A. Reseach, D. Report, and . Nitrd, High-Confidence Medical Devices : Cyber-Physical Systems for 21st Century Health Care

J. Abrial, B#: Toward a Synthesis between Z and B, 3nd International Conference of B and Z Users -ZB 2003, 2003.
DOI : 10.1007/3-540-44880-2_12

J. Abrial, Modeling in Event-B: System and Software Engineering, 2009.
DOI : 10.1017/CBO9781139195881

J. Abrial and D. Cansell, Click???n Prove: Interactive Proofs within Set Theory, TPHOL 2003, pp.1-24, 2003.
DOI : 10.1007/10930755_1
URL : https://hal.archives-ouvertes.fr/inria-00099836

R. Back, On correct refinement of programs, Journal of Computer and System Sciences, vol.23, issue.1, pp.49-68, 1979.
DOI : 10.1016/0022-0000(81)90005-2

D. Bjorner, Software Engineering 1 Abstraction and Modelling. Texts in Theoretical Computer Science. An EATCS Series, 2006.

D. Bjorner, Software Engineering 2 Specification of Systems and Languages. Texts in Theoretical Computer Science. An EATCS Series, 2006.

D. Bjorner, Software Engineering 3 Domains, Requirements, and Software Design Texts in Theoretical Computer Science. An EATCS Series, 2006.

D. Bjørner and M. C. Henson, Logics of Specification Languages, EATCS Textbook in Computer Science, 2007.
DOI : 10.1007/978-3-540-74107-7

B. Boston-scientific and . Scientific, Pacemaker system specification, 2007.

D. Cansell and D. Méry, The event-B Modelling Method: Concepts and Case Studies, pp.33-140, 2007.
DOI : 10.1007/978-3-540-74107-7_3
URL : https://hal.archives-ouvertes.fr/inria-00579550

D. Cansell, D. Méry, and J. Rehm, Formal Specification and Development in B, chapter Time Constraint Patterns for Event B Development, Lecture Notes in Computer Science, pp.140-154, 2006.

O. Grumberg, E. M. Clarke, and D. Peled, Model Checking, 1999.

A. Kenneth, M. A. Ellenbogen, and . Wood, Cardiac Pacing and ICDs, 2005.

E. Gamma, R. Helm, R. Johnson, R. Vlissides, and P. Gamma, Design Patterns : Elements of Reusable Object-Oriented Software design Patterns, 1994.

B. S. Goldman, E. J. Noble, J. G. Heller, and D. Covvey, The pacemaker challenge, CMAJ, vol.110, issue.1, pp.28-31, 1974.

A. Oliveira, G. , and M. Oliveira, Formal specification of a cardiac pacing system, FM 2009, pp.692-707, 2009.

A. Hesselson, Simplified Interpretations of Pacemaker ECGs, 2003.
DOI : 10.1002/9780470695982

C. A. Hoare, J. Misra, G. T. Leavens, and N. Shankar, The verified software initiative, ACM Computing Surveys, vol.41, issue.4, pp.1-8, 2009.
DOI : 10.1145/1592434.1592439

T. Hoare, The verifying compiler: A grand challenge for computing research, Journal of the ACM, vol.50, issue.1, pp.63-69, 2003.
DOI : 10.1145/602382.602403

D. Jackson, Alloy: a lightweight object modelling notation, ACM Transactions on Software Engineering and Methodology, vol.11, issue.2, pp.256-290, 2002.
DOI : 10.1145/505145.505149

T. Gary, J. Leavens, D. Abrial, M. Batory, A. Butler et al., Roadmap for enhanced languages and methods to aid verification, Fifth Intl. Conf. Generative Programming and Component Engineering, pp.221-235, 2006.

I. Lee, G. J. Pappas, R. Cleaveland, J. Hatcliff, B. H. Krogh et al., The Problem with Threads, Computer, vol.39, issue.5, pp.33-38, 2006.
DOI : 10.1109/MC.2006.180

M. Leuschel and M. Butler, ProB: A Model Checker for B, LNCS, pp.855-874, 2003.
DOI : 10.1007/978-3-540-45236-2_46

C. J. Love, Cardiac Pacemakers and Defibrillators, 2006.

H. Daniel-macedo, P. G. Larsen, and J. Fitzgerald, Incremental Development of a Distributed Real-Time Model of a Cardiac Pacing System Using VDM, LNCS, pp.181-197, 2008.

L. Valerio-panzica, A. T. Manna, A. Bonanno, and . Motta, Poster on a simple pacemaker implementation, 2009.

A. E. Writing-committee-members, J. P. Epstein, K. A. Dimarco, . Ellenbogen, N. A. Estes et al., Guidelines for Device- Based Therapy of Cardiac Rhythm Abnormalities: Executive Summary: A Report of the American College of Cardiology, American Heart Association Task Force on Practice Guidelines (Writing Committee to Revise the ACC/AHA/NASPE 2002 Guideline Update for Implantation of Cardiac Pacemakers and Antiarrhythmia Devices): Developed in Collaboration With the American Association for Thoracic Surgery and Society of Thoracic Surgeons, pp.1172820-2840, 2008.

. Prob, The ProB animator and model checker for the B method

R. Project, Rigorous open development environment for complex systems . http://rodin-b-sharp.sourceforge, 2004.

J. Rehm, Pattern Based Integration of Time applied to the 2-Slots Simpson Algorithm In Integration of Model-based Formal Methods and Tools in IFM, 2009.

J. Woodcock and R. Banach, The verification grand challenge, pp.661-668, 2007.

J. Woodcock, First Steps in the Verified Software Grand Challenge, Computer, vol.39, issue.10, pp.57-64, 2006.
DOI : 10.1109/MC.2006.340