Automated deductive requirements analysis of critical systems

ACM Transactions on Software Engineering and Methodology

Volumn 10, Issue 3, 2001, Pages 255-307

  Gargantini, Angelo ^a   Morzenti, Angelo ^a  

^a POLITECNICO DI MILANO   (Italy)

Author keywords

C.3 Computer Systems Organization : Special Purpose and Application Based Systems Real time and embedded systems; D.2.1 Software Engineering : Requirements Specifications Methodologies (e.g., object oriented, structured)

Indexed keywords

EID: 0010021963     PISSN: 1049331X     EISSN: None     Source Type: Journal    
DOI: 10.1145/383876.383877     Document Type: Article

References (57)

1. ABADI, M. AND LAMPORT, L. 1994. An old-fashioned recipe for real time. ACAM Trans. Program. Lang. Syst. 16, 5 (Sept.), 1543-1571.
2. ALBORGHETTI, A., GARGANTINI, A., AND MORZENTI, A. 1997. Providing automated support to deductive analysis of time critical systems. SIGSOFT Softw. Eng. Notes 22, 6, 211-226.
3. ARCHER, M. AND HEITMEYER, C. 1996. TAME: A specialized specification and verification system for timed automata. In Work in Progress Proceedings of the 7th IEEE Real-Time Systems Symposium (RTSS '96, Washington, DC., Dec.). IEEE Computer Society Press, Los Alamitos, CA, 3-6.
4. ARCHER, M. AND HEITMEYER, C. 1997a. Human-style theorem proving using PVS. In Proceedings of the 10th International Conference on Theorem Proving in Higher Order Logics (TPHOLs '97, Murray Hill, NJ, Aug.), E. Gunter and A. Felty, Eds. Springer Lecture Notes in Computer Science. Springer-Verlag, New York, NY, 33-48.
5. ARCHER, M. AND HEITMEYER, C. 1997b. Verifying hybrid systems modeled as timed automata: A case study. In Proceedings of the International Workshop on Hybrid and Real-Time Systems (HART '97, Grenoble, France, Mar.), O. Maler, Ed. Springer Lecture Notes in Computer Science. Springer-Verlag, New York, NY, 171-185.
6. ARCHER, M., HEITMEYER, C., AND RICCOBENE, E. 2000. Using TAME to prove invariants of automata models: Two case studies. In Proceedings of the 3rd ACM Workshop on Formal Methods in Software Practice (FMSP '00). ACM, New York, NY.
7. BASSO, M., CIAPESSONI, E., CRIVELLI, E., MANDRIOLI, D., MORZENTI, A., RATTO, E., AND SAN PIETRO, P. 1998. A logic-based approach to the specification and design of the control system of a pondage power plant. In Improving Software Practice: Case Experience, C. Tully, Ed. John Wiley and Sons, Inc., New York, NY, 79-96. Information about the project described in this paper can also be found - under the acronym ELSA - at http://www.esi.es/ VASIE where results from selected ESSI projects are reported.
8. BENVENISTE, A., LE GUERNIC, P., AND JACQUEMOT, C. 1991. Synchronous programming with events and relations: The SIGNAL language and its semantics. Sci. Comput. Program. 16, 2 (Sept.), 103-149.
9. CAPOBIANCHI, R., COEN-PORSINI, A., MANDRIOLI, D., AND MORZENTI, A. 2000 A framework architecture for supervision and control systems. ACM Comput. Surv. 32, 1 (Mar.). Article 26. Online only at http://www.acm.org/pubs/citations/journals/surveys/2000-32-1es/a26-capobianchi/.
10. CASPI, P. AND HALBWACHS, N. 1986. A functional model for describing and reasoning about time behaviour of computing systems. Acta Inf. 22, 6 (Mar.) 595-627.
