| Recording the reasons for design decisions C Potts, G Bruns ICSE 88, 418-427, 1988 | 466 | 1988 |
| Model checking partial state spaces with 3-valued temporal logics G Bruns, P Godefroid Computer Aided Verification: 11th International Conference, CAV’99 Trento …, 1999 | 325 | 1999 |
| Generalized model checking: Reasoning about partial state spaces G Bruns, P Godefroid CONCUR 2000—Concurrency Theory: 11th International Conference University …, 2000 | 191 | 2000 |
| Mawl: A domain-specific language for form-based services DL Atkins, T Ball, G Bruns, K Cox IEEE transactions on software engineering 25 (3), 334-346, 1999 | 162 | 1999 |
| Relationship-based access control: its expression and enforcement through hybrid logic G Bruns, PWL Fong, I Siahaan, M Huth Proceedings of the second ACM conference on Data and Application Security …, 2012 | 111 | 2012 |
| Model checking with multi-valued logics G Bruns, P Godefroid International Colloquium on Automata, Languages, and Programming, 281-293, 2004 | 106 | 2004 |
| Distributed systems analysis with CCS G Bruns Prentice-Hall, Inc., 1997 | 93 | 1997 |
| Temporal logic query checking G Bruns, P Godefroid Proceedings 16th Annual IEEE Symposium on Logic in Computer Science, 409-417, 2001 | 86 | 2001 |
| A simple and expressive semantic framework for policy composition in access control G Bruns, DS Dantas, M Huth Proceedings of the 2007 ACM workshop on Formal methods in security …, 2007 | 78 | 2007 |
| Access control via Belnap logic: Intuitive, expressive, and analyzable policy composition G Bruns, M Huth ACM Transactions on Information and System Security (TISSEC) 14 (1), 1-27, 2011 | 70 | 2011 |
| Access-control policies via Belnap logic: Effective and efficient composition and analysis G Bruns, M Huth 2008 21st IEEE Computer Security Foundations Symposium, 163-176, 2008 | 58 | 2008 |
| μABC: A Minimal Aspect Calculus G Bruns, R Jagadeesan, A Jeffrey, J Riely CONCUR 2004-Concurrency Theory: 15th International Conference, London, UK …, 2004 | 57 | 2004 |
| A practical technique for process abstraction G Bruns International Conference on Concurrency Theory, 37-49, 1993 | 56 | 1993 |
| Validating safety models with fault trees G Bruns, S Anderson SAFECOMP’93: The 12th International Conference on Computer Safety …, 1993 | 48 | 1993 |
| Experience with a Domain Specific Language for Form-based Services. DL Atkins, T Ball, M Benedikt, G Bruns, KC Cox, P Mataga, K Rehor DSL, 37-50, 1997 | 46 | 1997 |
| A case study in safety-critical design G Bruns Computer Aided Verification: Fourth International Workshop, CAV'92 Montreal …, 1993 | 45 | 1993 |
| Trapping mutual exclusion in the box calculus J Esparza, G Bruns Theoretical Computer Science 153 (1-2), 95-128, 1996 | 44 | 1996 |
| Automated update management for XML integrity constraints M Benedikt, G Bruns, J Gibson, R Kuss, A Ng Program Language Technologies for XML (PLANX02), 2002 | 42 | 2002 |
| A Language for Value-passing CCS G Bruns LFCS, Department of Computer Science, University of Edinburgh, 1991 | 42 | 1991 |
| Model checking and fault tolerance G Bruns, I Sutherland International Conference on Algebraic Methodology and Software Technology, 45-59, 1997 | 33 | 1997 |
