Towards Algorithmic Synthesis of Synchronization for Shared-Memory Concurrent Programs

Size: px
Start display at page:

Download "Towards Algorithmic Synthesis of Synchronization for Shared-Memory Concurrent Programs"

Transcription

1 Towards Algorithmic Synthesis of Synchronization for Shared-Memory Concurrent Programs Roopsha Samanta The University of Texas at Austin July 6, 2012 Roopsha Samanta Algorithmic Synthesis of Synchronization 1 / 20

2 Problem Definition Given a shared-memory concurrent program P, composed of unsynchronized processes P 1,..., P k, and a (branching-time) temporal logic specification φ spec such that P = φ spec, automatically generate synchronized processes P s 1,..., P s k such that P s = φ spec. Roopsha Samanta Algorithmic Synthesis of Synchronization 2 / 20

3 Example P: x : {0, } with x = 1 P 1 P 2 P 1 : L 1 : while(x < 2) L 2 : x := x + 1; L 3 : while true; P 2 : T 1 : while(x > 0) T 2 : x := x 1; T 3 : while true; φ spec : AF(L 3 T 3 (x = 0 x = 2)) Roopsha Samanta Algorithmic Synthesis of Synchronization 3 / 20

4 Example P: x : {0, } with x = 1 P 1 P 2 = φ spec : AF(L 3 T 3 (x = 0 x = 2)) Roopsha Samanta Algorithmic Synthesis of Synchronization 3 / 20

5 Q&A Why shared-memory concurrent programs? Ubiquitous Hard to write Harder to verify Why temporal logic specifications? Why branching-time? Terminating, ongoing programs Safety, liveness Expressivity Why synthesize only the synchronization? Trickiest part Simple specifications, tractable Roopsha Samanta Algorithmic Synthesis of Synchronization 4 / 20

6 Q&A Why shared-memory concurrent programs? Ubiquitous Hard to write Harder to verify Why temporal logic specifications? Why branching-time? Terminating, ongoing programs Safety, liveness Expressivity Why synthesize only the synchronization? Trickiest part Simple specifications, tractable Roopsha Samanta Algorithmic Synthesis of Synchronization 4 / 20

7 Q&A Why shared-memory concurrent programs? Ubiquitous Hard to write Harder to verify Why temporal logic specifications? Why branching-time? Terminating, ongoing programs Safety, liveness Expressivity Why synthesize only the synchronization? Trickiest part Simple specifications, tractable Roopsha Samanta Algorithmic Synthesis of Synchronization 4 / 20

8 Q&A Why shared-memory concurrent programs? Ubiquitous Hard to write Harder to verify Why temporal logic specifications? Why branching-time? Terminating, ongoing programs Safety, liveness Expressivity Why synthesize only the synchronization? Trickiest part Simple specifications, tractable Roopsha Samanta Algorithmic Synthesis of Synchronization 4 / 20

9 A Vocabulary L L-symbols Variable symbols (x) Function, constant symbols (, +, ) Predicate, proposition symbols (L 1, T 3, >, <) Sort symbols (bool, int0to2) Distinguished equality predicate symbol = (Sorted) L-terms and L-atoms: L-term (t): v or f (t 1,..., t m ) (x, 1, x + 1) L-atom(G): B(t 1,..., t m ) or t 1 = t 2 (x > 1, L 1, x = 1) Sorts mapped to nonempty domains (bool {T, F}, int0to2 {0, }) Symbols, terms, atoms mapped to values in appropriate domains. Roopsha Samanta Algorithmic Synthesis of Synchronization 5 / 20

10 A Vocabulary L L-symbols Variable symbols (x) Function, constant symbols (, +, ) Predicate, proposition symbols (L 1, T 3, >, <) Sort symbols (bool, int0to2) Distinguished equality predicate symbol = (Sorted) L-terms and L-atoms: L-term (t): v or f (t 1,..., t m ) (x, 1, x + 1) L-atom(G): B(t 1,..., t m ) or t 1 = t 2 (x > 1, L 1, x = 1) Sorts mapped to nonempty domains (bool {T, F}, int0to2 {0, }) Symbols, terms, atoms mapped to values in appropriate domains. Roopsha Samanta Algorithmic Synthesis of Synchronization 5 / 20

11 (Finite-state) Concurrent Programs over L Syntax: P ::= vardeclaration process process vardeclaration ::= v 1 : domain 1,..., v n : domain n process ::= localvardeclaration body localvardeclaration ::= vardeclaration body ::= labeledstmt ; body labeledstmt labeledstmt ::= LOC: atomicstmt atomicstmt ::= assignment conditiontest goto CCR assignment ::= v:=t conditiontest ::= if G LOC if else, LOC else goto ::= goto LOC CCR ::= G body v,loc ::= L-symbol, t ::= L-term, G ::= L-atom Semantics: Finite-state transition system (S, S 0, R) Roopsha Samanta Algorithmic Synthesis of Synchronization 6 / 20

12 (Finite-state) Concurrent Programs over L Syntax: P ::= vardeclaration process process vardeclaration ::= v 1 : domain 1,..., v n : domain n process ::= localvardeclaration body localvardeclaration ::= vardeclaration body ::= labeledstmt ; body labeledstmt labeledstmt ::= LOC: atomicstmt atomicstmt ::= assignment conditiontest goto CCR assignment ::= v:=t conditiontest ::= if G LOC if else, LOC else goto ::= goto LOC CCR ::= G body v,loc ::= L-symbol, t ::= L-term, G ::= L-atom Semantics: Finite-state transition system (S, S 0, R) Roopsha Samanta Algorithmic Synthesis of Synchronization 6 / 20

13 (Finite-state) Concurrent Programs over L Syntax: P ::= vardeclaration process process vardeclaration ::= v 1 : domain 1,..., v n : domain n process ::= localvardeclaration body localvardeclaration ::= vardeclaration body ::= labeledstmt ; body labeledstmt labeledstmt ::= LOC: atomicstmt atomicstmt ::= assignment conditiontest goto CCR assignment ::= v:=t conditiontest ::= if G LOC if else, LOC else goto ::= goto LOC CCR ::= G body v,loc ::= L-symbol, t ::= L-term, G ::= L-atom Semantics: Finite-state transition system (S, S 0, R) Roopsha Samanta Algorithmic Synthesis of Synchronization 6 / 20

14 (Finite-state) Concurrent Programs over L Syntax: P ::= vardeclaration process process vardeclaration ::= v 1 : domain 1,..., v n : domain n process ::= localvardeclaration body localvardeclaration ::= vardeclaration body ::= labeledstmt ; body labeledstmt labeledstmt ::= LOC: atomicstmt atomicstmt ::= assignment conditiontest goto CCR assignment ::= v:=t conditiontest ::= if G LOC if else, LOC else goto ::= goto LOC CCR ::= G body v,loc ::= L-symbol, t ::= L-term, G ::= L-atom Semantics: Finite-state transition system (S, S 0, R) Roopsha Samanta Algorithmic Synthesis of Synchronization 6 / 20

15 (Finite-state) Concurrent Programs over L Syntax: P ::= vardeclaration process process vardeclaration ::= v 1 : domain 1,..., v n : domain n process ::= localvardeclaration body localvardeclaration ::= vardeclaration body ::= labeledstmt ; body labeledstmt labeledstmt ::= LOC: atomicstmt atomicstmt ::= assignment conditiontest goto CCR assignment ::= v:=t conditiontest ::= if G LOC if else, LOC else goto ::= goto LOC CCR ::= G body v,loc ::= L-symbol, t ::= L-term, G ::= L-atom Semantics: Finite-state transition system (S, S 0, R) Roopsha Samanta Algorithmic Synthesis of Synchronization 6 / 20

