C. Auplusun5, 44 and LIN OR5,CFNRpartyy0, p.44

S. Activok, C. Activko, and C. Desacok, CFNR DesacOK abCFNR and SExtt77 = not CFNRpartyy00 abCFNR and SExtt88 = pre CFNRparty = CFNRparty abCFNR and SExtt99 = CFNRpartyy00 abCFNR and SExtt100 = pre CFNRparty = CFNRparty 8. les sorties externes produites par CFNR sont coh erentes avec l' etat du poste logique; CFNR ActivOK or ... or CFNR DesacOK = Exception

. Abramsky, Observation equivalence as a testing equivalence, Theoretical Computer Science, vol.53, issue.2-3, p.2255241, 1987.
DOI : 10.1016/0304-3975(87)90065-X

-. Abrial and L. Mussat, Introducing dynamic constraints in B, Second International B Conference B'98, 1998.
DOI : 10.1007/BFb0053357

S. Aho, N. Gallagher, C. Griieth, D. Schell, and . Swayne, Scf3 T M sculptor with chisel: Requirements engineering for communications services, Feature Interactions in Telecommunications Systems V, p.45563, 1998.

B. Akers, Binary Decision Diagrams, IEEE Transactions on Computers, vol.27, issue.6, pp.5099-516, 1978.
DOI : 10.1109/TC.1978.1675141

H. Andr-e and . Boufa-ed, V eriication de comportement de machine d'ex ecution, 2 eme Congr es sur la Mod elisation des syst emes r eactifs. Hermes, 1999.

I. Arnold and . Guessarian, Mathematiques pour l'informatique, 1993.
URL : https://hal.archives-ouvertes.fr/hal-00020575

P. Bensalem, C. Caspi, C. Dumas, and . Parent-vigouroux, A methodology for proving control programs with Lustre and PVS, Dependable Computing for Critical Applications, 1999.

G. Benveniste and . Berry, The synchronous approach to reactive and real-time systems, Proceedings of the IEEE, p.127001282, 1991.
DOI : 10.1109/5.97297

URL : https://hal.archives-ouvertes.fr/inria-00075115

B. Blom, L. Jonsson, and . Kempe, Using temporal logic for modular speciication of telephone services, Feature Interactions in Telecommunications Systems, p.1977216, 1994.

N. Blumenthal, J. Griieth, T. Gregoire, and . Ohta, Feature interaction contest interaction description, Comnet, 1998.

. Boniol, Etude d'une s emantique de la r eactivit e :v ariations autour du mod ele synchrone et application aux syst emes embarqu es. Th ese, l'Ecole Nationale Sup erieure de l'A eronautique et de l, 1997.

F. Bibliographie, R. Boussinot, and . Simone, The Esterel language, Proceedings of the IEEE, p.129331304, 1991.

F. Bowen, F. S. Dworak, C. Chow, N. D. Griieth, G. E. Herman et al., The feature interaction problem in telecommunication systems, Proceedings of the seventh International Conference on Softwre Engineering for Telecommunication Switching Systems, 1989.

H. Braithwaite and J. M. Atlee, Towards automated detection of feature interactions, Feature Interactions in Telecommunications Systems, p.36659, 1994.

. Brinksma, A theory for derivation of tests, Protocol Speciication, Testing and Veriication VIII, 1988.

J. Brinksma, L. Tretmans, and . Verhaard, A framework for test selection, Protocol Speciication, Testing and Veriication XI, 1991.

E. Bryant, Graph-Based Algorithms for Boolean Function Manipulation, IEEE Transactions on Computers, vol.35, issue.8, p.6677692, 1986.
DOI : 10.1109/TC.1986.1676819

J. Cameron, A feature interaction banchmark for in and beyond, Feature Interactions in Telecommunications Systems, p.1123, 1994.

N. Caspi, D. Halbwachs, J. Pilaud, and . Plaice, LUSTRE, a declarative language for programming synchronous systems, 14th Symposium on Principles of Programming Languages POPL, p.1788188, 1987.

