[1] NORTHROP L.Ultra-large-scale systems:the software challenge of the future[D].USA:Carnegie Mellon University, 2006.
[2] BARBONI E, NAVARRE D. A formal description tech?nique for interactive cockpit applications compliant with ARINC specification 661 [ C J//IEEE 2nd International Symposium on Industrial Embedded Systems, Lisbon, Portugal, 2007:250-257.
[3] KAMIYAMA T, SOEDA T, Y00 M. A Simulink to UML transformation tool for embedded control software design [J]. International Journal of Modeling and Optimization, 2012,2(3):197-201.
[6] JOSHI A, HEIMDAHL M P E. Model-based safety analysis of Simulink models using SCADE design verifier [C ]//Tlie 24th International Conference on Computer Safety, Reliability, and Security, Springer Berlin Heidelberg, 2005, 3688:122-135.