Formal Methods and the Certification of Critical Systems

See this document in CiteSeerX!

Formal Methods and the Certification of Critical Systems (1993) (Make Corrections) (51 citations)
John Rushby

View or download:
sri.com/users/rushby/pap...csl937.pdf
Cached: PS.gz PS PDF Image Update Help

From: sri.com/users/rushby/papers/ (more)
(Enter author homepages)

Rate this article:

(best)
Comment on this article

(Enter summary)
Abstract: This report was prepared to supplement a forthcoming chapter on formal methods in the FAA Digital Systems Validation Handbook . Its purpose is to outline the technical basis for formal methods in computer science, to explain the use of formal methods in the specification and verification of software and hardware requirements, designs, and implementations, to identify the benefits, weaknesses, and di#culties in applying these methods to digital systems used in critical applications, and to... (Update)

Context of citations to this paper: More

.... in formal methods have analyzed this situation and provided useful insights into the reasons for this low level of acceptance [1, 4, 7, 10, 16, 17]. Although there are several reasons for this low level of acceptance, in this paper we address two important and related reasons...

.... all assignment expressions within it are always either wrapped in a RVR construct, are values, Rushby calls these theorems formal challenges [Rus93]. 4.1. PRELIMINARIES 69 are undefined, or are binary operators. This property is preserved by expression evaluation. 24 lines)...

Cited by: More
Partitioning in Avionics Architectures: Requirements, Mechanisms, .. - Rushby (2000) (Correct)
The formal method known as B and a sketch for its implementation - Kaijanaho (2002) (Correct)
C formalised in HOL - Norrish (1998) (Correct)

Active bibliography (related documents): More All
3.1: Formal Methods and their Role in the Certification of Critical.. - Rushby (1995) (Correct)
2.1: Formal Methods and the Certification of Critical Systems - Rushby (1993) (Correct)
2.1: Modular Certification - Rushby (2002) (Correct)

Similar documents based on text: More All
0.4: Pertitioning in Avionics Architectures: Requirements, Mechanisms, .. - Rushby (1999) (Correct)
0.4: References - Weber Formal Specification (Correct)
0.3: Models and Mechanized Methods that Integrate Human Factors into.. - Crow, al. (2000) (Correct)

Related documents from co-citation: More All
9: Formal verification for fault-tolerant architectures: Prolegomena to the design .. - Owre, Rushby et al. - 1995
8: An international survey of industrial applications of formal methods; volume 1: .. - Craigen, Gerhart et al. - 1993
7: Systematic Software Development using VDM - Jones - 1986

BibTeX entry: (Update)

John Rushby. Formal Methods and the Certification of Critical Systems. Technical Report SRI-CSL-937, Computer Science Laboratory, SRI International, Menlo Park, CA, December 1993. Also issued under the title Formal Methods and Digital Systems Validation for Airborne Systems as NASA Contractor Report 4551, December 1993. http://citeseer.ist.psu.edu/article/rushby93formal.html More

@techreport{ rushby93formal,
    author = "John Rushby",
    title = "Formal Methods and the Certification of Critical Systems",
    number = "CSL-93-7",
    month = "December",
    address = "Menlo Park CA 94025 USA",
    year = "1993",
    url = "citeseer.ist.psu.edu/article/rushby93formal.html" }

