Bücher der Reihe Programming and Software Engineering

This book constitutes the refereed proceeding of the 13th European Software Process Improvement Conference, EuroSPI 2006, held in Joensuu, Finland in October 2006. The 18 revised full papers presented were carefully reviewed and selected from 62 submissions.

Many software systems have reached a level of complication, mainly because of their size, heterogeneity and distribution, which results in faults appearing that cannot be traced back easily to the code. Some of these "e;faults"e; could also be unexpected program behavior that appears as a result of interactions between different parts of the program; this is commonly known as complexity. New methods, approaches, tools and techniques are needed to cope with the increasing complexity in software systems; amongst them, fault-tolerance techniques and formal methods, supported by the corresponding tools, are promising solutions. This book brings together papers focusing on the application of rigorous design techniques to the development of fault-tolerant, software-based systems.This volume is an outcome of the REFT 2005 Workshop on Rigorous Engineering of Fault-Tolerant Systems held in conjunction with the Formal Methods 2005 conference at Newcastle upon Tyne, UK, in July 2005. The authors of the best workshop papers were asked to enhance and expand their work and a number of well-established researchers working in the area contributed invited chapters. From the 19 refereed and revised papers presented, 12 are versions reworked from the workshop; 9 of them are totally new. The book is rounded off by two provocatively different position on the role of programming languages.

Software Engineering is a multifaceted and expanding topic. It aims to provide theories, methods and tools to tackle the complexity of software systems, from development to maintenance. Its complexity is made even more severe today by rapidadvancesin technology,the pervasivenessofsoftwareinallareasofsociety, and the globalization of software development. The continuous expansion of the ?eld presents the problem of how to keep up for practitioners. For educators, the key questions are how should software engineers be educated and what are the core topics and key technologies? Even looking only at the last decade, the tremendous changes that have taken place in the software engineering industry, and in the industrial world in general,raise many questions. What are the e?ects of: Outsourcing?Distributed softwaredevelopment?Opensource?Standardization?Softwarepatents?Mod- driven development? How should these developments change the way we teach softwareengineering?Shouldtextbooksbeupdated?Shouldsoftwareengineering play a di?erent role in the computer science curriculum, for example, be more pervasive? How are instructors in universities handling these issues? All these issues were discussed at the Software Education and Training s- sions at the International Conference on Software Engineering (ICSE 2005) by leading researchers, educators, and practitioners in software engineering, who presented their-sometimes controversial-views and insights on software en- neering education in the new millennium. In this volume we have collected some of the most representative and innovative approachesthat were presented at the workshop. The authors revised their papers based on discussions at the conf- ence and the comments they received from the reviews.

Victor R. Basili, Dieter Rombach, and Kurt Schneider Introduction In 1992, a Dagstuhl seminar was held on "e;Experimental Software Engineering Issues"e; (seminar no. 9238). Its goal was to discuss the state of the art of empirical software engineering (ESE) by assessing past accomplishments, raising open questions, and proposing a future research agenda. Since 1992, the topic of ESE has been adopted more widely by academia as an interesting and promising research topic, and in industrial practice as a necessary infrastructure technology for goal-oriented, sustained process improvement. At the same time, the spectrum of methods applied in ESE has broadened. For example, in 1992, the empirical methods applied in software engineering were basically restricted to quantitative studies (mostly controlled experiments), whereas since then, a range of qualitative methods have been introduced, from observational to ethnographical studies. Thus, the field can be said to have moved from experimental to empirical software engineering. We believe that it is now time to again bring together practitioners and researchers to identify both the progress made since 1992 and the most important challenges for the next five to ten years.

Reliable Software Technologies is an annual series of international conferences devoted to the promotion and advancement of all aspects of reliable software technologies. The objective of this series of conferences, initiated and sponsored by Ada-Europe, the European federation of national Ada societies, is to provide a forum to promote the development of reliable softwares both as an industrial technique and an academic discipline. Previous editions of the Reliable Software Technologies conference were held in: Porto (Portugal) in 2006, York (UK) in 2005, Palma de Mallorca (Spain) in 2004,Toulouse (France) in 2003,Vienna (Austria) in 2002,Leuven (Belgium) in 2001,Potsdam(Germany)in2000,Santander(Spain)in1999,Uppsala(Sweden) in 1998, London (UK) in 1997 and Montreux (Switzerland) in 1996. The 12th International Conference on Reliable Software Technologies took place in Geneva, Switzerland, June 25-29, 2007, under the continued sponsoring ofAda-Europe,incooperationwithACMSIGAda.Itwasorganizedbymembers of the University of Applied Sciences, Western Switzerland (Engineering School of Geneva), in collaboration with colleagues from various places in Europe. The 13th conference, in 2008, will take place in Venice, Italy.

