An automata-theoretic approach to modular model checking

  • Authors:
  • Orna Kupferman;Moshe Y. Vardi

  • Affiliations:
  • Hebrew Univ., Jerusalem, Israel;Rice Univ., Houston, TX

  • Venue:
  • ACM Transactions on Programming Languages and Systems (TOPLAS)
  • Year:
  • 2000

Quantified Score

Hi-index 0.00

Visualization

Abstract

In modular verification the specification of a module consists of two part. One part describes the guaranteed behavior of the module. The other part describes the assumed behavior of the system in which the module is interacting. This is called the assume-guarantee paradigm. In this paper we consider assume-guarantee specifications in which the guarantee is specified by branching temporal formulas. We distinguish between two approaches. In the first approach, the assumption is specified by branching temporal formulas too. In the second approach, the assumption is specified by linear temporal logic. We consider guarantees in ∀ CTL, and ∀ CTL*. We develop two fundamental techniques: building maximal models for ∀ CTL and ∀ CTL* formulas and using alternating automata to obtain space-efficient algorithms for fair model checking. Using these techniques we classify the complexity of satisfiability, validity, implication, and modular verification for ∀ CTL and ∀ CTL*. We show that modular verification is PSPACE-complete for ∀ CTL and is EXSPACE-complete for ∀ CTL*. We prove that when the assumption is linear, these bounds hold also for guarantees in CTL and CTL*. On the other hand, the problem remains EXSPACE-hard even when we restrict the assumptions to LTL and take the guarantees as a fixed ∀ CTL formula.