16 CTL-like Specifications over L (LCTL) Syntax: φ ::= L-atom φ φ φ EX φ EX i φ A[φ U φ] E[φ U φ] Semantics: Defined from semantics of L-atoms, propositional and temporal operators Roopsha Samanta Algorithmic Synthesis of Synchronization 7 / 20

17 Revisiting Example P: x : {0, } with x = 1 P 1 P 2 P 1 : L 1 : if (x < 2) L 2, L 4 ; L 2 : x := x + 1 ; L 3 : goto L 1 ; L 4 : goto L 4 ; P 2 : T 1 : if (x > 0) T 2, T 4 ; T 2 : x := x 1 ; T 3 : goto T 1 ; T 4 : goto T 4 ; AF(L 4 T 4 (x = 0 x = 2)) Roopsha Samanta Algorithmic Synthesis of Synchronization 8 / 20

18 Synthesis Algorithm Sketch 1 Formulate an LCTL formula φ P for semantics of P. 2 Construct a tableau T φ for φ : φ P φ spec. If T φ is empty, declare specification as unsatisfiable. 3 If T φ is non-empty, extract a model M for φ from it. 4 Decompose M to obtain CCRs to synchronize each process. 5 Compile CCRs into lower level synchronization primitives ([EmeSam2011]) Roopsha Samanta Algorithmic Synthesis of Synchronization 9 / 20

19 Formulation of φ P P: x : {0, } with x = 1 P 1 P 2 P 1 : L 1 : if (x < 2) L 2, L 4 ; L 2 : x := x + 1 ; L 3 : goto L 1 ; L 4 : goto L 4 ; P 2 : T 1 : if (x > 0) T 2, T 4 ; T 2 : x := x 1 ; T 3 : goto T 1 ; T 4 : goto T 4 ; At any step, only one process moves AG(L 1 AX 2 (L 1 ))... Roopsha Samanta Algorithmic Synthesis of Synchronization 10 / 20

20 Formulation of φ P P: x : {0, } with x = 1 P 1 P 2 P 1 : L 1 : if (x < 2) L 2, L 4 ; L 2 : x := x + 1 ; L 3 : goto L 1 ; L 4 : goto L 4 ; P 2 : T 1 : if (x > 0) T 2, T 4 ; T 2 : x := x 1 ; T 3 : goto T 1 ; T 4 : goto T 4 ; A process is always in exactly one of its locations AG(L 1 L 2 L 3 L 4 ) AG(L 1 (L 2 L 3 L 4 ))... Roopsha Samanta Algorithmic Synthesis of Synchronization 10 / 20

21 Formulation of φ P P: x : {0, } with x = 1 P 1 P 2 P 1 : L 1 : if (x < 2) L 2, L 4 ; L 2 : x := x + 1 ; L 3 : goto L 1 ; L 4 : goto L 4 ; P 2 : T 1 : if (x > 0) T 2, T 4 ; T 2 : x := x 1 ; T 3 : goto T 1 ; T 4 : goto T 4 ; Some process always moves. AG(EX true) Roopsha Samanta Algorithmic Synthesis of Synchronization 10 / 20

22 Formulation of φ P P: x : {0, } with x = 1 P 1 P 2 P 1 : L 1 : if (x < 2) L 2, L 4 ; L 2 : x := x + 1 ; L 3 : goto L 1 ; L 4 : goto L 4 ; P 2 : T 1 : if (x > 0) T 2, T 4 ; T 2 : x := x 1 ; T 3 : goto T 1 ; T 4 : goto T 4 ; Initial condition L 1 T 1 x = 1 Roopsha Samanta Algorithmic Synthesis of Synchronization 10 / 20

23 Formulation of φ P P: x : {0, } with x = 1 P 1 P 2 P 1 : L 1 : if (x < 2) L 2, L 4 ; L 2 : x := x + 1 ; L 3 : goto L 1 ; L 4 : goto L 4 ; P 2 : T 1 : if (x > 0) T 2, T 4 ; T 2 : x := x 1 ; T 3 : goto T 1 ; T 4 : goto T 4 ; Local process execution AG((L 1 x < 2) AX 1 (L 2 )) AG((L 1 x 2) AX 1 (L 4 )) AG( c {0,1,2} (L 2 x = c) AX 1 (L 3 x = c + 1)) AG(L 3 AX 1 (L 1 ))... Roopsha Samanta Algorithmic Synthesis of Synchronization 10 / 20

24 Construction of Tableau T φ Tableau basics: Finite, rooted, directed AND/OR graph Nodes labeled with formulas OR-node formulas valid iff formulas in some AND-node succ. valid AND-node formulas valid iff formulas in all OR-node succ. valid Assume ability to evaluate L-atoms and L-terms Algorithm Sketch: Let root node of T φ be OR-node, labeled φ Repeat until no new nodes can be added: Add appropriate AND-node succ. of OR-nodes and OR-node succ. of AND-nodes, merging equivalent nodes Prune inconsistent nodes to get final T φ Roopsha Samanta Algorithmic Synthesis of Synchronization 11 / 20

25 Construction of Tableau T φ Tableau basics: Finite, rooted, directed AND/OR graph Nodes labeled with formulas OR-node formulas valid iff formulas in some AND-node succ. valid AND-node formulas valid iff formulas in all OR-node succ. valid Assume ability to evaluate L-atoms and L-terms Algorithm Sketch: Let root node of T φ be OR-node, labeled φ Repeat until no new nodes can be added: Add appropriate AND-node succ. of OR-nodes and OR-node succ. of AND-nodes, merging equivalent nodes Prune inconsistent nodes to get final T φ Roopsha Samanta Algorithmic Synthesis of Synchronization 11 / 20

26 Construction of Tableau T φ φ spec = AF(L 4 T 4 (x = 0 x = 2)) L 1 T 1 x = 1 EX 1 T EX 2 T (EX 1 T EX 2 T) φ spec Roopsha Samanta Algorithmic Synthesis of Synchronization 12 / 20

27 Construction of Tableau T φ φ spec = AF(L 4 T 4 (x = 0 x = 2)) L 1 T 1 x = 1 EX 1 T EX 2 T (EX 1 T EX 2 T) φ spec L 1 T 1 x = 1 AX 1 L 2 AX 1 T 1 AX 2 T 2 AX 2 L 1 EX 1 T φ spec L 1 T 1 x = 1 AX 1 L 2 AX 1 T 1 AX 2 T 2 AX 2 L 1 EX 1 T EX 2 T φ spec L 1 T 1 x = 1 AX 1 L 2 AX 1 T 1 AX 2 T 2 AX 2 L 1 EX 2 T φ spec Roopsha Samanta Algorithmic Synthesis of Synchronization 12 / 20

28 Construction of Tableau T φ φ spec = AF(L 4 T 4 (x = 0 x = 2)) L 1 T 1 x = 1 EX 1 T EX 2 T (EX 1 T EX 2 T) φ spec L 1 T 1 x = 1 AX 1 L 2 AX 1 T 1 AX 2 T 2 AX 2 L 1 EX 1 T φ spec L 1 T 1 x = 1 AX 1 L 2 AX 1 T 1 AX 2 T 2 AX 2 L 1 EX 1 T EX 2 T φ spec L 1 T 1 x = 1 AX 1 L 2 AX 1 T 1 AX 2 T 2 AX 2 L 1 EX 2 T φ spec L 2 T 1 x = 1 L 1 T 2 x = 1 φ spec φ spec Roopsha Samanta Algorithmic Synthesis of Synchronization 12 / 20

