, ?? ? ( ), the place p can only serve as input place or output place of transition t or, place p has no relation with transition t. That is to say, in CP-net we cannot "test" (i.e., take and return the same tokes) the presence (and quantity) of a certain color c ?? ? C(p) in place p by a same firing mode of

, CP-nets uses an explicit manner to define different firing modes of a transition, 1981.

W. References-van-der-aalst and K. M. Van-hee, Workflow Management: Models, Methods, and Systems, 2002.

W. Van-der-aalst, C. Stahl, M. Westergaard, K. Jensen, W. Van-der-aalst et al., Strategies for Modeling Complex Processes Using Colored Petri Nets, Transactions on Petri Nets and Other Models of Concurrency VII, pp.6-55, 2013.

R. Abo and L. Voisin, Formal Implementation of Data Validation for Railway Safety-Related Systems with OVADO, SEFM 2013: Software Engineering and Formal Methods, pp.221-236, 2013.

J. Abrial, The B-book: Assigning Programs to Meanings, 2005.

J. Abrial, Modeling in Event-B: System and Software Engineering, 2010.

D. Aceituna, H. Do, and S. Lee, SQ^(2)E: An Approach to Requirements Validation with Scenario Question, 2010 Asia Pacific Software Engineering Conference. IEEE, pp.33-42, 2010.

D. Aceituna, H. Do, and S. Lee, Interactive requirements validation for reactive systems through virtual requirements prototype, pp.1-10, 2011.

G. A. Agha, D. Cindio, F. Rozenberg, and G. , Concurrent Object-Oriented Programming and Petri Nets, Lecture Notes in Computer Science), 2001.

E. Ahmad, Y. Dong, B. Larson, J. Lü, T. Tang et al., Behavior modeling and verification of movement authority scenario of Chinese Train Control System using AADL, Sci China -Inf Sci, vol.58, issue.11, pp.1-20, 2015.

R. Alur, R. K. Brayton, T. A. Henzinger, S. Qadeer, and S. K. Rajamani, Partial-order reduction in symbolic state space exploration, Computer Aided Verification, pp.340-351, 1997.

R. Alur and D. L. Dill, A theory of timed automata, Theor Comput Sci, vol.126, issue.2, pp.183-235, 1994.

A. W. Appel and D. B. Macqueen, Standard ML of New Jersey, pp.1-13, 1991.

S. Baarir, C. Dutheillet, S. Haddad, and J. M. Ilie, On the use of exact lumpability in partially symmetrical well-formed nets, Second International Conference on the Quantitative Evaluation of Systems (QEST'05), pp.23-32, 2005.
URL : https://hal.archives-ouvertes.fr/hal-01486924

D. Bahn, DB presses ahead with train automation, 2017.

G. Balbo, Introduction to Stochastic Petri Nets, Lectures on Formal Methods and Performance Analysis, 2000.

H. Springer-berlin, , pp.84-155

Z. Baranová, J. Barnat, K. Kejstová, T. Ku?era, H. Lauko et al., Model Checking of C and C++ with DIVINE 4, Automated Technology for Verification and Analysis, vol.10482, pp.201-207, 2017.

P. Barger, W. Schön, and M. Bouali, A Study of Railway ERTMS Safety with Colored Petri Nets, The European Safety and Reliability Conference (ESREL'09), 2009.
URL : https://hal.archives-ouvertes.fr/hal-00447528

M. Batra, A. Malik, and M. Dave, Formal Methods : Benefits , Challenges and Future Direction, J Glob Res Comput Sci, vol.4, issue.5, pp.2-6, 2013.

E. Battiston, D. Cindio, F. Mauri, and G. , OBJSA Nets: A Class of High-level Nets Having Objects as Domains, pp.189-212, 1991.

D. Bed?k, Application of Petri-nets in object-oriented environment, 2016 IEEE 17th International Symposium on Computational Intelligence and Informatics, pp.117-122, 2016.

P. Behm, P. Benoit, A. Faivre, and J. Meynadier, Météor: A Successful Application of B in a Large Project, FM 1999: Formal Methods, pp.369-387, 1999.

N. Belloir, J. Bruel, and R. Faudou, Modélisation des exigences en UML/SysML, Rev Génie Logiciel, issue.111, pp.6-12, 2014.

J. Bengtsson, K. Larsen, F. Larsson, P. Pettersson, and Y. W. , UPPAAL -a Tool Suite for Automatic Verification of Real-Time Systems, Hybrid Systems III: Verification and Control, pp.232-243, 1995.

B. Bérard, M. Bidoit, A. Finkel, F. Laroussinie, A. Petit et al., Systems and Software Verification: Model-Checking Techniques and Tools, 2001.

L. Bernardinello and F. Cindio, A survey of basic net models and modular net classes, pp.304-351, 1992.

G. Berthelot and . Lri-iie, Checking properties of nets using transformations, pp.19-40, 1985.

B. Berthomieu and M. Menasche, An Enumerative Approach For Analyzing Time Petri Nets, the IFIP 9th World Computer Congress, vol.9, pp.41-46, 1983.

B. Berthomieu, P. Ribet, and F. Vernadat, The tool TINA -Construction of abstract state spaces for petri nets and time petri nets, Int J Prod Res, vol.42, issue.14, pp.2741-2756, 2004.

. Heidelberg, Texts in Theoretical Computer Science An EATCS Series

E. Best, R. Devillers, and M. Koutny, Petri Net Algebra, Monographs in Theoretical Computer Science An EATCS Series, 2001.

E. Best and C. Fernández, Notations and terminology on Petri net theory, Arbeitspapiere der GMD, issue.195, 1986.

M. Bhuyan, A. Kabir, and M. , PLC based Automatic Railway Gate Control System, National Conference on Electronics and Telecommunications for Digital Bangladesh, 2010.

D. Bjørner, New results and trends in formal techniques and tools for the development of software for transportation systems -A review, FORMS2003: 4th Symposium on Formal Methods for Railway Operation and Control Systems. L'Harmattan Hongrie, 2003.

R. Bloem, A. Cimatti, K. Greimel, G. Hofferek, R. Könighofer et al.,

, CAV 2010: 22nd International Conferenc on Computer Aided Verification, vol.217069, pp.425-429

D. Bo?na?ki, S. Leue, L. Lafuente, and A. , Partial-order reduction for general state exploring algorithms, Int J Softw Tools Technol Transf, vol.11, issue.1, pp.39-51, 2009.

A. Bouajjani, S. Tripakis, and S. Yovine, On-the-fly symbolic model checking for real-time systems, Proceedings Real-Time Systems Symposium, pp.25-34, 1997.

