A program logic for resources

Theoretical Computer Science

Volumn 389, Issue 3, 2007, Pages 411-445

  Aspinall, David ^a   Beringer, Lennart ^a   Hofmann, Martin ^b   Loidl, Hans Wolfgang ^b   Momigliano, Alberto ^a  

^a UNIVERSITY OF EDINBURGH   (United Kingdom)

^b UNIVERSITY OF MUNICH   (Germany)

Author keywords

Cost modelling; Java virtual machine language; Lightweight verification; Object oriented languages; Program logic; Proof carrying code; Quantitative type systems

Indexed keywords

COST FUNCTIONS; HIGH LEVEL LANGUAGES; JAVA PROGRAMMING LANGUAGE; OBJECT ORIENTED PROGRAMMING; RESOURCE ALLOCATION; VIRTUAL REALITY;

JAVA VIRTUAL MACHINE LANGUAGE; LIGHTWEIGHT VERIFICATION; PROGRAM LOGIC; PROOF-CARRYING-CODES; QUANTITATIVE TYPE-SYSTEMS;

FORMAL LOGIC;

EID: 36048982115     PISSN: 03043975     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.tcs.2007.09.003     Document Type: Article

References (82)

1. Necula G. Proof-carrying Code. POPL'97 - Symposium on Principles of Programming Languages, Paris, France, 15-17 January 1997 (1997), ACM Press 106-116
2. D. Sannella, M. Hofmann, Mobile resource guarantees, EU OpenFET Project. http://www.groups.inf.ed.ac.uk/mrg/, 2002
3. Aspinall D., Gilmore S., Hofmann M., Sannella D., and Stark I. Mobile resource guarantees for smart devices. Construction and Analysis of Safe, Secure, and Interoperable Smart Devices: Proceedings of the International Workshop CASSIS 2004. LNCS vol. 3362 (2005), Springer 1-26
4. MacKenzie K., and Wolverson N. Camelot and Grail: Resource-aware functional programming on the JVM. Trends in Functional Programing vol. 4 (2004), Intellect 29-46
5. Beringer L., MacKenzie K., and Stark I. Grail: A functional form for imperative mobile code. Foundations of Global Computing: Proceedings of the 2nd EATCS Workshop. Electronic Notes in Theoretical Computer Science vol. 85.1 (2003), Elsevier 1-21
6. Flanagan C., Sabry A., Duba B.F., and Felleisen M. The essence of compiling with continuations. Proceedings ACM SIGPLAN 1993 Conference on Programming Language Design and Implementation, PLDI'93, Albuquerque, NM, USA, 23-25 June 1993 vol. 28(6) (1993), ACM Press, New York 237-247
7. C. League, V. Trifonov, Z. Shao, Functional Java bytecode, in: Proc. 5th World Conf. on Systemics, Cybernetics, and Informatics, 2001, pp. 1-6. Workshop on Intermediate Representation Engineering for the Java Virtual Machine
8. Appel A.W. Compiling with Continuations (1992), Cambridge University Press
9. Leroy X. Bytecode verification for Java smart cards. Software Practice and Experience 32 4 (2002) 319-340
10. K. MacKenzie, N. Wolverson, Camelot and Grail: Compiling a resource-aware functional language for the Java virtual machine, in: TFP'03, Symp on Trends in Functional Languages, Edinburgh, 11-12 September 2003
11. Hofmann M. A type system for bounded space and functional in-place update. Nordic Journal of Computing 7 4 (2000) 258-289
12. Pym D.-J., O'Hearn P.-W., and Yang H. Possible worlds and resources: the semantics of BI. Theor. Comput. Sci. 315 1 (2004) 257-305
13. Aspinall D., Beringer L., and Momigliano A. Optimisation validation. Electron. Notes Theor. Comput. Sci. 176 3 (2007) 37-59
14. A. Chander, J. Mitchell, I. Shin, Mobile code security by Java bytecode instrumentation, in: DARPA Information Survivability Conference & Exposition, DISCEX II, 2001, pp. 1-15
15. A. Chander, D. Espinosa, N. Islam, P. Lee, G.C. Necula, Enforcing resource bounds via static verification of dynamic checks, in: Sagiv [81], pp. 311-325
16. Czajkowski G., and von Eicken T. JRes: A resource accounting interface for Java. ACM SIGPLAN Notices 33 10 (1998) 21-35
17. Aspinall D., Beringer L., Hofmann M., Loidl H.-W., and Momigliano A. A program logic for resource verification. Proceedings of 17th International Conference on Theorem Proving in Higher Order Logics. TPHOLs2004. LNCS vol. 3223 (2004), Springer, Heidelberg 34-49
18. Schneider F.B. Enforceable security policies. ACM Transactions on Information and System Security 3 (2000) 30-50
19. Hoare C.A.R. An axiomatic basis for computer programming. Communications of the ACM 12 10 (1969) 576-580
