From Well Structured Transition Systems to Program Verification

Alain Finkel

DOI: https://doi.org/10.4204/EPTCS.320.3

2020-08-07

Abstract:We describe the use of the theory of WSTS for verifying programs.

Logic in Computer Science,Formal Languages and Automata Theory

What problem does this paper attempt to address?

Verifying Programs Using Abstraction and Theorem Proving.

Junyan Qian,Baowen Xu

2007-01-01

Abstract:we present a methodology for automatically verifying programs against safety specifications based on finite state machine. Firstly, computing the abstract transition between abstract states is done by calling a theorem prover, and then an initial abstract model automatically is extracted from concrete program using predicate abstraction. However, the process of abstraction can be exponential in the number of predicates used. Program slicing, predicate inference and partitioning the set of candidate predicates into subsets make abstract model construction effective. By counterexample-guided abstraction refinement scheme, the abstraction refines incrementally until the specification is either satisfied or refuted. Finally, our methods can be extended to verifying concurrency programs by parallel composition.
Mechanized Operational Semantics Of Wsl

Xy Zhang,M Munro,M Harman,L Hu

DOI: https://doi.org/10.1109/SCAM.2002.1134107

2002-01-01

Abstract:This paper presents an experiment on computer assisted formal verification of program transformations. The operational semantics of WSL is formalized in the type theoretical proof assistant Coq, which forms the basis, on which the correctness of program transformations can be stated and proved as formula, in Coq. A group of program transformations frequently used for software maintenance have been proved correct. The existence of a machine checked formal verification increases significantly the confidence in the correctness of program transformations, which is crucial for the reliability of software maintenance systems.
Verifying Unboundedness via Amalgamation

Ashwani Anand,Sylvain Schmitz,Lia Schütze,Georg Zetzsche

2024-06-20

Abstract:Well-structured transition systems (WSTS) are an abstract family of systems that encompasses a vast landscape of infinite-state systems. By requiring a well-quasi-ordering (wqo) on the set of states, a WSTS enables generic algorithms for classic verification tasks such as coverability and termination. However, even for systems that are WSTS like vector addition systems (VAS), the framework is notoriously ill-equipped to analyse reachability (as opposed to coverability). Moreover, some important types of infinite-state systems fall out of WSTS' scope entirely, such as pushdown systems (PDS). Inspired by recent algorithmic techniques on VAS, we propose an abstract notion of systems where the set of runs is equipped with a wqo and supports amalgamation of runs. We show that it subsumes a large class of infinite-state systems, including (reachability languages of) VAS and PDS, and even all systems from the abstract framework of valence systems, except for those already known to be Turing-complete. Moreover, this abstract setting enables simple and general algorithmic solutions to unboundedness problems, which have received much attention in recent years. We present algorithms for the (i) simultaneous unboundedness problem (which implies computability of downward closures and decidability of separability by piecewise testable languages), (ii) computing priority downward closures, (iii) deciding whether a language is bounded, meaning included in $w_1^*\cdots w_k^*$ for some words $w_1,\ldots,w_k$, and (iv) effective regularity of unary languages. This leads to either drastically simpler proofs or new decidability results for a rich variety of systems.

Formal Languages and Automata Theory
Branch-Well-Structured Transition Systems and Extensions

Benedikt Bollig,Alain Finkel,Amrita Suresh

DOI: https://doi.org/10.46298/lmcs-20(2:12)2024

2024-06-13

Logical Methods in Computer Science

Abstract:We propose a relaxation to the definition of well-structured transition systems (\WSTS) while retaining the decidability of boundedness and non-termination. In this class, the well-quasi-ordered (wqo) condition is relaxed such that it is applicable only between states that are reachable one from another. Furthermore, the monotony condition is relaxed in the same way. While this retains the decidability of non-termination and boundedness, it appears that the coverability problem is undecidable. To this end, we define a new notion of monotony, called cover-monotony, which is strictly more general than the usual monotony and still allows us to decide a restricted form of the coverability problem.

computer science, theory & methods,logic
Logic of Transition Systems

Johan Van Benthem,Jan Bergstra

DOI: https://doi.org/10.1007/bf01160018

1994-01-01

Journal of Logic Language and Information

Abstract:Labeled transition systems are key structures for modeling computation. In this paper, we show how they lend themselves to ordinary logical analysis (without any special new formalisms), by introducing their standard first-order theory. This perspective enables us to raise several basic model-theoretic questions of definability, axiomatization and preservation for various notions of process equivalence found in the computational literature, and answer them using well-known logical techniques (including the Compactness theorem, Saturation and Ehrenfeucht games). Moreover, we consider what happens to this general theory when one restricts attention to special classes of transition systems (in particular, finite ones), as well as extended logical languages (in particular, infinitary first-order logic). We hope that this puts standard logical formalisms on the map as a serious option for a theory of computational processes. As a side benefit, our approach increases comparability with several other existing formalisms over labeled transition systems (such as Process Algebra or Modal Logic). We provide some pointers to this effect, too.
Automatic verification of Finite Variant Property beyond convergent equational theories

