FORMAL METHODS LECTURE V: CTL MODEL CHECKING
|
|
- Emil Woods
- 5 years ago
- Views:
Transcription
1 FORMAL METHODS LECTURE V: CTL MODEL CHECKING Alessandro Artale Faculty of Computer Science Free University of Bolzano Room artale/ Some material (text, figures) displayed in these slides is courtesy of: M. Benerecetti, A. Cimatti, M. Fisher, F. Giunchiglia, M. Pistore, M. Roveri, R.Sebastiani. Alessandro Artale (FM First Semester 2010/2011) p. 1/33
2 Alessandro Artale (FM First Semester 2010/2011) p. 2/33 Summary of Lecture V CTL Model Checking: General Ideas. CTL Model Checking: The Labeling Algorithm. Labeling Algorithm in Details. CTL Model Checking: Theoretical Issues.
3 Alessandro Artale (FM First Semester 2010/2011) p. 3/33 CTL Model Checking CTL Model Checking is a formal verification technique s.t. The system is represented as a Kripke ModelKM: 1 p 4 2 q 3 p The property is expressed as a CTL formula ϕ, e.g.: P (p P q) The algorithm checks whether all the initial states, s 0, of the Kripke model satisfy the formula (KM,s 0 = ϕ).
4 Alessandro Artale (FM First Semester 2010/2011) p. 4/33 CTL M.C. Algorithm: General Ideas The algorithm proceeds along two macro-steps: 1. Construct the set of states where the formula holds: [[ϕ]] := {s S :KM,s = ϕ} ([[ϕ]] is called the denotation of ϕ); 2. Then compare the denotation with the set of initial states: I [[ϕ]]?
5 Alessandro Artale (FM First Semester 2010/2011) p. 5/33 CTL M.C. Algorithm: General Ideas (Cont.) To compute [[ϕ]] proceed bottom-up on the structure of the formula, computing [[ϕ i ]] for each subformula ϕ i of ϕ. For example, to compute [[ P compute: (p P q)]] we need to [[q]], [[ P q]], [[p]], [[p P q]], [[ P (p P q)]]
6 Alessandro Artale (FM First Semester 2010/2011) p. 6/33 CTL M.C. Algorithm: General Ideas (Cont.) To compute each [[ϕ i ]] for generic subformulas: Handle boolean operators by standard set operations; Handle temporal operators P, P by computing pre-images; Handle temporal operators P, P, P, P, P U, P U, by applying fixpoint operators.
7 Alessandro Artale (FM First Semester 2010/2011) p. 7/33 Summary CTL Model Checking: General Ideas. CTL Model Checking: The Labeling Algorithm. Labeling Algorithm in Details. CTL Model Checking: Theoretical Issues.
8 Alessandro Artale (FM First Semester 2010/2011) p. 8/33 The Labeling Algorithm: General Idea The Labeling Algorithm: Input: Kripke Model and a CTL formula; Output: set of states satisfying the formula. Main Idea: Label the states of the Kripke Model with the subformulas of ϕ satisfied there.
9 Alessandro Artale (FM First Semester 2010/2011) p. 9/33 The Labeling Algorithm: An Example 1 p 1 p 4 2 q 4 2 q 3 p 3 p "q" "AF q" P q (q P ( P q)) [[ P q]] can be computed as the union of: [[q]] = {2} [[q P q]] = {2} {1} = {1,2} [[q P (q P q)]] = {2} {1} = {1,2} (fixpoint).
10 Alessandro Artale (FM First Semester 2010/2011) p. 10/33 The Labeling Algorithm: An Example (Cont.) "p" 1 p 4 3 p 2 q 4 1 p 2 q 4 1 p 2 q 3 p "p > AF q" 3 p "AF q"
11 Alessandro Artale (FM First Semester 2010/2011) p. 11/33 The Labeling Algorithm: An Example (Cont.) 1 p 1 p 4 2 q 4 2 q 3 p 3 p "p > AF q" "AG(p > AF q)" P ϕ (ϕ P ( P ϕ)) [[ P ϕ]] can be computed as the intersection of: [[ϕ]] = {1,2,4} [[ϕ P ϕ]] = {1,2,4} {1,3} = {1} [[ϕ P (ϕ P ϕ)]] = {1,2,4} {} = {} (fixpoint)
12 Alessandro Artale (FM First Semester 2010/2011) p. 12/33 The Labeling Algorithm: An Example (Cont.) The set of states where the formula holds is empty, thus: The initial state does not satisfy the property; KM = P (p P q). Counterexample: A lazo-shaped path: 1,2,{3,4} ω (satisfying P (p P q))
13 Alessandro Artale (FM First Semester 2010/2011) p. 13/33 Summary CTL Model Checking: General Ideas. CTL Model Checking: The Labeling Algorithm. Labeling Algorithm in Details. CTL Model Checking: Theoretical Issues.
14 Alessandro Artale (FM First Semester 2010/2011) p. 14/33 The Labeling Algorithm: General Schema Assume ϕ written in terms of,, P, U P, P minimal set of CTL operators The Labeling algorithm takes a CTL formula and a Kripke Model as input and returns the set of states satisfying the formula (i.e., the denotation of ϕ): 1. For every ϕ i Sub(ϕ), find [[ϕ i ]]; 2. Compute [[ϕ]] starting from [[ϕ i ]]; 3. Check if I [[ϕ]]. Subformulas Sub(ϕ) of ϕ are checked bottom-up To compute each [[ϕ i ]]: if the main operator of ϕ i is a Boolean Operator: apply standard set operations; Temporal Operator: apply recursive rules until a fixpoint is reached.