G. Cattrall, D. Howard, . Jordan, and S. Buj, An interaction-avoiding call processing model, Feature Interactions in Telecommunications Systems III, p.1733184, 1995.

S. Combes and . Pickin, Formalization of a user view of network and services for feature interaction detection, Feature Interactions in Telecommunications Systems, p.1200135, 1994.

F. Du-bousquet, J. Ouabdesselam, and . Richier, Expressing and implementing operational prooles for reactive software validation, 9th International Symposium on Software R eliability Engineering, P aderborn, 1998.

F. Du-bousquet, J. Ouabdesselam, N. Richier, and . Zuanon, Incremental feature validation : a synchronous point of view, Feature Interactions in Telecommunications Systems V, p.2622275, 1998.

F. Du-bousquet, J. Ouabdesselam, N. Richier, and . Zuanon, Feature interaction detection using synchronous approach and testing. Computer Networks and ISDN Sys- tems, a para^ tre, 1999.

F. Du-bousquet, J. Ouabdesselam, N. Richier, and . Zuanon, Lutess, Proceedings of the 21st international conference on Software engineering, ICSE '99, 1999.
DOI : 10.1145/302405.302634

F. Du-bousquet, J. Ouabdesselam, N. Richier, and . Zuanon, Test et approche synchrone pour la d etection d'interactions de services t el ephoniques, para^ tre dans la revue fran caise Calculateurs Parall eles, 1999.

N. Bousquet and . Zuanon, Feature interaction detection contest: Lutess testing tool, technical report PFL, IMAG -LSR, 1998.

N. Bousquet and . Zuanon, An overview of lutess, a speciication-based tool for testing synchronous software, 14th IEEE International Conference o n A utomated Software Engineering, 1999.

S. Duran and . Ntafos, An Evaluation of Random Testing, IEEE Transactions on Software Engineering, vol.10, issue.4, p.4388444, 1984.
DOI : 10.1109/TSE.1984.5010257

. Dyer, The cleanroom approach to quality software development 355 ETSI Integrated Services Digital Network ISDN; Call Forwarding No Reply, Service description ETS 300 201. 366 ETSI. Integrated Services Digital Network ISDN; Completion of Call to Busy Subscriber , Service description, ETS 300 357. 377 ETSI. Integrated Services Digital Network ISDN; Explicit Call Transfert, p.367, 1992.

S. Evans, Specifying & verifying concurrent systems using Z, Workshop on Formal Methods Europe FME'94, 1994.
DOI : 10.1007/3-540-58555-9_105

L. Faci and . Logrippo, Specifying features and analyzing their interactions in a lotos environment, Feature Interactions in Telecommunications Systems, p.1366151, 1994.

J. Fernandez, C. Jard, T. , and C. Viho, Using on-the--y veriication techniques for the generation of test suites, CAV'96, 1996.

J. E. Gammelgaard and . Kristensen, Interaction detection, a logical approach, Feature Interactions in Telecommunications Systems, p.1788196, 1994.

. Gibson, Towards a feature interaction algebra, Feature Interactions in Telecommunications Systems V, p.2177231, 1998.

-. Glory, V eriication de propri et es de programmes ots de donn ees synchrones, Th ese, 1989.

-. Godskesen, A formal framework for feature interaction with emphasis on testing, Feature Interactions in Telecommunications Systems III, p.21130, 1995.

R. Griieth, J. Blumenthal, T. Gregoire, and . Ohta, Feature interaction detection contest, Feature Interactions in Telecommunications Systems V, p.3277359, 1998.

H. Griieth and . Velthuijsen, The negotiating agents approach t o r u n time feature interaction resolution, Feature Interactions in Telecommunications Systems, p.2177235, 1994.

D. Griieth and Y. Lin, Extending telecommunication systems: The featureinteraction problem, IEEE Computer, p.14418, 1993.

P. Halbwachs, P. Caspi, and D. Pilaud, Programmation et V eriication des Syst emes R eactifs : le langage LUSTRE, Technique et Science Informatique, vol.102, 1991.