Vincent Cheval,Caroline Fontaine

2024-10-20

Abstract:Computer-aided analysis of security protocols heavily relies on equational theories to model cryptographic primitives. Most automated verifiers for security protocols focus on equational theories that satisfy the Finite Variant Property (FVP), for which solving unification is decidable. However, they either require to prove FVP by hand or at least to provide a representation as an E-convergent rewrite system, usually E being at most the equational theory for an associative and commutative function symbol (AC). The verifier ProVerif is probably the only exception amongst these tools as it automatically proves FVP without requiring a representation, but on a small class of equational theories. In this work, we propose a novel semi-decision procedure for proving FVP, without the need for a specific representation, and for a class of theories that goes beyond the ones expressed by an E-convergent rewrite system. We implemented a prototype and successfully applied it on several theories from the literature.

Cryptography and Security
Structural Invariants for Parametric Verification of Systems with Almost Linear Architectures

Marius Bozga,Radu Iosif,Joseph Sifakis

DOI: https://doi.org/10.48550/arXiv.1902.02696

2019-02-07

Abstract:We consider concurrent systems consisting of a finite but unknown number of components, that are replicated instances of a given set of finite state automata. The components communicate by executing interactions which are simultaneous atomic state changes of a set of components. We specify both the type of interactions (e.g.\ rendez-vous, broadcast) and the topology (i.e.\ architecture) of the system (e.g.\ pipeline, ring) via a decidable interaction logic, which is embedded in the classical weak sequential calculus of one successor (WS1S). Proving correctness of such system for safety properties, such as deadlock freedom or mutual exclusion, requires the inference of an inductive invariant that subsumes the set of reachable states and avoids the unsafe states. Our method synthesizes such invariants directly from the formula describing the interactions, without costly fixed point iterations. We applied our technique to the verification of several textbook examples, such as dining philosophers, mutual exclusion protocols and concurrent systems with preemption and priorities.

Formal Languages and Automata Theory
On formalizing and verifying Web services

YinXing Wei,ShenSheng Zhang,Farong Zhong

2005-01-01

Abstract:Web services are becoming an important paradigm for Web-based computing. However the mainstream Web service description language such as WSDL (Web Service Description Language) is lack of formal basis. In order to verify the behavioral properties of Web services, we adopt the π-calculus as a precise language because it provides many useful facilities such as behavioral equivalence, mobility that are lack in other formal language. The basic elements of WSDL are translated into the terms in the π-calculus. By means of the MWB (Mobility Workbench), a concurrency tool, the behavioral property of Web services denoted by processes is verified.
Generalization Strategies for the Verification of Infinite State Systems

Fabio Fioravanti,Alberto Pettorossi,Maurizio Proietti,Valerio Senni

DOI: https://doi.org/10.48550/arXiv.1110.0999

2011-10-05

Abstract:We present a method for the automated verification of temporal properties of infinite state systems. Our verification method is based on the specialization of constraint logic programs (CLP) and works in two phases: (1) in the first phase, a CLP specification of an infinite state system is specialized with respect to the initial state of the system and the temporal property to be verified, and (2) in the second phase, the specialized program is evaluated by using a bottom-up strategy. The effectiveness of the method strongly depends on the generalization strategy which is applied during the program specialization phase. We consider several generalization strategies obtained by combining techniques already known in the field of program analysis and program transformation, and we also introduce some new strategies. Then, through many verification experiments, we evaluate the effectiveness of the generalization strategies we have considered. Finally, we compare the implementation of our specialization-based verification method to other constraint-based model checking tools. The experimental results show that our method is competitive with the methods used by those other tools. To appear in Theory and Practice of Logic Programming (TPLP).

Logic in Computer Science,Artificial Intelligence,Software Engineering
Finite Countermodel Based Verification for Program Transformation (A Case Study)

Alexei P. Lisitsa,Andrei P. Nemytykh

DOI: https://doi.org/10.48550/arXiv.1512.03859

2015-12-12

Software Engineering

Abstract:Both automatic program verification and program transformation are based on program analysis. In the past decade a number of approaches using various automatic general-purpose program transformation techniques (partial deduction, specialization, supercompilation) for verification of unreachability properties of computing systems were introduced and demonstrated. On the other hand, the semantics based unfold-fold program transformation methods pose themselves diverse kinds of reachability tasks and try to solve them, aiming at improving the semantics tree of the program being transformed. That means some general-purpose verification methods may be used for strengthening program transformation techniques. This paper considers the question how finite countermodels for safety verification method might be used in Turchin's supercompilation method. We extract a number of supercompilation sub-algorithms trying to solve reachability problems and demonstrate use of an external countermodel finder for solving some of the problems.
VST-A: A Foundationally Sound Annotation Verifier

Litao Zhou,Jianxing Qin,Qinshi Wang,Andrew W. Appel,Qinxiang Cao

2023-10-26

Abstract:Program verifiers for imperative languages such as C may be annotation-based, in which assertions and invariants are put into source files and then checked, or tactic-based, where proof scripts separate from programs are interactively developed in a proof assistant such as Coq. Annotation verifiers have been more automated and convenient, but some interactive verifiers have richer assertion languages and formal proofs of soundness. We present VST-A, an annotation verifier that uses the rich assertion language of VST, leverages the formal soundness proof of VST, but allows users to describe functional correctness proofs intuitively by inserting assertions. VST-A analyzes control flow graphs, decomposes every C function into control flow paths between assertions, and reduces program verification problems into corresponding straightline Hoare triples. Compared to existing foundational program verification tools like VST and Iris, in VST-A, such decompositions and reductions are allowed to be nonstructural, which makes VST-A more flexible to use. VST-A's decomposition and reduction is defined in Coq, proved sound in Coq, and computed in a call-by-value way in Coq. The soundness proof for reduction is totally logical, independent of the complicated semantic model (and soundness proof) of VST's Hoare triple. Because of the rich assertion language, not all reduced proof goals can be automatically checked, but the system allows users to prove residual proof goals using the full power of the Coq proof assistant.

Programming Languages
Verification of Workflow Nets with Transition Conditions

Zhao-xia Wang,Jian-min Wang,Xiao-chen Zhu,Li-jie Wen

DOI: https://doi.org/10.1631/jzus.c1100364

2012-01-01

Journal of Zhejiang University SCIENCE C

Abstract:Workflow management is concerned with automated support for business processes. Workflow management systems are driven by process models specifying the tasks that need to be executed, the order in which they can be executed, which resources are authorised to perform which tasks, and data that is required for, and produced by, these tasks. As workflow instances may run over a sustained period of time, it is important that workflow specifications be checked before they are deployed. Workflow verification is usually concerned with control-flow dependencies only; however, transition conditions based on data may further restrict possible choices between tasks. In this paper we extend workflow nets where transitions have concrete conditions associated with them, called WTC-nets. We then demonstrate that we can determine which execution paths of a WTC-net that are possible according to the control-flow dependencies, are actually possible when considering the conditions based on data. Thus, we are able to more accurately determine at design time whether a workflow net with transition conditions is sound.
Ready, set, verify! applying hs-to-coq to real-world Haskell code (experience report)

Joachim Breitner,Antal Spector-Zabusky,Yao Li,Christine Rizkallah,John Wiegley,Stephanie Weirich

DOI: https://doi.org/10.1145/3236784

2018-07-30

Proceedings of the ACM on Programming Languages

Abstract:Good tools can bring mechanical verification to programs written in mainstream functional languages. We use hs-to-coq to translate significant portions of Haskell’s containers library into Coq, and verify it against specifications that we derive from a variety of sources including type class laws, the library’s test suite, and interfaces from Coq’s standard library. Our work shows that it is feasible to verify mature, widely-used, highly optimized, and unmodified Haskell code. We also learn more about the theory of weight-balanced trees, extend hs-to-coq to handle partiality, and – since we found no bugs – attest to the superb quality of well-tested functional code.
The LTS WorkBench

Alceste Scalas,Massimo Bartoletti

DOI: https://doi.org/10.4204/EPTCS.189.8

2015-08-20

Abstract:Labelled Transition Systems (LTSs) are a fundamental semantic model in many areas of informatics, especially concurrency theory. Yet, reasoning on LTSs and relations between their states can be difficult and elusive: very simple process algebra terms can give rise to a large (possibly infinite) number of intricate transitions and interactions. To ease this kind of study, we present LTSwb, a flexible and extensible LTS toolbox: this tutorial paper discusses its design and functionalities.

Logic in Computer Science,Programming Languages,Software Engineering
Program Verification By Reduction To Semi-Algebraic Systems Solving

Bican Xia,Lu Yang,Naijun Zhan

DOI: https://doi.org/10.1007/978-3-540-88479-8_20

2008-01-01

Abstract:The discovery of invariants and ranking functions plays a central role in program verification. In our previous work, we investigated invariant generation and non-linear ranking function discovering of polynomial programs by reduction to semi-algebraic systems solving. In this paper we will first summarize our results on the two topics and then show how to generalize the approach to discovering more expressive invariants and ranking functions, and applying to more general programs.
A New Method of Verification of Functional Programs

Andrew M. Mironov

DOI: https://doi.org/10.48550/arXiv.1604.04240

2016-04-15

Abstract:In the paper the problem of verification of functional programs (FPs) over strings is considered, where specifications of properties of FPs are defined by other FPs, and a FP S1 meets a specification defined by another FP S2 iff a composition of functions defined by the FPs S1 and S2 is equal to the constant 1. We introduce a concept of a state diagram of a FP, and reduce the verification problem to the problem of an analysis of the state diagrams of FPs. The proposed approach is illustrated by the example of verification of a sorting program.

Logic in Computer Science
FTOS-Verify: Analysis and Verification of Non-Functional Properties for Fault-Tolerant Systems

Chih-Hong Cheng,Christian Buckl,Javier Esparza,Alois Knoll

DOI: https://doi.org/10.48550/arXiv.0905.3946

2009-05-25

Abstract:The focus of the tool FTOS is to alleviate designers' burden by offering code generation for non-functional aspects including fault-tolerance mechanisms. One crucial aspect in this context is to ensure that user-selected mechanisms for the system model are sufficient to resist faults as specified in the underlying fault hypothesis. In this paper, formal approaches in verification are proposed to assist the claim. We first raise the precision of FTOS into pure mathematical constructs, and formulate the deterministic assumption, which is necessary as an extension of Giotto-like systems (e.g., FTOS) to equip with fault-tolerance abilities. We show that local properties of a system with the deterministic assumption will be preserved in a modified synchronous system used as the verification model. This enables the use of techniques known from hardware verification. As for implementation, we develop a prototype tool called FTOS-Verify, deploy it as an Eclipse add-on for FTOS, and conduct several case studies.

Distributed, Parallel, and Cluster Computing,Logic in Computer Science
Runtime Verification Through Forward Chaining

Alan Perotti,Guido Boella,Artur d'Avila Garcez

DOI: https://doi.org/10.4204/EPTCS.169.8

2014-12-03

Abstract:In this paper we present a novel rule-based approach for Runtime Verification of FLTL properties over finite but expanding traces. Our system exploits Horn clauses in implication form and relies on a forward chaining-based monitoring algorithm. This approach avoids the branching structure and exponential complexity typical of tableaux-based formulations, creating monitors with a single state and a fixed number of rules. This allows for a fast and scalable tool for Runtime Verification: we present the technical details together with a working implementation.

Logic in Computer Science
Recent Advances in Program Verification Through Computer Algebra.

Lu Yang,Chaochen Zhou,Naijun Zhan,Bican Xia

DOI: https://doi.org/10.1007/s11704-009-0074-7

2010-01-01

Frontiers of Computer Science in China

Abstract:In this paper, we summarize the results on program verification through semi-algebraic systems (SASs) solving that we have obtained, including automatic discovery of invariants and ranking functions, symbolic decision procedure for the termination of a class of linear loops, termination analysis of nonlinear systems, and so on.

From Well Structured Transition Systems to Program Verification

Verifying Programs Using Abstraction and Theorem Proving.

Mechanized Operational Semantics Of Wsl

Verifying Unboundedness via Amalgamation

Branch-Well-Structured Transition Systems and Extensions

Logic of Transition Systems

Automatic verification of Finite Variant Property beyond convergent equational theories

Structural Invariants for Parametric Verification of Systems with Almost Linear Architectures

On formalizing and verifying Web services

Generalization Strategies for the Verification of Infinite State Systems

Finite Countermodel Based Verification for Program Transformation (A Case Study)

VST-A: A Foundationally Sound Annotation Verifier

Verification of Workflow Nets with Transition Conditions

Ready, set, verify! applying hs-to-coq to real-world Haskell code (experience report)

The LTS WorkBench

Program Verification By Reduction To Semi-Algebraic Systems Solving

A New Method of Verification of Functional Programs

FTOS-Verify: Analysis and Verification of Non-Functional Properties for Fault-Tolerant Systems

Runtime Verification Through Forward Chaining

Recent Advances in Program Verification Through Computer Algebra.