T. Cattel. Modeling and Verification of a Multiprocessor Realtime OS Kernel. In International Conference on Formal Description Techniques, 1994.  Home/Search   Document Not in Database   Summary   Related Articles   Check

....in developing and debugging the programs. The language is designed so that its compiler can extract models that can be used by a model checker like Spin [21] to debug the firmware. In the software community, model checking has traditionally been used to find hard to find bugs in working systems [7, 15, 27, 30, 18, 17, 22, 11]. In contrast, Spin is used throughout the firmware development process. Usually, the program is developed and debugged entirely using Spin before it is ever run on the device. This is because developing firmware on the device is a slow and painstaking process Since the version of the VMMC ....

....Model Extraction Approaches Model extraction by hand. Several researchers have verified various aspects of Operating Systems using model checkers. These efforts involved extracting an abstract model of the system by hand. Spin was used to verify the Interprocess Communication Subsystem in Harmony [7] (a real time operating system) and RUBIS microkernel [15] The latter study found that significant effort was needed in extracting the model. Spin was also used to develop and verify a synchronization protocol for Plan 9 [27] More recently, Spin was used to verify the IPC system of the Fluke OS ....

[Article contains additional citation context not shown here]

T. Cattel. Modeling and Verification of a Multiprocessor Realtime OS Kernel. In International Conference on Formal Description Techniques, 1994.

....Model Extraction Approaches Model extraction by hand. Several researchers have verified various aspects of operating systems using model checkers. These efforts involved extracting an abstract model of the system by hand. Spin was used to verify the Interprocess Communication Subsystem in Harmony [26] (a real time operating system) and the RUBIS microkernel [43] The latter study found that significant effort was needed in extracting the model. Spin was also used to develop and verify a synchronization protocol for Plan 9 [83] More recently, Spin was used to verify the IPC system of the Fluke ....

....compiler analysis, and runtime methods. In this section, we discuss some of the related work in this area. As described in Section 3.2.1, model checkers have been used to debug system software. Some have focused on debugging programs written in general purpose languages like C, C and Java [26, 43, 83, 94, 50, 48, 57, 35]. Others have proposed domainspecific languages that have been designed with model checking in mind [28, 12, 14] and therefore, allow model checking to be more effective. Meta level Compilation [32, 46] provides a framework for extending a compiler with application specific code that can be used ....

T. Cattel. Modeling and Verification of a Multiprocessor Realtime OS Kernel. In Proceedings of the Conference on Formal Description of Techniques (FORTE), Berne, Switzerland, October 1994.

....Model Extraction Approaches Model extraction by hand. Several researchers have verified various aspects of Operating Systems using model checkers. These e#orts involved extracting an abstract model of the system by hand. SPIN was used to verify the Interprocess Communication Subsystem in Harmony [8] (a real time operating system) and RUBIS microkernel [15] The latter study found that significant e#ort was needed in extracting the model. SPIN was also used to develop and verify a synchronization protocol for Plan 9 [26] More recently, SPIN was used to verify the IPC system of the Fluke OS ....

....the problem of debugging system software. The techniques used span language design, model checking, compiler analysis and runtime methods. In this section, we discuss some of the related work in this area. As described in Section 4.1, model checkers have been used to debug system software. Some [8, 15, 26, 29, 19, 17, 23, 11] have focused on debugging programs written in general purpose languages like C, C and Java. Others have proposed domain specific languages [9, 3, 4] that have been designed with model checking in mind, and therefore, allow model checking to be more e#ective. Meta level Compilation [10, 16] ....

T. Cattel. Modeling and Verification of a Multiprocessor Realtime OS Kernel. In International Conference on Formal Description Techniques, 1994.

.... for reactive systems [10] distributed process scheduling algorithms [59] fault tolerant systems [1] hardware software codesign [80] asynchronous hardware designs [62] multiprocessor designs [76] local area network controllers [30] microkernel design [19] 75] operating systems code [9], 64] railway signaling protocols and circuitry [36] 20] 15] rendezvous algorithms [44] security protocols [47] flood surge control systems [48] feature interaction problems [50] ethernet collision avoidance techniques [46] and self stabilizing protocols [67] 5 CONCLUSION Most mature ....

T. Cattel, "Modeling and Verification of a Multiprocessor RealTime OS Kernel," Proc. Seventh Int'l Conf. Formal Description Techniques, pp. 35-50, Berne, Switzerland, Oct. 1994.

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC