3441},
  pages = 	 {125-139},
  year = 	 2005
}



@PhdThesis{CattaniPhD,
  author = 	 {Stefano Cattani},
  title = 	 {Trace-based Process Algebras for Real-time Probabilistic Systems},
  school = 	 {University of Birmingham},
  year = 	 2005
}



@inproceedings{Frehse:hscc05,
  author    = {Goran Frehse},
  title     = {PHAVer: Algorithmic Verification of Hybrid Systems Past
               HyTech.},
  booktitle = {HSCC},
  year      = {2005},
  pages     = {258-273},
  ee        = {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3414{\&}spage=258},
  crossref  = {HSCC2005}
}

@proceedings{HSCC2005,
  editor    = {Manfred Morari and
               Lothar Thiele},
  title     = {Hybrid Systems: Computation and Control, 8th International
               Workshop, HSCC 2005, Zurich, Switzerland, March 9-11, 2005,
               Proceedings},
  booktitle = {HSCC},
  publisher = {Springer},
  series    = {LNCS},
  volume    = {3414},
  year      = {2005},
  isbn      = {3-540-25108-1}
}

@book{ref:davisMarkovModelsOptbk,
    AUTHOR = "M. H. A. Davis",
    TITLE = "Markov Models and Optimization",
    YEAR = {1993},
    PUBLISHER = "Chapman \& Hall",
}

@BOOK{Dudley89book,
AUTHOR = {Dudley, R. M.},
TITLE = {Real Analysis and Probability},
BOOKTITLE = {Real Analysis and Probability},
YEAR = {1989},
ADDRESS = {Belmont, Calif},
PUBLISHER = {Wadsworth} }

@BOOK{Rudin76,
        AUTHOR             = {Walter Rudin},
        ADDRESS            = {New York, NY, USA},
        EDITION            = {3rd},
        PUBLISHER          = {{McG}raw-Hill},
        TITLE              = {Principles of Mathematical Analysis},
        YEAR               = {1976}
}

@Book{rudinrc,
  author =       {Rudin, Walter},
  title =        {Real \& Complex Analysis},
  publisher =    {McGraw-Hill, Inc.},
  year =         1987,
  address =      {New York, NY},
  edition =      {3rd}
}


@inproceedings{giry81,
  author = 	 {M. Giry},
  title = 	 {A categorical approach to probability theory},
  booktitle = 	 {Categorical Aspects ofTopology and Analysis},
  year = 	 1981,
 EDITOR = {B. Banaschewski},
 SERIES = {Lecture Notes in Mathematics},
  number = 	 915,
  pages = 	 {68-85},
publisher= {Springer-Verlag}
}


@InProceedings{BLygeros:cdc04,
 author =       {M. Bujorianu and J. Lygeros},
 title =        {General stochastic hybrid systems: Modelling and optimal
control},
 booktitle =    {IEEE Conference on Decision and Control},
 year =         {2004},
 address =      {Atlantis, Paradise Island, Bahamas},
 month =        {December}
}


@Article{DDLP:05,
  author = 	 {Vincent Danos and Jose Desharnais and  Francois
Laviolette and Prakash Panangaden},
  title = 	 {Bisimulation and Cocongruence for Probabilistic Systems},
  journal = 	 {Information and Computation, Special
issue for selected papers from CMCS04},
  year = 	 { 2005}
}

@Article{DDP:04,
  author = 	 {Vincent Danos and Jose Desharnais
and Prakash Panangaden},
  title = 	 {Labelled Markov Processes: Stronger and Faster Approximations},
  journal = 	 {Proceedings of the Workshop on Domain Theoretic Methods for Probabilistic Processes, Electronic Notes in Theoretical Computer Science},
  editor={Jose Desharnais and  Prakash Panangaden},
  year = 	 2004,
  volume =	 87,
  pages =	 {157-203},
  month =	 {November}
}

@article{DGJP:TCS04,
 author = {Jose Desharnais and Vineet Gupta and Radha Jagadeesan and Prakash Panangaden},
 title = {Metrics for labelled Markov processes},
 journal = {Theor. Comput. Sci.},
 volume = {318},
 number = {3},
 year = {2004},
 issn = {0304-3975},
 pages = {323--354},
 doi = {http://dx.doi.org/10.1016/j.tcs.2003.09.013},
 publisher = {Elsevier Science Publishers Ltd.},
 address = {Essex, UK},
 }

@Article{StSm:TCS97,
  author = 	 {S.-H. Wu and S. Smolka and E. Stark},
  title = 	 {Composition and Behaviors of Probabilistic {I/O} Automata},
  journal = 	 {Theoretical Computer Science},
  year = 	 1997,
  volume =	 {176 },
  pages =	 {1-38}
}



@InProceedings{StSm:LICS98,
  author = 	 {E. Stark and  S. Smolka},
  title = 	 {Probabilistic I/O Automata},
  booktitle = 	 {Proc. 13th Annual Symposium on Logic in Computer Science},
  pages =	 { 466-477},
  year =	 1998,
  address =	 {Indianapolis, IN},
  month =	 {June }
}


@InProceedings{StSm:CONCUR03,
  author = 	 {E. Stark, R. Cleaveland, S. Smolka},
  title = 	 {A Process-Algebraic Language for Probabilistic {I/O} Automata},
  booktitle = 	 { Proc. CONCUR 03},
  pages =	 {189--203},
  year =	 2003,
  volume =	 2761,
  series =	 { LNCS 2761},
  address =	 {Marseille, France},
  month =	 {September},
  publisher =	 {Springer}
}


@Article{St:JALC03,
  author = 	 {E. Stark},
  title = 	 {On Behavior Equivalence for Probabilistic {I/O} Automata and its
    Relationship to Probabilistic Bisimulation},
  journal = 	 {Journal of Automata, Languages, and Combinatorics},
  year = 	 2003,
  volume =	 8,
  number =	 2,
  pages =	 {361--395}
}

@INPROCEEDINGS{MLL:hscc06,
  AUTHOR = {Sayan Mitra and Daniel Liberzon and Nancy Lynch},
  TITLE = {Verifying Average Dwell Time by Solving Optimization Problems},
  BOOKTITLE = {HSCC},
  KEY = {mllhscc06},
  YEAR = 2006,
  pages = {476-490},
  crossref = {HSCC2006},
  NOTE = {Full version: \url{http://theory.lcs.mit.edu/\~mitras/research/hscc06_full.pdf}}
}



@TechReport{taskPIOATR:06,
  author = 	 {Ran Canetti and Ling Cheung and Dilsun Kaynar and Moses Liskov and Nancy Lynch and Olivier Pereira and Roberto Segala},
  title = 	 {Task-Structured Probabilistic {I/O} Automata},
  institution =  {Massachusetts Institute of Technology},
  year = 	 2006,
  number =	 {MIT-CSAIL-TR-2006-060},
  address =	 {Cambridge, MA},
  month =	 {September}
}

@Article{panaTCS,
  author = 	 {P. Panangaden},
  title = 	 {Measure and probability for concurrency theorists},
  journal = 	 {Theoretical Computer Science},
  year = 	 2001,
  volume =	 253,
  number =	 2,
  pages =	 {287--309}
}

 @Book{Hermanns2002,
 author =      {Holger Hermanns},
 ALTeditor =      {},
 title =      {Interactive Markov Chains : The Quest for Quantified
Quality},
 publisher =      {Springer Berlin / Heidelberg},
 year =      {2002},
 OPTkey =      {},
 OPTvolume =      {2428},
 OPTnumber =      {},
 OPTseries =      {LNCS},
 OPTaddress =      {},
 OPTedition =      {},
 OPTmonth =      {},
 OPTnote =      {},
 OPTannote =      {}
}

@TechReport{OTtaskPIOATR:06,
 author =       {Ran Canetti and Ling Cheung and Dilsun Kaynar and Moses
Liskov and Nancy Lynch and Olivier Pereira and Roberto Segala},
 title =        {Using Task-Structured Probabilistic {I/O} Automata to
Analyze an Oblivious Transfer Protocol},
 institution =  {Massachusetts Institute of Technology},
 year =         2006,
 number =       {MIT-CSAIL-TR-2006-019},
 address =      {Cambridge, MA},
 month =        {March},
 note = {Available from
\url{http://theory.csail.mit.edu/tds/papers/Kirli/TR-2006-019.pdf}}
}


@inproceedings{MitchellT00,
  author    = {Ian Mitchell and               Claire Tomlin},
  title     = {Level Set Methods for Computation in Hybrid Systems.},
  booktitle = {HSCC},
  year      = {2000},
  pages     = {310-323},
  ee        = {http://link.springer.de/link/service/series/0558/bibs/1790/17900310.htm},
}

@inproceedings{PrajnaJ04,
  author    = {Stephen Prajna and Ali Jadbabaie},
  title     = {Safety Verification of Hybrid Systems Using Barrier Certificates.},
  booktitle = {HSCC},
  year      = {2004},
  volume=2993,
}

@inproceedings{KV00ellipsoidal,
    author = "Alexander B. Kurzhanski and Pravin Varaiya",
    title = "Ellipsoidal Techniques for Reachability Analysis",
    booktitle = "{HSCC}",
    pages = "202-214",
    year = "2000",
    url = "citeseer.csail.mit.edu/kurzhanski98ellipsoidal.html" }

@book{khalil-book-3ed,
author="H. K. Khalil",
title="Nonlinear Systems",
publisher="Prentice Hall",
address="New Jersey",
edition="3rd",
year=2002
}

@PhdThesis{FrehsePhd05,
  author = 	 {Goran Frehse},
  title = 	 {Compositional Verification of Hybrid Systems using Simulation Relations},
  school = 	 {Radbout Universiteit Nijmegen},
  year = 	 2005,
  month = 	 {October}
}


@Book{TIOAmon,
  author = 	 {Dilsun K. Kaynar and Nancy Lynch and  Roberto Segala and Frits Vaandrager},
  ALTeditor = 	 {},
  title = 	 {The Theory of Timed {I/O} Automata},
  publisher = 	 {Morgan Claypool},
  year = 	 {2005},
  OPTkey = 	 {},
  OPTvolume = 	 {},
  OPTnumber = 	 {},
  series = 	 {Synthesis Lectures on Computer Science},
  OPTaddress = 	 {},
  OPTedition = 	 {},
  month = 	 {November},
  note = 	 {Also available as Technical Report MIT-LCS-TR-917},
  OPTannote = 	 {}
}

@Misc{ML:CONCUR06,
  author =	 {Sayan Mitra and Nancy Lynch},
  title =	 {Probabilistic  Timed {I/O} Automata with Continuous State Spaces},
  month =	 {April},
  year =	 2006,
 note = {Submitted for review. Available from
\url{http://theory.lcs.mit.edu/~mitras/research/CONCUR06_06.pdf}}
}

@inproceedings{Girard2005,
    author = {Antoine Girard and George J. Pappas},
    booktitle ={IEEE Transactions on Automatic Control},
    title = {Approximation Metrics for Discrete and Continuous  Systems},
    year = {2005}
}

@inproceedings{Julius06,
  author    = {A. Agung Julius},
  title     = {Approximate Abstraction of Stochastic Hybrid Automata.},
  booktitle = {HSCC06},
  year      = {2006},
  pages     = {318-332},
  crossref  = {HSCC2006}
}

@proceedings{HSCC2006,
  editor    = {Jo{\~a}o P. Hespanha and
               Ashish Tiwari},
  title     = {Hybrid Systems: Computation and Control, 9th International
               Workshop, HSCC 2006, Santa Barbara, CA, USA, March 29-31,
               2006, Proceedings},
  booktitle = {HSCC},
  publisher = {Springer},
  series    = {LNCS},
  volume    = {3927},
  year      = {2006},
  isbn      = {3-540-33170-0}
}

@article{DGJP:infco03,
 author = {Jos{\'e}e Desharnais and Vineet Gupta and Radha Jagadeesan and Prakash Panangaden},
 title = {Approximating labelled Markov processes},
 journal = {Inf. Comput.},
 volume = {184},
 number = {1},
 year = {2003},
 issn = {0890-5401},
 pages = {160--200},
 publisher = {Academic Press, Inc.},
 address = {Duluth, MN, USA},
 }

@Book{Rachev91,
  author =	 {Svetlozar T. Rachev},
  title = 	 {Probability metrics and the stability of stochastic models},
  publisher = 	 {John Wiley \& Sons},
  year = 	 1991,
isbn = 0471928771
}



@Book{Dudley76,
  author =	 {R. M. Dudley},
  title = 	 {Probabilities and Metrics:Convergence of laws on metric spaces,
with a view to statistical testing},
  publisher = 	 {Aarhus Universitet},
  year = 	 1976,
  number =	 45,
  series =	 {Lecture Notes Series},
  month =	 {June}
}

@article{LarsenS91,
  author    = {Kim Guldstrand Larsen and
               Arne Skou},
  title     = {Bisimulation through Probabilistic Testing},
  journal   = {Inf. Comput.},
  volume    = {94},
  number    = {1},
  year      = {1991},
  pages     = {1-28},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{GJP:2006,
author = {Vineet Gupta and Radha Jagadeesan and Prakash Panangaden},
title = {Approximate Reasoning for Real-Time Probabilistic Processes},
journal = {The Quantitative Evaluation of Systems, First International Conference on (QEST'04)   },
volume = {00},
year = {2004},
isbn = {0-7695-2185-1},
pages = {304-313},
doi = {http://doi.ieeecomputersociety.org/10.1109/QEST.2004.10029},
publisher = {IEEE Computer Society},
address = {Los Alamitos, CA, USA},
}

@inproceedings{LMMS:CCS98,
 author = {P. Lincoln and J. Mitchell and M. Mitchell and A. Scedrov},
 title = {A probabilistic poly-time framework for protocol analysis},
 booktitle = {CCS '98: Proceedings of the 5th ACM conference on Computer and communications security},
 year = {1998},
 isbn = {1-58113-007-4},
 pages = {112--121},
 location = {San Francisco, California, United States},
 doi = {http://doi.acm.org/10.1145/288090.288117},
 publisher = {ACM Press},
 address = {New York, NY, USA},
 }

@inproceedings{BMOW03,
  AUTHOR    = { F. van Breugel and M. Mislove and J. Ouaknine and J. B. Worrell},
  TITLE     = { An intrinsic characterization of approximate probabilistic bisimilarity },
  BOOKTITLE = { Proceedings of FOSSACS~03 },
  YEAR      = { 2003 },
  PUBLISHER = { Springer },
  SERIES    = { LNCS },
}

@Article{BMOW05:tcs,
  author = 	 { F. van Breugel and  M. W. Mislove and  J. Ouaknine and J. Worrell.},
  title = 	 {Domain theory, testing and simulation for labelled Markov processes.},
  journal = 	 {Theoretical Computer Science},
  year = 	 {2005},
  OPTkey = 	 {},
  OPTvolume = 	 { 333},
  OPTnumber = 	 {(1-2)},
  OPTpages = 	 {},
  OPTmonth = 	 {},
  OPTnote = 	 {},
  OPTannote = 	 {}
}



@inproceedings{MOPW04:fossacs,
  author = 	 {M. W. Mislove, J. Ouaknine, D. Pavlovic, and J. Worrell.},
  title = 	 {Duality for labelled Markov processes.},
  booktitle = 	 {Proceedings of FOSSACS 04},
  year = 	 2004,
series = {LNCS},
  volume = 	 2987,
publisher = {Springer}
}



@Article{MOW2004:express,
  author = 	 {M. W. Mislove and  J. Ouaknine and J. Worrell.},
  title = 	 {Axioms for probability and nondeterminism.},
  journal = 	 {ENTCS},
  year = 	 {2004},
  OPTkey = 	 {},
  OPTvolume = 	 {96},
  OPTnumber = 	 {},
  OPTpages = 	 {},
  OPTmonth = 	 {},
  OPTnote = 	 {EXPRESS 2003},
  OPTannote = 	 {}
}


@inproceedings{BW:ICALP01,
 author = {Franck van Breugel and James Worrell},
 title = {Towards Quantitative Verification of Probabilistic Transition Systems},
 booktitle = {ICALP '01: Proceedings of the 28th International Colloquium on Automata, Languages and Programming,},
 year = {2001},
 isbn = {3-540-42287-0},
 pages = {421--432},
 publisher = {Springer-Verlag},
 address = {London, UK},
 }

@inproceedings{baier96polynomialtime,
    author = "{C. Baier}",
    title = "Polynomial-Time Algorithms for Testing Probabilistic Bisimulation and Simulation",
    booktitle = "Proceedings of the Eighth International Conference on Computer Aided Verification {CAV}",
    volume = "1102",
    month = "/",
    publisher = "Springer Verlag",
    address = "New Brunswick, NJ, USA",
    editor = "{Rajeev Alur} and {Thomas A. Henzinger}",
    pages = "50--61",
    year = "1996",
    url = "citeseer.ist.psu.edu/baier96polynomial.html" }
}

@inproceedings{TabuadaPL02,
  author    = {Paulo Tabuada and
               George J. Pappas and
               Pedro U. Lima},
  title     = {Composing Abstractions of Hybrid Systems.},
  booktitle = {HSCC 2002},
  year      = {2002},
  pages     = {436-450},
  ee        = {http://link.springer.de/link/service/series/0558/bibs/2289/22890436.htm},
  crossref  = {HSCC2002}
}

@inproceedings{BujorianuLB05,
  author    = {Manuela L. Bujorianu and
               John Lygeros and
               Marius C. Bujorianu},
  title     = {Bisimulation for General Stochastic Hybrid Systems.},
  booktitle = {HSCC},
  year      = {2005},
  pages     = {198-214},
  ee        = {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3414{\&}spage=198},
  crossref  = {HSCC2005}
}


@inproceedings{StrubbeS05,
  author    = {Stefan Strubbe and
               A. J. van der Schaft},
  title     = {Bisimulation for Communicating Piecewise Deterministic Markov Processes (CPDPs)},
  booktitle = {HSCC},
  year      = {2005},
  pages     = {623-639},
  ee        = {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3414{\&}spage=623},
  crossref  = {HSCC2005}
}

@InProceedings{JouS90,
  author = 	 {C.-C. Jou and S. A. Smolka},
  title = 	 {Equivalences, congruences and complete approximations for probabilistic processes},
  booktitle =	 {CONCUR 90},
  year =	 1990,
  number =	 458,
  series =	 {LNCS},
  publisher =	 {Springer-Verlag}
}

@inproceedings{desharnais02metric,
  author = "J. Desharnais and R. Jagadeesan and V. Gupta and P. Panangaden",
  title = "The metric analogue of weak bisimulation for probabilistic processes",
  booktitle = "Proceedings of the 17th Annual {IEEE} Symposium on Logic in Computer
    Science (LICS), Copenhagen, Denmark, 22-25 July 2002",
  pages = "413--422",
  publisher = "IEEE Computer Society",
  year = "2002",
  url = "citeseer.ist.psu.edu/desharnais02metric.html"
}


@InProceedings{GJP:IFAC2006,
  author = 	 {Antoine Girard and A. Agung Julius and George J. Pappas},
  title = 	 {Approximate simulation relations for hybrid systems},
  booktitle = 	 {IFAC Analysis and Design of Hybrid Systems},
  year =	 2006,
  address =	 {Alghero, Italy},
  month =	 {June}
}


@InProceedings{PEGS:CSMB05,
  author = 	 {Y. Pei and  E. Entcheva and  R. Grosu and S.A. Smolka},
  title = 	 {Efficient Modeling of Excitable Cells using Hybrid Automata},
  booktitle = 	 {In Proc. of CMSB'05 Computational Methods in Systems Biology Workshop},
  year =	 2005,
  address =	 {Edinburgh,UK},
  month =	 {April }
}

@book{Puterman:1994,
 address = "New York",
 author = "M. L. Puterman",
 publisher = "John Wiley \& Sons",
 title = "Markov Decision Processes: Discrete Stochastic Dynamic Programming",
 year = "1994"
}


@InProceedings{probmela2006,
  author = 	 {C. Baier and  F. Ciesinski and M. Grer.},
  title = 	 {Prob{M}ela and model checking Markov decision processes},
  booktitle = 	 {{ACM} Performance Evaluation Review on Performance and Verification},
  year = 	 2006,
  note = 	 {to appear}
}

@InProceedings{HKNP06,
author={A. Hinton and M. Kwiatkowska and G. Norman and D. Parker},
title={{PRISM}: A Tool for Automatic Verification of Probabilistic Systems},
booktitle={Proc. 12th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS'06)},
year=2006,
editor={H. Hermanns and J. Palsberg},
pages={441-444},
organization={},
publisher={Springer},
series={LNCS},
volume=3920
}

@Article{HR95,
  author = 	 {M.~Hennessy and T.~Regan},
  title = 	 {A process algebra for timed systems},
  journal = 	 {Information  and Computation},
  year = 	 1995,
  volume =	 117,
  pages =	 {221-239}
}

@inproceedings{04YKNP,
  AUTHOR    = { Younes, H{\aa}kan L. S. and Kwiatkowska, Marta and Norman, Gethin, and Parker, David },
  TITLE     = { Numerical vs.\ Statistical Probabilistic Model Checking: An Empirical Study },
  BOOKTITLE = { Proceedings of the 10th International Conference on Tools and Algorithms for the Construction and Analysis of Systems },
  YEAR      = { 2004 },
  PUBLISHER = { Springer },
  PAGES     = { 46--60 },
  SERIES    = { LNCS },
  VOLUME    = { 2988 },
  EDITOR    = { Kurt Jensen and Andreas Podelski },
}

@inproceedings{hermanns99multiterminal,
  author = "H. Hermanns and J. Meyer-Kayser and M. Siegle",
  title = "Multi-terminal binary decision diagrams to represent and analyse continuous-time
    Markov chains",
  booktitle = "Workshop on the Num. Sol. of Markov Chains",
  pages = "188--207",
  year = "1999",
  url = "citeseer.ist.psu.edu/hermanns99multi.html"
}

@book{Doob53,
	author={J. L. Doob},
	title={Stochastic Processes},
	publisher={John Wiley \& Sons, Inc.},
	year={1953},
	address={New York}
}

@Book{Pollard84,
  ALTauthor = 	 {David Pollard},
  ALTeditor = 	 {},
  title = 	 {Convergence of Stochastic Processes},
  publisher = 	 {Springer-Verlag},
  year = 	 {1984},
  url = {http://ameliabedelia.library.yale.edu/dbases/pollard1984.html},
  series = 	 {Springer series in Statistics},

}


@PhdThesis{dealfero1997,
  author = 	 {Luca de Alfaro},
  title = 	 {Formal Verification of Probabilistic Systems},
  school = 	 {Stanford University},
  year = 	 {1997},
  address = 	 {CA},
  note = {Technical Report STAN-CS-TR-98-1601},
  url = "citeseer.nj.nec.com/engberg96reasoning.html"
},

@INPROCEEDINGS{ML:paul06,
  AUTHOR = {Sayan Mitra and Nancy Lynch},
  TITLE = { Approximate simulations for task-structured probabilistic {I/O} automata},
  BOOKTITLE = { LICS workshop on Probabilistic Automata and Logics (PAul06)},
  YEAR = 2006,
  ADDRESS = {Seattle, WA},
  MONTH = {August},
  URL = {http://theory.lcs.mit.edu/~mitras/research/PAul06-final.pdf}
}


 @InProceedings{dg04,
 	author = {Giorgio Delzanno and Pierre Ganty},
 	title = "{Automatic Verification of Time Sensitive Cryptographic
 	Protocols}",
 	booktitle = "Proc. of the 10th Int. Conf. on Tools and Algorithms for
 	Construction and Analysis of Systems ({TACAS})",
 	series = "LNCS",
 	publisher = "Springer-Verlag",
 	volume = 2988,
 	pages = "342--356",
 	year = 2004
 }

 @inproceedings{ evans00analysing,
     author = "Neil Evans and Steve Schneider",
     title = "Analysing Time Dependent Security Properties in {CSP} Using {PVS}",
     booktitle = "{ESORICS}",
     pages = "222-237",
     year = "2000",
     url = "citeseer.ist.psu.edu/evans00analysing.html" }


 @article{989780,
  author = {Roberto Gorrieri and Fabio Martinelli},
  title = {A simple framework for real-time cryptographic protocol analysis with compositional proof rules},
  journal = {Sci. Comput. Program.},
  volume = {50},
  number = {1-3},
  year = {2004},
  issn = {0167-6423},
  pages = {23--49},
  doi = {http://dx.doi.org/10.1016/j.scico.2004.01.001},
  publisher = {Elsevier North-Holland, Inc.},
  address = {Amsterdam, The Netherlands, The Netherlands},
  }


 @inproceedings{lowe97casper,
     author = "Lowe",
     title = "Casper: {A} Compiler for the Analysis of Security Protocols",
     booktitle = "{PCSFW}: Proceedings of The 10th Computer Security Foundations Workshop",
     publisher = "IEEE Computer Society Press",
     year = "1997",
     url = "citeseer.ist.psu.edu/lowe98casper.html" }

 @MISC{corin-2005-,
   author = {R. Corin and S. Etalle and P.~H. Hartel and A. Mader},
   title = {Timed Analysis of Security Protocols},
   url = {http://www.citebase.org/abstract?id=oai:arXiv.org:cs/0503036},
   year = {2005}
 }



@InProceedings{cckllps06d,
  author    = {Ran Canetti and Ling Cheung and Dilsun Kaynar and Moses
          Liskov and Nancy Lynch and Olivier Pereira and Roberto
          Segala},
  title     = {Task-Structured {Probabilistic I/O Automata}},
  booktitle = {Proceedings of the 8th International Workshop on Discrete Event Systems -- WODES'2006},
  year      = {2006},
  note      = {IEEE catalog number 06EX1259}
}

@Article{CLSV06,
  author = 	 {L. Cheung and N.A. Lynch and R. Segala and F.W. Vaandrager},
  title = 	 {Switched PIOA: Parallel Composition via Distributed Scheduling},
  journal = 	 {Theoretical Computer Science},
  year = 	 2006,
  note =	 {Special Issue on FMCO 04}
}

@mastersthesis{umeno_thesis:2006,
   author = "Shinya Umeno",
   title =  "Proving safety properties of an aircraft landing protocol using
             timed and untimed {I/O} automata: a case study",
   school=  "Massachusetts Institute of Technology",
   ADDRESS= "Cambridge, MA",
   year   = "2006"
}


@InProceedings{Benor:podc83,
  author = 	 {M.~Ben-Or},
  title = 	 {Another advantage of free choice: Completely asynchronous agreement protocols},
  booktitle = 	 { PODC},
  pages =	 {27--30},
  year =	 1983,
  address =	 {Montreal, Canada},
  month =	 {August}
}


@InProceedings{KNSW:formats04,
  author = 	 {M. Kwiatkowska and G. Norman and J. Sproston and F. Wang},
  title = 	 {Symbolic Model Checking for Probabilistic Timed Automata},
  booktitle = 	 {In Proc. FORMATS/FTRTFT'04},
  pages =	 { 293-308},
  year =	 2004,
  volume =	 3253,
  series =	 {LNCS},
  month =	 {September},
  publisher =	 {Springer-Verlag}
}

@PhdThesis{Che06Phd,
  author = 	 {L. Cheung},
  title = 	 {Reconciling nondeterministic and probabilistic choices},
  school = 	 {ICIS, Radboud University Nijmegen, The Netherlands},
  year = 	 2006
}

@InProceedings{ML:hscc07-full,
  author = 	 {S. Mitra and N. Lynch},
  title = 	 {Trace-based Semantics for Probabilistic Timed I/O  Automata},
  booktitle = 	 {HSCC`07},
  crossref =  {HSCC2007},
  year = 	 {2007},
  series = 	 {LNCS},
  volume = 	 {4416}},
  publisher = {Springer},
  note = 	 {Full version~\url{http://people.csail.mit.edu/~mitras/research/PTIOA06-full.pdf}}
}

@book{ogata97,
 author = {Katsuhiko Ogata},
 title = {Modern control engineering (3rd ed.)},
 year = {1997},
 isbn = {0-13-227307-1},
 publisher = {Prentice-Hall, Inc.},
 address = {Upper Saddle River, NJ, USA},
 }


@misc{TEMPO:012,
title = {Tempo Toolset, Version 0.2.2 Beta},
booktitle = {{V}ero{M}odo {I}nc.},
month = {January},
year = { 2008},
note = {\url{http://www.veromodo.com/tempo/}}
}

@inproceedings{Floyd67,
	author = {Robert Floyd},
	title  ={Assigning meanings to programs},
	year = {1967},
	pages = {19-32},
	booktitle = {Sympyposium on Applied Mathematics. Mathematical Aspects of Computer Science},
	publisher = {American Mathematical Society}
}

@ARTICLE{ML:ENTCS07,
  AUTHOR = {Sayan Mitra and Nancy Lynch},
  TITLE = {Proving approximate implementation relations for Probabilistic  {I/O} Automata.},
  JOURNAL = {Electronic Notes in Theoretical Computer Science},
  VOLUME = 174,
  NUMBER = 8,
  YEAR = 2007,
  PAGES = {71-93},
  EE = {},
	doi = {http://dx.doi.org/10.1016/j.entcs.2006.11.040},
 	publisher = {Elsevier Science Publishers B. V.},
 	address = {Amsterdam, The Netherlands, The Netherlands}
}


@INPROCEEDINGS{ALLMU:memocode06,
  AUTHOR = {Myla Archer and  HongPing Lim and Nancy Lynch and Sayan Mitra and Shinya Umeno},
  TITLE = { Specifying and Proving Properties of Timed {I/O} Automata in the {TIOA} Toolkit },
  BOOKTITLE = {In  Fourth ACM-IEEE International Conference on Formal Methods
and Models for Codesign (MEMOCODE'06)},
  YEAR = 2006,
  PUBLISHER = {IEEE},
  URL = {http://theory.lcs.mit.edu/~mitras/research/memocode06.pdf}
}

@article{Cruz91,
  author    = {Rene L. Cruz},
  title     = {A calculus for network delay, Part I: Network elements in
               isolation.},
  journal   = {IEEE Transactions on Information Theory},
  volume    = {37},
  number    = {1},
  year      = {1991},
  pages     = {114-131}
}

@MANUAL{CoqManualV8,
  AUTHOR = {{The {Coq} Development Team}},
  TITLE = {{The {Coq} Proof Assistant Reference Manual -- Version V8.0}},
  YEAR = 2004,
  MONTH = APR,
  URL = {http://coq.inria.fr},
  NOTE = {\url{http://coq.inria.fr}},
  TOPICS = {team,lri},
  TYPE_PUBLI = {manuel}
}

@Mastersthesis{LimMasters2001,
	author = {Hongping Lim},
	title  ={Translating Timed {I/O} Automata Specifications for Theorem Proving in {PVS}},
	year = {2001},
	month = {February},
	school = {Massachusetts Institute of Technology}
}

@TechReport{Geddes:1981:MUMa,
  author =       "Keith O.~Geddes and Gaston H.~Gonnet and Bruce W.~Char",
  title =        "{Maple} User's Manual",
  number =       "CS-81-25",
  institution =  "Computer Science Department, University of Waterloo",
  address =      "Waterloo, Ontario, Canada",
  edition =      "Second",
  pages =        "40",
  year =         "1981",
  bibdate =      "Sun Oct 12 11:49:31 1997"
}

