Eliminating synchronization faults in air traffic control software via design for verification with concurrency controllers

Automated Software Engineering

Volumn 14, Issue 2, 2007, Pages 129-178

  Betin Can, Aysu ^a   Bultan, Tevfik ^b   Lindvall, Mikael ^c   Lux, Benjamin ^c   Topp, Stefan ^c  

^a MIDDLE EAST TECHNICAL UNIVERSITY   (Turkey)

^b University of California   (United States)

^c Fraunhofer USA Inc   (United States)

Author keywords

Concurrent programming; Design patterns; Interfaces; Model checking; Synchronization

Indexed keywords

CONCURRENCY CONTROL; CONCURRENT ENGINEERING; INTERFACES (COMPUTER); MODEL CHECKING; SYNCHRONIZATION; TRAFFIC CONTROL;

ACTION LANGUAGE VERIFIER (ALV); DESIGN PATTERNS; TACTICAL SEPARATION ASSISTED FLIGHT ENVIRONMENT (TSAFE);

COMPUTER SOFTWARE;

EID: 34547338974     PISSN: 09288910     EISSN: 15737535     Source Type: Journal    
DOI: 10.1007/s10515-007-0008-2     Document Type: Article

References (49)

1. Ammann, P. E., Black, P. E., & Majurski, W. (1998). Using model checking to generate tests from specifications. In ICFEM'98: Proceedings of the second IEEE international conference on formal engineering methods.
2. Ball, T., & Rajamani, S. K. (2001). Automatically validating temporal safety properties of interfaces. In Proceedings of the SPIN workshop (pp. 103-122).
3. Betin-Can, A. (2005). Design for verification for concurrent and distributed programs. Ph.D. thesis, University of California, Santa Barbara.
4. Betin-Can, A., & Bultan, T. (2003). Interface-based specification and verification of concurrency controllers. In Electronic notes in theoretical computer science (ENTCS): Vol. 89. Proceedings of the workshop on software model checking (SoftMC).
5. Betin-Can, A., & Bultan, T. (2004). Verifiable concurrent programming using concurrency controllers. In Proceedings of the 19th IEEE international conference on automated software engineering (ASE) (pp. 248-257).
6. Betin-Can, A., & Bultan, T. (2006). Highly dependable concurrent programming using design for verification. Formal Aspects of Computing. Published online December 0.1, 2006. DOI 10.1007/S00165-006-0017-0
7. Betin-Can, A., Bultan, T., & Fu, X. (2005a). Design for verification for asynchronously communicating web services. In Proceedings of the 14th international world wide web conference (WWW) (pp. 750-759).
8. Betin-Can, A., Bultan, T., Lindvall, M., Topp, S., & Lux, B. (2005b). Application of design for verification with concurrency controllers to air traffic control software. In Proceedings of the 20th IEEE international conference on automated software engineering (ASE).
9. Bogda, J. G. (2001). Program analysis alleviates java synchronization. Ph.D. thesis, University of California, Santa Barbara.
10. Budd, A. T. (1981). Mutation analysis: ideas, examples, problems and prospects. In Computer Program Testing (pp. 129-148). New York: North-Holland.
11. Bultan, T. (2000). Action language: a specification language for model checking reactive systems. In Proceedings 22nd international conference on software engineering.
12. Bultan, T., & Betin-Can, A. (2005). Scalable software model checking using design for verification. In Proceedings of the IFIP working conference, on verified software: theories, tools, experiments.
13. Bultan, T., & Yavuz-Kahveci, T. (2001). Action language verifier. In Proceedings 16th IEEE international. conference on automated software, engineering (ASE) (pp. 382-386).
14. Cargill, T. (1996). Specific notification for Java thread synchronization. In Proceedings 3rd conference on pattern languages of programs (PLoP).
15. Chaki, S., Clarke, E., Groce, A., Jha, S., & Veith, H. (2003). Modular verification of software components in C. In Proceedings of international conference on software engineering (ICSE) (pp. 385-395).
16. Chakrabarti, A., de Alfaro, L., Henzinger, T., Jurdziński, M., & Mang, F. (2002). Interface compatibility checking for software modules. In Proceedings of the 14th international conference on computer aided verification (CAV 2002) (pp. 428-441).
17. DeLine, R., & Fahndrich, M. (2004). Typestates for objects. In Proceedings of the 18th european conference on object-oriented programming (ECOOP) (pp. 465-490).
18. Delzanno, G. (2000). Automatic verification of parameterized cache coherence protocols. In LNCS: Vol. 1855. Proceedings 12th international conference on computer aided verification (pp. 53-68).
19. DeMillo, R. A., Lipton, R. J., & Sayward, R G. (1978). Hints on test data selection: help for the practicing programmer. IEEE Computer, 11(4), 34-4.1.
20. Dennis, G. (2003). TSAFE: Building a trusted computing base, for air traffic control software, Master's thesis, Massachusetts Institute of Technology.
21. Do, H., & Rothermel, G. (2006). On the use of mutation faults in empirical assessments of test case prioritization techniques. IEEE Transactions on Software Engineering, 32(9), 733-752.
22. DOT (1998). Advance automation system. Dept. of Transportation, Office of Inspector General, Audit Report, AV-1998-113.
23. Dwyer, M. B., Hatcliff, J., Joehanes, R., Laubach, S., Pasareanu, C. S., Robby, Visser, W., & Zheng, H. (200.1). Tool-supported program abstraction for finite-state verification. In Proceedings of international conference on software engineering (ICSE) (pp. 177-187).
24. Dwyer, M. B., Robby, Tkachuk, O., & Visser, W. (2004). Analyzing interaction orderings with model checking. In Proceedings of the 19th IEEE international conference on automated software engineering (ASE) (pp. 154-163).
25. Erzberger, H. (2001). The automated airspace concept. In Proceedings of USA/Eumpe air traffic management R&D seminar.
26. Erzberger, H. (2004). Transforming the NAS: The next generation air traffic control system. In Proceedings of the 24th international congress of the aeromautical sciences.
27. Flanagan, C., & Qadeer, S. (2003). Thread-modular model checking. In Proceedings of the SPIN workshop (pp. 213-224).
28. Godefroid, P., Colby, C., & Jagadeesan, L. (1998). Automatically closing open reactive programs. In Proceedings of the 1998 ACM SIGPLAN conference, on programming language, design and implementation (PLDI) (pp. 345-357).
29. IEEE (1993). IEEE standard classification for software anomalies. IEEE Standard 1044-1993.
30. Indus (2005). Indus, http://in.dus.projects.cis.ksu.edu.
31. Kim, S., Clark, J., & McDermid, J. (2000). Class mutation.: Mutation testing for object-oriented programs. In Proceedings of the FMES.
32. Lea, D. (1999). Concurrent programming in Java. Reading: Addison-Wesley.
33. Lindvall, M., Rus, I., Shull, F., Zelkowitz, M. V., Donzelli, P., Memon, A., Basili, V. R., Costa, P., Tvedt, R. T., Hochstein, L., Asgari, S., Ackermann, C., & Pech, D. (2005). An evolutionary testbed for software technology evaluation. NASA Journal of Innovations in Systems and Software Engineering, 1(1), 3-11.
34. Long, B., & Strooper, P. (2003). A classification, of concurrency failures in Java components. In Proceedings of the international parallel and distributed processing symposium (IPDPS'03).
35. Mehlitz, P. C., & Penix, J. (2003). Design for verification using design patterns to build reliable systems. In Workshop on component-based software engineering.
36. Memon, A. M., & Xie, Q. (2005). Studying the fault-detection effectiveness of GUI test cases for rapidly evolving software. IEEE Transactions on Software Engineering, 31(10), 884-896.
37. Neumann, P. G. (2004). Risks to the public in computers and related systems. ACM Software Engineering Notes, 29(4), 7-14.
38. Ottenstein, J., & Ottenstein, L. M. (1984). The program dependence graph in a software development environment. ACM Software Engineering Notes, 9(3), 177-184.
39. Paulson, L. C. (1994). Lecture notes in computer science: Vol. 828. Isabelle: A generic theorem prover. Berlin: Springer.
40. Sharygina, N., Browne, J. C., & Kurshan, R. P. (2001). A formal object-oriented analysis for software reliability: design, for verification. In Proceedings of fundamental approaches to software engineering (FASE) (pp. 318-332).
41. SOOT (2005). Soot: a Java optimization framework, http://www.sable.mcg.ill.ca/soot/.
42. Stoller, S. D., & Liu, Y. A. (2001). Transformations for model checking distributed Java programs. In Proceedings of the SPIN workshop (pp. 192-199).
43. Tkachuk, O., & Dwyer, M. B. (2003). Adapting side-effects analysis for modular program model checking. In Proceedings of the. 18th IEEE international conference on automated software engineering (ASE) (pp. 188-197).
44. Tkachuk, O., Dwyer, M. B., & Pasareanu, C. (2003). Automated environment generation for software model checking. In Proceedings of the 4th joint meeting of the european software engineering conference and ACM SIGSOFT symposium on the foundations of software engineering (ESEC/FSE 2003) (pp. 116-129).
45. Visser, W., Havelund, K., Brat, G., & Park, S. (2003). Model checking programs. Automated Software Engineering Journal, 10(2), 203-232.
46. Visser, W., Pasareanu, C. S., & Khurshid, S. (2004). Test input generation with Java PathFinder. In Proceedings of international symposium on software testing.
47. Xie, T., Marinov, D., Schulte, W., & Notkin, D. (2005). Symstra: A framework for generating object-oriented unit tests using symbolic execution. In Proceedings of the 11th international conference on tools and algorithms for the construction and analysis of systems.
48. Yavuz-Kahveci, T., & Bultan, T. (2002). Specification, verification, and synthesis of concurrency control components. In Proceedings of the 2002 ACM/SIGSOFT international symposium on software testing and analysis (ISSTA 2002) (pp. 169-179).
49. Yavuz-Kahveci, T., Bartzis, C., & Bultan, T. (2005). Action language verifier, extended. In Proceedings of the 17th international conference on computer aided verification (CAV 2005) (pp. 413-417).