2012
DOI: 10.1007/978-3-642-28891-3_30
|View full text |Cite
|
Sign up to set email alerts
|

Generating Verifiable Java Code from Verified PVS Specifications

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
1
1

Citation Types

0
2
0

Year Published

2012
2012
2017
2017

Publication Types

Select...
3
2

Relationship

0
5

Authors

Journals

citations
Cited by 5 publications
(2 citation statements)
references
References 20 publications
0
2
0
Order By: Relevance
“…The model-based approach introduced here has some limitations that need to be considered and should be the subject of further work: the formalisation of safety requirements as predicates does not allow a formal verification of the consistency of the safety requirements (e.g., contradictory safety requirements can be formalised); the verification technique based on theory interpretation allows the creation of mappings that are syntactically correct but semantically wrong (e.g., visible display elements of the reference model can be mapped into state variables of the concrete model that are not rendered on the display); code generation is limited to Lisp code (new code generators that translate PVS models into C [20] and Java [11] are still under development). Further work is needed to demonstrate the approach for the entire user interface (we have illustrated the approach just for the data entry system).…”
Section: Discussionmentioning
confidence: 99%
“…The model-based approach introduced here has some limitations that need to be considered and should be the subject of further work: the formalisation of safety requirements as predicates does not allow a formal verification of the consistency of the safety requirements (e.g., contradictory safety requirements can be formalised); the verification technique based on theory interpretation allows the creation of mappings that are syntactically correct but semantically wrong (e.g., visible display elements of the reference model can be mapped into state variables of the concrete model that are not rendered on the display); code generation is limited to Lisp code (new code generators that translate PVS models into C [20] and Java [11] are still under development). Further work is needed to demonstrate the approach for the entire user interface (we have illustrated the approach just for the data entry system).…”
Section: Discussionmentioning
confidence: 99%
“…It also assumes that the software implementations follow the control and data structures of the formal models 2 . These two assumptions can be satisfied by either manual or automatic translation [13]. Furthermore, they do not have to be satisfied in any order.…”
Section: Model Animationmentioning
confidence: 99%