@Manual{MathlabGroup:1974:MPI,
  author =       "{Mathlab Group}",
  title =        "{MACSYMA} primer: introductory section",
  number =       "",
  institution =  "Massachusetts Institute of Technology, Mathlab Group",
  address =      "Cambridge, MA, USA",
  pages =        "64",
  year =         "1974",
  bibdate =      "Thu Feb 8 08:16:45 MST 1996",
  annote =       "``MACSYMA 150.''",
  keywords =     "MACSYMA (Computer system); Programming (Mathematics).;
                 Time-sharing computer systems."
}

@Book{ContrHandbook96ios,
	author = {A.~R. Teel and T.~T. Georgiou and  L. Praly and E. Sontag},
	title = {The Control Handbook,},
	year = {1996},
	publisher = {{CRC} Press},
	chapter = {Input-Output Stability},
	pages = {895-908}
}


@inproceedings{henzinger96state,
    author = "Thomas A. Henzinger and Peter W. Kopke",
    title = "State Equivalences for Rectangular Hybrid Automata",
    booktitle = "International Conference on Concurrency Theory {(CONCUR`96)}",
    pages = "530-545",
    year = "1996"
}

@proceedings{HSCC2007,
  editor    = {Alberto Bemporad and
               Antonio Bicchi and
               Giorgio C. Buttazzo},
  title     = {Hybrid Systems: Computation and Control, 10th International
               Workshop, HSCC 2007, Pisa, Italy, April 3-5, 2007, Proceedings},
  booktitle = {HSCC},
  publisher = {Springer},
  series    = {LNCS},
  volume    = {4416},
  year      = {2007},
  isbn      = {978-3-540-71492-7},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@inproceedings{LPY:HSCC99,
 author = {Gerardo Lafferriere and George J. Pappas and Sergio Yovine},
 title = {A New Class of Decidable Hybrid Systems},
 booktitle = {HSCC '99: Proceedings of the Second International Workshop on Hybrid Systems},
 year = {1999},
 isbn = {3-540-65734-7},
 pages = {137--151},
 publisher = {Springer-Verlag},
 address = {London, UK},
 }

@Misc{pvswebsite,
	author = {SRI International},
	title  ={The {PVS} Bibliography},
	year = {2006},
	note = {\url{http://pvs.csl.sri.com/papers/pvs-bib/pvs-bib.html}}
}

@Inproceedings{CCK+06Disc,
	author = {Ran Canetti and Ling Cheung and Dilsun Kaynar and Moses Liskov and  Nancy Lynch and Olivier Pereira and Roberto Segala},
	title  ={Time-bounded task-{PIOA}s: a framework for analyzing security protocols.},
	booktitle = {20th International Symposium on Distributed Computing, (DISC 2006)},
	year = {2006},
	pages = {238-253},
	publisher = {Springer},
  series    = {LNCS},
  volume    = {4167}
}


@inproceedings{zhai00stability,
  author = "G. Zhai and B. Hu and K. Yasuda and A. Michel",
  title = "Stability Analysis of Switched Systems with Stable and Unstable Subsystems:
    An Average Dwell Time Approach",
  booktitle = "Proceedings of the 2000 American Control Conference (2000)",
  year = "2000",
  address = "chicago,illinois" }

@article{VCL2006:automatica,
	author = {L. Vu and D. Chatterjee and D. Liberzon},
	title  ={Input-to-state stability of switched systems and switching adaptive control},
	year = {2006},
	journal = {Automatica},
	publisher = {Elsevier}
}

@Proceedings{grandchallenge,
	editor = {J. Misra and G. Morrisett and N. Shankar},
	title  ={Workshop on The Verification Grand Challenge},
	year = {2005},
	address = { SRI International, Menlo Park, CA},
	notes ={\url{http://www.csl.sri.com/users/shankar/VGC05/}}
	}


@Inproceedings{Meg2001,
	author = {Alexandre Megretski},
	title  ={On Automatic Search for Invariants of Hybrid Systems},
	year = {2001},
	pages = {217-223},
	booktitle = {American Control Conference},
	address = {Arlington, VA},
	month = {June}
}


@inproceedings{SankaranarayananSM04,
  author    = {Sriram Sankaranarayanan and Henny Sipma and Zohar Manna},
  title     = {Constructing Invariants for Hybrid Systems},
  booktitle = {HSCC},
  year      = {2004},
  pages     = {539-554},
  crossref  = {HSCC2004}
}

@proceedings{HSCC2004,
  editor    = {Rajeev Alur and George J. Pappas},
  title     = {Hybrid Systems: Computation and Control, 7th International  Workshop, HSCC 2004, Philadelphia, PA, USA, March 25-27, Proceedings},
  booktitle = {HSCC},
  publisher = {Springer},
  series    = {LNCS},
  volume    = {2993},
  year      = {2004},
  isbn      = {3-540-21259-0},
}

@proceedings{HSCC2003,
  editor    = {Oded Maler and Amir Pnueli},
  title     = {Hybrid Systems: Computation and Control, 6th International Workshop, HSCC 2003 Prague, Czech Republic, April 3-5, 2003, Proceedings},
  publisher = {Springer},
  series    = {LNCS},
  volume    = {2623},
  year      = {2003},
  isbn      = {3-540-00913-2}
}

@inproceedings{GrosuM07,
  author    = {Radu Grosu and
               Sayan Mitra and
               Pei Ye and
               Emilia Entcheva and
               I. V. Ramakrishnan and
               Scott A. Smolka},
  title     = {Learning Cycle-Linear Hybrid Automata for Excitable Cells.},
  booktitle = {HSCC},
  year      = {2007},
  pages     = {245-258},
  crossref  = {HSCC2007},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{UmenoL07,
  author    = {Shinya Umeno and Nancy A. Lynch},
  title     = {Safety Verification of an Aircraft Landing Protocol: A Refinement Approach.},
  booktitle = {HSCC 2007},
  year      = {2007},
  pages     = {557-572},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{FanDGL07,
  author    = {Rui Fan and
               Ralph E. Droms and
               Nancy D. Griffeth and
               Nancy A. Lynch},
  title     = {The DHCP Failover Protocol: A Formal Perspective.},
  booktitle = {Formal Techniques for Networked and Distributed Systems
               - FORTE 2007},
  year      = {2007},
  pages     = {211-226},
  ee        = {http://dx.doi.org/10.1007/978-3-540-73196-2_14}
}

@ARTICLE{GPS2006,
  author = {Marc Girault and Guillaume Poupard and Jacques Stern},
  title = {On the Fly Authentication and Signature Schemes Based on Groups of
	Unknown Order},
  journal = {Journal of Cryptology},
  year = {2006},
  volume = {19},
  pages = {463---487},
  number = {4},
  doi = {10.1007/s00145-006-0224-0},
  url = {http://www.springerlink.com/content/7457715h355uu623}
}

@Article{Kantorovich37,
	author = { L. Kantorovich},
	title = {On the transfer of masses},
	year  ={},
	journal = {Doklady Akademii Nauk},
	volume = {37},
	number = {i2},
	pages ={227-229}
}

@Inproceedings{Dhama:06,
	author = {A. Dhama and J. Oehlerking and O. Theel},
	title  ={Verification of orbitally self-stabilizing distributed algorithms using Lyapunov functions and Poincare maps},
	year = {2006},
	pages = {23--30},
	booktitle = {12th Intl. Conf. on Parallel and Distributed Systems ({ICPADS'06})}
}
@Article{Davis83,
	author = {Martin Davis},
	title = {The prehistory and early history of automated deduction},
	year  ={1983},
	journal = {Automated Reasoning},
	volume = {1},
	pages = {1--28},
	editors = {Siekmann and Wrightson},
	PUBLISHER = {Springer},
  ADDRESS = {Berlin, Heidelberg}
}


@inproceedings{vBW01,
 author = {Franck van Breugel and James Worrell},
 title = {An Algorithm for Quantitative Verification of Probabilistic Transition Systems},
 booktitle = {CONCUR '01: Proceedings of the 12th International Conference on Concurrency Theory},
 year = {2001},
 isbn = {3-540-42497-0},
 pages = {336--350},
 publisher = {Springer-Verlag},
 address = {London, UK},
 }



@inproceedings{KN:MFCS96,
 author = {Marta Z. Kwiatkowska and Gethin Norman},
 title = {Probabilistic Metric Semantics for a Simple Language with Recursion},
 booktitle = {MFCS '96: Proceedings of the 21st International Symposium on Mathematical Foundations of Computer Science},
 year = {1996},
 isbn = {3-540-61550-4},
 pages = {419--430},
 publisher = {Springer-Verlag},
 address = {London, UK},
 }


@PhDThesis{Mitra07PhD,
	author = {Sayan Mitra},
	title  ={A Verification Framework for Hybrid Systems},
	year = {2007},
	month = {September},
	school = {Massachusetts Institute of Technology},
	address = {Cambridge, MA 02139},
	url = {Available at \url{http://people.csail.mit.edu/mitras/research/thesis.pdf}}
}


@inproceedings{prencipe01corda,
  author = "G. Prencipe",
  title = "CORDA: Distributed Coordination of a Set of Autonomous Mobile Robots",
  booktitle = "ERSADS",
  pages = "185--190",
  month = "May 2001",
  year = "2001"
  }


@inproceedings{flocchini01pattern,
  author = "P. Flocchini and G. Prencipe and N. Santoro and P. Widmayer",
  title = "Pattern Formation by Autonomous Robots Without Chirality",
  booktitle = "SIROCCO",
  pages = "147--162",
  month = "June",
  year = "2001"
  }

@inproceedings{EfrimaP07,
  author    = {Asaf Efrima and  David Peleg},
  title     = {Distributed Models and Algorithms for Mobile Robot Systems},
  booktitle = {SOFSEM (1)},
  year      = {2007},
  pages     = {70-87},
	address   = {Harrachov, Czech Republic},
	month = {January},
	publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {4362}
  }


@techreport{prencipe00achievable,
    author = "Giuseppe Prencipe",
    title = "Achievable Patterns by an Even Number of Autonomous Mobile Robots",
    number = "TR-00-11",
    month = "17",
    year = "2000",
    url = "citeseer.ist.psu.edu/prencipe00achievable.html" }

    %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
% Concetta: adding the references for the distributed control   %
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

@INPROCEEDINGS{Blondel,
  AUTHOR =       {V.D. Blondel and J.M. Hendrickx and A. Olshevsky and J.N. Tsitsiklis},
  TITLE =        {Convergence in multiagent coordination consensus and flocking},
  BOOKTITLE =    {Proceedings of the Joint forty-fourth IEEE Conference on Decision and Control and European Control Conference},
  YEAR =         {2005},
  pages =        {2996-3000},
}

@ARTICLE{Chatterjee,
  AUTHOR =       {S. Chatterjee and E. Seneta},
  TITLE =        {Towards consensus: some convergence theorems on repeated averaging},
  JOURNAL =      {Journal of Applied Probability},
  YEAR =         {1977},
  volume =       {14},
  number =       {1},
  pages =        {89-97},
}

@ARTICLE{DeGroot,
  AUTHOR =       {M.H. DeGroot},
  TITLE =        {Reaching a consensus},
  JOURNAL =      {Journal of American Statistical Association},
  YEAR =         {1974},
  volume =       {69},
  number =       {345},
  pages =        {116-121},
}


@ARTICLE{Jadbabaie,
  AUTHOR =       {A. Jadbabaie and J. Lin and A.S. Morse},
  TITLE =        {Coordination of groups of mobile autonomous agents using nearest neighbor rules},
  JOURNAL =      {IEEE Transactions on Automatic Control},
  YEAR =         {2003},
  volume =       {48},
  number =       {6},
  pages =        {988-1001},
}

@INPROCEEDINGS{Mehyar,
  AUTHOR =       {M. Mehyar and D.P. Spanos and J. Pongsajapan and S.H. Low and R.M. Murray},
  TITLE =        {Distributed averaging on asynchronous communication networks},
  BOOKTITLE =      {Proceedings of the forty-fourth IEEE Conference on Decision and Control},
  YEAR =         {2005},
  pages =        {7446-7451},
}

@ARTICLE{MurrayOlfati,
  AUTHOR =       {R. Olfati-Saber and J.A. Fax and R.M. Murray},
  TITLE =        {Consensus and Cooperation in Networked Multi-Agent Systems},
  JOURNAL =      {Proceedings of the IEEE},
  YEAR =         {2007},
  volume =       {95},
  number =       {1},
  pages =        {215-233},
  month =        {January},
}



@INPROCEEDINGS{Ren,
  AUTHOR =       {W. Ren and R.W. Beard and E.M. Atkins},
  TITLE =        {A survey of consensus problems in multi-agent coordination},
  BOOKTITLE =      {Proceedings of the 2005 American Control Conference},
  YEAR =         {2005},
  pages =        {1859-1864},
}


@INPROCEEDINGS{Scherber1,
  AUTHOR =       {D. Scherber and H. Papadopoulos},
  TITLE =        {Locally constructed algorithms for distributed computations in ad hoc networks},
  BOOKTITLE =      {Proceedings of the third international symposium on Information Processing on Sensor Networks},
  YEAR =         {2004},
  pages =        {11-19},
}



@PHDTHESIS{TsitsiklisTHESIS,
  AUTHOR =       {J.N. Tsitsiklis},
  TITLE =        {Problems in decentralized decision making and computation},
  SCHOOL =       {Massachusetts Institute on Technology},
  YEAR =         {1984},
}

@ARTICLE{Tsitsiklis,
  AUTHOR =       {J.N. Tsitsiklis and D.P. Bertsekas and M. Athans},
  TITLE =        {Distributed asynchronous deterministic and stocastic gradient optimization algorithms},
  JOURNAL =      {IEEE Transactions on Automatic Control},
  YEAR =         {1986},
  volume =       {31},
  number =       {9},
  pages =        {803-812},
  month =        {September},
}

@ARTICLE{Vicsek,
  AUTHOR =       {T. Vicsek and A. Czirok and E. Ben Jacob and I. Cohen and O. Schochet},
  TITLE =        {Novel type of phase transitions in a system of self-driven particles},
  JOURNAL =      {Physical Review Letters},
  YEAR =         {1995},
  volume =       {75},
  pages =        {1226--1229},
}

%--------------------------------------
%Articles: general on sensor network
%---------------------------------------

@ARTICLE{Alylidiz,
  AUTHOR =       {I. Alylidiz and W. Su and Y. Dankarasubramaniam and E. Cayirci},
  TITLE =        {A survey on sensor networks},
  JOURNAL =      {IEEE Communication Magazine},
  YEAR =         {2002},
  volume =       {40},
  number =       {8},
  pages =        {102-114},
  month =        {August},
}


@INPROCEEDINGS{Govindan,
  AUTHOR =       {C. Intanagonwiwat and R. Govindan and D. Estrin},
  TITLE =        {Directed diffusion: a scalable and robust communication paradigm for sensor network},
  BOOKTITLE =      {Proceedings of the sixth International Conference on Mobile Computing and Networking},
  YEAR =         {2000},
  pages =        {56--67},
}



%-------------------------------------------
% Applications on Sensor Network
%----------------------------------------------
@INPROCEEDINGS{Bauer,
  AUTHOR =       {P. Bauer and M. Sichitiu and R. Istepanian and K. Prematne},
  TITLE =        {The mobile patient: Wireless distributed sensor networks for patient monitoring and care},
  BOOKTITLE =    {Proceedings of the 2000 IEEE EMBS Interantional Conference on Information Technology Applications in Biomedicine},
  YEAR =         {2000},
  pages =        {17-21},
}

@INPROCEEDINGS{Cerpa,
  AUTHOR =       {A. Cerpa and J. Elson and D. Estrin and L. Girod and M. Hamilton and J. Zhao},
  TITLE =        {Habitat monitoring: application driver for wireless communications technology},
  BOOKTITLE =    {Proceedings of the 2001 ACM SIGCOMM Workshop on Data Communications in Latin America and the Caribbean},
  YEAR =         {2001},
  pages =        {20--41},
}

@INPROCEEDINGS{Chaves,
  AUTHOR =       {S. Clavaski and M. Chaves and R. Day and P. Nag and  A. Williams and W. Zhang},
  TITLE =        {Vehicle networks: achieving regular formation},
  BOOKTITLE =    {Proceedings of the American control Conference},
  YEAR =         {2003},
 }

@ARTICLE{Fax,
  AUTHOR =       {J.A. Fax and R.M. Murray},
  TITLE =        {Information flow and cooperative control of vehicle formations},
  JOURNAL =      {IEEE Transactions on Automatic Control},
  YEAR =         {2004},
  volume =       {49},
  pages =        {1465-1476},
}

@ARTICLE{Nelson,
  AUTHOR =       {C. Nelson and D. Fitzgerald},
  TITLE =        {Sensor Fusion Fon intelligent alarm analysis},
  JOURNAL =      {IEEE Transactions on Aerospace and Electronic Systems},
  YEAR =         {1997},
  volume =       {12},
  number =       {9},
  pages =        {18--24},
 }

@ARTICLE{Pham,
  AUTHOR =       {T. Pham and D. Scherber and H. Papadopoulos},
  TITLE =        {Distributed source localization algorithm for acoustic ad hoc sensor networks},
  JOURNAL =      {Sensor Array Multichannel Signal Process Workshop},
  YEAR =         {2004},
  month =        {June},
}

@INPROCEEDINGS{Polastre,
  AUTHOR =       {J. Polastre and R. Szewczyk and D. Culler and J. Anderson},
  TITLE =        {Wireless sensor networks for habitat monitoring},
  BOOKTITLE =    {Proceedings of the first ACM International Workshop on Wireless Sensor Networks and Application},
  YEAR =         {2002},
  pages =        {99--97},
}

@ARTICLE{Qi2,
  AUTHOR =       {Y. Xu and H. Qi and P. Kuruganti},
  TITLE =        {Distributed computing paradigms for collaborative processing in sensor networks},
  JOURNAL =      {IEEE Globecom},
  YEAR =         {2003},
  pages =        {3531-3535},
}

@INPROCEEDINGS{Rodriguez,
  AUTHOR =      {A. Rodriguez-Angeles},
  TITLE =       {Cooperative synchronization of robots via estimated state feedback},
  BOOKTITLE =   {Proceedings of the fourty-second IEEE Conference on Decision and Control},
  YEAR =         {2003},
  pages =        {1514--1519},
}

@ARTICLE{Sohrabi,
  AUTHOR =       {K. Soharabi and J. Gao and V. Ailawadho and G. Pottie},
  TITLE =        {Protocols for self organization of a wireless sensor network},
  JOURNAL =      {IEEE Personal Communication Magazine},
  YEAR =         {2000},
  volume =       {7},
  number =       {5},
  pages =        {16--27},
}

@BOOK{Zhao,
  AUTHOR =       {F. Zhao and L. Guibas},
  TITLE =        {Wireless sensor networks: an information processing approach},
  PUBLISHER =    {Morgan Kaufmann Publishers},
  YEAR =         {2004},
}


@ARTICLE{Zhao2,
  AUTHOR =       {F. Zhao and J. Shin and J. Reich},
  TITLE =        {Information-driven dynamic sensor collaboration},
  JOURNAL =      {IEEE Signal Processing Magazine},
  YEAR =         {2002},
  volume =       {19},
  number =       {2},
  pages =        {61-72},
}


@INPROCEEDINGS{ChandyCharpentier,
  AUTHOR =       {K.M. Chandy and M. Charpentier},
  TITLE =        {Self-similar algorithms for dynamic distributed systems},
  BOOKTITLE =    {Proceedings of the International Conference on Distributed Computing Systems(ICDCS 2007)},
  YEAR =         {2007},
}

@inproceedings{ButlerR04,
  author    = {Zack J. Butler and Daniela Rus},
  title     = {Controlling Mobile Sensors for Monitoring Events with Coverage Constraints},
  booktitle = {ICRA},
  year      = {2004},
  pages     = {1568-1573},
  publisher = {IEEE}
}

@inproceedings{SchwagerMR06,
  author    = {Mac Schwager and James McLurkin and Daniela Rus},
  title     = {Distributed Coverage Control with Sensory Feedback for Networked Robots},
  booktitle = {Robotics: Science and Systems},
  year      = {2006},
  publisher = {The MIT Press},
  month     = {August},
  address	 =  {Philadelphia, Pennsylvania}
}

@inproceedings{Nipkow-Slind-TYPES95,
	author={Tobias Nipkow and Konrad Slind},
	title={{I/O} Automata in {Isabelle/HOL}},
	booktitle={Types for Proofs and Programs},
	editor={P. Dybjer and B. Nordstr\"om and J. Smith},
	publisher={Springer},
	series={LNCS},
	volume={996},
	year={1995},
	pages={101--119}
}

@article{Tsitsiklis:1986,
	author ={John N. Tsitsiklis},
	title={On the stability of asynchronous iterative processes},
	journal ={Theory of Computing Systems},
	publisher={Springer New York},
	Volume={ 20},
	Number={1},
	month={December},
	year={1987},
	Pages={137-153}
	}
	
@inproceedings{coq:TA01,
 	author = {Christine Paulin-Mohring},
 	title = {Modelisation of Timed Automata in {Coq}},
 	booktitle = {TACS '01: Proceedings of the 4th International Symposium on Theoretical Aspects of Computer Software},
 	year = {2001},
 	isbn = {3-540-42736-8},
 	pages = {298--315},
 	publisher = {Springer-Verlag},
 	address = {London, UK},
 }	

@techreport{filli97finite,
  	author = "J. Filli\^atre",
  	title = "Finite Automata Theory in {Coq}: A constructive proof of Kleene's theorem",
	institution ={LIP -ENS},
  	address = "Research Report 97-04, Lyon",
	month = "February",
   	year = "1997"
}

@inproceedings{BulwahnKN07,
  author    = {Lukas Bulwahn and Alexander Krauss and Tobias Nipkow},
  title     = {Finding Lexicographic Orders for Termination Proofs in {Isabelle/HOL}},
  booktitle = {TPHOLs},
  year      = {2007},
  pages     = {38-53},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {4732}
  }

  @BOOK{harrison-thesis,
        author          = "John Harrison",
        title           = "Theorem Proving with the Real Numbers",
        publisher       = "Springer-Verlag",
        year            = 1998}

@inproceedings{PVScontinuity00,
	 author = {Hanne Gottliebsen},
 	title = {Transcendental Functions and Continuity Checking in {PVS}},
 	booktitle = {{TPHOLs '00}: Proceedings of the 13th International Conference on Theorem Proving in Higher Order Logics},
 	year = {2000},
 	isbn = {3-540-67863-8},
 	pages = {197--214},
 	publisher = {Springer-Verlag},
 	address = {London, UK},
 }

 @inproceedings{Rohwedder96,
 author = {Ekkehard Rohwedder and Frank Pfenning},
 title = {Mode and Termination Checking for Higher-Order Logic Programs},
 booktitle = {ESOP '96: Proceedings of the 6th European Symposium on Programming Languages and Systems},
 year = {1996},
 isbn = {3-540-61055-3},
 pages = {296--310},
 publisher = {Springer-Verlag},
 address = {London, UK}
 }

 @article{paulson00mechanizing,
    author = "Lawrence C. Paulson",
    title = "Mechanizing {UNITY} in {Isabelle}",
    journal = "ACM Transactions on Computational Logic",
    volume = "1",
    number = "1",
    pages = "3--32",
    year = "2000",
    url = "citeseer.ist.psu.edu/paulson99mechanizing.html" }


 @misc{PVSNasalibrary,
 	title = {{NASA} Langley {PVS} Library for Topological Spaces},
 	author ={David Lester},
	institution = { {NASA} Langley},
	note = {\url{http://shemesh.larc.nasa.gov/fm/ftp/larc/PVS-library/topology-details.html}}
	}

@article{IOA89,
	title= { An Introduction to {I}nput/{O}utput automata},
	author ={Nancy Lynch and Mark Tuttle},
	journal = {{CWI}-Quarterly},
	volume = 2,
	number = 3,
	pages = {219--246},
	month = {September},
	year = 1989,
	address = {Amsterdam, The Netherlands}
	}	
	
@misc{CMP:pattern08,
	title = {Formations of mobile agents with message loss and delay},
	 author = {K. Mani Chandy and Sayan Mitra and Concetta Pilotto},
	 note = {preprint \url{http://www.ist.caltech.edu/~mitras/research/2008/asynchcoord.pdf}},
	 year = {2007}
	 }
	
@article{DAEM08,
author={M. Archer and H. Lim and N. Lynch and  S. Mitra and S. Umeno},
title={Specifying and Proving Properties of Timed {I/O} Automata Using {T}empo},
journal={Design Automation for Embedded Systems},
year=2008
}	

@article{DLLS:88,
	author={C. Dwork and N. Lynch and L. Stockmeyer},
	title={Consensus in the presence of partial synchrony},
	journal={Journal of the ACM},
	volume={35},
	number={2},
	year={1988},
	pages= {288-323},
	}


@inproceedings{Hendriks:Formats05,
 	author = {Martijn Hendriks},
 	title = { Model Checking the Time to Reach Agreement},
 	booktitle = {Formal Modeling and Analysis of Timed Systems},
 	year = {2005},
	series={LNCS},
 	month = {November},
 	isbn = {},
 	pages = {98-111},
 	publisher = {Springer},
 	address = {}
}	

@inproceedings{MC:TPHOLS08,
 	author = {Sayan Mitra and K. Mani Chandy},
 	title = {A Formalized Theory for Verifying Stability and Convergence of Automata in PVS},
 	booktitle = {In proceedings of {T}heorem {P}roving in {H}igher {O}rder {L}ogics ({TPHOLS}`08)},
 	year = {2008},
 	isbn = {},
 	pages = {},
 	publisher = {LNCS},
 	address = {},
	note = {to appear.}
}	

@inproceedings{Lamport05:CHARME,
  author    = {Leslie Lamport},
  title     = {Real-Time Model Checking Is Really Simple},
  booktitle = {Correct Hardware Design and Verification Methods, 13th IFIP
               WG ({CHARME})},
  year      = {2005},
  pages     = {162-175},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {3725}
}

@inproceedings{bengtsson96uppaal,
    author = "Johan Bengtsson and Kim Guldstrand Larsen and Fredrik Larsson and Paul Pettersson and Wang Yi",
    title = "{UPPAAL} in 1995",
    booktitle = "Tools and Algorithms for Construction and Analysis of Systems ({TACAS})",
    pages = "431-434",
    year = "1996"
}

@inproceedings{PODC08,
  author = {Gregory Chockler and Seth Gilbert and Nancy Lynch},
  title = {Virtual Infrastructure for Collision-Prone Wireless Networks},
  booktitle = {Proceedings of PODC},
  year = {2008},
  note = {To appear.},
}

@INPROCEEDINGS{opodis05,
  author = {Shlomi Dolev and Seth Gilbert and Limor Lahiani and Nancy Lynch and
	Tina Nolte},
  title = {Virtual Stationary Automata for Mobile Networks},
  booktitle = {Proceedings of OPODIS},
  year = {2005},
  location = {Pisa, Italy}
}

@INPROCEEDINGS{Dolev05,
  author = {Shlomi Dolev and Limor Lahiani and Nancy A. Lynch and Tina Nolte},
  title = {Self-stabilizing Mobile Node Location Management and Message Routing},
  booktitle = {Proceedings of the Seventh International Symposium Self-Stabilizing
	Systems},
  year = {2005},
  pages = {960--112}
}

@MastersThesis{MattBrown,
author = {Matthew D. Brown},
title = {Air Traffic Control Using Virtual Stationary Automata},
school = {Massachusetts Institute of Technology},
month = {September},
monthnum = {9},
year = {2007},
}

@inproceedings{NL:SSS07,
  author    = {Tina Nolte and
               Nancy A. Lynch},
  title     = {Self-stabilization and Virtual Node Layer Emulations},
  booktitle = {Proceedings of SSS},
  year      = {2007},
  pages     = {394-408},
}

@inproceedings{NL:ICDCS07,
  author    = {Tina Nolte and
               Nancy A. Lynch},
  title     = {A Virtual Node-Based Tracking Algorithm for Mobile Networks},
  booktitle = {ICDCS},
  year      = {2007},
}

@inproceedings{DefagoK02,
  author = {Xavier D{\'{e}}fago and Akihiko Konagaya},
  title = {Circle Formation for Oblivious Anonymous Mobile Robots with no Common Sense of Orientation},
  booktitle = {Proc. 2nd Int'l Workshop on Principles of Mobile Computing (POMC'02)},
  year = {2002},
  pages = {97--104},
  address = {Toulouse, France},
  month = {October},
  organization = {ACM},
  url = {http://ddsg.jaist.ac.jp/en/pub/DK02.html},
}

@article{DefagoS08,
 author = {Xavier D\'{e}fago and Samia Souissi},
 title = {Non-uniform circle formation algorithm for oblivious mobile robots with convergence toward uniformity},
 journal = {Theor. Comput. Sci.},
 volume = {396},
 number = {1-3},
 year = {2008},
 issn = {0304-3975},
 pages = {97--112},
 doi = {http://dx.doi.org/10.1016/j.tcs.2008.01.050},
 publisher = {Elsevier Science Publishers Ltd.},
 address = {Essex, UK},
 }

@inproceedings{MC:FORMATS08,
  author = {K. Mani Chandy and Sayan Mitra and Concetta Pilotto},
  title = {Convergence Verification: From Shared Memory to Partially Synchronous Systems},
  booktitle = {In proceedings of Formal Modeling and Analysis of Timed Systems ({FORMATS}`08)},
  year = 2008,
  series = {LNCS},
  volume = {5215},
  pages = {217--231},
  publisher = {Springer Verlag},
  url = {http://ist.caltech.edu/~mitras/research/2008/paper8-final.pdf}
}


@article{herman96selfstabilization,
  author = "T. Herman",
  title = "Self-stabilization bibliography: Access guide",
  journal = "Theoretical Computer Science",
  month = "November",
  year = "1996",
  url = "citeseer.ist.psu.edu/herman98selfstabilization.html" }

@PhdThesis{NoltePhd08,
	author = {Tina A. Nolte},
	title = {Virtual Stationary Timed Automata for Mobile Networks},
	school = {Massachusetts Institute of Technology},
	year = {2008},
	OPTkey = {},
	OPTtype = {},
	address = {Cambridge, MA},
	OPTmonth = {},
	note = {In Preparation},
	OPTannote = {}
}

@inproceedings{Prajna04safetyVerification,
    author = {Stephen Prajna and Ali Jadbabaie},
    title = {Safety verification of hybrid systems using barrier certificates},
    booktitle = {In Hybrid Systems: Computation and Control},
    year = {2004},
    pages = {477--492},
    publisher = {Springer}
}

@TechReport{Burdict07Sensing,
  author = 	 {Joel W Burdick and Noel DuToit and Andrew Howard and Christian Looman and Jeremy Ma and Richard M Murray and Tichakorn Wongpiromsarn},
  title = 	 {Sensing, Navigation and Reasoning Technologies for the {DARPA} {U}rban {C}hallenge },
  institution =  {{DARPA} Urban Challenge Final Report},
  year = 	 {2007}
}

