Dieses Dokuwiki verwendet ein von Anymorphic Webdesign erstelltes Thema.

Lecture 2 : Formal Methods for Middleware verification

  • Date : December, 14th 2010
  • Instructor : A. Ressouche
  • Duration : 4h

There are currently two families of formal methods. These two approaches are complementary.

Proof-based verification

Example : such as B or Z

In proof-based methods, the model is described by means of axioms, properties are theorems to be verified using a theorem prover.

Proof-based techniques allow the analysis of infinite systems. However, the use of a theorem prover is a very difficult and a very technical task that is hard to automate.


  • Abrial, J., “Z: an introduction to formal methods,” Cambridge University Press, 1995.
  • Diller, A., “The B-book,” John Willey & SONS, 1994.


Example : such as Spin or Lustre.

In model checking, the model is expressed using a language from which an exhaustive execution can be computed (this usually requires a mathematically based definition). An “execution engine” produces the exhaustive state space associated to the system as a graph where actions (atomic instructions in the language) relate to states (a given possible value of the system’s context). It is then possible to explore the graph to check if a property is satisfied.

Model checking is dedicated to finite-state systems but modeling and verification can be done using graphical toolkits and most steps can be automated


  • Halbwachs, N., A tutorial of Lustre (1993).

Main Ressources :

Other Ressources :


  • On the Formal Verification of Middleware Behavioral Properties, Jérôme Huguesa, Thomas Vergnauda, Laurent Pauteta, Yann Thierry-Miega, Soheib Baarira, and Fabrice Kordona, Electronic Notes in Theoretical Computer Science, Elsevier editor, Volume 133, 31 May 2005, Pages 139-157, Proceedings of the Ninth International Workshop on Formal Methods for Industrial Critical Systems (FMICS 2004)

Tools :


Software : Lustre V4 / Lesar Distribution

Lustre/Lesar V4 for cygwin

This distribution is experimental.

Requirements :

It requires a recent, fully installed version of the cygwin system for Windows (gcc, g++, tcl/tk etc). Cywin installation

Installation :

Within a cygwin shell, extract the archive (typically in /usr/local). Modify your bashrc file with:

export LUSTRE_INSTALL=/usr/local/lustre export PATH=$LUSTRE_INSTALL/bin:$PATH export MANPATH=$MANPATH:$LUSTRE_INSTALL/man:

windows beta distribution


An overview of NuSMV

NuSMV is a software tool for the formal verification of finite state systems. It has been developed jointly by ITC-IRST and by Carnegie Mellon University.

NuSMV allows to check finite state systems against specifications in the temporal logic CTL. The input language of NuSMV is designed to allow the description of finite state systems that range from completely synchronous to completely asynchronous. The NuSMV language (like the language of SMV) provides for modular hierarchical descriptions and for the definition of reusable components. The basic purpose of the NuSMV language is to describe (using expressions in propositional calculus) the transition relation of a finite Kripke structure. This provides a great deal of flexibility, but at the same time it can introduce danger of inconsistency (for non expert users).

muc_2010_2011_lecture2.txt · Dernière modification: 2010/12/15 10:06 par tigli
Piste: Lecture 2 : Formal Methods for Middleware verification
Dieses Dokuwiki verwendet ein von Anymorphic Webdesign erstelltes Thema.
CC Attribution-Noncommercial-Share Alike 3.0 Unported
www.chimeric.de Valid CSS Driven by DokuWiki do yourself a favour and use a real browser - get firefox!! Recent changes RSS feed Valid XHTML 1.0