Abstract:The behavior space of real time hybrid systems is very complex and hence expensive to conduct the classical full state space model checking. Compared to the classical model checking, bounded model checking (BMC) is much cheaper to conduct and has better scalability. This work presents a technique that can derive, in some cases, a proof of unbounded reach ability argument of Linear Hybrid Automata (LHA) from a BMC procedure. During BMC of LHA, typical procedures can discover sets of unsatisfiable constraint cores, a.k.a. UC or IIS, in the constraint set according to the bounded continuous state space of LHA. Currently, such unsatisfiable constraints are only fed back to the constraint set to accelerate the BMC solving. In this paper, we propose that such unsatisfiable constraint core can be exploited to give general unbounded verification result of the system model. As each constraint can be mapped back to certain semantical elements of the system model, the unsatisfiable constraint cores can be mapped back into path segments, which are not feasible, in the graph structure of the LHA model. Clearly, if all the potential paths to reach the target location in the graph structure have to go through such infeasible path segments, the target location is not reachable in general, not only in the given bound. Based on this observation, we propose to encode the infeasible path segments as linear temporal logic (LTL) formulas, and present the graph structure, the discrete part, of the LHA model as a transition system. Then, we can take advantage of the mature off-the-shelf LTL model checking techniques to verify whether there exists a path to reach the target location without touching any detected IIS path segment in the graph structure of the LHA model. We implement this technique into a bounded LHA checker BACH. The experiments show that most of the benchmarks can be verified by the enhanced BACH with a clearly better performance and scalability.

On Accelerating SMT-based Bounded Model Checking of HSTM Designs

Formal Verification of Software Designs in Hierarchical State Transition Matrix with SMT-based Bounded Model Checking

Harnessing SMT-Based Bounded Model Checking Through Stateless Explicit-State Exploration

A Survey of Acceleration Techniques for SMT-Based Bounded Model Checking

Interpolation-Based Multi-core Bounded Model Checking of HSTM Designs.

Formal Verification of Communicating HSTM Designs

An SMT Approach to Bounded Model Checking of Design in State Transition Matrix

Garakabu2: an SMT-based Bounded Model Checker for HSTM Designs in ZIPC

Facilitating Multicore Bounded Model Checking with Stateless Explicit-State Exploration

Bounded Model Checking Combining Symbolic Trajectory Evaluation Abstraction With Hybrid Three-Valued Sat Solving

Combining BMC and Complementary Approximate Reachability to Accelerate Bug-Finding

Optimizing the SAT Decision Ordering of Bounded Model Checking by Structural Information

Cooperative Bounded Model Checking Using STE and Hybrid Three-Valued SAT Solving

Model Checking for Rectangular Hybrid Systems: A Quantified Encoding Approach

Deriving Unbounded Proof of Linear Hybrid Automata from Bounded Verification

Forward and backward: Bounded model checking of linear hybrid automata from two directions

Bounded Model Checking for Branching-Time Temporal Logic

Efficient Loop Conditions for Bounded Model Checking Hyperproperties

Integrating Loop Acceleration into Bounded Model Checking

Implementation and Experiments of a Distributed SMT Solving Environment

MAB-BMC: A Formal Verification Enhancer by Harnessing Multiple BMC Engines Together