Citations (may not include all citations):
1726 Graph-based algorithms for Boolean function manipulation - Bryant - 1986  ACM   DBLP
1286 Object-Oriented Modeling and Design (context) - Rumbaugh, Blaha et al. - 1991  ACM
1180 The Temporal Logic of Reactive and Concurrent Systems (context) - Manna, Pnueli - 1992
1097 Automatic verification of finite-state concurrent systems us.. (context) - Clarke, Emerson et al. - 1986  ACM   DBLP
779 Symbolic model checking: 10 states and beyond - Burch, Clarke et al. - 1992
716 Parallel Program Design: A Foundation (context) - Chandy, Misra - 1988  ACM
689 Systematic Software Development Using VDM - Jones - 1990
652 A Discipline of Programming (context) - Dijkstra - 1976
650 An axiomatic basis of computer programming (context) - Hoare - 1969
592 Introduction to HOL: A Theorem Proving Environment for Highe.. (context) - Gordon, Melham - 1993
505 Implementing Mathematics with the Nuprl Proof Development Sy.. - Constable, Allen et al. - 1986  ACM
470 Design and Validation of Computer Protocols (context) - Holzmann - 1991  ACM
392 A Computational Logic (context) - Boyer, Moore - 1979
384 Simple word problems in universal algebras (context) - Knuth, Bendix - 1970
334 A Computational Logic Handbook (context) - Boyer, Moore - 1988  ACM
322 A spiral model of software development and enhancement (context) - Boehm - 1988  ACM   DBLP
322 volume 92 of Lecture Notes in Computer Science (context) - Milner, of et al. - 1980
295 PVS: A prototype verification system (context) - Owre, Rushby et al. - 1992
293 System structure for software fault tolerance (context) - Randell - 1975  ACM   DBLP
272 Argonne National Laboratory (context) - McCune, users et al. - 1990
268 Larch: Languages and Tools for Formal Specification (context) - Guttag, with et al. - 1993
265 Proof of correctness of data representations (context) - Hoare - 1972  ACM   DBLP
265 Secure computer system: Unified exposition and Multics inter.. (context) - Bell, Padula - 1976
256 Reaching agreement in the presence of faults (context) - Pease, Shostak et al. - 1980  ACM   DBLP
247 Confluent reductions: Abstract properties and applications t.. (context) - Huet - 1980  ACM   DBLP
223 Assigning meanings to programs (context) - Floyd - 1967
208 No silver bullet: Essence and accidents of software engineer.. (context) - Brooks - 1987  ACM
200 Prentice Hall International Series in Computer Science (context) - Spivey, The et al. - 1993
176 Distributed fault-tolerant real-time systems: The Mars appro.. (context) - Kopetz - 1989
173 Protocol verification as a hardware design aid - Dill, Drexler et al. - 1992  ACM   DBLP
166 Selecting software test data using data flow information (context) - Rapps, Weyuker - 1985  ACM   DBLP
158 Certification of programs for secure information flow (context) - Denning, Denning - 1977  ACM   DBLP
158 Certification of programs for secure information flow (context) - Denning, Denning - 1977
154 A Specification Language and its Formal Semantics (context) - Spivey - 1988
154 Simplification by cooperating decision procedures (context) - Nelson, Oppen - 1979  ACM   DBLP
150 Edinburgh LCF: A Mechanized Logic of Computation (context) - Gordon, Milner et al. - 1979
148 A fast mutual exclusion algorithm - Lamport - 1987  ACM   DBLP
142 The Design of Everyday Things (context) - Norman, of et al. - 1988
142 Synchronizing clocks in the presence of faults (context) - Lamport, Melliar-Smith - 1985  ACM   DBLP
139 Recursive functions of symbolic expressions and their comput.. - McCarthy - 1960  ACM
133 Design and code inspections to reduce errors in program deve.. (context) - Fagan - 1976
130 Specifying software requirements for complex systems: New te.. (context) - Heninger - 1980  DBLP
128 Logic and Computation: Interactive Proof with Cambridge LCF (context) - Paulson - 1987  ACM
128 RCS---A System for Version Control - Tichy - 1985
123 Seven myths of formal methods (context) - Hall - 1990
121 Deciding combinations of theories (context) - Shostak - 1984  ACM   DBLP
120 ACM Transactions on Programming Languages and Systems (context) - Lamport, Shostak et al. - 1982
119 The RAISE Language Group. The RAISE Specification Language (context) - Language, RAISE et al. - 1992
114 The temporal semantics of concurrent programs (context) - Pnueli - 1981  ACM   DBLP
113 Software Reliability---Measurement (context) - Musa, Iannino et al. - 1987
112 Statecharts: A visual approach to complex systems (context) - Harel - 1986
109 Putting theories together to make specifications (context) - Burstall, Goguen - 1977  DBLP
