@InProceedings{Allen97SimWkshop,
      AUTHOR = {Allen, Robert and Garlan, David},
      TITLE = {Formal Modeling and Analysis of the HLA RTI},
      YEAR = {1997},
      MONTH = {March},
      BOOKTITLE = {Summary Report of the 1997 Spring Simulation Interoperability Workshop},
      KEY = {Allen},
      PAGES = {1153-1161},
      ADDRESS = {Orlando, Florida},
      PUBLISHER = {Institute for Simulation and Training},
      PDF = {http://www.cs.cmu.edu/afs/cs/project/able/ftp/hla-siw97/hla-siw97.pdf},
      PS = {http://www.cs.cmu.edu/afs/cs/project/able/ftp/hla-siw97/hla-siw97.ps},
      ABSTRACT = {The HLA RTI is a complex artifact, supporting several classes of interaction (e.g., federation management, object management, time management). A critical challenge in producing an RTI architectural framework (and its associated simulation interface specifications) is to develop confidence that its specification is well-formed and complete. In this paper we describe on-going work in formally modelling the HLA both to document the standard more precisely, as well as to analyze it for anomalies, omissions, inconsistencies, and ambiguities. The technical basis for this work is the use of a formal architectural description language, called Wright, and its accompanying toolset. },
      NOTE = {IST-CF-97-01.2},
      KEYWORDS = {Formal Methods, Software Architecture, Wright}
}