Adaptable Translator of B Specifications to Embedded C Programs

Bert, Didier; Boulmé, Sylvain; Potet, Marie-Laure; Requet, A; Voisin, Laurent

doi:10.1007/978-3-540-45236-2_7

Cited by 29 publications

(21 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It is the target language for generating concrete programs from verified abstract B machines, and it is translatable to high-level programming languages [BB1,VT02]. The B0 language only includes concrete B substitutions and only handles concrete data.…”

Section: Translation Of the Main Processmentioning

confidence: 99%

Automatic Translation from Combined B and CSP Specification to Java Programs

Yang

Poppleton

2006

B 2007: Formal Specification and Development in B

View full text Add to dashboard Cite

Abstract. A recent contribution to the formal specification and verification of concurrent systems is the integration of the state-and event-based approaches B and CSP, specifically in the ProB model checking tool. At the implementation end of the development, concurrent programming in Java remains a demanding and error-prone activity, because of the need to verify critical properties of safety and liveness as well as functional correctness. This work contributes to the automated development of concurrent Java programs from such integrated specifications. The JCSP package was originally designed as a proven clean Java concurrency vehicle for the implementation of certain CSP specifications. In the context of best current Java concurrent programming practice, we extend the original JCSP package to support the integrated B and CSP specification by implementing new channel classes. We propose rules for the automated translation of the integrated specification to multi-threaded Java using the extended JCSP channel classes. We briefly present a prototype translation tool which extends ProB, with a worked example, and conclude with a strategy for formally verifying the translation.

show abstract

Section: Translation Of the Main Processmentioning

confidence: 99%

Automatic Translation from Combined B and CSP Specification to Java Programs

Yang

Poppleton

2006

B 2007: Formal Specification and Development in B

View full text Add to dashboard Cite

show abstract

“…The top-down approach is used in several works [6] using B-Method to automatically generate C code from a formal model. The bottom-up approach is used, for example, in [17] to generate Coq model of C code using tools like Caduceus and Why.…”

Section: Related Workmentioning

confidence: 99%

“…However, in both of these systems, the generated code is not sufficiently efficient (in terms of performance and resource consuming) to fit into smart cards. Some attempts (e.g., [6]) have been done to optimize the generated code but these optimizations are usually complex and may jeopardize the rigour provided by formal tools. Furthermore, in the industry, we often need to directly deal with an already developed product rather than starting from its informal specification.…”

Section: Introductionmentioning

confidence: 99%

Certifying Native Java Card API by Formal Refinement

Nguyen¹,

Chetali²

2006

Smart Card Research and Advanced Applications

View full text Add to dashboard Cite

Abstract. This paper describes a refinement-based approach to show that a native Java Card API function fulfills its specification. We refine a native function from its informal specification (by Sun) through several intermediate models into a low-level model which is very close to its C implementations. We formally prove the correctness of the refinement steps between two adjacent levels. The low-level model is sufficiently detailed such that its correspondence to the C implementation can be informally checked. This work provides a framework to enforce the security of the native code by formal analysis and can be generalized to verify a complete implementation of the Java Card platform.

show abstract

“…It enables to derive code from the specification after having verified properties on this specification. Such method has been investigated in [8,29,23] with the B tool to generate Java Card or C programs. Also, [14] and [10] proposes an embedded Java Card bytecode verifier, generated from formal models.…”

Section: Model Verification Approachmentioning

confidence: 99%

Formal Verification of Security Properties of Smart Card Embedded Source Code

Andronick¹,

Chetali²,

Paulin-Mohring

2005

FM 2005: Formal Methods

View full text Add to dashboard Cite

Abstract. This paper reports on a method to handle the verification of various security properties of imperative source code embedded on smart cards. The idea is to combine two program verification approaches: the functional verification at the source code level and the verification of high level properties on a formal model built from the program and its specification. The method presented uses the Caduceus tool, built on top of the Why tool. Caduceus enables the verification of an annotated C program and provides a validation process that we used to generate a high level formal model of the C source code. This method is illustrated by an example extracted from the verification of a smart card embedded operating system.

show abstract

Adaptable Translator of B Specifications to Embedded C Programs

Cited by 29 publications

References 9 publications

Automatic Translation from Combined B and CSP Specification to Java Programs

Automatic Translation from Combined B and CSP Specification to Java Programs

Certifying Native Java Card API by Formal Refinement

Formal Verification of Security Properties of Smart Card Embedded Source Code

Contact Info

Product

Resources

About