107 An experimental evaluation of the assumption of independence.. - Knight, Leveson - 1986  ACM   DBLP
106 Lambda calculus notation with nameless dummies (context) - de Bruijn - 1972
103 Prentice Hall International Series in Computer Science (context) - Hoare, Computing et al. - 1989
103 Prentice Hall International Series in Computer Science (context) - Hoare, Processes - 1985
101 A methodology for collecting valid software engineering data (context) - Basili, Weiss - 1984  DBLP
99 IMPS: An interactive mathematical proof system - Farmer, Guttman et al. - 1993  ACM   DBLP
98 Fault-Tolerance: Principles and Practice (context) - Anderson, Lee - 1990
97 Integrating decision procedures into heuristic theorem prove.. - Boyer, Moore - 1986
89 Implementing fault-tolerant services using the state machine.. (context) - Schneider - 1990  ACM   DBLP
81 Why higher-order logic is a good formalism for specifying an.. (context) - Gordon - 1986
78 cache coherence protocol (context) - Clarke, Grumberg et al. - 1992
75 Analysis of discrete event coordination (context) - Kurshan - 1990  ACM   DBLP
75 Using typed lambda calculus to implement formal systems on a.. - Avron, Honsell et al. - 1992  ACM   DBLP
74 The algebraic specification of abstract data types (context) - Guttag, Horning - 1978  DBLP
72 Formal hardware verification methods: A survey (context) - Gupta - 1992  DBLP
71 Metafunctions: Proving them correct and using them e#ciently.. (context) - Boyer, Moore - 1981
67 Failure mode assumptions and assumption coverage - Powell - 1992  ACM   DBLP
66 mural: A formal Development Support System (context) - Jones, Jones et al. - 1991
65 Specifications are not (context) - Hayes, Jones - 1989
64 A practical decision procedure for arithmetic with function .. (context) - Shostak - 1979  ACM   DBLP
63 Software Development with Z (context) - Wordsworth - 1992  ACM
62 Fault-tolerance in the advanced automation system (context) - Cristian, Dancey et al. - 1990  ACM   DBLP
61 Software architecture for hard real-time applications: Cycli.. (context) - Locke - 1992
60 Managing the development of large software systems (context) - Royce - 1970
57 An international survey of industrial applications of formal.. - Craigen, Gerhart et al. - 1993
56 The MAFT architecture for distributed fault tolerance (context) - Kieckhafer, Walter et al. - 1988  ACM   DBLP
55 Interactive consistency with multiple failure modes (context) - Thambidurai, Park - 1988  DBLP
55 IEEE Transactions on Software Engineering (context) - Fagan, software - 1986
53 Active design reviews: Principles and practices (context) - Parnas, Weiss - 1985  ACM   DBLP
53 Prentice Hall International Series in Computer Science (context) - Jones, Approach - 1986
53 An axiomatic definition of the programming language Pascal (context) - Hoare, Wirth - 1973  ACM   DBLP
51 Analyzing software requirements errors in safetycritical emb.. - Lutz - 1993
50 Evaluation of safety-critical software (context) - Parnas, van Schouwen et al. - 1990  ACM   DBLP
49 The Computer Modelling of Mathematical Reasoning (context) - Bundy - 1983  ACM
49 Correctness of a compiler for arithmetic expressions - McCarthy, Painter - 1967
49 Estimating the probability of failure when testing reveals n.. (context) - Miller, Morell et al. - 1992  ACM   DBLP
48 The infeasibility of experimental quantification of life-cri.. - Butler, Finelli - 1993  ACM
48 A theoretical basis for the analysis of multiversion softwar.. (context) - Eckhardt, Larry et al. - 1985  DBLP
48 An investigation of the Therac-25 accidents (context) - Leveson, Turner - 1993  ACM
47 On satisfying timing constraints in hard-real-time systems (context) - Xu, Parnas  ACM   DBLP
47 A proof of correctness of the viper microprocessors: The fir.. (context) - Cohn
45 Jean-Pierre Jouannaud (context) - Futatsugi, Goguen - 1985
44 A formally verified algorithm for interactive consistency un.. - Lincoln, Rushby  ACM   DBLP
43 Cleanroom software engineering (context) - Mills, Dyer et al. - 1987  ACM
43 the SUP-INF method for proving Presburger formulas (context) - Shostak - 1977
43 Validation of ultrahigh dependability for software-based sys.. (context) - Littlewood, Strigini - 1993  ACM   DBLP
42 A logic covering undefinedness in program proofs (context) - Barringer, Cheng et al. - 1984  DBLP
41 IEEE Transactions on Software Engineering (context) - Basili, Selby et al. - 1986
41 Proofs and Refutations (context) - Lakatos - 1976