M. C. Boukala and L. Petrucci, Distributed Verification of Modular Systems, CompoNet and SUMo, 2011.

J. Boulanger, Formal Methods Applied to Industrial Complex Systems, 2014.

S. Bouyakoub and A. Belkhir, H-SMIL-Net: A Hierarchical Petri Net Model for SMIL Documents, Tenth International Conference on Computer Modeling and Simulation, pp.106-111, 2008.

B. Boyer, K. Corre, A. Legay, S. Sedwards, K. Joshi et al., PLASMA-lab: A Flexible, Distributable Statistical Model Checking Library, QEST 2013: International Conference on Quantitative Evaluation of Systems, pp.160-164, 2013.
URL : https://hal.archives-ouvertes.fr/hal-01088411

R. Brgan and D. Poitrenaud, An efficient algorithm for the computation of stubborn sets of well formed Petri Nets, ICATPN 1995: Application and Theory of Petri Nets, pp.121-140, 1995.

L. Bu, Q. Wang, X. Chen, L. Wang, T. Zhang et al., Toward online hybrid systems model checking of cyber-physical systems' time-bounded short-run behavior, ACM SIGBED Rev, vol.8, issue.2, pp.7-10, 2011.

P. Buchholz, Application and Theory of Petri Nets 1994Application and Theory of Petri Nets (ICATPN) 1994, pp.119-138, 1994.

J. R. Burch, E. M. Clarke, K. L. Mcmillan, D. L. Dill, and L. J. Hwang, Symbolic model checking: 10^20 States and beyond, Inf Comput, vol.98, issue.2, pp.142-170, 1992.

A. Camurri, P. Franchi, and F. Gandolfo, A timed colored Petri nets approach to process scheduling, Advanced Computer Technology, Reliable Systems and Applications, pp.304-309, 1991.

C. G. Cassandras and S. Lafortune, Introduction to Discrete Event Systems, 2009.

U. S. Springer,

. Cenelec, EN 50129:2003-Railway applications. Communication, signalling and processing systems. Safety related electronic systems for signalling, 2003.

. Cenelec, EN 50159:2010-Railway applications. Communication, signalling and processing systems. Safety-related communication in transmission systems, 2010.

. Cenelec, EN 50128:2011-Railway applications -Communication, signalling and processing systems -Software for railway control and protection systems, 2011.

. Cenelec, EN 50126-1:2017-Railway Applications. The Specification and Demonstration of Reliability, Availability, Maintainability and Safety (RAMS), 2017.

A. Cheng, S. Christensen, and K. H. Mortensen, Model Checking Coloured Petri Nets Exploiting Strongly Connected Components, International Workshop on Discrete Event Systems (WODES'96), vol.26, 1996.

A. Chiappini, A. Cimatti, L. Macchi, O. Rebollo, M. Roveri et al., Formalization and validation of a subset of the European Train Control System, ICSE2010: 32nd ACM/IEEE International Conference on Software Engineering, vol.2, pp.109-118, 2010.

G. Chiola, C. Dutheillet, G. Franceschinis, and S. Haddad, On Well-Formed Coloured Nets and Their Symbolic Reachability Graph, High-level Petri Nets, pp.373-396, 1991.

G. Chiola, C. Dutheillet, G. Franceschinis, and S. Haddad, Stochastic Well-Formed Coloured Nets and Multiprocessor Modelling Applications, pp.504-530, 1991.

G. Chiola, C. Dutheillet, G. Franceschinis, and S. Haddad, Stochastic well-formed colored nets and symmetric modeling applications, IEEE Trans Comput, vol.42, issue.11, pp.1343-1360, 1993.

G. Chiola, C. Dutheillet, G. Franceschinis, and S. Haddad, A symbolic reachability graph for coloured petri nets, Theor Comput Sci, vol.176, issue.1-2, pp.39-65, 1997.

G. Chiola, G. Franceschinis, and R. Gaeta, A symbolic simulation mechanism for well-formed coloured Petri nets, Proceedings. 25th Annual Simulation Symposium, pp.192-201, 1992.

G. Chiola, G. Franceschinis, R. Gaeta, and M. Ribaudo, GreatSPN 1.7: Graphical editor and analyzer for timed and stochastic Petri nets, Perform Eval, vol.24, issue.1-2, p.8, 1995.

C. H. Cho, D. H. Choi, Z. H. Quan, S. A. Choi, G. S. Park et al., Modeling of CBTC carborne ATO functions using SCADE, 2011 11th International Conference on Control, Automation and Systems, pp.1089-1093, 2011.

J. Choi, H. Cho, H. Oh, K. Kim, M. Bhang et al., Challenges of LTE highspeed railway network to coexist with LTE public safety network, 17th International Conference on Advanced Communication Technology, pp.543-547, 2015.

C. Choppy and L. Petrucci, Towards a methodology for modeling with Petri nets. Proc Work Pract Use Coloured Petri Nets Aarhus Denmark, pp.39-56, 2004.

C. Choppy and G. Reggio, A formally grounded software specification method, J Log Algebr Program, vol.67, issue.1-2, pp.52-86, 2006.
URL : https://hal.archives-ouvertes.fr/hal-00153735

S. Christensen, D. Hansen, and N. , Coloured Petri Nets extended with channels for synchronous communication, pp.159-178, 1994.

S. Christensen, L. M. Kristensen, and T. Mailund, A Sweep-Line Method for State Space Exploration, TACAS 2001: Tools and Algorithms for the Construction and Analysis of Systems, pp.450-464, 2001.

S. Christensen and K. H. Mortensen, Design/CPN ASK-CTL Manual (Version 0, vol.9, 1996.

S. Christensen and L. Petrucci, Towards a modular analysis of coloured Petri nets, Appl Theory Petri Nets, pp.113-133, 1992.

S. Christensen and L. Petrucci, Modular State Space Analysis of Coloured Petri Nets. In: Application and Theory of Petri Nets, 1995.

S. Christensen and L. Petrucci, Modular Analysis of Petri Nets, Comput J, vol.43, issue.3, pp.224-242, 2000.

E. M. Clarke and E. A. Emerson, Design and synthesis of synchronization skeletons using branching time temporal logic, Logics of Programs, pp.52-71, 1981.

E. M. Clarke, O. Grumberg, M. Minea, and D. Peled, State space reduction using partial order techniques, Int J Softw Tools Technol Transf, vol.2, issue.3, pp.279-287, 1999.

E. M. Clarke, D. E. Long, and K. L. Mcmillan, Compositional model checking, Proceedings of the 4th Annual Symposium on Logic in computer science, pp.353-362, 1989.