29 Extraction of Model M from T φ Model-fragment: Rooted DAG of AND-nodes in T φ All eventualities in root node fulfilled Identify model fragments rooted at each AND-node of T φ If multiple model fragments, pick one of minimal size Join model fragments to get model Roopsha Samanta Algorithmic Synthesis of Synchronization 13 / 20

30 Extraction of Model M from T φ L 1 T 1 x = L 4 T 1 x = 2 L 1 T 2 x = L 4 T 2 x = 2 L 1 T 1 x = L 2 T 1 x = 1 L 1 T 2 x = L 3 T 1 x = 2 L 2 T 2 x = 1 L 1 T 3 x = 0 L 1 T 1 x = L 2 T 1 x = 0 L 1 T 4 x = L 2 T 4 x = 0 L 4 T 3 x = L 3 T 4 x = 1 L 3 T 2 x = 2 L 2 T 3 x = 0 L 4 T 1 x = 1 L 1 T 4 x = 1 L 4 T 2 x = 1 L 4 T 4 x = 0 L 4 T 4 x = 2 L 2 T 4 x = 1 L 4 T 3 x = 0 L 4 T 1 x = 0 L 1 T 4 x = 2 L 3 T 4 x = 2 Roopsha Samanta Algorithmic Synthesis of Synchronization 14 / 20

31 Obtaining P s 1, Ps 2 from M L 1 T 1 x = L 4 T 1 x = 2 L 1 T 2 x = L 4 T 2 x = 2 L 1 T 1 x = L 2 T 1 x = 1 L 1 T 2 x = L 3 T 1 x = 2 L 2 T 2 x = 1 L 1 T 3 x = 0 L 1 T 1 x = L 2 T 1 x = 0 L 1 T 4 x = L 2 T 4 x = 0 L 4 T 3 x = L 3 T 4 x = 1 L 3 T 2 x = 2 L 2 T 3 x = 0 L 4 T 1 x = L 1 T 4 x = 1 L 4 T 2 x = 1 L 4 T 4 x = 0 L 4 T 4 x = 2 L 2 T 4 x = 1 L 4 T 3 x = 0 L 4 T 1 x = 0 L 1 T 4 x = 2 L 3 T 4 x = 2 Roopsha Samanta Algorithmic Synthesis of Synchronization 15 / 20

32 Obtaining P s 1, Ps 2 from M P: x : {0, } with x = 1 P 1 P 2 P s 1: L 1 : if (x < 2) L 2, L 4 ; L 2 : ((x = 0) (T 1 T 3 )) x := x + 1 ; L 3 : goto L 1 ; L 4 : goto L 4 ; P s 2: T 1 : if (x > 0) T 2, T 4 ; T 2 : ((x = 2) (L 1 L 3 )) x := x 1 ; T 3 : goto T 1 ; T 4 : goto T 4 ; AF(L 4 T 4 (x = 0 x = 2)) Roopsha Samanta Algorithmic Synthesis of Synchronization 15 / 20

33 Assumptions, Correctness, Complexity [Assumptions]: P 1, P 2 are finite-state programs over L All program variables are shared variables, initialized to specific values L-atoms and L-terms can be evaluated [Soundness]: Given unsynchronized processes P 1, P 2 and an LCTL formula φ spec, if the algorithm generates P s, then P s = φ spec. [Completeness]: Given unsynchronized processes P 1, P 2 and an LCTL formula φ spec, the algorithm generates P s such that P s = φ spec if φ = φ spec φ P is satisfiable. [Complexity]: Exponential in the size of φ spec and P variables. Roopsha Samanta Algorithmic Synthesis of Synchronization 16 / 20

34 Assumptions, Correctness, Complexity [Assumptions]: P 1, P 2 are finite-state programs over L All program variables are shared variables, initialized to specific values L-atoms and L-terms can be evaluated [Soundness]: Given unsynchronized processes P 1, P 2 and an LCTL formula φ spec, if the algorithm generates P s, then P s = φ spec. [Completeness]: Given unsynchronized processes P 1, P 2 and an LCTL formula φ spec, the algorithm generates P s such that P s = φ spec if φ = φ spec φ P is satisfiable. [Complexity]: Exponential in the size of φ spec and P variables. Roopsha Samanta Algorithmic Synthesis of Synchronization 16 / 20

35 Assumptions, Correctness, Complexity [Assumptions]: P 1, P 2 are finite-state programs over L All program variables are shared variables, initialized to specific values L-atoms and L-terms can be evaluated [Soundness]: Given unsynchronized processes P 1, P 2 and an LCTL formula φ spec, if the algorithm generates P s, then P s = φ spec. [Completeness]: Given unsynchronized processes P 1, P 2 and an LCTL formula φ spec, the algorithm generates P s such that P s = φ spec if φ = φ spec φ P is satisfiable. [Complexity]: Exponential in the size of φ spec and P variables. Roopsha Samanta Algorithmic Synthesis of Synchronization 16 / 20

36 Uninitialized Variables φ spec = AF(L 4 T 4 (x = 0 x = 2)) L 1 T 1 x = 1 EX 1 T EX 2 T (EX 1 T EX 2 T) φ spec Roopsha Samanta Algorithmic Synthesis of Synchronization 17 / 20

37 Uninitialized Variables φ spec = AF(L 4 T 4 (x = 0 x = 2)) L 1 T 1 x = 1 EX 1 T EX 2 T (EX 1 T EX 2 T) φ spec L 1 T 1 x = 1 AX 1 L 2 AX 1 T 1 AX 2 T 2 AX 2 L 1 EX 1 T φ spec L 1 T 1 x = 1 AX 1 L 2 AX 1 T 1 AX 2 T 2 AX 2 L 1 EX 1 T EX 2 T φ spec 1 2 L 1 T 1 x = 1 AX 1 L 2 AX 1 T 1 AX 2 T 2 AX 2 L 1 EX 2 T φ spec 1 2 L 2 T 1 x = 1 φ spec L 1 T 2 x = 1 φ spec Roopsha Samanta Algorithmic Synthesis of Synchronization 17 / 20

38 Uninitialized Variables φ spec = AF(L 4 T 4 (x = 0 x = 2)) EX(L 1 T 1 x = 0) EX(L 1 T 1 x = 1) EX(L 1 T 1 x = 2) φ spec L 1 T 1 x = 2 EX 1 T EX 2 T (EX 1 T EX 2 T) φ spec L 1 T 1 x = 0 EX 1 T EX 2 T (EX 1 T EX 2 T) φ spec L 1 T 1 x = 1 EX 1 T EX 2 T (EX 1 T EX 2 T) φ spec Roopsha Samanta Algorithmic Synthesis of Synchronization 17 / 20

39 Uninitialized Variables L 1 T 1 x = L 4 T 1 x = 2 L 1 T 2 x = L 4 T 2 x = 2 L 1 T 1 x = L 2 T 1 x = 1 L 1 T 2 x = L 3 T 1 x = 2 L 2 T 2 x = 1 L 1 T 3 x = 0 L 1 T 1 x = L 2 T 1 x = 0 L 1 T 4 x = L 2 T 4 x = 0 L 4 T 3 x = L 3 T 4 x = 1 L 3 T 2 x = 2 L 2 T 3 x = 0 L 4 T 1 x = L 1 T 4 x = 1 L 4 T 2 x = 1 L 4 T 4 x = 0 L 4 T 4 x = 2 L 2 T 4 x = 1 L 4 T 3 x = 0 L 4 T 1 x = 0 L 1 T 4 x = 2 L 3 T 4 x = 2 Roopsha Samanta Algorithmic Synthesis of Synchronization 17 / 20

