Tactical contract composition for hybrid system component verification

Andreas Müller, Stefan Mitsch, Werner Retschitzegger, Wieland Schwinger, André Platzer

Publikation: Beitrag in FachzeitschriftArtikelBegutachtung

14 Zitate (Scopus)

Abstract

We present an approach for hybrid systems that combines the advantages of component-based modeling (e.g., reduced model complexity) with the advantages of formal verification (e.g., guaranteed contract compliance). Component-based modeling can be used to split large models into multiple component models with local responsibilities to reduce modeling complexity. Yet, this only helps the analysis if verification proceeds one component at a time. In order to benefit from the decomposition of a system into components for both modeling and verification purposes, we prove that the safety of compatible components implies safety of the composed system. We implement our composition theorem as a tactic in the KeYmaera X theorem prover, allowing automatic generation of a KeYmaera X proof for the composite system from proofs for the components without soundness-critical changes to KeYmaera X. Our approach supports component contracts (i.e., input assumptions and output guarantees for each component) that characterize the magnitude and rate of change of values exchanged between components. These contracts can take into account what has changed between two components in a given amount of time since the last exchange of information.

OriginalspracheEnglisch
Aufsatznummer6
Seiten (von - bis)615 - 643
Seitenumfang29
FachzeitschriftInternational Journal on Software Tools for Technology Transfer
Jahrgang20
Ausgabenummer6
DOIs
PublikationsstatusVeröffentlicht - 1 Nov. 2018

Fingerprint

Untersuchen Sie die Forschungsthemen von „Tactical contract composition for hybrid system component verification“. Zusammen bilden sie einen einzigartigen Fingerprint.

Zitieren