D. Claudio, M. Fantechi, A. Martelli, G. Menabeni, S. Nesi et al., Model-based development of an automatic train operation component for communication based train control, 17th International IEEE Conference on Intelligent Transportation Systems (ITSC). IEEE, pp.1015-1020, 2014.

M. Colange, S. Baarir, F. Kordon, and Y. Thierry-mieg, Crocodile: A Symbolic/Symbolic Tool for the Analysis of Symmetric Nets with Bag, PETRI NETS 2011: Applications and Theory of Petri Nets, 2011.
URL : https://hal.archives-ouvertes.fr/hal-01282493

, Workshop on Issues inthe Theory of Security, pp.87-98, 2006.

J. M. Couvreur and J. Martínez, Linear invariants in commutative high level nets, pp.146-164, 1990.

B. Dandanell, J. Gørtz, J. S. Pedersen, and E. Zierau, Experiences from applications of RAISE, FME '93: Industrial-Strength Formal Methods, pp.52-63, 1993.

Y. Deng, S. Grumbach, and J. Monin, A Framework for Verifying Data-Centric Protocols, FMOODS 2011, FORTE 2011: Formal Techniques for Distributed Systems, pp.106-120, 2011.
URL : https://hal.archives-ouvertes.fr/hal-00647802

Y. Deng and J. Monin, Verifying Self-stabilizing Population Protocols with Coq, 2009.

, Third IEEE International Symposium on Theoretical Aspects of Software Engineering, pp.201-208

L. Dias-da-silva and A. Perkusich, Formal Verification of Component-Based Software Systems, New Technologies for Information Systems, Proceedings of the 3rd International Workshop on New Developments in Digital Libraries, NDDL 2003, and the 1st International Workshop on Validation and Verification of Software for Enterprise Information Systems, pp.113-124, 2003.

M. B. Dwyer, G. S. Avrunin, and J. C. Corbett, Patterns in property specifications for finite-state verification, ICSE'99? the 21st international conference on Software engineering, pp.411-420, 1999.

. Eeig-ertms-users and . Group, Mission of the ERTMS Users Group, 2016.

E. A. Emerson and J. Y. Halpern, Sometimes" and "not never" revisited: on branching versus linear time temporal logic, J ACM, vol.33, issue.1, pp.151-178, 1986.

E. A. Emerson, S. Jha, and D. Peled, Combining partial order and symmetry reductions, TACAS 1997: Tools and Algorithms for the Construction and Analysis of Systems, pp.19-34, 1997.

E. A. Emerson and A. P. Sistla, Symmetry and model checking, Form Methods Syst Des, vol.9, issue.1-2, pp.105-131, 1996.

E. A. Emerson and R. J. Trefler, From Asymmetry to Full Symmetry: New Techniques for Symmetry Reduction in Model Checking, pp.142-157, 1999.

D. Emery, Towards Automatic Train Operation for long distance services: State-of-the art and challenges, 17th Swiss Transport Research Conference, 2017.

T. I. Ascona and C. H. ,

R. Eshuis and J. Dehnert, Reactive Petri Nets for Workflow Modeling, vol.2679, pp.295-314, 2003.

J. Esparza and P. Hoffmann, Reduction Rules for Colored Workflow Nets, Fundamental Approaches to Software Engineering: 19th International Conference, pp.342-358, 2016.

K. L. Espensen, M. K. Kjeldsen, L. M. Kristensen, and M. Westergaard, Towards Automatic Codegeneration from Process-partitioned Coloured Petri Nets, 2009.

, Directive 2008/57/EC of the European Parliament, on the interoperability of the rail system within the Community, vol.17, 2008.

, /897/EU: Commission Recommendation of 5 December 2014 on matters related to the placing in service and use of structural subsystems and vehicles under Directives, 2008.

, Commission Regulation (EU) 2016/919 of 27 May 2016 on the technical specification for interoperability relating to the 'control-command and signalling' subsystems of the rail system in the European Union, 2016.

, Fact Sheets on ERTMS, 2017.

, on the European Rail Traffic Management System European deployment plan, 2017.

A. European-railway, ERTMS/ETCS System Requirements Specification (SUBSET, 2016.

A. European-railway, ERTMS/ETCS Test Cases Related to Features, p.76, 2016.

A. European-railway, ERTMS/ETCS Test Sequences, 2016.

A. European-railway, ERTMS UNIT Scope of the Test Specifications, p.76, 2016.

, European Union Agency for Railways, 2016.

, European Union Agency for Railways, ETCS TEST PLAN AND METHODOLOGY FOR SS, 2017.

S. Evangelista, S. Haddad, and J. Pradat-peyre, Syntactical Colored Petri Nets Reductions, Automated Technology for Verification and Analysis: Third International Symposium, ATVA 2005, pp.202-216, 2005.

J. Faber, S. Jacobs, and V. Sofronie-stokkermans, Verifying CSP-OZ-DC Specifications with Complex Data Types and Timing Parameters, IFM'07: Proceedings of the 6th International Conference on Integrated Formal Methods, pp.233-252, 2007.

A. Fantechi, W. Fokkink, and A. Morzenti, Some Trends in Formal Methods Applications to Railway Signaling, Formal Methods for Industrial Critical Systems: A Survey of Applications, pp.61-84, 2012.

M. V. Fasie, An Eclipse based Development Environment for RAISE. Technical University of Denmark, REFERENCES, vol.232, 2013.

. Cbtc-systems and . Development, Leveraging Applications of Formal Methods, Verification and Validation. Applications and Case Studies, 2012.

C. Fidge, A Comparative Introduction to CSP, CCS and LOTOS, 1994.

T. Freytag and M. Sänger, WoPeD -An educational tool for workflow nets, Proceedings of the BPM Demo Sessions, vol.1295, pp.31-35, 2014.

?. Fronc and A. Duret-lutz, LTL Model Checking with Neco, Proceedings of the 11th International Symposium on Automated Technology for Verification and Analysis (ATVA'13), 2013.

, Lecture Notes in Computer Science). p, vol.8172, pp.451-454

G. Gardey, D. Lime, M. Magnin, and O. H. Roux, Romeo: A Tool for Analyzing Time Petri Nets, Computer Aided Verification, vol.1, pp.418-423, 2005.
URL : https://hal.archives-ouvertes.fr/hal-00523596

H. J. Genrich, Predicate/Transition Nets, Petri Nets: Central Models and Their Properties, pp.207-247, 1986.

H. J. Genrich and K. Lautenbach, The analysis of distributed systems by means of predicate/transition-nets, pp.123-146, 1979.