@inproceedings{Wongpiromsarn08Distributed,
  author = {Tichakorn Wongpiromsarn and Richard M Murray},
  title = {Distributed Mission and Contingency Management for the {DARPA} Urban Challenge},
  booktitle = {International Workshop on Intelligent Vehicle Control Systems (IVCS)},
  year = {2008}
}

@inproceedings{duToit08Situational,
  author = {Noel E DuToit and Tichakorn Wongpiromsarn and Joel W Burdick and Richard M Murray},
  title = {Situational Reasoning for Road Driving in an Urban Environment},
  booktitle = {International Workshop on Intelligent Vehicle Control Systems (IVCS)},
  year = {2008}
}

@INPROCEEDINGS{Lafferriere99anew,
    author = {Gerardo Lafferriere and George J. Pappas and Sergio Yovine},
    title = {A new class of decidable hybrid systems},
    booktitle = {In Hybrid Systems : Computation and Control},
    year = {1999},
    pages = {137--151},
    publisher = {Springer}
}

@inproceedings{VPVD:HSCC2008,
  author    = {Vladimeros Vladimerou and
               Pavithra Prabhakar and
               Mahesh Viswanathan and
               Geir E. Dullerud},
  title     = {STORMED Hybrid Systems},
  booktitle = {ICALP (2)},
  year      = {2008},
  pages     = {136-147},
  publisher = {Springer},
  series    = {LNCS},
  volume    = {5126},
  year      = {2008},
}

@inproceedings{PVVD:ICALP08,
  author    = {Pavithra Prabhakar and
               Vladimeros Vladimerou and
               Mahesh Viswanathan and
               Geir E. Dullerud},
  title     = {A Decidable Class of Planar Linear Hybrid Systems},
  booktitle = {Hybrid Systems: Computation and Control, 11th International
               Workshop, HSCC 2008, St. Louis, MO, USA, April 22-24, 2008.
               Proceedings},
  year      = {2008},
  pages     = {401-414},
  publisher = {Springer},
  series    = {LNCS},
  volume    = {4981}
}

@inproceedings{WMML:HSCC08full,
  author    = {Tichakorn Wongpiromsarn and
               Sayan Mitra and
               Richard Murray and
               Andrew Lamperski},
  title     = {Periodically Controlled Hybird Systems: Verifying A Controller for An Autonomous Vehicle},
  booktitle = {HSCC},
  year      = {2008},
  note      = {Full version:\url{http://users.crhc.uiuc.edu/mitras/research/2009/alice09-full.pdf}}
}

@book{BPM:Algorithms,
  author = 	 {Saugata Basu and
                  Richard Pollack and
                  Marie-Fran\c{c}oise Roy},
  title = 	 {Algorithms in Real Algebraic Geometry},
  publisher = 	 {Springer-Verlag},
  year = 	 {2003}
}

@inproceedings{Prajna02introducingsostools,
  author = {Stephen Prajna and Antonis Papachristodoulou and Pablo A. Parrilo},
  title = {Introducing {SOSTOOLS}: A general purpose sum of squares programming solver},
  booktitle = {In Proceedings of the 41st {IEEE} Conf. on Decision and Control},
  year = {2002},
  pages = {741--746}
}

@article{Brown:QEPCAD,
 author = {Christopher W. Brown},
 title = {{QEPCAD B}: a program for computing with semi-algebraic sets using {CAD}s},
 journal = {SIGSAM Bull.},
 volume = {37},
 number = {4},
 year = {2003},
 issn = {0163-5824},
 pages = {97--108},
 doi = {http://doi.acm.org/10.1145/968708.968710},
 publisher = {ACM},
 address = {New York, NY, USA},
 }

@article{Scheider93,
 author = {Schneider, Marco},
 title = {Self-stabilization},
 journal = {ACM Comput. Surv.},
 volume = {25},
 number = {1},
 year = {1993},
 issn = {0360-0300},
 pages = {45--67},
 doi = {http://doi.acm.org/10.1145/151254.151256},
 publisher = {ACM},
 address = {New York, NY, USA},
 }

@article{Akyildiz02asurvey,
    author = {Lan F. Akyildiz and Welljan Su and Yogesh Sankarasubramaniam and Erdal Cayirci},
    title = {A Survey on Sensor Networks},
    journal = {IEEE Communications Magazine},
    volume ={40},
    number = {8},
    year ={2002},
    pages ={102--114},
    year = {2002}
}

@article{kivaFORBES,
	author = {Christopher Steiner},
	title = {Bot in the delivery:KIVA Systems},
	journal = {Forbes Magazine},
	year = {2009},
	month = {March},
	note = {\url{http://www.forbes.com/forbes/2009/0316/040_bot_time_saves_nine.html}}
	}
	
	@misc{smart_grid,
	title 	= {\text{U.S.Department of Energy --- Smart Grid} },
	note = {\url{http://www.oe.energy.gov/smartgrid.htm}},
	}
	
	
@article{MLL:TECS08,
 author = {Mitra, Sayan and Liberzon, Daniel and Lynch, Nancy},
 title = {Verifying average dwell time of hybrid systems},
 journal = {ACM Trans. Embed. Comput. Syst.},
 volume = {8},
 number = {1},
 year = {2008},
 issn = {1539-9087},
 pages = {1--37},
 doi = {http://doi.acm.org/10.1145/1457246.1457249},
 publisher = {ACM},
 address = {New York, NY, USA},
 }

@inproceedings{HybridSal08,
 author = {Suman, P. Vijay and Pandya, Paritosh K.},
 title = {Timed and Hybrid Automata in SAL},
 booktitle = {SYNASC '08: Proceedings of the 2008 10th International Symposium on Symbolic and Numeric Algorithms for Scientific Computing},
 year = {2008},
 isbn = {978-0-7695-3523-4},
 pages = {480--486},
 doi = {http://dx.doi.org/10.1109/SYNASC.2008.9},
 publisher = {IEEE Computer Society},
 address = {Washington, DC, USA},
 }

 @article{alur2006counterexample,
  title={{Counterexample-guided predicate abstraction of hybrid systems}},
  author={Alur, R. and Dang, T. and Ivan{\v{c}}i{\'c}, F.},
  journal={Theoretical Computer Science},
  volume={354},
  number={2},
  pages={250--271},
  year={2006},
  publisher={Elsevier}
}

@inproceedings{FehnkerCJK05,
  author    = {Ansgar Fehnker and
               Edmund M. Clarke and
               Sumit Kumar Jha and
               Bruce H. Krogh},
  title     = {Refining Abstractions of Hybrid Systems Using Counterexample
               Fragments},
  booktitle = {HSCC`2005},
  year      = {2005},
  pages     = {242-257},
  ee        = {http://springerlink.metapress.com/openurl.asp?genre=article{\&}issn=0302-9743{\&}volume=3414{\&}spage=242},
  crossref  = {HSCC2005},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@proceedings{HSCC2005,
  editor    = {Manfred Morari and
               Lothar Thiele},
  title     = {Hybrid Systems: Computation and Control, 8th International
               Workshop, HSCC 2005, Zurich, Switzerland, March 9-11, 2005,
               Proceedings},
  booktitle = {HSCC},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {3414},
  year      = {2005},
  isbn      = {3-540-25108-1},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{blondel2000survey,
  title={{A survey of computational complexity results in systems and control}},
  author={Blondel, V.D. and Tsitsiklis, J.N.},
  journal={Automatica-Kidlington},
  volume={36},
  number={9},
  pages={1249--1274},
  year={2000},
  publisher={Citeseer}
}

@article{papadimitriou1986intractable,
  title={{Intractable problems in control theory}},
  author={Papadimitriou, C.H. and Tsitsiklis, J.},
  journal={SIAM Journal on Control and Optimization},
  volume={24},
  number={4},
  pages={639--654},
  year={1986},
  publisher={Citeseer}
}

@book{boyd1991linear,
  title={{Linear controller design: limits of performance}},
  author={Boyd, S.P. and Barratt, C.H.},
  year={1991},
  publisher={Citeseer}
}

@inproceedings{GirardPT08,
  author    = {Antoine Girard and
               Giordano Pola and
               Paulo Tabuada},
  title     = {Approximately Bisimilar Symbolic Models for Incrementally
               Stable Switched Systems},
  booktitle = {HSCC},
  year      = {2008},
  pages     = {201-214},
  ee        = {http://dx.doi.org/10.1007/978-3-540-78929-1_15},
  crossref  = {HSCC2008},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@proceedings{HSCC2008,
  editor    = {Magnus Egerstedt and
               Bud Mishra},
  title     = {Hybrid Systems: Computation and Control, 11th International
               Workshop, HSCC 2008, St. Louis, MO, USA, April 22-24, 2008.
               Proceedings},
  booktitle = {HSCC},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {4981},
  year      = {2008},
  isbn      = {978-3-540-78928-4},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{PolaT08,
 author = {Pola, Giordano and Girard, Antoine and Tabuada, Paulo},
 title = {Approximately bisimilar symbolic models for nonlinear control systems},
 journal = {Automatica},
 volume = {44},
 number = {10},
 year = {2008},
 issn = {0005-1098},
 pages = {2508--2516},
 doi = {http://dx.doi.org/10.1016/j.automatica.2008.02.021},
 publisher = {Pergamon Press, Inc.},
 address = {Tarrytown, NY, USA},
 }

@article{ko1982computational,
  title={{Computational complexity of real functions}},
  author={Ko, K.I. and Friedman, H.},
  journal={Theor. Comput. Sci.},
  volume={20},
  pages={323--352},
  year={1982}
}

@book{blum1997complexity,
  title={{Complexity and real computation}},
  author={Blum, L. and Shub, M. and Cucker, F. and Smale, S.},
  year={1997},
  publisher={Springer Verlag}
}

@inproceedings{FehnkerI04,
  author    = {Ansgar Fehnker and Franjo Ivancic},
  title     = {Benchmarks for Hybrid Systems Verification},
  booktitle = {HSCC},
  year      = {2004},
  pages     = {326-341},
  crossref  = {hybrid2004},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@proceedings{hybrid2004,
  editor    = {Rajeev Alur and George J. Pappas},
  title     = {Hybrid Systems: Computation and Control, 7th International
               Workshop, HSCC 2004, Philadelphia, PA, USA, March 25-27,
               2004, Proceedings},
  booktitle = {HSCC},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {2993},
  year      = {2004},
  isbn      = {3-540-21259-0},
 }

@inproceedings{WMML:HSCC09,
 author = {Wongpiromsarn, Tichakorn and Mitra, Sayan and Murray, Richard M. and Lamperski, Andrew},
 title = {Periodically Controlled Hybrid Systems},
 booktitle = {HSCC '09: Proceedings of the 12th International Conference on Hybrid Systems: Computation and Control},
 year = {2009},
 isbn = {978-3-642-00601-2},
 pages = {396--410},
 location = {San Francisco, CA},
 doi = {http://dx.doi.org/10.1007/978-3-642-00602-9_28},
 publisher = {Springer-Verlag},
 address = {Berlin, Heidelberg},
 }

@MISC{mpt,
  author  = {M. Kvasnica and P. Grieder and M. Baoti\'{c}},
  title   = {{Multi-Parametric Toolbox (MPT)}},
  url     = {http://control.ee.ethz.ch/~mpt/},
  year    = {2004},
}

@MISC{mpt,
  author  = {M. Kvasnica and P. Grieder and M. Baoti\'{c}},
  title   = {{Multi-Parametric Toolbox (MPT)}},
  url     = {http://control.ee.ethz.ch/~mpt/},
  year    = {2004},
}

@inproceedings{clawZ00,
 author = {Arthan, R. and Caseley, P. and O'Halloran, C. and Smith, A.},
 title = {ClawZ: Control Laws in Z},
 booktitle = {ICFEM '00: Proceedings of the 3rd IEEE International Conference on Formal Engineering Methods},
 year = {2000},
 isbn = {0-7695-0822-7},
 pages = {169},
 publisher = {IEEE Computer Society},
 address = {Washington, DC, USA},
 }

@techreport{StateflowSemantics,
     author = "A. Tiwari",
     year = 2002,
     institution = "SRI International",
     title = "Formal semantics and analysis methods for {S}imulink {S}tateflow models",
     note = "{\tt http://www.csl.sri.com/\-$\sim$tiwari/\-stateflow.html}"
}

@MISC{Arthan00clawz:control,
    author = {R. Arthan and P. Caseley and C. O'Halloran and A. Smith and The Proofpower},
    title = {ClawZ: Control laws in Z},
    year = {2000}
}


@inproceedings{MeenakshiBR06,
  author    = {B. Meenakshi and
               Abhishek Bhatnagar and
               Sudeepa Roy},
  title     = {Tool for Translating Simulink Models into Input Language
               of a Model Checker},
  booktitle = {ICFEM},
  year      = {2006},
  pages     = {606-620},
  ee        = {http://dx.doi.org/10.1007/11901433_33},
  crossref  = {DBLP:conf/icfem/2006},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@proceedings{DBLP:conf/icfem/2006,
  editor    = {Zhiming Liu and
               Jifeng He},
  title     = {Formal Methods and Software Engineering, 8th International
               Conference on Formal Engineering Methods, ICFEM 2006, Macao,
               China, November 1-3, 2006, Proceedings},
  booktitle = {ICFEM},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {4260},
  year      = {2006},
  isbn      = {3-540-47460-9},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Kanade09,
 author = {Kanade, Aditya and Alur, Rajeev and Ivan\v{c}i\'{c}, Franjo and Ramesh, S. and Sankaranarayanan, Sriram and Shashidhar, K. C.},
 title = {Generating and Analyzing Symbolic Traces of Simulink/Stateflow Models},
 booktitle = {CAV '09: Proceedings of the 21st International Conference on Computer Aided Verification},
 year = {2009},
 isbn = {978-3-642-02657-7},
 pages = {430--445},
 location = {Grenoble, France},
 doi = {http://dx.doi.org/10.1007/978-3-642-02658-4_33},
 publisher = {Springer-Verlag},
 address = {Berlin, Heidelberg},
 }

 @inproceedings{Tripakis:sim04,
 author = {Scaife, N. and Sofronis, C. and Caspi, P. and Tripakis, S. and Maraninchi, F.},
 title = {Defining and translating a "safe" subset of simulink/stateflow into lustre},
 booktitle = {EMSOFT '04: Proceedings of the 4th ACM international conference on Embedded software},
 year = {2004},
 isbn = {1-58113-860-1},
 pages = {259--268},
 location = {Pisa, Italy},
 doi = {http://doi.acm.org/10.1145/1017753.1017795},
 publisher = {ACM},
 address = {New York, NY, USA},
 }

 @article{koopman2005undergraduate,
  title={{Undergraduate embedded system education at Carnegie Mellon}},
  author={Koopman, P. and Choset, H. and Gandhi, R. and Krogh, B. and Marculescu, D. and Narasimhan, P. and Paul, J.M. and Rajkumar, R. and Siewiorek, D. and Smailagic, A. and others},
  journal={ACM Transactions on Embedded Computing Systems (TECS)},
  volume={4},
  number={3},
  pages={500--528},
  year={2005},
  publisher={ACM New York, NY, USA}
}

@article{sangiovanni2005overview,
  title={{An overview of embedded system design education at berkeley}},
  author={Sangiovanni-Vincentelli, A.L. and Pinto, A.},
  journal={ACM Transactions on Embedded Computing Systems (TECS)},
  volume={4},
  number={3},
  pages={472--499},
  year={2005},
  publisher={ACM New York, NY, USA}
}

@presentation{SeshiaLeeTomlin08,
    author = {Sanjit A. Seshia and Edward A. Lee and Claire Tomlin},
    title = {Teaching Embedded Systems to Berkeley Undergraduates: EECS124 at Berkeley},
    day = {21},
    month = {April},
    year = {2008},
    note = {Presented at the Embedded Systems to Cyber-Physical Systems: a
              Review of the State-of-the-Art and Research
              Needs Workshop, St. Louis, MO.},
    URL = {http://chess.eecs.berkeley.edu/pubs/419.html}
}

@inproceedings{AghaMS:QALP05,
	author = {G.~Agha and J.~ Meseguer and K.~Sen},
	title = {{PMaude}: Rewrite-based specification language for probabilistic object systems},
	booktitle = {In 3rd Workshop on Quantitative Aspects of Programming Languages ({QALP}'05)},
	pages = {},
	year = {2005},
	}

@article{AzizSSB:CL00,
	author = {A.~Aziz and K.~Sanwal and V.~Singhal and R.~Brayton},
	title = {Model-checking continuous-time markov chains},
	journal = {ACM Trans. Comput. Logic},
	volume = {1},
	number = {1},
	pages = {162-170},
	year = {2000}
	}	


@article{chenDong09,
    author = {Chen, Chunqing and Dong, Jin and Sun, Jun},
    citeulike-article-id = {4199845},
    citeulike-linkout-0 = {http://dx.doi.org/10.1007/s00165-009-0108-9},
    citeulike-linkout-1 = {http://www.springerlink.com/content/c77gv23715u2q1pg},
    doi = {10.1007/s00165-009-0108-9},
    journal = {Formal Aspects of Computing},
    posted-at = {2009-03-20 17:30:57},
    title = {A formal framework for modeling and validating Simulink diagrams},
    url = {http://dx.doi.org/10.1007/s00165-009-0108-9}
}

@misc{Simulink08,
	author = {The MathWorks},
	title = {Simulink 7},
	year = {2008},
	month = {March}
	}
	
	
@article{agrawal2004semantic,
  title={{Semantic translation of Simulink/Stateflow models to hybrid automata using graph transformations}},
  author={Agrawal, A. and Simon, G. and Karsai, G.},
  journal={Electronic Notes in Theoretical Computer Science},
  volume={109},
  pages={43--56},
  year={2004},
  publisher={Elsevier}
}	

@inproceedings{kanade2009generating,
  title={{Generating and Analyzing Symbolic Traces of Simulink/Stateflow Models}},
  author={Kanade, A. and Alur, R. and Ivancic, F. and Ramesh, S. and Sankaranarayanan, S. and Shashidhar, KC},
  booktitle={Proceedings of the 21st International Conference on Computer Aided Verification},
  pages={445},
  year={2009},
  publisher={Springer}
}

@article{DBLP:journals/tc/SenG07,
  author    = {Alper Sen and
               Vijay K. Garg},
  title     = {Formal Verification of Simulation Traces Using Computation
               Slicing},
  journal   = {IEEE Trans. Computers},
  volume    = {56},
  number    = {4},
  year      = {2007},
  pages     = {511-527},
  ee        = {http://dx.doi.org/10.1109/TC.2007.1011},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{DBLP:journals/dc/MittalG05,
  author    = {Neeraj Mittal and
               Vijay K. Garg},
  title     = {Techniques and applications of computation slicing},
  journal   = {Distributed Computing},
  volume    = {17},
  number    = {3},
  year      = {2005},
  pages     = {251-277},
  ee        = {http://dx.doi.org/10.1007/s00446-004-0117-0},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}


@inproceedings{JMS:ICDCS2010,
  author = {Taylor Johnson and Sayan Mitra and Karthik Manamcheri},
  title = {Safe and Stabilizing Distributed Cellular Flows},
  booktitle = {Proceedings of IEEE Internaitonal Conference on Distributed Computing Systems (ICDCS 2010)},
  year = {2010},
  pdfurl = {research/2010/cellflows.pdf}
}


@ARTICLE{GLMN:TAAS09,
  author = {Gilbert, Seth and Lynch, Nancy and Mitra, Sayan and Nolte, Tina},
  title = {Self-stabilizing robot formations over unreliable networks},
  journal = {Special Issue on Self-adaptive and Self-organizing Wireless Networking
	Systems of ACM Transactions on Autonomous and Adaptive Systems (TAAS)},
  year = {2009},
  volume = {4},
  pages = {1--29},
  number = {3},
  abstract = {We describe how a set of mobile robots can arrange themselves on any
	specified curve on the plane in the presence of dynamic changes both
	in the underlying ad hoc network and in the set of participating
	robots. Our strategy is for the mobile robots to implement a self-stabilizing
	virtual layer consisting of mobile client nodes, stationary Virtual
	Nodes (VNs), and local broadcast communication. The VNs are associated
	with predetermined regions in the plane and coordinate among themselves
	to distribute the client nodes relatively uniformly among the VNs�
	regions. Each VN directs its local client nodes to align themselves
	on the local portion of the target curve. The resulting motion coordination
	protocol is self-stabilizing, in that each robot can begin the execution
	in any arbitrary state and at any arbitrary location in the plane.
	In addition, self-stabilization ensures that the robots can adapt
	to changes in the desired target formation.},
  address = {New York, NY, USA},
  doi = {http://doi.acm.org/10.1145/1552297.1552300},
  issn = {1556-4665},
  keywords = {Theory and Algorithms},
  pdfurl = {research/2009/GLMN_TAAS09.pdf},
  ppturl = {research/presentations/SSS08.pdf},
  publisher = {ACM},
  url = {http://portal.acm.org/ft_gateway.cfm?id=1552300&type=pdf&coll=ACM&dl=ACM&CFID=5352998&CFTOKEN=75194026}
}

@ARTICLE{JM:JNSA2011,
  author = {Taylor Johnson and Sayan Mitra},
  title = {Safe Flocking in Spite of Actuator Faults using Directional Failure
	Detectors},
  journal = {Journal of Nonlinear Systems and Applications},
  year = {2011},
  volume = {2},
  pages = {73-95},
  number = {1-2},
  abstract = {The safe flocking problem requires a collection of mobile agents to
	(a) converge to and maintain an equi-spaced lattice formation, (b)
	arrive at a destination, and (c) always maintain a minimum safe separation.
	Safe flocking in Euclidean spaces is a well-studied and difficult
	coordination problem. In this paper, we study one-dimensional safe
	flocking in the presence of actuator faults and directional failure
	detectors (DFDs). Actuator faults cause affected agents to move permanently
	with arbitrary velocities, and DFDs detect failures only when actuation
	and required motion are in opposing directions. First, assuming existence
	of a DFD for actuator faults, we present an algorithm for safe flocking.
	Next, we show that certain actuator faults cannot be detected with
	DFDs, while detecting others requires time that grows linearly with
	the number of participating agents. Finally, we show that our DFD
	algorithm achieves the latter bound.},
  owner = {mitras},
  timestamp = {2011.09.14},
  url = {http://dcdis001.watam.org/JNSA/volumes/abstract_pdf/2011v2/v2n1-pdf/11.pdf}
}

@INPROCEEDINGS{KMK:reach:HSCC2011,
  author = {Kyoung-Dae Kim and Sayan Mitra and P. R. Kumar},
  title = {Computing bounded epsilon-Reach Set with finite precision computations
	for a class of linear hybrid automata},
  booktitle = {Proceedings of Hybrid Systems: Computation and Control (HSCC 2011)},
  year = {2011},
  abstract = {In a previous paper we have identified a special class of linear hybrid
	automata, called Deterministic Transversal Linear Hybrid Automata,
	and shown that an epsilon-reach set up to a finite time (i.e., bounded
	epsilon-reach set), can be computed using infiinfinite precision
	calculations. However, given the linearity of the system and the
	consequent presence of matrix exponentials, numerical errors are
	inevitable and this assumption about infinite precision calculations
	is impractical. In this paper we present an algorithm that uses only
	finite precision numerical approximations. We further develop an
	architecture which decouples the fundamental computational steps
	from the runtime adaptation strategies for setting certain parameter
	values.},
  keywords = {Theory and Algorithms},
  owner = {mitras},
  pdfurl = {research/2011/epsilonreach2011.pdf},
  timestamp = {2011.01.12}
}

@inproceedings{DBLP:conf/cav/FrehseGDCRLRGDM11,
  author    = {Goran Frehse and
               Colas Le Guernic and
               Alexandre Donz{\'e} and
               Scott Cotton and
               Rajarshi Ray and
               Olivier Lebeltel and
               Rodolfo Ripado and
               Antoine Girard and
               Thao Dang and
               Oded Maler},
  title     = {SpaceEx: Scalable Verification of Hybrid Systems},
  booktitle = {CAV},
  year      = {2011},
  pages     = {379-395},
  ee        = {http://dx.doi.org/10.1007/978-3-642-22110-1_30},
  crossref  = {DBLP:conf/cav/2011},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@proceedings{DBLP:conf/cav/2011,
  editor    = {Ganesh Gopalakrishnan and
               Shaz Qadeer},
  title     = {Computer Aided Verification - 23rd International Conference,
               CAV 2011, Snowbird, UT, USA, July 14-20, 2011. Proceedings},
  booktitle = {CAV},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {6806},
  year      = {2011},
  isbn      = {978-3-642-22109-5},
  ee        = {http://dx.doi.org/10.1007/978-3-642-22110-1},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@Misc{ZimMit:2012,
	author = {Adam Zimmerman and Syan Mitra},
	title  ={A Programming Environment for Peer-to-Peer Applications over Ad hoc WiFi and Android phones},
	year = {2012},
	notes = {\url{https://wiki.cites.uiuc.edu/wiki/display/MitraResearch/StarL}}
}


@INPROCEEDINGS{DM:HSCC:2012,
  author = {Parasara Sridhar Duggirala and Sayan Mitra},
  title = {Lyapunov Abstractions for Inevitability of Hybrid Systems},
  booktitle = {The 15th International Conference on Hybrid Systems: Computation
	and Control (HSCC 2012), Beijing, China.},
  year = {2012},
  abstract = {A set of states S is said to be inevitable for a hybrid automaton
	A if every behavior of A ultimately reaches S within bounded time.
	Inevitability captures various common liveness properties. In this
	paper, we present an algorithm for verifying inevitability of Linear
	Hybrid Automata (LHA). The algorithm combines (a) Lyapunov function-based
	relational abstractions for the continuous dynamics with (b) automated
	construction of well-founded relations for the loops of the hybrid
	automaton. The algorithm is complete for automata that are symmetric
	with respect to the chosen Lyapunov functions. The algorithm is implemented
	in a prototype tool (LySHA ) which is integrated with a Simulink/Stateflow
	frontend for modeling hybrid systems. The experimental results demonstrate
	the effectiveness of the methodology in verifying inevitability of
	hybrid automata with up to five continuous dimensions and forty locations.},
  keywords = {Theory and Algorithms},
  notes = {To appear},
  owner = {mitras},
  pdfurl = {research/2012/acmhscc2012.pdf},
  timestamp = {2011.10.31}
}

@INPROCEEDINGS{DM:hystab:ICCPS2011,
  author = {Parasara Sridhar Duggirala and Sayan Mitra},
  title = {Abstraction-Refinement for Stability},
  booktitle = {Proceedings of 2nd IEEE/ACM International Conference on Cyber-physical
	systems (ICCPS 2011)},
  year = {2011},
  address = {Chicago, IL},
  month = {April},
  abstract = {The paper presents a counterexample-guided abstraction refinement
	procedure for verifying stability (region stabillity) of CPS modeled
	as hybrid automata. It relies on a characterization of the blocking
	property of hybrid automata in terms of well-foundedness of a relation
	that combines the discrete transitions and continuous trajectories
	and a key assumption about the switching speed of the system in terms
	of average dwell time, but does not require the individual modes
	to be stable. This characterization enables the adaptation of program
	analysis techniques to the domain of hybrid systems. It is shown
	that the procedure is complete for rectangular initialized hybrid
	automata. Several illustrative examples are verified using a prototype
	tool that implements the methodology},
  keywords = {Theory and Algorithms},
  owner = {mitras},
  pdfurl = {research/2011/hybridstab_2011.pdf},
  timestamp = {2011.01.12},
  url = {http://delivery.acm.org/10.1145/2010000/2007427/4361a022.pdf?ip=130.126.141.238&CFID=37805901&CFTOKEN=72113100&__acm__=1316019040_07eefa3c0fe41106a94bc89ba2ae6188}
}

@INPROCEEDINGS{JM:ICCPS:2012,
  author = {Taylor Johnson and Sayan Mitra},
  title = {Parameterized Verification of Distributed Cyber-Physical Systems:An
	Aircraft Landing Protocol Case Study},
  booktitle = {ACM/IEEE Third International Conference on Cyber-Physical Systems,
	April 2012, Beijing, China},
  year = {2012},
  keywords = {Tools and Applications},
  notes = {To Appear},
  owner = {mitras},
  timestamp = {2011.10.31}
}


@INPROCEEDINGS{JM:2012:small,
  author = {Taylor Johnson and Sayan Mitra},
  title = {A Small Model Theorem for Rectangular Hybrid Automata Networks},
  year = {2012},
  abstract = {Rectangular hybrid automata (RHA) are finite state machines with additional
	skewed clocks that are useful for modeling real-time systems. This
	paper is concerned with the uniform verification of safety properties
	of networks with arbitrarily many interacting RHAs. Each automaton
	is equipped with a finite collection of pointers to other automata
	that enables it to read their state. This paper presents a small
	model result for such networks that reduces the verification problem
	for a system with arbitrarily many processes to a system with finitely
	many processes. The result is applied to verify and discover counter-examples
	of inductive invariant properties of distributed protocols, such
	as Fischer's mutual exclusion algorithm, the Small Aircraft Transportation
	System (SATS) protocol, and a one-dimensional flocking protocol.
	We have implemented a prototype tool called PASSEL relying on the
	satisfiability modulo theories (SMT) solver Z3 to check automatically
	key inductive invariants.},
  keywords = {Theory and Algorithms},
  owner = {Sayan Mitras},
  timestamp = {2012.02.29}
}
@article{Fan:2006:GCS:1160297.1160300,
 author = {Fan, Rui and Lynch, Nancy},
 title = {Gradient clock synchronization},
 journal = {Distrib. Comput.},
 issue_date = {March 2006},
 volume = {18},
 number = {4},
 month = mar,
 year = {2006},
 issn = {0178-2770},
 pages = {255--266},
 numpages = {12},
 url = {http://dx.doi.org/10.1007/s00446-005-0135-6},
 doi = {10.1007/s00446-005-0135-6},
 acmid = {1160300},
 publisher = {Springer-Verlag},
 address = {London, UK, UK},
 keywords = {ad-hoc networks, clock synchronization, indistinguishability, lower bounds},
}

@article{Welch:1988:NFA:47709.47710,
 author = {Welch, Jennifer Lindelius and Lynch, Nancy},
 title = {A new fault-tolerant algorithm for clock synchronization},
 journal = {Inf. Comput.},
 issue_date = {April 1988},
 volume = {77},
 number = {1},
 month = apr,
 year = {1988},
 issn = {0890-5401},
 pages = {1--36},
 numpages = {36},
 url = {http://dx.doi.org/10.1016/0890-5401(88)90043-0},
 doi = {10.1016/0890-5401(88)90043-0},
 acmid = {47710},
 publisher = {Academic Press, Inc.},
 address = {Duluth, MN, USA},
}

@inproceedings{Hunter:2011:SMM:2038916.2038944,
 author = {Hunter, Timothy and Moldovan, Teodor and Zaharia, Matei and Merzgui, Samy and Ma, Justin and Franklin, Michael J. and Abbeel, Pieter and Bayen, Alexandre M.},
 title = {Scaling the mobile millennium system in the cloud},
 booktitle = {Proceedings of the 2nd ACM Symposium on Cloud Computing},
 series = {SOCC '11},
 year = {2011},
 isbn = {978-1-4503-0976-9},
 location = {Cascais, Portugal},
 pages = {28:1--28:8},
 articleno = {28},
 numpages = {8},
 url = {http://doi.acm.org/10.1145/2038916.2038944},
 doi = {10.1145/2038916.2038944},
 acmid = {2038944},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Rial:2011:PSM:2046556.2046564,
 author = {Rial, Alfredo and Danezis, George},
 title = {Privacy-preserving smart metering},
 booktitle = {Proceedings of the 10th annual ACM workshop on Privacy in the electronic society},
 series = {WPES '11},
 year = {2011},
 isbn = {978-1-4503-1002-4},
 location = {Chicago, Illinois, USA},
 pages = {49--60},
 numpages = {12},
 url = {http://doi.acm.org/10.1145/2046556.2046564},
 doi = {10.1145/2046556.2046564},
 acmid = {2046564},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {billing, cryptographic protocol, smart metering, verifiable computing},
}

@INPROCEEDINGS{Sen03partialorder,
    author = {Alper Sen and Vijay K. Garg},
    title = {Partial Order Trace Analyzer (POTA) for Distributed Programs},
    booktitle = {In Proceedings of the Third Workshop on Runtime Verification (RV},
    year = {2003},
    publisher = {Elsevier}
}

@inproceedings{DBLP:conf/icdcs/JardJJR94,
  author    = {Claude Jard and
               Thierry J{\'e}ron and
               Guy-Vincent Jourdan and
               Jean-Xavier Rampon},
  title     = {A General Approach to Trace-Checking in Distributed Computing
               Systems},
  booktitle = {ICDCS},
  year      = {1994},
  pages     = {396-403},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{DBLP:conf/cav/FernandezJJV96,
  author    = {Jean-Claude Fernandez and
               Claude Jard and
               Thierry J{\'e}ron and
               C{\'e}sar Viho},
  title     = {Using On-The-Fly Verification Techniques for the Generation
               of test Suites},
  booktitle = {CAV},
  year      = {1996},
  pages     = {348-359},
  ee        = {http://dx.doi.org/10.1007/3-540-61474-5_82},
  crossref  = {DBLP:conf/cav/1996},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@proceedings{DBLP:conf/cav/1996,
  editor    = {Rajeev Alur and
               Thomas A. Henzinger},
  title     = {Computer Aided Verification, 8th International Conference,
               CAV '96, New Brunswick, NJ, USA, July 31 - August 3, 1996,
               Proceedings},
  booktitle = {CAV},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {1102},
  year      = {1996},
  isbn      = {3-540-61474-5},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{DBLP:journals/ijcs/BuckHLM94,
  author    = {Joseph T. Buck and
               Soonhoi Ha and
               Edward A. Lee and
               David G. Messerschmitt},
  title     = {Ptolemy: A Framework for Simulating and Prototyping Heterogenous
               Systems},
  journal   = {Int. Journal in Computer Simulation},
  volume    = {4},
  number    = {2},
  year      = {1994},
  pages     = {0-},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{DBLP:conf/para/Fritzson98,
  author    = {Peter Fritzson},
  title     = {Modelica - A Language for Equation-Based Physical Modeling
               and High Performance Simulation},
  booktitle = {PARA},
  year      = {1998},
  pages     = {149-160},
  ee        = {http://dx.doi.org/10.1007/BFb0095332},
  crossref  = {DBLP:conf/para/1998},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@proceedings{DBLP:conf/para/1998,
  editor    = {Bo K{\aa}gstr{\"o}m and
               Jack Dongarra and
               Erik Elmroth and
               Jerzy Wasniewski},
  title     = {Applied Parallel Computing, Large Scale Scientific and Industrial
               Problems, 4th International Workshop, PARA '98, Ume{\aa},
               Sweden, June 14-17, 1998, Proceedings},
  booktitle = {PARA},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {1541},
  year      = {1998},
  isbn      = {3-540-65414-3},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@book{Johnson:1997:LGP:541144,
 author = {Johnson, Gary W.},
 title = {LabVIEW Graphical Programming: Practical Applications in Instrumentation and Control},
 year = {1997},
 isbn = {007032915X},
 edition = {2nd},
 publisher = {McGraw-Hill School Education Group},
}

@Mastersthesis{MSThesis:Karthik:011,
	author = {Karthik Manamcheri Sukumar  },
	title  ={Translation of Simulink-Stateflow models to hybrid automata},
	year = {2011},
	school = {Electrical and Computer Engineering from the University of Illinois at Urbana-Champaign}
}

@Inproceedings{SM:HSCC2011,
	author = {Karthik Manamcheri Sukumar and Sayan Mitra},
	title  ={A step towards verification and synthesis from Simulink/Stateflow models},
	year = {2011},
	pages = {},
	booktitle = {Tools paper in Hybrid Systems: Computation and Control (HSCC 2011)}
}

@Misc{JGMDE:satellite2012,
	author = {Taylor T. Johnson and Jeremy Green and Sayan Mitra and Rachel Dudley and R. Scott Erwin},
	title  ={Satellite Rendezvous and Conjunction Avoidance: Case Studies in Verification of Nonlinear Hybrid Systems},
	year = {2012},
	published = {In submission}
}



@Inproceedings{HuangM:hscc2012,
	author = {Huang, Zhenqi and Mitra, Sayan},
	title  ={Computing Bounded Reach Sets from Sampled Simulation Traces},
	year = {2012},
	pages = {},
	booktitle = {In The 15th International Conference on Hybrid Systems: Computation and Control (HSCC 2012), Beijing, China.}
}

@article{DBLP:journals/aaecc/Weispfenning01,
  author    = {Volker Weispfenning},
  title     = {Semilinear Motion Planning in REDLOG},
  journal   = {Appl. Algebra Eng. Commun. Comput.},
  volume    = {12},
  number    = {6},
  year      = {2001},
  pages     = {455-475},
  ee        = {http://dx.doi.org/10.1007/s002000100086},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@ARTICLE{Granvilliers06realpaver:an,
    author = {Laurent Granvilliers and Fr\'{e}d\'{e}ric Benhamou},
    title = { RealPaver: An Interval Solver using Constraint Satisfaction Techniques},
    journal = {ACM TRANS. ON MATHEMATICAL SOFTWARE},
    year = {2006},
    volume = {32},
    pages = {138--156}
}

@inproceedings{Julius:2007:RTG:1760804.1760833,
 author = {Julius, A. Agung and Fainekos, Georgios E. and Anand, Madhukar and Lee, Insup and Pappas, George J.},
 title = {Robust test generation and coverage for hybrid systems},
 booktitle = {Proceedings of the 10th international conference on Hybrid systems: computation and control},
 series = {HSCC'07},
 year = {2007},
 isbn = {978-3-540-71492-7},
 location = {Pisa, Italy},
 pages = {329--342},
 numpages = {14},
 url = {http://dl.acm.org/citation.cfm?id=1760804.1760833},
 acmid = {1760833},
 publisher = {Springer-Verlag},
 address = {Berlin, Heidelberg},
}

@inproceedings{DBLP:conf/cav/BruttomessoCFGS08,
  author    = {Roberto Bruttomesso and
               Alessandro Cimatti and
               Anders Franz{\'e}n and
               Alberto Griggio and
               Roberto Sebastiani},
  title     = {The MathSAT 4SMT Solver},
  booktitle = {CAV},
  year      = {2008},
  pages     = {299-303},
  ee        = {http://dx.doi.org/10.1007/978-3-540-70545-1_28},
  crossref  = {DBLP:conf/cav/2008},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@proceedings{DBLP:conf/cav/2008,
  editor    = {Aarti Gupta and
               Sharad Malik},
  title     = {Computer Aided Verification, 20th International Conference,
               CAV 2008, Princeton, NJ, USA, July 7-14, 2008, Proceedings},
  booktitle = {CAV},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {5123},
  year      = {2008},
  isbn      = {978-3-540-70543-7},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{Ishii:2011:ISM:2110239.2110243,
 author = {Ishii, Daisuke and Ueda, Kazunori and Hosobe, Hiroshi},
 title = {An interval-based SAT modulo ODE solver for model checking nonlinear hybrid systems},
 journal = {Int. J. Softw. Tools Technol. Transf.},
 issue_date = {October 2011},
 volume = {13},
 number = {5},
 month = oct,
 year = {2011},
 issn = {1433-2779},
 pages = {449--461},
 numpages = {13},
 url = {http://dx.doi.org/10.1007/s10009-011-0193-y},
 doi = {10.1007/s10009-011-0193-y},
 acmid = {2110243},
 publisher = {Springer-Verlag},
 address = {Berlin, Heidelberg},
 keywords = {Bounded model checking, Interval analysis, Satisfiability modulo theories},
}


@article{DBLP:journals/fmsd/FranzleH07,
  author    = {Martin Fr{\"a}nzle and
               Christian Herde},
  title     = {HySAT: An efficient proof engine for bounded model checking
               of hybrid systems},
  journal   = {Formal Methods in System Design},
  volume    = {30},
  number    = {3},
  year      = {2007},
  pages     = {179-198},
  ee        = {http://dx.doi.org/10.1007/s10703-006-0031-0},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{DBLP:conf/euromicro/CimattiMT11,
  author    = {Alessandro Cimatti and
               Sergio Mover and
               Stefano Tonetta},
  title     = {HyDI: A Language for Symbolic Hybrid Systems with Discrete
               Interaction},
  booktitle = {EUROMICRO-SEAA},
  year      = {2011},
  pages     = {275-278},
  ee        = {http://doi.ieeecomputersociety.org/10.1109/SEAA.2011.49},
  crossref  = {DBLP:conf/euromicro/2011},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@proceedings{DBLP:conf/euromicro/2011,
  title     = {37th EUROMICRO Conference on Software Engineering and Advanced
               Applications, SEAA 2011, Oulu, Finland, August 30 - September
               2, 2011},
  booktitle = {EUROMICRO-SEAA},
  publisher = {IEEE},
  year      = {2011},
  isbn      = {978-1-4577-1027-8},
  ee        = {http://ieeexplore.ieee.org/xpl/mostRecentIssue.jsp?punumber=6068192},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{DBLP:journals/cacm/Lamport78,
  author    = {Leslie Lamport},
  title     = {Time, Clocks, and the Ordering of Events in a Distributed
               System},
  journal   = {Commun. ACM},
  volume    = {21},
  number    = {7},
  year      = {1978},
  pages     = {558-565},
  ee        = {http://doi.acm.org/10.1145/359545.359563},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{DBLP:conf/hybrid/Platzer07,
  author    = {Andr{\'e} Platzer},
  title     = {Differential Logic for Reasoning About Hybrid Systems},
  booktitle = {HSCC},
  year      = {2007},
  pages     = {746-749},
  ee        = {http://dx.doi.org/10.1007/978-3-540-71493-4_75},
  crossref  = {DBLP:conf/hybrid/2007},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@proceedings{DBLP:conf/hybrid/2007,
  editor    = {Alberto Bemporad and
               Antonio Bicchi and
               Giorgio C. Buttazzo},
  title     = {Hybrid Systems: Computation and Control, 10th International
               Workshop, HSCC 2007, Pisa, Italy, April 3-5, 2007, Proceedings},
  booktitle = {HSCC},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {4416},
  year      = {2007},
  isbn      = {978-3-540-71492-7},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Beckman:2008:PT:1390630.1390634,
 author = {Beckman, Nels E. and Nori, Aditya V. and Rajamani, Sriram K. and Simmons, Robert J.},
 title = {Proofs from tests},
 booktitle = {Proceedings of the 2008 international symposium on Software testing and analysis},
 series = {ISSTA '08},
 year = {2008},
 isbn = {978-1-60558-050-0},
 location = {Seattle, WA, USA},
 pages = {3--14},
 numpages = {12},
 url = {http://doi.acm.org/10.1145/1390630.1390634},
 doi = {10.1145/1390630.1390634},
 acmid = {1390634},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {abstraction refinemen, directed testing, software model checking},
}

@inproceedings{DBLP:conf/tacas/GuptaMR09,
  author    = {Ashutosh Gupta and
               Rupak Majumdar and
               Andrey Rybalchenko},
  title     = {From Tests to Proofs},
  booktitle = {TACAS},
  year      = {2009},
  pages     = {262-276},
  ee        = {http://dx.doi.org/10.1007/978-3-642-00768-2_24},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}
@proceedings{DBLP:conf/tacas/2009,
  editor    = {Stefan Kowalewski and
               Anna Philippou},
  title     = {Tools and Algorithms for the Construction and Analysis of
               Systems, 15th International Conference, TACAS 2009, Held
               as Part of the Joint European Conferences on Theory and
               Practice of Software, ETAPS 2009, York, UK, March 22-29,
               2009. Proceedings},
  booktitle = {TACAS},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {5505},
  year      = {2009},
  isbn      = {978-3-642-00767-5},
  ee        = {http://dx.doi.org/10.1007/978-3-642-00768-2},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{dang_facelift,
    author = {T. Dang and O. Maler},
    title = {Reachability analysis via face lifting},
    booktitle = {HSCC},
    publisher = {Springer-Verlag},
    year = {1998}
}


@Article{krogh_computation_tech,
	author = {A. Chutinan and B. H. Krogh},
	title = {Computational techniques for hybrid system verification},
	year  ={2003},
	journal = {IEEE Transactions on Automatic Control},
	page = {64-75},
	volume = {48}
}

@inproceedings{robust_test_gen,
	author = {A. A. Julius and G. E. Fainekos and M. Anand and I. Lee and G. J. Pappas},
	title = {Robust Test Generation and Coverage for Hybrid Systems},
	booktitle = {HSCC},
	year  ={2007},
	crossref  = {hybrid2007},
	pages ={329-342}
}

@proceedings{hybrid2007,
  editor    = {Alberto Bemporad and Antonio Bichi and Giorgio Buttazzo},
  booktitle = {HSCC},
  publisher = {Springer},
  series    = {LNCS},
  volume    = {4416},
  year      = {2007},
 }

@inproceedings{grklib,
    author = {Olivier Bouissou and Matthieu Martel},
    title = {GRKLib: a Guaranteed Runge Kutta Library},
    booktitle = {IMACS},
    year = {2006},
}


@inbook{g_b_in,
	author = {Hassan K. Khalil},
	title = {Nonlinear Systems},
	year = {1992},
	publisher ={Prentice Hall},
	edition = {Third},
	page={651}
}

@inproceedings{falsification_local,
	author = {Houssam Abbas and Georgios Fainekos},
	title = {Linear Hybrid System Falsification through Local Search},
	booktitle={Lecture Notes in Computer Science},
	year = {2011},
}



@inproceedings{staliro-tool-paper,
  author = {Yashwant Annapureddy and Che Liu and Georgios Fainekos and Sriram Sankaranarayanan},
  title = {{S-TaLiRo}: A Tool for Temporal Logic Falsification for Hybrid Systems},
  booktitle = {TACAS},
  year = {2011},
}

@article{Fainekos:2009:RTL:1609208.1609591,
 author = {Fainekos, Georgios E. and Pappas, George J.},
 title = {Robustness of temporal logic specifications for continuous-time signals},
 journal = {TCS},
 volume = {410},
 issue = {42},
 month = {September},
 year = {2009},
 issn = {0304-3975},
 pages = {4262--4291},
 numpages = {30},
 url = {http://dl.acm.org/citation.cfm?id=1609208.1609591},
 doi = {10.1016/j.tcs.2009.06.021},
 acmid = {1609591},
 publisher = {Elsevier Science Publishers Ltd.},
 address = {Essex, UK},
 keywords = {Linear and metric temporal logic, Metric spaces, Robustness, Testing},
}


@Inproceedings{alur_symbolic_trace,
	author = {A. Kanade and R. Alur and F. Ivancic and S. Ramesh and S. Sankaranarayanan and K.C. Shashidhar},
	title  = {Generating and analyzing symbolic traces of Simulink/Stateflow models},
	year = {2009},
	booktitle = {CAV}
}


	@book{Bertsekas:1989:PDC:59912,
 author = {Bertsekas, Dimitri P. and Tsitsiklis, John N.},
 title = {Parallel and distributed computation: numerical methods},
 year = {1989},
 isbn = {0-13-648700-9},
 publisher = {Prentice-Hall, Inc.},
 address = {Upper Saddle River, NJ, USA},
}

@book{Magnusbook2010,
 author = {M. Mesbahi and Magnus Egerstedt},
 title = {Graph-theoretic Methods in Multiagent Networks},
 publisher = {Princeton University Press},
 book = {2010}
}

@inproceedings{DiffPri:Dwork06,
	author = {Cynthia Dwork},
	title = {Differential Privacy},
	booktitle ={AUTOMATA, LANGUAGES AND PROGRAMMING},
	series = {Lecture Notes in Computer Science},
	year = {2006},
	Volume = {4052}
	}
	
	@inproceedings{Dwork:2008:DPS:1791834.1791836,
 author = {Dwork, Cynthia},
 title = {Differential privacy: a survey of results},
 booktitle = {Proceedings of the 5th international conference on Theory and applications of models of computation},
 series = {TAMC'08},
 year = {2008},
 isbn = {3-540-79227-9, 978-3-540-79227-7},
 location = {Xi'an, China},
 pages = {1--19},
 numpages = {19},
 url = {http://dl.acm.org/citation.cfm?id=1791834.1791836},
 acmid = {1791836},
 publisher = {Springer-Verlag},
 address = {Berlin, Heidelberg},
}


@article{DBLP:journals/corr/abs-1111-5228,
  author    = {Emmanuel Abbe and Amir E. Khandani and Andrew W. Lo},
  title     = {Privacy-Preserving Methods for Sharing Financial Risk Exposures},
  journal   = {CoRR},
  volume    = {abs/1111.5228},
  year      = {2011},
  ee        = {http://arxiv.org/abs/1111.5228},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{Xiong:2007:PDP:1275505.1275510,
 author = {Xiong, Li and Chitti, Subramanyam and Liu, Ling},
 title = {Preserving data privacy in outsourcing data aggregation services},
 journal = {ACM Trans. Internet Technol.},
 issue_date = {August 2007},
 volume = {7},
 number = {3},
 month = aug,
 year = {2007},
 issn = {1533-5399},
 articleno = {17},
 url = {http://doi.acm.org/10.1145/1275505.1275510},
 doi = {10.1145/1275505.1275510},
 acmid = {1275510},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {Privacy, classification, confidentiality, outsourcing},
}


@inproceedings{Duan:2010:PPL:1929820.1929839,
 author = {Duan, Yitao and Canny, John and Zhan, Justin},
 title = {P4P: practical large-scale privacy-preserving distributed computation robust against malicious users},
 booktitle = {Proceedings of the 19th USENIX conference on Security},
 series = {USENIX Security'10},
 year = {2010},
 isbn = {888-7-6666-5555-4},
 location = {Washington, DC},
 pages = {14--14},
 numpages = {1},
 url = {http://dl.acm.org/citation.cfm?id=1929820.1929839},
 acmid = {1929839},
 publisher = {USENIX Association},
 address = {Berkeley, CA, USA},
}

@misc{HWMD:csffull,
 author = {Zhenqi Huang and Yu Wang and Sayan Mitra and Geir Dullerud},
 title = {On the Cost of Differential Privacy in Distributed Control Systems},
 year = {2013},
 note = {Full version:  \url{http://users.crhc.illinois.edu/mitras/research/2013/cop_full.pdf}}
 }

@inproceedings{DMVemsoft2013,
  author = {Parasara Sridhar Duggirala and Sayan Mitra and Mahesh Viswanathan},
  title = {Verification of Annotated Models from Executions},
  booktitle = {EMSOFT},
  year = {2013}
}

@inproceedings{Z3DeMoura,
 author = {De Moura, Leonardo and Bj{\o}rner, Nikolaj},
 title = {{Z3}: an efficient {SMT} solver},
 booktitle = {Proceedings of the Theory and practice of software, 14th international conference on Tools and algorithms for the construction and analysis of systems},
 series = {TACAS'08/ETAPS'08},
 year = {2008},
 isbn = {3-540-78799-2, 978-3-540-78799-0},
 location = {Budapest, Hungary},
 pages = {337--340},
 numpages = {4},
 url = {http://dl.acm.org/citation.cfm?id=1792734.1792766},
 acmid = {1792766},
 publisher = {Springer-Verlag},
 address = {Berlin, Heidelberg},
}

@TECHREPORT{SAPA,
  author = {Sally C. Johnson and Gary W. Lohr and Burnell T. McKissick and Nelson M. Guerreiro and Paul Volk},
 title = {Simplified Aircraft-Based Paired Approach: Concept Definition and Initial Analysis},
 number = {NASA/TP-2013-217994},
 institution = {NASA},
 address = {Langley Research Center},
 year = {2013}
}

@TECHREPORT{ALAS,
  author = {Raleigh B. Perry and Michael M. Madden and Wilfredo
               Torres-Pomales and Ricky W. Butler},
 title = {The Simplified Aircraft-Based Paired Approach With the {ALAS} Alerting Algorithm},
 number = {NASA/TM-2013-217804},
 institution = {NASA},
 address = {Langley Research Center},
 year = {2013}
}

@Misc{capd,
author = {},
title = {Computer Assisted Proofs in Dynamic Groups (CAPD)},
note = {\url{http://capd.ii.uj.edu.pl/index.php}}
}

@techreport{vnode2006,
  title={{VNODE-LP}: Validated Solutions for Initial Value Problem for {ODE}s},
  author={Nedialkov, Ned},
  institution ={McMaster University},
  year={2006}
}


@article{wood96,
year={1996},
journal={Journal of Global Optimization},
title={Estimation of the {L}ipschitz constant of a function},
author={Wood, G.R. and Zhang, B.P.},
}

@incollection{breachAD,
year={2010},
booktitle={Computer Aided Verification (CAV)},
title={Breach, A Toolbox for Verification and Parameter Synthesis of Hybrid Systems},
author={Donz{\'e}, Alexandre}
}

@inproceedings{MCFalsification,
  title={Monte-carlo techniques for falsification of temporal properties of non-linear hybrid systems},
  author={Nghiem, T. and Sankaranarayanan, S. and Fainekos, G. and Ivancic, F. and Gupta, A. and Pappas, G.J.},
  booktitle={H.S.C.C},
  year={2010}
}

@inproceedings{DRJqest13,
  author    = {Yi Deng and
               Akshay Rajhans and
               A. Agung Julius},
  title     = {STRONG: A Trajectory-Based Verification Toolbox for Hybrid
               Systems},
  booktitle = {QEST},
  year      = {2013},
  pages     = {165-168},
  ee        = {http://dx.doi.org/10.1007/978-3-642-40196-1_13},
  crossref  = {DBLP:conf/qest/2013},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Manna1987,
 author = {Manna, Z. and Pnueli, A.},
 title = {A Hierarchy of Temporal Properties},
 booktitle = {Proceedings of the Sixth Annual ACM Symposium on Principles of Distributed Computing},
 series = {PODC '87},
 year = {1987},
 isbn = {0-89791-239-X},
 location = {Vancouver, British Columbia, Canada},
 pages = {205--205},
 numpages = {1},
 url = {http://doi.acm.org/10.1145/41840.41857},
 doi = {10.1145/41840.41857},
 acmid = {41857},
 publisher = {ACM},
 address = {New York, NY, USA},
}


@misc{HWMD:csffull,
 author = {Zhenqi Huang and Yu Wang and Sayan Mitra and Geir Dullerud},
 title = {On the Cost of Differential Privacy in Distributed Control Systems},
 year = {2013},
 note = {Full version:  \url{http://users.crhc.illinois.edu/mitras/research/2013/cop_full.pdf}},
 }



@TECHREPORT{SAPA,
  author = {Sally C. Johnson and Gary W. Lohr and Burnell T. McKissick and Nelson M. Guerreiro and Paul Volk},
 title = {Simplified Aircraft-Based Paired Approach: Concept Definition and Initial Analysis},
 number = {NASA/TP-2013-217994},
 institution = {NASA},
 address = {Langley Research Center},
 year = {2013}
}

@TECHREPORT{ALAS,
  author = {Raleigh B. Perry and Michael M. Madden and Wilfredo
               Torres-Pomales and Ricky W. Butler},
 title = {The Simplified Aircraft-Based Paired Approach With the {ALAS} Alerting Algorithm},
 number = {NASA/TM-2013-217804},
 institution = {NASA},
 address = {Langley Research Center},
 year = {2013}
}

@ONLINE{capd,
author = {},
title = {Computer Assisted Proofs in Dynamic Groups (CAPD)},
url = {http://capd.ii.uj.edu.pl/index.php}
}

@techreport{vnode2006,
  title={{VNODE-LP}: Validated Solutions for Initial Value Problem for {ODE}s},
  author={Nedialkov, Ned},
  institution ={McMaster University},
  year={2006}
}

@article{ContractionNonlinear,
 author = {Lohmiller, W. and Slotine, J. J. E.},
 title = {On contraction analysis for non-linear systems},
 journal = {Automatica},
 year = {1998}
}

@article{wood96,
year={1996},
journal={Journal of Global Optimization},
title={Estimation of the {L}ipschitz constant of a function},
author={Wood, G.R. and Zhang, B.P.},
}

@inproceedings{MCFalsification,
  title={Monte-carlo techniques for falsification of temporal properties of non-linear hybrid systems},
  author={Nghiem, T. and Sankaranarayanan, S. and Fainekos, G. and Ivancic, F. and Gupta, A. and Pappas, G.J.},
  booktitle={H.S.C.C},
  year={2010}
}

@inproceedings{DRJqest13,
  author    = {Yi Deng and
               Akshay Rajhans and
               A. Agung Julius},
  title     = {STRONG: A Trajectory-Based Verification Toolbox for Hybrid
               Systems},
  booktitle = {QEST},
  year      = {2013},
  pages     = {165-168},
  ee        = {http://dx.doi.org/10.1007/978-3-642-40196-1_13},
  crossref  = {DBLP:conf/qest/2013},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{Manna1987,
 author = {Manna, Z. and Pnueli, A.},
 title = {A Hierarchy of Temporal Properties},
 booktitle = {Proceedings of the Sixth Annual ACM Symposium on Principles of Distributed Computing},
 series = {PODC '87},
 year = {1987},
 isbn = {0-89791-239-X},
 location = {Vancouver, British Columbia, Canada},
 pages = {205--205},
 numpages = {1},
 url = {http://doi.acm.org/10.1145/41840.41857},
 doi = {10.1145/41840.41857},
 acmid = {41857},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@misc{cesarALAS,
	author = {Cesar Munoz},
	title = {Personal communication},
	year = {2013},
	month = {April}
	}
	
@misc{C2E22013,
  author = {Parasara Sridhar Duggirala and Sayan Mitra and Mahesh Viswanathan},
  title = {The Compute Execute Check Engine (C2E2)},
  notes = {\url{https://publish.illinois.edu/c2e2-tool/}},
	year = {2013}
}	


@mastersthesis{HuangMasters2013,
	author = {Zhenqi Huang},
	title = {On Simulation-Based Verification of Nonlinear Nondeterministic Hybrid Systems},
	school = {University of Illinois at Urbana-Champaign},
	year = {2013}
	}
	
@TECHREPORT{Dutertre06theyices,
    author = {Bruno Dutertre and Leonardo De Moura},
    title = {The yices smt solver},
    institution = {},
    year = {2006}
}	

@inproceedings{CimattiGSS13,
  author    = {Alessandro Cimatti and
               Alberto Griggio and
               Bastiaan Joost Schaafsma and
               Roberto Sebastiani},
  title     = {The MathSAT5 SMT Solver},
  booktitle = {TACAS},
  year      = {2013},
  pages     = {93-107},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@INPROCEEDINGS{ALAS2014,
  author = {Parasara Sridhar Duggirala and Le Wang and Sayan Mitra and Cesar Munoz and Mahesh Viswanathan},
  title = {Temporal Precedence Checking for Switched Models and its Application to a Parallel Landing Protocol},
  booktitle = {2014},
  year = {2014},
  abstract = {We present an algorithm for checking temporal precedence properties of nonlinear switched systems. This class of properties subsume bounded safety and capture requirements about visiting a sequence of predicates within given time intervals.  Our algorithm handles nonlinear predicates that arise from dynamics-based predictions used in alerting protocols for state-of-the-art transportation systems. It is sound and relatively complete for nonlinear switch systems that robustly satisfy the given property. The algorithm is implemented in our Compare Execute Check Engine (C2E2) using validated simulations. As a case study, we consider NASA's Adjacent Landing Alerting System (ALAS), which is an alerting protocol for closely spaced parallel runways.Using our approach, we study the performance of the ALAS protocol with respect to false and missed alerts for different operating conditions such as initial velocities, bankangles, initial longitudinal separation, and runway configurations.},
  notes = {Under review.},
	url = {http://users.crhc.illinois.edu/mitras/research/2014/alas2014.pdf},
  pdfurl = {research/2014/alas2014.pdf},
}

@INPROCEEDINGS{CH:ICCPS2014,
  author = {Hongxu Chen and Sayan Mitra},
  title = {Synthesis and Verification of Motor-Transmission Shift Controller for Electric Vehicles},
  booktitle = {the Proceedings of the International Conference on Cyberphysical Systems 2014},
  year = {2014},
  address = {Berlin, Germany},
  abstract = {Motor transmission-based drive systems are attractive for electric vehicles but, as the motor is directly connected to the transmission shaft which meshes with the gears, controlling gear shifts is challenging. In this paper, we present a methodology for synthesis and verification of open-loop optimal control of the electric motor in a motor-transmission drive system. The key steps in  this methodology are (a) developing a continuous-time model of the trajectory of the sleeve during the meshing process based on appropriate coefficients of restitution, (b) discrete-time controller synthesis for finitely many initial states using model predictive control (MPC) and (c) verification of the synthesized controller for a higher-fidelity continuous time hybrid automaton model. First, we develop a model of the motor-transmission drive system as a continuous-time hybrid automaton (CHA) with uncertain initial states. Next, this model is transformed to a piece-wise affine (PWA) form for solving an optimal control problem using the multi-parametric toolbox. Finally, the delay bound for the synthesized controller is verified  by computing a bounded time over-approximation of the reach set using an existing algorithm for linear deterministic hybrid automata. Our results show that on an average our synthesized controller can shorten the meshing duration by 71.05% and reduce impacts impulse by 85.72% compared to an existing controller and the sleeve can mesh with the gear within a desired time from every initial state.},
  pdfurl = {research/2014/iccps2014.pdf},
}


@INPROCEEDINGS{HM:HSCC2014,
  author = {Zhenqi Huang and Sayan Mitra},
  title = {Proofs from Simulations and Modular Annotations},
  booktitle = {17th International Conference on Hybrid Systems: Computation and
	Control},
  year = {2014},
  month = {April},
  owner = {mitras},
  pdfurl = {research/2014/HM_HSCC2014_draft.pdf},
  timestamp = {2013.12.22}
}