11. CENELEC. 2001a. Railway applications - Software for railway for railway control and protection systems. Ref. No. prEN 50128 ed. European Committee for Electrotechnical Standardization.
12. CENELEC. 2001b. Railway applications - Safety related electronic systems for signalling. Ref. No. prEN 50129 ed. European Committee for Electrotechnical Standardization.
13. CHAOCHEN, Z. AND HANSEN, M. R. 1997. Duration calculus: Logical foundations. Formal Aspects Comput. 9, 3, 283-330.
14. CIAPESSONI E., MIRANDOLA, P., COEN-PORISINI, A., MANDRIOLI, D., AND MORZENTI, A. 1999. From formal models to formally based methods: an industrial experience. ACM Trans. Softw. Eng. Methodol. 8, 1, 79-113.
15. COEN-PORISINI, A., GHEZZI, C., AND KEMMERER, R. A. 1997. Specification of realtime systems using ASTRAL. IEEE Trans. Softw. Eng. 23, 9, 572-598. Also available as Tech. Rep. TRCS96-30, Univ. of California, Santa Barbara, Computer Science .
16. COURANT, R. AND FRITZ, J. 1974. Introduction to Calculus and Analysis. Springer-Verlag, Berlin-Heidelburg, Germany.
17. DUTERTRE, B. 1996. Elements of mathematical analysis in PVS. In Proceedings of the 9th International Conference on Theorem Proving in Higher Order Logics (THPOL '96, Turku, Finland, Aug.), J. von Wright, J. Grundy, and J. Harrison, Eds. Springer Lecture Notes in Computer Science. Springer-Verlag, New York, NY, 141-156.
18. DUTERTRE, B. AND STAVRIDOU, V. 1997. Formal requirements analysis of an avionics control system. IEEE Trans. Softw. Eng. 23, 5, 267-278.
19. FELDER, M. AND MORZENTI, A. 1994. Validating real-time systems by history-checking TRIO specifications. ACM Trans. Softw. Eng. Methodol. 3, 4 (Oct.), 308-339.
20. FELDER, M., MANDRIOLI, D., AND MORZENTI, A. 1994. Proving properties of real-time systems through logical specifications and Petri net models. IEEE Trans. Softw. Eng. 20, 2 (Feb.), 127-141.
21. GARGANTINI, A. AND MORZENTI, A. 1999. Automated deductive analysis of time critical systems based on methodical formal specification. Tech. Rep. 50. Dip. di Elettronica e Informazione, Politecnico di Milano, Milan, Italy.
22. GARGANTINI, A., LIBERATI, L., MORZENTI, A., AND ZACCHETTI, C. 1996. Specifying, validating and testing a traffic management system in the TRIO environment. In Proceedings of the 11th Annual Conference on Computer Assurance (COMPASS '96, Gaithersburg, MD, June), S. Faulk and C. Heitmayer, Eds. National Institute of Standards and Technology, Gaithersburg, MD, 65.
23. GARGANTINI, A., MANDRIOLI, D., AND MORZENTI, A. 1999. Dealing with zero-time transitions in axiom systems. Inf. Comput. 150, 119-131.
24. GHEZZI, C., MANDRIOLI, D., AND MORZENTI, A. 1990. TRIO: A logic language for executable specifications of real-time systems. J. Syst. Softw. 12, 2 (May), 107-123.
25. HALBWACHS, N., LAGNIER, F., AND RATEL, C. 1992. Programming and verifying real-time systems by means of the synchronous data-flow language LUSTRE. IEEE Trans. Softw. Eng. 18, 9 (Sept.), 785-793.
26. HANSEN, K., RAVN, A., AND STAVRIDOU, V. 1998. From safety analysis to software requirements. IEEE Trans. Softw. Eng. 24, 7 (July), 573-584.
27. HEITMEYER, C. AND MANDRIOLI, D., EDS. 1996. Formal Methods for Real-Time Computing. John Wiley and Sons, Inc., New York, NY.