20. Jones C. Systematic Software Development Using VDM (1990), Prentice Hall
21. T. Kleymann, Hoare logic and VDM: Machine-checked soundness and completeness proofs, Ph.D. Thesis, LFCS, University of Edinburgh, 1999
22. Poetzsch-Heffter A., and Müller P. A programming logic for sequential Java. In: Swierstra S.D. (Ed). ESOP'99 - European Symposium on Programming. LNCS vol. 1576 (1999), Springer 162-176
23. Nipkow T. Hoare logics in Isabelle/HOL. In: Schwichtenberg H., and Steinbrüggen R. (Eds). Proof and System-Reliability (2002), Kluwer 341-367
24. C. Pierik, F.S. de Boer, Modularity and the rule of adaptation, in: Rattray et al. [82], pp. 394-408
25. Nipkow T. Hoare logics for recursive procedures and unbounded nondeterminism. In: Bradfield J.C. (Ed). Computer Science Logic, 16th International Workshop, CSL 2002, 11th Annual Conference of the EACSL, Proceedings. LNCS vol. 2471 (2002), Springer 103-119
26. M. Hofmann, Semantik und Verifikation, in: Lecture Notes, TU Darmstadt, 1998
27. Cook S.A. Soundness and completeness of an axiom system for program verification. SIAM Journal on Computing 7 1 (1978) 70-90 See corrigendum in SIAM Journal on Computing 10, 612
28. G.A. Gorelick, A complete axiomatic system for proving assertions about recursive and non-recursive programs, Tech. Rep. 75, University of Toronto, 1975
29. P. Homeier, Trustworthy tools for trustworthy programs: A mechanically verified verification condition generator for the total correctness of procedures, Ph.D. Thesis, University of California, 1995
30. Sokołowski S. Total correctness for procedures. In: Gruska J. (Ed). Mathematical Foundations of Computer Science. LNCS vol. 53 (1977), Springer 475-483
31. Hofmann M., Loidl H.-W., and Beringer L. Certification of quantitative properties of programs. Lecture Notes of the Summer School on Logical Aspects of Secure Computer Systems (2-14 August 2005), IOS Press, Marktoberdorf, Germany
32. Appel A.W. Foundational proof-carrying code. LICS'01 - 16th Annual IEEE Symposium on Logic in Computer Science (2001), IEEE Computer Society 247-258
33. Beringer L., Hofmann M., Momigliano A., and Shkaravska O. Automatic certification of heap consumption. In: Franz Baader A.V. (Ed). Logic for Programming, Artificial Intelligence, and Reasoning: 11th International Conference, LPAR 2004, Montevideo, Uruguay, 14-18 March 2005. Proceedings. LNCS vol. 3452 (2005), Springer 347-362
34. Hofmann M., and Jost S. Static prediction of heap space usage for first-order functional programs. POPL'03 - Symposium on Principles of Programming Languages (2003), ACM Press, New Orleans, LA, USA 185-197
35. Hartel P.H., and Moreau L. Formalising the safety of Java, the Java virtual machine and Java card. ACM Computing Surveys 33 4 (2001) 517-558
36. von Oheimb D. Hoare logic for Java in Isabelle/HOL. Concurrency and Computation: Practice and Experience 13 13 (2001) 1173-1214
37. F. Tang, M. Hofmann, Generating verification conditions for Abadi and Leino's logic of objects, in: FOOL9 - Ninth International Workshop on Foundations of Object-Oriented Languages, Portland, OR, 2002, pp. 1-11
38. de Boer F. A WP-calculus for OO. Foundations of Software Science and Computation Structures. LNCS vol. 1578 (1999), Springer 135-149
39. Pierik C., and de Boer F.S. A syntax-directed Hoare logic for object-oriented programming concepts. In: Najm E., Nestmann U., and Stevens P. (Eds). FMOODS. LNCS vol. 2884 (2003), Springer 64-78
40. d. Boer F., and Pierik C. Computer-aided specification and verification of annotated object-oriented programs. In: Jacobs B., and Rensink A. (Eds). Proceedings of the IFIP TC6/WG6.1 Fifth International Conference on Formal Methods for Open Object-Based Distributed Systems. FMOODS 2002. IFIP Conference Proceedings vol. 209 (2002), Kluwer 163-177
41. Ábrahám E., de Boer F.S., de Roever W.P., and Steffen M. An assertion-based proof system for multithreaded Java. Theoretical Computer Science 331 2-3 (2005) 251-290
42. Abadi M., and Leino R. A logic of object-oriented programs. TAPSOFT '97: Theory and Practice of Software Development. LNCS vol. 1214 (1997), Springer 682-696
43. Leino R. Recursive object types in a logic of object-oriented programs. Nordic Journal of Computing 5 4 (1998) 330-360
44. J. Meyer, P. Müller, A. Poetzsch-Heffter, Programming and interface specification language of JIVE - specification and design rationale, available from citeseer.ist.psu.edu/86897.html, 2000
45. van den Berg J., and Jacobs B. The LOOP compiler for Java and JML. Tools and Algorithms for the Construction and Analysis of Systems. TACAS 2001. LNCS (2001), Springer 299-315
46. Huisman M., and Jacobs B. Java program verfication via a Hoare logic with abrupt termination. FASE'00 - Fundamental Approaches to Software Engineering. LNCS vol. 1783 (2000) 284-303
47. Jacobs B., and Poll E. A logic for the Java modeling language JML. FASE'01: Proceedings of the 4th International Conference on Fundamental Approaches to Software Engineering (2001), Springer, London, UK 284-299
48. Marché C., Paulin-Mohring C., and Urbain X. The Krakatoa tool for certification of Java/JavaCard programs annotated in JML. Journal of Logic and Algebraic Programming 58 1-2 (2004) 89-106
49. Filliâtre J.-C., and Marché C. The Why/Krakatoa/Caduceus platform for deductive program verification. In: Damm W., and Hermanns H. (Eds). CAV. Lecture Notes in Computer Science vol. 4590 (2007), Springer 173-177
50. Burdy L., Requet A., and Lanet J.-L. Java applet correctness: A developer-oriented approach. In: Araki K., Gnesi S., and Mandrioli D. (Eds). FME 2003: Formal Methods: International Symposium of Formal Methods Europe. LNCS vol. 2805 (2003), Springer 422-439
51. Burdy L., Huisman M., and Pavlova M. Preliminary design of BML: A behavioral interface specification language for Java bytecode. In: Dwyer M.B., and Lopes A. (Eds). FASE. Lecture Notes in Computer Science vol. 4422 (2007), Springer 215-229
52. Barthe G., Pavlova M., and Schneider G. Precise analysis of memory consumption using program logics. SEFM (2005), IEEE Computer Society 86-95
53. Ahrendt W., Baar T., Beckert B., Bubel R., Giese M., Hähnle R., Menzel W., Mostowski W., Roth A., Schlager S., and Schmitt P.H. The KeY tool. Software and Systems Modeling 4 1 (2005) 32-54
54. Beckert B. A dynamic logic for the formal verification of Java Card programs. JavaCard '00: Revised Papers from the First International Workshop on Java on Smart Cards: Programming and Security (2001), Springer, London, UK 6-24
55. Mostowski W. Formalisation and verification of Java Card security properties in dynamic logic. In: Cerioli M. (Ed). Proceedings, Fundamental Approaches to Software Engineering (FASE) Conference 2005, Edinburgh, Scotland. LNCS vol. 3442 (2005), Springer 357-371
56. Hähnle R., and Mostowski W. Verification of safety properties in the presence of transactions. In: Barthe G., Burdy L., Huisman M., Lanet J.-L., and Muntean T. (Eds). Proceedings, Construction and Analysis of Safe, Secure and Interoperable Smart Devices, CASSIS'04, Workshop. LNCS vol. 3362 (2005), Springer 151-171
57. Balser M., Reif W., Schellhorn G., Stenzel K., and Thums A. Formal system development with KIV. FASE '00: Proceedings of the Third Internationsl Conference on Fundamental Approaches to Software Engineering (2000), Springer-Verlag, London, UK 363-366
58. K. Stenzel, A formally verified calculus for full Java Card, in: Rattray et al. [82], pp. 491-505
59. Cok D.R., and Kiniry J.R. Esc/Java2: Uniting ESC/Java and JML. Progress and issues in building and using ESC/Java2, including a case study involving the use of the tool to verify portions of an Internet voting tally system. In: Barthe G., Burdy L., Huisman M., et al. (Eds). Construction and Analysis of Safe, Secure, and interoperable Smart Devices: Proceedings of the International Workshop. CASSIS 2004. LNCS vol. 3362 (2005), Springer 108-129
60. Reynolds J.C. Separation logic: A logic for shared mutable data structures. LICS '02: Proceedings of the 17th Annual IEEE Symposium on Logic in Computer Science (2002), IEEE Computer Society, Washington, DC, USA 55-74