40 Observability P: x : {0, } with x = 1 P 1 P 2 P s 1: L 1 : if (x < 2) L 2, L 4 ; L 2 : ((x = 0) (T 1 T 3 )) x := x + 1 ; L 3 : goto L 1 ; L 4 : goto L 4 ; P s 2: T 1 : if (x > 0) T 2, T 4 ; T 2 : ((x = 2) (L 1 L 3 )) x := x 1 ; T 3 : goto T 1 ; T 4 : goto T 4 ; AF(L 4 T 4 (x = 0 x = 2)) Roopsha Samanta Algorithmic Synthesis of Synchronization 18 / 20

41 Observability L 1 T 1 x = L 4 T 1 x = 2 L 1 T 2 x = L 4 T 2 x = 2 L 1 T 1 x = L 2 T 1 x = 1 L 1 T 2 x = L 3 T 1 x = 2 L 2 T 2 x = 1 L 1 T 3 x = 0 L 1 T 1 x = L 2 T 1 x = 0 L 1 T 4 x = L 2 T 4 x = 0 L 4 T 3 x = L 3 T 4 x = 1 L 3 T 2 x = 2 L 2 T 3 x = 0 L 4 T 1 x = L 1 T 4 x = 1 L 4 T 2 x = 1 L 4 T 4 x = 0 L 4 T 4 x = 2 L 2 T 4 x = 1 L 4 T 3 x = 0 L 4 T 1 x = 0 L 1 T 4 x = 2 L 3 T 4 x = 2 Roopsha Samanta Algorithmic Synthesis of Synchronization 18 / 20

42 Observability P: x : {0, } with x = 1 t : bool with t = 1 l : bool with l = 1 P 1 P 2 P s 1 : L 1 : if (x < 2) L 2, L 4 ; l := 0 ; L 2 : ((x = 0) (t = 1)) x := x + 1; l := 1 ; L 3 : goto L 1 ; L 4 : goto L 4 ; P s 2 : T 1 : if (x > 0) T 2, T 4 ; t := 0 ; T 2 : ((x = 2) (l = 1)) x := x 1; t := 1 ; T 3 : goto T 1 ; T 4 : goto T 4 ; AF(L 4 T 4 (x = 0 x = 2)) Roopsha Samanta Algorithmic Synthesis of Synchronization 18 / 20

43 Related Work Inference of high-level synchronization, guarded commands: [EC82, VYY09] Synthesis of low-level synchronization for relaxed memory models: [KVV10] Sketching: [S-LRBE05] Open systems [PR89] Roopsha Samanta Algorithmic Synthesis of Synchronization 19 / 20

44 Ongoing Work Efficient tableau construction? Infinite-state programs? Pleasant guards? Other synchronization primitives? Roopsha Samanta Algorithmic Synthesis of Synchronization 20 / 20

Model Checking with CTL. Presented by Jason Simas

Model Checking with CTL. Presented by Jason Simas Model Checking with CTL Presented by Jason Simas Model Checking with CTL Based Upon: Logic in Computer Science. Huth and Ryan. 2000. (148-215) Model Checking. Clarke, Grumberg and Peled. 1999. (1-26) Content

More information

Propositional Logic: Models and Proofs

Propositional Logic: Models and Proofs Propositional Logic: Models and Proofs C. R. Ramakrishnan CSE 505 1 Syntax 2 Model Theory 3 Proof Theory and Resolution Compiled at 11:51 on 2016/11/02 Computing with Logic Propositional Logic CSE 505

More information

Temporal logics and explicit-state model checking. Pierre Wolper Université de Liège

Temporal logics and explicit-state model checking. Pierre Wolper Université de Liège Temporal logics and explicit-state model checking Pierre Wolper Université de Liège 1 Topics to be covered Introducing explicit-state model checking Finite automata on infinite words Temporal Logics and

More information

Robustness Analysis of Networked Systems

Robustness Analysis of Networked Systems Robustness Analysis of Networked Systems Roopsha Samanta The University of Texas at Austin Joint work with Jyotirmoy V. Deshmukh and Swarat Chaudhuri January, 0 Roopsha Samanta Robustness Analysis of Networked

More information

Abstractions and Decision Procedures for Effective Software Model Checking

Abstractions and Decision Procedures for Effective Software Model Checking Abstractions and Decision Procedures for Effective Software Model Checking Prof. Natasha Sharygina The University of Lugano, Carnegie Mellon University Microsoft Summer School, Moscow, July 2011 Lecture

More information

3-Valued Abstraction-Refinement

3-Valued Abstraction-Refinement 3-Valued Abstraction-Refinement Sharon Shoham Academic College of Tel-Aviv Yaffo 1 Model Checking An efficient procedure that receives: A finite-state model describing a system A temporal logic formula

More information

Computation Tree Logic (CTL) & Basic Model Checking Algorithms

Computation Tree Logic (CTL) & Basic Model Checking Algorithms Computation Tree Logic (CTL) & Basic Model Checking Algorithms Martin Fränzle Carl von Ossietzky Universität Dpt. of Computing Science Res. Grp. Hybride Systeme Oldenburg, Germany 02917: CTL & Model Checking

More information

CTL-RP: A Computational Tree Logic Resolution Prover

CTL-RP: A Computational Tree Logic Resolution Prover 1 -RP: A Computational Tree Logic Resolution Prover Lan Zhang a,, Ullrich Hustadt a and Clare Dixon a a Department of Computer Science, University of Liverpool Liverpool, L69 3BX, UK E-mail: {Lan.Zhang,

More information

Models. Lecture 25: Model Checking. Example. Semantics. Meanings with respect to model and path through future...

Models. Lecture 25: Model Checking. Example. Semantics. Meanings with respect to model and path through future... Models Lecture 25: Model Checking CSCI 81 Spring, 2012 Kim Bruce Meanings with respect to model and path through future... M = (S,, L) is a transition system if S is a set of states is a transition relation

More information

An Introduction to Temporal Logics

An Introduction to Temporal Logics An Introduction to Temporal Logics c 2001,2004 M. Lawford Outline Motivation: Dining Philosophers Safety, Liveness, Fairness & Justice Kripke structures, LTS, SELTS, and Paths Linear Temporal Logic Branching

More information

Temporal Logic Model Checking

Temporal Logic Model Checking 18 Feb, 2009 Thomas Wahl, Oxford University Temporal Logic Model Checking 1 Temporal Logic Model Checking Thomas Wahl Computing Laboratory, Oxford University 18 Feb, 2009 Thomas Wahl, Oxford University

More information

Symmetry Reductions. A. Prasad Sistla University Of Illinois at Chicago

Symmetry Reductions. A. Prasad Sistla University Of Illinois at Chicago Symmetry Reductions. A. Prasad Sistla University Of Illinois at Chicago Model-Checking Concurrent PGM Temporal SPEC Model Checker Yes/No Counter Example Approach Build the global state graph Algorithm

More information

Automata-Theoretic Model Checking of Reactive Systems

Automata-Theoretic Model Checking of Reactive Systems Automata-Theoretic Model Checking of Reactive Systems Radu Iosif Verimag/CNRS (Grenoble, France) Thanks to Tom Henzinger (IST, Austria), Barbara Jobstmann (CNRS, Grenoble) and Doron Peled (Bar-Ilan University,