28. HEITMEYER, C. L., JEFFORDS, R. D., AND LABAW, B. G. 1993. A benchmark for comparing different approaches for specifying and verifying real-time systems. In Proceedings of the tenth IEEE workshop on Real-time operating systems and software (RTOSS '93, New York, NY, May 13-14), H. F. Wedde, Ed. IEEE Computer Society, Washington, DC.
29. HEITMEYER, C. L., JEFFORDS, R. D., AND LABAW, B. G. 1996. Automated consistency checking of requirements specifications. ACM Trans. Softw. Eng. Methodol. 5, 3, 231-261.
30. HENZINGER, T. 1996. The theory of hybrid automata. In Proceedings of the 11th Annual Symposium on Logic in Computer Science (LCS '96). IEEE Computer Society Press, Los Alamitos, CA, 278-292.
31. HOOMAN, J. 1994. Correctness of real time systems by construction. In Proceedings of the Conference on Formal Techniques in Real-Time and Fault-Tolerant Systems (Lubeck, Germany, Sept.), H. Langmaack, W. -P. de Roever, and J. Vytopil, Eds. Springer Lecture Notes in Computer Science. Springer-Verlag, New York, NY, 19-40.
32. JEFFORDS, R. D. 1995. An approach to encoding the TRIO logic in PVS. Tech. Rep. Information Technology Division, Naval Research Laboratory, Washington, DC.
33. KOMODA, N., HARUNA, K., AND SHINOZAWA, H. 1981. An innovative approach to system requirements analysis by using structural modeling method. In Proceedings of the 5th International Conference on Software Engineering (Los Alamitos, CA). 305-313.
34. KOYMANS, R. 1989. Specifying message passing and time-critical systems with temporal logic. Ph.D. Dissertation. Department of Mathematics and Computing Science, Eindhoven University of Technology, Eindhoven, Netherlands.
35. LEVESON, N. G. 1995. Safeware: System Safety and Computers. Addison-Wesley Longman Publ. Co., Inc., Reading, MA.
36. LUENBERGER, D. G. 1979. Introduction to Dynamic Systems: Theory, Models, and Applications. John Wiley, New York, NY.
37. LYGEROS, J., JOHANSSON, K., SASTRY, S., AND EGERSTEDT, M. 1999. On the existence of executions on hybrid automata. In Proceedings of the IEEE Conference on Decision and Control (Phoeniz, AZ, Dec.). IEEE Computer Society Press, Los Alamitos, CA.
38. MANDRIOLI, D., MORASCA, S., AND MORZENTI, A. 1995. Generating test cases for real-time systems from logic specifications. ACM Trans. Comput. Syst. 13, 4 (Nov.), 365-398. A semantic analysis tool based on the techniques illustrated in this paper is available through anonymous ftp at ftp-se.elet.polimi.it.
39. MANDRIOLI, D., MORZENTI, A., PEZZE, M., SAN PIETRO, P., AND SILVA, S. 1996. A Petri net and logic approach to the specification and verification of real-time systems. In Formal Methods for Real-Time Computing, C. Heitmeyer and D. Mandrioli, Eds. Trends in Software, vol. 5. John Wiley, New York, NY. Chapter 5.
40. MANNA, Z. AND SIPMA, H. 1998. Deductive verification of hybrid systems using STeP. In Hybrid Systems: Computation and Control, S. Sastry and T. A. Henzinger, Eds. Springer Lecture Notes in Computer Science, vol. 1386. Springer-Verlag, Berlin-Heidelburg, Germany.
41. MERLIN, P. M. AND FARBER, D. J. 1976. Recoverability of communication protocols: Implications of a theoretical study. IEEE Trans. Commun. COM-24, 9 (Sept.), 1036-1043.
42. MERRITT, M., MODUGNO, F., AND TUTTLE, M. R. 1991. Time-constrained automata (extended abstract). In Proceedings of the 2nd International Conference on Concurrency Theory (CONCUR '91, Amsterdam, The Netherlands, Aug. 26-29), J. C. M. Baeten and J. F. Groote, Eds. Springer Lecture Notes in Computer Science. Springer-Verlag, New York, NY, 408-423.
