Another Look at LTL Model Checking

  • Authors:
  • Edmund M. Clarke;Orna Grumberg;Kiyoharu Hamaguchi

  • Affiliations:
  • Carnegie Mellon University, Pittsburgh, PA, U.S.A./ E-mail: edmund.clarke@cs.cmu.edu;The Technion, Haifa, Israel/ E-mail: orna@csa.cs.technion.ac.il;Osaka University, Toyonaka, Osaka, Japan/ E-mail: hama@ics.es.osaka-u.ac.jp

  • Venue:
  • Formal Methods in System Design
  • Year:
  • 1997

Quantified Score

Hi-index 0.03

Visualization

Abstract

We show how LTL model checking can be reduced to CTLmodel checking with fairness constraints. Using this reduction, wealso describe how to construct a {\em symbolic} LTL model checker thatappears to be quite efficient in practice. In particular, we show howthe SMV model checking system developed by McMillan[16] can be extended to permit LTL specifications.The results that we have obtained are quite surprising. For thespecifications which can be expressed in both CTL and LTL, the LTL modelchecker required at most twice as much time and space as the CTL modelchecker. We also succeeded in verifying non-trivial LTL specifications.The amount of time and space that is required is quite reasonable.Based on the examples that we considered, it appears that efficient LTLmodel checking is possible when the specifications are not excessivelycomplicated.