Details

<p>FOREWORD by Mike Hinchey xiii</p> <p>FOREWORD by Alessandro Fantechi and Pedro Merino xv</p> <p>PREFACE xvii</p> <p>CONTRIBUTORS xix</p> <p><b>PART I INTRODUCTION AND STATE OF THE ART 1</b></p> <p>1 FORMAL METHODS: APPLYING {LOGICS IN, THEORETICAL} COMPUTER SCIENCE 3<br /> <i>Diego Latella</i></p> <p>1.1 Introduction and State of the Art 3</p> <p>1.2 Future Directions 9</p> <p><b>PART II MODELING PARADIGMS 15</b></p> <p>2 A SYNCHRONOUS LANGUAGE AT WORK: THE STORY OF LUSTRE 17<br /> <i>Nicolas Halbwachs</i></p> <p>2.1 Introduction 17</p> <p>2.2 A Flavor of the Language 18</p> <p>2.3 The Design and Development of Lustre and Scade 20</p> <p>2.4 Some Lessons from Industrial Use 25</p> <p>2.5 And Now . . . 28</p> <p>3 REQUIREMENTS OF AN INTEGRATED FORMAL METHOD FOR INTELLIGENT SWARMS 33<br /> <i>Mike Hinchey, James L. Rash, Christopher A. Rouff, Walt F. Truszkowski, and Amy K.C.S. Vanderbilt</i></p> <p>3.1 Introduction 33</p> <p>3.2 Swarm Technologies 35</p> <p>3.3 NASA FAST Project 39</p> <p>3.4 Integrated Swarm Formal Method 41</p> <p>3.5 Conclusion 55</p> <p><b>PART III TRANSPORTATION SYSTEMS 61</b></p> <p>4 SOME TRENDS IN FORMAL METHODS APPLICATIONS TO RAILWAY SIGNALING 63<br /> <i>Alessandro Fantechi, Wan Fokkink, and Angelo Morzenti</i></p> <p>4.1 Introduction 63</p> <p>4.2 CENELEC Guidelines 65</p> <p>4.3 Software Procurement in Railway Signaling 66</p> <p>4.4 A Success Story: The B Method 70</p> <p>4.5 Classes of Railway Signaling Equipment 71</p> <p>4.6 Conclusions 80</p> <p>5 SYMBOLIC MODEL CHECKING FOR AVIONICS 85<br /> <i>Radu I. Siminiceanu and Gianfranco Ciardo</i></p> <p>5.1 Introduction 85</p> <p>5.2 Application: The Runway Safety Monitor 87</p> <p>5.3 A Discrete Model of RSM 95</p> <p>5.4 Discussion 107</p> <p><b>PART IV TELECOMMUNICATIONS 113</b></p> <p>6 APPLYING FORMAL METHODS TO TELECOMMUNICATION SERVICES WITH ACTIVE NETWORKS 115<br /> <i>María del Mar Gallardo, Jesús Martínez, and Pedro Merino</i></p> <p>6.1 Overview 115</p> <p>6.2 Active Networks 116</p> <p>6.3 The Capsule Approach 117</p> <p>6.4 Previous Approaches on Analyzing Active Networks 118</p> <p>6.5 Model Checking Active Networks with SPIN 122</p> <p>6.6 Conclusions 129</p> <p>7 PRACTICAL APPLICATIONS OF PROBABILISTIC MODEL CHECKING TO COMMUNICATION PROTOCOLS 133<br /> <i>Marie Dufl ot, Marta Kwiatkowska, Gethin Norman, David Parker, Sylvain Peyronnet, Claudine Picaronny, and Jeremy Sproston</i></p> <p>7.1 Introduction 133</p> <p>7.2 PTAs 134</p> <p>7.3 Probabilistic Model Checking 136</p> <p>7.4 Case Study: CSMA/CD 139</p> <p>7.5 Discussion and Conclusion 146</p> <p><b>PART V INTERNET AND ONLINE SERVICES 151</b></p> <p>8 DESIGN FOR VERIFIABILITY: THE OCS CASE STUDY 153<br /> <i>Johannes Neubauer, Tiziana Margaria, and Bernhard Steffen</i></p> <p>8.1 Introduction 153</p> <p>8.2 The User Model 155</p> <p>8.3 The Models and the Framework 158</p> <p>8.4 Model Checking 159</p> <p>8.5 Validating Emerging Global Behavior via Automata Learning 161</p> <p>8.6 Related Work 170</p> <p>8.7 Conclusion and Perspectives 173</p> <p>9 AN APPLICATION OF STOCHASTIC MODEL CHECKING IN THE INDUSTRY: USER-CENTERED MODELING AND ANALYSIS OF COLLABORATION IN THINKTEAM 179<br /> <i>Maurice H. ter Beek, Stefania Gnesi, Diego Latella, Mieke Massink, Maurizio Sebastianis, and Gianluca Trentanni</i></p> <p>9.1 Introduction 179</p> <p>9.2 thinkteam 182</p> <p>9.3 Analysis of the thinkteam Log File 184</p> <p>9.4 thinkteam with Replicated Vaults 189</p> <p>9.5 Lessons Learned 201</p> <p>9.6 Conclusions 201</p> <p><b>PART VI RUNTIME: TESTING AND MODEL LEARNING 205</b></p> <p>10 THE TESTING AND TEST CONTROL NOTATION TTCN-3 AND ITS USE 207<br /> <i>Ina Schieferdecker and Alain-Georges Vouffo-Feudjio</i></p> <p>10.1 Introduction 207</p> <p>10.2 The Concepts of TTCN-3 210</p> <p>10.3 An Introductory Example 216</p> <p>10.4 TTCN-3 Semantics and Its Application 219</p> <p>10.5 A Distributed Test Platform for the TTCN-3 220</p> <p>10.6 Case Study I: Testing of Open Service Architecture (OSA)/Parlay Services 223</p> <p>10.7 Case Study II: Testing of IP Multimedia Subsystem (IMS) Equipment 225</p> <p>10.8 Conclusion 230</p> <p>11 PRACTICAL ASPECTS OF ACTIVE AUTOMATA LEARNING 235<br /> <i>Falk Howar, Maik Merten, Bernhard Steffen, and Tiziana Margaria</i></p> <p>11.1 Introduction 235</p> <p>11.2 Regular Extrapolation 239</p> <p>11.3 Challenges in Regular Extrapolation 244</p> <p>11.4 Interacting with Real Systems 247</p> <p>11.5 Membership Queries 250</p> <p>11.6 Reset 253</p> <p>11.7 Parameters and Value Domains 256</p> <p>11.8 The NGLL 260</p> <p>11.9 Conclusion and Perspectives 263</p> <p>References 264</p> <p><b>INDEX 269</b></p>

<p><b>STEFANIA GNESI</b> is Director of Research and head of the Formal Methods and Tools Laboratory at ISTI-CNR (Istituto di Scienza e Tecnologie dell'Informazione-Consiglio Nazionale delle Ricerche) in Pisa, Italy. She was previously a lecturer in methods and tools for the specification and analysis of software systems at the University of Florence.</p> <p><b>TIZIANA MARGARIA</b> is Full Professor in the Faculty of Mathematics and Natural Sciences of the University of Potsdam, where she holds the Chair of Service and Software Engineering at the Institute of Informatics. She has held positions at universities in Göttingen, Dortmund, and Passau, Germany, as well as in Sweden and Italy.</p>

<p><b>Making the formal methods commonly used to test complex, safety-critical control systems easier to learn and integrate into the industries where they can do the most good</b></p> <p>Formal methods are an essential step in the design process for industrial safety-critical systems. The term "formal methods" encompasses all notations having precise mathematical semantics, together with their associated analysis methods, that allow description and reasoning about the behavior of a system in a formal manner.</p> <p>Based on more than a decade of award-winning collaborative work within the European Research Consortium for Informatics and Mathematics, <i>Formal Methods for Industrial Critical Systems</i> presents mainstream formal methods currently used for designing industrial critical systems, focusing on model checking. Its tri-fold purpose is to reduce the effort required to learn formal methods, to help designers to adopt the formal methods most appropriate for their systems, and to offer a panel of state-of-the-art techniques and tools for analyzing critical systems.</p> <p>This powerful resource:</p> <ul> <li>Balances leading-edge material, established practice, and reviews of historically important contributions</li> <li>Collects timely, current articles written by a truly international group of authors</li> <li>Describes case studies from many kinds of high-integrity systems development</li> <li>Emphasizes model checking, an important step in several types of formal methods</li> </ul> <p><i>Formal Methods for Industrial Critical Systems</i> is an ideal guide for students in advanced-undergraduate computer science courses and an excellent reference for industry professionals.</p>

US