15 Alessandro Artale (FM First Semester 2010/2011) p. 15/33 Denotation of Formulas: The Boolean Case LetKM = S,I,R,L,Σ be a Kripke Model. [[ f alse]] = {} [[true]] = S [[p]] = {s p L(s)} [[ ϕ 1 ]] = S \[[ϕ 1 ]] [[ϕ 1 ϕ 2 ]] = [[ϕ 1 ]] [[ϕ 2 ]]
16 Alessandro Artale (FM First Semester 2010/2011) p. 16/33 Denotation of Formulas: The P Case [[ P ϕ]] = {s S s. s,s R and s [[ϕ]]} [[ P ϕ]] is said to be the Pre-image of [[ϕ]] (PRE([[ϕ]])). Key step of every CTL M.C. operation. PreImage(P) P
17 Alessandro Artale (FM First Semester 2010/2011) p. 17/33 Denotation of Formulas: The P Case From the semantics of the ϕ ϕ ( ϕ) Then, the following equivalence holds: P ϕ ϕ ( P P ϕ) temporal operator: To compute [[ P ϕ]] we can apply the following recursive definition: [[ P ϕ]] = [[ϕ]] PRE([[ P ϕ]])
18 Alessandro Artale (FM First Semester 2010/2011) p. 18/33 Denotation of Formulas: The P Case (Cont We can compute X := [[ P X 1 := [[ϕ]] X 2 := X 1 PRE(X 1 )... X j+1 := X j PRE(X j ) ϕ]] inductively as follows: When X n = X n+1 we reach a fixpoint and we stop. Termination. Since X j+1 X j for every j 0, thus a fixed point always exists (Knaster-Tarski s theorem).
19 Alessandro Artale (FM First Semester 2010/2011) p. 19/33 Denotation of Formulas: The P U Case From the semantics of theu temporal operator: ϕu ψ ψ (ϕ (ϕu ψ)) Then, the following equivalence holds: P (ϕu ψ) ψ (ϕ P P (ϕu ψ)) To compute [[ (ϕu P ψ)]] we can apply the following recursive definition: [[ (ϕu P ψ)]] = [[ψ]] ([[ϕ]] PRE([[ (ϕu P ψ)]]))
20 Alessandro Artale (FM First Semester 2010/2011) p. 20/33 Denotation of Formulas: The P U Case (Cont. We can compute X := [[ (ϕu P ψ)]] inductively as follows: X 1 := [[ψ]] X 2 := X 1 ([[ϕ]] PRE(X 1 ))... X j+1 := X j ([[ϕ]] PRE(X j )) When X n = X n+1 we reach a fixpoint and we stop. Termination. Since X j+1 X j for every j 0, thus a fixed point always exists (Knaster-Tarski s theorem).
21 Alessandro Artale (FM First Semester 2010/2011) p. 21/33 The Pseudo-Code We assume the Kripke Model to be a global variable: FUNCTION Label(ϕ) { case ϕ of true: return S; f alse: return {}; an atom p: return {s S p L(s)}; } ϕ 1 : return S\Label(ϕ 1 ); ϕ 1 ϕ 2 : return Label(ϕ 1 ) Label(ϕ 2 ); P ϕ 1 : return PRE(Label(ϕ 1 )); P (ϕ 1 U ϕ 2 ): return Label_EU(Label(ϕ 1 ),Label(ϕ 2 )); P ϕ 1 : return Label_EG(Label(ϕ 1 )); end case
22 Alessandro Artale (FM First Semester 2010/2011) p. 22/33 PreImage [[ P ϕ]] = PRE([[ϕ]]) = {s S s. s,s R and s [[ϕ]]} FUNCTION PRE([[ϕ]]){ var X; X := {}; for each s [[ϕ]] do for each s S do if s,s R then X := X {s}; return X }
23 Alessandro Artale (FM First Semester 2010/2011) p. 23/33 Label_EG [[ P ϕ]] = [[ϕ]] PRE([[ P ϕ]]) FUNCTION LABEL EG([[ϕ]]){ var X, OLD-X; X := [[ϕ]]; OLD-X := /0; while X OLD-X begin OLD-X := X; X := X PRE(X) end return X }
24 Alessandro Artale (FM First Semester 2010/2011) p. 24/33 Label_EU [[ P (ϕu ψ)]] = [[ψ]] ([[ϕ]] PRE([[ P (ϕu ψ)]])) FUNCTION LABEL EU([[ϕ]],[[ψ]]){ var X, OLD-X; X := [[ψ]]; OLD-X := S; while X OLD-X begin OLD-X := X; X := X ([[ϕ]] PRE(X)) end return X }
25 Alessandro Artale (FM First Semester 2010/2011) p. 25/33 Summary CTL Model Checking: General Ideas. CTL Model Checking: The Labeling Algorithm. Labeling Algorithm in Details. CTL Model Checking: Theoretical Issues.
26 Alessandro Artale (FM First Semester 2010/2011) p. 26/33 Correctness and Termination The Labeling algorithm works recursively on the structure ϕ. For most of the logical constructors the algorithm does the correct things according to the semantics of CTL. To prove that the algorithm is Correct and Terminating we need to prove the correctness and termination of both P and P U operators.
