X-by-Construction

Beek, Maurice H. ter; Cleophas, Loek; Schaefer, Ina; Watson, Bruce W.

doi:10.1007/978-3-030-03418-4_21

Cited by 9 publications

(3 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…By composing MinE with MaxETrait3, we get a correct implementation of minElement. Note how this verification process supports abstraction: as long as the contracts are compatible, methods can be implemented in different styles by different developers to best meet nonfunctional requirements while preserving the specified observable behavior [tBCSW18]. A completely different implementation of maxElement can be used if it fulfills the specification of the abstract method maxElement in trait MaxETrait1.…”

Section: Traitcbcmentioning

confidence: 99%

Flexible Correct-by-Construction Programming

Runge¹,

Bordis²,

Potanin³

et al. 2023

Logical Methods in Computer Science

View full text Add to dashboard Cite

Correctness-by-Construction (CbC) is an incremental program construction process to construct functionally correct programs. The programs are constructed stepwise along with a specification that is inherently guaranteed to be satisfied. CbC is complex to use without specialized tool support, since it needs a set of predefined refinement rules of fixed granularity which are additional rules on top of the programming language. Each refinement rule introduces a specific programming statement and developers cannot depart from these rules to construct programs. CbC allows to develop software in a structured and incremental way to ensure correctness, but the limited flexibility is a disadvantage of CbC. In this work, we compare classic CbC with CbC-Block and TraitCbC. Both approaches CbC-Block and TraitCbC, are related to CbC, but they have new language constructs that enable a more flexible software construction approach. We provide for both approaches a programming guideline, which similar to CbC, leads to well-structured programs. CbC-Block extends CbC by adding a refinement rule to insert any block of statements. Therefore, we introduce CbC-Block as an extension of CbC. TraitCbC implements correctness-by-construction on the basis of traits with specified methods. We formally introduce TraitCbC and prove soundness of the construction strategy. All three development approaches are qualitatively compared regarding their programming constructs, tool support, and usability to assess which is best suited for certain tasks and developers.

show abstract

Section: Traitcbcmentioning

confidence: 99%

Flexible Correct-by-Construction Programming

Runge¹,

Bordis²,

Potanin³

et al. 2023

Logical Methods in Computer Science

View full text Add to dashboard Cite

show abstract

“…By composing MinE with MaxETrait3, we get a correct implementation of minElement. Note how this verification process supports abstraction: as long as the contracts are compatible, methods can be implemented in different styles by different programmers to best meet non-functional requirements while preserving the specified observable behavior [9]. A completely different implementation of maxElement can be used if it fulfills the specification of the abstract method maxElement in trait MaxETrait1.…”

Section: Incremental Construction Of Maxelementmentioning

confidence: 99%

Traits: Correctness-by-Construction for Free

Runge

Potanin

Thüm

et al. 2022

Formal Techniques for Distributed Objects, Components, and Systems

Self Cite

View full text Add to dashboard Cite

We demonstrate that traits are a natural way to support correctness-by-construction (CbC) in an existing programming language in the presence of traditional post-hoc verification (PhV). With Correctness-by-Construction, programs are constructed incrementally along with a specification that is inherently guaranteed to be satisfied. CbC is complex to use without specialized tool support, since it needs a set of refinement rules of fixed granularity which are additional rules on top of the programming language. In this work, we propose TraitCbC, an incremental program construction procedure that implements correctness-by-construction on the basis of PhV by using traits. TraitCbC enables program construction by trait composition instead of refinement rules. It provides a programming guideline, which similar to CbC should lead to well-structured programs, and allows flexible reuse of verified program building blocks. We introduce TraitCbC formally and prove the soundness of our verification strategy. Additionally, we implement TraitCbC as a proof of concept.

show abstract

“…In the XANDAR project, a holistic toolchain providing such approaches is developed [2]. The strategy employed to achieve this is based on the X-by-Construction (XbC) paradigm, i.e., a "step-wise refinement process from specification to code" [3] that results in systems with guaranteed non-functional properties. The developed toolchain employs a model-based methodology to cover functional correctness as well as real-time, safety, and security requirements.…”

Section: Introductionmentioning

confidence: 99%