"240","Developing Mode-Rich Satellite Software by Refinement in Event B","To ensure dependability of on-board satellite systems, the  designers should, in particular, guarantee correct implementation of the mode transition scheme, i.e., ensure that the states of the system components are consistent with the global system mode. However, there is still a lack of scalable approaches to formal verification of correctness of complex mode transitions. In this paper we present a formal development of an Attitude and Orbit Control System (AOCS) undertaken within the ICT DEPLOY project. AOCS is a complex mode-rich system, which has an intricate mode-transition scheme. We show that re�finement in Event B provides the engineers with a scalable formal technique that enables both development of mode-rich systems and proof-based verification of their mode consistency.","http://deploy-eprints.ecs.soton.ac.uk/240/","Iliasov, Alexei and Troubitsyna, Elena and Laibinis, Linas and Romanovsky, Alexander and Varpaaniemi, Kimmo and Ilic, Dubravka and Latvala, Timo","UNSPECIFIED","       <span class=\"person_name\">Iliasov, Alexei</span> and <span class=\"person_name\">Troubitsyna, Elena</span> and <span class=\"person_name\">Laibinis, Linas</span> and <span class=\"person_name\">Romanovsky, Alexander</span> and <span class=\"person_name\">Varpaaniemi, Kimmo</span> and <span class=\"person_name\">Ilic, Dubravka</span> and <span class=\"person_name\">Latvala, Timo</span>     (2010)  <a href=\"http://deploy-eprints.ecs.soton.ac.uk/240/\"><em>Developing Mode-Rich Satellite Software by Refinement in Event B.</em></a>       In: 15th International Workshop on Formal Methods for Industrial Critical Systems (FMICS 2010), September 20-21, 2010, Antwerp, Belgium.         (In Press)   ","\"Alexei Iliasov\" <Alexei.Iliasov@newcastle.ac.uk>,Elena.Troubitsyna@abo.fi,Linas.Laibinis@abo.fi,alexander.romanovsky@ncl.ac.uk,,,","2010"