@article{WMLM:TECS2010,
  author = {Tichakorn Wongpiromsarn and Sayan Mitra and Andrew Lamperski and Richard Murray},
  title = {Verification of Periodically Controlled Hybrid Systems: Application to An Autonomous Vehicle},
  journal = {Special Issue of the ACM Transactions on Embedded Computing Systems (TECS)},
  year = {2012},
  volume = {11},
  number = {S2},
  url = {http://dl.acm.org/citation.cfm?id=2331163&CFID=127784079&CFTOKEN=31523745},
  pdfurl = {research/2010/pchaTECS.pdf}
}

@inproceedings{HMG:WPES2012,
  author = {Zhenqi Huang and Sayan Mitra and Geir Dullerud},
  title = {Differentially Private Iterative Synchronous Consensus},
  booktitle = {Proceedings of the Workshop on Differentially Private Iterative Synchronous Consensus in conjunction with the ACM CCS conference 2012},
  publisher = {ACM},
  year = {2012},
  url = {http://arxiv.org/abs/1207.4262},
  pdfurl = {research/2012/WPES2012.pdf}
}

@INPROCEEDINGS{HYMD:HICONS2014,
  author = {Zhenqi Huang and Yu Wang and Sayan Mitra and Geir Dullerud},
  title = {On the Cost of Differential Privacy in Distributed Control Systems},
  booktitle = {The 3rd ACM International Conference on High Confidence Networked
	Systems (HiCoNS) at CPSWeek 2014},
  year = {2014},
  abstract = {Individuals sharing information can improve the cost or performance
	of a distributed control system. But, sharing may also violate privacy.
	We develop a general framework for studying the cost of differential
	privacy in systems where a collection of agents, with coupled dynamics,
	communicate for sensing their shared environment while pursuing individual
	preferences. First, we propose a communication strategy that relies
	on adding carefully chosen random noise to agent states and show
	that it preserves differential privacy. Of course, the higher the
	standard deviation of the noise, the higher the cost of privacy.
	For linear distributed control systems with quadratic cost functions,
	the standard deviation becomes independent of the number agents and
	it decays with the maximum eigenvalue of the dynamics matrix. Furthermore,
	for stable dynamics, the noise to be added is independent of the
	number of agents as well as the time horizon up to which privacy
	is desired. Finally, we show that the cost of $\epsilon$-differential
	privacy up to time $T$, for a stable system with $N$ agents, is upper
	bounded by $O(\frac{T^3}{ N \epsilon^2})$.},
  owner = {mitras},
  pdfurl = {research/2014/HWMD_HICONS2014_draft.pdf},
  timestamp = {2013.12.22}
}

@ARTICLE{HM:ESL2012,
  author = {Zhenqi Huang and Sayan Mitra},
  title = {Trace-based Bounded Verification of Embedded Systems},
  year = {2012},
  abstract = {This paper presents a technique that combine simulations and formal
	analysis for verifying embedded systems. It presents an algorithm
	which takes a simulation trace and a system model as input, and computes
	and overapproximation of the bounded reachable states of any execution
	that may have produced the trace. This enables approximate verification
	of bounded safety properties. Implementation of the algorithm in
	a software tool works with traces and models from Mathworks Simulink/Stateflow.
	Experimental evaluation of the tool in analyzing several benchmark
	systems with linear and nonlinear dynamics, and with upto 10 continuous
	dimensions, hints at the practical applicability of this approach.},
  biburl = {http://users.crhc.illinois.edu/mitras/research.html},
  keywords = {Foundations of Hybrid and Distributed Systems},
  notes = {Under review},
  owner = {mitras},
  timestamp = {2012.04.02}
}

@Misc{Coverity,
  author ="",
  title = {Coverity},
  note = {Website \url{http://www.coverity.com/}}
},

@Misc{GrammaTech,
  author ="",
  title = {GRAMMATECH},
  note = {Website \url{http://www.grammatech.com/}}
},


@Misc{Galois,
  author ="",
  title = {Galois},
  note = {Website \url{http://corp.galois.com/}}
},

@article{DarrenCofer,
  author    = {Steven P. Miller and
               Michael W. Whalen and
               Darren D. Cofer},
  title     = {Software model checking takes off},
  journal   = {Commun. ACM},
  volume    = {53},
  number    = {2},
  year      = {2010},
  pages     = {58-64},
  ee        = {http://doi.acm.org/10.1145/1646353.1646372},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{lusture,
  title={The synchronous data flow programming language LUSTRE},
  author={Halbwachs, Nicholas and Caspi, Paul and Raymond, Pascal and Pilaud, Daniel},
  journal={Proceedings of the IEEE},
  volume={79},
  number={9},
  pages={1305--1320},
  year={1991},
  publisher={IEEE}
}

@inproceedings{nusmv2,
  title={Nusmv 2: An opensource tool for symbolic model checking},
  author={Cimatti, Alessandro and Clarke, Edmund and Giunchiglia, Enrico and Giunchiglia, Fausto and Pistore, Marco and Roveri, Marco and Sebastiani, Roberto and Tacchella, Armando},
  booktitle={Computer Aided Verification},
  pages={359--364},
  year={2002},
  organization={Springer}
}

@Misc{MPolyspace,
  author ="MATLAB",
  title = {Static Analysis with Polyspace Products},
  note = {Website \url{http://www.mathworks.com/products/polyspace/}}
},

@Misc{SDF,
  author ="",
  title = {MATLAB Simulink Design Verifier Toolbox},
  note = {\url{http://www.mathworks.com/products/sldesignverifier/}}
},

@Misc{Reactis,
  author ="Reactis",
  title = {A Tool for Model Based Development and Test Generation},
  note = {url: \url{http://www.reactive-systems.com/}}
},

@Misc{NissanReactis,
  author ="",
  title = {Model Validation with Reactis at NISSAN Group},
  note = {url: \url{http://www.reactive-systems.com/papers/nissan-reactis-user-story.pdf}}
},

@incollection{opensmt,
  title={The openSMT solver},
  author={Bruttomesso, Roberto and Pek, Edgar and Sharygina, Natasha and Tsitovich, Aliaksei},
  booktitle={Tools and Algorithms for the Construction and Analysis of Systems},
  pages={150--153},
  year={2010},
  publisher={Springer}
}

@inproceedings{cvc,
  title={CVC: A cooperating validity checker},
  author={Stump, Aaron and Barrett, Clark W and Dill, David L},
  booktitle={Computer Aided Verification},
  pages={500--504},
  year={2002},
  organization={Springer}
}

@article{fenton1998vortex,
  title={Vortex dynamics in three-dimensional continuous myocardium with fiber rotation: filament instability and fibrillation},
  author={Fenton, Flavio and Karma, Alain},
  journal={Chaos: An Interdisciplinary Journal of Nonlinear Science},
  volume={8},
  number={1},
  pages={20--47},
  year={1998},
  publisher={American Institute of Physics}
}

@article{axmacher2006memory,
  title={Memory formation by neuronal synchronization},
  author={Axmacher, Nikolai and Mormann, Florian and Fern{\'a}ndez, Guillen and Elger, Christian E and Fell, Juergen},
  journal={Brain research reviews},
  volume={52},
  number={1},
  pages={170--182},
  year={2006},
  publisher={Elsevier}
}

@article{blaabjerg2006overview,
  title={Overview of control and grid synchronization for distributed power generation systems},
  author={Blaabjerg, Frede and Teodorescu, Remus and Liserre, Marco and Timbus, Adrian V},
  journal={Industrial Electronics, IEEE Transactions on},
  volume={53},
  number={5},
  pages={1398--1409},
  year={2006},
  publisher={IEEE}
}

@article{boccaletti2006complex,
  title={Complex networks: Structure and dynamics},
  author={Boccaletti, Stefano and Latora, Vito and Moreno, Yamir and Chavez, Martin and Hwang, D-U},
  journal={Physics reports},
  volume={424},
  number={4},
  pages={175--308},
  year={2006},
  publisher={Elsevier}
}

@book{barrat2008dynamical,
  title={Dynamical processes on complex networks},
  author={Barrat, Alain and Barthelemy, Marc and Vespignani, Alessandro},
  volume={1},
  year={2008},
  publisher={Cambridge University Press Cambridge}
}

@article{pastor2001epidemic,
  title={Epidemic dynamics and endemic states in complex networks},
  author={Pastor-Satorras, Romualdo and Vespignani, Alessandro},
  journal={Physical Review E},
  volume={63},
  number={6},
  pages={066117},
  year={2001},
  publisher={APS}
}

@article{strogatz2001exploring,
  title={Exploring complex networks},
  author={Strogatz, Steven H},
  journal={Nature},
  volume={410},
  number={6825},
  pages={268--276},
  year={2001},
  publisher={Nature Publishing Group}
}

@inproceedings{pappas1997next,
  title={A next generation architecture for air traffic management systems},
  author={Pappas, George and Tomlin, Claire and Lygeros, John and Godbole, Datta and Sastry, Shankar},
  booktitle={Decision and Control, 1997., Proceedings of the 36th IEEE Conference on},
  volume={3},
  pages={2405--2410},
  year={1997},
  organization={IEEE}
}

@article{fenton2009termination,
  title={Termination of atrial fibrillation using pulsed low-energy far-field stimulation},
  author={Fenton, Flavio H and Luther, Stefan and Cherry, Elizabeth M and Otani, Niels F and Krinsky, Valentin and Pumir, Alain and Bodenschatz, Eberhard and Gilmour, Robert F},
  journal={Circulation},
  volume={120},
  number={6},
  pages={467--476},
  year={2009},
  publisher={Am Heart Assoc}
}

@inproceedings{grosu2011cardiac,
  title={From cardiac cells to genetic regulatory networks},
  author={Grosu, Radu and Batt, Gregory and Fenton, Flavio H and Glimm, James and Le Guernic, Colas and Smolka, Scott A and Bartocci, Ezio},
  booktitle={Computer Aided Verification},
  pages={396--411},
  year={2011},
  organization={Springer}
}

@book{Clarke:2000:MC:332656,
 author = {Clarke,Jr., Edmund M. and Grumberg, Orna and Peled, Doron A.},
 title = {Model Checking},
 year = {1999},
 isbn = {0-262-03270-8},
 publisher = {MIT Press},
 address = {Cambridge, MA, USA},
}

@article{GJM93,
title = {A stochastic network model of the interaction between cardiac rhythm and artificial pacemaker},
journal = {{IEEE} {T}ransactions on {B}iomedical {E}ngineering },
volume = {40},
number = {9},
pages = {845--858},
year = {1993},
author = {Saul Greenhut and Janice Jenkins and Robert MacDonald }
}

@article{MurthyBFGGCSG13,
  author    = {Abhishek Murthy and
               Ezio Bartocci and
               Flavio H. Fenton and
               James Glimm and
               Richard A. Gray and
               Elizabeth Cherry and
               Scott A. Smolka and
               Radu Grosu},
  title     = {Curvature Analysis of Cardiac Excitation Wavefronts},
  journal   = {IEEE/ACM Trans. Comput. Biology Bioinform.},
  volume    = {10},
  number    = {2},
  year      = {2013},
  pages     = {323-336},
  ee        = {http://dx.doi.org/10.1109/TCBB.2012.125},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@inproceedings{GrosuCAV11,
  author    = {Radu Grosu and
               Gr{\'e}gory Batt and
               Flavio H. Fenton and
               James Glimm and
               Colas Le Guernic and
               Scott A. Smolka and
               Ezio Bartocci},
  title     = {From Cardiac Cells to Genetic Regulatory Networks},
  booktitle = {CAV},
  year      = {2011},
  pages     = {396-411},
  ee        = {http://dx.doi.org/10.1007/978-3-642-22110-1_31},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

@article{GGF09,
title = {Model-Based Control of Cardiac Alternans on a Ring},
journal = {Physical Review E 80},
year = {2009},
author = {Alejandro Garz\'on and Roman O. Grigoriev and Flavio H. Fenton}
}

@article{GWSG84,
title = {Electrical Alternans and Period-Doubling Bifurcations},
journal = {Computers in Cardiology},
pages = {167--170},
year = {1984},
author = {M. R. Guevara and G. Ward and A. Shrier and L. Glass}
}

@inproceedings{FentonLow2009,
	author = {Flavo H. Fenton},
	title ={Low-energy Far-field Defibrillation},
	booktitle = {SIAM Conference on Applications of Dynamical Systems},
	address = {Snowbird, Utah},
	month = {May},
	year = {2009}
	}
	
	@inproceedings{CH:ICCPS2014,
  author = {Hongxu Chen and Sayan Mitra},
  title = {Synthesis and Verification of Motor-Transmission Shift Controller for Electric Vehicles},
  booktitle = {the Proceedings of the International Conference on Cyberphysical Systems 2014},
	address = {Berlin, Germany},
  year = {2014}
}

@ARTICLE{Sontag95onthe,
    author = {Eduardo D. Sontag},
    title = {On the Input-to-State Stability Property},
    journal = {Systems \& Control Letters},
    year = {1995},
    volume = {24},
    pages = {351--359}
}

@article{Shannon:2001:MTC:584091.584093,
	author = {Shannon, C. E.},
	title = {A Mathematical Theory of Communication},
	journal = {SIGMOBILE Mob. Comput. Commun. Rev.},
	issue_date = {January 2001},
	volume = {5},
	number = {1},
	month = jan,
	year = {2001},
	issn = {1559-1662},
	pages = {3--55},
	numpages = {53},
	url = {http://doi.acm.org/10.1145/584091.584093},
	doi = {10.1145/584091.584093},
	acmid = {584093},
	publisher = {ACM},
	address = {New York, NY, USA},
}


@inproceedings{JinDKUB14,
	author    = {Xiaoqing Jin and
	Jyotirmoy V. Deshmukh and
	James Kapinski and
	Koichi Ueda and
	Kenneth R. Butts},
	title     = {Powertrain control verification benchmark},
	booktitle = {17th International Conference on Hybrid Systems: Computation and Control
	(part of {CPS} Week), HSCC'14, Berlin, Germany, April 15-17, 2014},
	pages     = {253--262},
	year      = {2014},
	publisher = {{ACM}},
}



@inproceedings{LM015:HSCC,
  author    = {Daniel Liberzon and
               Sayan Mitra},
  title     = {Entropy and Minimal Data Rates for State Estimation and Model Detection},
  booktitle = {HSCC 2016,
               2016},
  pages     = {247--256},
  publisher = {{ACM}},
  year      = {2016},
}


@inproceedings{Flow*,
	author    = {Xin Chen and
	Erika {\'{A}}brah{\'{a}}m and
	Sriram Sankaranarayanan},
	title     = {Flow*: An Analyzer for Non-linear Hybrid Systems},
	booktitle = {Computer Aided Verification - 25th International Conference, {CAV}
	2013, Saint Petersburg, Russia, July 13-19, 2013. Proceedings},
	pages     = {258--263},
	year      = {2013},
}

@inproceedings{DuggiralaMVP15,
	author    = {Parasara Sridhar Duggirala and
	Sayan Mitra and
	Mahesh Viswanathan and
	Matthew Potok},
	title     = {{C2E2:} {A} Verification Tool for Stateflow Models},
	booktitle = {Tools and Algorithms for the Construction and Analysis of Systems
	- 21st International Conference, {TACAS} 2015, Held as Part of the
	European Joint Conferences on Theory and Practice of Software, {ETAPS}
	2015, London, UK, April 11-18, 2015. Proceedings},
	pages     = {68--82},
	year      = {2015}
}

@article{TopcuPS08,
	author    = {Ufuk Topcu and
	Andrew K. Packard and
	Peter Seiler},
	title     = {Local stability analysis using simulations and sum-of-squares programming},
	journal   = {Automatica},
	volume    = {44},
	number    = {10},
	pages     = {2669--2675},
	year      = {2008},
	url       = {http://dx.doi.org/10.1016/j.automatica.2008.03.010},
	doi       = {10.1016/j.automatica.2008.03.010},
	timestamp = {Sat, 11 Jul 2009 22:40:17 +0200},
	biburl    = {http://dblp.uni-trier.de/rec/bib/journals/automatica/TopcuPS08},
	bibsource = {dblp computer science bibliography, http://dblp.org}
}


@inproceedings{KapinskiDJIB15,
	author    = {James Kapinski and
	Jyotirmoy V. Deshmukh and
	Xiaoqing Jin and
	Hisahiro Ito and
	Kenneth R. Butts},
	title     = {Simulation-guided approaches for verification of automotive powertrain
	control systems},
	booktitle = {American Control Conference, {ACC} 2015, Chicago, IL, USA, July 1-3,
	2015},
	pages     = {4086--4095},
	year      = {2015},
}

@inproceedings{KapinskiDSA14,
	author    = {James Kapinski and
	Jyotirmoy V. Deshmukh and
	Sriram Sankaranarayanan and
	Nikos Arechiga},
	title     = {Simulation-guided lyapunov analysis for hybrid dynamical systems},
	booktitle = {17th International Conference on Hybrid Systems: Computation and Control
	(part of {CPS} Week), HSCC'14, Berlin, Germany, April 15-17, 2014},
	pages     = {133--142},
	year      = {2014},
}

@inproceedings{DuggiralaFM015,
	author    = {Parasara Sridhar Duggirala and
	Chuchu Fan and
	Sayan Mitra and
	Mahesh Viswanathan},
	title     = {Meeting a Powertrain Verification Challenge},
	booktitle = {Computer Aided Verification - 27th International Conference, {CAV}
	2015, San Francisco, CA, USA, July 18-24, 2015, Proceedings, Part
	{I}},
	pages     = {536--543},
	year      = {2015},
}

@inproceedings{FanDMV:ARCH15,
	author = {Chuchu Fan and Parasara Sridhar Duggirala and  Sayan Mitra and Mahesh Viswanathan},
	title = {Progress on Powertrain Verification Challenge with C2E2*},
	booktitle = {Applied Verification for Continuous and Hybrid Systems (ARCH) 2015, CPSWeek 2015, Seattle, WA.
	},
}


@article{HuangFMMK15,
	author    = {Zhenqi Huang and
	Chuchu Fan and
	Alexandru Mereacre and
	Sayan Mitra and
	Marta Z. Kwiatkowska},
	title     = {Simulation-Based Verification of Cardiac Pacemakers With Guaranteed
	Coverage},
	journal   = {{IEEE} Design {\&} Test},
	volume    = {32},
	number    = {5},
	pages     = {27--34},
	year      = {2015}
}

@techreport{CAN10,
	author = {Bosch},
	title = {{CAN} Specification version 1.0},
	year = {1991},
	address = {Robert Bosch Gmbh, Postfach 50, Stuttgart},
	month = {September}
}

@inproceedings{FanKM:HSCC2016,
	author    = {Chuchu Fan and James Kapinski and
	Sayan Mitra and Xiaoqing Jin},
	title     = {Reach set over-approximation for parametric nonlinear systems},
	booktitle = {Submitted for review},
	year      = {2015},
	month = {November}
}


book{anderson-moore-filtering,
	author="B.D.O. Anderson and J. B. Moore",
	title="Optimal Filtering",
	publisher="Prentice Hall",
	address="New Jersey",
	year=1979,
	note="Reprinted by Dover in 2005"
}

@inproceedings{gondi2009monitoring,
	title={Monitoring the full range of $\omega$-regular properties of stochastic systems},
	author={Gondi, Kalpana and Patel, Yogeshkumar and Sistla, A Prasad},
	booktitle={Verification, Model Checking, and Abstract Interpretation},
	pages={105--119},
	year={2009},
	organization={Springer}
}

@article{chadha2009expressiveness,
	title={On the expressiveness and complexity of randomization in finite state monitors},
	author={Chadha, Rohit and Sistla, A Prasad and Viswanathan, Mahesh},
	journal={Journal of the ACM (JACM)},
	volume={56},
	number={5},
	pages={26},
	year={2009},
	publisher={ACM}
}

@inproceedings{chen2007mop,
	title={Mop: an efficient and generic runtime verification framework},
	author={Chen, Feng and Ro{\c{s}}u, Grigore},
	booktitle={ACM SIGPLAN Notices},
	volume={42},
	number={10},
	pages={569--588},
	year={2007},
	organization={ACM}
}

@inproceedings{havelund2001java,
	title={Java PathExplorer--A runtime verification tool},
	author={Havelund, Klaus and Rosu, Grigore},
	booktitle={The 6th International Symposium on Artificial Intelligence, Robotics and Automation in Space: A New Space Odyssey},
	pages={18--21},
	year={2001}
}

@inproceedings{stoller2012runtime,
	title={Runtime verification with state estimation},
	author={Stoller, Scott D and Bartocci, Ezio and Seyster, Justin and Grosu, Radu and Havelund, Klaus and Smolka, Scott A and Zadok, Erez},
	booktitle={Runtime Verification},
	pages={193--207},
	year={2012},
	organization={Springer}
}

@inproceedings{kim1999formally,
	title={Formally specified monitoring of temporal properties},
	author={Kim, Moonjoo and Viswanathan, Mahesh and Ben-Abdallah, Hanene and Kannan, Sampath and Lee, Insup and Sokolsky, Oleg},
	booktitle={Real-Time Systems, 1999. Proceedings of the 11th Euromicro Conference on},
	pages={114--122},
	year={1999},
	organization={IEEE}
}

@article{girard2007approximate,
	title={Approximate bisimulation relations for constrained linear systems},
	author={Girard, Antoine and Pappas, George J},
	journal={Automatica},
	volume={43},
	number={8},
	pages={1307--1317},
	year={2007},
	publisher={Elsevier}
}

@article{tabuada2008approximate,
	title={An approximate simulation approach to symbolic control},
	author={Tabuada, Paulo},
	journal={Automatic Control, IEEE Transactions on},
	volume={53},
	number={6},
	pages={1406--1418},
	year={2008},
	publisher={IEEE}
}

@inproceedings{chen2013flow,
	title={Flow*: An analyzer for non-linear hybrid systems},
	author={Chen, Xin and {\'A}brah{\'a}m, Erika and Sankaranarayanan, Sriram},
	booktitle={Computer Aided Verification},
	pages={258--263},
	year={2013},
	organization={Springer}
}

@inproceedings{dang2008sensitive,
	title={Sensitive state-space exploration},
	author={Dang, Thao and Donz{\'e}, Alexandre and Maler, Oded and Shalev, Noa},
	booktitle={CDC 2008. 47th IEEE Conference on},
	pages={4049--4054},
	year={2008},
	organization={IEEE}
}

@incollection{donze2007systematic,
	title={Systematic simulation using sensitivity analysis},
	author={Donz{\'e}, Alexandre and Maler, Oded},
	booktitle={HSCC},
	pages={174--189},
	year={2007},
	publisher={Springer}
}

@incollection{julius2009trajectory,
	title={Trajectory based verification using local finite-time invariance},
	author={Julius, A Agung and Pappas, George J},
	booktitle={Hybrid Systems: Computation and Control},
	pages={223--236},
	year={2009},
	publisher={Springer}
}


@inproceedings{JhaR:Lipschitz,
  title={Testing the Lipschitz property over product distributions with applications to data privacy},
  author={Dixit, Kashyap and Jha, Madhav and Raskhodnikova, Sofya and Thakurta, Abhradeep},
  booktitle={Theory of Cryptography: 10th Theory of Cryptography Conference, TCC 2013, Tokyo, Japan, March 3-6, 2013. Proceedings},
  pages={418--436},
  year={2013},
  organization={Springer}
}



@article{LM:TAC18,
  author    = {Daniel Liberzon and
               Sayan Mitra},
  title     = {Entropy and Minimal Bit Rates for State Estimation and Model Detection},
  journal   = {{IEEE} Trans. Automatic Control},
  volume    = {63},
  number    = {10},
  pages     = {3330--3344},
  year      = {2018},
  url       = {https://doi.org/10.1109/TAC.2017.2782478},
  doi       = {10.1109/TAC.2017.2782478},
  timestamp = {Fri, 02 Nov 2018 15:38:56 +0100},
  biburl    = {https://dblp.org/rec/journals/tac/LiberzonM18.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@article{MaidensA15,
  author    = {John N. Maidens and
               Murat Arcak},
  title     = {Reachability Analysis of Nonlinear Systems Using Matrix Measures},
  journal   = {{IEEE} Trans. Automat. Contr.},
  volume    = {60},
  number    = {1},
  pages     = {265--270},
  year      = {2015},
  url       = {https://doi.org/10.1109/TAC.2014.2325635},
  doi       = {10.1109/TAC.2014.2325635},
  timestamp = {Tue, 27 Feb 2018 09:16:37 +0100},
  biburl    = {https://dblp.org/rec/journals/tac/MaidensA15.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}


@article{FanKJM18,
  author    = {Chuchu Fan and
               James Kapinski and
               Xiaoqing Jin and
               Sayan Mitra},
  title     = {Simulation-Driven Reachability Using Matrix Measures},
  journal   = {{ACM} Trans. Embedded Comput. Syst.},
  volume    = {17},
  number    = {1},
  pages     = {21:1--21:28},
  year      = {2018},
  url       = {https://doi.org/10.1145/3126685},
  doi       = {10.1145/3126685},
  timestamp = {Tue, 06 Nov 2018 12:51:54 +0100},
  biburl    = {https://dblp.org/rec/journals/tecs/FanKJM18.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{FanQM017,
  author    = {Chuchu Fan and
               Bolun Qi and
               Sayan Mitra and
               Mahesh Viswanathan},
  title     = {{DryVR}: Data-Driven Verification and Compositional Reasoning for Automotive
               Systems},
  booktitle = {Computer Aided Verification, {CAV}
               2017, Heidelberg, Germany, July 24-28, 2017},
  pages     = {441--461},
  year      = {2017},
  biburl    = {https://dblp.org/rec/conf/cav/FanQM017.bib},
}

@misc{Nesterov:1998:lectures,
	title ={Introductory Lectures on Convex Programming:Volume I: Basic course},
	author = {Yurii Nesterov}, 
	year = {1998},
	month = {July}
} 

@article{munos2014bandits,
  title={From bandits to Monte-Carlo Tree Search: The optimistic principle applied to optimization and planning},
  author={Munos, R{\'e}mi and others},
  journal={Foundations and Trends{\textregistered} in Machine Learning},
  volume={7},
  number={1},
  pages={1--129},
  year={2014},
  publisher={Now Publishers, Inc.}
}

@inproceedings{GEM:2020:ITSC, 
	title={Online monitoring for safe pedestrian-vehicle interactions}, 
	author ={Peter Du and Zhe Huang and Tianqi Liu and Ke Xu and Qichao Gao and Hussein Sibai and Katherine Rose Driggs-Campbell and Sayan Mitra},
	booktitle = {Under review\url{https://arxiv.org/abs/1910.05599}}, 
	year ={2020}
	}

@inproceedings{CyPhyHouse:2020,
	title = {{CyPhyHouse}: A programming, simulation, and deployment toolchain for heterogeneous distributed coordination}, 
	author = {Ritwika Ghosh and Joao P. Jansch-Porto, Chiao Hsieh and Amelia Gosse and Minghao Jiang and Hebron Taylor and Peter Du and Sayan Mitra and Geir Dullerud}, 
	booktitle ={IEEE ICRA}, 
	year = {2020}, 
	address = {Paris, France},
	publisher = {IEEE}
	}

@article{amos2018differentiable,
  title={Differentiable {MPC} for end-to-end planning and control},
  author={Amos, Brandon and Jimenez, Ivan and Sacks, Jacob and Boots, Byron and Kolter, J Zico},
  journal={Advances in Neural Information Processing Systems},
  volume={31},
  year={2018}
}

@software{jax2018github,
  author = {James Bradbury and Roy Frostig and Peter Hawkins and Matthew James Johnson and Chris Leary and Dougal Maclaurin and George Necula and Adam Paszke and Jake Vander{P}las and Skye Wanderman-{M}ilne and Qiao Zhang},
  title = {{JAX}: composable transformations of {P}ython+{N}um{P}y programs},
  url = {http://github.com/google/jax},
  version = {0.3.13},
  year = {2018},
}

@software{cppad,
  author = {Brad Bell},
  title = {{CppAD}: A Package for Differentiation of C++ Algorithms},
  url = {https://github.com/coin-or/CppAD},
  year = {2023},
}

@article{paszke2017automatic,
  title={Automatic differentiation in {PyTorch}},
  author={Paszke, Adam and Gross, Sam and Chintala, Soumith and Chanan, Gregory and Yang, Edward and DeVito, Zachary and Lin, Zeming and Desmaison, Alban and Antiga, Luca and Lerer, Adam},
  year={2017}
}

@misc{tensorflow2015-whitepaper,
title={ {TensorFlow}: Large-Scale Machine Learning on Heterogeneous Systems},
url={https://www.tensorflow.org/},
note={Software available from tensorflow.org},
author={
    Mart\'{i}n~Abadi and
    Ashish~Agarwal and
    Paul~Barham and
    Eugene~Brevdo and
    Zhifeng~Chen and
    Craig~Citro and
    Greg~S.~Corrado and
    Andy~Davis and
    Jeffrey~Dean and
    Matthieu~Devin and
    Sanjay~Ghemawat and
    Ian~Goodfellow and
    Andrew~Harp and
    Geoffrey~Irving and
    Michael~Isard and
    Yangqing Jia and
    Rafal~Jozefowicz and
    Lukasz~Kaiser and
    Manjunath~Kudlur and
    Josh~Levenberg and
    Dandelion~Man\'{e} and
    Rajat~Monga and
    Sherry~Moore and
    Derek~Murray and
    Chris~Olah and
    Mike~Schuster and
    Jonathon~Shlens and
    Benoit~Steiner and
    Ilya~Sutskever and
    Kunal~Talwar and
    Paul~Tucker and
    Vincent~Vanhoucke and
    Vijay~Vasudevan and
    Fernanda~Vi\'{e}gas and
    Oriol~Vinyals and
    Pete~Warden and
    Martin~Wattenberg and
    Martin~Wicke and
    Yuan~Yu and
    Xiaoqiang~Zheng},
  year={2015},
}

@misc{autodiff,
    author = {Leal, Allan M. M.},
    title = {autodiff, a modern, fast and expressive {C++} library for automatic differentiation},
    url = {https://autodiff.github.io},
    howpublished = {\texttt{https://autodiff.github.io}},
    year = {2018}
}

@article{Neuromancer2022,
  title={{NeuroMANCER: Neural Modules with Adaptive Nonlinear Constraints and Efficient Regularizations}},
  author={Tuor, Aaron and Drgona, Jan and Skomski, Mia and Koch, James and Chen, Zhao and Dernbach, Stefan and Legaard, Christian Møldrup and Vrabie, Draguna},
  Url= {https://github.com/pnnl/neuromancer}, 
  year={2022}
}

@inproceedings{mastalli20crocoddyl,
  author={Mastalli, Carlos and Budhiraja, Rohan and Merkt, Wolfgang and Saurel, Guilhem and Hammoud, Bilal
  and Naveau, Maximilien and Carpentier, Justin and Righetti, Ludovic and Vijayakumar, Sethu and Mansard, Nicolas},
  title={{Crocoddyl: An efficient and versatile framework for multi-contact optimal control}},
  booktitle = {IEEE International Conference on Robotics and Automation (ICRA)},
  year={2020}
}

