Formal software analysis emerging trends in software model checking

FoSE 2007: Future of Software Engineering

Volumn , Issue , 2007, Pages 120-136

  Dwyer, Matthew B ^a   Hatcliff, John ^b   Robby, ^b   Pǎsǎreanu, Corina S ^c   Visser, Willem ^c  

^a UNIVERSITY OF NEBRASKA LINCOLN   (United States)

^b Sunflower Networking Group

^c NASA AMES RESEARCH CENTER   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; COMPUTER SIMULATION; COST EFFECTIVENESS; ERROR ANALYSIS; MODEL CHECKING;

MATHEMATICAL MODELING; SOFTWARE ANALYSES; SOFTWARE MODEL CHECKING;

SOFTWARE ENGINEERING;

EID: 34748867419     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/FOSE.2007.6     Document Type: Conference Paper

References (80)

1. J.-R. Abrial, E. Borger, and H. Langmaack, editors. Formal Methods for Industrial Applications, Specifying and Programming the Steam Boiler Control, volume 1165 of Lecture Notes in Computer Science. Springer, 1996.
2. R. Alur, P. Cerny, P. Madhusudan, and W. Nam. Synthesis of interface specifications for Java classes. In Proceedings of POPL'05, pages 98-109, 2005.
3. R. Alur, T. Henzinger, F. Mang, S. Qadeer, S. Rajamani, and S. Tasiran. MOCHA: Modularity in Model Checking. In Proceedings of CAV'98, pages 521-525, 1998.
4. R. Alur, P. Madhusudan, and W. Nam. Symbolic Compositional Verification by Learning Assumptions. In Proceedings of CAV'05, pages 548-562, 2005.
5. J. H. Andrews, L. C. Briand, and Y. Labiche. Is mutation an appropriate tool for testing experiments? In Proceedings of ICSE'05, pages 402-411, 2005.
6. T. Ball and S. K. Rajamani. The slam toolkit. In Proceedings of CAV'01, pages 260-264, 2001.
7. J. Berdine, C. Calcagno, and P. W. O'Hearn. Smallfoot: Modular automatic assertion checking with separation logic. In FMCO, pages 115-137, 2005.
8. A. Bertolino. Software testing research : Achievements, challenges, dreams. In [11].
9. D. Binkley. Source code analysis : A road map. In [11].
10. C. Boyapati, S. Khurshid, and D. Marinov. Korat: automated testing based on Java predicates. In Proceedings of ISSTA'02, pages 123-133. ACM Press, 2002.
11. L. Briand and A. Wolf, editors. Future of Software Engineering 2007. IEEE-CS Press, 2007.
12. http://research.microsoft.com/qadeer/cav-issta.htm.
13. S. Chaki, E. Clarke, A. Groce, S. Jha, and H. Veith. Modular verification of software components in C. ACM Trans. Computer Systems, 30(6):388-402, 2004.
14. Y. Cheon and G. T. Leavens. A runtime assertion checker for the Java modeling language. In Proceedings of the International Conference on Software Engineering Research and Practice, 2002.
15. A. Cimatti, E. Clarke, F. Giunchiglia, and M. Roveri. NuSMV : a new symbolic model checker. International Journal on Software Tools for Technology Transfer, 2(4):410-425, 2000.
16. D. G. Clarke, J. Potter, and J. Noble. Ownership types for flexible alias protection. Proceedings of OOPSLA'98, pages 48-64, 1998.
17. E. M. Clarke, O. Grumberg, S. Jha, Y. Lu, and H. Veith. Counterexample-Guided Abstraction Refinement. In Proceedings of CAV'00, pages 154-169, 2000.
18. E. M. Clarke, O. Grumberg, and D. Peled. Model Checking. MIT Press, 2000.
19. J. M. Cobleigh, D. Giannakopoulou, and C. S. Pasareanu. Learning Assumptions for Compositional Verification. In Proceedings of TACAS'03, pages 331-346, 2003.
20. B. Cole, D. Hakim, D. Hovemeyer, R. Lazarus, W. Pugh, and K. Stephens. Improving your software using static analysis to find bugs. In Companion to Proceedings of OOPSLA'06, pages 673-674, 2006.
21. P. Cousot and R. Cousot. Abstract Interpretation: A Unified Lattice Model for Static Analysis of Programs by Construction or Approximation of Fixpoints. In Proceedings of POPL'77, pages 238-252, 1977.
22. P. Cousot, R. Cousot, J. Feret, L. Mauborgne, A. Miné, D. Monniaux, and X. Rival. The astreé analyzer. In Proceeding of ESOP'05, pages 21-30, 2005.
23. X. Deng, J. Lee, and Robby. Bogor/kiasan: A k-bounded symbolic execution for checking strong heap properties of open systems. In Proceedings of ASE'06, pages 157-166, 2006.
24. H. Do, S. G. Elbaum, and G. Rothermel. Infrastructure support for controlled experimentation with software testing and regression testing techniques. In Proc. Int'l. Symp. Emp. Softw. Eng., pages 60-70, 2004.
25. M. B. Dwyer, J. Hatcliff, V R. Prasad, and Robby. Exploiting object escape and locking information in partial order reductions for concurrent object-oriented programs. Formal Methods in System Designs, 25(2-3): 199-240, SeptemberNovember 2004.
26. M. B. Dwyer, S. Person, and S. Elbaum. Controlling factors in evaluating path-sensitive error detection techniques. In Proceedings of SIGSOFT FSE'06, 2006.
27. S. Edelkamp, S. Leue, and A. Lluch-Lafuente. Partial-order reduction and trail improvement in directed model checking. International Journal on Software Tools for Technology Transfer, 6(4), 2004.
28. S. Edelkamp, A. Lluch-Lafuente, and S. Leue. Directed explicit model checking with HSF-SPIN. In Proceedings of SPIN'01, pages 57-79, 2001.
29. M. D. Ernst, A. Czeisler, W. G. Griswold, and D. Notkin. Quickly detecting relevant program invariants. In Proceedings of ICSE'00, 2000.
30. C. Flanagan, S. N. Freund, and S. Qadeer. Thread-Modular Verification for Shared-Memory Programs. In Proceedings of ESOP'02, pages 262-277, 2002.
31. C. Flanagan and P. Godefroid. Dynamic partial-order reduction for model checking software. In Proceedings of POPL'05, pages 110-121, 2005.
32. C. Flanagan, K. R. M. Leino, M. Lillibridge, G. Nelson, J. B. Saxe, and R. Stata. Extended static checking for Java. In Proceedings of PLDI'02, 2002.
33. C. Flanagan and S. Qadeer. A Type and Effect System for Atomicity. In Proceedings of PLDI'03, pages 338-349, 2003.
34. C. Flanagan and S. Qadeer. Thread-modular model checking. In Proceedings of SPIN'03, pages 213-224, 2003.
35. R. Floyd. Assigning meaning to programs. In Proceedings of the Symposium on Applied Mathematics, 1967.
36. P. G. Frankl and E. J. Weyuker. A formal analysis of the fault-detecting ability of testing methods. IEEE Trans. Software Eng., 19(3):202-213, 1993.
37. P. Godefroid. Compositional Dynamic Test Generation. In Proceedings of POPL'07, 2007.
38. P. Godefroid, N. Klarlund, and K. Sen. Dart: Directed automated random testing. In Proceedings of PLDI'05, pages 213-223, 2005.
39. P. Godefroid. Partial-Order Methods for the Verification of Concurrent Systems: An Approach to the State-Explosion Problem. Springer New York, Inc., 1996.
40. S. Graf and H. Saidi. Construction of abstract state graphs with PVS. In Proceedings of CAV'97, 1997.
41. A. Groce and W. Visser. Heuristics for model checking java programs. Int'l. Journal on Software Tools for Tech. Transfer, 6(4): 260-276, 2004.
42. B. S. Gulavani, T. A. Henzinger, Y. Kannan, A. V. Nori, and S. K. Rajamani. Synergy: A New Algorithm for Property Checking. In Proceedings of SIGSOFT FSE'06, 2006.
43. T. A. Henzinger, R. Jhala, R. Majumdar, and S. Qadeer. Thread-modular abstraction refinement, pages 262-274, July 2003.
44. T. A. Henzinger, R. Jhala, R. Majumdar, and G. Sutre. Lazy abstraction. In Proceedings of POPL'02, 2002.
45. C. A. R. Hoare. An axiomatic basis for computer programming. Commun. ACM, 12(10):576-580, 1969.
46. G. Holzmann and D. Bosnacki. Multi-Core Model Checking with SPIN. In Proceedings of HIPS-TOPMoDRS, Long Beach, CA, 2007. IEEE.
47. G. Holzmann and D. Peled. An imporovement in formal verification. In Proceedings on the Formal Description Techniques Conference, pages 197-211, 1994.
48. G. J. Holzmann. The model checker SPIN. IEEE Trans. on Software Engineering, 23(5):279-294, May 1997.
49. G. J. Holzmann and R. Joshi. Model-driven software verification. In Proceedings of SPIN'04, 2004.
50. M. Hutchins, H. Foster, T. Goradia, and T. J. Ostrand. Experiments of the effectiveness of dataflow- and controlflowbased test adequacy criteria. In Proceedings of ICSE'94, pages 191-200, 1994.
51. R. Iosif. Symmetry reductions for model checking of concurrent dynamic software. STTT, 6(4):302-319, 2004.
52. D. Jackson. Software Abstractions: Logic, Language, and Analysis. Cambridge, Mass., 2006.
53. C. B. Jones. Specification and Design of (Parallel) Programs. In Information Processing 83: Proceedings of the IFIP 9th World Congress, pages 321-332. IFIP: North Holland, 1983.
54. N. D. Jones and F. Nielson. Abstract interpretation: a semantics-based tool for program analysis, pages 527-636, 1995.
55. S. Khurshid, C. S. Pasareanu, and W. Visser. Generalized symbolic execution for model checking and testing. In Proceedings of TACAS'03, 2003.
56. J. C. King. Symbolic execution and program testing. Commun. ACM, 19(7):385-394, 1976.
57. B. Kitchenham, S. L. Pfleeger, L. Pickard, P. Jones, D. C. Hoaglin, K. E. Emam, and J. Rosenberg. Preliminary guidelines for empirical research in software engineering. IEEE Trans. Software Eng., 28(8):721-734, 2002.
58. G. T. Leavens, A. L. Baker, and C. Ruby. JML: a Java modeling language. In Formal Underpinnings of Java Workshop, Oct. 1998.
59. A. Loginov, T. W. Reps, and S. Sagiv. Abstraction refinement via inductive learning. In Proceedings of CAV'05, pages 519-533, 2005.
60. B. Meyer. Object-oriented Software Construction. PrenticeHall, 1988.
61. M. Musuvathi and D. R. Engler. Model Checking Large Network Protocol Implementations. In Proceedings of NSDI'04, 2004.
62. M. Musuvathi, D. Park, A. Chou, D. R. Engler, and D. L. Dill. CMC: A Pragmatic Approach to Model Checking Real Code. In Proceedings of OSDI'02, 2002.
63. A. Pnueli. In Transition from Global to Modular Temporal Reasoning about Programs. In Logic and Models of Concurrent Systems, volume 13, pages 123-144, 1984.
64. C. S. Pasareanu, R. Pelánek, and W. Visser. Concrete search with abstract matching and refinement. In Proceedings CAV'05, pages 52-66, 2005.
65. J. C. Reynolds. Separation logic: A logic for shared mutable data structures. In Proceedings of the Seventeenth Annual IEEE Symposium on Logic in Computer Science. IEEE Computer Society Press, 2002.
66. Robby, E. Rodriguez, M. Dwyer, and J. Hatcliff. Checking Strong Specifications Using an Extensible Software Model Checking Framework. In Proceedings of TACAS'04, pages 404-420, 2004.
67. E. Rodriguez, M. Dwyer, C. Flanagan, J. Hatcliff, G. T. Leavens, and Robby. Extending sequential specification techniques for modular specification and verification of multi-threaded programs. In Proceedings of ECOOP'05, pages 551-576, 2005.
68. S. Sagiv, T. W. Reps, and R. Wilhelm. Parametric shape analysis via 3-valued logic. TOPLAS, 2002.
69. K. Sen, D. Marinov, and G. Agha. CUTE: A Concolic Unit Testing Engine for C. In Proceedings of ESEC/SIGSOFT FSE'05, 2005.
70. N. Sharygina, S. Chaki, E. Clarke, and N. Sinha. Dynamic Component Substitutability Analysis. In Proceedings of FM'05), volume 3582 of LNCS, pages 512-528, 2005.
71. D. Sjæberg, T. Dybå, and M. Jærgensen. The future of empirical methods in software engineering research. In [11].
72. M. Taghdiri, R. Seater, and D. Jackson. Lightweight extraction of syntactic specifications. In Proceedings of SIGSOFT FSE"06, 2006.
73. J. Tan, G. S. Avrunin, L. A. Clarke, S. Zilberstein, and S. Leue. Heuristic-guided counterexample search in flavers. In Proceedings of SlGSOFT FSE'04, pages 201-210, 2004.
74. J. van den Berg and B. Jacobs. The LOOP compiler for Java and JML. In Proceedings of TACAS'01, 2001.
75. W. Visser, C. Pasareanu, and R. Pelanek. Test input generation forjava containers using state matching. In Proceedings of1SSTA'06, 2006.
76. T. Xie, D. Marinov, W. Schulte, and D. Notkin. Symstra: A framework for generating object-oriented unit tests using symbolic execution. In Proceedings of TACAS'05, 2005.
77. E. Yahav. Verifying safety properties of concurrent Java programs using 3-valued logic. Proceedings of POPL'01, pages 27-40, 2001.
78. G. Yorsh, T. Ball, and M. Sagiv. Testing, abstraction, theorem proving: Better together. In Proceedings of ISSTA'06, 2006.
79. http://pmd.sourceforge.net.
80. http://www.satcompetition.org.