As software systems become ubiquitous, the issues of dependability become more and more crucial. Given that solutions to these issues must be considered from the very beginning of the design process, it is reasonable that dependability is addressed at the architectural level. This book was born of an effort to bring together the research communities of software architectures and dependability.This state-of-the-art survey contains 18 expanded and peer-reviewed papers based on the carefully selected contributions to the Workshop on Architecting Dependable Systems (WADS 2006), organized at the 2006 International Conference on Dependable Systems and Networks (DSN 2006), held in Philadelphia, PA, USA, in June 2006. It also contains a number of invited papers written by recognized experts in the area. The papers are organized in topical sections on architectural description languages, architectural components and patterns, architecting distributed systems, and architectural assurances for dependability.

This book constitutes the refereed proceedings of the ACM/IFIP/USENIX 8th International Middleware Conference 2007, held in Newport Beach, CA, USA, in November 2007. The 22 revised full papers presented were carefully reviewed and selected from 108 submissions. The papers are organized in topical sections on component-based middleware, mobile and ubiquitous computing, grid and cluster computing, enhancing communication, resource management, reliability and fault tolerance.

Celebrating Five Years of Early Aspects The early aspects community had its origins in the "e;Early Aspects: Requirements En- neering and Architecture Design"e; workshop organized during the first international c- ference on Aspect-Oriented Software Development (AOSD), in March 2002. Since then, the early aspects community has grown rapidly. At the time this project started, the Early Aspects Steering Committee (www. early-aspects. net) had organized nine editions of the Early Aspects workshop in conferences such as AOSD OOPSLA, ICSE and SPLC and edited two special issues in international journals. Workshop attendance has exceeded 200, and from these more than 60% were different individuals. This number corresponds to just over 20 participants per workshop, despite the fact that participation was allowed only to authors of accepted papers or invited researchers. However, the early aspects community is much larger than that. A considerable n- ber of papers have been published regularly in journals, books and conferences where the early aspects workshop has not yet been organized. The number and range of subm- sions to the workshop series have demonstrated that the field has a solid base of conti- ous research being done by established groups around the world. The early-aspects community is now self-sustaining and continuously expanding. Therefore, we felt that the fifth anniversary of the first early aspects workshop was an appropriate juncture to upgrade the autonomous standing of the community by providing it with its own formal publication.

This volume contains papers presented at the International Conference on Software Process (ICSP 2008) held in Leipzig, Germany, during May 10-11, 2008. ICSP 2008 was the second conference of the ICSP series. The theme of ICSP 2008 was "e;Making Globally Distributed Software Development a Success Story. "e; Software developers work in a dynamic context of frequently changing technologies and with limited resources. Globally distributed development teams are under ev- increasing pressure to deliver their products more quickly and with higher levels of qu- ity. At the same time, global competition is forcing software development organizations to cut costs by rationalizing processes, outsourcing part of or all development activities, reusing existing software in new or modified applications, and evolving existing systems to meet new needs, while still minimizing the risk of projects failing to deliver. To address these difficulties, new and modified processes are emerging, including agile methods and plan-based product line development. Open Source, COTS, and com- nity-developed software are becoming more and more popular. Outsourcing coupled with 24/7 development demands well-defined processes to support the coordination of organizationally-and geographically-separated teams. The accepted papers present completed research or advanced work-in-progress in all areas of software and systems development process including: agile software pr- esses, CMMI, novel techniques for software process representation and analysis; process tools and metrics; and the simulation and modeling of software processes. Contributions reflecting real-world experience, or derived directly from industrial or open-source software development and evolution, were particularly welcome.

Software reuse depicts a great vision for the software industry. It has been widely viewed as a promising way to improve both the productivity and quality of software development. However, despite of the successes we have achieved, there are still many issues that have limited the promotion of software reuse in the real world. Therefore, software reuse has remained an important hotspot of research. ICSR is the premier international conference in the field of software reuse. It has been an important venue for presenting advances and improvements within the software reuse domain, and a powerful driving force in promoting the interaction between researchers and practitioners. The theme of ICSR 10 was "e;High Confidence Software Reuse in Large Systems. "e; A high confidence system is one that behaves in a well-understood and predictable fashion. Today's trends towards widespread use of commercial off-the-shelf (COTS) technology, increased integration, continuous evolution, and larger scale are yielding more complex software systems. So, the problem of how to build high confidence complex systems and how to reuse software with a high level of confidence has become a new attractive topic for research. Furthermore, high-level software asset reuse has been a goal for the last 20-30 years, and it can still be considered an unsolved question. Components-based development, MDA-MDE-MDD, extreme programming, and other techniques or methods are promising approaches to software reuse that still need more research. These proceedings report on the current state of the art in software reuse.

Modern information systems rely increasingly on combining concurrent, d- tributed, real-time, recon?gurable and heterogeneous components. New models, architectures, languages, and veri?cation techniques are necessary to cope with thecomplexityinducedbythedemandsoftoday'ssoftwaredevelopment. COOR- DINATIONaimstoexplorethespectrumoflanguages,middleware,services,and algorithms that separate behavior from interaction, therefore increasing mo- larity, simplifying reasoning, and ultimately enhancing software development. This volume contains the proceedings of the 10th International Conference on Coordination Models and Languages, COORDINATION 2008, held in Oslo, Norway in June 2008, as part of the federated DisCoTec conference. COORDI- NATIONitselfispartofaserieswhoseproceedingshavebeenpublishedinLNCS volumes 1061, 1282, 1594, 1906, 2315, 2949, 3454, 4038, and 4467. From the 61 submissions received from around the world, the Program Committee selected 21 papers for presentation and publication in this volume on the basis of or- inality, quality, and relevance to the topics of the conference. Each submission received at least three reviews. As with previous editions, the paper submission and selection processes were managed entirely electronically. This was acc- plished using EasyChair, a free Web-based conference management system. In addition to the technical paper presentations, COORDINATION 2008 hosted an invited presentation by Matt Welsh from Harvard University. We are grateful to all the Program Committee members who devoted much e?ort and time to read and discuss the papers. Moreover, we acknowledge the help of additional external reviewers who evaluated submissions in their area of expertise. Finally,wewouldliketothanktheauthorsofallthesubmittedpapersandthe conferenceattendees, for keeping this researchcommunity lively and interactive, and ultimately ensuring the success of this conference series.

th The 13 edition of the International Conference on Reliable Software Technologies (Ada-Europe 2008) marked its arrival in Italy by selecting the splendid venue of Venice. It did so after having been hosted twice in Switzerland, Spain and the UK (Montreux for its inauguration in 1996 and Geneva in 2007; Santander in 1999 and Palma de Mallorca in 2004; London in 1997 and York in 2005), and having visited Sweden (Uppsala, 1998), Germany (Potsdam, 2000), Belgium (Leuven, 2001), Austria (Vienna, 2002), France (Toulouse, 2003) and Portugal (Porto, 2006). It was certainly high time that the conference came to Italy! The conference series, which is run and sponsored by Ada-Europe, chooses its yearly venue following two driving criteria: to celebrate the activity of one of its national member societies in a particular country, and/or to facilitate the formation, or the growth, of a national community around all aspects of reliable software technologies. The success of this year's conference, beside the richness of its technical and social program, will thus be measured by its lasting effects. We can only hope that the latter will be as good and vast as the former! Owing to the absence of a national society associated with Ada-Europe in Italy, the organization of the conference was technically sustained by selected members of the Board of Ada-Europe, its governing body, with some invaluable local support.

Models have become essential for dealing with the numerous aspects involved in developing and maintaining complex IT systems. Models allow capturing of the relevant aspects of a system from a given perspective, and at a precise level of abstraction. In addition to models, the transformations between them are other key elements in model-driven engineering. Model transformations allow the de?nition and implementation of the operations on models, and also provide achainthatenablestheautomateddevelopmentofasystemfromitscorrespo- ing models. Furthermore, model transformations may be realized using models, and are, therefore, an integral part of any model-driven approach. There are already several proposals for model transformation speci?cation, implementation and execution, which are beginning to be used by modeling practitioners. However, model transformations need specialized support in s- eral aspects in order to realize their full potential. The problem goes beyond having speci?c languages to represent model transformations; we also need to understandtheirfoundations,suchasthekeyconceptsandoperatorssupporting those languages, their semantics, and their structuring mechanisms and pr- erties (e. g. , modularity, composability and parametrization). In addition, model transformations can be stored in repositories as reusable assets, where they can be managed, discovered and reused. There is also a need to chain and combine model transformations in order to produce new and more powerful transfor- tions, and to be able to implement new operations on models. Finally, model transformations need methodology support, i. e. , they need to be integrated into software development methodologies supported by appropriate tools and en- ronments. These issues and concerns de?ne the focus of these proceedings.

