“…Therefore, to avoid bug insertion in the beginning stages of HW/SW co-designs, formal verification of co-designs, where HW is designed in RTL and SW is written in program codes, is important. To apply such verification, designers have to generate abstracted models by hand from design descriptions [5,6]. This is because few methods are available to © 2007 Wiley Periodicals, Inc.…”