]. B. Myers, B. Shneiderman, C. Plaisant, M. Cohen, S. Jacobs et al., Human Error Designing the User Interface: Strategies for Effective Human-Computer Interaction, " CEC Faculty Books and Book Chapters Formally Verifying Interactive Systems: A Review Using Formal Verification to Evaluate Human-Automation Interaction: A Review, Why are Human-Computer Interfaces Difficult to Design and Implement Design, Specification and Verification of Interactive Systems '97 IEEE Transactions on Systems, Man, and Cybernetics: Systems, pp.109-124, 1990.

V. Lecrubier, Un langage formel pour la conception, la spécification et la vérification d'interfaces homme-machine embarquées critiques, " l'Institut Supérieur de l'Aéronautique et de l'Espace (ISAE), https

J. C. Campos, M. D. Harrison, S. Combéfis, D. Giannakopoulou, C. Pecheur et al., Interaction Engineering Using the IVY Tool A formal framework for design and analysis of human-machine interaction, Proceedings of the 1st ACM SIGCHI Symposium on Engineering Interactive Computing Systems 2011 IEEE International Conference on Systems, Man, and Cybernetics (SMC), pp.35-44, 2000.

D. Navarre, P. Palanque, J. Ladry, and E. Barboni, ICOs, ACM Transactions on Computer-Human Interaction, vol.16, issue.4, pp.181-1856, 2009.
DOI : 10.1145/1614390.1614393

R. Oliveira, S. Dupuy-chessa, G. Calvary, and D. Dadolle, Using formal models to cross check an implementation, Proceedings of the 8th ACM SIGCHI Symposium on Engineering Interactive Computing Systems, EICS '16, pp.126-137, 2016.
DOI : 10.1109/UsARE.2012.6226786

URL : https://hal.archives-ouvertes.fr/hal-01492641

S. Chatty, M. Magnaudet, and D. Prun, Verification of properties of interactive components from their executable code, Proceedings of the 7th ACM SIGCHI Symposium on Engineering Interactive Computing Systems, EICS '15, pp.276-285, 2015.
DOI : 10.1007/978-3-540-92698-6_30

URL : https://hal.archives-ouvertes.fr/hal-01619784

P. A. Abdulla, J. Deneux, G. Stålmarck, H. Ågren, and O. Åkerlund, Designing Safe, Reliable Systems Using Scade, Leveraging Applications of Formal Methods, pp.115-129, 2004.
DOI : 10.1007/11925040_8

URL : http://www.cert.fr/isaac/doc/isola_2004-11-30.pdf

N. Halbwachs, P. Caspi, P. Raymond, and D. Pilaud, The synchronous data flow programming language LUSTRE, Proceedings of the IEEE, pp.1305-1320, 1991.
DOI : 10.1109/5.97300

M. Sheeran, S. Singh, and G. Stålmarck, Checking Safety Properties Using Induction and a SAT-Solver, Formal Methods in Computer-Aided Design
DOI : 10.1007/3-540-40922-X_8

M. Clabaut, N. Ge, N. Breton, E. Jenn, R. Delmas et al., Industrial Grade Model Checking Use Cases, Constraints, Tools and Applications, 8th European Congress on Embedded Real Time Software and Systems (ERTS 2016), 2016.
URL : https://hal.archives-ouvertes.fr/hal-01291365

N. Ge, E. Jenn, N. Breton, and Y. Fonteneau, Formal Verification of a Rover Anti-collision System, Critical Systems: Formal Methods and Automated Verification, pp.171-188, 2016.
DOI : 10.1007/3-540-40922-X_8

URL : https://hal.archives-ouvertes.fr/hal-01649511

P. Cuenot, E. Jenn, E. Faure, N. Broueilh, and E. Rouland, An Experiment on Exploiting Virtual Platforms for the Development of Embedded Equipments, 8th European Congress on Embedded Real Time Software and Systems, p.2016, 2016.
URL : https://hal.archives-ouvertes.fr/hal-01289499

N. Ge, A. Dieumegard, E. Jenn, and L. Voisin, Correct-by- Construction Specification to Verified Code, 2017.

A. Dieumegard, N. Ge, and E. Jenn, Event-B at Work: Some Lessons Learnt from an Application to a Robot Anti-collision Function, NASA Formal Methods Symposium, pp.327-341, 2017.
DOI : 10.1007/978-3-642-16561-0_31

URL : https://hal.archives-ouvertes.fr/hal-01535060

A. Biere, C. Artho, and V. Schuppan, Liveness Checking as Safety Checking, Electronic Notes in Theoretical Computer Science, vol.66, issue.2, pp.160-177, 2002.
DOI : 10.1016/S1571-0661(04)80410-9

URL : https://doi.org/10.1016/s1571-0661(04)80410-9

P. Boström, Contract-Based Verification of Simulink Models, Formal Methods and Software Engineering, pp.291-306, 2011.
DOI : 10.1145/1113830.1113834

M. Dahlweid, M. Moskal, T. Santen, S. Tobies, and W. Schulte, VCC: Contract-based modular verification of concurrent C, 2009 31st International Conference on Software Engineering, Companion Volume, pp.429-430, 2009.
DOI : 10.1109/ICSE-COMPANION.2009.5071046

Y. Ait-ameur and M. Baron, Formal and experimental validation approaches in HCI systems design based on a shared event B model, International Journal on Software Tools for Technology Transfer, vol.8, issue.3, pp.547-563, 2006.
DOI : 10.1145/363235.363259