TTM/PAT: Specifying and Verifying Timed Transition Models

Ostroff, Jonathan S.; Wang, Chen-Wei; Hudon, Simon; Liu, Yang; Sun, Jun

doi:10.1007/978-3-319-05416-2_8

Cited by 1 publication

(2 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We extend the one-step operational semantics of TTMs reported in [6] to support both indexed events (Sec. 2.2) and synchronous events (Sec.…”

Section: Semantics For Indexed and Synchronous Eventsmentioning

confidence: 99%

“…An event can be spontaneous, fair, or timed (i.e., with lower and upper time bounds). In [6], we provided TTMs with a textual syntax, an operational semantics, and an automated tool, including an editor with type checking, a graphical simulator, and a verifier for linear-time temporal logic. So far, TTMs were used to verify that a variety of implementations satisfy their specifications.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Using Indexed and Synchronous Events to Model and Validate Cyber-Physical Systems

Wang

Ostroff

Hudon

2015

Electron. Proc. Theor. Comput. Sci.

Self Cite

View full text Add to dashboard Cite

Timed Transition Models (TTMs) are event-based descriptions for modelling, specifying, and verifying discrete real-time systems. An event can be spontaneous, fair, or timed with specified bounds. TTMs have a textual syntax, an operational semantics, and an automated tool supporting linear-time temporal logic. We extend TTMs and its tool with two novel modelling features for writing high-level specifications: indexed events and synchronous events. Indexed events allow for concise description of behaviour common to a set of actors. The indexing construct allows us to select a specific actor and to specify a temporal property for that actor. We use indexed events to validate the requirements of a train control system. Synchronous events allow developers to decompose simultaneous state updates into actions of separate events. To specify the intended data flow among synchronized actions, we use primed variables to reference the post-state (i.e., one resulted from taking the synchronized actions). The TTM tool automatically infers the data flow from synchronous events, and reports errors on inconsistencies due to circular data flow. We use synchronous events to validate part of the requirements of a nuclear shutdown system. In both case studies, we show how the new notation facilitates the formal validation of system requirements, and use the TTM tool to verify safety, liveness, and real-time properties.

show abstract

“…We extend the one-step operational semantics of TTMs reported in [6] to support both indexed events (Sec. 2.2) and synchronous events (Sec.…”

Section: Semantics For Indexed and Synchronous Eventsmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%