Formal verification of real-time data processing of the LHC beam loss monitoring system: a case study

Authors:
Naghmeh Ghafari;Ramana Kumar;Jeff Joyce;Bernd Dehning;Christos Zamantzas
Affiliations:
Critical Systems Labs, Vancouver, BC, Canada;University of Cambridge, Cambridge, UK;Critical Systems Labs, Vancouver, BC, Canada;CERN, Geneva, Switzerland;CERN, Geneva, Switzerland
Venue:
FMICS'11 Proceedings of the 16th international conference on Formal methods for industrial critical systems
Year:
2011

Citing 4
Cited 0

A Symbol Based Algorithm for Hardware Implementation of Cyclic Redundancy Check (CRC)

VIUF '97 Proceedings of the 1997 VHDL International User's Forum (VIUF '97)
Logic for Computable Functions: description of a machine implementation.

Logic for Computable Functions: description of a machine implementation.
A Brief Overview of HOL4

TPHOLs '08 Proceedings of the 21st International Conference on Theorem Proving in Higher Order Logics
A DC-balanced, partitioned-block, 8B/10B transmission code

IBM Journal of Research and Development

Quantified Score

Hi-index	0.00

Visualization

Abstract

We describe a collaborative effort in which the HOL4 theorem prover is being used to formally verify properties of a structure within the Large Hadron Collider (LHC) machine protection system at the European Organization for Nuclear Research (CERN). This structure, known as Successive Running Sums (SRS), generates the primary input to the decision logic that must initiate a critical action by the LHC machine protection system in response to the detection of a dangerous level of beam particle loss. The use of mechanized logical deduction complements an intensive study of the SRS structure using simulation. We are especially interested in using logical deduction to obtain a generic result that will be applicable to variants of the SRS structure. This collaborative effort has individuals with diverse backgrounds ranging from theoretical physics to system safety. The use of a formal method has compelled the stakeholders to clarify intricate details of the SRS structure and behaviour.