61. Berdine J., Calcagno C., and O'Hearn P.W. Symbolic execution with separation logic. In: Yi K. (Ed). APLAS 2005. LNCS vol. 3780 (2005) 52-68
62. Luckham D.C., and Suzuki N. Verification of array, record, and pointer operations in Pascal. ACM Transactions on Programming Languages and Systems 1 2 (1979) 226-244
63. K.R.M. Leino, Toward reliable modular programs, Ph.D. Thesis, California Institute of Technology, Available as Technical Report Caltech-CS-TR-95-03, 1995
64. Bornat R. Proving pointer programs in Hoare logic. MPC '00: Proceedings of the 5th International Conference on Mathematics of Program Construction (2000), Springer, London, UK 102-126
65. Mehta F., and Nipkow T. Proving pointer programs in higher-order logic. In: Baader F. (Ed). Automated Deduction - CADE-19. LNCS vol. 2741 (2003), Springer 121-135
66. M.J.C. Gordon, Mechanizing programming logics in higher-order logic, in: G.M. Birtwistle, P.A. Subrahmanyam (Eds.), Current Trends in Hardware Verification and Automatic Theorem Proving (Proceedings of the Workshop on Hardware Verification), Springer, Banff, Canada, 1988, pp. 387-439
67. Weber T. Towards mechanized program verification with separation logic. In: Marcinkowski J., and Tarlecki A. (Eds). Computer Science Logic - 18th International Workshop, CSL 2004, 13th Annual Conference of the EACSL, Karpacz, Poland, September 2004, Proceedings. LNCS vol. 3210 (2004), Springer 250-264
68. Quigley C.L. A programming logic for Java bytecode programs. In: Basin D.A., and Wolff B. (Eds). TPHOLs. LNCS vol. 2758 (2003), Springer 41-54
69. M. Wildmoser, T. Nipkow, Asserting bytecode safety, in: Sagiv [81], pp. 326-341
70. Bannwart F., and Müller P. A program logic for bytecode. Electron. Notes Theor. Comput. Sci. 141 1 (2005) 255-273
71. Benton N. A typed logic for stacks and jumps. Microsoft Research (2004)
72. Wildmoser M., and Nipkow T. Certifying machine code safety: Shallow versus deep embedding. In: Slind K., Bunker A., and Gopalakrishnan G. (Eds). Theorem Proving in Higher Order Logics. TPHOLs 2004. LNCS vol. 3223 (2004), Springer 305-320
73. Wildmoser M., Chaieb A., and Nipkow T. Bytecode analysis for proof carrying code. Electron. Notes Theor. Comput. Sci. 141 1 (2005) 19-34
74. Moore J.S. Inductive assertions and operational semantics. In: Geist D., and Tronci E. (Eds). Correct Hardware Design and Verification Methods, 12th IFIP WG 10.5 Advanced Research Working Conference, CHARME 2003, L'Aquila, Italy, 21-24 October 2003, Proceedings. LNCS vol. 2860 (2003), Springer 289-303
75. Moore J.S. Proving theorems about Java and the JVM with ACL2. NATO Science Series Sub Series III Computer and Systems Sciences 191 (2003) 227-290
76. M. Hofmann, H.-W. Loidl, From partial correctness to total correctness, MRG Deliverable D6g, Institut für Informatik, Ludwig-Maximilians Universität, München, March 2005
77. Skalka C., and Smith S.F. History effects and verification. In: Chin W.-N. (Ed). APLAS. LNCS vol. 3302 (2004), Springer 107-128
78. Beckert B., and Mostowski W. A program logic for handling Java Card's transaction mechanism. In: Pezzè M. (Ed). Proceedings, Fundamental Approaches to Software Engineering, FASE, Conference 2003, Warsaw, Poland. LNCS vol. 2621 (2003), Springer 246-260
79. K.R.M. Leino, R. Stata, Checking object invariants, Tech. Rep. #1997-007, Digital Systems Research Center, Palo Alto, CA, Palo Alto, USA, 1997
80. Aspinall D., and MacKenzie K. Mobile resource policies. In: Barthe M.H.G., Gregoire B., and Lanet J.-L. (Eds). Construction and Analysis of Safe, Secure, and Interoperable Smart Devices: Proceedings of the Second International Workshop, CASSIS 2005. LNCS vol. 3956 (2006), Springer 16-36
81. In: Sagiv S. (Ed). Programming Languages and Systems, 14th European Symposium on Programming, ESOP 2005, Held as Part of the Joint European Conferences on Theory and Practice of Software. ETAPS 2005, Edinburgh, UK, 4-8 April, 2005, Proceedings. LNCS vol. 3444 (2005), Springer
82. In: Rattray C., Maharaj S., and Shankland C. (Eds). Algebraic Methodology and Software Technology, 10th International Conference. AMAST 2004, Proceedings. LNCS vol. 3116 (2004), Springer