| Model checking UML state machines and collaborations T Schäfer, A Knapp, S Merz Electronic Notes in Theoretical Computer Science 55 (3), 357-369, 2001 | 331 | 2001 |
| Model checking timed UML state machines and collaborations A Knapp, S Merz, C Rauh Formal Techniques in Real-Time and Fault-Tolerant Systems: 7th International …, 2002 | 268 | 2002 |
| Model checking: A tutorial overview S Merz Summer School on Modeling and Verification of Parallel Processes, 3-38, 2000 | 240 | 2000 |
| Model checking and code generation for UML state machines and collaborations A Knapp, S Merz | 166 | 2002 |
| Expressiveness+ automation+ soundness: Towards combining SMT solvers and interactive proof assistants P Fontaine, JY Marion, S Merz, LP Nieto, A Tiu Tools and Algorithms for the Construction and Analysis of Systems: 12th …, 2006 | 123 | 2006 |
| TLA + Proofs D Cousineau, D Doligez, L Lamport, S Merz, D Ricketts, H Vanzetto FM 2012: Formal Methods: 18th International Symposium, Paris, France, August …, 2012 | 120 | 2012 |
| Verifying Safety Properties with the TLA + Proof System K Chaudhuri, D Doligez, L Lamport, S Merz Automated Reasoning: 5th International Joint Conference, IJCAR 2010 …, 2010 | 106 | 2010 |
| Specifying and verifying fault-tolerant systems L Lamport, S Merz International Symposium on Formal Techniques in Real-Time and Fault-Tolerant …, 1994 | 96 | 1994 |
| Type checking higher-order polymorphic multi-methods F Bourdoncle, S Merz Proceedings of the 24th ACM SIGPLAN-SIGACT symposium on Principles of …, 1997 | 92 | 1997 |
| Decidability and incompleteness results for first-order temporal logics of linear time S Merz Journal of Applied Non-Classical Logics 2 (2), 139-156, 1992 | 78 | 1992 |
| On the Logic of TLA+ S Merz Computing and Informatics 22 (3-4), 351-379, 2003 | 70 | 2003 |
| A spatio-temporal logic for the specification and refinement of mobile systems S Merz, M Wirsing, J Zappe Fundamental Approaches to Software Engineering: 6th International Conference …, 2003 | 68 | 2003 |
| Exploiting symmetry in SMT problems D Déharbe, P Fontaine, S Merz, B Woltzenlogel Paleo International Conference on Automated Deduction, 222-236, 2011 | 62 | 2011 |
| The Specification Language TLA+ S Merz Logics of specification languages, 401-451, 2008 | 59 | 2008 |
| Towards Verification of the Pastry Protocol Using TLA + T Lu, S Merz, C Weidenbach International Conference on Formal Methods for Open Object-Based Distributed …, 2011 | 57 | 2011 |
| A reduction theorem for the verification of round-based distributed algorithms M Chaouch-Saad, B Charron-Bost, S Merz International Workshop on Reachability Problems, 93-106, 2009 | 55 | 2009 |
| A TLA+ proof system KC Chaudhuri, D Doligez, L Lamport, S Merz arXiv preprint arXiv:0811.1914, 2008 | 54 | 2008 |
| The TLA + Proof System: Building a Heterogeneous Verification Platform K Chaudhuri, D Doligez, L Lamport, S Merz International Colloquium on Theoretical Aspects of Computing, 44-44, 2010 | 50 | 2010 |
| Truly on-the-fly LTL model checking M Hammer, A Knapp, S Merz International Conference on Tools and Algorithms for the Construction and …, 2005 | 47 | 2005 |
| Diagram refinements for the design of reactive systems. D Cansell, D Méry, S Merz J. Univers. Comput. Sci. 7 (2), 159-174, 2001 | 45 | 2001 |