Abstract:To make feasible and scalable the verification of large and complex concurrent systems, it is necessary the use of compositional techniques even at the highest abstraction layers. When focusing on the lowest software abstraction layers, such as the implementation or the machine code, the high level of detail of those layers makes the direct verification of properties very difficult and expensive. It is therefore essential to use techniques allowing to simplify the verification on these layers. One technique to tackle this challenge is top-down verification where by means of simulation properties verified on top layers (representing abstract specifications of a system) are propagated down to the lowest layers (that are an implementation of the top layers). There is no need to say that simulation of concurrent systems implies a greater level of complexity, and having compositional techniques to check simulation between layers is also desirable when seeking for both feasibility and scalability of the refinement verification. In this article, we present CSim 2 a (compositional) rely-guarantee-based framework for the top-down verification of complex concurrent systems in the Isabelle/HOL theorem prover. CSim 2 uses CSimpl, a language with a high degree of expressiveness designed for the specification of concurrent programs. Thanks to its expressibility, CSimpl is able to model many of the features found in real world programming languages like exceptions, assertions, and procedures. CSim 2 provides a framework for the verification of rely-guarantee properties to compositionally reason on CSimpl specifications. Focusing on top-down verification, CSim 2 provides a simulation-based framework for the preservation of CSimpl rely-guarantee properties from specifications to implementations. By using the simulation framework, properties proven on the top layers (abstract specifications) are compositionally propagated down to the lowest layers (source or machine code) in each concurrent component of the system. Finally, we show the usability of CSim 2 by running a case study over two CSimpl specifications of an Arinc-653 communication service. In this case study, we prove a complex property on a specification, and we use CSim 2 to preserve the property on lower abstraction layers.

Towards a Theory of Bisimulation for a Fragment of Verilog

A modular bisimulation characterisation for fragments of hybrid logic

Relational Connectors and Heterogeneous Bisimulations

Bisimulation for Quantum Processes

Complete Axiomatization for Divergent-Sensitive Bisimulations in Basic Process Algebra with Prefix Iteration

Bisimulation Learning

Equivalence Checking for Infinite Systems Using Parameterized Boolean Equation Systems

From Statecharts to Verilog: a Formal Approach to Hardware/software Co-Specification

Bisimulations for probabilistic linear lambda calculi

Folk Theorems on the Correspondence between State-Based and Event-Based Systems

A Rely-Guarantee-based Simulation for Verifying Concurrent Program Transformations

Simulator Semantics for System Level Formal Verification

The Essence of Verilog: A Tractable and Tested Operational Semantics for Verilog

Bisimulations for Fuzzy-Transition Systems

Composing Codensity Bisimulations

Abstract Congruence Criteria for Weak Bisimilarity

CSim 2

Bisimulation-Based Comparisons for Interpretations in Description Logics

A Coalgebraic Semantics Framework for Quantum Systems

Towards a bisimulation congruence for ROAM

Bisimulation of Labelled State-to-Function Transition Systems Coalgebraically