Johnson, James E.James E.JohnsonLangworthy, David E.David E.LangworthyLamport, LeslieLeslieLamportVogt, Friedrich H.Friedrich H.Vogt2020-01-292020-01-292004-12-10Electronic Notes in Theoretical Computer Science 1-4 SUPPL. (105): 147-158 (2004-12-10)http://hdl.handle.net/11420/4621We describe a use of formal methods to specify and check a Web Services protocol. The Web Services Atomic Transaction protocol was specified in TLA + and checked with the TLC model checker. A modest effort revealed oversights that caused unanticipated behaviors of the protocol; these were corrected by clarifications and changes to the protocol.en1571-066120041-4 SUPPL.147158Elsevierhttps://creativecommons.org/licenses/by-nc-nd/3.0/SpecificationStandardsTlaVerificationInformatikJournal Article10.15480/882.260210.1016/j.entcs.2004.02.02210.15480/882.2602Other