H. J. Genrich and K. Lautenbach, System modelling with high-level Petri nets, Theor Comput Sci, vol.13, issue.1, pp.109-135, 1981.

M. Gonçalves and J. M. Fernandes, Guidelines for Modelling Reactive Systems with Coloured Petri Nets, MOMPES 2012: Model-Based Methodologies for Pervasive and Embedded Software, pp.126-137, 2013.

S. Graf and B. Steffen, Compositional minimization of finite state systems, pp.186-196, 1990.

S. Graf, B. Steffen, and G. Lüttgen, Compositional minimisation of finite state systems using interface specifications, Form Asp Comput, vol.8, issue.5, pp.607-616, 1996.

O. Grumberg and D. E. Long, Model checking and modular verification, CONCUR 1991: International Conference on Concurrency Theory, pp.250-265, 1991.

F. Gu, X. Zhang, M. Chen, D. Große, and R. Drechsler, Quantitative timing analysis of UML activity diagrams using statistical model checking, 2016 Design, Automation & Test in Europe Conference & Exhibition (DATE), pp.780-785, 2016.

S. Guan, H. Yu, and J. Yang, A prioritized Petri net model and its application in distributed multimedia systems, IEEE Trans Comput, vol.47, issue.4, pp.477-481, 1998.

S. Haddad, Une catégorie régulière de réseau de Petri de haut-niveau : définition, propriétés et réductions. Application à la validation de systèmes distribués, Universite P. et M. Curie, 1987.

S. Haddad, A Reduction Theory for Coloured Nets, 1991.

, High-level Petri Nets: Theory and Application, pp.399-425

S. Haddad, J. M. Ilié, M. Taghelit, and B. Zouari, Symbolic reachability graph and partial symmetries, ICATPN 1995: International Conference on Application and Theory of Petri Nets, pp.238-257, 1995.

S. Haddad, F. Kordon, L. Petrucci, J. Pradat-peyre, and L. Treves, Efficient state-based analysis by introducing bags in Petri nets color domains, pp.5018-5025, 2009.
URL : https://hal.archives-ouvertes.fr/hal-00772677

S. Haddad and J. Pradat-peyre, Efficient Reductions for LTL Formulae Verification, 2004.
URL : https://hal.archives-ouvertes.fr/hal-01124907

R. Hadjidj and H. Boucheneb, On-the-fly TCTL model checking for Time Petri Nets using state class graphs, Sixth International Conference on Application of Concurrency to System Design (ACSD'06), pp.111-122, 2006.

K. M. Hansen, Formalising Railway Interlocking Systems, Nordic Seminar on Dependable Computing Systems, pp.83-94, 1994.

A. E. Haxthausen, J. S. Pedersen, and S. Prehn, Raise: a product supporting industrial use of formal methods, Tech Sci Informatiques, vol.12, issue.3, pp.319-346, 1993.

A. E. Haxthausen and J. Peleska, Formal development and verification of a distributed railway control system, IEEE Trans Softw Eng, vol.26, issue.8, pp.687-701, 2000.

X. He and T. Murata, High-Level Petri Nets-Extensions, Analysis, and Applications, The Electrical Engineering Handbook, pp.459-475, 2005.

M. Heddebaut, Leaky Waveguide for Train-to-Wayside Communication-Based Train Control, IEEE Trans Veh Technol, vol.58, issue.3, pp.1068-1076, 2009.

M. Heiner, M. Herajy, F. Liu, C. Rohr, and M. Schwarick, Snoopy -A Unifying Petri Net Tool, Proc. PETRI NETS 2012, vol.7347, pp.398-407, 2012.

M. Heiner, C. Rohr, and M. Schwarick, MARCIE -Model Checking and Reachability Analysis Done Efficiently, PETRI NETS 2013: Application and Theory of Petri Nets and Concurrency, pp.389-399, 2013.

M. Heiner, M. Schwarick, and J. Wegener, Charlie -An Extensible Petri Net Analysis Tool, Proc. PETRI NETS 2015, vol.9115, pp.200-211, 2015.

T. A. Henzinger, The Theory of Hybrid Automata, Verification of Digital and Hybrid Systems, pp.265-292, 2000.

M. Herajy and M. Heiner, A Steering Server for Collaborative Simulation of Quantitative Petri Nets, PETRI NETS 2014: Application and Theory of Petri Nets and Concurrency, pp.374-384, 2014.

L. M. Hillah, F. Kordon, L. Petrucci, and N. Trèves, PNML Framework: An Extendable Reference Implementation of the Petri Net Markup Language, pp.318-327, 2010.
URL : https://hal.archives-ouvertes.fr/hal-01125746

C. Hoare, Communicating sequential processes, Commun ACM, vol.21, issue.8, pp.666-677, 1978.

H. Zhao, T. Xu, and T. Tang, Towards modeling and evaluation of availability of communication based train control (CBTC) system, 2009 IEEE International Conference on Communications Technology and Applications, pp.860-863, 2009.

G. Hu, Software Engineering, Artificial Intelligence, Networking and Parallel/Distributed Computing, pp.247-257, 2008.

P. Huber, A. M. Jensen, L. O. Jepsen, and K. Jensen, Reachability trees for high-level petri nets, Theor Comput Sci, vol.45, pp.261-292, 1986.

P. Huber, K. Jensen, and R. M. Shapiro, Hierarchies in coloured petri nets, pp.313-341, 1991.

. Iec, IEC 61131-3 Programmable Controllers -Part 3: Programming languages, 2003.

. Iec, IEC 62267:2009-Railway applications -Automated Urban Guided Transport (AUGT) -Safety Requirements, 2009.

. Iec, IEC 62290:2014-Railway applications -Urban guided transport management and command/control systems, 2014.

. Ieee, IEEE Std 1164-1993 -IEEE Standard Multivalue Logic System for VHDL Model Interoperability, 1164.

. Ieee, IEEE Std. 1364-2005 -IEEE Standard for Verilog Hardware Description Language, 2006.

, IEEE. 2012. IEEE Std. 1666-2011 -IEEE Standard for Standard SystemC Language Reference Manual

, IEEE Std. 1800-2017 -IEEE Standard for SystemVerilog-Unified Hardware Design, Specification, and Verification Language

. Ieee-std, IEEE Standard for Communications-Based Train Control (CBTC) Performance and Functional Requirements, IEEE Std, pp.0-1, 2004.

J. M. Ilié and K. Ajami, Model checking through symbolic reachability graph, TAPSOFT '97: Theory and Practice of Software Development, pp.213-224, 1997.

