Journal
FORMAL METHODS IN SYSTEM DESIGN
Volume 32, Issue 3, Pages 175-205Publisher
SPRINGER
DOI: 10.1007/s10703-008-0049-6
Keywords
assume-guarantee reasoning; model checking; labeled transition systems; learning; proof rules; compositional verification; safety properties
Categories
Funding
- EPSRC [EP/E050441/1] Funding Source: UKRI
- Engineering and Physical Sciences Research Council [EP/E050441/1] Funding Source: researchfish
Ask authors/readers for more resources
Assume-guarantee reasoning enables a divide-and-conquer approach to the verification of large systems that checks system components separately while using assumptions about each component's environment. Developing appropriate assumptions used to be a difficult and manual process. Over the past five years, we have developed a framework for performing assume-guarantee verification of systems in an incremental and fully automated fashion. The framework uses an off-the-shelf learning algorithm to compute the assumptions. The assumptions are initially approximate and become more precise by means of counterexamples obtained by model checking components separately. The framework supports different assume-guarantee rules, both symmetric and asymmetric. Moreover, we have recently introduced alphabet refinement, which extends the assumption learning process to also infer assumption alphabets. This refinement technique starts with assumption alphabets that are a subset of the minimal interface between a component and its environment, and adds actions to it as necessary until a given property is shown to hold or to be violated in the system. We have applied the learning framework to a number of case studies that show that compositional verification by learning assumptions can be significantly more scalable than non-compositional verification.
Authors
I am an author on this paper
Click your name to claim this paper and add it to your profile.
Reviews
Recommended
No Data Available