More information

First-Order Logic First-Order Theories. Roopsha Samanta. Partly based on slides by Aaron Bradley and Isil Dillig

First-Order Logic First-Order Theories. Roopsha Samanta. Partly based on slides by Aaron Bradley and Isil Dillig First-Order Logic First-Order Theories Roopsha Samanta Partly based on slides by Aaron Bradley and Isil Dillig Roadmap Review: propositional logic Syntax and semantics of first-order logic (FOL) Semantic

More information

Alternating-Time Temporal Logic

Alternating-Time Temporal Logic Alternating-Time Temporal Logic R.Alur, T.Henzinger, O.Kupferman Rafael H. Bordini School of Informatics PUCRS R.Bordini@pucrs.br Logic Club 5th of September, 2013 ATL All the material in this presentation

More information

Introduction to Temporal Logic. The purpose of temporal logics is to specify properties of dynamic systems. These can be either

Introduction to Temporal Logic. The purpose of temporal logics is to specify properties of dynamic systems. These can be either Introduction to Temporal Logic The purpose of temporal logics is to specify properties of dynamic systems. These can be either Desired properites. Often liveness properties like In every infinite run action

More information

CTL satisfability via tableau A C++ implementation

CTL satisfability via tableau A C++ implementation CTL satisfability via tableau A C++ implementation Nicola Prezza April 30, 2015 Outline 1 Introduction 2 Parsing 3 Data structures 4 Initial sets of labels and edges 5 Cull 6 Examples and benchmarks The

More information

Verification Using Temporal Logic

Verification Using Temporal Logic CMSC 630 February 25, 2015 1 Verification Using Temporal Logic Sources: E.M. Clarke, O. Grumberg and D. Peled. Model Checking. MIT Press, Cambridge, 2000. E.A. Emerson. Temporal and Modal Logic. Chapter

More information

A tableau-based decision procedure for a branching-time interval temporal logic

A tableau-based decision procedure for a branching-time interval temporal logic A tableau-based decision procedure for a branching-time interval temporal logic Davide Bresolin Angelo Montanari Dipartimento di Matematica e Informatica Università degli Studi di Udine {bresolin, montana}@dimi.uniud.it

More information

Lecture 16: Computation Tree Logic (CTL)

Lecture 16: Computation Tree Logic (CTL) Lecture 16: Computation Tree Logic (CTL) 1 Programme for the upcoming lectures Introducing CTL Basic Algorithms for CTL CTL and Fairness; computing strongly connected components Basic Decision Diagrams

More information

Chapter 3: Propositional Calculus: Deductive Systems. September 19, 2008

Chapter 3: Propositional Calculus: Deductive Systems. September 19, 2008 Chapter 3: Propositional Calculus: Deductive Systems September 19, 2008 Outline 1 3.1 Deductive (Proof) System 2 3.2 Gentzen System G 3 3.3 Hilbert System H 4 3.4 Soundness and Completeness; Consistency

More information

Model for reactive systems/software

Model for reactive systems/software Temporal Logics CS 5219 Abhik Roychoudhury National University of Singapore The big picture Software/ Sys. to be built (Dream) Properties to Satisfy (caution) Today s lecture System Model (Rough Idea)

More information

Predicate Calculus - Semantic Tableau (2/2) Moonzoo Kim CS Division of EECS Dept. KAIST

Predicate Calculus - Semantic Tableau (2/2) Moonzoo Kim CS Division of EECS Dept. KAIST Predicate Calculus - Semantic Tableau (2/2) Moonzoo Kim CS Division of EECS Dept. KAIST moonzoo@cs.kaist.ac.kr http://pswlab.kaist.ac.kr/courses/cs402-07 1 Formal construction is explained in two steps

More information

The State Explosion Problem

The State Explosion Problem The State Explosion Problem Martin Kot August 16, 2003 1 Introduction One from main approaches to checking correctness of a concurrent system are state space methods. They are suitable for automatic analysis

More information

arxiv: v2 [cs.lo] 22 Jul 2017

arxiv: v2 [cs.lo] 22 Jul 2017 Tableaux for Policy Synthesis for MDPs with PCTL* Constraints Peter Baumgartner, Sylvie Thiébaux, and Felipe Trevizan Data61/CSIRO and Research School of Computer Science, ANU, Australia Email: first.last@anu.edu.au

More information

Computational Logic. Davide Martinenghi. Spring Free University of Bozen-Bolzano. Computational Logic Davide Martinenghi (1/30)

Computational Logic. Davide Martinenghi. Spring Free University of Bozen-Bolzano. Computational Logic Davide Martinenghi (1/30) Computational Logic Davide Martinenghi Free University of Bozen-Bolzano Spring 2010 Computational Logic Davide Martinenghi (1/30) Propositional Logic - sequent calculus To overcome the problems of natural

More information

Model Checking & Program Analysis

Model Checking & Program Analysis Model Checking & Program Analysis Markus Müller-Olm Dortmund University Overview Introduction Model Checking Flow Analysis Some Links between MC and FA Conclusion Apology for not giving proper credit to

More information

Automated Program Verification and Testing 15414/15614 Fall 2016 Lecture 3: Practical SAT Solving

Automated Program Verification and Testing 15414/15614 Fall 2016 Lecture 3: Practical SAT Solving Automated Program Verification and Testing 15414/15614 Fall 2016 Lecture 3: Practical SAT Solving Matt Fredrikson mfredrik@cs.cmu.edu October 17, 2016 Matt Fredrikson SAT Solving 1 / 36 Review: Propositional

More information

FAIRNESS FOR INFINITE STATE SYSTEMS

FAIRNESS FOR INFINITE STATE SYSTEMS FAIRNESS FOR INFINITE STATE SYSTEMS Heidy Khlaaf University College London 1 FORMAL VERIFICATION Formal verification is the process of establishing whether a system satisfies some requirements (properties),

More information

Computation Tree Logic

Computation Tree Logic Computation Tree Logic Computation tree logic (CTL) is a branching-time logic that includes the propositional connectives as well as temporal connectives AX, EX, AU, EU, AG, EG, AF, and EF. The syntax

More information

Computation Tree Logic (CTL)

Computation Tree Logic (CTL) Computation Tree Logic (CTL) Fazle Rabbi University of Oslo, Oslo, Norway Bergen University College, Bergen, Norway fazlr@student.matnat.uio.no, Fazle.Rabbi@hib.no May 30, 2015 Fazle Rabbi et al. (UiO,

More information

Chapter 4: Computation tree logic

Chapter 4: Computation tree logic INFOF412 Formal verification of computer systems Chapter 4: Computation tree logic Mickael Randour Formal Methods and Verification group Computer Science Department, ULB March 2017 1 CTL: a specification

More information

Propositional Logic. Testing, Quality Assurance, and Maintenance Winter Prof. Arie Gurfinkel

Propositional Logic. Testing, Quality Assurance, and Maintenance Winter Prof. Arie Gurfinkel Propositional Logic Testing, Quality Assurance, and Maintenance Winter 2018 Prof. Arie Gurfinkel References Chpater 1 of Logic for Computer Scientists http://www.springerlink.com/content/978-0-8176-4762-9/

More information

Overview. overview / 357

Overview. overview / 357 Overview overview6.1 Introduction Modelling parallel systems Linear Time Properties Regular Properties Linear Temporal Logic (LTL) Computation Tree Logic syntax and semantics of CTL expressiveness of CTL