. Iso/iec, ISO/IEC 15909-1:2004 -Systems and software engineering -High-level Petri nets -Part 1: Concepts, definitions and graphical notation, p.38, 2004.

, ISO/IEC. 2005. ISO/IEC 19501:2005 (OMG-UML VER 1.3) -Information technology -Open Distributed Processing -Unified Modeling Language (UML)

. Iso/iec, ISO/IEC 15909-2:2011 -Systems and software engineering -High-level Petri nets -Part 2: Transfer format, p.102, 2011.

. Iso, ISO 8807:1989 -Information processing systems -Open Systems Interconnection -LOTOS -A formal description technique based on the temporal ordering of observational behaviour, 1989.

M. Issad, L. Kloul, and A. Rauzy, A Model-Based Methodology to Formalize Specifications of Railway Systems, IMBSA 2014: 4th International Symposium of Model-Based Safety and Assessment, pp.28-42, 2014.

M. Issad, L. Koul, and A. Rauzy, A contribution to safety analysis of railway CBTC systems using Scola, ESREL 2015: Safety and Reliability of Complex Engineered Systems, pp.459-467, 2015.
URL : https://hal.archives-ouvertes.fr/hal-01246161

. Itu-t, Recommendation Z.100 (04/16) : Specification and Description Language (SDL), 2016.

S. Jabri, E. M. El-koursi, E. Lemaire, &. Bourdeaud, and T. , Modelling of the European Rail Traffic Management System (ERTMS) for checking objectives, IFAC Proc, vol.42, issue.15, pp.84-90, 2009.
URL : https://hal.archives-ouvertes.fr/hal-00802242

C. W. Janczura, Modelling and Analysis of Railway Network Control Logic using Coloured Petri Nets, 1999.

L. Jansen, M. Meyer-zu-hörste, and E. Schnieder, Technical Issues in Modelling the European Train Control System (ETCS) Using Coloured Petri Nets and the Design/CPN Tools, Workshop on Practical Use of Coloured Petri Nets and Design. Daimi PB-532, pp.103-115, 1998.

K. Jensen, Coloured Petri Nets and the Invariant-Method, Theor Comput Sci, vol.14, issue.3, pp.90049-90058, 1981.

K. Jensen, How to find invariants for coloured Petri nets, Proceedings, 10th Symposium {?}trbsk{é} Pleso, pp.327-338, 1981.

K. Jensen, High-Level Petri Nets, 3rd European Workshop on Application and Theory of Petri Nets, pp.166-180, 1982.

K. Jensen, Coloured Petri Nets, Petri Nets: Central Models and Their Properties, pp.248-299, 1986.

K. Jensen, Coloured petri nets: A high level language for system design and analysis, Lecture Notes in Computer Science), 1990.

H. Springer-berlin, , pp.342-416

K. Jensen, Coloured Petri Nets (EATCS Monographs in Theoretical Computer Science), pp.89-121, 1992.

K. Jensen and L. M. Kristensen, Coloured Petri Nets (Modelling and Validation of Concurrent Systems), pp.79-94, 2009.

K. Jensen and L. M. Kristensen, Coloured Petri Nets (Modelling and Validation of Concurrent Systems), pp.43-77, 2009.

K. Jensen, L. M. Kristensen, and L. Wells, Coloured Petri Nets and CPN Tools for modelling and validation of concurrent systems, Int J Softw Tools Technol Transf, vol.9, issue.3-4, pp.213-254, 2007.

F. Joel, H. Wu, and L. Hyung, Reduction Method Of Coloured Petri Nets, IEEE Int Conf Syst Man, Cybern, vol.2, pp.984-987, 1988.

K. John and M. Tiegelkamp, IEC 61131-3: Programming Industrial Automation Systems, 2001.

P. Josserand and H. W. Forman, Rights of trains, 1957.

T. Junttila, On the symmetry reduction method for Petri nets and similar formalisms, 2003.

D. Kapur, V. L. Winter, and R. S. Berg, Designing a Controller for a Multi-Train Multi-Track System, Electron Notes Theor Comput Sci, vol.50, issue.1, pp.65-79, 2001.

U. Khan, J. Ahmad, T. Saeed, and S. H. Mirza, On the real time modeling of interlocking system of passenger lines of Rawalpindi Cantt train station, Complex Adapt Syst Model, vol.4, issue.1, p.17, 2016.

G. M. Kichenside and A. Williams, Two Centuries of Railway Signalling, 1998.

E. Kindler, The petri net markup language and iso/iec 15909-2: Concepts, status, and future directions, Entwurf komplexer Autom, vol.9, pp.35-55, 2006.

E. Kindler, The ePNK: A generic PNML tool -Users' and Developers' Guide for Version 1.0.0, 2012.

T. E. Kissell, Industrial Electronics: Applications for Programmable Controllers, Instrumentation and Process Control, and Electrical Machines and Motor Controls, 2002.

K. Klai, Réseaux de Petri : Vérification Modulaire et Symbolique, 2003.

F. Kordon and E. Paviot-adet, Using CPN-AMI to Validate a Safe Channel Protocol, Proceedings of the International Conference on Theory and Applications of Petri Nets -Tool presentation part, 1999.
URL : https://hal.archives-ouvertes.fr/hal-01574368

L. M. Kristensen and L. Petrucci, An Approach to Distributed State Space Exploration for Coloured Petri Nets, ICATPN 2004: Applications and Theory of Petri Nets, pp.474-483, 2004.
URL : https://hal.archives-ouvertes.fr/hal-00003392

L. M. Kristensen and M. Westergaard, Automatic Structure-Based Code Generation from Coloured Petri Nets: A Proof of Concept, FMICS 2010: Formal Methods for Industrial Critical Systems, pp.215-230, 2010.

A. Kuehlmann and C. Eijk, Combinational and Sequential Equivalence Checking, Logic Synthesis and Verification, pp.343-372, 2002.

M. Kwiatkowska, G. Norman, and D. Parker, PRISM: Probabilistic Symbolic Model Checker, TOOLS 2002: International Conference on Modelling Techniques and Tools for Computer Performance Evaluation, pp.200-204, 2002.

C. Lakos and L. Petrucci, Modular analysis of systems composed of semiautonomous subsystems. Appl Concurr to Syst Des, ACSD 2004 Proceedings Fourth Int Conf, pp.185-194, 2004.
URL : https://hal.archives-ouvertes.fr/hal-00003393

C. Lakos and L. Petrucci, Modular state space exploration for timed petri nets, Int J Softw Tools Technol Transf, vol.9, issue.3-4, pp.393-411, 2007.
URL : https://hal.archives-ouvertes.fr/hal-00084190

C. Lakos and L. Petrucci, Modular State Spaces and Place Fusion, International Workshop on Petri Nets and Software Engineering (PNSE'07, associated with Petri Nets'07, pp.175-190, 2007.

