“…These models can then be used in a variety of formal analyses to evaluate the HAI. For example: researchers have formulated a number of generic temporal logic properties for evaluating interface usability with a model checker (Abowd et al, 1995; Berstel et al, 2005; Campos and Harrison, 1997, 2009; Paternò, 1997); a variety of techniques have been developed for detecting potential mode confusion 1 in automated systems (Bredereke and Lankenau, 2005; Buth, 2004; Campos and Harrison, 2001, 2011; Degani and Heymann, 2002; Javaux, 2002; Joshi et al, 2003; Leveson et al, 1997; Rushby, 2002; Wheeler, 2007); graph theory can be used to evaluate usability (Thimbleby and Gow, 2007b); methods have been developed for generating test cases that will guarantee coverage of the devices features and displays (Duan et al, 2010; Giannakopoulou et al, 2011); code for implementing a modeled human-computer interfaces can be automatically generated (Berstel et al, 2005); and human-device interfaces can be automatically generated to ensure certain usability properties are maintained (Combéfis et al, 2011; Gimblett and Thimbleby, 2010; Heymann and Degani, 2007). …”