Tradeoffs
Our approach was slower than the Heimdahl & Leveson approach
BDD-based, but not model checking
Their approach reported some false positives
Previous slide
Next slide
Back to first slide
View graphic version