More information

Complexity Issues in Automated Addition of Time-Bounded Liveness Properties 1

Complexity Issues in Automated Addition of Time-Bounded Liveness Properties 1 Complexity Issues in Automated Addition of Time-Bounded Liveness Properties 1 Borzoo Bonakdarpour and Sandeep S. Kulkarni Software Engineering and Network Systems Laboratory, Department of Computer Science

More information

Propositional and Predicate Logic - IV

Propositional and Predicate Logic - IV Propositional and Predicate Logic - IV Petr Gregor KTIML MFF UK ZS 2015/2016 Petr Gregor (KTIML MFF UK) Propositional and Predicate Logic - IV ZS 2015/2016 1 / 19 Tableau method (from the previous lecture)

More information

Temporal & Modal Logic. Acronyms. Contents. Temporal Logic Overview Classification PLTL Syntax Semantics Identities. Concurrency Model Checking

Temporal & Modal Logic. Acronyms. Contents. Temporal Logic Overview Classification PLTL Syntax Semantics Identities. Concurrency Model Checking Temporal & Modal Logic E. Allen Emerson Presenter: Aly Farahat 2/12/2009 CS5090 1 Acronyms TL: Temporal Logic BTL: Branching-time Logic LTL: Linear-Time Logic CTL: Computation Tree Logic PLTL: Propositional

More information

T Reactive Systems: Temporal Logic LTL

T Reactive Systems: Temporal Logic LTL Tik-79.186 Reactive Systems 1 T-79.186 Reactive Systems: Temporal Logic LTL Spring 2005, Lecture 4 January 31, 2005 Tik-79.186 Reactive Systems 2 Temporal Logics Temporal logics are currently the most

More information

Deductive Systems. Lecture - 3

Deductive Systems. Lecture - 3 Deductive Systems Lecture - 3 Axiomatic System Axiomatic System (AS) for PL AS is based on the set of only three axioms and one rule of deduction. It is minimal in structure but as powerful as the truth

More information

Predicate Logic - Semantic Tableau

Predicate Logic - Semantic Tableau CS402, Spring 2016 Informal Construction of a Valid Formula Example 1 A valid formula: x(p(x) q(x)) ( xp(x) xq(x)) ( x(p(x) q(x)) ( xp(x) xq(x))) x(p(x) q(x)), ( xp(x) xq(x)) x(p(x) q(x)), xp(x), xq(x)

More information

3 Propositional Logic

3 Propositional Logic 3 Propositional Logic 3.1 Syntax 3.2 Semantics 3.3 Equivalence and Normal Forms 3.4 Proof Procedures 3.5 Properties Propositional Logic (25th October 2007) 1 3.1 Syntax Definition 3.0 An alphabet Σ consists

More information

Linear-time Temporal Logic

Linear-time Temporal Logic Linear-time Temporal Logic Pedro Cabalar Department of Computer Science University of Corunna, SPAIN cabalar@udc.es 2015/2016 P. Cabalar ( Department Linear oftemporal Computer Logic Science University

More information

Synthesis of Designs from Property Specifications

Synthesis of Designs from Property Specifications Synthesis of Designs from Property Specifications Amir Pnueli New York University and Weizmann Institute of Sciences FMCAD 06 San Jose, November, 2006 Joint work with Nir Piterman, Yaniv Sa ar, Research

More information

CTL Model Checking. Wishnu Prasetya.

CTL Model Checking. Wishnu Prasetya. CTL Model Checking Wishnu Prasetya wishnu@cs.uu.nl www.cs.uu.nl/docs/vakken/pv Background Example: verification of web applications à e.g. to prove existence of a path from page A to page B. Use of CTL

More information

First-Order Logic. 1 Syntax. Domain of Discourse. FO Vocabulary. Terms

First-Order Logic. 1 Syntax. Domain of Discourse. FO Vocabulary. Terms First-Order Logic 1 Syntax Domain of Discourse The domain of discourse for first order logic is FO structures or models. A FO structure contains Relations Functions Constants (functions of arity 0) FO

More information

The Underlying Semantics of Transition Systems

The Underlying Semantics of Transition Systems The Underlying Semantics of Transition Systems J. M. Crawford D. M. Goldschlag Technical Report 17 December 1987 Computational Logic Inc. 1717 W. 6th St. Suite 290 Austin, Texas 78703 (512) 322-9951 1

More information

Failure Diagnosis of Discrete Event Systems With Linear-Time Temporal Logic Specifications

Failure Diagnosis of Discrete Event Systems With Linear-Time Temporal Logic Specifications Failure Diagnosis of Discrete Event Systems With Linear-Time Temporal Logic Specifications Shengbing Jiang and Ratnesh Kumar Abstract The paper studies failure diagnosis of discrete event systems with

More information

Propositional and Predicate Logic - VII

Propositional and Predicate Logic - VII Propositional and Predicate Logic - VII Petr Gregor KTIML MFF UK WS 2015/2016 Petr Gregor (KTIML MFF UK) Propositional and Predicate Logic - VII WS 2015/2016 1 / 11 Theory Validity in a theory A theory

More information

Lecture 13: Soundness, Completeness and Compactness

Lecture 13: Soundness, Completeness and Compactness Discrete Mathematics (II) Spring 2017 Lecture 13: Soundness, Completeness and Compactness Lecturer: Yi Li 1 Overview In this lecture, we will prvoe the soundness and completeness of tableau proof system,

More information

Model Checking. Temporal Logic. Fifth International Symposium in Programming, volume. of concurrent systems in CESAR. In Proceedings of the

Model Checking. Temporal Logic. Fifth International Symposium in Programming, volume. of concurrent systems in CESAR. In Proceedings of the Sérgio Campos, Edmund Why? Advantages: No proofs Fast Counter-examples No problem with partial specifications can easily express many concurrency properties Main Disadvantage: State Explosion Problem Too

More information

Model Checking: An Introduction

Model Checking: An Introduction Model Checking: An Introduction Meeting 3, CSCI 5535, Spring 2013 Announcements Homework 0 ( Preliminaries ) out, due Friday Saturday This Week Dive into research motivating CSCI 5535 Next Week Begin foundations

More information

Timo Latvala. February 4, 2004

Timo Latvala. February 4, 2004 Reactive Systems: Temporal Logic LT L Timo Latvala February 4, 2004 Reactive Systems: Temporal Logic LT L 8-1 Temporal Logics Temporal logics are currently the most widely used specification formalism

More information

Classical First-Order Logic

Classical First-Order Logic Classical First-Order Logic Software Formal Verification Maria João Frade Departmento de Informática Universidade do Minho 2008/2009 Maria João Frade (DI-UM) First-Order Logic (Classical) MFES 2008/09

More information

Advanced Topics in LP and FP

Advanced Topics in LP and FP Lecture 1: Prolog and Summary of this lecture 1 Introduction to Prolog 2 3 Truth value evaluation 4 Prolog Logic programming language Introduction to Prolog Introduced in the 1970s Program = collection

More information

Tableau-based decision procedures for the logics of subinterval structures over dense orderings

Tableau-based decision procedures for the logics of subinterval structures over dense orderings Tableau-based decision procedures for the logics of subinterval structures over dense orderings Davide Bresolin 1, Valentin Goranko 2, Angelo Montanari 3, and Pietro Sala 3 1 Department of Computer Science,