43. MORZENTI, A. AND SAN PIETRO, P. 1994. Object-oriented logical specification of time-critical systems. ACM Trans. Softw. Eng. Methodol. 3, 1 (Jan.), 56-98. An editing tool for the TRIO language is available through anonymous ftp at ftp-se.elet.polimi.it.
44. MOSER, L. E., RAMAKRISHNA, Y. S., KUTTY, G., MELLIAR-SMITH, P. M., AND DILLON, L. K. 1997. A graphical environment for the design of concurrent real-time systems. ACM Trans. Softw. Eng. Methodol. 6, 1 (Jan.), 31-79.
45. OWRE, S., RUSHBY, J., SHANKAR, N., AND VON HENKE, F. 1995. Formal verification for fault-tolerant architectures: Prolegomena to the design of PVS. IEEE Trans. Softw. Eng. 21, 2 (Feb.), 107-125.
46. PARNAS, D. L. 1992. Tabular representation of relations. Tech. Rep. 260. McMaster University, Hamilton, Canada.
47. PARNAS, D. L. AND MADEY, J. 1995. Functional documents for computer systems. Sci. Comput. Program. 25, 1 (Oct.), 41-61.
48. PAULSON, L. C. 1994. Isabelle: A Generic Theorem Prover. Lecture Notes in Computer Science, vol. 828. Springer-Verlag, New York, NY.
49. REED, G. M. AND ROSCOE, A. W. 1988. A timed model for communicating sequential processes. Theor. Comput. Sci. 58, 1-3 (June), 249-261.
50. RUSHBY, J. 1997. Subtypes for specifications. In Proceedings of the 6th European Software Engineering Conference (ESEC/FSE '97, Zurich, Switzerland, Sept.), M. Jazayeri and H. Schauer, Eds. Springer Lecture Notes in Computer Science. Springer-Verlag, New York, NY, 4-19. Held jointly with the 5th ACM SIGSOFT Symposium on the Foundations of Software Engineering.
51. RUSHBY, J., OWRE, S., AND SHANKAR, N. 1998. Subtypes for specifications: predicate subtyping in PVS. IEEE Trans. Softw. Eng. 24, 9 (Sept.), 709-720.
52. SHANKAR, N. 1993. Verification of real-time systems using PVS. In Proceedings of the 5th International Conference on Computer-Aided Verification (CAV '93, Elounda, Greece, June), C. Courcoubetis, Ed. Lecture Notes in Computer Science. Springer-Verlag, New York, NY, 280-291.
53. SHANKAR, N., OWRE, S., RUSHBY, J. M., AND STRINGER-CALVERT, D. W. J. 1988. PVS Prover Guide. SRI International, Menlo Park, CA.
54. SHAKKEBAEK, J. U. AND SHANKAR, N. 1994. Towards a duration calculus proof assistant in PVS. In Proceedings of the Conference on Formal Techniques in Real-Time and Fault-Tolerant Systems (Lubeck, Germany, Sept.), H. Langmaack, W. -P. de Roever, and J. Vytopil, Eds. Springer Lecture Notes in Computer Science. Springer-Verlag, New York, NY, 660-679.
55. VITT, J. AND HOOMAN, J. 1996. Assertional specification and verification using PVS of the steam boiler control system. In Formal Methods for Industrial Applications: Specifying and Programming the Steam Boiler Control, J.-R. Abrial, E. Boerger, and H. Langmaack, Eds. Springer Lecture Notes in Computer Science. Springer-Verlag, New York, NY, 453-472.
56. YANG, J., MOK, A. K., AND WANG, F. 1997. Symbolic model checking for event-driven real-time systems. ACM Trans. Program. Lang. Syst. 19, 2 (Mar.), 386-412.
57. ZAVE, P. AND JACKSON, M. 1997. Four dark corners of requirements engineering. ACM Trans. Softw. Eng. Methodol. 6, 1 (Jan.), 1-30.