Kolano, P.Z., Z. Dang, and R.A. Kemmerer. "The Design and Analysis of Real-time Systems Using the ASTRAL Software Development Environment". Annals of Software Engineering, vol. 7, 1999.  Home/Search   Document Details and Download   Summary   Related Articles   Check

....and an unrestricted counter. These results are helpful in verifying Presburger safety properties for history dependent systems containing parameterized (unspecified) integer constants, as illustrated by the example in the next section. 6 An Example This section considers an ASTRAL specification [22] of a railroad crossing system, which is a history dependent and parameterized real time system with a Presburger safety property that needs to be verified. The system description is taken from [17] The system consists of a set of railroad tracks that intersect a street where cars may 3 Control ....

....requirement of the system is that whenever a train is in the crossing the gate must be down, and when no train has been in between the sensors and the crossing for a reasonable amount of time, the gate must be up. The complete ASTRAL specification of the railroad crossing system can be found in [22] and at http: www.cs.ucsb.edu dang. The ASTRAL specification was proved to be correct by using the PVS based ASTRAL theorem prover [22] and was tested by a bounded depth symbolic search technique [14] The ASTRAL specification looks at the railroad crossing system as two interactive modules or ....

[Article contains additional citation context not shown here]

P. Z. Kolano, Z. Dang and R. A. Kemmerer. "The design and analysis of real-time systems using the ASTRAL software development environment," Annals of Software Engineering, 7 (1999) 177-210

....These results are helpful in verifying Presburger safety properties for history dependent systems containing parameterized (unspecified) integer constants, as illustrated by the example in the next section. 6 An Example This section shows the possibility of verifying an ASTRAL specification [28] of a railroad crossing system, which is a history dependent and parameterized real time system with a Presburger safety property that needs to be verified. The system description is taken from [22] The system consists of a set of railroad tracks that intersect a street where cars may cross the ....

....requirement of the system is that whenever a train is in the crossing the gate must be down, and when no train has been in between the sensors and the crossing for a reasonable amount of time, the gate must be up. The complete ASTRAL specification of the railroad crossing system can be found in [28] and at http: www.cs.ucsb.edu dang. The ASTRAL specification was proved to be correct by using the PVS based ASTRAL theorem prover [28] and was tested by a bounded depth symbolic search technique [17, 18] The ASTRAL specification looks at the railroad crossing system as two interactive modules ....

[Article contains additional citation context not shown here]

P. Z. Kolano, Z. Dang and R. A. Kemmerer. "The design and analysis of real-time systems using the ASTRAL software development environment," Annals of Software Engineering, 7 (1999) 177-210

No context found.

Kolano, P.Z., Z. Dang, and R.A. Kemmerer. "The Design and Analysis of Real-time Systems Using the ASTRAL Software Development Environment". Annals of Software Engineering, vol. 7, 1999.

No context found.

Kolano, P.Z., Z. Dang, and R.A. Kemmerer. The design and analysis of real-time systems using the ASTRAL software development environment. Annals of Software Engineering, 7: 177-210, 1999.

No context found.

Kolano, P.Z., Z. Dang, and R.A. Kemmerer, "The Design and Analysis of Real-Time Systems Using the ASTRAL Software Development Environment", Annals of Software Engineering, 7, 177-210 (1999).

....In fact, there are nonsemilinear languages that are 2DCM(1,r) recognizable [19] 5 A Verification Example In practice, allowing generalized clock constraints and parameterized durations makes it possible to specify more complex real time systems. In this section, we take an example specification [22] of the railroad crossing benchmark [17] which is written in ASTRAL [6] The specification specifies a system consisting of a set of railroad tracks that intersect a street where cars may cross the tracks. A gate is located at the crossing to prevent cars from crossing the tracks when a train is ....

P. Z. Kolano, Z. Dang and R. A. Kemmerer, "The design and analysis of real-time systems using the ASTRAL software development environment," Annals of Software Engineering, 7 (1999) 177-210

....) and (2) the stack is once higher than # 1 (w ) but jwj time units later it is lower than # 2 (w ) From Theorem 4.3, one can show (by adding additional monotonic counters to M ) that the problem can be automatically verified. 5 An Example This section considers an ASTRAL specification [15] of a railroad crossing system, which is a history dependent and parameterized real time system with a Presburger safety property that needs to be verified. The system description is taken from [11] The system consists of a set of railroad tracks that intersect a street where cars may cross the ....