41 The Cleanroom Approach to Quality Software Development (context) - Dyer - 1992  ACM   DBLP
41 Mathematical Logic (context) - Shoenfield - 1967
41 A technique for software module specification with examples (context) - Parnas - 1972  ACM   DBLP
41 An algorithm for reasoning about equality (context) - Shostak - 1978  ACM   DBLP
41 The notion of proof in hardware verification - Cohn - 1989  ACM   DBLP
39 Formal verification of algorithms for critical systems (context) - Rushby, von Henke - 1993  ACM   DBLP
39 Programming with Specifications: An Introduction to ANNA (context) - Luckham - 1990
39 the usability of logics which handle partial functions (context) - Cheng, Jones - 1990
38 Formal verification of the Gigamax cache-consistency protoco.. (context) - McMillan, Schwalbe - 1991
36 RRL: A rewrite rule laboratory (context) - Kapur, Zhang  DBLP
35 Verification of real-time systems using PVS - Shankar  ACM   DBLP
34 Software safety in embedded computer systems (context) - Leveson - 1991
33 Software safety: Why (context) - Leveson - 1986
33 An experimental evaluation of software redundancy as a strat.. (context) - Eckhardt, Caglayan et al. - 1991  ACM   DBLP
32 Formal methods applied to a floating-point number system - Barrett - 1989  ACM   DBLP
32 Duration calculi: An overview (context) - Chaochen - 1993
32 ACM Transactions on Programming Languages and Systems (context) - Hilfinger, package et al. - 1988
32 What is predictability for real-time systems (context) - Stankovic, Ramamritham - 1990
31 ONTIC: A Knowledge Representation System for Mathematics (context) - McAllester - 1989  ACM   DBLP
31 The evaluation of program-based software test data adequacy .. (context) - Weyuker - 1988  ACM   DBLP
31 Conceptual modeling of coincident failures in multiversion s.. (context) - Littlewood, Miller - 1989  ACM   DBLP
31 CICS project report: Experiences and results from the use of.. (context) - Houston, King  DBLP
30 The TPS theorem proving system (context) - Andrews, Issar et al.  ACM   DBLP
30 Dependable computing: From concepts to design diversity (context) - Avizienis, Laprie - 1986
30 Targeting safety-related errors during software requirements.. - Lutz - 1993  ACM   DBLP
29 Formal Techniques in Real-Time and FaultTolerant Systems (context) - Vytopil - 1992
28 Software Engineering Concepts (context) - Fairley - 1985  ACM
28 Documentation of requirements for computer systems (context) - van Schouwen, Parnas et al. - 1993
27 Correctness properties of the viper block model: The second .. (context) - Cohn
27 Implementing safety critical systems: The viper microprocess.. (context) - Cullyer
27 The Specification of Complex Systems (context) - Cohen, Harwood et al. - 1986
27 The Deductive Foundations Computer Programming (context) - Manna, Waldinger - 1993
26 Software-engineering research revisited (context) - Potts - 1993  ACM
26 requirements model: Re-examination for real-time systems and.. (context) - van Schouwen, A- - 1990
26 An analysis of defect densities found during software inspec.. (context) - Kelly, Sherif et al. - 1992  ACM
26 Lessons from three years of inspection data (context) - Weller - 1993  ACM
25 The design and verification of secure systems - Rushby - 1981
25 Formal specification as a design tool (context) - Guttag, Horning - 1980  ACM   DBLP
25 Proving multilevel security of a system design (context) - Feiertag, Levitt et al. - 1977  ACM   DBLP
24 Mechanical verification of a generalized protocol for Byzant.. - Shankar
24 ANNA: A Language for Annotating Ada Programs (context) - Luckham, von Henke et al. - 1987
23 Using transformations and verification in circuit design (context) - Saxe, Garland et al. - 1991  ACM   DBLP
21 Program verification: The very idea (context) - Fetzer - 1988  ACM   DBLP
21 IEEE Transactions on Software Engineering (context) - Cristian, robust - 1984
21 Imperial Software Technology (context) - Harwood, for et al. - 1991
21 Specification and verification of the UCLA Unix security ker.. (context) - Walker, Kemmerer et al. - 1980  ACM   DBLP
20 Social processes and proofs of theorems and programs (context) - De Millo, Lipton et al. - 1979  ACM   DBLP
19 Automating proofs of the absence of common runtime errors (context) - German - 1978  ACM   DBLP
19 Formal Verification of Hardware Design (context) - Yoeli - 1990  ACM
19 An introduction to first-order logic (context) - Barwise - 1978
19 A technique for proving specifications are multilevel secure (context) - Feiertag - 1980
18 Verifying the Interactive Convergence clocksynchronization a.. - Young - 1992
