C. Ghezzi, D. Mandrioli, and A. Morzenti. TRIO, a logic language for executable specifications of real-time systems. Journal of Systems and Software, 2(12):107--123, May 1990.  Home/Search   Document Not in Database   Summary   Related Articles   Check

....the construction of tools based on the DESS notation that provide to the users powerful tools based on temporal logics or timed automata while not requiring the same users to learn the difficult concepts of temporal logics or timed automata. More precisely, the chosen target notations were TRIO [7] , Kronos [10] and Esterel. 12, 13] Kronos is a research tool that is able (in certain conditions) to verify whether the behaviour of a given real time system modelled as a set of timed automata satisfies the requirements given in the specification phase. The mathematical base of Kronos is ....

Ghezzi C., Mandrioli D., Morzenti A., TRIO, a logic language for executable specifications of real-time systems. The Journal of Systems and Software, 12, 2 (May 1990).

....notation suited to support formal proofs, and into an operational one supporting simulation. The research activity from which this paper was derived is actually addressing the translation of UML models into TRIO, a first order theory augmented with a temporal domain that includes basic arithmetic [2] and Kronos timed automata, which come with a tool for model checking [8] In this paper we cover only the usage of TRIO, because of space reasons, and because the integration with Kronos still needs some work. The proposed approach is applied to the Generalised Railroad Crossing (GRC) problem ....

....of state diagrams, and defining the corresponding TRIO axioms. For space reasons, we do not report here all the fragment types mentioned above, instead we introduce just the more representative, especially those dealing with real time features and constraints. The definition of TRIO is reported in [2]. In order to make the paper as self contained as possible, a brief introduction to the most common constructs of the language is reported in the appendix. 4.1.1 Initial and final states and state persistence The initial state of a class is characterised by the following TRIO axiom: ....

Ghezzi C., Mandrioli D., Morzenti A., TRIO, a logic language for executable specifications of real-time systems. The Journal of Systems and Software, 12, 2 (May 1990).

.... execution may allow the generation of test data, that can be used for functional testing, that is for checking the correctness of the implementation against the specification [8,9] A specification formalism very suitable to real time systems is Linear Temporal Logic with a metric of time [5]. Such a formalism allows one to express complex temporal conditions and properties in a precise, quantitative way, while its denotational style allows one to abstract from implementation details until the beginning of the development phase. However, specifications written using a first order ....

....based on a finite time semantics have been successfully designed for the TRIO language [4] and have been tested in the context of several industrial applications [2] Various proposals of finite domain semantics have appeared in the literature, for both TRIO and other temporal logic languages. In [5], a conventional false (or true) value is given to every formula (or part of a formula) whose evaluation time does not belong to the time domain. Very early it was recognised that this resulted in a very counterintuitive semantics. In [3] the language has two temporal distance operators: a strong ....

C. Ghezzi, D. Mandrioli, and A. Morzenti: TRIO, a logic language for executable specifications of real-time systems. Journal of Systems and Software 12, 2 (May 1990), 107-123.

....velocity threshold of 50km h (14 m s) is modeled in speedSensor diagrams (speedSensor fires an event whenever the velocity threshold is exceeded) speedSensor.velocitySwitch = 14 m s. Following the DESS methodology we would now translate the models described above into formal notations like TRIO [5] or Kronos [6] This would allow us to show that the model satisfies the time requirements. For instance, the history checker of TRIO allows us to verify that stories (system evolutions, or scenarios) which represent acceptable behavior are compatible with the given model, while stories which ....

Ghezzi C., Mandrioli D., Morzenti A., TRIO, a logic language for executable specifications of real-time systems. The Journal of Systems and Software, 12, 2 (May 1990).

....with attributes of ) given by the retrieve function , and by renaming the methods using . Timed Petri nets: We present now an approach concerning the refinement of timed Petri nets based on the use of a temporal logic. TRIO is a linear, first order typed temporal logic due to Ghezzi et al. [9]. A TRIO axiomatisation, due to Felder et al. 8] has been given to a kind of timed Petri nets where each transition is associated with a firing time interval describing its earliest and latest firing time after enabling. A transition consumes exactly one token from each place in its preset, and ....

C. Ghezzi, D. Mandrioli, and A. Morzenti. TRIO, a logic language for executable specifications of real time systems. Journal of Systems and Software, 12(2):107--123, 1990.

....with attributes of D) given by the retrieve function R, and by renaming the methods using OE. Timed Petri nets: We present now an approach concerning the refinement of timed Petri nets based on the use of a temporal logic. TRIO is a linear, first order typed temporal logic due to Ghezzi et al. [9]. A TRIO axiomatisation, due to Felder et al. 8] has been given to a kind of timed Petri nets where each transition is associated with a firing time interval describing its earliest and latest firing time after enabling. A transition consumes exactly one token from each place in its preset, and ....

C. Ghezzi, D. Mandrioli, and A. Morzenti. TRIO, a logic language for executable specifications of real time systems. Journal of Systems and Software, 12(2):107--123, 1990.