@inproceedings{NEURIPS2020_5a7b238b,
 author = {Jin, Wanxin and Wang, Zhaoran and Yang, Zhuoran and Mou, Shaoshuai},
 booktitle = {Advances in Neural Information Processing Systems},
 editor = {H. Larochelle and M. Ranzato and R. Hadsell and M.F. Balcan and H. Lin},
 pages = {7979--7992},
 publisher = {Curran Associates, Inc.},
 title = {{Pontryagin} Differentiable Programming: An End-to-End Learning and Control Framework},
 url = {https://proceedings.neurips.cc/paper/2020/file/5a7b238ba0f6502e5d6be14424b20ded-Paper.pdf},
 volume = {33},
 year = {2020}
}

@INPROCEEDINGS{9981382,
  author={Dawson, Charles and Fan, Chuchu},
  booktitle={2022 IEEE/RSJ International Conference on Intelligent Robots and Systems (IROS)}, 
  title={Robust Counterexample-guided Optimization for Planning from Differentiable Temporal Logic}, 
  year={2022},
  volume={},
  number={},
  pages={7205-7212},
  doi={10.1109/IROS47612.2022.9981382}
}

@article{jin2021safe,
title={Safe {Pontryagin} differentiable programming},
author={Jin, Wanxin and Mou, Shaoshuai and Pappas, George J},
journal={Advances in Neural Information Processing Systems},
volume={34},
pages={16034--16050},
year={2021}
}

@book{thuerey2021pbdl,
  title={Physics-based Deep Learning},
  author={Nils Thuerey and Philipp Holl and Maximilian Mueller and Patrick Schnell and Felix Trost and Kiwon Um},
  url={https://physicsbaseddeeplearning.org},
  year={2021},
  publisher={WWW}
}

@techreport{feiler2006architecture,
  added-at = {2016-01-12T16:56:31.000+0100},
  address = {Pittsburgh, PA},
  author = {Feiler, Peter and Gluch, David and Hudak, John},
  biburl = {https://www.bibsonomy.org/bibtex/2863f806c0510e7206302d0d9e84d2598/jil},
  institution = {Software Engineering Institute, Carnegie Mellon University},
  interhash = {0d155ae57a69bfb21c9ca02d79a84dca},
  intrahash = {863f806c0510e7206302d0d9e84d2598},
  keywords = {aadl architecture description introduction language primer se},
  number = {CMU/SEI-2006-TN-011},
  timestamp = {2016-01-12T16:56:31.000+0100},
  title = {The Architecture Analysis \& Design Language ({AADL}): An Introduction},
  url = {http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=7879},
  year = 2006
}


@article{abs-2112-05124,
  author    = {Anthony Simeonov and
               Yilun Du and
               Andrea Tagliasacchi and
               Joshua B. Tenenbaum and
               Alberto Rodriguez and
               Pulkit Agrawal and
               Vincent Sitzmann},
  title     = {Neural Descriptor Fields: {SE(3)}-equivariant object representations
               for manipulation},
  journal   = {CoRR},
  volume    = {abs/2112.05124},
  year      = {2021},
  url       = {https://arxiv.org/abs/2112.05124},
  eprinttype = {arXiv},
  eprint    = {2112.05124},
  timestamp = {Fri, 28 Jan 2022 23:51:15 +0100},
  biburl    = {https://dblp.org/rec/journals/corr/abs-2112-05124.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}


@InProceedings{pmlr-v164-chen22a,
  title = 	 {A System for General In-Hand Object Re-Orientation},
  author =       {Chen, Tao and Xu, Jie and Agrawal, Pulkit},
  booktitle = 	 {Proceedings of the 5th Conference on Robot Learning},
  pages = 	 {297--307},
  year = 	 {2022},
  editor = 	 {Faust, Aleksandra and Hsu, David and Neumann, Gerhard},
  volume = 	 {164},
  series = 	 {Proceedings of Machine Learning Research},
  month = 	 {08--11 Nov},
  publisher =    {PMLR},
  pdf = 	 {https://proceedings.mlr.press/v164/chen22a/chen22a.pdf},
  url = 	 {https://proceedings.mlr.press/v164/chen22a.html},
  abstract = 	 {In-hand object reorientation has been a challenging problem in robotics due to high dimensional actuation space and the frequent change in contact state between the fingers and the objects. We present a simple model-free framework that can learn to reorient objects with both the hand facing upwards and downwards. We demonstrate the capability of reorienting over $2000$ geometrically different objects in both cases. The learned policies show strong zero-shot transfer performance on new objects. We provide evidence that these policies are amenable to real-world operation by distilling them to use observations easily available in the real world. The videos of the learned policies are available at: https://taochenshh.github.io/projects/in-hand-reorientation.}
}


@inproceedings{MillerM-CDC22,
  author    = {Kristina Miller and
               Sayan Mitra},
  title     = {Multi-agent motion planning using differential games with lexicographic
               preferences},
  booktitle = {61st {IEEE} Conference on Decision and Control, {CDC} 2022, Cancun,
               Mexico, December 6-9, 2022},
  pages     = {5751--5756},
  year      = {2022},
  url       = {https://doi.org/10.1109/CDC51059.2022.9992957},
  doi       = {10.1109/CDC51059.2022.9992957},
  timestamp = {Wed, 18 Jan 2023 15:37:50 +0100},
  biburl    = {https://dblp.org/rec/conf/cdc/MillerM22.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{MillerFM-ADHS21,
  author    = {Kristina Miller and
               Chuchu Fan and
               Sayan Mitra},
  title     = {Planning in Dynamic and Partially Unknown Environments},
  booktitle = {7th {IFAC} Conference on Analysis and Design of Hybrid Systems, {ADHS}
               2021, Brussels, Belgium, July 7-9, 2021},
  pages     = {169--174},
  year      = {2021},
  url       = {https://doi.org/10.1016/j.ifacol.2021.08.493},
  doi       = {10.1016/j.ifacol.2021.08.493},
  timestamp = {Tue, 14 Sep 2021 14:29:07 +0200},
  biburl    = {https://dblp.org/rec/conf/adhs/MillerFM21.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{FanMM20-CAV,
  author    = {Chuchu Fan and
               Kristina Miller and
               Sayan Mitra},
  title     = {Fast and Guaranteed Safe Controller Synthesis for Nonlinear Vehicle
               Models},
  booktitle = {Computer Aided Verification - 32nd International Conference, {CAV}
               2020, Los Angeles, CA, USA, July 21-24, 2020, Proceedings, Part {I}},
  pages     = {629--652},
  year      = {2020},
  url       = {https://doi.org/10.1007/978-3-030-53288-8\_31},
  doi       = {10.1007/978-3-030-53288-8\_31},
  timestamp = {Wed, 12 Aug 2020 15:15:42 +0200},
  biburl    = {https://dblp.org/rec/conf/cav/FanMM20.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@article{FanQMNMV22,
  author    = {Chuchu Fan and
               Zengyi Qin and
               Umang Mathur and
               Qiang Ning and
               Sayan Mitra and
               Mahesh Viswanathan},
  title     = {Controller Synthesis for Linear System With Reach-Avoid Specifications},
  journal   = {{IEEE} Trans. Autom. Control.},
  volume    = {67},
  number    = {4},
  pages     = {1713--1727},
  year      = {2022},
  url       = {https://doi.org/10.1109/TAC.2021.3069723},
  doi       = {10.1109/TAC.2021.3069723},
  timestamp = {Wed, 27 Apr 2022 20:11:47 +0200},
  biburl    = {https://dblp.org/rec/journals/tac/FanQMNMV22.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}


@inproceedings{SibaiLM21-CAV,
  author    = {Hussein Sibai and
               Yangge Li and
               Sayan Mitra},
  title     = {{SceneChecker}: Boosting Scenario Verification Using Symmetry Abstractions},
  booktitle = {Computer Aided Verification - 33rd International Conference, {CAV}
               2021, Virtual Event, July 20-23, 2021, Proceedings, Part {I}},
  pages     = {580--594},
  year      = {2021},
  url       = {https://doi.org/10.1007/978-3-030-81685-8\_28},
  doi       = {10.1007/978-3-030-81685-8\_28},
  timestamp = {Thu, 29 Jul 2021 13:41:57 +0200},
  biburl    = {https://dblp.org/rec/conf/cav/SibaiLM21.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{arya2022automatic,
    title={Automatic Differentiation of Programs with Discrete Randomness},
    author={Gaurav Arya and Moritz Schauer and Frank Sch{\"a}fer and Christopher Vincent Rackauckas},
    booktitle={Thirty-Sixth Conference on Neural Information Processing Systems},
    year={2022},
    doi = {10.48550/arXiv.2210.08572}
}

@incollection{gordon2014probabilistic,
  title={Probabilistic programming},
  author={Gordon, Andrew D and Henzinger, Thomas A and Nori, Aditya V and Rajamani, Sriram K},
  booktitle={Future of Software Engineering Proceedings},
  pages={167--181},
  year={2014}
}

@article{prekopa2003probabilistic,
  title={Probabilistic programming},
  author={Pr{\'e}kopa, Andr{\'a}s},
  journal={Handbooks in operations research and management science},
  volume={10},
  pages={267--351},
  year={2003},
  publisher={Elsevier}
}

@article{carpenter2017stan,
  title={Stan: A probabilistic programming language},
  author={Carpenter, Bob and Gelman, Andrew and Hoffman, Matthew D and Lee, Daniel and Goodrich, Ben and Betancourt, Michael and Brubaker, Marcus and Guo, Jiqiang and Li, Peter and Riddell, Allen},
  journal={Journal of statistical software},
  volume={76},
  number={1},
  year={2017},
  publisher={Columbia Univ., New York, NY (United States); Harvard Univ., Cambridge, MA~…}
}

@article{tran2017deep,
  title={Deep probabilistic programming},
  author={Tran, Dustin and Hoffman, Matthew D and Saurous, Rif A and Brevdo, Eugene and Murphy, Kevin and Blei, David M},
  journal={arXiv preprint arXiv:1701.03757},
  year={2017}
}

@article{phan2019composable,
  title={Composable effects for flexible and accelerated probabilistic programming in {NumPyro}},
  author={Phan, Du and Pradhan, Neeraj and Jankowiak, Martin},
  journal={arXiv preprint arXiv:1912.11554},
  year={2019}
}

@techreport{dingledine2004tor,
  title={Tor: The second-generation onion router},
  author={Dingledine, Roger and Mathewson, Nick and Syverson, Paul},
  year={2004},
  institution={Naval Research Lab Washington DC}
}

@book{kahneman2011thinking,
  abstract = {In this work the author, a recipient of the Nobel Prize in Economic Sciences for his seminal work in psychology that challenged the rational model of judgment and decision making, has brought together his many years of research and thinking in one book. He explains the two systems that drive the way we think. System 1 is fast, intuitive, and emotional; System 2 is slower, more deliberative, and more logical. He exposes the extraordinary capabilities, and also the faults and biases, of fast thinking, and reveals the pervasive influence of intuitive impressions on our thoughts and behavior. He reveals where we can and cannot trust our intuitions and how we can tap into the benefits of slow thinking. He offers practical and enlightening insights into how choices are made in both our business and our personal lives, and how we can use different techniques to guard against the mental glitches that often get us into trouble. This author's work has transformed cognitive psychology and launched the new fields of behavioral economics and happiness studies. In this book, he takes us on a tour of the mind and explains the two systems that drive the way we think and the way we make choices.},
  added-at = {2013-01-10T15:41:11.000+0100},
  address = {New York},
  author = {Kahneman, Daniel},
  biburl = {https://www.bibsonomy.org/bibtex/2f322864169411fd5914f3fa5488e288c/schmidt2},
  description = {Thinking, Fast and Slow: Amazon.de: Daniel Kahneman: Englische Bücher},
  interhash = {a1400a299a00de009ec8eda73e6289af},
  intrahash = {f322864169411fd5914f3fa5488e288c},
  isbn = {9780374275631 0374275637},
  keywords = {bib books psychology thinking toread},
  publisher = {Farrar, Straus and Giroux},
  refid = {706020998},
  timestamp = {2013-01-10T15:41:11.000+0100},
  title = {Thinking, fast and slow},
  url = {https://www.amazon.de/Thinking-Fast-Slow-Daniel-Kahneman/dp/0374275637/ref=wl_it_dp_o_pdT1_nS_nC?ie=UTF8&colid=151193SNGKJT9&coliid=I3OCESLZCVDFL7},
  year = 2011
}

@inproceedings{deng2009imagenet,
  title={Imagenet: A large-scale hierarchical image database},
  author={Deng, Jia and Dong, Wei and Socher, Richard and Li, Li-Jia and Li, Kai and Fei-Fei, Li},
  booktitle={2009 IEEE conference on computer vision and pattern recognition},
  pages={248--255},
  year={2009},
  organization={Ieee}
}

@article{hinton2012dropout,
  author = {Hinton, Geoffrey E. and Srivastava, Nitish and Krizhevsky, Alex and Sutskever, Ilya and Salakhutdinov, Ruslan R.},
  journal = {CoRR},
  keywords = {dropout machine-learning neural-networks regularization},
  note = {cite arxiv:1207.0580},
  title = {Improving neural networks by preventing co-adaptation of feature detectors},
  url = {http://arxiv.org/abs/1207.0580},
  volume = {abs/1207.0580},
  year = 2012
}


@article{EMSOFT22-Hsieh,
  author       = {Chiao Hsieh and
                  Yangge Li and
                  Dawei Sun and
                  Keyur Joshi and
                  Sasa Misailovic and
                  Sayan Mitra},
  title        = {Verifying Controllers With Vision-Based Perception Using Safe Approximate Abstractions},
  journal      = {{IEEE} Trans. Comput. Aided Des. Integr. Circuits Syst.},
  volume       = {41},
  number       = {11},
  pages        = {4205--4216},
  year         = {2022},
  url          = {https://doi.org/10.1109/TCAD.2022.3197508},
  doi          = {10.1109/TCAD.2022.3197508},
  timestamp    = {Sun, 13 Nov 2022 17:52:49 +0100},
  biburl       = {https://dblp.org/rec/journals/tcad/HsiehLSJMM22.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@Book{fb:23-ctds,
author = {F. Bullo},
title = {Contraction Theory for Dynamical Systems},
year = 2023,
edition = {{1.1}},
publisher = {Kindle Direct Publishing},
isbn = {979-8836646806},
pdf = {http://motion.me.ucsb.edu/book-ctds} 
}

@inproceedings{tran2020cav_tool,
author = "Hoang-Dung Tran and Xiaodong Yang and Diego Manzanas Lopez and Patrick Musau and Luan Viet Nguyen and Weiming Xiang and Stanley Bak and Taylor T. Johnson",
title = "{NNV}: The Neural Network Verification Tool for Deep Neural Networks and Learning-Enabled Cyber-Physical Systems",
booktitle = "32nd International Conference on Computer-Aided Verification (CAV)",
year = "2020",
month = "July",
pdf = "research/tran2020cav_tool.pdf",
doi = "10.1007/978-3-030-53288-8_1",
}

@article{zhang2018efficient,
  title={Efficient Neural Network Robustness Certification with General Activation Functions},
  author={Zhang, Huan and Weng, Tsui-Wei and Chen, Pin-Yu and Hsieh, Cho-Jui and Daniel, Luca},
  journal={Advances in Neural Information Processing Systems},
  volume={31},
  pages={4939--4948},
  year={2018},
  url={https://arxiv.org/pdf/1811.00866.pdf}
}

@inproceedings{SinghGPV19,
  author       = {Gagandeep Singh and
                  Timon Gehr and
                  Markus P{\"{u}}schel and
                  Martin T. Vechev},
  title        = {Boosting Robustness Certification of Neural Networks},
  booktitle    = {7th International Conference on Learning Representations, {ICLR} 2019,
                  New Orleans, LA, USA, May 6-9, 2019},
  year         = {2019},
  url          = {https://openreview.net/forum?id=HJgeEh09KQ},
  timestamp    = {Thu, 21 Jan 2021 17:36:45 +0100},
  biburl       = {https://dblp.org/rec/conf/iclr/SinghGPV19.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{LaneNet,
author = {Neven, Davy and Brabandere, Bert De and Georgoulis, Stamatios and Proesmans, Marc and Gool, Luc Van},
title = {Towards End-to-End Lane Detection: An Instance Segmentation Approach},
year = {2018},
publisher = {IEEE Press},
url = {https://doi.org/10.1109/IVS.2018.8500547},
doi = {10.1109/IVS.2018.8500547},
abstract = {Modern cars are incorporating an increasing number of driver assist features, among which automatic lane keeping. The latter allows the car to properly position itself within the road lanes, which is also crucial for any subsequent lane departure or trajectory planning decision in fully autonomous cars. Traditional lane detection methods rely on a combination of highly-specialized, hand-crafted features and heuristics, usually followed by post-processing techniques, that are computationally expensive and prone to scalability due to road scene variations. More recent approaches leverage deep learning models, trained for pixel-wise lane segmentation, even when no markings are present in the image due to their big receptive field. Despite their advantages, these methods are limited to detecting a pre-defined, fixed number of lanes, e.g. ego-lanes, and can not cope with lane changes. In this paper, we go beyond the aforementioned limitations and propose to cast the lane detection problem as an instance segmentation problem - in which each lane forms its own instance - that can be trained end-to-end. To parametrize the segmented lane instances before fitting the lane, we further propose to apply a learned perspective transformation, conditioned on the image, in contrast to a fixed ”bird’s-eye view” transformation. By doing so, we ensure a lane fitting which is robust against road plane changes, unlike existing approaches that rely on a fixed, predefined transformation. In summary, we propose a fast lane detection algorithm, running at 50 fps, which can handle a variable number of lanes and cope with lane changes. We verify our method on the tuSimple dataset and achieve competitive results.},
booktitle = {2018 IEEE Intelligent Vehicles Symposium (IV)},
pages = {286–291},
numpages = {6},
location = {Changshu, Suzhou, China}
}

@InProceedings{Unet,
author="Ronneberger, Olaf
and Fischer, Philipp
and Brox, Thomas",
editor="Navab, Nassir
and Hornegger, Joachim
and Wells, William M.
and Frangi, Alejandro F.",
title="U-Net: Convolutional Networks for Biomedical Image Segmentation",
booktitle="Medical Image Computing and Computer-Assisted Intervention -- MICCAI 2015",
year="2015",
publisher="Springer International Publishing",
address="Cham",
pages="234--241",
abstract="There is large consent that successful training of deep networks requires many thousand annotated training samples. In this paper, we present a network and training strategy that relies on the strong use of data augmentation to use the available annotated samples more efficiently. The architecture consists of a contracting path to capture context and a symmetric expanding path that enables precise localization. We show that such a network can be trained end-to-end from very few images and outperforms the prior best method (a sliding-window convolutional network) on the ISBI challenge for segmentation of neuronal structures in electron microscopic stacks. Using the same network trained on transmitted light microscopy images (phase contrast and DIC) we won the ISBI cell tracking challenge 2015 in these categories by a large margin. Moreover, the network is fast. Segmentation of a 512x512 image takes less than a second on a recent GPU. The full implementation (based on Caffe) and the trained networks are available at http://lmb.informatik.uni-freiburg.de/people/ronneber/u-net.",
isbn="978-3-319-24574-4"
}



@misc{SAEAI21,
    title = {AIR6988 Artificial Intelligence in Aeronautical Systems: Statement of Concerns},
    author = {{SAE International, G-34 committee and EUROCAE’s WG-114 committee}},
    year = {2021}    
}


@misc{SAEFMVSS,
    title = {{FMVSS} Considerations for Vehicles With Automated Driving Systems},
    author = {Myra Blanco and Michelle Chaka and Loren Stowe and H. Clay Gabler, Kenneth Weinstein and Ronald B. Gibbons and Luke Neurauter and Joshua McNeil and  Kaitlyn E. Fitzgerald and Whitney Tatem and and Vikki L. Fitchett},
    organization = {NHTSA},
    year = {2020},
    month = {April},
}


@INPROCEEDINGS{PlatzerFultonITC,
  author={Fulton, Nathan and Platzer, André},
  booktitle={2018 IEEE International Test Conference (ITC)}, 
  title={Safe AI for CPS (Invited Paper)}, 
  year={2018},
  volume={},
  number={},
  pages={1-7},
  doi={10.1109/TEST.2018.8624774}}


  @inproceedings{BakFuzz22,
  author       = {Sanaz Sheikhi and
                  Edward Kim and
                  Parasara Sridhar Duggirala and
                  Stanley Bak},
  title        = {Coverage-Guided Fuzz Testing for Cyber-Physical Systems},
  booktitle    = {13th {ACM/IEEE} International Conference on Cyber-Physical Systems,
                  {ICCPS} 2022, Milano, Italy, May 4-6, 2022},
  pages        = {24--33},
  year         = {2022},
  url          = {https://doi.org/10.1109/ICCPS54341.2022.00009},
  doi          = {10.1109/ICCPS54341.2022.00009},
  timestamp    = {Wed, 29 Jun 2022 17:24:41 +0200},
  biburl       = {https://dblp.org/rec/conf/iccps/SheikhiKDB22.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}


@article{ASTKochenderfer20,
  author       = {Ritchie Lee and
                  Ole J. Mengshoel and
                  Anshu Saksena and
                  Ryan W. Gardner and
                  Daniel Genin and
                  Joshua Silbermann and
                  Michael P. Owen and
                  Mykel J. Kochenderfer},
  title        = {Adaptive Stress Testing: Finding Likely Failure Events with Reinforcement
                  Learning},
  journal      = {J. Artif. Intell. Res.},
  volume       = {69},
  pages        = {1165--1201},
  year         = {2020},
  url          = {https://doi.org/10.1613/jair.1.12190},
  doi          = {10.1613/jair.1.12190},
  timestamp    = {Tue, 15 Dec 2020 17:40:19 +0100},
  biburl       = {https://dblp.org/rec/journals/jair/LeeMSGGSOK20.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@misc{openPilot,
    title = {openpilot: Open source adaptive cruise control and lane centering},
    author = {comma.ai},
    howpublished = {https://comma.ai/openpilot},
    year = {2022}
}

@misc{ArduPilot,
    title = {Open Source Autopilot
For Drone Developers},
    author = {{PX4}},
    howpublished = {https://px4.io/},
    year = {2022}
}

@misc{AutoWare,
    title = {Autoware - the world's leading open-source software project for autonomous driving},
    author = {{Autoware Foundation}},
    howpublished = {https://github.com/autowarefoundation/autoware},
    year = {2021}
}

@misc{apollo,
  title = {{Baidu Apollo team (2017), Apollo: Open Source Autonomous Driving},
  howpublished = {\url{https://github.com/ApolloAuto/apollo}},
  note = {Accessed: 2019-02-11}
}}


@inproceedings{Psytaliro,
author = {Thibeault, Quinn and Anderson, Jacob and Chandratre, Aniruddh and Pedrielli, Giulia and Fainekos, Georgios},
title = {PSY-TaLiRo: A Python Toolbox For Search-Based Test Generation For Cyber-Physical Systems},
year = {2021},
isbn = {978-3-030-85247-4},
publisher = {Springer-Verlag},
address = {Berlin, Heidelberg},
url = {https://doi.org/10.1007/978-3-030-85248-1_15},
doi = {10.1007/978-3-030-85248-1_15},
abstract = {In this paper, we present the Python package PSY-TaLiRo which is a toolbox for temporal logic robustness guided falsification of Cyber-Physical Systems (CPS). PSY-TaLiRo is a completely modular toolbox supporting multiple temporal logic offline monitors as well as optimization engines for test case generation. Among the benefits of PSY-TaLiRo is that it supports search-based test generation for many different types of systems under test. All PSY-TaLiRo modules can be fully modified by the users to support new optimization and robustness computation engines as well as any System under Test (SUT).},
booktitle = {Formal Methods for Industrial Critical Systems: 26th International Conference, FMICS 2021, Paris, France, August 24–26, 2021, Proceedings},
pages = {223–231},
numpages = {9},
keywords = {Search-based test generation, Cyber-Physical Systems, Falsification},
location = {Paris, France}
}

@INPROCEEDINGS{CBF-Ames19,
  author={Ames, Aaron D. and Coogan, Samuel and Egerstedt, Magnus and Notomista, Gennaro and Sreenath, Koushil and Tabuada, Paulo},
  booktitle={2019 18th European Control Conference (ECC)}, 
  title={Control Barrier Functions: Theory and Applications}, 
  year={2019},
  volume={},
  number={},
  pages={3420-3431},
  doi={10.23919/ECC.2019.8796030}
  }

@article{zhang2020learning,
  title={Learning invariant representations for reinforcement learning without reconstruction},
  author={Zhang, Amy and McAllister, Rowan and Calandra, Roberto and Gal, Yarin and Levine, Sergey},
  journal={arXiv preprint arXiv:2006.10742},
  year={2020}
}

@misc{formation2022Hsieh,
      title={Assuring safety of vision-based swarm formation control}, 
      author={Chiao Hsieh and Yangge Li and Yubin Koh and Sayan Mitra},
      year={2022},
      eprint={2210.00982},
      archivePrefix={arXiv},
      primaryClass={cs.MA}
}


@misc{DO178C,
	author = {RTCA, Inc.},
	institution = {Special Committee 205 of RTCA},
	keywords = {safety},
	priority = {2},
	title = {{DO-178C}, Software Considerations in Airborne Systems and Equipment Certification},
	year = {2011}
}

@INPROCEEDINGS{perception2023Astorga,
  author={Angello Astorga and Chiao Hsieh and P. Madhusudan and Sayan Mitra},
  booktitle={OOPSLA'23}, 
  title={Perception Contracts for Safety of ML-Enabled Systems}, 
  year={2023},
  volume={},
  number={}
  }




@inproceedings{PasareanuMGY23,
  author       = {Corina S. Pasareanu and
                  Ravi Mangal and
                  Divya Gopinath and
                  Huafeng Yu},
  editor       = {Panagiotis Katsaros and
                  Laura Nenzi},
  title        = {Assumption Generation for Learning-Enabled Autonomous Systems},
  booktitle    = {Runtime Verification - 23rd International Conference, {RV} 2023, Thessaloniki,
                  Greece, October 3-6, 2023, Proceedings},
  series       = {Lecture Notes in Computer Science},
  volume       = {14245},
  pages        = {3--22},
  publisher    = {Springer},
  year         = {2023},
  url          = {https://doi.org/10.1007/978-3-031-44267-4\_1},
  doi          = {10.1007/978-3-031-44267-4\_1},
  timestamp    = {Sun, 08 Oct 2023 09:22:52 +0200},
  biburl       = {https://dblp.org/rec/conf/rv/PasareanuMGY23.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}



@InProceedings{Pasareanu-CAV23,
author="P{\u{a}}s{\u{a}}reanu, Corina S.
and Mangal, Ravi
and Gopinath, Divya
and Getir Yaman, Sinem
and Imrie, Calum
and Calinescu, Radu
and Yu, Huafeng",
editor="Enea, Constantin
and Lal, Akash",
title="Closed-Loop Analysis of Vision-Based Autonomous Systems: A Case Study",
booktitle="Computer Aided Verification",
year="2023",
publisher="Springer Nature Switzerland",
address="Cham",
pages="289--303",
abstract="Deep neural networks (DNNs) are increasingly used in safety-critical autonomous systems as perception components processing high-dimensional image data. Formal analysis of these systems is particularly challenging due to the complexity of the perception DNNs, the sensors (cameras), and the environment conditions. We present a case study applying formal probabilistic analysis techniques to an experimental autonomous system that guides airplanes on taxiways using a perception DNN. We address the above challenges by replacing the camera and the network with a compact abstraction whose transition probabilities are computed from the confusion matrices measuring the performance of the DNN on a representative image data set. As the probabilities are estimated based on empirical data, and thus are subject to error, we also compute confidence intervals in addition to point estimates for these probabilities and thereby strengthen the soundness of the analysis. We also show how to leverage local, DNN-specific analyses as run-time guards to filter out mis-behaving inputs and increase the safety of the overall system. Our findings are applicable to other autonomous systems that use complex DNNs for perception.",
isbn="978-3-031-37706-8"
}

@article{Pasareanu22-controllerRV,
  author       = {Radu Calinescu and
                  Calum Imrie and
                  Ravi Mangal and
                  Corina S. Pasareanu and
                  Misael Alpizar Santana and
                  Gricel V{\'{a}}zquez},
  title        = {Discrete-Event Controller Synthesis for Autonomous Systems with Deep-Learning
                  Perception Components},
  journal      = {CoRR},
  volume       = {abs/2202.03360},
  year         = {2022},
  url          = {https://arxiv.org/abs/2202.03360},
  eprinttype    = {arXiv},
  eprint       = {2202.03360},
  timestamp    = {Fri, 25 Feb 2022 09:51:53 +0100},
  biburl       = {https://dblp.org/rec/journals/corr/abs-2202-03360.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}






--------------------------------------------
@inproceedings{
li2023decap,
title={DeCap: Decoding {CLIP} Latents for Zero-Shot Captioning via Text-Only Training},
author={Wei Li and Linchao Zhu and Longyin Wen and Yi Yang},
booktitle={The Eleventh International Conference on Learning Representations },
year={2023},
url={https://openreview.net/forum?id=Lt8bMlhiwx2}
}

@inproceedings{tewel2022zerocap,
  title={Zerocap: Zero-shot image-to-text generation for visual-semantic arithmetic},
  author={Tewel, Yoad and Shalev, Yoav and Schwartz, Idan and Wolf, Lior},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={17918--17928},
  year={2022}
}


@inproceedings{donadello2017logic,
  title={Logic tensor networks for semantic image interpretation},
  author={Donadello, I and Serafini, L and d'Avila Garcez, AS},
  booktitle={IJCAI International Joint Conference on Artificial Intelligence},
  pages={1596--1602},
  year={2017},
  organization={IJCAI}
}

@article{burgess2018understanding,
  title={Understanding disentangling in $\beta$-VAE},
  author={Burgess, Christopher P and Higgins, Irina and Pal, Arka and Matthey, Loic and Watters, Nick and Desjardins, Guillaume and Lerchner, Alexander},
  journal={arXiv preprint arXiv:1804.03599},
  year={2018}
}

@inproceedings{cunningham2022principal,
  title={Principal component flows},
  author={Cunningham, Edmond and Cobb, Adam D and Jha, Susmit},
  booktitle={International Conference on Machine Learning},
  pages={4492--4519},
  year={2022},
  organization={PMLR}
}

@InProceedings{Zhou_2018_ECCV,
author = {Zhou, Bolei and Sun, Yiyou and Bau, David and Torralba, Antonio},
title = {Interpretable Basis Decomposition for Visual Explanation},
booktitle = {Proceedings of the European Conference on Computer Vision (ECCV)},
month = {September},
year = {2018}
} 


@InProceedings{pmlr-v80-kim18d,
  title = 	 {Interpretability Beyond Feature Attribution: Quantitative Testing with Concept Activation Vectors ({TCAV})},
  author =       {Kim, Been and Wattenberg, Martin and Gilmer, Justin and Cai, Carrie and Wexler, James and Viegas, Fernanda and sayres, Rory},
  booktitle = 	 {Proceedings of the 35th International Conference on Machine Learning},
  pages = 	 {2668--2677},
  year = 	 {2018},
  editor = 	 {Dy, Jennifer and Krause, Andreas},
  volume = 	 {80},
  series = 	 {Proceedings of Machine Learning Research},
  month = 	 {10--15 Jul},
  publisher =    {PMLR},
  pdf = 	 {http://proceedings.mlr.press/v80/kim18d/kim18d.pdf},
  url = 	 {https://proceedings.mlr.press/v80/kim18d.html},
}

@article{crabbe2022concept,
  title={Concept activation regions: A generalized framework for concept-based explanations},
  author={Crabb{\'e}, Jonathan and van der Schaar, Mihaela},
  journal={Advances in Neural Information Processing Systems},
  volume={35},
  pages={2590--2607},
  year={2022}
}


@InProceedings{pmlr-v139-radford21a,
  title = 	 {Learning Transferable Visual Models From Natural Language Supervision},
  author =       {Radford, Alec and Kim, Jong Wook and Hallacy, Chris and Ramesh, Aditya and Goh, Gabriel and Agarwal, Sandhini and Sastry, Girish and Askell, Amanda and Mishkin, Pamela and Clark, Jack and Krueger, Gretchen and Sutskever, Ilya},
  booktitle = 	 {Proceedings of the 38th International Conference on Machine Learning},
  pages = 	 {8748--8763},
  year = 	 {2021},
  editor = 	 {Meila, Marina and Zhang, Tong},
  volume = 	 {139},
  series = 	 {Proceedings of Machine Learning Research},
  month = 	 {18--24 Jul},
  publisher =    {PMLR},
  pdf = 	 {http://proceedings.mlr.press/v139/radford21a/radford21a.pdf},
  url = 	 {https://proceedings.mlr.press/v139/radford21a.html},
}

@inproceedings{moayeri2023text,
  title={Text-to-concept (and back) via cross-model alignment},
  author={Moayeri, Mazda and Rezaei, Keivan and Sanjabi, Maziar and Feizi, Soheil},
  booktitle={International Conference on Machine Learning},
  pages={25037--25060},
  year={2023},
  organization={PMLR}
}

@inproceedings{moayeri2022comprehensive,
  title={A comprehensive study of image classification model sensitivity to foregrounds, backgrounds, and visual attributes},
  author={Moayeri, Mazda and Pope, Phillip and Balaji, Yogesh and Feizi, Soheil},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={19087--19097},
  year={2022}
}

@INPROCEEDINGS{imagenet,
  author={Deng, Jia and Dong, Wei and Socher, Richard and Li, Li-Jia and Kai Li and Li Fei-Fei},
  booktitle={2009 IEEE Conference on Computer Vision and Pattern Recognition}, 
  title={ImageNet: A large-scale hierarchical image database}, 
  year={2009},
  volume={},
  number={},
  pages={248-255},
  doi={10.1109/CVPR.2009.5206848}}

@inproceedings{toledo2023deeper,
  title={Deeper Notions of Correctness in Image-Based DNNs: Lifting Properties from Pixel to Entities},
  author={Toledo, Felipe and Shriver, David and Elbaum, Sebastian and Dwyer, Matthew B},
  booktitle={Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering},
  pages={2122--2126},
  year={2023}
}

@inproceedings{zhang2022diagnosing,
  title={Diagnosing and Rectifying Vision Models using Language},
  author={Zhang, Yuhui and HaoChen, Jeff Z and Huang, Shih-Cheng and Wang, Kuan-Chieh and Zou, James and Yeung, Serena},
  booktitle={The Eleventh International Conference on Learning Representations},
  year={2022}
}

@inproceedings{
eyuboglu2022domino,
title={Domino: Discovering Systematic Errors with Cross-Modal Embeddings},
author={Sabri Eyuboglu and Maya Varma and Khaled Kamal Saab and Jean-Benoit Delbrouck and Christopher Lee-Messer and Jared Dunnmon and James Zou and Christopher Re},
booktitle={International Conference on Learning Representations},
year={2022},
url={https://openreview.net/forum?id=FPCMqjI0jXN}
}

@inproceedings{gao2023adaptive,
  title={Adaptive testing of computer vision models},
  author={Gao, Irena and Ilharco, Gabriel and Lundberg, Scott and Ribeiro, Marco Tulio},
  booktitle={Proceedings of the IEEE/CVF International Conference on Computer Vision},
  pages={4003--4014},
  year={2023}
}

@inproceedings{nanda2023emergent,
  title={Emergent Linear Representations in World Models of Self-Supervised Sequence Models},
  author={Nanda, Neel and Lee, Andrew and Wattenberg, Martin},
  booktitle={Proceedings of the 6th BlackboxNLP Workshop: Analyzing and Interpreting Neural Networks for NLP},
  pages={16--30},
  year={2023}
}
@inproceedings{wang2023concept,
  title={Concept Algebra for (Score-Based) Text-Controlled Generative Models},
  author={Wang, Zihao and Gui, Lin and Negrea, Jeffrey and Veitch, Victor},
  booktitle={Thirty-seventh Conference on Neural Information Processing Systems},
  year={2023}
}



@incollection{DBLP:series/faia/YehKR21,
  author       = {Chih{-}Kuan Yeh and
                  Been Kim and
                  Pradeep Ravikumar},
  editor       = {Pascal Hitzler and
                  Md. Kamruzzaman Sarker},
  title        = {Human-Centered Concept Explanations for Neural Networks},
  booktitle    = {Neuro-Symbolic Artificial Intelligence: The State of the Art},
  series       = {Frontiers in Artificial Intelligence and Applications},
  volume       = {342},
  pages        = {337--352},
  publisher    = {{IOS} Press},
  year         = {2021},
  url          = {https://doi.org/10.3233/FAIA210362},
  doi          = {10.3233/FAIA210362},
  timestamp    = {Fri, 22 Jul 2022 07:24:17 +0200},
  biburl       = {https://dblp.org/rec/series/faia/YehKR21.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{
bai2023concept,
title={Concept Gradient: Concept-based Interpretation Without Linear Assumption},
author={Andrew Bai and Chih-Kuan Yeh and Neil Y.C. Lin and Pradeep Kumar Ravikumar and Cho-Jui Hsieh},
booktitle={The Eleventh International Conference on Learning Representations },
year={2023},
url={https://openreview.net/forum?id=_01dDd3f78}
}



@inproceedings{park2023linear,
  title={The Linear Representation Hypothesis and the Geometry of Large Language Models},
  author={Park, Kiho and Choe, Yo Joong and Veitch, Victor},
  booktitle={Causal Representation Learning Workshop at NeurIPS 2023},
  year={2023}
}

@article{Bommasani2021FoundationModels,
title={On the Opportunities and Risks of Foundation Models},
author={Rishi Bommasani and Drew A. Hudson and Ehsan Adeli and Russ Altman and Simran Arora and Sydney von Arx and Michael S. Bernstein and Jeannette Bohg and Antoine Bosselut and Emma Brunskill and Erik Brynjolfsson and S. Buch and Dallas Card and Rodrigo Castellon and Niladri S. Chatterji and Annie S. Chen and Kathleen A. Creel and Jared Davis and Dora Demszky and Chris Donahue and Moussa Doumbouya and Esin Durmus and Stefano Ermon and John Etchemendy and Kawin Ethayarajh and Li Fei-Fei and Chelsea Finn and Trevor Gale and Lauren E. Gillespie and Karan Goel and Noah D. Goodman and Shelby Grossman and Neel Guha and Tatsunori Hashimoto and Peter Henderson and John Hewitt and Daniel E. Ho and Jenny Hong and Kyle Hsu and Jing Huang and Thomas F. Icard and Saahil Jain and Dan Jurafsky and Pratyusha Kalluri and Siddharth Karamcheti and Geoff Keeling and Fereshte Khani and O. Khattab and Pang Wei Koh and Mark S. Krass and Ranjay Krishna and Rohith Kuditipudi and Ananya Kumar and Faisal Ladhak and Mina Lee and Tony Lee and Jure Leskovec and Isabelle Levent and Xiang Lisa Li and Xuechen Li and Tengyu Ma and Ali Malik and Christopher D. Manning and Suvir P. Mirchandani and Eric Mitchell and Zanele Munyikwa and Suraj Nair and Avanika Narayan and Deepak Narayanan and Benjamin Newman and Allen Nie and Juan Carlos Niebles and Hamed Nilforoshan and J. F. Nyarko and Giray Ogut and Laurel Orr and Isabel Papadimitriou and Joon Sung Park and Chris Piech and Eva Portelance and Christopher Potts and Aditi Raghunathan and Robert Reich and Hongyu Ren and Frieda Rong and Yusuf H. Roohani and Camilo Ruiz and Jack Ryan and Christopher R'e and Dorsa Sadigh and Shiori Sagawa and Keshav Santhanam and Andy Shih and Krishna Parasuram Srinivasan and Alex Tamkin and Rohan Taori and Armin W. Thomas and Florian Tram{\`e}r and Rose E. Wang and William Wang and Bohan Wu and Jiajun Wu and Yuhuai Wu and Sang Michael Xie and Michihiro Yasunaga and Jiaxuan You and Matei A. Zaharia and Michael Zhang and Tianyi Zhang and Xikun Zhang and Yuhui Zhang and Lucia Zheng and Kaitlyn Zhou and Percy Liang},
journal={ArXiv},
year={2021},
url={https://crfm.stanford.edu/assets/report.pdf}
} 

@inproceedings{gopinath2019property,
  title={Property inference for deep neural networks},
  author={Gopinath, Divya and Converse, Hayes and Pasareanu, Corina and Taly, Ankur},
  booktitle={2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE)},
  pages={797--809},
  year={2019},
  organization={IEEE}
}


@inproceedings{huang2017safety,
  title={Safety verification of deep neural networks},
  author={Huang, Xiaowei and Kwiatkowska, Marta and Wang, Sen and Wu, Min},
  booktitle={Computer Aided Verification: 29th International Conference, CAV 2017, Heidelberg, Germany, July 24-28, 2017, Proceedings, Part I 30},
  pages={3--29},
  year={2017},
  organization={Springer}
}

@inproceedings{katz2017reluplex,
  title={Reluplex: An efficient SMT solver for verifying deep neural networks},
  author={Katz, Guy and Barrett, Clark and Dill, David L and Julian, Kyle and Kochenderfer, Mykel J},
  booktitle={Computer Aided Verification: 29th International Conference, CAV 2017, Heidelberg, Germany, July 24-28, 2017, Proceedings, Part I 30},
  pages={97--117},
  year={2017},
  organization={Springer}
}

@inproceedings{dutta2018output,
  title={Output range analysis for deep feedforward neural networks},
  author={Dutta, Souradeep and Jha, Susmit and Sankaranarayanan, Sriram and Tiwari, Ashish},
  booktitle={NASA Formal Methods Symposium},
  pages={121--138},
  year={2018},
  organization={Springer}
}

@inproceedings{radford2021learning,
  title={Learning transferable visual models from natural language supervision},
  author={Radford, Alec and Kim, Jong Wook and Hallacy, Chris and Ramesh, Aditya and Goh, Gabriel and Agarwal, Sandhini and Sastry, Girish and Askell, Amanda and Mishkin, Pamela and Clark, Jack and others},
  booktitle={International conference on machine learning},
  pages={8748--8763},
  year={2021},
  organization={PMLR}
}

@phdthesis{henriksen2019efficient,
  title={Efficient Neural Network Verification via Adaptive Refinement and Adversarial Search},
  author={Henriksen, Patrick and Lomuscio, A},
  year={2019},
  school={Ph. D. Dissertation. Imperial College London}
}

@article{singh2019abstract,
  title={An abstract domain for certifying neural networks},
  author={Singh, Gagandeep and Gehr, Timon and P{\"u}schel, Markus and Vechev, Martin},
  journal={Proceedings of the ACM on Programming Languages},
  volume={3},
  number={POPL},
  pages={1--30},
  year={2019},
  publisher={ACM New York, NY, USA}
}

@article{vaswani2017attention,
  title={Attention is all you need},
  author={Vaswani, Ashish and Shazeer, Noam and Parmar, Niki and Uszkoreit, Jakob and Jones, Llion and Gomez, Aidan N and Kaiser, {\L}ukasz and Polosukhin, Illia},
  journal={Advances in neural information processing systems},
  volume={30},
  year={2017}
}

@inproceedings{
dosovitskiy2021an,
title={An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale},
author={Alexey Dosovitskiy and Lucas Beyer and Alexander Kolesnikov and Dirk Weissenborn and Xiaohua Zhai and Thomas Unterthiner and Mostafa Dehghani and Matthias Minderer and Georg Heigold and Sylvain Gelly and Jakob Uszkoreit and Neil Houlsby},
booktitle={International Conference on Learning Representations},
year={2021},
url={https://openreview.net/forum?id=YicbFdNTTy}
}

@inproceedings{he2016deep,
  title={Deep residual learning for image recognition},
  author={He, Kaiming and Zhang, Xiangyu and Ren, Shaoqing and Sun, Jian},
  booktitle={Proceedings of the IEEE conference on computer vision and pattern recognition},
  pages={770--778},
  year={2016}
}
@misc{unpublished2021clip,
    title  = {CLIP: Connecting Text and Images},
    author = {Radford, Alec and   Sutskever, Ilya and   Kim, Jong Wook and  Krueger, Gretchen and  Agarwal, Sandhini},
    year   = {2021}
}

@misc{bestuzheva2021scip,
      title={The SCIP Optimization Suite 8.0}, 
      author={Ksenia Bestuzheva and Mathieu Besançon and Wei-Kun Chen and Antonia Chmiela and Tim Donkiewicz and Jasper van Doornmalen and Leon Eifler and Oliver Gaul and Gerald Gamrath and Ambros Gleixner and Leona Gottwald and Christoph Graczyk and Katrin Halbig and Alexander Hoen and Christopher Hojny and Rolf van der Hulst and Thorsten Koch and Marco Lübbecke and Stephen J. Maher and Frederic Matter and Erik Mühmer and Benjamin Müller and Marc E. Pfetsch and Daniel Rehfeldt and Steffan Schlein and Franziska Schlösser and Felipe Serrano and Yuji Shinano and Boro Sofranac and Mark Turner and Stefan Vigerske and Fabian Wegscheider and Philipp Wellner and Dieter Weninger and Jakob Witzig},
      year={2021},
      eprint={2112.08872},
      archivePrefix={arXiv},
      primaryClass={math.OC}
}

@article{bastani2016measuring,
  title={Measuring neural net robustness with constraints},
  author={Bastani, Osbert and Ioannou, Yani and Lampropoulos, Leonidas and Vytiniotis, Dimitrios and Nori, Aditya and Criminisi, Antonio},
  journal={Advances in neural information processing systems},
  volume={29},
  year={2016}
}

@inproceedings{
tjeng2018evaluating,
title={Evaluating Robustness of Neural Networks with Mixed Integer Programming},
author={Vincent Tjeng and Kai Y. Xiao and Russ Tedrake},
booktitle={International Conference on Learning Representations},
year={2019},
url={https://openreview.net/forum?id=HyGIdiRqtm},
}

@article{esteva2021deep,
  title={Deep learning-enabled medical computer vision},
  author={Esteva, Andre and Chou, Katherine and Yeung, Serena and Naik, Nikhil and Madani, Ali and Mottaghi, Ali and Liu, Yun and Topol, Eric and Dean, Jeff and Socher, Richard},
  journal={NPJ digital medicine},
  volume={4},
  number={1},
  pages={5},
  year={2021},
  publisher={Nature Publishing Group UK London}
}

@article{janai2020computer,
  title={Computer vision for autonomous vehicles: Problems, datasets and state of the art},
  author={Janai, Joel and G{\"u}ney, Fatma and Behl, Aseem and Geiger, Andreas and others},
  journal={Foundations and Trends{\textregistered} in Computer Graphics and Vision},
  volume={12},
  number={1--3},
  pages={1--308},
  year={2020},
  publisher={Now Publishers, Inc.}
}

@article{kaufmann2023champion,
  title={Champion-level drone racing using deep reinforcement learning},
  author={Kaufmann, Elia and Bauersfeld, Leonard and Loquercio, Antonio and M{\"u}ller, Matthias and Koltun, Vladlen and Scaramuzza, Davide},
  journal={Nature},
  volume={620},
  number={7976},
  pages={982--987},
  year={2023},
  publisher={Nature Publishing Group UK London}
}

@inproceedings{beland2020towards,
  title={Towards assurance evaluation of autonomous systems},
  author={Beland, Steven and Chang, Isaac and Chen, Alexander and Moser, Matthew and Paunicka, James and Stuart, Douglas and Vian, John and Westover, Christina and Yu, Huafeng},
  booktitle={Proceedings of the 39th International Conference on Computer-Aided Design},
  pages={1--6},
  year={2020}
}


@INPROCEEDINGS{10384107,
  author={Cruz, Ulices Santa and Shoukry, Yasser},
  booktitle={2023 62nd IEEE Conference on Decision and Control (CDC)}, 
  title={Certified Vision-Based State Estimation for Autonomous Landing Systems Using Reachability Analysis}, 
  year={2023},
  volume={},
  number={},
  pages={6052-6057},
  keywords={Heart;Geometric modeling;Artificial neural networks;Cameras;State estimation;Aircraft;Reachability analysis},
  doi={10.1109/CDC49753.2023.10384107}}


@inproceedings{10.1007/978-3-031-06773-0_11,
	address = {Cham},
	author = {Santa Cruz, Ulices and Shoukry, Yasser},
	booktitle = {NASA Formal Methods},
	editor = {Deshmukh, Jyotirmoy V. and Havelund, Klaus and Perez, Ivan},
	isbn = {978-3-031-06773-0},
	pages = {213--230},
	publisher = {Springer International Publishing},
	title = {NNLander-VeriF: A Neural Network Formal Verification Framework for Vision-Based Autonomous Aircraft Landing},
	year = {2022}}

@inproceedings{dean2021guaranteeing,
  title={Guaranteeing safety of learned perception modules via measurement-robust control barrier functions},
  author={Dean, Sarah and Taylor, Andrew and Cosner, Ryan and Recht, Benjamin and Ames, Aaron},
  booktitle={Conference on Robot Learning},
  pages={654--670},
  year={2021},
  organization={PMLR}
}

@inproceedings{dean2020robust,
  title={Robust guarantees for perception-based control},
  author={Dean, Sarah and Matni, Nikolai and Recht, Benjamin and Ye, Vickie},
  booktitle={Learning for Dynamics and Control},
  pages={350--360},
  year={2020},
  organization={PMLR}
}

@INPROCEEDINGS{cosner2021measurement,
  author={Cosner, Ryan K. and Singletary, Andrew W. and Taylor, Andrew J. and Molnar, Tamas G. and Bouman, Katherine L. and Ames, Aaron D.},
  booktitle={2021 IEEE/RSJ International Conference on Intelligent Robots and Systems (IROS)}, 
  title={Measurement-Robust Control Barrier Functions: Certainty in Safety with Uncertainty in State}, 
  year={2021},
  volume={},
  number={},
  pages={6286-6291},
  keywords={Uncertainty;Measurement uncertainty;Probabilistic logic;Control systems;Robustness;Safety;State estimation},
  doi={10.1109/IROS51168.2021.9636584}}


@inproceedings{yang2023safe,
  title={Safe perception-based control under stochastic sensor uncertainty using conformal prediction},
  author={Yang, Shuo and Pappas, George J and Mangharam, Rahul and Lindemann, Lars},
  booktitle={2023 62nd IEEE Conference on Decision and Control (CDC)},
  pages={6072--6078},
  year={2023},
  organization={IEEE}
}

@inproceedings{lindemann2023conformal,
author = {Lindemann, Lars and Qin, Xin and Deshmukh, Jyotirmoy V. and Pappas, George J.},
title = {Conformal Prediction for STL Runtime Verification},
year = {2023},
isbn = {9798400700361},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
url = {https://doi.org/10.1145/3576841.3585927},
doi = {10.1145/3576841.3585927},
booktitle = {Proceedings of the ACM/IEEE 14th International Conference on Cyber-Physical Systems (with CPS-IoT Week 2023)},
pages = {142–153},
numpages = {12},
keywords = {conformal prediction, signal temporal logic, stochastic system verification, predictive runtime verification},
location = {San Antonio, TX, USA},
series = {ICCPS '23}
}

@book{vovk2022algorithmic, 
    place={Cham, Switzerland}, 
    title={Algorithmic Learning in a Random World}, 
    publisher={Springer Nature}, 
    author={Vovk, Vladmir and Gammerman, Alexander and Shafer, Glenn}, 
    year={2022}
} 


@article{incer2023pacti,
  title={Pacti: Scaling assume-guarantee reasoning for system analysis and design},
  author={Incer, Inigo and Badithela, Apurva and Graebener, Josefine and Mallozzi, Piergiuseppe and Pandey, Ayush and Yu, Sheng-Jung and Benveniste, Albert and Caillaud, Benoit and Murray, Richard M and Sangiovanni-Vincentelli, Alberto and others},
  journal={arXiv preprint arXiv:2303.17751},
  year={2023}
}

@inproceedings{alshiekh2018safe,
  title={Safe reinforcement learning via shielding},
  author={Alshiekh, Mohammed and Bloem, Roderick and Ehlers, R{\"u}diger and K{\"o}nighofer, Bettina and Niekum, Scott and Topcu, Ufuk},
  booktitle={Proceedings of the AAAI conference on artificial intelligence},
  volume={32},
  number={1},
  year={2018}
}

@inproceedings{hunt2021verifiably,
author = {Hunt, Nathan and Fulton, Nathan and Magliacane, Sara and Hoang, Trong Nghia and Das, Subhro and Solar-Lezama, Armando},
title = {Verifiably safe exploration for end-to-end reinforcement learning},
year = {2021},
isbn = {9781450383394},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
url = {https://doi.org/10.1145/3447928.3456653},
doi = {10.1145/3447928.3456653},
booktitle = {Proceedings of the 24th International Conference on Hybrid Systems: Computation and Control},
articleno = {14},
numpages = {11},
keywords = {differential dynamic logic, formal verification, hybrid systems, neural networks, reinforcement learning, safe artificial intelligence},
location = {Nashville, Tennessee},
series = {HSCC '21}
}

@inproceedings{
qin2021learning,
title={Learning Safe Multi-agent Control with Decentralized Neural Barrier Certificates},
author={Zengyi Qin and Kaiqing Zhang and Yuxiao Chen and Jingkai Chen and Chuchu Fan},
booktitle={International Conference on Learning Representations},
year={2021},
url={https://openreview.net/forum?id=P6_q1BRxY8Q}
}

@inproceedings{Podelski06modelchecking,
  title={Model checking of hybrid systems: From reachability towards stability},
  author={Podelski, Andreas and Wagner, Silke},
  booktitle={International Workshop on Hybrid Systems: Computation and Control},
  pages={507--521},
  year={2006},
  organization={Springer}
}

@inproceedings{timed-relational-cav12,
  title={Timed relational abstractions for sampled data control systems},
  author={Zutshi, Aditya and Sankaranarayanan, Sriram and Tiwari, Ashish},
  booktitle={Computer Aided Verification: 24th International Conference, CAV 2012, Berkeley, CA, USA, July 7-13, 2012 Proceedings 24},
  pages={343--361},
  year={2012},
  organization={Springer}
}

@inproceedings{Dosovitskiy17,
  title = { {CARLA}: {An} Open Urban Driving Simulator},
  author = {Alexey Dosovitskiy and German Ros and Felipe Codevilla and Antonio Lopez and Vladlen Koltun},
  booktitle = {Proceedings of the 1st Annual Conference on Robot Learning},
  pages = {1--16},
  year = {2017}
}

% That was the end of the references.bib
% This will be the mitra bib


@misc{li2023refining,
      title={Refining Perception Contracts: Case Studies in Vision-based Safe Auto-landing}, 
      author={Yangge Li and Benjamin C Yang and Yixuan Jia and Daniel Zhuang and Sayan Mitra},
      year={2023},
      eprint={2311.08652},
      archivePrefix={arXiv},
      primaryClass={id='cs.RO' full_name='Robotics' is_active=True alt_name=None in_archive='cs' is_general=False description='Roughly includes material in ACM Subject Class I.2.9.'}
}


@inproceedings{formationACC24,
    title = {Assuring safety of vision-based swarm formation control},
    author = {Chiao Hsieh and Yubin Koh and Yangge Li and Sayan Mitra},
    booktitle ={American Control Conference (ACC)}, 
    year = {2024}
}

@inproceedings{landing-ICRA24,
    title = {Learning-Based Inverse Perception Contracts and Applications},
    author = {Dawei Sun and Benjamin Yang and Sayan Mitra},
    booktitle ={International Conference on Robotics and Automation}, 
    year = {2024}
}

@inproceedings{Verse23,
  author       = {Yangge Li and
                  Haoqing Zhu and
                  Katherine Braught and
                  Keyi Shen and
                  Sayan Mitra},
  editor       = {Constantin Enea and
                  Akash Lal},
  title        = {Verse: {A} Python Library for Reasoning About Multi-agent Hybrid System
                  Scenarios},
  booktitle    = {Computer Aided Verification - 35th International Conference, {CAV}
                  2023, Paris, France, July 17-22, 2023, Proceedings, Part {I}},
  series       = {Lecture Notes in Computer Science},
  volume       = {13964},
  pages        = {351--364},
  publisher    = {Springer},
  year         = {2023},
  url          = {https://doi.org/10.1007/978-3-031-37706-8\_18},
  doi          = {10.1007/978-3-031-37706-8\_18},
  timestamp    = {Tue, 12 Sep 2023 07:57:21 +0200},
  biburl       = {https://dblp.org/rec/conf/cav/LiZBSM23.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

% This will be the seshia bib
@inproceedings{verifai-cav19,
  author    = {Tommaso Dreossi and
               Daniel J. Fremont and
               Shromona Ghosh and
               Edward Kim and
               Hadi Ravanbakhsh and
               Marcell Vazquez{-}Chanlatte and
               Sanjit A. Seshia},
  title     = {{VerifAI:} {A} Toolkit for the Formal Design and Analysis of Artificial Intelligence-Based Systems},
  booktitle = {31st International Conference on Computer Aided Verification (CAV)},
  month = jul,
  year = {2019}
}

@inproceedings{fremont-pldi19,
  author = {Daniel J. Fremont and Tommaso Dreossi and Shromona Ghosh and Xiangyu Yue and Alberto L. Sangiovanni-Vincentelli and Sanjit A. Seshia},
  title     = {Scenic: A Language for Scenario Specification and Scene Generation},
  booktitle = {Proceedings of the 40th annual ACM SIGPLAN conference on Programming Language Design and Implementation (PLDI)},
  Year = {2019},
  Month = {June}
}

@article{scenic-mlj22,
  author = "Daniel J. Fremont and Edward Kim and Tommaso Dreossi and Shromona Ghosh and Xiangyu Yue and Alberto L. Sangiovanni-Vincentelli and Sanjit A. Seshia",
  title = "Scenic: A Language for Scenario Specification and Data Generation",
  journal = "Machine Learning Journal",
  year = "2022"
}

@InProceedings{torfah-atva22,
    author = {Hazem Torfah and Carol Xie and Sebastian Junges and Marcell Vazquez-Chanlatte and Sanjit A. Seshia},
    title = {Learning Monitorable Operational Design Domains for Assured Autonomy},
    booktitle =  {Proceedings of the International Symposium on Automated Technology for Verification and Analysis (ATVA)},
  month = {October},
  year = 	 {2022}
}

@article{dreossi-jar19,
  author    = {Tommaso Dreossi and
               Alexandre Donz{\'{e}} and
               Sanjit A. Seshia},
  title     = {Compositional Falsification of Cyber-Physical Systems with Machine
               Learning Components},
  journal   = {Journal of Automated Reasoning},
  volume    = {63},
  number    = {4},
  pages     = {1031--1053},
  year      = {2019}
}

@article{seshia-cacm22a,
  author    = {Sanjit A. Seshia and
               Dorsa Sadigh and
               S. Shankar Sastry},
  title     = {Toward Verified Artificial Intelligence},
  journal   = {Communications of the {ACM}},
  volume    = {65},
  number    = {7},
  pages     = {46--55},
  year      = {2022}
}

@article{wing-cacm21,
  author    = {Jeannette M. Wing},
  title     = {Trustworthy {AI}},
  journal   = {Communications of the {ACM}},
  volume    = {64},
  number    = {10},
  pages     = {64--71},
  year      = {2021}
}  

@inproceedings{fremont-itsc20,
 author    = {Daniel J. Fremont and
               Edward Kim and
               Yash Vardhan Pant and
               Sanjit A. Seshia and
               Atul Acharya and
               Xantha Bruso and
               Paul Wells and
               Steve Lemke and
               Qiang Lu and
               Shalin Mehta},
  title     = {Formal Scenario-Based Testing of Autonomous Vehicles: From Simulation to the Real World},
  booktitle = {23rd {IEEE} International Conference on Intelligent Transportation Systems (ITSC)}, 
  month = sep,
  year = {2020}
}

@inproceedings{fremont-cav20,
  author    = {Daniel J. Fremont and
               Johnathan Chiu and
               Dragos D. Margineantu and
               Denis Osipychev and
               Sanjit A. Seshia},
  title     = {Formal Analysis and Redesign of a Neural Network-Based Aircraft Taxiing
               System with {VerifAI}},  
  booktitle = {32nd International Conference on Computer Aided Verification (CAV)},
  month = jul,
  year = {2020}
}

@inproceedings{viswanadha-rv21,
  author    = {Kesav Viswanadha and
               Edward Kim and
               Francis Indaheng and
               Daniel J. Fremont and
               Sanjit A. Seshia},
  title     = {Parallel and Multi-Objective Falsification with {Scenic} and {VerifAI}},
  booktitle = {21st International Conference on Runtime Verification (RV)},
  series    = {Lecture Notes in Computer Science},
  volume    = {12974},
  pages     = {265--276},
  publisher = {Springer},
  year      = {2021}
}

@inproceedings{torfah-rv21,
  author    = {Hazem Torfah and
               Sebastian Junges and
               Daniel J. Fremont and
               Sanjit A. Seshia},
  title     = {Formal Analysis of {AI}-Based Autonomy: From Modeling to Runtime Assurance},
  booktitle = {21st International Conference on Runtime Verification (RV)},
  series    = {Lecture Notes in Computer Science},
  volume    = {12974},
  pages     = {311--330},
  publisher = {Springer},
  year      = {2021}
}

@inproceedings{ghosh-acc21,
  author    = {Shromona Ghosh and
               Yash Vardhan Pant and
               Hadi Ravanbakhsh and
               Sanjit A. Seshia},
  title     = {Counterexample-Guided Synthesis of Perception Models and Control},
  booktitle = {American Control Conference (ACC)},
  pages     = {3447--3454},
  publisher = {{IEEE}},
  year      = {2021}
}

@inproceedings{dreossi-nfm17,
  author    = {Tommaso Dreossi and Alexandre Donze and Sanjit A. Seshia},
  title     = {Compositional Falsification of Cyber-Physical Systems with Machine Learning Components},
  booktitle = {Proceedings of the NASA Formal Methods Conference (NFM)},
  month = "May",
  year = {2017},
  pages     = {357--372}
}