F. Halbwachs and P. Lagnier, Synchronous Observers and the Veriication of Reactive Systems, Third Int. Conf. on Algebraic Methodology and Software Technology, AMAST'93, Twente. W orkshops in Computing, 1993.

X. Halbwachs, P. Nicollin, and D. Weber, Test automatique de syst emes r eactifs, Mod elisation et v eriication des processus parall eles, 1998.

D. Halbwachs, F. Pilaud, A. Ouabdesselam, and . Glory, Specifying, programming and verifying real-time systems using a synchronous declarative language, Workshop on automatic veriication methods for nite state systems, 1989.
DOI : 10.1007/3-540-52148-8_18

J. Hall, Feature combination and interaction detection via foregrounddbackground models, Feature Interactions in Telecommunications Systems V, p.2322246, 1998.

. Hamlet, Software Quality, Software Process and Software Testing Advances in Computers, 1995.

R. Hamlet and . Taylor, Partition Analysis Does Not Inspire Conndence, IEEE Transactions on Software Engineering, p.140221411, 1990.

A. Harel and . Pnueli, On the Development of Reactive Systems. Logics and Models of Concurrent Systems, NATO ASI Series, p.4777498, 1985.

C. Jagadeesan, J. V. Puchol, and . Olnhausen, A F ormal Approach to Reactive System Software: A Telecommunications Application in Esterel. Formal Methods in Systems Design, 1996.

J. Jagadeesan, A. Porter, C. Puchol, J. C. Ramming, and L. Votta, Speciication-based Testing of Reactive Software: Tools and Experiments, 19th International Conference on Software Engineering, 1997.

J. Jagadeesan, C. Puchol, and J. E. Von-olnhausen, Safety Property V eriication of Esterel Programs and Applications to Telecommunications Software, 7th Conference on Computer-Aided V eriication, 1995.

M. Kelly, J. Crowther, R. King, J. Masson, and . Delapeyre, Service validation and testing, Feature Interactions in Telecommunications Systems III, p.1733184, 1995.

. Khoumsi, Detection and resolution of interactions between telephone services, Feature Interactions in Telecommunications Systems IV, p.78892, 1997.

S. D. Kimbler, Use case driven analysis of feature interactions, Feature Interactions in Telecommunications Systems, p.1666177, 1994.

. Knuth, The art of computer programming, chap. 3 : Random Numbers, 1969.

L. Guernic, T. Gautier, M. L. Borgne, and C. L. Maire, Programming Real-Time Applications with SIGNAL, Proceedings of the IEEE, p.132111336, 1991.
URL : https://hal.archives-ouvertes.fr/inria-00075114

. Leduc, Conformance relation, associated equivalence and new canonical tester in LOTOS, Protocol Speciication, Testing and Veriication XI, 1991.

J. Lin and Y. Lin, A building block approach to detecting and resolving feature interactions, Feature Interactions in Telecommunications Systems, p.866119, 1994.

S. M. Ross, A c ourse in Simulation, 1990.

. Maraninchi, The argos language: Graphical representation of automata and description of reactive systems, IEEE Workshop on Visual Languages, 1991.

S. Marre, . Eminaire, and . Imag-lsr, S election de tests a partir de descriptions lustre, 1999.

. Mazuet, Strat egies de Test pour des Programmes Synchrones -Application au Langage Lustre, Th ese, 1994.

L. Mcmillan, An introduction to model-checking, Mod elisation et v eriication des processus parall eles, 1998.

D. M. Mermet and . Ery, D etection d'interaction de services : une approche avec b, Approches Formelles dans l'Assistance a u D eveloppement de Logiciels AFADL'97, 1997.

R. Murakami and . Sethi, Terminal call processing in Esterel, Proc. IFIP 92 World Computer Congress, 1992.

. Musa, Operational Prooles in Software-Reliability Engineering, IEEE Software, p.14432, 1993.

. Myers, The Art Of Software T esting, 1979.

. Nelson, Probability, stochastic processes and queuring theory, chap 8 : Markov processes, 1995.

