Refinement-oriented models of Stateflow charts
Science of Computer Programming
A tool chain for the automatic generation of circus specifications of simulink diagrams
ABZ'12 Proceedings of the Third international conference on Abstract State Machines, Alloy, B, VDM, and Z
Implementing tactics of refinement in CRefine
SEFM'12 Proceedings of the 10th international conference on Software Engineering and Formal Methods
Safety-critical Java programs from Circus models
Real-Time Systems
Simulink timed models for program verification
Theories of Programming and Formal Methods
| Hi-index | 0.00 |
Control engineers make extensive use of diagrammatic notations; control law diagrams are used in industry every day. Techniques and tools for analysis of these diagrams or their models are plentiful, but verification of their implementations is a challenge that has been taken up by few. We are aware only of approaches that rely on automatic code generation, which is not enough assurance for certification, and often not adequate when tailored hardware components are used. Our work is based on Circus, a notation that combines Z, CSP, and a refinement calculus, and on industrial tools that produce partial Z and CSP models of discrete-time Simulink diagrams. We present a strategy to translate Simulink diagrams to Circus, and a strategy to prove that a parallel Ada implementation refines the Circus specification; we rely on a Circus semantics for the program. By using a combined notation, we provide a specification that considers both functional and behavioural aspects of a large set of diagrams, and support verification of a large number of implementations. We can handle, for instance, arbitrarily large data types and dynamic scheduling.