27 Alessandro Artale (FM First Semester 2010/2011) p. 27/33 Monotone Functions and Fixpoints Definition. Let S be a set and F a function, F : 2 S 2 S, then: 1. F is monotone iff X Y then F(X) F(Y); 2. A subset X of S is called a fixpoint of F iff F(X) = X; 3. X is a least fixpoint (LFP) of F, written µx.f(x), iff, for every other fixpoint Y of F, X Y 4. X is a greatest fixpoint (GFP) of F, written νx.f(x), iff, for every other fixpoint Y of F, Y X Example. Let S = {s 0,s 1 } and F(X) = X {s 0 }.
28 Alessandro Artale (FM First Semester 2010/2011) p. 28/33 Knaster-Tarski Theorem Notation: F i (X) means applying F i-times, i.e., F(F(...F(X)...)). Theorem[Knaster-Tarski]. Let S be a finite set with n+1 elements. If F : 2 S 2 S is a monotone function then: 1. µx.f(x) F n+1 (/0); 2. νx.f(x) F n+1 (S). Proof. (See the textbook Logic in CS pg.241)
29 Alessandro Artale (FM First Semester 2010/2011) p. 29/33 Correctness and Termination: P Case The function LABEL EG computes: [[ P ϕ]] = [[ϕ]] PRE([[ P ϕ]]) applying the semantic equivalence: P ϕ ϕ ( P P ϕ) Thus, [[ P ϕ]] is the fixpoint of the function: F(X) = [[ϕ]] PRE(X)
30 Alessandro Artale (FM First Semester 2010/2011) p. 30/33 Correctness and Termination: P Case (Con Theorem. Let F(X) = [[ϕ]] PRE(X), and let S have n+1 elements. Then: 1. F is monotone; 2. [[ P ϕ]] is the greatest fixpoint of F. Proof. (See the textbook Logic in CS pg.242)
31 Alessandro Artale (FM First Semester 2010/2011) p. 31/33 Correctness and Termination: P U Case The function LABEL EU computes: [[ (ϕu P ψ)]] = [[ψ]] ([[ϕ]] PRE([[ (ϕu P ψ)]])) applying the semantic equivalence: P (ϕu ψ) ψ (ϕ P P (ϕu ψ)) Thus, [[ P (ϕu ψ)]] is the fixpoint of the function: F(X) = [[ψ]] ([[ϕ]] PRE(X))
32 Alessandro Artale (FM First Semester 2010/2011) p. 32/33 Correctness and Termination: P U Case (Con Theorem. Let F(X) = [[ψ]] ([[ϕ]] PRE(X)), and let S have n+1 elements. Then: 1. F is monotone; 2. [[ P (ϕu ψ)]] is the least fixpoint of F. Proof. (See the textbook Logic in CS pg.243)
33 Alessandro Artale (FM First Semester 2010/2011) p. 33/33 Summary of Lecture V CTL Model Checking: General Ideas. CTL Model Checking: The Labeling Algorithm. Labeling Algorithm in Details. CTL Model Checking: Theoretical Issues.
Formal Methods Lecture VII Symbolic Model Checking
Formal Methods Lecture VII Symbolic Model Checking Faculty of Computer Science Free University of Bozen-Bolzano artale@inf.unibz.it http://www.inf.unibz.it/ artale/ Academic Year: 2006/07 Some material
More informationFORMAL METHODS LECTURE IV: COMPUTATION TREE LOGIC (CTL)
Alessandro Artale (FM First Semester 2007/2008) p. 1/37 FORMAL METHODS LECTURE IV: COMPUTATION TREE LOGIC (CTL) Alessandro Artale Faculty of Computer Science Free University of Bolzano artale@inf.unibz.it
More informationFORMAL METHODS LECTURE III: LINEAR TEMPORAL LOGIC
Alessandro Artale (FM First Semester 2007/2008) p. 1/39 FORMAL METHODS LECTURE III: LINEAR TEMPORAL LOGIC Alessandro Artale Faculty of Computer Science Free University of Bolzano artale@inf.unibz.it http://www.inf.unibz.it/
More informationSummary. Computation Tree logic Vs. LTL. CTL at a glance. KM,s =! iff for every path " starting at s KM," =! COMPUTATION TREE LOGIC (CTL)
Summary COMPUTATION TREE LOGIC (CTL) Slides by Alessandro Artale http://www.inf.unibz.it/ artale/ Some material (text, figures) displayed in these slides is courtesy of: M. Benerecetti, A. Cimatti, M.
