Automating Formal Proofs for Reactive Systems Daniel Ricketts , - PowerPoint PPT Presentation

Properties Components = Tab | CookieMgr | ... Messages = CookieSet | CookieGet | ... Handlers: When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) When [Tab t] sends CookieGet(c): ...

Properties Components = Tab | CookieMgr | ... Messages = CookieSet | CookieGet | ... Handlers: When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) When [Tab t] sends CookieGet(c): ... Specify allowed behaviors

Properties Components = Tab | CookieMgr | ... Messages = CookieSet | CookieGet | ... Handlers: When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) When [Tab t] sends CookieGet(c): ... Specify allowed behaviors wrt sequence of system calls

Properties Components = Tab | CookieMgr | ... Messages = CookieSet | CookieGet | ... Handlers: When [Tab t] sends CookieSet(c): When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) send(cp, CookieSet(c)) When [Tab t] sends CookieGet(c): ... Specify allowed behaviors wrt sequence of system calls

Properties When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) Specify allowed behaviors wrt sequence of system calls

Properties When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) Specify allowed behaviors wrt sequence of system calls Time

Properties When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) Specify allowed behaviors wrt sequence of system calls Time …

Properties When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) Specify allowed behaviors wrt sequence of system calls Time The system calls so far …

Properties When [Tab t] sends CookieSet(c): [Tab t] sends CookieSet(c) cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) Specify allowed behaviors wrt sequence of system calls Time The system calls so far …

Properties When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) Specify allowed behaviors wrt sequence of system calls Time The system calls so far …

Properties When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) Specify allowed behaviors wrt sequence of system calls Time The system Recv(Tab, CookieSet(c)) calls so far …

Properties When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) Specify allowed behaviors wrt sequence of system calls Time The system Recv(Tab, CookieSet(c)) calls so far …

Properties When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) Specify allowed behaviors wrt sequence of system calls Time The system Recv(Tab, CookieSet(c)) calls so far …

Properties When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) Specify allowed behaviors wrt sequence of system calls Spawn CookieMgr(t.domain) Time The system Recv(Tab, CookieSet(c)) calls so far …

Properties When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) send(cp, CookieSet(c)) Specify allowed behaviors wrt sequence of system calls Spawn CookieMgr(t.domain) Time The system Recv(Tab, CookieSet(c)) calls so far …

Properties When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) Specify allowed behaviors wrt sequence of system calls Spawn CookieMgr(t.domain) Time The system Recv(Tab, CookieSet(c)) calls so far …

Properties When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) Specify allowed behaviors wrt sequence of system calls Send(cp, CookieSet(c)) Spawn CookieMgr(t.domain) Time The system Recv(Tab, CookieSet(c)) calls so far …

Example: Web browser kernel Components = Tab | CookieMgr | ... Messages = CookieSet | CookieGet | ... Handlers: When [Tab t] sends CookieSet(c): When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) send(cp, CookieSet(c)) When [Tab t] sends CookieGet(c): ...

Example: Web browser kernel Components = Tab | CookieMgr | ... Messages = CookieSet | CookieGet | ... Handlers: When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) When [Tab t] sends CookieGet(c): ...

Example: Web browser kernel Specify cookie integrity Components = Tab | CookieMgr | ... Messages = CookieSet | CookieGet | ... Handlers: When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) When [Tab t] sends CookieGet(c): ...

Example: Web browser kernel Components = Tab | CookieMgr | ... Messages = CookieSet | CookieGet | ... Handlers: When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) When [Tab t] sends CookieGet(c): ...

Example: Web browser kernel forall d c, For any domain d and cookie c Components = Tab | CookieMgr | ... Messages = CookieSet | CookieGet | ... Handlers: When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) When [Tab t] sends CookieGet(c): ...

Example: Web browser kernel The kernel sends the cookie forall d c, manager for domain d a cookie c [Send(CookieMgr(d), CookieSet(c))] Components = Tab | CookieMgr | ... Messages = CookieSet | CookieGet | ... Handlers: When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) When [Tab t] sends CookieGet(c): ...