More information

Linear Temporal Logic and Büchi Automata

Linear Temporal Logic and Büchi Automata Linear Temporal Logic and Büchi Automata Yih-Kuen Tsay Department of Information Management National Taiwan University FLOLAC 2009 Yih-Kuen Tsay (SVVRL @ IM.NTU) Linear Temporal Logic and Büchi Automata

More information

SFM-11:CONNECT Summer School, Bertinoro, June 2011

SFM-11:CONNECT Summer School, Bertinoro, June 2011 SFM-:CONNECT Summer School, Bertinoro, June 20 EU-FP7: CONNECT LSCITS/PSS VERIWARE Part 3 Markov decision processes Overview Lectures and 2: Introduction 2 Discrete-time Markov chains 3 Markov decision

More information

Pairing Transitive Closure and Reduction to Efficiently Reason about Partially Ordered Events

Pairing Transitive Closure and Reduction to Efficiently Reason about Partially Ordered Events Pairing Transitive Closure and Reduction to Efficiently Reason about Partially Ordered Events Massimo Franceschet Angelo Montanari Dipartimento di Matematica e Informatica, Università di Udine Via delle

More information

MODEL CHECKING. Arie Gurfinkel

MODEL CHECKING. Arie Gurfinkel 1 MODEL CHECKING Arie Gurfinkel 2 Overview Kripke structures as models of computation CTL, LTL and property patterns CTL model-checking and counterexample generation State of the Art Model-Checkers 3 SW/HW

More information

Computer-Aided Program Design

Computer-Aided Program Design Computer-Aided Program Design Spring 2015, Rice University Unit 3 Swarat Chaudhuri February 5, 2015 Temporal logic Propositional logic is a good language for describing properties of program states. However,

More information

Helsinki University of Technology Laboratory for Theoretical Computer Science Research Reports 66

Helsinki University of Technology Laboratory for Theoretical Computer Science Research Reports 66 Helsinki University of Technology Laboratory for Theoretical Computer Science Research Reports 66 Teknillisen korkeakoulun tietojenkäsittelyteorian laboratorion tutkimusraportti 66 Espoo 2000 HUT-TCS-A66

More information

Alternating Time Temporal Logics*

Alternating Time Temporal Logics* Alternating Time Temporal Logics* Sophie Pinchinat Visiting Research Fellow at RSISE Marie Curie Outgoing International Fellowship * @article{alur2002, title={alternating-time Temporal Logic}, author={alur,

More information

Temporal Logic. M φ. Outline. Why not standard logic? What is temporal logic? LTL CTL* CTL Fairness. Ralf Huuck. Kripke Structure

Temporal Logic. M φ. Outline. Why not standard logic? What is temporal logic? LTL CTL* CTL Fairness. Ralf Huuck. Kripke Structure Outline Temporal Logic Ralf Huuck Why not standard logic? What is temporal logic? LTL CTL* CTL Fairness Model Checking Problem model, program? M φ satisfies, Implements, refines property, specification

More information

Knowledge base (KB) = set of sentences in a formal language Declarative approach to building an agent (or other system):

Knowledge base (KB) = set of sentences in a formal language Declarative approach to building an agent (or other system): Logic Knowledge-based agents Inference engine Knowledge base Domain-independent algorithms Domain-specific content Knowledge base (KB) = set of sentences in a formal language Declarative approach to building

More information

First-Order Predicate Logic. Basics

First-Order Predicate Logic. Basics First-Order Predicate Logic Basics 1 Syntax of predicate logic: terms A variable is a symbol of the form x i where i = 1, 2, 3.... A function symbol is of the form fi k where i = 1, 2, 3... und k = 0,

More information

From Liveness to Promptness

From Liveness to Promptness From Liveness to Promptness Orna Kupferman Hebrew University Nir Piterman EPFL Moshe Y. Vardi Rice University Abstract Liveness temporal properties state that something good eventually happens, e.g., every

More information

Chapter 6: Computation Tree Logic

Chapter 6: Computation Tree Logic Chapter 6: Computation Tree Logic Prof. Ali Movaghar Verification of Reactive Systems Outline We introduce Computation Tree Logic (CTL), a branching temporal logic for specifying system properties. A comparison

More information

KE/Tableaux. What is it for?

KE/Tableaux. What is it for? CS3UR: utomated Reasoning 2002 The term Tableaux refers to a family of deduction methods for different logics. We start by introducing one of them: non-free-variable KE for classical FOL What is it for?

More information

Introduction to Logic in Computer Science: Autumn 2006

Introduction to Logic in Computer Science: Autumn 2006 Introduction to Logic in Computer Science: Autumn 2006 Ulle Endriss Institute for Logic, Language and Computation University of Amsterdam Ulle Endriss 1 Plan for Today Today s class will be an introduction

More information

Propositional Dynamic Logic

Propositional Dynamic Logic Propositional Dynamic Logic Contents 1 Introduction 1 2 Syntax and Semantics 2 2.1 Syntax................................. 2 2.2 Semantics............................... 2 3 Hilbert-style axiom system

More information

Modal and Temporal Logics

Modal and Temporal Logics Modal and Temporal Logics Colin Stirling School of Informatics University of Edinburgh July 23, 2003 Why modal and temporal logics? 1 Computational System Modal and temporal logics Operational semantics

More information

Automata-based Verification - III

Automata-based Verification - III CS3172: Advanced Algorithms Automata-based Verification - III Howard Barringer Room KB2.20/22: email: howard.barringer@manchester.ac.uk March 2005 Third Topic Infinite Word Automata Motivation Büchi Automata

More information

First-order resolution for CTL

First-order resolution for CTL First-order resolution for Lan Zhang, Ullrich Hustadt and Clare Dixon Department of Computer Science, University of Liverpool Liverpool, L69 3BX, UK {Lan.Zhang, U.Hustadt, CLDixon}@liverpool.ac.uk Abstract

More information

Fuzzy Description Logics

Fuzzy Description Logics Fuzzy Description Logics 1. Introduction to Description Logics Rafael Peñaloza Rende, January 2016 Literature Description Logics Baader, Calvanese, McGuinness, Nardi, Patel-Schneider (eds.) The Description

More information

A Tableau-Based Decision Procedure for Right Propositional Neighborhood Logic (RPNL )

A Tableau-Based Decision Procedure for Right Propositional Neighborhood Logic (RPNL ) A Tableau-Based Decision Procedure for Right Propositional Neighborhood Logic (RPNL ) Davide Bresolin Angelo Montanari Dipartimento di Matematica e Informatica Università degli Studi di Udine {bresolin,

More information

Propositional Calculus - Semantics (3/3) Moonzoo Kim CS Dept. KAIST

Propositional Calculus - Semantics (3/3) Moonzoo Kim CS Dept. KAIST Propositional Calculus - Semantics (3/3) Moonzoo Kim CS Dept. KAIST moonzoo@cs.kaist.ac.kr 1 Overview 2.1 Boolean operators 2.2 Propositional formulas 2.3 Interpretations 2.4 Logical Equivalence and substitution

More information

Finite-State Model Checking

Finite-State Model Checking EECS 219C: Computer-Aided Verification Intro. to Model Checking: Models and Properties Sanjit A. Seshia EECS, UC Berkeley Finite-State Model Checking G(p X q) Temporal logic q p FSM Model Checker Yes,

More information

Simply Typed Lambda Calculus

Simply Typed Lambda Calculus Simply Typed Lambda Calculus Language (ver1) Lambda calculus with boolean values t ::= x variable x : T.t abstraction tt application true false boolean values if ttt conditional expression Values v ::=

