Lecture Notes in Computer Science 1945 Edited by G. Goos, J. Hartmanis and J. van Leeuwen

Lecture Notes in Computer Science 1945 Edited by G. Goos, J. Hartmanis and J. van Leeuwen

3 Berlin Heidelberg New York Barcelona Hong Kong London Milan Paris Singapore Tokyo

Wolfgang Grieskamp Thomas Santen Bill Stoddart (Eds.) Integrated Formal Methods Second International Conference, IFM 2000 Dagstuhl Castle, Germany, November 1-3, 2000 Proceedings 13

Series Editors Gerhard Goos, Karlsruhe University, Germany Juris Hartmanis, Cornell University, NY, USA Jan van Leeuwen, Utrecht University, The Netherlands Volume Editors Wolfgang Grieskamp Thomas Santen TU Berlin, Sekr. FR 5-13 bzw. 5-6 Franklinstr. 28-29, 10587 Berlin, Germany E-mail: {wg,santen}@cs.tu-berlin.de Bill Stoddart University of Teesside School of Computing and Mathematics Middlesbrough TS1 3BA, UK E-mail: bill@tees.ac.uk Cataloging-in-Publication Data applied for Die Deutsche Bibliothek - CIP-Einheitsaufnahme Integrated formal methods : second international conference ; proceedings / IFM 2000, Dagstuhl Castle, Germany, November 1-3, 2000. Wolfgang Grieskamp... (ed.). - Berlin ; Heidelberg ; New York ; Barcelona ; Hong Kong ; London ; Milan ; Paris ; Singapore ; Tokyo : Springer, 2000 (Lecture notes in computer science ; Vol. 1945) ISBN 3-540-41196-8 CR Subject Classification (1998): F.3, D.3, D.2, D.1 ISSN 0302-9743 ISBN 3-540-41196-8 Springer-Verlag Berlin Heidelberg New York This work is subject to copyright. All rights are reserved, whether the whole or part of the material is concerned, specifically the rights of translation, reprinting, re-use of illustrations, recitation, broadcasting, reproduction on microfilms or in any other way, and storage in data banks. Duplication of this publication or parts thereof is permitted only under the provisions of the German Copyright Law of September 9, 1965, in its current version, and permission for use must always be obtained from Springer-Verlag. Violations are liable for prosecution under the German Copyright Law. Springer-Verlag Berlin Heidelberg New York a member of BertelsmannSpringer Science+Business Media GmbH Springer-Verlag Berlin Heidelberg 2000 Printed in Germany Typesetting: Camera-ready by author, data conversion by PTP-Berlin, Stefan Sossna Printed on acid-free paper SPIN: 10780898 06/3142 543210

Preface IFM 2000, the second in a series of international conferences on Integrated Formal Methods, was held at the 18th-century château of Schloss Dagstuhl, Saarland, Germany, from the 1st to the 3rd of November 2000. The conference programme consisted of invited talks from Sir Tony Hoare FRS and Wolfram Schulte, along with 22 papers selected from 58 submissions. Applying formal methods may involve the modelling of different aspects of a system that are expressed through different paradigms. This motivates us to research the combination of different viewpoints of a system, either by the creation of hybrid notations, by extending existing notations, by translating between notations, or by incorporating a wider perspective with the innovative use of an existing notation. The integration of formal methods promises great benefits to systems modelling and software development. Regardless of the approach taken, however, significant issues can arise in areas such as semantic integration, the tractability of our notations, the integration of tool support, the integration of proof systems, consistency, and completeness. Issues arise equally in our conceptualisation of systems at different levels of abstraction and the development of these conceptualisations through the process of refinement. The stated theme of IFM 99 was the integration of state-based and behavioural formalisms. For IFM 2000 this was widened, and the submitted papers have been grouped in five technical sessions, covering the linking and extending of notations, methodology, the foundation of one formalism in another, semantics, and aspects of verification and validation. We hope that these proceedings will be of benefit both to the conference participants and to the wider community of workers in the field. The production of these proceedings would not have been possible without the invaluable help of the programme committee and external referees, and of all the contributors who submitted papers to the conference. November 2000 Wolfgang Grieskamp Thomas Santen Bill Stoddart