T. Latvala and M. Mäkelä, LTL Model Checking for Modular Petri Nets, ICATPN 2004: Applications and Theory of Petri Nets, pp.298-311, 2004.

K. Lautenbach, Linear Algebraic Techniques for Place/Transition Nets, Petri Nets: Central Models and Their Properties, 1986.

/. Berlin and . Heidelberg, , pp.142-167

H. Lee-kwang, J. Favrel, and P. Baptiste, Generalized Petri Net Reduction Method, IEEE Trans Syst Man Cybern, vol.17, issue.2, pp.297-303, 1987.

Y. K. Lee, H. P. In, and R. Kazman, Customer Requirements Validation Method Based on Mental Models, 2014 the 21st Asia-Pacific Software Engineering Conference, vol.1, pp.199-206, 2014.

A. Legay, S. Sedwards, and L. Traonouez, Plasma Lab: A Modular Statistical Model Checking Platform, ISoLA 2016: International Symposium on Leveraging Applications of Formal Methods, pp.77-93, 2016.
URL : https://hal.archives-ouvertes.fr/hal-01387435

X. Leroy, Formal verification of a realistic compiler, Commun ACM, vol.52, issue.7, p.107, 2009.
URL : https://hal.archives-ouvertes.fr/inria-00415861

, Systems (WODES). IEEE, pp.171-176

C. Li and L. Zhang, Train control system modeling and design based on AADL, ICSESS 2015: 6th IEEE International Conference on Software Engineering and Service Science, pp.474-477, 2015.

D. Lime, O. H. Roux, C. Seidner, and L. Traonouez, Romeo: A Parametric Model-Checker for Petri Nets with Stopwatches, Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics). Vol. 5505 LNCS, pp.54-57, 2009.

C. Liu and T. Tang, Epsilon-based model transformation and verification of train control system specification, 30th Chinese Control Conference (CCC2011), pp.5562-5567, 2011.

F. Liu, Colored Petri Nets for Systems Biology, 2012.

D. E. Long, Model checking, abstraction, and compositional verification, 1993.

M. S. Madsen and M. M. Baek, Modelling a Distributed Railway Control System, Building, vol.321, 2005.

M. Mäkelä, Model Checking Safety Properties in Modular High-Level Nets, ICATPN 2003: Applications and Theory of Petri Nets, pp.201-220, 2003.

Z. Manna and A. Pnueli, The Temporal Logic of Reactive and Concurrent Systems, 1992.

M. A. Marsan, Stochastic Petri nets: An elementary introduction, Advances in Petri Nets, pp.1-29, 1988.

M. Mascheroni, Hypernets : a Class of Hierarchical Petri Nets, 2010.

M. Matsumoto, A. Hosokawa, S. Kitamura, D. Watanabe, and A. Kawabata, The new ATC system with an autonomous speed control with on-board equipment, Proceedings 5th International Symposium on Autonomous Decentralized Systems, pp.235-238, 2001.

K. L. Mcmillan, Symbolic Model Checking, 1993.

K. L. Mcmillan and D. K. Probst, A technique of state space search based on unfolding, Form Methods Syst Des, vol.6, issue.1, pp.45-65, 1995.

G. Memmi and A. Finkel, An introduction to FIFO nets-monogeneous nets: A subclass of FIFO nets, Theor Comput Sci, vol.35, pp.191-214, 1985.

M. Meyer-zu-hörste, Modelling and Simulation of Train Control Systems Using Petri Nets, FMRail Workshop, vol.3, 1999.

R. Milner, A Calculus of Communicating Systems, Lecture Notes in Computer Science), 1980.

U. Ma,

J. Monin, Proving a real time algorithm for ATM in Coq, TYPES 1996: Types for Proofs and Programs, pp.277-293, 1996.

K. H. Mortensen, Automatic Code Generation Method Based on Coloured Petri Net Models Applied on an Access Control System, pp.367-386, 2000.

T. Murata, Petri Nets: Properties, Analysis and Applications, Proc IEEE, vol.77, issue.4, pp.541-580, 1989.

H. Nakamura, How to Deal with Revolutions in Train Control Systems. Engineering, vol.2, issue.3, pp.380-386, 2016.

Y. Narahari and N. Viswanadham, On the invariants of coloured Petri nets, Adv Petri Nets, pp.330-345, 1985.

M. Ndiaye, J. Petin, J. Camerini, and J. P. Georges, Performance assessment of industrial control system during pre-sales uncertain context using automatic Colored Petri Nets model generation, 2016 International Conference on Control, Decision and Information Technologies (CoDIT). IEEE, pp.671-676, 2016.
URL : https://hal.archives-ouvertes.fr/hal-01312536

M. Nielsen, G. Plotkin, and G. Winskel, Petri nets, event structures and domains, part I, Theor Comput Sci, vol.13, issue.1, pp.85-108, 1981.

M. Odersky, Programming Languages and Systems, pp.1-25, 2000.

M. Odersky, An Overview of Functional Nets, Lect Notes APPSEM Summer Sch, 2000.

M. Odersky and T. Rompf, Unifying functional and object-oriented programming with Scala, Commun ACM, vol.57, issue.4, pp.76-86, 2014.

E. Olderog, Automatic Verification of Real-Time Systems with Rich Data: An Overview, TAMC 2012: Theory and Applications of Models of Computation: 9th Annual Conference, pp.84-93, 2012.

D. Peled, Combining partial order reductions with on-the-fly model-checking, Form Methods Syst Des, vol.8, issue.1, pp.39-64, 1996.

F. Peres, J. Yang, and M. Ghazel, A Formal Framework for the Formalization of Informal Requirements, Int J Soft Comput Softw Eng, vol.2, issue.8, pp.14-27, 2012.
URL : https://hal.archives-ouvertes.fr/hal-00852373

C. A. Petri, Kommunikation mit Automaten (Communication with automata), 1962.

C. A. Petri, Introduction to General Net Theory, Proceedings of the Advanced Course on General Net Theory of Processes and Systems: Net Theory and Applications, pp.1-19, 1980.