More information

Preliminaries. Introduction to EF-games. Inexpressivity results for first-order logic. Normal forms for first-order logic

Preliminaries. Introduction to EF-games. Inexpressivity results for first-order logic. Normal forms for first-order logic Introduction to EF-games Inexpressivity results for first-order logic Normal forms for first-order logic Algorithms and complexity for specific classes of structures General complexity bounds Preliminaries

More information

Semi-Automatic Distributed Synthesis

Semi-Automatic Distributed Synthesis Semi-Automatic Distributed Synthesis Bernd Finkbeiner and Sven Schewe Universität des Saarlandes, 66123 Saarbrücken, Germany {finkbeiner schewe}@cs.uni-sb.de Abstract. We propose a sound and complete compositional

More information

Propositional Logic Language

Propositional Logic Language Propositional Logic Language A logic consists of: an alphabet A, a language L, i.e., a set of formulas, and a binary relation = between a set of formulas and a formula. An alphabet A consists of a finite

More information

Model checking for LTL (= satisfiability over a finite-state program)

Model checking for LTL (= satisfiability over a finite-state program) Model checking for LTL (= satisfiability over a finite-state program) Angelo Montanari Department of Mathematics and Computer Science, University of Udine, Italy angelo.montanari@uniud.it Gargnano, August

More information

Computation Tree Logic

Computation Tree Logic Chapter 6 Computation Tree Logic Pnueli [88] has introduced linear temporal logic to the computer science community for the specification and verification of reactive systems. In Chapter 3 we have treated

More information

Reasoning About Imperative Programs. COS 441 Slides 10b

Reasoning About Imperative Programs. COS 441 Slides 10b Reasoning About Imperative Programs COS 441 Slides 10b Last time Hoare Logic: { P } C { Q } Agenda If P is true in the initial state s. And C in state s evaluates to s. Then Q must be true in s. Program

More information

Program Analysis Part I : Sequential Programs

Program Analysis Part I : Sequential Programs Program Analysis Part I : Sequential Programs IN5170/IN9170 Models of concurrency Program Analysis, lecture 5 Fall 2018 26. 9. 2018 2 / 44 Program correctness Is my program correct? Central question for

More information

Temporal Logic. Stavros Tripakis University of California, Berkeley. We have designed a system. We want to check that it is correct.

Temporal Logic. Stavros Tripakis University of California, Berkeley. We have designed a system. We want to check that it is correct. EE 244: Fundamental Algorithms for System Modeling, Analysis, and Optimization Fall 2016 Temporal logic Stavros Tripakis University of California, Berkeley Stavros Tripakis (UC Berkeley) EE 244, Fall 2016

More information

Mathematical Logics. 12. Soundness and Completeness of tableaux reasoning in first order logic. Luciano Serafini

Mathematical Logics. 12. Soundness and Completeness of tableaux reasoning in first order logic. Luciano Serafini 12. Soundness and Completeness of tableaux reasoning in first order logic Fondazione Bruno Kessler, Trento, Italy November 14, 2013 Example of tableaux Example Consider the following formulas: (a) xyz(p(x,

More information

Pairing Transitive Closure and Reduction to Efficiently Reason about Partially Ordered Events

Pairing Transitive Closure and Reduction to Efficiently Reason about Partially Ordered Events Pairing Transitive Closure and Reduction to Efficiently Reason about Partially Ordered Events Massimo Franceschet Angelo Montanari Dipartimento di Matematica e Informatica, Università di Udine Via delle

More information

Model checking the basic modalities of CTL with Description Logic

Model checking the basic modalities of CTL with Description Logic Model checking the basic modalities of CTL with Description Logic Shoham Ben-David Richard Trefler Grant Weddell David R. Cheriton School of Computer Science University of Waterloo Abstract. Model checking

More information

Propositional and Predicate Logic - V

Propositional and Predicate Logic - V Propositional and Predicate Logic - V Petr Gregor KTIML MFF UK WS 2016/2017 Petr Gregor (KTIML MFF UK) Propositional and Predicate Logic - V WS 2016/2017 1 / 21 Formal proof systems Hilbert s calculus

More information

CS357: CTL Model Checking (two lectures worth) David Dill

CS357: CTL Model Checking (two lectures worth) David Dill CS357: CTL Model Checking (two lectures worth) David Dill 1 CTL CTL = Computation Tree Logic It is a propositional temporal logic temporal logic extended to properties of events over time. CTL is a branching

More information

Description Logics. Foundations of Propositional Logic. franconi. Enrico Franconi

Description Logics. Foundations of Propositional Logic.   franconi. Enrico Franconi (1/27) Description Logics Foundations of Propositional Logic Enrico Franconi franconi@cs.man.ac.uk http://www.cs.man.ac.uk/ franconi Department of Computer Science, University of Manchester (2/27) Knowledge

More information

Propositional Calculus - Deductive Systems

Propositional Calculus - Deductive Systems Propositional Calculus - Deductive Systems Moonzoo Kim CS Division of EECS Dept. KAIST moonzoo@cs.kaist.ac.kr http://pswlab.kaist.ac.kr/courses/cs402-07 1 Deductive proofs (1/3) Suppose we want to know

More information

Automata-based Verification - III

Automata-based Verification - III COMP30172: Advanced Algorithms Automata-based Verification - III Howard Barringer Room KB2.20: email: howard.barringer@manchester.ac.uk March 2009 Third Topic Infinite Word Automata Motivation Büchi Automata

More information

Temporal Logic - Soundness and Completeness of L

Temporal Logic - Soundness and Completeness of L Temporal Logic - Soundness and Completeness of L CS402, Spring 2018 Soundness Theorem 1 (14.12) Let A be an LTL formula. If L A, then A. Proof. We need to prove the axioms and two inference rules to be

More information

Automated Reasoning Lecture 5: First-Order Logic

Automated Reasoning Lecture 5: First-Order Logic Automated Reasoning Lecture 5: First-Order Logic Jacques Fleuriot jdf@inf.ac.uk Recap Over the last three lectures, we have looked at: Propositional logic, semantics and proof systems Doing propositional

More information

Guest lecturer: Mark Reynolds, The University of Western Australia. May 7, 2014

Guest lecturer: Mark Reynolds, The University of Western Australia. May 7, 2014 Università degli studi di Udine Laurea Magistrale: Informatica Lectures for April/May 2014 La verifica del software: temporal logic Lecture 03 LTL tableau continued Guest lecturer: Mark Reynolds, The University

More information

Overview. Discrete Event Systems Verification of Finite Automata. What can finite automata be used for? What can finite automata be used for?

Overview. Discrete Event Systems Verification of Finite Automata. What can finite automata be used for? What can finite automata be used for? Computer Engineering and Networks Overview Discrete Event Systems Verification of Finite Automata Lothar Thiele Introduction Binary Decision Diagrams Representation of Boolean Functions Comparing two circuits

More information

Guest lecturer: Mark Reynolds, The University of Western Australia

Guest lecturer: Mark Reynolds, The University of Western Australia Università degli studi di Udine Laurea Magistrale: Informatica Lectures for April/May 2014 La verifica del software: temporal logic Lecture 05 CTL Satisfiability via tableau Guest lecturer: Mark Reynolds,

More information

On the Expressiveness and Complexity of ATL

On the Expressiveness and Complexity of ATL On the Expressiveness and Complexity of ATL François Laroussinie, Nicolas Markey, Ghassan Oreiby LSV, CNRS & ENS-Cachan Recherches en vérification automatique March 14, 2006 Overview of CTL CTL A Kripke

More information