@techreport{seshia-tr17,
    Author = {Seshia, Sanjit A.},
    Title = {Compositional Verification without Compositional Specification for Learning-Based Systems},
    Institution = {EECS Department, University of California, Berkeley},
    Year = {2017},
    Month = {Nov},
    number = {UCB/EECS-2017-164}
}

@inproceedings{viswanadha-aitest21,
  author    = {Kesav Viswanadha and
               Francis Indaheng and
               Justin Wong and
               Edward Kim and
               Ellen Kalvan and
               Yash Pant and
               Daniel J. Fremont and
               Sanjit A. Seshia},
  title     = {Addressing the {IEEE} {AV} Test Challenge with Scenic and VerifAI},
  booktitle = {{IEEE} International Conference on Artificial Intelligence Testing (AITest)},
  pages     = {136--142},
  publisher = {{IEEE}},
  year      = {2021}
}

% and this is the survey's bibfile.bib


@article{CAV23arxiv,
  author       = {Corina S. Pasareanu and
                  Ravi Mangal and
                  Divya Gopinath and
                  Sinem Getir Yaman and
                  Calum Imrie and
                  Radu Calinescu and
                  Huafeng Yu},
  title        = {Closed-loop Analysis of Vision-based Autonomous Systems: {A} Case
                  Study},
  journal      = {CoRR},
  volume       = {abs/2302.04634},
  year         = {2023},
  doi          = {10.48550/arXiv.2302.04634},
  eprinttype    = {arXiv},
  eprint       = {2302.04634},
  timestamp    = {Mon, 13 Feb 2023 14:23:40 +0100},
  biburl       = {https://dblp.org/rec/journals/corr/abs-2302-04634.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@article{PavithraNFM24,
  author       = {P. Habeeb and Pavithra Prabhakar},
  title        = {Approximate Conformance Verification of Deep Neural Networks},
  journal      = {NASA Formal Methods},
  year         = {2024},
}


@article{PavithraEmsoft24,
  author       = {P. Habeeb and Lipsy Gupta and Pavithra Prabhakar},
  title        = {Approximate Conformance Checking for Closed-Loop Systems with Neural Network Controllers},
  journal      = {IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  year         = {2024},
}

@inproceedings{deepsafe,
  author       = {Divya Gopinath and
                  Guy Katz and
                  Corina S. Pasareanu and
                  Clark W. Barrett},
  editor       = {Shuvendu K. Lahiri and
                  Chao Wang},
  title        = {{DeepSafe: A} Data-Driven Approach for Assessing Robustness of Neural
                  Networks},
  booktitle    = {Automated Technology for Verification and Analysis - 16th International
                  Symposium, {ATVA} 2018, Los Angeles, CA, USA, October 7-10, 2018,
                  Proceedings},
  series       = {Lecture Notes in Computer Science},
  volume       = {11138},
  pages        = {3--19},
  publisher    = {Springer},
  year         = {2018},
  doi          = {10.1007/978-3-030-01090-4\_1},
  timestamp    = {Mon, 24 Jun 2019 15:54:17 +0200},
  biburl       = {https://dblp.org/rec/conf/atva/GopinathKPB18.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}



@ARTICLE{P.Habeeb2023,
  author={P, Habeeb and Deka, Nabarun and D’Souza, Deepak and Lodaya, Kamal and Prabhakar, Pavithra},
  journal={IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems}, 
  title={Verification of Camera-Based Autonomous Systems}, 
  year={2023},
  volume={},
  number={},
  pages={1-1},
  doi={10.1109/TCAD.2023.3240131}}






@Inbook{Ciesinski2004,
author="Ciesinski, Frank
and Gr{\"o}{\ss}er, Marcus",
editor="Baier, Christel
and Haverkort, Boudewijn R.
and Hermanns, Holger
and Katoen, Joost-Pieter
and Siegle, Markus",
title="On Probabilistic Computation Tree Logic",
bookTitle="Validation of Stochastic Systems: A Guide to Current Research",
year="2004",
publisher="Springer Berlin Heidelberg",
pages="147--188"
}

@Inbook{DTMC,
  author={N. Privault},
  booktitle={Understanding {Markov} Chains}, 
  title={Discrete-time {Markov} chains}, 
  year={2013},
  publisher="Springer Berlin Heidelberg",
  pages={77-94}}

@inproceedings{479140,
  author={Byrne, R.H. and Abdallah, C.T. and Dorato, P.},
  booktitle={Proceedings of 1995 34th IEEE Conference on Decision and Control}, 
  title={Experimental results in robust lateral control of highway vehicles}, 
  year={1995},
  volume={4},
  number={},
  pages={3572-3575 vol.4}
}

@inproceedings{HoffmannTMT07,
  author    = {Gabriel M. Hoffmann and
               Claire J. Tomlin and
               Michael Montemerlo and
               Sebastian Thrun},
  title     = {Autonomous Automobile Trajectory Tracking for Off-Road Driving: Controller
               Design, Experimental Validation and Racing},
  booktitle = {American Control Conference, {ACC} 2007, New York, NY, USA, 9-13 July,
               2007},
  pages     = {2296--2301},
  publisher = {{IEEE}},
  year      = {2007}
}

@article{abs-1910-07738,
  author    = {Sorin Mihai Grigorescu and
               Bogdan Trasnea and
               Tiberiu T. Cocias and
               Gigel Macesanu},
  title     = {A Survey of Deep Learning Techniques for Autonomous Driving},
  journal   = {CoRR},
  volume    = {abs/1910.07738},
  year      = {2019},
  eprinttype = {arXiv},
  eprint    = {1910.07738},
  timestamp = {Tue, 22 Oct 2019 18:17:16 +0200}
}

@article{abs-1904-00649,
  author    = {Domen Tabernik and
               Danijel Skocaj},
  title     = {Deep Learning for Large-Scale Traffic-Sign Detection and Recognition},
  journal   = {CoRR},
  volume    = {abs/1904.00649},
  year      = {2019},
  eprinttype = {arXiv},
  eprint    = {1904.00649},
  timestamp = {Wed, 24 Apr 2019 12:21:25 +0200}
}

@article{abs-1710-00486,
  author    = {Divya Gopinath and
               Guy Katz and
               Corina S. Pasareanu and
               Clark W. Barrett},
  title     = {DeepSafe: {A} Data-driven Approach for Checking Adversarial Robustness
               in Neural Networks},
  journal   = {CoRR},
  volume    = {abs/1710.00486},
  year      = {2017},
  eprinttype = {arXiv},
  eprint    = {1710.00486},
  timestamp = {Mon, 24 Jun 2019 15:54:16 +0200}
}

@article{GuoPSW17,
  author    = {Chuan Guo and
               Geoff Pleiss and
               Yu Sun and
               Kilian Q. Weinberger},
  title     = {On Calibration of Modern Neural Networks},
  journal   = {CoRR},
  volume    = {abs/1706.04599},
  year      = {2017},
  eprinttype = {arXiv},
  eprint    = {1706.04599},
  timestamp = {Sat, 15 Dec 2018 13:25:36 +0100}
}

@article{HuangKWW16,
  author    = {Xiaowei Huang and
               Marta Kwiatkowska and
               Sen Wang and
               Min Wu},
  title     = {Safety Verification of Deep Neural Networks},
  journal   = {CoRR},
  volume    = {abs/1610.06940},
  year      = {2016},
  eprinttype = {arXiv},
  eprint    = {1610.06940},
  timestamp = {Wed, 22 Dec 2021 17:16:59 +0100}
}

@article{huang2020survey,
  title={A survey of safety and trustworthiness of deep neural networks: Verification, testing, adversarial attack and defence, and interpretability},
  author={Huang, Xiaowei and Kroening, Daniel and Ruan, Wenjie and Sharp, James and Sun, Youcheng and Thamo, Emese and Wu, Min and Yi, Xinping},
  journal={Computer Science Review},
  volume={37},
  pages={100270},
  year={2020},
  publisher={Elsevier}
}

@inproceedings{PRISM,
author={M. Kwiatkowska and G. Norman and D. Parker},
title={{PRISM} 4.0: Verification of Probabilistic Real-time Systems},
booktitle={Proc. 23rd International Conference on Computer Aided Verification (CAV'11)},
year={2011},

editor={G. Gopalakrishnan and S. Qadeer},
pages={585--591},
organization={},
publisher={Springer},
series={LNCS},
volume={6806},
address={},
month={},
note={},
key={}
}

@article{STORM,
	author = {Hensel, Christian and Junges, Sebastian and Katoen, Joost-Pieter and Quatmann, Tim and Volk, Matthias},
	issn = {1433-2787},
	journal = {International Journal on Software Tools for Technology Transfer},
	month = aug,
	number = {4},
	pages = {589--610},
	title = {The probabilistic model checker {Storm}},
	volume = {24},
	year = {2022},
}
 
@inproceedings{WuOZJIGFKPB20,
  author    = {Haoze Wu and
               Alex Ozdemir and
               Aleksandar Zeljic and
               Kyle Julian and
               Ahmed Irfan and
               Divya Gopinath and
               Sadjad Fouladi and
               Guy Katz and
               Corina S. Pasareanu and
               Clark W. Barrett},
  title     = {Parallelization Techniques for Verifying Neural Networks},
  booktitle = {2020 Formal Methods in Computer Aided Design, {FMCAD} 2020, Haifa,
               Israel, September 21-24, 2020},
  pages     = {128--137},
  publisher = {{IEEE}},
  year      = {2020}
}

@inproceedings{KatzHIJLLSTWZDK19,
  author    = {Guy Katz and
               Derek A. Huang and
               Duligur Ibeling and
               Kyle Julian and
               Christopher Lazarus and
               Rachel Lim and
               Parth Shah and
               Shantanu Thakoor and
               Haoze Wu and
               Aleksandar Zeljic and
               David L. Dill and
               Mykel J. Kochenderfer and
               Clark W. Barrett},
  title     = {The {Marabou} Framework for Verification and Analysis of Deep Neural
               Networks},
  booktitle = {Computer Aided Verification - 31st International Conference, {CAV}
               2019, New York City, NY, USA, July 15-18, 2019, Proceedings, Part
               {I}},
  pages     = {443--452},
  year      = {2019}
}


@inproceedings{KadronGPY21,
  author    = {Ismet Burak Kadron and
               Divya Gopinath and
               Corina S. Pasareanu and
               Huafeng Yu},
  editor    = {Roderick Bloem and
               Rayna Dimitrova and
               Chuchu Fan and
               Natasha Sharygina},
  title     = {Case Study: Analysis of Autonomous Center Line Tracking Neural Networks},
  booktitle = {Software Verification - 13th International Conference, {VSTTE} 2021,
               New Haven, CT, USA, October 18-19, 2021, and 14th International Workshop,
               {NSV} 2021, Los Angeles, CA, USA, July 18-19, 2021, Revised Selected
               Papers},
  series    = {Lecture Notes in Computer Science},
  pages     = {104--121},
  year = {2021}
}
@inproceedings{ACT1,
  author    = {Steven Beland and
               Isaac Chang and
               Alexander Chen and
               Matthew Moser and
               James L. Paunicka and
               Douglas Stuart and
               John Vian and
               Christina Westover and
               Huafeng Yu},
  title     = {Towards Assurance Evaluation of Autonomous Systems},
  booktitle = {{IEEE/ACM} International Conference On Computer Aided Design, {ICCAD}
               2020, San Diego, CA, USA, November 2-5, 2020},
  pages     = {84:1--84:6},
  publisher = {{IEEE}},
  year      = {2020}
}

@inproceedings{ASE19,
  title={Property inference for deep neural networks},
  author={Gopinath, Divya and Converse, Hayes and Pasareanu, Corina and Taly, Ankur},
  booktitle={International Conference on Automated Software Engineering (ASE)},
  pages={797--809},
  year={2019},
  organization={IEEE}
}

@INPROCEEDINGS{ACT2,
  author={Frew, E. and McGee, T. and ZuWhan Kim and Xiao Xiao and Jackson, S. and Morimoto, M. and Rathinam, S. and Padial, J. and Sengupta, R.},
  booktitle={2004 IEEE Aerospace Conference Proceedings (IEEE Cat. No.04TH8720)}, 
  title={Vision-based road-following using a small autonomous aircraft}, 
  year={2004},
  volume={5},
  number={},
  pages={3006-3015 Vol.5}
}
  


@inproceedings{calinescu2016fact,
  title={{FACT: A} probabilistic model checker for formal verification with confidence intervals},
  author={Calinescu, Radu and Johnson, Kenneth and Paterson, Colin},
  booktitle={International Conference on Tools and Algorithms for the Construction and Analysis of Systems},
  pages={540--546},
  year={2016},
  organization={Springer}
}

@article{calinescu2015formal,
  title={Formal verification with confidence intervals to establish quality of service properties of software systems},
  author={Calinescu, Radu and Ghezzi, Carlo and Johnson, Kenneth and Pezz{\'e}, Mauro and Rafiq, Yasmin and Tamburrelli, Giordano},
  journal={IEEE transactions on reliability},
  volume={65},
  number={1},
  pages={107--125},
  year={2015},
  publisher={IEEE}
}

@article{hsieh2022verifying,
  title={Verifying Controllers With Vision-Based Perception Using Safe Approximate Abstractions},
  author={Hsieh, Chiao and Li, Yangge and Sun, Dawei and Joshi, Keyur and Misailovic, Sasa and Mitra, Sayan},
  journal={IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems},
  volume={41},
  number={11},
  pages={4205--4216},
  year={2022},
  publisher={IEEE}
}



@inproceedings{ivanov2019verisig,
  title={Verisig: verifying safety properties of hybrid systems with neural network controllers},
  author={Ivanov, Radoslav and Weimer, James and Alur, Rajeev and Pappas, George J and Lee, Insup},
  booktitle={Proceedings of the 22nd ACM International Conference on Hybrid Systems: Computation and Control},
  pages={169--178},
  year={2019}
}

@article{ivanov2020verifying,
  title={Verifying the safety of autonomous systems with neural network controllers},
  author={Ivanov, Radoslav and Carpenter, Taylor J and Weimer, James and Alur, Rajeev and Pappas, George J and Lee, Insup},
  journal={ACM Transactions on Embedded Computing Systems (TECS)},
  volume={20},
  number={1},
  pages={1--26},
  year={2020},
  publisher={ACM New York, NY, USA}
}

@inproceedings{ivanov2021verisig,
  title={Verisig 2.0: Verification of neural network controllers using taylor model preconditioning},
  author={Ivanov, Radoslav and Carpenter, Taylor and Weimer, James and Alur, Rajeev and Pappas, George and Lee, Insup},
  booktitle={International Conference on Computer Aided Verification},
  pages={249--262},
  year={2021},
  organization={Springer}
}

@InProceedings{tran2020nnv,
author="Tran, Hoang-Dung
and Yang, Xiaodong
and Manzanas Lopez, Diego
and Musau, Patrick
and Nguyen, Luan Viet
and Xiang, Weiming
and Bak, Stanley
and Johnson, Taylor T.",
editor="Lahiri, Shuvendu K.
and Wang, Chao",
title="NNV: The Neural Network Verification Tool for Deep Neural Networks and Learning-Enabled Cyber-Physical Systems",
booktitle="Computer Aided Verification",
year="2020",
publisher="Springer International Publishing",
address="Cham",
pages="3--17",
isbn="978-3-030-53288-8"
}

@InProceedings{lopez2023nnv2,
author="Lopez, Diego Manzanas
and Choi, Sung Woo
and Tran, Hoang-Dung
and Johnson, Taylor T.",
editor="Enea, Constantin
and Lal, Akash",
title="NNV 2.0: The Neural Network Verification Tool",
booktitle="Computer Aided Verification",
year="2023",
publisher="Springer Nature Switzerland",
address="Cham",
pages="397--412",
isbn="978-3-031-37703-7"
}

@article{schilling2022verification,
   title={Verification of Neural-Network Control Systems by Integrating Taylor Models and Zonotopes},
   volume={36},
   ISSN={2159-5399},
   url={http://dx.doi.org/10.1609/aaai.v36i7.20790},
   DOI={10.1609/aaai.v36i7.20790},
   number={7},
   journal={Proceedings of the AAAI Conference on Artificial Intelligence},
   publisher={Association for the Advancement of Artificial Intelligence (AAAI)},
   author={Schilling, Christian and Forets, Marcelo and Guadalupe, Sebastián},
   year={2022},
   month=jun, pages={8169–8177} }


@inproceedings{huang2022polar,
author = {Huang, Chao and Fan, Jiameng and Chen, Xin and Li, Wenchao and Zhu, Qi},
title = {POLAR: A Polynomial Arithmetic Framework for Verifying Neural-Network Controlled Systems},
year = {2022},
isbn = {978-3-031-19991-2},
publisher = {Springer-Verlag},
address = {Berlin, Heidelberg},
url = {https://doi.org/10.1007/978-3-031-19992-9_27},
doi = {10.1007/978-3-031-19992-9_27},
booktitle = {Automated Technology for Verification and Analysis: 20th International Symposium, ATVA 2022, Virtual Event, October 25–28, 2022, Proceedings},
pages = {414–430},
numpages = {17}
}

@article{wang2023polarexpress,
author = {Wang, Yixuan and Zhou, Weichao and Fan, Jiameng and Wang, Zhilu and Li, Jiajun and Chen, Xin and Huang, Chao and Li, Wenchao and Zhu, Qi},
title = {POLAR-Express: Efficient and Precise Formal Reachability Analysis of Neural-Network Controlled Systems},
year = {2023},
issue_date = {March 2024},
publisher = {IEEE Press},
volume = {43},
number = {3},
issn = {0278-0070},
url = {https://doi.org/10.1109/TCAD.2023.3331215},
doi = {10.1109/TCAD.2023.3331215},
journal = {Trans. Comp.-Aided Des. Integ. Cir. Sys.},
month = {nov},
pages = {994–1007},
numpages = {14}
}

@inproceedings{sun2019formal,
author = {Sun, Xiaowu and Khedr, Haitham and Shoukry, Yasser},
title = {Formal verification of neural network controlled autonomous systems},
year = {2019},
isbn = {9781450362825},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
url = {https://doi.org/10.1145/3302504.3311802},
doi = {10.1145/3302504.3311802},
booktitle = {Proceedings of the 22nd ACM International Conference on Hybrid Systems: Computation and Control},
pages = {147–156},
numpages = {10},
keywords = {satisfiability solvers, machine learning, formal verification},
location = {Montreal, Quebec, Canada},
series = {HSCC '19}
}

@inproceedings{dutta2019reachability,
author = {Dutta, Souradeep and Chen, Xin and Sankaranarayanan, Sriram},
title = {Reachability analysis for neural feedback systems using regressive polynomial rule inference},
year = {2019},
isbn = {9781450362825},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
url = {https://doi.org/10.1145/3302504.3311807},
doi = {10.1145/3302504.3311807},
booktitle = {Proceedings of the 22nd ACM International Conference on Hybrid Systems: Computation and Control},
pages = {157–168},
numpages = {12},
keywords = {reachability analysis, polynomial regression, neural network, hybrid system, flowpipe construction},
location = {Montreal, Quebec, Canada},
series = {HSCC '19}
}

@article{huang2019reachnn,
author = {Huang, Chao and Fan, Jiameng and Li, Wenchao and Chen, Xin and Zhu, Qi},
title = {ReachNN: Reachability Analysis of Neural-Network Controlled Systems},
year = {2019},
issue_date = {October 2019},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
volume = {18},
number = {5s},
issn = {1539-9087},
url = {https://doi.org/10.1145/3358228},
doi = {10.1145/3358228},
journal = {ACM Trans. Embed. Comput. Syst.},
month = {oct},
articleno = {106},
numpages = {22},
keywords = {Bernstein polynomials, Neural network controlled systems, reachability, verification}
}

@InProceedings{fan2020reachnnstar,
author="Fan, Jiameng
and Huang, Chao
and Chen, Xin
and Li, Wenchao
and Zhu, Qi",
editor="Hung, Dang Van
and Sokolsky, Oleg",
title="ReachNN*: A Tool for Reachability Analysis of Neural-Network Controlled Systems",
booktitle="Automated Technology for Verification and Analysis",
year="2020",
publisher="Springer International Publishing",
address="Cham",
pages="537--542",
isbn="978-3-030-59152-6"
}

@InProceedings{kochdumper2023open,
author="Kochdumper, Niklas
and Schilling, Christian
and Althoff, Matthias
and Bak, Stanley",
editor="Rozier, Kristin Yvonne
and Chaudhuri, Swarat",
title="Open- and Closed-Loop Neural Network Verification Using Polynomial Zonotopes",
booktitle="NASA Formal Methods",
year="2023",
publisher="Springer Nature Switzerland",
address="Cham",
pages="16--36",
isbn="978-3-031-33170-1"
}



@misc{waite2023datadriven,
      title={Data-Driven Modeling and Verification of Perception-Based Autonomous Systems}, 
      author={Thomas Waite and Alexander Robey and Hassani Hamed and George J. Pappas and Radoslav Ivanov},
      year={2023},
      eprint={2312.06848},
      archivePrefix={arXiv},
      primaryClass={eess.SY}
}

@misc{cai2024scalable,
      title={Scalable Surrogate Verification of Image-based Neural Network Control Systems using Composition and Unrolling}, 
      author={Feiyang Cai and Chuchu Fan and Stanley Bak},
      year={2024},
      eprint={2405.18554},
      archivePrefix={arXiv},
      primaryClass={cs.LG}
}

@article{arjomandbigdeli2024saiv,
  title={Verification of Neural Network Control Systems in Continuous Time},
  author={Arjomand Bigdeli, Ali and Mata, Andrew and Bak, Stanley},
  journal={7th Symposium on AI Verification (SAIV)},
  year={2024}
}


@article{PSafetyGuarantees,
  author    = {Sydney M. Katz and
               Kyle D. Julian and
               Christopher A. Strong and
               Mykel J. Kochenderfer},
  title     = {Generating Probabilistic Safety Guarantees for Neural Network Controllers},
  journal   = {CoRR},
  volume    = {abs/2103.01203},
  year      = {2021},
  eprinttype = {arXiv},
  eprint    = {2103.01203},
  timestamp = {Thu, 04 Mar 2021 17:00:40 +0100}
}

@article{katz2022verification,
  title={Verification of image-based neural network controllers using generative models},
  author={Katz, Sydney M and Corso, Anthony L and Strong, Christopher A and Kochenderfer, Mykel J},
  journal={Journal of Aerospace Information Systems},
  volume={19},
  number={9},
  pages={574--584},
  year={2022},
  publisher={American Institute of Aeronautics and Astronautics}
}

@inproceedings{santa2022nnlander,
  title={NNLander-VeriF: A Neural Network Formal Verification Framework for Vision-Based Autonomous Aircraft Landing},
  author={Santa Cruz, Ulices and Shoukry, Yasser},
  booktitle={NASA Formal Methods Symposium},
  pages={213--230},
  year={2022},
  organization={Springer}
}

@inproceedings{ghosh2021counterexample,
  title={Counterexample-guided synthesis of perception models and control},
  author={Ghosh, Shromona and Pant, Yash Vardhan and Ravanbakhsh, Hadi and Seshia, Sanjit A},
  booktitle={2021 American Control Conference (ACC)},
  pages={3447--3454},
  year={2021},
  organization={IEEE}
}

@inproceedings{dean2021certainty,
  title={Certainty equivalent perception-based control},
  author={Dean, Sarah and Recht, Benjamin},
  booktitle={Learning for Dynamics and Control},
  pages={399--411},
  year={2021},
  organization={PMLR}
}

@article{tong2022enforcing,
  title={Enforcing safety for vision-based controllers via Control Barrier Functions and Neural Radiance Fields},
  author={Tong, Mukun and Dawson, Charles and Fan, Chuchu},
  journal={arXiv preprint arXiv:2209.12266},
  year={2022}
}

@article{dawson2022learning,
  title={Learning safe, generalizable perception-based hybrid control with certificates},
  author={Dawson, Charles and Lowenkamp, Bethany and Goff, Dylan and Fan, Chuchu},
  journal={IEEE Robotics and Automation Letters},
  volume={7},
  number={2},
  pages={1904--1911},
  year={2022},
  publisher={IEEE}
}

@article{dawson2022safe,
  title={Safe Control with Learned Certificates: A Survey of Neural {L}yapunov, Barrier, and Contraction methods},
  author={Dawson, Charles and Gao, Sicun and Fan, Chuchu},
  journal={arXiv preprint arXiv:2202.11762},
  year={2022}
}

@misc{so2023train,
      title={How to Train Your Neural Control Barrier Function: Learning Safety Filters for Complex Input-Constrained Systems}, 
      author={Oswin So and Zachary Serlin and Makai Mann and Jake Gonzales and Kwesi Rutledge and Nicholas Roy and Chuchu Fan},
      year={2023},
      eprint={2310.15478},
      archivePrefix={arXiv},
      primaryClass={id='math.OC' full_name='Optimization and Control' is_active=True alt_name=None in_archive='math' is_general=False description='Operations research, linear programming, control theory, systems theory, optimal control, game theory'}
}

@incollection{puasuareanu2019compositional,
  title={Compositional verification for autonomous systems with deep learning components},
  author={P{\u{a}}s{\u{a}}reanu, Corina S and Gopinath, Divya and Yu, Huafeng},
  booktitle={Safe, Autonomous and Intelligent Vehicles},
  pages={187--197},
  year={2019},
  publisher={Springer}
}

@inproceedings{alur2011formal,
  title={Formal verification of hybrid systems},
  author={Alur, Rajeev},
  booktitle={Proceedings of the ninth ACM international conference on Embedded software},
  pages={273--278},
  year={2011}
}

@INPROCEEDINGS{ames2019cbf,
  author={Ames, Aaron D. and Coogan, Samuel and Egerstedt, Magnus and Notomista, Gennaro and Sreenath, Koushil and Tabuada, Paulo},
  booktitle={2019 18th European Control Conference (ECC)}, 
  title={Control Barrier Functions: Theory and Applications}, 
  year={2019},
  volume={},
  number={},
  pages={3420-3431},
  keywords={},
  doi={10.23919/ECC.2019.8796030}}


@inproceedings{fremont2020formal,
  title={Formal analysis and redesign of a neural network-based aircraft taxiing system with VerifAI},
  author={Fremont, Daniel J and Chiu, Johnathan and Margineantu, Dragos D and Osipychev, Denis and Seshia, Sanjit A},
  booktitle={International Conference on Computer Aided Verification},
  pages={122--134},
  year={2020},
  organization={Springer}
}

@article{Fang22CGA,
  title = {Software Performability Analysis Using Fast Parametric Model Checking},
  author = {Fang, Xinwei and Calinescu, Radu and Gerasimou, Simos and Alhwikem, Faisal},
  keywords = {Logic in Computer Science (cs.LO), FOS: Computer and information sciences, FOS: Computer and information sciences},
  journal={arXiv preprint arXiv:2208.12723},
  year = {2022},
}

@article{gowal2018effectiveness,
  title={On the effectiveness of interval bound propagation for training verifiably robust models},
  author={Gowal, Sven and Dvijotham, Krishnamurthy and Stanforth, Robert and Bunel, Rudy and Qin, Chongli and Uesato, Jonathan and Arandjelovic, Relja and Mann, Timothy and Kohli, Pushmeet},
  journal={arXiv preprint arXiv:1810.12715},
  year={2018}
}

@inproceedings{
raghunathan2018certified,
title={Certified Defenses against Adversarial Examples },
author={Aditi Raghunathan and Jacob Steinhardt and Percy Liang},
booktitle={International Conference on Learning Representations},
year={2018}
}

@article{singh2019abstract,
  title={An abstract domain for certifying neural networks},
  author={Singh, Gagandeep and Gehr, Timon and P{\"u}schel, Markus and Vechev, Martin},
  journal={Proceedings of the ACM on Programming Languages},
  volume={3},
  number={POPL},
  pages={1--30},
  year={2019},
  publisher={ACM New York, NY, USA}
}

@inproceedings{
fromherz2021fast,
title={Fast Geometric Projections for Local Robustness Certification},
author={Aymeric Fromherz and Klas Leino and Matt Fredrikson and Bryan Parno and Corina Pasareanu},
booktitle={International Conference on Learning Representations},
year={2021}
}

@INPROCEEDINGS{leino21gloro,
    title = {Globally-Robust Neural Networks},
    author = {Klas Leino and Zifan Wang and Matt Fredrikson},
    booktitle = {International Conference on Machine Learning (ICML)},
    year = {2021}
}


@InProceedings{pmlr-v97-cohen19c,
  title = 	 {Certified Adversarial Robustness via Randomized Smoothing},
  author =       {Cohen, Jeremy and Rosenfeld, Elan and Kolter, Zico},
  booktitle = 	 {Proceedings of the 36th International Conference on Machine Learning},
  pages = 	 {1310--1320},
  year = 	 {2019},
  editor = 	 {Chaudhuri, Kamalika and Salakhutdinov, Ruslan},
  volume = 	 {97},
  series = 	 {Proceedings of Machine Learning Research},
  month = 	 {09--15 Jun},
  publisher =    {PMLR}
}


@misc{easa,
  title = {{EASA} Concept Paper: First usable guidance for Level 1 machine learning applications},
  url = {https://www.easa.europa.eu/en/downloads/134357/en},
  year = {2021},
}



@article{clevert2015fast,
  title={Fast and accurate deep network learning by exponential linear units (elus)},
  author={Clevert, Djork-Arn{\'e} and Unterthiner, Thomas and Hochreiter, Sepp},
  journal={arXiv preprint arXiv:1511.07289},
  year={2015}
}

@ARTICLE{DES,
  author={Ramadge, P.J.G. and Wonham, W.M.},
  journal={Proceedings of the IEEE}, 
  title={The control of discrete event systems}, 
  year={1989},
  volume={77},
  number={1},
  pages={81-98},
  doi={10.1109/5.21072}}

  @article{TKACHEV20171,
title = {Quantitative model-checking of controlled discrete-time {Markov} processes},
journal = {Information and Computation},
volume = {253},
pages = {1-35},
year = {2017},
issn = {0890-5401},
doi = {https://doi.org/10.1016/j.ic.2016.11.006}
}


@manual{xplane,
  title        = {X-Plane},
  author       = {{Laminar Research}},
  year         = {2023},
  note         = {\url{https://www.x-plane.com}},
  howpublished = {\url{https://www.x-plane.com}}
}

@inproceedings{dosovitskiy17carla,
  title = { {CARLA}: {An} Open Urban Driving Simulator},
  author = {Alexey Dosovitskiy and German Ros and Felipe Codevilla and Antonio Lopez and Vladlen Koltun},
  booktitle = {Proceedings of the 1st Annual Conference on Robot Learning},
  pages = {1--16},
  year = {2017}
}

@MISC{Webots,
  AUTHOR = {Webots},
  TITLE  = {http://www.cyberbotics.com},
  NOTE   = {Open-source Mobile Robot Simulation Software},
  EDITOR = {Cyberbotics Ltd.},
  URL    = {http://www.cyberbotics.com}
}
