A. Alberto, A. L. Cavalcanti, M. Gaudel, and A. Simao, Formal mutation testing for Circus, Information and Software Technology, vol.81, pp.131-153, 2017.
DOI : 10.1016/j.infsof.2016.04.003
URL : https://hal.archives-ouvertes.fr/hal-01655391

Z. Andrews, Model-based development of fault tolerant systems of systems, 2013 IEEE International Systems Conference (SysCon), pp.356-363, 2013.
DOI : 10.1109/SysCon.2013.6549906

A. L. Cavalcanti and M. Gaudel, Testing for Refinement in CSP, 9th ICFEM, pp.151-170, 2007.
DOI : 10.1007/978-3-540-76650-6_10
URL : https://hal.archives-ouvertes.fr/hal-00260928

A. L. Cavalcanti and M. Gaudel, Testing for refinement in Circus, Acta Informatica, vol.40, issue.4, pp.97-147, 2011.
DOI : 10.1109/12.88472

A. L. Cavalcanti and M. Gaudel, Data Flow Coverage for Circus-Based Testing, FASE, pp.415-429, 2014.
DOI : 10.1007/978-3-642-54804-8_29
URL : https://hal.archives-ouvertes.fr/hal-01126796

A. L. Cavalcanti and R. Hierons, Testing with Inputs and Outputs in CSP, pp.359-374, 2013.
DOI : 10.1007/978-3-642-37057-1_26

T. S. Chow, Testing Software Design Modeled by Finite-State Machines, IEEE Transactions on Software Engineering, vol.4, issue.3, pp.178-187, 1978.
DOI : 10.1109/TSE.1978.231496

K. El-fakih, FSM-based testing from user defined faults adapted to incremental and mutation testing, Programming and Computer Software, vol.38, issue.4, pp.201-209, 2012.
DOI : 10.1134/S0361768812040019
URL : http://www.site.uottawa.ca/~bochmann/dsrg/Docs/Pub/ElFa12.pdf

S. Fujiwara and G. Von-bochmann, Testing non-deterministic state machines with fault coverage, FORTE, pp.267-280, 1991.

T. Gibson-robinson, P. Armstrong, A. Boulgakov, and A. W. Roscoe, FDR3 ??? A Modern Refinement Checker for CSP, TACAS, pp.187-201, 2014.
DOI : 10.1007/978-3-642-54862-8_13

R. M. Hierons and H. Ural, Optimizing the length of checking sequences, IEEE Transactions on Computers, vol.55, issue.5, pp.618-629, 2006.
DOI : 10.1109/TC.2006.80

W. Huang and J. Peleska, Exhaustive Model-Based Equivalence Class Testing, ICTSS, pp.49-64, 2013.
DOI : 10.1007/978-3-540-78917-8_1

I. Koufareva and A. , Petrenko and N. Yevtushenko Test Generation Driven by Userdefined Fault Models, TestCom, pp.215-236, 1999.

G. Luo, Test selection based on communicating nondeterministic finite-state machines using a generalized Wp-method, IEEE TSE, vol.20, issue.2, pp.149-162, 1994.

A. J. Milner, A Calculus of Communicating Systems, 1980.
DOI : 10.1007/3-540-10235-3

A. Moraes, A family of test selection criteria for Timed Input-Output Symbolic Transition System models, Science of Computer Programming, vol.126, pp.52-72, 2016.
DOI : 10.1016/j.scico.2016.05.004

A. Mota, Rapid Prototyping of a Semantically Well Founded Circus Model Checker, SEFM, pp.235-249, 2014.
DOI : 10.1007/978-3-319-10431-7_17

S. Nogueira, A. C. Sampaio, and A. C. Mota, Test generation from state based use case models, Formal Aspects of Computing, vol.17, issue.3, pp.441-490, 2014.
DOI : 10.1007/978-3-540-78917-8_2

J. Peleska and M. Siegel, Test automation of safety-critical reactive systems, In FM LNCS, vol.1051, 1996.

A. Petrenko and N. Yevtushenko, Testing from Partial Deterministic FSM Specifications, IEEE Transactions on Computers, vol.54, issue.9, 2005.
DOI : 10.1109/TC.2005.152

A. Petrenko, On fault coverage of tests for finite state specifications, Computer Networks and ISDN Systems, vol.29, issue.1, pp.81-106, 1996.
DOI : 10.1016/S0169-7552(96)00019-0

P. J. Probert, D. Djian, and H. Hu, Transputer architectures for sensing in a robot controller: Formal methods for design. Concurrency: Practice and Experience, pp.283-292, 1991.

A. W. Roscoe, Understanding Concurrent Systems, 2011.
DOI : 10.1007/978-1-84882-258-0

J. Tretmans, Test generation with inputs, outputs, and quiescence, TACAS'96, pp.127-146, 1996.
DOI : 10.1007/3-540-61042-1_42

Y. T. Yu and M. F. Lau, Fault-based test suite prioritization for specification-based testing. Information and Software Technology, pp.179-202, 2012.
DOI : 10.1016/j.infsof.2011.09.005