More informationModel Checking Algorithms
Model Checking Algorithms Bow-Yaw Wang Institute of Information Science Academia Sinica, Taiwan November 14, 2018 Bow-Yaw Wang (Academia Sinica) Model Checking Algorithms November 14, 2018 1 / 56 Outline
More informationGerwin Klein, June Andronick, Ramana Kumar S2/2016
COMP4161: Advanced Topics in Software Verification {} Gerwin Klein, June Andronick, Ramana Kumar S2/2016 data61.csiro.au Content Intro & motivation, getting started [1] Foundations & Principles Lambda
More informationFORMAL METHODS LECTURE VI BINARY DECISION DIAGRAMS (BDD S)
Alessandro Artale (FM First Semester 2009/2010) p. 1/38 FORMAL METHODS LECTURE VI BINARY DECISION DIAGRAMS (BDD S) Alessandro Artale Faulty of Computer Siene Free University of Bolzano artale@inf.unibz.it
More informationModel Checking I. What are LTL and CTL? dack. and. dreq. and. q0bar
Model Checking I What are LTL and CTL? q0 or and dack dreq q0bar and 1 View circuit as a transition system (dreq, q0, dack) (dreq, q0, dack ) q0 = dreq and dack = dreq & (q0 + ( q0 & dack)) q0 or and D
More informationModel Checking for the -calculus. Paolo Zuliani , Spring 2011
Model Checking for the -calculus Paolo Zuliani 15-817, Spring 2011 Outline What is the -calculus? Semantics Model Checking algorithms [Other fixpoint theorems] The -calculus A language for describing properties
More informationModel Checking. Temporal Logic. Fifth International Symposium in Programming, volume. of concurrent systems in CESAR. In Proceedings of the
Sérgio Campos, Edmund Why? Advantages: No proofs Fast Counter-examples No problem with partial specifications can easily express many concurrency properties Main Disadvantage: State Explosion Problem Too
More informationA should be R-closed: R(A) A. We would like this to hold because we would like every element that the rules say should be in A to actually be in A.
CS 6110 S18 Lecture 7 Inductive Definitions and Least Fixed Points 1 Set Operators Last time we considered a set of rule instances of the form X 1 X 2... X n, (1) X where X and the X i are members of some
More informationComputation Tree Logic (CTL)
Computation Tree Logic (CTL) Fazle Rabbi University of Oslo, Oslo, Norway Bergen University College, Bergen, Norway fazlr@student.matnat.uio.no, Fazle.Rabbi@hib.no May 30, 2015 Fazle Rabbi et al. (UiO,
More informationTemporal logics and explicit-state model checking. Pierre Wolper Université de Liège
Temporal logics and explicit-state model checking Pierre Wolper Université de Liège 1 Topics to be covered Introducing explicit-state model checking Finite automata on infinite words Temporal Logics and
More informationCS357: CTL Model Checking (two lectures worth) David Dill
CS357: CTL Model Checking (two lectures worth) David Dill 1 CTL CTL = Computation Tree Logic It is a propositional temporal logic temporal logic extended to properties of events over time. CTL is a branching
More informationChapter 6: Computation Tree Logic
Chapter 6: Computation Tree Logic Prof. Ali Movaghar Verification of Reactive Systems Outline We introduce Computation Tree Logic (CTL), a branching temporal logic for specifying system properties. A comparison
More informationComputation Tree Logic
Computation Tree Logic Computation tree logic (CTL) is a branching-time logic that includes the propositional connectives as well as temporal connectives AX, EX, AU, EU, AG, EG, AF, and EF. The syntax
More informationComputation Tree Logic (CTL) & Basic Model Checking Algorithms
Computation Tree Logic (CTL) & Basic Model Checking Algorithms Martin Fränzle Carl von Ossietzky Universität Dpt. of Computing Science Res. Grp. Hybride Systeme Oldenburg, Germany 02917: CTL & Model Checking
More informationTemporal Logic Model Checking
18 Feb, 2009 Thomas Wahl, Oxford University Temporal Logic Model Checking 1 Temporal Logic Model Checking Thomas Wahl Computing Laboratory, Oxford University 18 Feb, 2009 Thomas Wahl, Oxford University
More informationModel Checking with CTL. Presented by Jason Simas
Model Checking with CTL Presented by Jason Simas Model Checking with CTL Based Upon: Logic in Computer Science. Huth and Ryan. 2000. (148-215) Model Checking. Clarke, Grumberg and Peled. 1999. (1-26) Content
More informationCTL Model Checking. Prof. P.H. Schmitt. Formal Systems II. Institut für Theoretische Informatik Fakultät für Informatik Universität Karlsruhe (TH)
CTL Model Checking Prof. P.H. Schmitt Institut für Theoretische Informatik Fakultät für Informatik Universität Karlsruhe (TH) Formal Systems II Prof. P.H. Schmitt CTLMC Summer 2009 1 / 26 Fixed Point Theory
More informationT Reactive Systems: Temporal Logic LTL
Tik-79.186 Reactive Systems 1 T-79.186 Reactive Systems: Temporal Logic LTL Spring 2005, Lecture 4 January 31, 2005 Tik-79.186 Reactive Systems 2 Temporal Logics Temporal logics are currently the most
More informationNPTEL Phase-II Video course on. Design Verification and Test of. Dr. Santosh Biswas Dr. Jatindra Kumar Deka IIT Guwahati
NPTEL Phase-II Video course on Design Verification and Test of Digital VLSI Designs Dr. Santosh Biswas Dr. Jatindra Kumar Deka IIT Guwahati Module IV: Temporal Logic Lecture I: Introduction to formal methods
More informationSemantics and Verification of Software
Semantics and Verification of Software Thomas Noll Software Modeling and Verification Group RWTH Aachen University http://moves.rwth-aachen.de/teaching/ws-1718/sv-sw/ Recap: The Denotational Approach Semantics
More informationTimo Latvala. February 4, 2004
Reactive Systems: Temporal Logic LT L Timo Latvala February 4, 2004 Reactive Systems: Temporal Logic LT L 8-1 Temporal Logics Temporal logics are currently the most widely used specification formalism
More informationModel for reactive systems/software
Temporal Logics CS 5219 Abhik Roychoudhury National University of Singapore The big picture Software/ Sys. to be built (Dream) Properties to Satisfy (caution) Today s lecture System Model (Rough Idea)
More informationLecture Notes on Emptiness Checking, LTL Büchi Automata
15-414: Bug Catching: Automated Program Verification Lecture Notes on Emptiness Checking, LTL Büchi Automata Matt Fredrikson André Platzer Carnegie Mellon University Lecture 18 1 Introduction We ve seen
More informationTemporal Logic. Stavros Tripakis University of California, Berkeley. We have designed a system. We want to check that it is correct.
