Symmetry Reduced Model Checking for B

Turner, Edd; Leuschel, Michaël; Spermann, Corinna; Butler, Michael

doi:10.1109/tase.2007.50

Cited by 16 publications

(28 citation statements)

References 23 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Furthermore, we can compile ProB for a 64 bit system to increase the amount of available memory. We are also investigating the use ProB's symmetry reduction techniques [LBST07,TLSB07] inside quantified formulas, as a further way to improve ProB's performance.…”

Section: Discussionmentioning

confidence: 99%

Automated property verification for large scale B models with ProB

et al. 2011

Self Cite

View full text Add to dashboard Cite

Abstract. In this paper we describe the successful application of the ProB tool for data validation in several industrial applications. The initial case study centred on the San Juan metro system installed by Siemens. The control software was developed and formally proven with B. However, the development contains certain assumptions about the actual rail network topology which have to be validated separately in order to ensure safe operation. For this task, Siemens has developed custom proof rules for Atelier B. Atelier B, however, was unable to deal with about 80 properties of the deployment (running out of memory). These properties thus had to be validated by hand at great expense, and they need to be revalidated whenever the rail network infrastructure changes. In this paper we show how we were able to use ProB to validate all of the about 300 properties of the San Juan deployment, detecting exactly the same faults automatically in a few minutes that were manually uncovered in about one man-month. We have repeated this task for three ongoing projects at Siemens, notably the ongoing automatisation of the line 1 of the Paris Métro. Here again, about a man month of effort has been replaced by a few minutes of computation. This achievement required the extension of the ProB kernel for large sets as well as an improved constraint propagation algorithm. We also outline some of the effort and features that were required in moving from a tool capable of dealing with medium-sized examples towards a tool able to deal with actual industrial specifications. We also describe the issue of validating ProB, so that it can be integrated into the SIL4 development chain at Siemens. • This article describes the use of our technique in three active deployments, namely the upgrading of the Paris Metro Line 1 for driverless trains, line 4 of the São Paulo metro and line 9 of the Barcelona metro. We also briefly report on experiments on the models of the CDGVAL shuttle. The paper [LFFP09] only contained the initial San Juan case study, which was used to evaluate the potential of our approach.Correspondence and offprint requests to: M. Leuschel, E-mail: leuschel@cs.uni-duesseldorf.de • In this article we describe the previous method adopted by Siemens in much more detail, as well as explaining the performance issues with Atelier B.• More comparisons and empirical evaluations with other potential approaches and alternate tools (Brama, AnimB, BZ-TT and TLC) have been conducted.• We provide more details about the ongoing validation process of ProB, which is required by Siemens for it to use ProB to replace the existing method. The validation also lead to the discovery of errors in the English version of the Atelier B reference manual.Also, since [LFFP09], ProB itself has been further improved inspired by the application, resulting in new optimisations in the kernel (cf. Sect. 3.2).

show abstract

Section: Discussionmentioning

confidence: 99%

Automated property verification for large scale B models with ProB

et al. 2011

Self Cite

View full text Add to dashboard Cite

show abstract

“…We note that the style of state space traversal specified contrasts with that of rmc1 and instead reflects more closely a classical symmetry reduction algorithm, which we used in [7,8]. Therefore, upon encountering an unexplored state (e.g., s1 in add inv ), we compute and store only the unique representatives of its successors that have not yet been checked (rep(s2)); the model checking algorithm will never store two symmetric states, and it has less of a demand for memory.…”

Section: Levelmentioning

confidence: 99%

“…From here, two separate two chains of refinement specify details of algorithms that implement the standard and reduced approaches. The refinement branch for the reduced approach includes rmc1, which reflects the style of model checking we adopted in [6], and rmc2, that reflects the style we used in [7] and [8]. Given that both chains refine the abstract specification, we obtain our desired soundness result.…”

Section: Concludingmentioning

confidence: 99%

“…Previously, we have focused on addressing the state space explosion challenge that faces model checking [6,7,8]. This is where a linear increase in the size of a specification leads to a combinatorial increase in the number of states that the model checker must explore.…”

Section: Introductionmentioning

confidence: 99%

“…Section 4 provides a refinement machine whose behaviour closely models standard model checking in ProB. Next, the refinement in Section 5.1 adheres to our style of symmetry reduction implemented in [6], and Section 5.2 gives a refinement that matches our symmetry reduction strategy used in [7,8]. Finally, we provide a discussion of our work in Section 6.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

A Refinement-Based Correctness Proof of Symmetry Reduced Model Checking

Turner

Butler

Leuschel

2010

Abstract State Machines, Alloy, B and Z

Self Cite

View full text Add to dashboard Cite

Abstract. Symmetry reduction is a model checking technique that can help alleviate the problem of state space explosion, by preventing redundant state space exploration. In previous work, we have developed three effective approaches to symmetry reduction for B that have been implemented into the ProB model checker, and we have proved the soundness of our state symmetries. However, it is also important to show our techniques are sound with respect to standard model checking, at the algorithmic level. In this paper, we present a retrospective B development that addresses this issue through a series of B refinements. This work also demonstrates the valuable insights into a system that can be gained through formal modelling.

show abstract

Interface between SysML and Sequence Planner Language for Formal Verification

Kanthabhabhajeya

Berglund

Falkman

et al. 2013

INCOSE International Symp

View full text Add to dashboard Cite

This paper presents a method and software for interfacing Systems Modeling Language (SysML) and Sequence Planner Language (SPL). Exchange of information between different software tools is of major interest for modern manufacturing industries from early design to final implementation. SysML, with its structure as a common platform, can then be interfaced with other domain-specific modeling tools to achieve information exchange. This paper presents a method to interface SysML with a recently introduced language for operation sequences called Sequence Planner Language (SPL). By this method, necessary information from behavioral constructs of SysML model are extracted and structured in SPL. This language, being a formal, graphical language,can be used to formally verify the system for any blocking states. An academic and an industrial model developed in SysML are tested using the interface implementation and the results show that information from SysML can be visualized in SPL and formally verified to have no blocking states.

show abstract

Symmetry Reduced Model Checking for B

Abstract: Symmetry reduction is

Cited by 16 publications

References 23 publications

Automated property verification for large scale B models with ProB

Automated property verification for large scale B models with ProB

A Refinement-Based Correctness Proof of Symmetry Reduced Model Checking

Interface between SysML and Sequence Planner Language for Formal Verification

Contact Info

Product

Resources

About