J. Ouabdesselam, N. Richier, and . Zuanon, Using behavioral patterns for guiding the test of service speciication, technical report PFL, IMAG -LSR, p.99, 1998.

. Parissis, Test de logiciels synchrones sp ecii es en Lustre, Th ese, 1996.

. Phalippou, Relations d'impl ementations et hypoth eses de test sur des automates a entr ees et sorties, Th ese, 1994.

N. Pilaud and . Halbwachs, From a synchronous declarative language to a temporal logic dealing with multiform time, Symposium on Formal Techniques in Real Time and Fault Tolerant Systems, W arwick, 1988.
DOI : 10.1007/3-540-50302-1_5

J. Pilaud and . Bergerand, SAGA : A software Development E n vironment for Dependability Automatic Control, SAFECOMP'88, F ulda, 1988.

M. Plath and . Ryan, Plug-and-play features, Feature Interactions in Telecommunications Systems V, p.1500164, 1998.

. Pnueli, Application of temporal logic to the speciication and veriication of reactive systems : a survey of current trends. Current Trends in Concurrency, LNCS, vol.224, p.5100584, 1986.

. Ratel, D eenition et r ealisation d'un outil de v eriication formelle de programmes Lustre: Le syst eme Lesar, Th ese, 1992.

R. , Y. , D. Weber, X. Nicollin, and N. Halbwachs, Automatic testing of reactive systems, 19th IEEE Real-Time Systems Symposium RTSS'98, 1998.

E. Shannon, A symbolic analysis of relay and switching circuits, Transactions AIEE, vol.57, p.3055316, 1938.

. Tretmans, A formal approach to conformance testing, 1992.

J. Turner, An architectural description of intelligent network features and their interactions, Computer Networks and ISDN Systems, vol.30, issue.15, p.138991420, 1998.
DOI : 10.1016/S0169-7552(98)00150-0

. Utas, A pattern language of feature interaction, Feature Interactions in Telecommunications Systems V, p.988114, 1998.

R. Van-der-linden, Using an architecture to help beat feature interaction, Feature Interactions in Telecommunications Systems, p.24435, 1994.

S. Weyuker, D. Weiss, and . Hamlet, Comparison of Program Testing Stategies, Symposium on Testing, 1991.

. Whittaker, Markov chain techniques for software testing and reliability analysis, 1992.

D. Zuanon and . Inpg-ensimag, Mod elisation et validation de services t el ephoniques, 1996.

A. Annexe, Description des semantiques citees A.1.2 S emantique bas ee sur deux m emoires A partir de la s emantique sur les traces d'ex ecution, il est possible de construire une s emantique plus simple

. Cette-s-emantique-est-appel-ee-s-emantique-op-erationnelle-de-lustre, La d emarche consiste a imposer que l'op erateur pre ne soit appliqu e qu' a des identiicateurs et non plus a des expressions complexes Cette hypoth ese n'est pas restrictive, puisque toute expression de Lustre peut ^ etre remplacer par une variable Gr^ ace a cette hypoth ese, il est possible d' evaluer toute expression Lustre sur les deux derni eres m emoires de la trace l'avant derni ere etant n ecessaire et suusante pour l' evaluation de toutes les expressions prex, x etant une variable. La s emantique op erationnelle d eenit comment, a tout instant, une m emoire compatible avec un programme se d eduit de la m emoire du programme a l'instant p r ec edent

. Les-r-egles-d-eenissant-la-compatibilit-e-d, une m emoire 0 avec un programme P, sachant qu' a l'instant p r ec edent l a m emoire etait ; ; 0 ` P sont les suivantes : Compatibilit e a vec les equations : ; ; 0 ` Ejv

E. Soient, E 3 trois expressions bool eennes, et une valeur egale a out ou nil. ; ; 0 ` E 1 j true ; ; 0 ` if E 1 then E 2 else E 3 j E 2 ; ; 0 ` E 1 j false ; ; 0 ` if E 1 then E 2 else E 3 jE 3

A. Annexe, Description des semantiques citees