L. Petrucci, Cover Picture Story: Experiments with Modular State Spaces. Petri Net Newsl, vol.68, pp.5-10, 2005.
URL : https://hal.archives-ouvertes.fr/hal-00012227

B. Pinna, G. Babykina, N. Brînzei, and J. Pétin, Deterministic and stochastic dependability analysis of industrial systems using Coloured Petri Nets approach, Annual Conference of the European Safety and Reliability Association, ESREL 2013, pp.2969-2977, 2013.
URL : https://hal.archives-ouvertes.fr/hal-00872420

B. Pinna, G. Babykina, N. Brînzei, and J. Pétin, Using coloured petri nets for integrated reliability and safety evaluations, IFAC Proc, vol.4, issue.1, pp.19-24, 2013.
URL : https://hal.archives-ouvertes.fr/hal-00872417

A. Platzer and J. Quesel, European Train Control System: A Case Study in Formal Verification, ICFEM 2009: Formal Methods and Software Engineering, pp.246-265, 2009.

A. Pnueli, The temporal logic of programs, 18th Annual Symposium on Foundations of Computer Science (SFCS, pp.46-57, 1977.

A. Pnueli, In Transition From Global to Modular Temporal Reasoning about Programs, pp.123-144, 1985.

S. Prat, J. Cavron, D. Kesraoui, P. Rauffet, P. Berruet et al., An Automated Generation Approach of Simulation Models for Checking Control/Monitoring System, IFAC-PapersOnLine, vol.50, issue.1, pp.6202-6207, 2017.
URL : https://hal.archives-ouvertes.fr/hal-01590450

J. Ras, The Dining Philosophers Problem, 2016.

A. V. Ratzer, L. Wells, H. M. Lassen, M. Laursen, J. F. Qvortrup et al., CPN Tools for Editing, Simulating, and Analysing Coloured Petri Nets, Proceedings of the 24th international conference on Applications and theory of Petri nets (ICATPN'03), vol.2679, pp.450-462, 2003.

K. Reichl, T. Fischer, and P. Tummeltshammer, Using Formal Methods for Verification and Validation in Railway, TAP 2016: 10th International Conference on Tests & Proofs, pp.3-13, 2016.

J. Reinaldo and P. Del-foyo, Petri Nets -Manufacturing and Computer Science. InTech, pp.359-378, 2012.

W. Reisig, Place/Transition Systems, Petri Nets: Central Models and Their Properties, pp.117-141, 1986.

W. Robinson, Improvement in Electric-Signaling Apparatus for Railroad, 1872.

D. Rojas and E. Phillips, Communications-Based Train Control (CBTC) Before/After Cost Effectiveness Study, 2011.

A. Romanovsky and M. Thomas, Industrial Deployment of System Engineering Methods, 2013.

G. Rozenberg, Behaviour of Elementary Net Systems, Petri Nets: Central Models and Their Properties. ACPN 1986, vol.254, pp.60-94, 1987.

G. Rozenberg and J. Engelfriet, Lectures on Petri Nets I: Basic Models-Advances in Petri Nets, pp.12-121, 1998.

G. Rozenberg and P. S. Thiagarajan, Petri nets: Basic notions, structure, behaviour, Current Trends in Concurrency: Overviews and Tutorials, pp.585-668, 1986.

K. Sacha, Verification and Implementation of Dependable Controllers, 2008 Third International Conference on Dependability of Computer Systems DepCoS-RELCOMEX. IEEE, pp.143-151, 2008.

. Sae, AS5506? Architecture Analysis & Design Language (AADL), 2004.

J. Sakarovitch, Elements of automata theory, 2009.

M. Schiffers, Behandlung eines Synchronisationproblems mit gefärbten Petri Netzen, 1977.

M. Schiffers and H. Wedde, Analyzing program solutions of coordination problems by CPnets, Mathematical Foundations of Computer Science, 1978.

/. Berlin and . Heidelberg, , pp.462-473

K. Schmidt, How to calculate symmetries of Petri nets, Acta Inform, vol.36, issue.7, pp.545-590, 2000.

M. Sgroi, L. Lavagno, and A. Sangiovanni-vincentelli, Formal models for embedded system design, IEEE Des Test Comput, vol.17, issue.2, pp.14-27, 2000.

X. She, J. Zhao, and Y. J. , Functional safety verification on railway signaling system with Colored Petri Nets, 17th International IEEE Conference on Intelligent Transportation Systems (ITSC), pp.2713-2717, 2014.

X. Shi, J. Monin, F. Tuong, and F. Blanqui, First Steps towards the Certification of an ARM Simulator Using Compcert, CPP 2011: Certified Programs and Proofs, pp.346-361, 2011.
URL : https://hal.archives-ouvertes.fr/inria-00624833

M. Silva, 50 years after the PhD thesis of Carl Adam Petri: A perspective, IFAC Proc, vol.45, issue.29, pp.13-20, 2012.

M. Da-silveira, M. Combacau, and A. Subias, From centralized to distributed models: A systematic procedure based on Petri nets, Proc IEEE Int Conf Syst Man Cybern, vol.1, 2002.

K. Simonsen and L. M. Kristensen, Implementing the WebSocket Protocol Based on Formal Modelling and Automated Code Generation, pp.104-118, 2014.
URL : https://hal.archives-ouvertes.fr/hal-01287735

E. Smith, Principles of high-level net theory, Lectures on Petri Nets I: Basic Models, pp.174-210, 1996.

. 2. Sncf, . Le, and . Autonome-:-de-quoi-parle-t-on-?, , 2017.

, REFERENCES, vol.242, p.23

H. Störrle, An evaluation of high-end tools for Petri-nets, 1998.

S. The and . Team, An Extensible Open Source AADL Tool Environment, 2005.

P. S. Thiagarajan, Elementary Net Systems, Petri Nets: Central Models and Their Properties. ACPN 1986, vol.254, pp.26-59, 1987.

. Tiobe, TIOBE Index, 2018.

S. Tjell, Distinguishing Environment and System in Coloured Petri Net Models of Reactive Systems, 2007 International Symposium on Industrial Embedded Systems, pp.242-249, 2007.

. Unisig, ERTMS/ETCS System Requirements Specification (SUBSET-026), 2008.

, CPN Tools State Space Manual, pp.1-49, 2006.

A. Valmari, The state explosion problem, ACPN 1996: Lectures on Petri Nets I: Basic Models, pp.429-528, 1998.

S. Vanit-anunchai, Verification of Railway Interlocking Tables using Coloured Petri Nets, The 10th Workshop and Tutorial on Practical Use of Coloured Petri Nets and the CPN Tools. DAIMI PB 590, pp.139-158, 2009.