18 Checking a large routine (context) - Turing - 1949  ACM
17 A Logical Approach to Discrete Math (context) - Gries, Schneider - 1993  ACM
17 Dependability: Basic Concepts and Terminology in English (context) - Laprie - 1991
16 National Physical Laboratory (context) - Austin, Parkin et al. - 1993
16 Computer Science Department (context) - Melton, Dill et al. - 1993
16 Elementary predicate logic (context) - Hodges - 1983
16 and Mark Saaltink (context) - Craigen, Kromodimoeljo et al.
15 SACEM software validation (context) - Guiho, Hennebert - 1990  ACM
15 Observations on industrial practice using formal methods (context) - Gerhart, Craigen et al. - 1993  ACM   DBLP
15 Dependable computing for railway control systems (context) - Mongardi
15 An experimental study of fault detection in user requirement.. (context) - Schneider, Martin et al.
15 New ways to get accurate reliability measures (context) - Brocklehurst, Littlewood - 1992  ACM   DBLP
15 Report on the formal specification and partial verification .. - Brock, Hunt - 1990  ACM
15 Report on the formal specification and partial verification .. - Brock, Hunt  ACM
15 Automatic program verification I: A logical basis and its im.. (context) - Igarishi, London et al. - 1975  DBLP
14 Specification and verification using dependent types (context) - Hanna, Daeche et al. - 1989  ACM   DBLP
14 Exception handling - Cristian - 1989  ACM
14 IEEE Transactions on Software Engineering (context) - Leveson, Harvey et al. - 1983
14 Stanford Pascal Verifier user manual (context) - Luckham, German et al. - 1979  ACM
14 Formal verification of the Interactive Convergence clock syn.. - Rushby, von Henke - 1989
13 Proof techniques for hierarchically structured programs (context) - Robinson, Levitt - 1976  ACM   DBLP
13 Verification assessment study final report (context) - Kemmerer - 1986
13 An Introduction to Discrete Mathematics and Formal System Sp.. (context) - Ince - 1988  ACM
13 A formal approach to computer systems requirements documenta.. (context) - Engel, Kubica et al. - 1993
13 Are we testing for true reliability (context) - Hamlet - 1992
12 Kernels for safety (context) - Rushby - 1986
12 Verification of the shutdown system software at the Darlingt.. (context) - Archino, Hohendorf et al. - 1990
12 The Ina Jo Specification Language Reference Manual (context) - Locasso, Scheid et al. - 1980
12 Proving programs and programming proofs (context) - Beeson - 1983
11 the cruelty of really teaching computer science (context) - Dijkstra - 1989
11 On formal specification of a proof tool (context) - Arthan  ACM   DBLP
11 Mathematical proofs of computer system correctness (context) - Barwise - 1989
11 Version approach to fault-tolerant software (context) - Avizienis - 1985
11 Formal techniques for synchronized fault-tolerant systems - Di Vito, Butler  ACM
11 Verification of the FtCayuga fault-tolerant microprocessor s.. (context) - Srivas, Bickford - 1991
11 IEEE Transactions on Software Engineering (context) - Liestman, Campbell et al. - 1986
11 Machine checked proofs of the design of a fault-tolerant cir.. (context) - Bevier, Young - 1992
10 Carnegie Mellon University (context) - King, Verifier et al. - 1969
10 Valuation systems and consequence relations (context) - Ryan, Sadler - 1992  ACM
10 The formal verification of safety-critical assembly code (context) - O'Neil, Clutterbuck et al. - 1988
10 Illustrative risks to the public in the use of computer syst.. (context) - Neumann - 1992
10 The Origins of Digital Computers: Selected Papers (context) - Randell - 1975
10 A case study on isolation of safety-critical software (context) - Addy
10 Normal Accidents: Living with High Risk Technologies (context) - Perrow - 1984
10 An example of hierarchical design and proof (context) - Spitzen, Levitt et al. - 1978  ACM   DBLP
10 Development and flight test experiences with a flightcrucial.. (context) - Mackall - 1988
10 Proof of Separability---a verification technique for a class.. (context) - Rushby - 1982

[Article contains additional citations not shown here]

The graph only includes citing articles where the year of publication is known.

Documents on the same site (http://www.csl.sri.com/users/rushby/papers/): More
Disappearing Formal Methods - Rushby (2000) (Correct)
A Trusted Computing Base for Embedded Systems - Rushby (1984) (Correct)
Pertitioning in Avionics Architectures: Requirements, Mechanisms, .. - Rushby (1999) (Correct)

Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback

CiteSeer.IST - Copyright Penn State and NEC