Counterexample-guided abstraction refinement for symbolic model checking

  • Authors:
  • Edmund Clarke;Orna Grumberg;Somesh Jha;Yuan Lu;Helmut Veith

  • Affiliations:
  • Carnegie Mellon University, Pittsburgh, Pennsylvania;The Technion, Haifa, Israel;University of Wisconsin, Madison, Wisconsin;Broadcom Co., San Jose, California;Vienna University of Technology, Wien, Austria

  • Venue:
  • Journal of the ACM (JACM)
  • Year:
  • 2003

Quantified Score

Hi-index 0.02

Visualization

Abstract

The state explosion problem remains a major hurdle in applying symbolic model checking to large hardware designs. State space abstraction, having been essential for verifying designs of industrial complexity, is typically a manual process, requiring considerable creativity and insight.In this article, we present an automatic iterative abstraction-refinement methodology that extends symbolic model checking. In our method, the initial abstract model is generated by an automatic analysis of the control structures in the program to be verified. Abstract models may admit erroneous (or "spurious") counterexamples. We devise new symbolic techniques that analyze such counterexamples and refine the abstract model correspondingly. We describe aSMV, a prototype implementation of our methodology in NuSMV. Practical experiments including a large Fujitsu IP core design with about 500 latches and 10000 lines of SMV code confirm the effectiveness of our approach.