Model-checking CSP-Z: strategy, tool support and industrial application

Compositional abstraction of CSP Z processes

“…The simultaneous and synchronised execution of the behavioural and the data parts of a CSP Z specification has been the key point for the development of a model checking strategy [17]: the CSP and the Z parts are translated into pure CSP processes (P CSP and P Z , respectively) that synchronise on all events from the Interface, as formalised by Equation 1.…”

“…Then, Step 2 translates all structures (CSP part, DI and DD subparts) into CSP processes according to the strategy proposed in [17].…”

FDR3 — A Modern Refinement Checker for CSP

“…FDR2 was released in 1996, and has been widely used both within industry and in academia for verifying systems [4,5,6]. It is also used as a verification backend for several other tools including: Casper [7] which verifies security protocols; SVA [8] which can verify simple shared-variable programs; in addition to several industrial tools (e.g.…”

Model checking Object-Z classes: Some experiments with FDR

“…A likely culprit for this time inefficiency, as noted by Mota and Sampaio [11], is the extensive use of set construction to determine valid states of the specification. It is deemed that avoidance of this construct improves the efficiency of model checking Object-Z constructs, and hence a replacement construct -replicated external choice -is trialled as an alternative in the following encoding.…”

“…The first is based on existing work of Fischer and Wehrheim [8] for the integration of Object-Z and CSP called CSP-OZ [7]. The second aims at avoiding the use of certain constructs in the Fischer and Wehrheim approach argued to be inefficient by Mota and Sampaio [11]. In Section 4, we compare the efficiency of the translation schemes via a number of experiments.…”