Abstract:To make feasible and scalable the verification of large and complex concurrent systems, it is necessary the use of compositional techniques even at the highest abstraction layers. When focusing on the lowest software abstraction layers, such as the implementation or the machine code, the high level of detail of those layers makes the direct verification of properties very difficult and expensive. It is therefore essential to use techniques allowing to simplify the verification on these layers. One technique to tackle this challenge is top-down verification where by means of simulation properties verified on top layers (representing abstract specifications of a system) are propagated down to the lowest layers (that are an implementation of the top layers). There is no need to say that simulation of concurrent systems implies a greater level of complexity, and having compositional techniques to check simulation between layers is also desirable when seeking for both feasibility and scalability of the refinement verification. In this article, we present CSim 2 a (compositional) rely-guarantee-based framework for the top-down verification of complex concurrent systems in the Isabelle/HOL theorem prover. CSim 2 uses CSimpl, a language with a high degree of expressiveness designed for the specification of concurrent programs. Thanks to its expressibility, CSimpl is able to model many of the features found in real world programming languages like exceptions, assertions, and procedures. CSim 2 provides a framework for the verification of rely-guarantee properties to compositionally reason on CSimpl specifications. Focusing on top-down verification, CSim 2 provides a simulation-based framework for the preservation of CSimpl rely-guarantee properties from specifications to implementations. By using the simulation framework, properties proven on the top layers (abstract specifications) are compositionally propagated down to the lowest layers (source or machine code) in each concurrent component of the system. Finally, we show the usability of CSim 2 by running a case study over two CSimpl specifications of an Arinc-653 communication service. In this case study, we prove a complex property on a specification, and we use CSim 2 to preserve the property on lower abstraction layers.

Ready, set, verify! applying hs-to-coq to real-world Haskell code (experience report)

Proving and Disproving Equivalence of Functional Programming Assignments

Practical Deductive Verification of OCaml Programs (Extended Version)

Auto-active Verification of Graph Algorithms, Written in OCaml

Completely Automated Equivalence Proofs

CoqQ: Foundational Verification of Quantum Programs

Modularity, Code Specialization, and Zero-Cost Abstractions for Program Verification

Static and Dynamic Verification of OCaml Programs: The Gospel Ecosystem (Extended Version)

A HAT Trick: Automatically Verifying Representation Invariants Using Symbolic Finite Automata

Verifying Asymptotic Time Complexity of Imperative Programs in Isabelle

Overcoming Restraint: Composing Verification of Foreign Functions with Cogent

Extracting functional programs from Coq, in Coq

Hammer for Coq: Automation for Dependent Type Theory

A Higher-Order Abstract Syntax Approach to the Verified Compilation of Functional Programs

CoLoR: a Coq library on well-founded rewrite relations and its application to the automated verification of termination certificates

CSim 2

Automated Verification of Higher-Order Probabilistic Programs via a Dependent Refinement Type System

Towards a Scalable Proof Engine: A Performant Prototype Rewriting Primitive for Coq

Functional Pearl: Theorem Proving for All (Equational Reasoning in Liquid Haskell)

Automated Verification of Reactive and Concurrent Programs by Calculation

Cameleer: a Deductive Verification Tool for OCaml (extended version)