Reaching Agreement in the Presence of Faults
Journal of the ACM (JACM)
Transparent Environment for Replicated Ravenscar Applications
Ada-Europe '02 Proceedings of the 7th Ada-Europe International Conference on Reliable Software Technologies
Poolpo A Pool of Processors for Process Control Applications
IEEE Transactions on Computers
Carrying goals to newcastle: a tribute to brian randell
Dependable and Historic Computing
| Hi-index | 14.98 |
This paper describes the formal specification and proof methodology employed to demonstrate that the SIFT computer meets its requirements. The hierarchy of design specifications is shown, from very abstract descriptions of system function down to the implementation. The most abstract design specifications are simple and easy to understand, almost all details of the realization having been abstracted out, and can be used to ensure that the system functions reliably and as intended. A succession of lower level specifications refine these specifications into more detailed and more complex views of the system design, culminating in the Pascal implementation. The paper describes the rigorous mechanical proof that the abstract specifications are satisfied by the actual implementation.