Formal methods in the specification of the emergency closing system of the eastern scheldt storm surge barrier

Abstract

This paper describes the use of formal methods in the specification of the Emergency Closing System of the Storm Surge Barrier in the Eastern Scheldt (The Netherlands). Formal methods have proved to be very useful in obtaining an exact specification of the system and identifying possible errors. Formal methods also pose problems. Much depends on the communication between the client and the expert and, since the client is not able to assess the work of the formed methods specialist, the trust between them.