EE 244: Fundamental Algorithms for System Modeling, Analysis, and Optimization Fall 2016 Temporal logic Stavros Tripakis University of California, Berkeley Stavros Tripakis (UC Berkeley) EE 244, Fall 2016
More informationAn Introduction to Multi-Valued Model Checking
An Introduction to Multi-Valued Model Checking Georgios E. Fainekos Department of CIS University of Pennsylvania http://www.seas.upenn.edu/~fainekos Written Preliminary Examination II 30 th of June, 2005
More informationFixpoint Extensions of Temporal Description Logics
Fixpoint Extensions of Temporal Description Logics Enrico Franconi Faculty of Computer Science Free University of Bozen-Bolzano, Italy franconi@inf.unibz.it David Toman School of Computer Science University
More informationLinear Temporal Logic and Büchi Automata
Linear Temporal Logic and Büchi Automata Yih-Kuen Tsay Department of Information Management National Taiwan University FLOLAC 2009 Yih-Kuen Tsay (SVVRL @ IM.NTU) Linear Temporal Logic and Büchi Automata
More informationExplicit State Model Checking Algorithm for CTL. CSE 814 CTL Explicit-State Model Checking Algorithm
Explicit State Model Checking for CTL 1 CTL Model Checking Problem Given A model describing the behaviors of a system A set of specifications expressed in CTL ically Check that every behavior satisfies
More informationModel Checking I. What are LTL and CTL? dack. and. dreq. and. q0bar
Model Checking I What are LTL and CTL? and dack q0 or D dreq D q0bar and 1 View circuit as a transition system (dreq, q0, dack) (dreq, q0, dack ) q0 = dreq dack = dreq and (q0 or (not q0 and dack)) q0
More informationLecture 16: Computation Tree Logic (CTL)
Lecture 16: Computation Tree Logic (CTL) 1 Programme for the upcoming lectures Introducing CTL Basic Algorithms for CTL CTL and Fairness; computing strongly connected components Basic Decision Diagrams
More informationAlternating-Time Temporal Logic
Alternating-Time Temporal Logic R.Alur, T.Henzinger, O.Kupferman Rafael H. Bordini School of Informatics PUCRS R.Bordini@pucrs.br Logic Club 5th of September, 2013 ATL All the material in this presentation
More informationProbabilistic Model Checking Michaelmas Term Dr. Dave Parker. Department of Computer Science University of Oxford
Probabilistic Model Checking Michaelmas Term 2011 Dr. Dave Parker Department of Computer Science University of Oxford Overview Temporal logic Non-probabilistic temporal logic CTL Probabilistic temporal
More informationOverview. overview / 357
Overview overview6.1 Introduction Modelling parallel systems Linear Time Properties Regular Properties Linear Temporal Logic (LTL) Computation Tree Logic syntax and semantics of CTL expressiveness of CTL
More information3-Valued Abstraction-Refinement
3-Valued Abstraction-Refinement Sharon Shoham Academic College of Tel-Aviv Yaffo 1 Model Checking An efficient procedure that receives: A finite-state model describing a system A temporal logic formula
More informationPartial model checking via abstract interpretation
Partial model checking via abstract interpretation N. De Francesco, G. Lettieri, L. Martini, G. Vaglini Università di Pisa, Dipartimento di Ingegneria dell Informazione, sez. Informatica, Via Diotisalvi
More informationCTL Model checking. 1. finite number of processes, each having a finite number of finite-valued variables. Model-Checking
CTL Model checking Assumptions:. finite number of processes, each having a finite number of finite-valued variables.. finite length of CTL formula Problem:Determine whether formula f 0 is true in a finite
More informationComputation Tree Logic
Computation Tree Logic Hao Zheng Department of Computer Science and Engineering University of South Florida Tampa, FL 33620 Email: zheng@cse.usf.edu Phone: (813)974-4757 Fax: (813)974-5456 Hao Zheng (CSE,
More informationApplied Logic. Lecture 1 - Propositional logic. Marcin Szczuka. Institute of Informatics, The University of Warsaw
Applied Logic Lecture 1 - Propositional logic Marcin Szczuka Institute of Informatics, The University of Warsaw Monographic lecture, Spring semester 2017/2018 Marcin Szczuka (MIMUW) Applied Logic 2018
More informationInductive Definitions and Fixed Points
6. Inductive Definitions and Fixed Points 6.0 6. Inductive Definitions and Fixed Points 6.0 Chapter 6 Overview of Chapter Inductive Definitions and Fixed Points 6. Inductive Definitions and Fixed Points
More informationDouble Header. Model Checking. Model Checking. Overarching Plan. Take-Home Message. Spoiler Space. Topic: (Generic) Model Checking
Double Header Model Checking #1 Two Lectures Model Checking SoftwareModel Checking SLAM and BLAST Flying Boxes It is traditional to describe this stuff (especially SLAM and BLAST) with high-gloss animation
More informationModel checking (III)
Theory and Algorithms Model checking (III) Alternatives andextensions Rafael Ramirez rafael@iua.upf.es Trimester1, Oct2003 Slide 9.1 Logics for reactive systems The are many specification languages for
More informationOn Modal Logics of Partial Recursive Functions
arxiv:cs/0407031v1 [cs.lo] 12 Jul 2004 On Modal Logics of Partial Recursive Functions Pavel Naumov Computer Science Pennsylvania State University Middletown, PA 17057 naumov@psu.edu June 14, 2018 Abstract
More informationReading: Chapter 9.3. Carnegie Mellon
I II Lecture 3 Foundation of Data Flow Analysis Semi-lattice (set of values, meet operator) Transfer functions III Correctness, precision and convergence IV Meaning of Data Flow Solution Reading: Chapter
More informationVerification. Arijit Mondal. Dept. of Computer Science & Engineering Indian Institute of Technology Patna
IIT Patna 1 Verification Arijit Mondal Dept. of Computer Science & Engineering Indian Institute of Technology Patna arijit@iitp.ac.in Introduction The goal of verification To ensure 100% correct in functionality
More informationcse371/mat371 LOGIC Professor Anita Wasilewska Fall 2018
cse371/mat371 LOGIC Professor Anita Wasilewska Fall 2018 Chapter 7 Introduction to Intuitionistic and Modal Logics CHAPTER 7 SLIDES Slides Set 1 Chapter 7 Introduction to Intuitionistic and Modal Logics
More informationPSPACE-completeness of LTL/CTL model checking
PSPACE-completeness of LTL/CTL model checking Peter Lohmann April 10, 2007 Abstract This paper will give a proof for the PSPACE-completeness of LTLsatisfiability and for the PSPACE-completeness of the
More informationLogic: Propositional Logic (Part I)
Logic: Propositional Logic (Part I) Alessandro Artale Free University of Bozen-Bolzano Faculty of Computer Science http://www.inf.unibz.it/ artale Descrete Mathematics and Logic BSc course Thanks to Prof.
More informationAutomata-based Verification - III
CS3172: Advanced Algorithms Automata-based Verification - III Howard Barringer Room KB2.20/22: email: howard.barringer@manchester.ac.uk March 2005 Third Topic Infinite Word Automata Motivation Büchi Automata
More informationLTL and CTL. Lecture Notes by Dhananjay Raju
LTL and CTL Lecture Notes by Dhananjay Raju draju@cs.utexas.edu 1 Linear Temporal Logic: LTL Temporal logics are a convenient way to formalise and verify properties of reactive systems. LTL is an infinite
More informationModel Checking: An Introduction
Model Checking: An Introduction Meeting 3, CSCI 5535, Spring 2013 Announcements Homework 0 ( Preliminaries ) out, due Friday Saturday This Week Dive into research motivating CSCI 5535 Next Week Begin foundations
More informationAn Introduction to Multi Valued Model Checking
An Introduction to Multi Valued Model Checking Georgios E. Fainekos Department of Computer and Information Science University of Pennsylvania, Philadelphia, PA 19104, USA E-mail: fainekos (at) grasp.cis.upenn.edu
More informationModal and temporal logic
Modal and temporal logic N. Bezhanishvili I. Hodkinson C. Kupke Imperial College London 1 / 83 Overview Part II 1 Soundness and completeness. Canonical models. 3 lectures. 2 Finite model property. Filtrations.
More informationModel checking the basic modalities of CTL with Description Logic
Model checking the basic modalities of CTL with Description Logic Shoham Ben-David Richard Trefler Grant Weddell David R. Cheriton School of Computer Science University of Waterloo Abstract. Model checking
More informationMODEL-CHECKING IN DENSE REAL-TIME SHANT HARUTUNIAN
MODEL-CHECKING IN DENSE REAL-TIME SHANT HARUTUNIAN 1. Introduction These slides are for a talk based on the paper Model-Checking in Dense Real- Time, by Rajeev Alur, Costas Courcoubetis, and David Dill.
More informationTemporal Logic. M φ. Outline. Why not standard logic? What is temporal logic? LTL CTL* CTL Fairness. Ralf Huuck. Kripke Structure
Outline Temporal Logic Ralf Huuck Why not standard logic? What is temporal logic? LTL CTL* CTL Fairness Model Checking Problem model, program? M φ satisfies, Implements, refines property, specification
More informationBüchi Automata and Linear Temporal Logic
Büchi Automata and Linear Temporal Logic Joshua D. Guttman Worcester Polytechnic Institute 18 February 2010 Guttman ( WPI ) Büchi & LTL 18 Feb 10 1 / 10 Büchi Automata Definition A Büchi automaton is a
More informationAutomata-based Verification - III
COMP30172: Advanced Algorithms Automata-based Verification - III Howard Barringer Room KB2.20: email: howard.barringer@manchester.ac.uk March 2009 Third Topic Infinite Word Automata Motivation Büchi Automata
More informationLearning to Verify Branching Time Properties
Learning to Verify Branching Time Properties Abhay Vardhan and Mahesh Viswanathan Dept. of Computer Science, Univ. of Illinois at Urbana-Champaign, USA Abstract. We present a new model checking algorithm
More informationSMV the Symbolic Model Verifier. Example: the alternating bit protocol. LTL Linear Time temporal Logic
Model Checking (I) SMV the Symbolic Model Verifier Example: the alternating bit protocol LTL Linear Time temporal Logic CTL Fixed Points Correctness Slide 1 SMV - Symbolic Model Verifier SMV - Symbolic
More informationLecture Notes on Model Checking
Lecture Notes on Model Checking 15-816: Modal Logic André Platzer Lecture 18 March 30, 2010 1 Introduction to This Lecture In this course, we have seen several modal logics and proof calculi to justify
More informationScuola Estiva di Logica, Gargnano, 31 agosto - 6 settembre 2008 LOGIC AT WORK. Formal Verification of Complex Systems via. Symbolic Model Checking
1. Logic at Work c Roberto Sebastiani, 2008 Scuola Estiva di Logica, Gargnano, 31 agosto - 6 settembre 2008 LOGIC AT WORK Formal Verification of Complex Systems via Symbolic Model Checking Roberto Sebastiani
More informationAxioms for Set Theory
Axioms for Set Theory The following is a subset of the Zermelo-Fraenkel axioms for set theory. In this setting, all objects are sets which are denoted by letters, e.g. x, y, X, Y. Equality is logical identity:
More informationMetatheory of Recursive Types
Design Principles of Programming Languages Metatheory of Recursive Types Zhenjiang Hu, Haiyan Zhao, Yingfei Xiong Peking University, Spring Term, 2016 提醒 : 课程项目 6 月 8 日课程项目报告 每组报告 20 分钟, 提问 5 分钟 组队的同学请介绍每名成员的贡献
More informationResource-bounded alternating-time temporal logic
Resource-bounded alternating-time temporal logic Natasha Alechina University of Nottingham Nottingham, UK nza@cs.nott.ac.uk Brian Logan University of Nottingham Nottingham, UK bsl@cs.nott.ac.uk Abdur Rakib
More informationWhat does the partial order "mean"?
What does the partial order "mean"? Domain theory developed by Dana Scott and Gordon Plotkin in the late '60s use partial order to represent (informally): approximates carries more information than better
More informationAutomata on Infinite words and LTL Model Checking
Automata on Infinite words and LTL Model Checking Rodica Condurache Lecture 4 Lecture 4 Automata on Infinite words and LTL Model Checking 1 / 35 Labeled Transition Systems Let AP be the (finite) set of
More informationAutomata-Theoretic Model Checking of Reactive Systems
Automata-Theoretic Model Checking of Reactive Systems Radu Iosif Verimag/CNRS (Grenoble, France) Thanks to Tom Henzinger (IST, Austria), Barbara Jobstmann (CNRS, Grenoble) and Doron Peled (Bar-Ilan University,
More informationLogic Model Checking
Logic Model Checking Lecture Notes 10:18 Caltech 101b.2 January-March 2004 Course Text: The Spin Model Checker: Primer and Reference Manual Addison-Wesley 2003, ISBN 0-321-22862-6, 608 pgs. the assignment
More informationModel Checking & Program Analysis
Model Checking & Program Analysis Markus Müller-Olm Dortmund University Overview Introduction Model Checking Flow Analysis Some Links between MC and FA Conclusion Apology for not giving proper credit to
More informationKRIPKE S THEORY OF TRUTH 1. INTRODUCTION
KRIPKE S THEORY OF TRUTH RICHARD G HECK, JR 1. INTRODUCTION The purpose of this note is to give a simple, easily accessible proof of the existence of the minimal fixed point, and of various maximal fixed
More informationIntroduction to Temporal Logic. The purpose of temporal logics is to specify properties of dynamic systems. These can be either
Introduction to Temporal Logic The purpose of temporal logics is to specify properties of dynamic systems. These can be either Desired properites. Often liveness properties like In every infinite run action
More informationBoolean decision diagrams and SAT-based representations
Boolean decision diagrams and SAT-based representations 4th July 200 So far we have seen Kripke Structures 2 Temporal logics (and their semantics over Kripke structures) 3 Model checking of these structures
More informationThe Knaster-Tarski Fixed Point Theorem for Complete Partial Orders
The Knaster-Tarski Fixed Point Theorem for Complete Partial Orders Stephen Forrest October 31, 2005 Complete Lattices Let (X, ) be a be partially ordered set, and let S X. Then S ( the meet of S ) denotes
More informationCrash course Verification of Finite Automata CTL model-checking
Crash course Verification of Finite Automata CTL model-checking Exercise session - 07.12.2016 Xiaoxi He 1 Reminders Big picture Objective Verify properties over DES models Formal method Absolute guarantee!
More informationReal Analysis. Joe Patten August 12, 2018
Real Analysis Joe Patten August 12, 2018 1 Relations and Functions 1.1 Relations A (binary) relation, R, from set A to set B is a subset of A B. Since R is a subset of A B, it is a set of ordered pairs.
More informationIntroduction to Model Checking
Introduction to Model Checking Fabio Somenzi Department of Electrical, Computer, and Energy Engineering University of Colorado at Boulder July 25, 2009 Outline 1 Introduction 2 Modeling Systems and Properties
More informationBinary Decision Diagrams
Binary Decision Diagrams Literature Some pointers: H.R. Andersen, An Introduction to Binary Decision Diagrams, Lecture notes, Department of Information Technology, IT University of Copenhagen Tools: URL:
More informationPropositional and Predicate Logic - VII
Propositional and Predicate Logic - VII Petr Gregor KTIML MFF UK WS 2015/2016 Petr Gregor (KTIML MFF UK) Propositional and Predicate Logic - VII WS 2015/2016 1 / 11 Theory Validity in a theory A theory
More informationOn the Complexity of the Reflected Logic of Proofs
On the Complexity of the Reflected Logic of Proofs Nikolai V. Krupski Department of Math. Logic and the Theory of Algorithms, Faculty of Mechanics and Mathematics, Moscow State University, Moscow 119899,
More informationMath Fall 2014 Final Exam Solutions
Math 2001-003 Fall 2014 Final Exam Solutions Wednesday, December 17, 2014 Definition 1. The union of two sets X and Y is the set X Y consisting of all objects that are elements of X or of Y. The intersection
More informationProbabilistic Model Checking Michaelmas Term Dr. Dave Parker. Department of Computer Science University of Oxford
Probabilistic Model Checking Michaelmas Term 20 Dr. Dave Parker Department of Computer Science University of Oxford Overview PCTL for MDPs syntax, semantics, examples PCTL model checking next, bounded
More informationAlan Bundy. Automated Reasoning LTL Model Checking
Automated Reasoning LTL Model Checking Alan Bundy Lecture 9, page 1 Introduction So far we have looked at theorem proving Powerful, especially where good sets of rewrite rules or decision procedures have
More informationLöwenheim-Skolem Theorems, Countable Approximations, and L ω. David W. Kueker (Lecture Notes, Fall 2007)
Löwenheim-Skolem Theorems, Countable Approximations, and L ω 0. Introduction David W. Kueker (Lecture Notes, Fall 2007) In its simplest form the Löwenheim-Skolem Theorem for L ω1 ω states that if σ L ω1
More informationThe algorithmic analysis of hybrid system
The algorithmic analysis of hybrid system Authors: R.Alur, C. Courcoubetis etc. Course teacher: Prof. Ugo Buy Xin Li, Huiyong Xiao Nov. 13, 2002 Summary What s a hybrid system? Definition of Hybrid Automaton
More informationModel-Checking Games: from CTL to ATL
Model-Checking Games: from CTL to ATL Sophie Pinchinat May 4, 2007 Introduction - Outline Model checking of CTL is PSPACE-complete Presentation of Martin Lange and Colin Stirling Model Checking Games
More informationTheoretical Foundations of the UML
Theoretical Foundations of the UML Lecture 17+18: A Logic for MSCs Joost-Pieter Katoen Lehrstuhl für Informatik 2 Software Modeling and Verification Group moves.rwth-aachen.de/teaching/ws-1718/fuml/ 5.
More informationRecursion and Intro to Coq
L02-1 Recursion and Intro to Coq Armando Solar Lezama Computer Science and Artificial Intelligence Laboratory M.I.T. With content from Arvind and Adam Chlipala. Used with permission. September 21, 2015
More informationPSL Model Checking and Run-time Verification via Testers
PSL Model Checking and Run-time Verification via Testers Formal Methods 2006 Aleksandr Zaks and Amir Pnueli New York University Introduction Motivation (Why PSL?) A new property specification language,
More informationComp487/587 - Boolean Formulas
Comp487/587 - Boolean Formulas 1 Logic and SAT 1.1 What is a Boolean Formula Logic is a way through which we can analyze and reason about simple or complicated events. In particular, we are interested
More informationGeneralized Strong Preservation by Abstract Interpretation
Generalized Strong Preservation by Abstract Interpretation FRANCESCO RANZATO FRANCESCO TAPPARO Dipartimento di Matematica Pura ed Applicata, Università di Padova Via Belzoni 7, 35131 Padova, Italy francesco.ranzato@unipd.it
More informationIntroduction. Büchi Automata and Model Checking. Outline. Büchi Automata. The simplest computation model for infinite behaviors is the
Introduction Büchi Automata and Model Checking Yih-Kuen Tsay Department of Information Management National Taiwan University FLOLAC 2009 The simplest computation model for finite behaviors is the finite
More informationCS256/Winter 2009 Lecture #1. Zohar Manna. Instructor: Zohar Manna Office hours: by appointment
CS256/Winter 2009 Lecture #1 Zohar Manna FORMAL METHODS FOR REACTIVE SYSTEMS Instructor: Zohar Manna Email: manna@cs.stanford.edu Office hours: by appointment TA: Boyu Wang Email: wangboyu@stanford.edu
More informationGuest lecturer: Mark Reynolds, The University of Western Australia. May 7, 2014
Università degli studi di Udine Laurea Magistrale: Informatica Lectures for April/May 2014 La verifica del software: temporal logic Lecture 03 LTL tableau continued Guest lecturer: Mark Reynolds, The University
More informationIntroduction to Artificial Intelligence Propositional Logic & SAT Solving. UIUC CS 440 / ECE 448 Professor: Eyal Amir Spring Semester 2010
Introduction to Artificial Intelligence Propositional Logic & SAT Solving UIUC CS 440 / ECE 448 Professor: Eyal Amir Spring Semester 2010 Today Representation in Propositional Logic Semantics & Deduction
More informationTecniche di Specifica e di Verifica. Automata-based LTL Model-Checking
Tecniche di Specifica e di Verifica Automata-based LTL Model-Checking Finite state automata A finite state automaton is a tuple A = (Σ,S,S 0,R,F) Σ: set of input symbols S: set of states -- S 0 : set of
More informationSystems Verification. Alessandro Abate. Day 1 January 25, 2016
Systems Verification Alessandro Abate Day 1 January 25, 2016 Outline Course setup Intro to formal verification Models - labelled transition systems Properties as specifications - modal logics Model checking
More information