| J. Rushby. Specification, proof checking, and model checking for protocols and distributed systems with PVS. In FORTE X/PSTV XVII '97: Formal Description Techniques and Protocol Specification, Testing and Verification, November 1997. |
....the details of a technique to aid students to overcome bottlenecks in the process of constructing proofs. We now comment on the cost to the teacher. The first cost of adopting this approach is the need to code up all the simple definitions in the theorem prover. We use the theorem prover PVS [7] to code the relevant models and prove the required theorems. Completing the basic definitions for the various examples used in a typical course took the author about two days. But the author was already familiar with PVS and its various features. One of the key issues will be to identify a set of ....
J. Rushby. Specification, proof checking, and model checking for protocols and distributed systems with PVS. In Tutorial presented at FORTE X/PSTV XVII '97: Formal Description Techniques and Protocol Specification, Testing and Verification, Nov. 1997.
....previous section is presented. As is standard practice, the behavioural semantics is via a labelled transition system. This formal semantics is also the basis of a prototype implementation that we are experimenting with. Our implementation is an encoding of the rules, using the theorem prover PVS [10]. While it is not a simulator for the process system, the main of the prototype is to facilitate analyses. For this task the theorem prover is well suited. The details of the encoding of the framework and the verification of properties is not discussed in this paper, but can be obtained from the ....
J. Rushby. Specification, proof checking, and model checking for protocols and distributed systems with PVS. In Tutorial presented at FORTE X/PSTV XVII '97: Formal Description Techniques and Protocol Specification, Testing and Verification, November 1997.
....the analysis presented in [Pau99] the spy cannot delete any message (prevent A receiving a message sent to it) We then show that the basic techniques outlined by Paulson [Pau99] and Millen [Mil99] can be used to verify protocols expressed in the language. We carry out our verification using PVS [Rus97, GH98]. 2 Language Issues In this section we describe the language to describe the protocol as well as the capabilities of the spy. The following is an abstract grammar, indicative of the one that will be used in the final tool. The general syntax is similar to CCS [Mil90] Protocol # Message ....
J. Rushby. Specification, proof checking, and model checking for protocols and distributed systems with PVS. In Tutorial presented at FORTE X/PSTV XVII '97: Formal Description Techniques and Protocol Specification, Testing and Verification, November 1997. Available, with specification files, at urlhttp: //www.csl.sri.com/forte97.html.
.... for PVS are described in [46] and the utility of its type system is argued in [47] Tutorials provide general introductions to PVS [48 50] plus more specialized treatments for hardware [51] abstract data types [52] tabular and requirements specifications [53] and distributed systems [54]. 1 Although the SIFT verification was a significant accomplishment at the time, the paper describing it [21] leaves the impression that the full operating system was verified, as opposed to some properties of its design. This led to severe criticism by a NASA peer review [22] 2 Ehdm has some ....
John Rushby. Specification, proof checking, and model checking for protocols and distributed systems with PVS. Tutorial presented at FORTE X/PSTV XVII '97: Formal Description Techniques and Protocol Specification, Testing and Verification, November 1997. Available, with specification files, at http: //www.csl.sri.com/forte97.html.
No context found.
J. Rushby. Specification, proof checking, and model checking for protocols and distributed systems with PVS. In FORTE X/PSTV XVII '97: Formal Description Techniques and Protocol Specification, Testing and Verification, November 1997.
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC