FME 2003: Formal Methods: International Symposium of Formal Methods Europe. Pisa Italy, September 8-14, 2003, Proceedings (Lecture Notes in Computer Science Book 2805)

Thisvolumecontainstheproceedingsoffm2003,the12thinternationalformal Methods Europe Symposium Which Was Held In Pisa, Italy On September 8–14, 2003. Formal Methods Europe (fme, Www. Fmeurope. Org) Is An Independent - Sociation Which Aims To Stimulate The Use Of And Research On Formal Methods For System Development. Fme Conferences Began With A Vdm Europe Symposium In 1987. Since Then, The Meetings Have Grown And Have Been Held About Once - Ery 18 Months. Throughout The Years The Symposia Have Been Notably Successful In Bringing Together Researchers, Tool Developers, Vendors, And Users, Both From Academia And From Industry. Unlike Previous Symposia In The Series, Fm 2003 Was Not Given A Speci?c Theme. Rather, Its Main Goal Could Be Synthesized As “widening The Scope. ” Indeed, The Organizers Aimed At Enlarging The Audience And Impact Of The Symposium Along Several Directions. Dropping The Su?x ‘e’ From The Title Of The Conference Re?ects The Wish To Welcome Participation And Contribution From Every Country; Also,contributionsfromoutsidethetraditionalformalmethodscommunitywere Solicited. The Recent Innovation Of Including An Industrial Day As An Important Part Of The Symposium Shows The Strong Commitment To Involve Industrial P- Ple More And More Within The Formal Methods Community. Even The Traditional And Rather Fuzzy Borderline Between “software Engineering Formal Methods” And Methods And Formalisms Exploited In Di?erent ?elds Of Engineering Was So- What Challenged. Invited Speakers -- Looking Back To The Future -- Past, Present, And Future Of Sra Implementation Of Cafeobj -- On Failures And Faults -- Trends In Software Verification -- Event Based Sequential Program Development: Application To Constructing A Pointer Program -- I-day -- Proving The Shalls -- Adaptable Translator Of B Specifications To Embedded C Programs -- Integrating Model-checking Architectural Analysis And Validation In A Real Software Life-cycle -- Lessons Learned From A Successful Implementation Of Formal Methods In An Industrial Project -- Control Systems And Industrial Applications -- Determining The Specification Of A Control System From That Of Its Environment -- Managerial Issues For The Consideration And Use Of Formal Methods -- Verifying Emulation Of Legacy Mission Computer Systems -- Improving Safety Assessment Of Complex Systems: An Industrial Case Study -- Communications System Verification -- Compositional Verification Of An Atm Protocol --^ Proving The Correctness Of Simpson’s 4-slot Acm Using An Assertional Rely-guarantee Proof Method -- Synthesis And Verification Of Constraints In The Pgm Protocol -- Co-specification And Compilers -- Mapping Statecharts To Verilog For Hardware/software Co-specification -- A Strategy For Compiling Classes, Inheritance, And Dynamic Binding -- Composition -- A Semantic Foundation For Tcoz In Unifying Theories Of Programming -- Refinement And Verification Of Synchronized Component-based Systems -- Certifying And Synthesizing Membership Equational Proofs -- Team Automata Satisfying Compositionality -- Composing Invariants -- Java, Object Orientation And Modularity -- Java Applet Correctness: A Developer-oriented Approach -- Improving Jml: For A Safer And More Effective Language -- Using Abstractions For Heuristic State Space Exploration Of Reactive Object-oriented Systems -- A Formal Framework For Modular Synchronous System Design -- Model Checking --^ Generating Counterexamples For Multi-valued Model-checking -- Combining Real-time Model-checking And Fault Tree Analysis -- Model-checking Trio Specifications In Spin -- Computing Meta-transitions For Linear Transition Systems With Polynomials -- Translation-based Compositional Reasoning For Software Systems -- Watchdog Transformations For Property-oriented Model-checking -- Parallel Process -- A Circus Semantics For Ravenscar Protected Objects -- Constructing Deadlock Free Event-based Applications: A Rely/guarantee Approach -- A General Approach To Deadlock Freedom Verification For Software Architectures -- Taking Alloy To The Movies -- Interacting State Machines For Mobility -- Composing Temporal-logic Specifications With Machine Assistance -- Program Checking And Testing -- Model Checking Fta -- Program Checking With Certificates: Separating Correctness-critical Code --^ Reification Of Executable Test Scripts In Formal Specification-based Test Generation: The Java Card Transaction Mechanism Case Study -- Checking And Reasoning About Semantic Web Through Alloy -- B Method -- Structuring Retrenchments In B By Decomposition -- Design Of An Automatic Prover Dedicated To The Refinement Of Database Applications -- Prob: A Model Checker For B -- Security -- Sat-based Model-checking Of Security Protocols Using Planning Graph Analysis -- Correctness Of Source-level Safety Policies -- A Topological Characterization Of Tcp/ip Security. Keijiro Araki, Stefania Gnesi, Dino Mandrioli. Front Matter....Pages I-XV Looking Back to the Future....Pages 1-6 Past, Present, and Future of SRA Implementation of CafeOBJ ....Pages 7-17 On Failures and Faults....Pages 18-39 Trends in Software Verification....Pages 40-50 Event Based Sequential Program Development: Application to Constructing a Pointer Program....Pages 51-74 Proving the Shalls....Pages 75-93 Adaptable Translator of B Specifications to Embedded C Programs....Pages 94-113 Integrating Model-Checking Architectural Analysis and Validation in a Real Software Life-Cycle....Pages 114-132 Lessons Learned from a Successful Implementation of Formal Methods in an Industrial Project....Pages 133-153 Determining the Specification of a Control System from That of Its Environment....Pages 154-169 Managerial Issues for the Consideration and Use of Formal Methods....Pages 170-186 Verifying Emulation of Legacy Mission Computer Systems....Pages 187-207 Improving Safety Assessment of Complex Systems: An Industrial Case Study....Pages 208-222 Compositional Verification of an ATM Protocol....Pages 223-243 Proving the Correctness of Simpson’s 4-Slot ACM Using an Assertional Rely-Guarantee Proof Method....Pages 244-263 Synthesis and Verification of Constraints in the PGM Protocol....Pages 264-281 Mapping Statecharts to Verilog for Hardware/Software Co-specification....Pages 282-300 A Strategy for Compiling Classes, Inheritance, and Dynamic Binding....Pages 301-320 A Semantic Foundation for TCOZ in Unifying Theories of Programming....Pages 321-340 Refinement and Verification of Synchronized Component-Based Systems....Pages 341-358 Certifying and Synthesizing Membership Equational Proofs....Pages 359-380 Team Automata Satisfying Compositionality....Pages 381-400 Composing Invariants....Pages 401-421 Java Applet Correctness: A Developer-Oriented Approach....Pages 422-439 Improving JML: For a Safer and More Effective Language....Pages 440-461 Using Abstractions for Heuristic State Space Exploration of Reactive Object-Oriented Systems....Pages 462-481 A Formal Framework for Modular Synchronous System Design....Pages 482-502 Generating Counterexamples for Multi-valued Model-Checking....Pages 503-521 Combining Real-Time Model-Checking and Fault Tree Analysis....Pages 522-541 Model-Checking TRIO Specifications in SPIN....Pages 542-561 Computing Meta-transitions for Linear Transition Systems with Polynomials....Pages 562-581 Translation-Based Compositional Reasoning for Software Systems....Pages 582-599 Watchdog Transformations for Property-Oriented Model-Checking....Pages 600-616 A Circus Semantics for Ravenscar Protected Objects....Pages 617-635 Constructing Deadlock Free Event-Based Applications: A Rely/Guarantee Approach....Pages 636-657 A General Approach to Deadlock Freedom Verification for Software Architectures....Pages 658-677 Taking Alloy to the Movies....Pages 678-697 Interacting State Machines for Mobility....Pages 698-718 Composing Temporal-Logic Specifications with Machine Assistance....Pages 719-738 Model Checking FTA....Pages 739-757 Program Checking with Certificates: Separating Correctness-Critical Code....Pages 758-777 Reification of Executable Test Scripts in Formal Specification-Based Test Generation: The Java Card Transaction Mechanism Case Study....Pages 778-795 Checking and Reasoning about Semantic Web through Alloy....Pages 796-813 Structuring Retrenchments in B by Decomposition....Pages 814-833 Design of an Automatic Prover Dedicated to the Refinement of Database Applications....Pages 834-854 ProB: A Model Checker for B....Pages 855-874 SAT-Based Model-Checking of Security Protocols Using Planning Graph Analysis....Pages 875-893 Correctness of Source-Level Safety Policies....Pages 894-913 A Topological Characterization of TCP/IP Security....Pages 914-939 Back Matter....Pages 941-942 ThisvolumecontainstheproceedingsofFM2003,the12thInternationalFormal Methods Europe Symposium which was held in Pisa, Italy on September 8-14, 2003. Formal Methods Europe (FME, www. fmeurope. org) is an independent - sociation which aims to stimulate the use of and research on formal methods for system development. FME conferences began with a VDM Europe symposium in 1987. Since then, the meetings have grown and have been held about once - ery 18 months. Throughout the years the symposia have been notably successful in bringing together researchers, tool developers, vendors, and users, both from academia and from industry. Unlike previous symposia in the series, FM 2003 was not given a speci?c theme. Rather, its main goal could be synthesized as "widening the scope." Indeed, the organizers aimed at enlarging the audience and impact of the symposium along several directions. Dropping the su?x 'E' from the title of the conference re?ects the wish to welcome participation and contribution from every country; also, contributionsfromoutsidethetraditionalFormalMethodscommunitywere solicited. The recent innovation of including an Industrial Day as an important part of the symposium shows the strong commitment to involve industrial p- ple more and more within the Formal Methods community. Even the traditional and rather fuzzy borderline between "software engineering formal methods" and methods and formalisms exploited in di?erent?elds of engineering was so- what challenged This book constitutes the refereed proceedings of the International Symposium of Formal Methods Europe, FME 2003, held in Pisa, Italy in September 2003. The 44 revised full papers presented together with 5 invited papers were carefully reviewed and selected from 144 submissions. The papers are organized in topical sections on industrial issues, control systems and applications, communication system verfication, co-specification and compilers, composition, Java, object-orientation and modularity, model checking, parallel processes, program checking and testing, B method, and security The direct origins of modern fault-tolerant computing lie in John von Neumann's influential work in the early 1950s on "Probabilistic Logic and the Synthesis of Reliable Organisms from Unreliable Components" [22].