.... [104] algebraic notations based on abstract data types [83, 22, 75] Petri Nets [9] DeMarco s Structured Analysis Dataflow Diagrams, 112, 111, 72, 147, 56, 189] Z [177, 53, 97, 95, 54, 57, 197, 125, 179] CSP LOTOS [99] VDM [17] CCS SMoLCS [71] and domain specific specification languages [47, 139, 114, 148, 188]. Animation gives a way of querying or at least executing the specification, increasing the software engineer s confidence in the document he develops. We describe one example for all: the animation of formal specifications written in the Z notation [175] Z is especially suited for being ....

....responsibilities with respect to the documents. Then, a number of rules define the operating environment inside which every process participant works. For instance, the following rule initializes the working context of a programmer: do working context(R,W,X,Item) 26 Product Specification [2, 9, 43, 47, 52, 58, 62, 68, 102, 114, 121, 124, 128, 139, 143, 182, 186, 191] Process Management [3, 13, 33, 35, 85, 77, 84, 146, 155, 196, 163] Validation and prototyping [24, 53, 56, 71, 82, 98, 99, 104, 115, 120, 133, 148, 170, 176, 177, 179, 188, 197] Design [8, 4, 38, 44, 63, 106, 109, 118, 147, 160, 162, 202] Editing and Compiling [10, 18, 48, 36, 78, 158, 136, ....

A. Morzenti, D. Mandrioli, and C. Ghezzi. TRIO, a logic language for executable specifications of real time systems. Journal of Systems and Software, 12(2):107--123, 1990.

....We exploit a full fledged first order temporal logic to characterize process fragments semantically. In doing so, we follow a tradition in modelling concurrent and reactive systems, established by Pnueli [29] Lamport [28] and followed by many others, like Chandy and Misra [10] and Ghezzi et al. [18]. Temporal logic expresses naturally properties of the kind something good must eventually happen and nothing bad happens . Lamport named these properties liveness and safety properties respectively, and showed their convenience to describe the systems at hand. Process Models, with all their ....

C. Ghezzi, D. Mandrioli, and A. Morzenti. TRIO, a logic language for executable specifications of real-time systems. Journal of Systems Software, 12(2), 1990.

.... can use temporal oracles to detect faults, and notify the user when they occur [8,10] If efficient, temporal oracles can also be incorporated into robust self checking programs [1] Methods for checking that traces conform to temporal specifications are usually designed for specific notations [2, 7, 12]. Details of the methods are motivated by the specific semantics of the operators provided for expressing specifications. This makes it difficult to adapt the method for use with additional operators or different notations. A relatively minor change to the semantics of an operator may necessitate ....

C. Ghezzi, D. Mandrioli, and A. Morzenti. TRIO, a logic language for executable specifications of real-time systems. Journal of Systems and Software, 12(2):107--123, February 1990.

....communication. mass is an executable language in the full operational sense. A similar approach is also taken in the design of SAFE [12] which is a procedural real time programming language with interval temporal logic semantics (however, SAFE does not support concurrency) In contrast, in TRIO [9] and TAMPURA [18] execution amounts to model checking with respect to a given trace; obviously non operational. Another approach is presented in [16] where Duration Calculus is used to simulate state machines that implement the specification. 5 Conclusion We presented an example of formal ....

C. Ghezzi, D. Mandrioli, and A. Morzenti. Trio, a logic language for executable specifications of real-time systems. J. Systems and Software, 12(2):107--123, May 1990.

....Naval Research Laboratory under Grant N00014 94 P2015. and the most expensive to correct [2] To effectively detect errors in specifications of practical systems, specification languages and verification techniques must be complemented with software tools that are robust, flexible, and integrated [7]. Among the tools effective for testing and debugging specifications early in the design process are simulators, which allow the user to generate and examine symbolic executions of the system under development. Simulation is even more effective if based on a formal specification. Further, the ....

....we have developed for the MTSim framework. Section 6 discusses future work. 2 Related Work This section reviews various formal methods for developing real time systems with a particular emphasis on tool support. Several researchers have noted the need for tool support for these approaches, e.g. [7, 13]. The STATEMATE system [10] which has been widely employed in industry, has many capabilities not found in research prototypes, e.g. version management and support for splitting specifications into multiple documents. The STATEMATE user can invoke a variety of static queries about the system ....

C. Ghezzi, D. Mandrioli, and A. Morzenti. TRIO, a logic language for executable specification of real-time software. Journal of System Software, 12, 1990.

....Pnueli 1994] is used for guiding, organizing and displaying proofs, but the temporal formulas are purely textual unlike the graphical formulas of RTGIL. Recently, STeP has been extended with capabilities for reasoning about real time based on clocked transition systems [Kesten et al. 1995] TRIO [Ghezzi et al. 1990] is a first order temporal logic language, based on PTL, for executable specifications of real time systems. Unlike most other logics described here, TRIO allows quantification over time values, enhancing expressiveness but making verification more difficult; indeed, in its most general form, TRIO ....