Example: Web browser kernel forall d c, Only if Enables [Send(CookieMgr(d), CookieSet(c))] Components = Tab | CookieMgr | ... Messages = CookieSet | CookieGet | ... Handlers: When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) When [Tab t] sends CookieGet(c): ...

Example: Web browser kernel forall d c, [Recv(Tab(d), CookieSet(c))] Enables [Send(CookieMgr(d), CookieSet(c))] Components = Tab | CookieMgr | ... The kernel already received a Messages = CookieSet | CookieGet | ... cookie c from a tab of domain d Handlers: When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) When [Tab t] sends CookieGet(c): ...

Example: Web browser kernel forall d c, [Recv(Tab(d), CookieSet(c))] Enables [Send(CookieMgr(d), CookieSet(c))] Components = Tab | CookieMgr | ... A Enables B Messages = CookieSet | CookieGet | ... iff every sys call B is preceded by sys call A Handlers: When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) When [Tab t] sends CookieGet(c): ...

Example: Web browser kernel forall d c, [Recv(Tab(d), CookieSet(c))] Enables [Send(CookieMgr(d), CookieSet(c))] Components = Tab | CookieMgr | ... Messages = CookieSet | CookieGet | ... Handlers: When [Tab t] sends CookieSet(c): cp <- find CookieMgr(t.domain) send(cp, CookieSet(c)) When [Tab t] sends CookieGet(c): ...

Automating Formal Proofs for Reactive Systems Daniel Ricketts , - PowerPoint PPT Presentation

Automating Formal Proofs for Reactive Systems Daniel Ricketts , Valentin Robert, Zachary Danger Tatlock Dongseok Jang, Sorin Lerner University of California, San Diego University of Washington Proof Assistant Based Verification Proof

On the Horizontal Dimension of Software Architecture in Formal Specifications of Reactive

Formal proofs, variable binding, and program extraction from proofs Colloquium Logicum 2016 (10

Flexiformality in Proofs: Bridging between Formal and Informal Proofs Michael Kohlhase Professur

03aInductive Definitions CS 3234: Logic and Formal Systems Martin Henz and Aquinas Hobor

Modelling, Specification and Verification of Reactive Systems Introduction to the Course

Diamond: Automating Data Management and Storage for Wide-area, Reactive Applications Irene

Types of Formal Specifications for Assertions Concurrent and Reactive Systems Assertions

Correctness of Program Transformations: Automating Diagram-Based Proofs David Sabel

Welcome to PROOFS! PROOFS: Security Proofs for Embedded Systems Introduction to the fifth

Automating elementary number-theoretic proofs using Gr obner bases John Harrison Intel

Formal Verification and Testing for Formal Verification and Testing for Reactive Systems

Decision Procedures for Automating Termination Proofs Ruzica Piskac, EPFL Thomas Wies, IST

Automating Asymptotics in a Theorem Prover Manuel Eberl Technical University of Munich Formal

Formal Proofs for Global Optimization Templates and Sums of Squares Victor MAGRON

Programming Reactive Systems in Scala: Principles and Abstractions Philipp Haller KTH Royal

Biological Systems Hillel Kugler Faculty of Engineering, Bar-Ilan University, Israel FMCAD20

LightDP: Towards Automating Differential Privacy Proofs Danfeng Zhang Daniel Kifer Penn

GeoProof: A user interface for formal proofs in geometry. Julien Narboux under the supervision

Constructive Logical Characterizations of Bisimilarity for Reactive Probabilistic Systems Marco

Specifying Biological Systems as Reactive Systems: Some Observations Amir Pnueli New York

MathWiki a Web-based Collaborative Authoring Environment for Formal Proofs ICIS colloquium

Formal Proofs of Floating-Point Algorithms John Harrison Intel Corporation SCAN 2010 28th

Cooperative repositories for formal proofs A wiki-based solution Pierre Corbineau and Cezary

Reactive Systems Dave Farley http://www.davefarley.net @davefarley77 Reactive Systems 21st