Software development for the automotive domain has become the enabling te- nologyforalmostallsafety-criticalandcomfortfunctionso?eredtothecustomer. Ninety percentofallinnovations inautomotive systems aredirectly or indirectly enabled by embedded software. The numbers of serious accidents have declined in recent years, despite constantly increasing tra?c; this is correlated with the introduction of advanced, software-enabled functionality for driver assistance, such as electronic stability control. Software contributes signi?cantly to the - tomotive value chain. By 2010 it is estimated that software will make up 40% of the value creation of automotive electrics/electronics. However, with the large number of software-enabled functions, their int- actions, and the corresponding networking and operating infrastructure, come signi?cant complexities both during the automotive systems engineering p- cess and at runtime. A central challenge for automotive systems development is the scattering of functionality across multiple subsystems, such as electronic control units (ECUs) and the associated networks. As an example, consider the central locking systems (CLS), whose functionality is spread out over up to 19 di?erent ECUs in some luxury cars. Of course, this includes advanced functi- ality, such as seat positioning and radio tuning according to driver presets upon entry, as well as unlocking in case of a detected impact or accident. However, thisexampledemonstratesthatmodernautomotivesystemsbridgecomfort-and safety-critical functionality. This induces particular demands on safety and - curity, and, in general, software and systems quality. The resulting challenges and opportunities were discussed, in depth, at the second Automotive Software Workshop San Diego (ASWSD) 2006, on whose results we report here.

IMPROVE stands for "e;Information Technology Support for Collaborative and Distributed Design Processes in Chemical Engineering"e; and is a large joint project of research institutions at RWTH Aachen University. This volume summarizes the results after 9 years of cooperative research work. The focus of IMRPOVE is on understanding, formalizing, evaluating, and, consequently, improving design processes in chemical engineering. In particular, IMPROVE focuses on conceptual design and basic engineering, where the fundamental decisions concerning the design or redesign of a chemical plant are undertaken. Design processes are analyzed and evaluated in collaboration with industrial partners.

As software systems become ubiquitous, the issues of dependability become more and more crucial. Given that solutions to these issues must be considered from the very beginning of the design process, it is reasonable that dependability is addressed at the architectural level. This book was born of an effort to bring together the research communities of software architectures and dependability.This state-of-the-art survey contains expanded and peer-reviewed papers based on the carefully selected contributions to two workshops: the Workshop on Architecting Dependable Systems (WADS 2007), organized at the 2007 International Conference on Dependable Systems and Networks (DSN 2007), held in Edinburgh, UK in June 2007 and the Third Workshop on the Role of Software Architecture for Testing and Analysis (ROSATEA 2007) organized as part of a federated conference on Component-Based Software Engineering and Software Architecture (CompArch 2007), held in Medford, MA, USA in July 2007. It also contains a number of invited papers written by recognized experts in the area. The 14 papers are organized in topical sections on critical infrastructures, rigorous design/fault tolerance, and verification and validation.

On behalf of the Organizing Committee we are pleased to present the p- ceedings of the 2008 Symposium on Component-Based Software Engineering (CBSE). CBSE is concerned with the development of software-intensivesystems from independently developed software-building blocks (components), the - velopment of components, and system maintenance and improvement by means of component replacement and customization. CBSE 2008 was the 11th in a series of events that promote a science and technology foundation for achieving predictable quality in software systems through the use of software component technology and its associated software engineering practices. Wewerefortunateto haveadedicatedProgramCommitteecomprisingmany internationallyrecognizedresearchersandindustrialpractitioners.Wewouldlike to thank the members of the Program Committee and associated reviewers for their contribution in making this conference a success. We received 70 subm- sions and each paper was reviewed by at least three Program Committee m- bers (four for papers with an author on the Program Committee). The entire reviewing process was supported by the Conference Management Toolkit p- vided by Microsoft. In total, 20 submissions were accepted as full papers and 3 submissions were accepted as short papers.

The Workshop on Self-sustaining Systems (S3) is a forum for the discussion of topics relating to computer systems and languages that are able to bootstrap, implement, modify, and maintain themselves. One property of these systems is that their implementation is based onsmall but powerfulabstractions;examples include (amongst others) Squeak/Smalltalk, COLA, Klein/Self, PyPy/Python, Rubinius/Ruby,andLisp.Suchsystemsaretheenginesoftheirownreplacement, giving researchers and developers great power to experiment with, and explore future directions from within, their own small language kernels. S3 took place on May 15-16, 2008 at the Hasso-Plattner-Institute (HPI) in Potsdam, Germany. It was an exciting opportunity for researchers and prac- tioners interested in self-sustaining systems to meet and share their knowledge, experience, and ideas for future research and development. S3 provided an - portunity for a community to gather and discuss the need for self-sustainability in software systems, and to share and explore thoughts on why such systems are needed and how they can be created and deployed. Analogies were made, for example, with evolutionary cycles, and with urban design and the subsequent inevitable socially-driven change. TheS3participantsleftwithagreatersenseofcommunityandanenthusiasm for probing more deeply into this subject. We see the need for self-sustaining systems becoming critical not only to the developer's community, but to e- users in business, academia, learning and play, and so we hope that this S3 workshop will become the ?rst of many.

The 2008 International Symposium on Rule Interchange and Applications (RuleML th 2008), collocated in Orlando, Florida, with the 11 International Business Rules - rum, was the premier place to meet and to exchange ideas from all fields of rules te- nologies. The aim of RuleML 2008 was both to present new and interesting research results and to show successfully deployed rule-based applications. This annual sym- sium is the flagship event of the Rule Markup and Modeling Initiative (RuleML). The RuleML Initiative (www.ruleml.org) is a non-profit umbrella organization of several technical groups organized by representatives from academia, industry and government working on rule technologies and applications. Its aim is to promote the study, research and application of rules in heterogeneous distributed environments such as the Web. RuleML maintains effective links with other major international societies and acts as intermediary between various 'specialized' rule vendors, appli- tions, industrial and academic research groups, as well as standardization efforts from, for example, W3C, OMG, and OASIS.

Wearepleasedtopresenttheproceedingsofthe14thMontereyWorkshop,which tookplaceSeptember10-13,2007inMonterey,CA,USA. Inthispreface,wegive the reader an overview of what took place at the workshop and introduce the contributions in this Lecture Notes in Computer Science volume. A complete introduction to the theme of the workshop, as well as to the history of the Monterey Workshop series, can be found in Luqi and Kordon's "e;Advances in Requirements Engineering: Bridging the Gap between Stakeholders' Needs and Formal Designs"e; in this volume. This paper also contains the case study that many participants used as a problem to frame their analyses, and a summary of the workshop's results. The workshop consisted of three keynote talks, three panels, presentations of peer-reviewed papers, as well as presentations of various position papers by the participants. The keynote speakers at this year's workshop were Daniel Berry, Aravind Joshi, and Lori Clarke. Each of their talks was used to set the tone for the p- sentations and discussions for that particular day. Daniel Berry presented an overview of the needs and challenges of natural language processing in requi- ments engineering, with a special focus on ambiguity in his talk "e;Ambiguity in Natural Language Requirements. "e; Aravind Joshi provided an overview of current natural language processing research in discourse analysis in the talk "e;Some Recent Developments in Natural Language Processing. "e; Finally, Lori Clarke showed how to combine formal requirements speci?cation with natural language processing to cope with the complex domain of medical information processes in "e;Getting the Details Right.

This volume contains the proceedings of the International Middleware Con- rence, held in Leuven, Belgium during December 1-4, 2008. This year marked the ninth rendition of this annual conference in its current format initially - opted in 1998, aspiring to serve as the premier venue focusing exclusively on important middleware results. A lot has happened over the intervening 10-year span. Middleware has become pervasive in an increasinglyinterconnected world, with its concepts now securely embedded in the notional architectures driving forward the information age. The conference continues to be a focal point for important new initiatives and results for new generations of middleware. With each succeeding year, it has become an even more competitive publishing venue, further extending its selectivity this year as well. Of the 117 submissions, - ly 21 were able to receive acceptance invitations, for an acceptance rate of less than18%. Competitiveindeed. Additionally,thesesubmissionscontinuetocome from all over the globe, spanning authors from 23 countries. A truly world-wide endeavor. But other things have also changed as we turn the corner on the ?rst decade of this conference. In many ways, middleware has achieved signi?cant success where it really counts: in terms of technical innovations, advanced capabilities, successful ideas, and ?elded systems which permeate society, industry, gov- nment, and academia. With this success comes maturity.

This volume includes the proceedings of all the ?ve workshops that were held as part of the International Conference on Service-Oriented Systems 2007 (ICSOC 2007): - Mashups 2007: First International Workshop on Web APIs and Services Mashups - NFPSLA-SOC 2007: Workshop on Non-Functional Properties and Service Level Agreements in Service-Oriented Computing - SeMSoc 2007: Second International SeMSoC Workshop Business-Oriented Aspects Concerning Semantics and Methodologies in Service-Oriented Computing - TSOA 2007: First International Workshop on Telecom Service-Oriented Architectures - WESOA2007:ThirdInternationalWorkshoponEngineeringService-Oriented Applications: Analysis, Design and Composition These workshops o?ered interesting presentations and discussions on a wide rangeofhottopicsinservice-orientedcomputing:developmentofmashups,m- agement of non-functional properties and service level agreements, engineering approaches, and semantic methodologies. Also, the crucial application domain of telecom services and service architectures was investigated. The ?ve workshops were selected out of eight submissions. During the - lection process we encouraged the merging of workshop proposals with similar scope. We are grateful to all workshop organizers. Without their valuable ideas and support the workshop sessions at ICSOC as well as this volume would not have been possible. We also thank all authors for their active participation in the events, for the quality of their papers, and for being patient with us during the long process of compilation of this volume.

Declarative languages have long promised the ability to rapidly create easily maintainable software for complex applications. The International Symposium of Practical Aspects of Declarative Languages (PADL) provides a yearly - rum for presenting results on the principles the implementations and especially the applications of declarative languages. The PADL symposium held January 19-20, 2009 in Savannah, Georgia was the 11th in this series. This year 48 papers were submitted from authors in 17 countries. The P- gram Committee performed outstandingly to ensure that each of these papers submitted to PADL 2009 was thoroughly reviewed by at least three referees in a short period of time. The resulting symposium presented a microcosm of how the current generation of declarative languages are being used to address real applications, along with on-going work on the languages themselves. The program also included two invited talks, "e;Inspecting and Preferring Abductive Models"e; by Luis Moniz Pereira and "e;Applying Declarative Languages to C- mercial Hardware Design"e; by Je? Lewis. Regular papers presented a variety of applications, including distributed applications over networks, network veri?- tion, user interfaces, visualization in astrophysics, nucleotide sequence analysis and planning under incomplete information. PADL 2009 also included ongoing work on the declarative languages themselves. Multi-threaded and concurrent Prolog implementation was addressed in several papers, as were innovations for tabling in Prolog and functional arraysin Haskell. Recent applications have also sparked papers on meta-predicates in Prolog and a module system for ACL2.

The growing complexity of modern software systems increases the di?culty of ensuring the overall dependability of software-intensive systems. Complexity of environments, in which systems operate, high dependability requirements that systems have to meet, as well as the complexity of infrastructures on which they rely make system design a true engineering challenge. Mastering system complexity requires design techniques that support clear thinking and rigorous validation and veri?cation. Formal design methods help to achieve this. Coping with complexity also requires architectures that are t- erant of faults and of unpredictable changes in environment. This issue can be addressed by fault-tolerant design techniques. Therefore, there is a clear need of methods enabling rigorous modelling and development of complex fault-tolerant systems. This bookaddressessuchacuteissues indevelopingfault-tolerantsystemsas: - Veri?cation and re?nement of fault-tolerant systems - Integrated approaches to developing fault-tolerant systems - Formal foundations for error detection, error recovery, exception and fault handling - Abstractions, styles and patterns for rigorousdevelopment of fault tolerance - Fault-tolerant software architectures - Development and application of tools supporting rigorous design of depe- able systems - Integrated platforms for developing dependable systems - Rigorous approaches to speci?cation and design of fault tolerance in novel computing systems TheeditorsofthisbookwereinvolvedintheEU(FP-6)projectRODIN(R- orous Open Development Environment for Complex Systems), which brought together researchers from the fault tolerance and formal methods communi- 1 ties. In 2007 RODIN organized the MeMoT workshop held in conjunction with the Integrated Formal Methods 2007 Conference at Oxford University.