....requirement of the system is that whenever a train is in the crossing the gate must be down, and when no train has been in between the sensors and the crossing for a reasonable amount of time, the gate must be up. The complete ASTRAL specification of the railroad crossing system can be found in [15] and at http: www.cs.ucsb.edu dang. The ASTRAL specification was proved to be correct by using the PVS based ASTRAL theorem prover [15] and was tested by a bounded depth symbolic search technique [10] The ASTRAL specification looks at the railroad crossing system as two interactive modules or ....

[Article contains additional citation context not shown here]

P. Z. Kolano, Zhe Dang, and R. A. Kemmerer. The design and analysis of real-time systems using the ASTRAL Software Development Environment. Annals of Software Engineering, 7:177--210, 1999.

.... real time systems, including a CCITT system [22] a complex wide area phone system composed of several ASTRAL speci cations [21] a hard3 ware description language [14] a robot control system [9] cryptographic protocols [25] and Mobile IP [26] The ASTRAL Software Development Environment (SDE) [47] is an integrated set of design and analysis tools, which includes, among others, a symbolic model checker and a mechanical theorem prover. Since complex real time systems speci ed by ASTRAL can achieve Turing computing power, ASTRAL no longer has an automatic veri cation procedure. Therefore, ....

....is out of the question, a number of aggressive approximation techniques can be used in order to speed up the debugging process of the model checker while remaining e ective in nding violations. This is the central issue of this paper. Our previous work. The ASTRAL explicit state model checker [26, 47] generates customized C code for each speci cation and enumerates all the branches of execution of this implementation up to a system time bound set by the user. Strictly speaking, the model checker only tests the speci cation under a set of given constant values. The main drawback of the model ....

[Article contains additional citation context not shown here]

P. Z. Kolano, Z. Dang and R. Kemmerer, \The design and analysis of real-time systems using the ASTRAL software development environment," Annals of Software Engineering, vol. 7, pp. 177-210, 1999.

....Presburger. In fact, 2DCM(1,r) can accept a class of nonlinear languages [25] 5 A Verification Example In practice, allowing parameterized clock constraints and parameterized durations makes it possible to specify more complex real time systems. In this section, we take an example specification [28] of the railroad crossing benchmark [23] which is written in ASTRAL [10] The specification specifies a system consisting of a set of railroad tracks that intersect a street where cars may cross the tracks. A gate is located at the crossing to prevent cars from crossing the tracks when a train is ....

P. Z. Kolano, Z. Dang and R. A. Kemmerer, "The design and analysis of real-time systems using the ASTRAL software development environment," Annals of Software Engineering, 7 (1999) 177-210

....Early methods guiding the user throughout the development of real life cases have already been extracted from these experiences [Kol 99] 54 As usual, when moving towards complex applications, the support of suitable tools is fundamental. ASTRAL is already equipped with several prototype tools [KDK 99] that allow the user to edit and manage complex specifications as well as providing support for their analysis. In particular, proof obligations can be automatically produced from specifications and proofs are supported by both model checking and deductive facilities. The model checker can check ....

Kolano, P.Z., Z. Dang, and R.A. Kemmerer. "The Design and Analysis of Real-time Systems Using the ASTRAL Software Development Environment". Annals of Software Engineering, vol. 7, 1999.

....or last transition) The user must provide the maximum number of transitions per sequence and if the search is backward, must provide the first transition. The sequence generation process is completely automatic and is available as a component of the ASTRAL Software Development Environment (SDE) [17]. The ASTRAL SDE constructs the sequence generator obligations, invokes PVS, runs the proof scripts, retrieves the results, and then generates the sequences according to the user query. Since running the proof scripts can be time consuming, the results are saved between changes to the ....

Kolano, P.Z., Z. Dang, and R.A. Kemmerer. The design and analysis of real-time systems using the ASTRAL software development environment. Annals of Software Engineering, 7, 1999.

....project. Early methods guiding the user throughout the development of reallife cases have already been extracted from these experiences [10] As usual, when moving towards complex applications, the support of suitable tools is fundamental. ASTRAL is already equipped with several prototype tools [9] that allow the user to edit and manage complex specifications as well as providing support for their analysis. In particular, proof obligations can be automatically produced from specifications and proofs are supported by both model checking and deductive facilities. The model checker can check ....

Kolano, P.Z., Z. Dang, and R.A. Kemmerer. "The Design and Analysis of Real-time Systems Using the ASTRAL Software Development Environment". Annals of Software Engineering, vol. 7, 1999.

....the use of ASTRAL to specify cryptographic protocols is demonstrated, and the ASTRAL model checker is used to uncover a number of attacks in the NeedhamSchroeder Public Key Protocol and the TMN protocol. The model checker reported here is part of the ASTRAL Software Development Environment (SDE)[6], which is an integrated set of design and analysis tools based upon the ASTRAL formal framework. The SDE also includes a syntax directed editor, a specification processor, a verification condition generator, a browser kit, and a mechanical theorem prover. The model checker is an updated version ....

