| Correctness by construction: Developing a commercial secure system A Hall, R Chapman IEEE software 19 (1), 18-25, 2002 | 311 | 2002 |
| Is proof more cost-effective than testing? S King, J Hammond, R Chapman, A Pryor IEEE Transactions on software Engineering 26 (8), 675-686, 2000 | 138 | 2000 |
| Integrated program proof and worst-case timing analysis of SPARK Ada R Chapman, A Burns, A Wellings Proceedings of the Workshop on Language, Compiler, and Tool Support for Real …, 1994 | 104 | 1994 |
| Combining static worst-case timing analysis and program proof R Chapman, A Burns, A Wellings Real-Time Systems 11 (2), 145-171, 1996 | 90 | 1996 |
| The 1st verified software competition: Experience report V Klebanov, P Müller, N Shankar, GT Leavens, V Wüstholz, E Alkassar, ... International Symposium on Formal Methods, 154-168, 2011 | 81 | 2011 |
| Correctness by construction: a manifesto for high integrity software R Chapman Proceedings of the 10th Australian workshop on Safety critical systems and …, 2006 | 68 | 2006 |
| Engineering the Tokeneer enclave protection software J Barnes, R Chapman, R Johnson, J Widmaier, D Cooper, B Everett Proceedings of IEEE International Symposium on Secure Software Engineering, 2006 | 68* | 2006 |
| Enforcing security and safety models with an information flow analysis tool R Chapman, A Hilton ACM SIGAda Ada Letters 24 (4), 39-46, 2004 | 65 | 2004 |
| Static timing analysis and program proof. R Chapman University of York, 1995 | 56 | 1995 |
| Are we there yet? 20 years of industrial theorem proving with SPARK R Chapman, F Schanda International Conference on Interactive Theorem Proving, 17-26, 2014 | 48 | 2014 |
| Industrial experience with SPARK R Chapman ACM SIGAda Ada Letters 20 (4), 64-68, 2000 | 45 | 2000 |
| SPARK 2014 and GNATprove D Hoang, Y Moy, A Wallenburg, R Chapman International Journal on Software Tools for Technology Transfer 17 (6), 695-707, 2015 | 41 | 2015 |
| The value of verification: Positive experience of industrial proof S King, J Hammond, R Chapman, A Pryor International Symposium on Formal Methods, 1527-1545, 1999 | 29 | 1999 |
| Correctness by Construction: A Manifesto for High-Integrity Software M Croxford | 28 | 2005 |
| Industrial strength exception freedom P Amey, R Chapman ACM SIGAda Ada Letters 23 (1), 1-9, 2002 | 27 | 2002 |
| An integrated approach to high integrity software verification A Ireland, BJ Ellis, A Cook, R Chapman, J Barnes Journal of Automated Reasoning 36 (4), 379-410, 2006 | 23 | 2006 |
| Static verification and extreme programming P Amey, R Chapman ACM SIGAda Ada Letters 24 (1), 4-9, 2003 | 23 | 2003 |
| Worst-case timing analysis of exception handling in Ada R Chapman, A Burns, A Wellings Ada: Towards Maturity. Proceedings of the 1993 AdaUK conference, 148-164, 1993 | 23 | 1993 |
| The tokeneer experiments J Woodcock, EG Aydal, R Chapman Reflections on the Work of CAR Hoare, 405-430, 2010 | 19 | 2010 |
| Worst-case timing analysis via finding longest paths in SPARK Ada basic-path graphs R Chapman Department of Computer Science Yellow Report YCS 246, 1994 | 18 | 1994 |
Alan BurnsUniversity of York, UKVerified email at york.ac.uk
