Model-based construction and verification of critical systems using composition and partial refinement

Abstract

This article introduces a new model-based method for incrementally constructing critical systems and illustrates its application to the development of fault-tolerant systems. The method relies on a special form of composition to combine software components and a set of proof rules to obtain high confidence of the correctness of the composed system. As in conventional component-based software development, two (or more) components are combined, but in contrast to many component-based approaches used in practice, which combine components consisting of code, our method combines components represented as state machine models. In the first phase of the method, a model is developed of the normal system behavior, and system properties are shown to hold in the model. In the second phase, a model of the required fault-handling behavior is developed and "or-composed" with the original system model to create a fault-tolerant extension which is, by construction, "fully faithful" (every execution possible in the normal system is possible in the fault-tolerant system). To model the fault-handling behavior, the set of states of the normal system model is extended through new state variables and new ranges for some existing state variables, and new fault-handling transitions are defined. Once constructed, the fault-tolerant extension is shown, using a set of property inheritance and compositional proof rules, to satisfy both the overall system properties, typically weakened, and selected fault-tolerance properties. These rules can often be used to verify the properties automatically. To provide a formal foundation for the method, formal notions of or-composition, partial refinement, fault-tolerant extension, and full faithfulness are introduced. To demonstrate and validate the method, we describe its application to a real-world, fault-tolerant avionics system.

Combining Model Refinement and Test Generation for Conformance Testing of the IEEE PHD Protocol Using Abstract State Machines

“…Similarly to ProTest, there are also methods to generate test cases and to test protocol conformance directly from Finite State Machines, such as in [2,6,19], and many of them are included in a survey by Dorofeeva et al [18]. Refinement is often used in combination with formal verification of properties [16,25,36]. In this work, instead, we try to combine refinement and testing.…”

Formal verification approaches in the web service composition: A comprehensive analysis of the current challenges for future research

“…Of course, some specification properties such as liveness, deadlock, and safety have not been applied in this research. Jeffords et al presented a fault‐tolerant‐based service composition approach that is evaluated with a transition‐aware theorem proving method. This research has provided the strong proof definition for figuring out an approach, where a model or potentially code of the fault tolerant framework as of now exists, and the client needs to exhibit that the fault‐tolerant framework fulfills the properties of a completely dedicated fault‐tolerant augmentation.…”