GHEZZI, C., MANDRIOLI, D. and MORZENTI, A. 1990. TRIO, a logic language for executable specifications of real-time systems. Jour. Syst. Softw. 12, 2 (May), 107--123.

....be defined starting from Dist, using the propositional connectives, first order quantification, and conditions on the temporal argument of Dist. A sample thereof is given in Table 1, together with short intuitive explanations, whenever needed. TRIO has been given a model theoretical semantics in [16] in a fairly standard way. In [12] we defined a sound and (relatively) complete axiomatic system which is reported in [8] together with some useful metatheorems. In this axiomatic system the metatheorems usually found in ordinary predicate calculus can be proved: we mention, among others, the ....

C. Ghezzi, D. Mandrioli, A. Morzenti, TRIO, a logic language for executable specifications of real-time systems, J. Systems Software 12 (1990) 107---123.

....arise in some critical circumstances. In other terms, by executing requirements, we perform testing in the early phase of the development process. Although testing cannot prove the absence of errors, it is especially valuable as a mechanism for testing functional requirements. In a previous paper [10] we gave a first definition of TRIO, a logic language we developed for specifying real time systems. TRIO is one of several extensions of classical temporal logic [17, 29] that introduce a quantitative view of time, so that time distances can be measured. The inadequacy of classical temporal logic ....

....parameter to the classical temporal logic operators, to be interpreted as a real time constraint. For 3 instance, in this logic, the expression A Until t B requires B to occur within t time units, and A to hold until then. Metric Temporal Logic (MTL) defined in [15] and TRIO, defined in [10, 9], are also extensions of temporal logic. They provide two basic operators Futr and Past which state the distance between distinct time instants in a quantitative way. All of the classical temporal logic operators can be derived from Futr and Past by means of first order quantification. TRIO and ....

[Article contains additional citation context not shown here]

Ghezzi, C., Mandrioli, D., and Morzenti, A. TRIO, a Logic Language for Executable Specifications of Real-Time Systems. in Proceedings of 10 th French-Tunisian Seminar on Computer Science, (1989), 322-349.

....parameter to the classical temporal logic operators, to be interpreted as a real time constraint. For 3 instance, in this logic, the expression A Until t B requires B to occur within t time units, and A to hold until then. Metric Temporal Logic (MTL) defined in [15] and TRIO, defined in [10, 9], are also extensions of temporal logic. They provide two basic operators Futr and Past which state the distance between distinct time instants in a quantitative way. All of the classical temporal logic operators can be derived from Futr and Past by means of first order quantification. TRIO and ....

....theorems (Section 3.3) show that the new semantics properly preserves the properties holding in the original domain, when restricted to its subsets. Section 4 gives algorithms that apply interpretation schemas based on the tableaux method to the new semantics. Section 5 extends the results of [10, 9] and shows the use of TRIO for the analysis of real time system specifications. Technical proofs of Sections 4 and 5 are given in appendices II and III, since they are rather lengthy but straightforward extensions of proofs already given in [21] Finally, Section 6 gives concluding remarks, ....

[Article contains additional citation context not shown here]

Ghezzi, C., Mandrioli, D., and Morzenti, A. TRIO, a Logic Language for Executable Specifications of Real-Time Systems. Journal of Systems and Software, 12, 2 (May 1990), 107-123.

....move from system requirements to a complete implementation in terms of the CORBA architecture. This paper addresses the latter issue by presenting an approach to the design of distributed systems in a CORBA environment, based on an initial formalization of the requirements given in terms of TRIO [10, 18]. TRIO is a first order temporal logic which has shown to be very effective for specifying critical systems, such as SCS [8] The presented approach consists in moving from the TRIO representation of the requirements to a new formalization representing the high level architectural design in which ....

....presents the methodology by means of an example in which TC is used to design a Supervision and Control System; finally Section 5 draws some conclusions. In what follows we assume the reader has already some knowledge of the basic CORBA concepts and terms. 2 THE TRIO SPECIFICATION LANGUAGE TRIO [10, 18] is a first order temporal logic language that supports a linear notion of time. Besides the usual propositional operators and the quantifiers, one may compose formulas by using a single basic modal operator, called Dist, that relates the current time, which is left implicit in the formula, to ....

Ghezzi, C., Mandrioli, D., Morzenti, A. TRIO, a logic language for executable specifications of real-time systems, Journal of Systems and Software, 12, 2, May 1990.

No context found.

C. Ghezzi, D. Mandrioli, and A. Morzenti. TRIO, a logic language for executable specifications of real-time systems. Journal of Systems and Software, 2(12):107--123, May 1990.

No context found.

C. Ghezzi, D. Mandrioli, and A. Morzenti. TRIO, a logic language for executable specifications of real-time systems. Journal of Systems and Software, 2(12):107--123, May 1990.

No context found.

C. Ghezzi and D. Mandrioli and A. Morzenti. TRIO, a logic language for executable specifications of real-time systems. Journal of Systems and Software, 12(2):107--123, May 1990.

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC