The Experts below are selected from a list of 17172 Experts worldwide ranked by ideXlab platform

Kevin Elphinstone - One of the best experts on this subject based on the ideXlab platform.

  • experience report sel4 formally verifying a high performance microkernel
    International Conference on Functional Programming, 2009
    Co-Authors: Gerwin Klein, Philip Derrin, Kevin Elphinstone
    Abstract:

    We report on our experience using Haskell as an executable Specification language in the formal verification of the seL4 microkernel. The verification connects an abstract Operational Specification in the theorem prover Isabelle/HOL to a C implementation of the microkernel. We describe how this project differs from other efforts, and examine the effect of using Haskell in a large-scale formal verification. The kernel comprises 8,700 lines of C code; the verification more than 150,000 lines of proof script.

  • ICFP - Experience report: seL4: formally verifying a high-performance microkernel
    Proceedings of the 14th ACM SIGPLAN international conference on Functional programming - ICFP '09, 2009
    Co-Authors: Gerwin Klein, Philip Derrin, Kevin Elphinstone
    Abstract:

    We report on our experience using Haskell as an executable Specification language in the formal verification of the seL4 microkernel. The verification connects an abstract Operational Specification in the theorem prover Isabelle/HOL to a C implementation of the microkernel. We describe how this project differs from other efforts, and examine the effect of using Haskell in a large-scale formal verification. The kernel comprises 8,700 lines of C code; the verification more than 150,000 lines of proof script.

Gerwin Klein - One of the best experts on this subject based on the ideXlab platform.

  • experience report sel4 formally verifying a high performance microkernel
    International Conference on Functional Programming, 2009
    Co-Authors: Gerwin Klein, Philip Derrin, Kevin Elphinstone
    Abstract:

    We report on our experience using Haskell as an executable Specification language in the formal verification of the seL4 microkernel. The verification connects an abstract Operational Specification in the theorem prover Isabelle/HOL to a C implementation of the microkernel. We describe how this project differs from other efforts, and examine the effect of using Haskell in a large-scale formal verification. The kernel comprises 8,700 lines of C code; the verification more than 150,000 lines of proof script.

  • ICFP - Experience report: seL4: formally verifying a high-performance microkernel
    Proceedings of the 14th ACM SIGPLAN international conference on Functional programming - ICFP '09, 2009
    Co-Authors: Gerwin Klein, Philip Derrin, Kevin Elphinstone
    Abstract:

    We report on our experience using Haskell as an executable Specification language in the formal verification of the seL4 microkernel. The verification connects an abstract Operational Specification in the theorem prover Isabelle/HOL to a C implementation of the microkernel. We describe how this project differs from other efforts, and examine the effect of using Haskell in a large-scale formal verification. The kernel comprises 8,700 lines of C code; the verification more than 150,000 lines of proof script.

A Sarkar - One of the best experts on this subject based on the ideXlab platform.

  • Integrating Operational Specification and performance modeling for digital-system design
    Current Issues in Electronic Modeling, 1996
    Co-Authors: A Sarkar
    Abstract:

    While evolving from an abstract concept into a detailed implementation, the design of a complex digital system proceeds through different design stages. Due to lack of effective communication of design intent among these stages, errors are introduced in the product. Early detection of such errors is crucial for increasing robustness and reducing design costs of the final product. To facilitate early detection, a design methodology must support model continuity. Model continuity comprises three subproblems: (1) Complementary modeling: modeling different aspects of the system under design in different modeling domains concurrently, (2) Back annotation: incorporating design details obtained during later stages back into the models developed during earlier stages, and (3) Conformance checking: ensuring conformance of models across various design stages. We address the problem of model continuity in the context of reactive systems through the integration of Operational Specification and performance models. Complementary modeling is supported through integrated simulation of the two models. Both models execute concurrently, exchanging data and simulation stimuli with each other. Back annotation is supported through a novel technique, called performance annotation. This technique allows the dynamic incorporation of delay-related information in an implementation-independent manner from a concurrently executing performance model. Finally, conformance checking is performed by a simulation-based algorithm. Similar to the comparison-checking technique found in the context of software design diversity, this algorithm checks the Operational-Specification and performance models by comparing their output sequences against each other. However, we also address situations when the output sequences can be quite different even if the models conform, and prove that the algorithm correctly determines all conformance violations, under certain design assumptions, during a simulation session. Integration of Operational Specification and performance models gives rise to a novel design methodology. Starting from an Operational Specification, the designer proposes an implementation in an incremental and iteratively-refined manner. Using this methodology, we demonstrate how one can validate an implementation against its Specification, remove ambiguities in the original Specification, and obtain very early performance estimates for a system under design.

  • integrating Operational Specification and performance modeling
    Rapid System Prototyping, 1992
    Co-Authors: S Srinivasan, A Sarkar, Ronald Waxman, B Johnson
    Abstract:

    There are two important early stages in the design of complex systems: modeling of the system (Operational) Specification, and modeling of the system performance. A link between operation Specification and performance modeling via VHDL (VHSIC hardware description language) is proposed, and it is shown by an example how the models can be made to interact, yielding a synergy leading to design efficiency and accuracy. The usefulness of such a link is justified by an example. >

  • RSP - Integrating Operational Specification and performance modeling
    [1992 Proceedings] The Third International Workshop on Rapid System Prototyping, 1
    Co-Authors: S Srinivasan, A Sarkar, Ronald Waxman, B Johnson
    Abstract:

    There are two important early stages in the design of complex systems: modeling of the system (Operational) Specification, and modeling of the system performance. A link between operation Specification and performance modeling via VHDL (VHSIC hardware description language) is proposed, and it is shown by an example how the models can be made to interact, yielding a synergy leading to design efficiency and accuracy. The usefulness of such a link is justified by an example. >

  • System design utilizing integrated Specification and performance models
    Proceedings of VHDL International Users Forum, 1
    Co-Authors: A Sarkar, R. Waxman, J.p. Cohoon
    Abstract:

    We discuss bringing two early stages of digital system design-Operational Specification modeling and performance modeling-under the same simulation environment. This unification is possible by integrating the Operational Specification model and the performance model for a given system under design, so that the two models can be simultaneously simulated and analyzed in a synergistic manner. Such an integration enables a novel design methodology that makes Specification modeling an integral part of the design process. >

Ahmed Hadj Kacem - One of the best experts on this subject based on the ideXlab platform.

  • automatic generation of an Operational csp z Specification from an abstract temporal z Specification
    Computer Software and Applications Conference, 2012
    Co-Authors: Thouraya Gouasmi, Amira Regayeg, Ahmed Hadj Kacem
    Abstract:

    Formal methods can be useful in developing distributed systems, in particular when critical applications are being developed. In this context, the purpose of this work is to define an automatic translation from an abstract formal Specification using TemporalZ into an Operational Specification using CSP-Z in order to address the gap between the abstract design languages and their implementation. Our objective consists in, first, to generate a CSP-Z Specification from a Z Specification by defining a list of translation rules. Second, we suggest an extension of these rules in order to take into consideration the specific concepts of a TemporalZ Specification as an integration of Z and LTL. This translation is supported and implemented by the ANTLR tool. Finally, we illustrate this work by translating an air traffic control system which is specified in TemporalZ with the ForMAAD method.

Marco Colombetti - One of the best experts on this subject based on the ideXlab platform.

  • A social approach to communication in multiagent systems
    Lecture Notes in Computer Science, 2004
    Co-Authors: Marco Colombetti, Nicoletta Fornara, Mario Verdicchio
    Abstract:

    This paper aims at defining the semantics of Agent Communication Languages (ACLs) in terms of changes in the social relationships between agents, represented in terms of social commitments. We take commitment to be a primitive concept underlying the social dimension of multiagent systems, and define a basic artificial institution that provides agents with the means to affect the commitment network that binds them to each other. Two different approaches are adopted for the presentation of our proposal: a logical formalization and an Operational Specification.

  • DALT - A Social Approach to Communication in Multiagent Systems
    Declarative Agent Languages and Technologies, 2004
    Co-Authors: Marco Colombetti, Nicoletta Fornara, Mario Verdicchio
    Abstract:

    This paper aims at defining the semantics of Agent Communication Languages (ACLs) in terms of changes in the social relationships between agents, represented in terms of social commitments. We take commitment to be a primitive concept underlying the social dimension of multiagent systems, and define a basic artificial institution that provides agents with the means to affect the commitment network that binds them to each other. Two different approaches are adopted for the presentation of our proposal: a logical formalization and an Operational Specification.

  • Operational Specification of a commitment based agent communication language
    Adaptive Agents and Multi-Agents Systems, 2002
    Co-Authors: Nicoletta Fornara, Marco Colombetti
    Abstract:

    In this paper we propose an Operational method to express the meaning of the messages exchanged among agents that interact in open environments. In an open environment, like for example the Internet, agents are usually designed by different constructors, so it is very important to define the meaning of a standard, widely accepted Agent Communication Language. We express the meaning of messages using the social notion of commitment. Commitments are defined Operationally within an object-oriented paradigm. We give an Operational Specification of the commitment class that includes the concepts of conditional commitment and precommitment. Then we use commitment objects to define the meaning of some interesting speech acts, and give an example of their use in negotiation.

  • AAMAS - Operational Specification of a commitment-based agent communication language
    Proceedings of the first international joint conference on Autonomous agents and multiagent systems part 2 - AAMAS '02, 2002
    Co-Authors: Nicoletta Fornara, Marco Colombetti
    Abstract:

    In this paper we propose an Operational method to express the meaning of the messages exchanged among agents that interact in open environments. In an open environment, like for example the Internet, agents are usually designed by different constructors, so it is very important to define the meaning of a standard, widely accepted Agent Communication Language. We express the meaning of messages using the social notion of commitment. Commitments are defined Operationally within an object-oriented paradigm. We give an Operational Specification of the commitment class that includes the concepts of conditional commitment and precommitment. Then we use commitment objects to define the meaning of some interesting speech acts, and give an example of their use in negotiation.