P. Z. Kolano, Z. Dang, and R. A. Kemmerer, "The design and analysis of real-time systems using the ASTRAL software development environment," to appear.

.... structuring mechanisms that allow one to build modularized specifications of complex systems with layering[CGK97] It has been successfully used to specify a number of interesting real time systems [CKM94] CGK97] BCF91] BBKT95] DK97] DK99a] The ASTRAL Software Development Environment (SDE)[KDK99, K99] is an integrated set of design and analysis tools , which includes, among others, an explicit state model checker, a symbolic model checker and a mechanical theorem prover. The explicit state model checker [DK99a, KDK99] generates customized C code for each specification and enumerates all the ....

....[BBKT95] DK97] DK99a] The ASTRAL Software Development Environment (SDE) KDK99, K99] is an integrated set of design and analysis tools , which includes, among others, an explicit state model checker, a symbolic model checker and a mechanical theorem prover. The explicit state model checker [DK99a, KDK99] generates customized C code for each specification and enumerates all the branches of execution of this implementation up to a system time bound set by the user. The symbolic model checker[DK99b] tests specifications at the process level and requires only limited input to set up constant ....

[Article contains additional citation context not shown here]

P. Z. Kolano, Z. Dang and R. Kemmerer, "The design and analysis of real-time systems using the ASTRAL software development environment, " Annals of Software Engineering, Vol. 7, pp. 177-210, 1999.

.... is provided with structuring mechanisms that allow one to build modularized specifications of complex systems with layering [9] It has been successfully used to specify a number of interesting real time (infinite state) systems [3,4,9,10,11,12] The ASTRAL Software Development Environment (SDE) [15] is an integrated set of design and analysis tools, which includes, among others, an explicit state exploration model checker, and a mechanical theorem prover. By generating customized C code for each specification, the model checker [12, 15] enumerates all the branches of execution of this ....

....The ASTRAL Software Development Environment (SDE) 15] is an integrated set of design and analysis tools, which includes, among others, an explicit state exploration model checker, and a mechanical theorem prover. By generating customized C code for each specification, the model checker [12, 15] enumerates all the branches of execution of this implementation up to a system time bound set by the user. Strictly speaking, the model checker only tests the specification under a set of given constant values. This paper presents a fully automated symbolic model checker that tests the ....

[Article contains additional citation context not shown here]

P. Z. Kolano, Z. Dang and R. Kemmerer, "The design and analysis of real-time systems using the ASTRAL software development environment," Annals of Software Engineering, Vol. 7, 1999.

....the use of ASTRAL to specify cryptographic protocols is demonstrated, and the ASTRAL model checker is used to uncover a number of attacks in the Needham Schroeder Public Key Protocol and the TMN protocol. The model checker reported here is part of the ASTRAL Software Development Environment (SDE)[KDK98], which is an integrated set of design and analysis tools based upon the ASTRAL formal framework. The SDE also includes a syntax directed editor, a specification processor, a verification condition generator, a browser kit, and a mechanical theorem prover. The model checker is an updated version ....

P. Z. Kolano, Z. Dang, and R. A. Kemmerer, "The design and analysis of realtime systems using the ASTRAL software development environment", submitted for publication, 1998

....real time systems. It includes structuring mechanisms that allow one to build modularized specifications of complex systems with layering [9] It has been successfully used to specify a number of interesting realtime systems [1, 2, 9, 10, 11, 12] The ASTRAL Software Development Environment (SDE) [20, 22] is an integrated set of design and analysis tools , which includes, among others, an explicit state model checker, a symbolic model checker and a mechanical theorem prover. The explicit state model checker [12, 22] generates customized C code for each specification and enumerates all the ....

....systems [1, 2, 9, 10, 11, 12] The ASTRAL Software Development Environment (SDE) 20, 22] is an integrated set of design and analysis tools , which includes, among others, an explicit state model checker, a symbolic model checker and a mechanical theorem prover. The explicit state model checker [12, 22] generates customized C code for each specification and enumerates all the branches of execution of this implementation up to a system time bound set by the user. The symbolic model checker [13] tests specifications at the process level and requires only limited input to set up constant values. ....

[Article contains additional citation context not shown here]

P. Z. Kolano, Z. Dang and R. Kemmerer, "The design and analysis of real-time systems using the ASTRAL software development environment," Annals of Software Engineering, Vol. 7, pp. 177-210, 1999.

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC