Invariants, Frames and Postconditions: A Comparison of the VDM and B Notations

  • Authors:
  • Juan Bicarregui;Brian Ritchie

  • Affiliations:
  • Rutherford Appleton Lab., Oxfordshire, UK;Rutherford Appleton Lab., Oxfordshire, UK

  • Venue:
  • IEEE Transactions on Software Engineering
  • Year:
  • 1995

Quantified Score

Hi-index 0.00

Visualization

Abstract

VDM and B are two 驴model-oriented驴 formal methods. Each gives a notation for the specification of systems as state machines in terms of a set of states with operations defined as relations on that set. Each has a notion of refinement of data and operations based on the principles of reduction of nondeterminism and increase in definedness. This paper makes a comparison of the two notations through an example of a communications protocol previously formalized in [1]. Two abstractions and two reifications of the original specification are given. Particular attention is paid to three areas where the notations differ: the use of postconditions that assume the invariant as opposed to postconditions that enforce it; the explicit 驴framing驴 of operations as opposed to the 驴minimal frame驴 approach; and the use of relational postconditions as opposed to generalized substitutions.