The object constraint language: precise modeling with UML
The object constraint language: precise modeling with UML
Verifying Time Partitioning in the DEOS Scheduling Kernel
Formal Methods in System Design
Partial Verification of Software Components: Heuristics for Environment Construction
EUROMICRO '07 Proceedings of the 33rd EUROMICRO Conference on Software Engineering and Advanced Applications
Model Checking Multi-Task Software on Real-Time Operating Systems
ISORC '08 Proceedings of the 2008 11th IEEE Symposium on Object Oriented Real-Time Distributed Computing
Spin model checker, the: primer and reference manual
Spin model checker, the: primer and reference manual
Verification of UML/OCL Class Diagrams using Constraint Programming
ICSTW '08 Proceedings of the 2008 IEEE International Conference on Software Testing Verification and Validation Workshop
Evaluating Context Descriptions and Property Definition Patterns for Software Formal Validation
MODELS '09 Proceedings of the 12th International Conference on Model Driven Engineering Languages and Systems
Automatic generation of model checking scripts based on environment modeling
SPIN'10 Proceedings of the 17th international SPIN conference on Model checking software
Use Cases Modeling for Scalable Model-Checking
APSEC '11 Proceedings of the 2011 18th Asia-Pacific Software Engineering Conference
Hi-index | 0.00 |
This paper presents a model-checking experiment for a design model of a practical real-time operating system (RTOS) based on environment modeling. In previous work, we developed a tool called the environment generator to generate environments for model-checking general RTOS models in Spin. This tool takes a general model of the environments, called the environment model, as an input and generates all possible environments within the bounds of the model. Here, we applied the tool to verify the design model of an OSEK/VDX OS, the RTOS for controlling automotive systems. In this paper, we explain the details of constructing the environment models for verifying various aspects of the RTOS. We also show the results of an experiment using our tool.