S. Vanit-anunchai, Modelling Railway Interlocking Tables Using Coloured Petri Nets, Coordination Models and Languages: 12th International Conference (COORDINATION'2010), pp.137-151, 2010.
URL : https://hal.archives-ouvertes.fr/hal-01054630

S. Vanit-anunchai, Experience using Coloured Petri Nets to Model Railway Interlocking Tables, 2nd French Singaporean Workshop on Formal Methods and Applications (FSFMA'2014), pp.17-28, 2014.

S. Vanit-anunchai, Modelling and simulating a Thai railway signalling system using Coloured Petri Nets, Int J Softw Tools Technol Transf, 2018.

B. Vincze and G. Tarnai, Evolution of train control systems, 14th International Symposium EURNEX-ZEL, 2006.

H. Wang, F. R. Yu, and H. Jiang, Modeling of Radio Channels With Leaky Coaxial Cable for LTE-M Based CBTC Systems, IEEE Commun Lett, vol.20, issue.5, pp.1038-1041, 2016.

. Wang-s, W. Hu, and . Xu-z, Research on Simulation Model of Petri Net with Priority by CPN Tools (in Chinese), J Syst Simul, vol.20, issue.3, pp.814-816, 2008.

M. Westergaard, S. Evangelista, and L. M. Kristensen, ASAP: An Extensible Platform for State Space Analysis, PETRI NETS 2009: Applications and Theory of Petri Nets, pp.303-312, 2009.

M. Westergaard and L. M. Kristensen, The Access/CPN Framework: A Tool for Interacting with the CPN Tools Simulator, PETRI NETS 2009: Applications and Theory of Petri Nets, pp.313-322, 2009.

M. Westergaard, L. M. Kristensen, G. S. Brodal, and L. Arge, The ComBack Method -Extending Hash Compaction with Backtracking, ICATPN 2007: Petri Nets and Other Models of Concurrency, pp.445-464, 2007.

M. Westergaard, L. M. Kristensen, and M. Kuusela, A Prototype for Cosimulating SystemC and Coloured Petri Net Models, 2009.

M. Westergaard and H. Verbeek, Efficient Implementation of Prioritized Transitions for High-level Petri Nets, PNSE'11 -Petri Nets and Software Engineering, pp.27-41, 2011.

R. J. Wieringa, Design Methods for Reactive Systems, 2003.

D. Wikarski, An introduction to modular process nets, 1996.

F. Xie and J. C. Browne, Verification of Component-Based Software Application Families, CBSE 2006: Component-Based Software Engineering, pp.50-66, 2006.

Y. Xie, . Khlif-bouassida-m, and A. Toguyeni, Modeling of Automatic Train Operation Control using Colored Petri Nets, 11th International Conference on Modeling, Optimization and Simulation (MOSIM'16), 2016.

Y. Xie, M. Khlif-bouassida, and A. Toguyeni, Well-formed Petri Net Based Patterns for Modeling Logic Controllers for Autonomous Trains, Proc. of the 14th Int. Conf. on Integrated Modeling and Analysis in Applied Control and Automation (IMAACA2017), pp.25-34, 2017.

Y. Xie, M. Khlif-bouassida, and A. Toguyeni, Modèles Génériques en Réseaux de Petri Bien Formés pour le Contrôle Discret des Trains Autonomes, 11ème Colloque sur la Modélisation des Systèmes Réactifs (MSR2017), 2017.

T. Xu, T. Tang, C. Gao, and B. Cai, Dependability analysis of the data communication system in train control system, Sci China Ser E Technol Sci, vol.52, issue.9, pp.2605-2618, 2009.

C. S. Yang, J. S. Lim, J. K. Um, J. M. Han, Y. Bang et al., Developing CBTC Software Using Model-Driven Development Approach, WCRR 2008: 8th World Congress on Railway Research. COEX, 2008.

X. Yang, Y. Chen, E. Eide, and J. Regehr, Finding and understanding bugs in C compilers, the 32nd ACM SIGPLAN conference on Programming language design and implementation -PLDI '11, p.283, 2011.

L. Yuan, T. Tang, and K. Li, Modelling and Verification of the System Requirement Specification of Train Control System Using SDL, 2011 Tenth International Symposium on Autonomous Decentralized Systems, pp.81-85, 2011.

N. A. Zafar, Formal model for moving block railway interlocking system based on undirected topology, 2006 International Conference on Emerging Technologies. IEEE, pp.217-223, 2006.

N. A. Zafar, Formal specification and validation of railway network components using Z notation, IET Softw, vol.3, issue.4, p.312, 2009.

N. A. Zafar, S. A. Khan, and K. Araki, Towards the safety properties of moving block railway interlocking system, Int J Innov Comput Inf Control, vol.8, issue.8, pp.5677-5690, 2012.

M. ?arnay, Use of Petri Net for Modelling of Traffic in Railway Stations, Proceedings of international conference Infotrans, 2004.

S. Van-zelst, U. E. Technische, B. F. Van-dongen, W. Van-der-aalst, and . Au, Know What you stream: Generating event streams from CPN models in ProM 6, CEUR Workshop Proceedings, vol.1418, pp.85-89, 2015.

Y. Zhang, Y. Xie, and X. Zhang, Study on the Method for Automatic Generation of Test Sequence for Train Control System Based on State Matching, International Conference on Computer Science and Artificial Intelligence (ICCSAI 2014), pp.92-95, 2014.

L. Zhao, T. Xu, and W. Zheng, Requirements analysis via property-based approach, ICCCT2012: 7th International Conference on Computing and Convergence Technology, pp.1153-1156, 2012.

G. Zhou and H. Zhao, Modeling and Quantitative Safety Analysis of Chinese Train Control System of Systems, 2015 IEEE 18th International Conference on Intelligent Transportation Systems, pp.381-386, 2015.

X. Zhou and Y. Zhang, Security Analysis about a Train Control Center Based on a Bayesian Network, ICTE 2015, pp.2525-2532, 2015.

L. Zhu, Y. Zhang, B. Ning, and H. Jiang, Train-Ground Communication in CBTC Based on 802.11b: Design and Performance Research, 2009 WRI International Conference on Communications and Mobile Computing, vol.2, pp.368-372, 2009.

A. Zimmermann, Modelling and Performance Evaluation with TimeNET 4.4, 14th International Conference on Quantitative Evaluation of Systems, pp.300-303, 2017.

A. Zimmermann and G. Hommel, A train control system case study in model-based real time system design, Proceedings International Parallel and Distributed Processing Symposium, p.8, 2003.

L. Zou, J. Lv, S. Wang, N. Zhan, T. Tang et al., Verifying Chinese Train Control System under a Combined Scenario by Theorem Proving, VSTTE 2013: Verified Software: Theories, Tools, Experiments, pp.262-280, 2013.