Organization Wolfgang Grieskamp, Technical University of Berlin, Germany Thomas Santen, Technical University of Berlin, Germany Bill Stoddart, University of Teesside, UK Program Committee Keijiro Araki (Kyushu, Japan) Didier Bert (Grenoble, France) Egon Börger (Pisa, Italy) Jonathan Bowen (London, UK) Micheal Butler (Southampton, UK) Jim Davies (Oxford, UK) John Derrick (Kent, UK) Jin Song Dong (Singapore) Heiko Dörr (Berlin, Germany) John Fitzgerald (Newcastle, UK) Andy Galloway (York, UK) Chris George (Macao) Wolfgang Grieskamp (Berlin, Germany) Henri Habrias (Nantes, France) Susumu Hayashi (Kobe, Japan) Maritta Heisel (Magdeburg, Germany) Mike Hinchey (Omaha, USA) Bernd Krieg-Brückner (Bremen, Germany) Michel Lemoine (Toulouse, France) Shaoying Liu (Hiroshima, Japan) John McDermid (York, UK) Dominique Méry (Nancy, France) Thomas Santen (Berlin, Germany) Steve Schneider (London, UK) Wolfram Schulte (Redmond, USA) Jane Sinclair (Warwick, UK) Graeme Smith (Brisbane, Australia) Bill Stoddart (Teesside, UK) Kenji Taguchi (Uppsala, Sweden) W J (Hans) Toetenel (Delft, Holland) Heike Wehrheim (Oldenburg, Germany) Additional Reviewers Richard Banach Christie Bolton Dominique Cansell David Carrington Marc Cavazza Michael Cebulla Steve Dunne Carla Ferreira Dennis Furey He Jifeng Monika Heiner Steffen Helke Dang van Hung Tomasz Janowski Markus Lepper Liu Jing Brendan Mahony Stephan Merz Michael Meyer zu Hoerste Tim Mossakowski Steve Paynter Jean-Claude Reynaud Dean Rosenzweig Mark Saaltink Holger Schlingloff Carron Shankland Kim Soon-Kyeong Carsten Sühl Ulrich Ultes-Nitsche Jacob Wieland Qiwen Xu Hirokazu Yatsu Shoji Yuen

Table of Contents Invited Talk Assertions... 1 Tony Hoare Linking and Extending Notations State-Based Extension of CASL... 3 Hubert Baumeister and Alexandre Zamulin Linking DC Together with TRSL... 25 Anne Elisabeth Haxthausen and Xia Yong Formalizing Timing Diagrams as Causal Dependencies for Verification Purposes... 45 Jörg Fischer and Stefan Conrad A Process Compensation Language... 61 Michael Butler and Carla Ferreira Activity Graphs and Processes... 77 Christie Bolton and Jim Davies Structuring Real-Time Object-Z Specifications... 97 Graeme Smith and Ian Hayes ISpec: Towards Practical and Sound Interface Specifications...116 Hans B.M. Jonkers Methodology Cooperation of Formal Methods in an Engineering Based Software Development Process...136 Yamine Ait-Ameur Developing Control Systems Components...156 Luigia Petre and Kaisa Sere Specification and Analysis of Automata-Based Designs...176 Jeremy Bryans, Lynne Blair, Howard Bowman, and John Derrick Structural Refinement in Object-Z / CSP...194 John Derrick and Graeme Smith

X Table of Contents Towards a Unified Development Methodology for Shared-Variable Parallel and Distributed Programs...214 Jürgen Dingel Foundation of One Formalism by Another Construction of Finite Labelled Transition Systems from B Abstract Systems...235 Didier Bert and Francis Cave µ-charts and Z: Hows, Whys, and Wherefores...255 Greg Reeve and Steve Reeves Combining Operational Semantics, Logic Programming and Literate Programming in the Specification and Animation of the Verilog Hardware Description Language...277 Jonathan P. Bowen Invited Talk Why Doesn t Anyone Use Formal Methods?...297 Wolfram Schulte Semantics How to Write a Healthiness Condition...299 Yifeng Chen A Concurrent and Compositional Petri Net Semantics of Preemption...318 Hanna Klaudel and Franck Pommereau Verification and Validation An Approach to Symbolic Test Generation...338 Vlad Rusu, Lydie du Bousquet, and Thierry Jéron Behavioral Conformance Verification in an Integrated Approach Using UML and B...358 Eric Meyer and Thomas Santen Predicate Diagrams for the Verification of Reactive Systems...380 Dominique Cansell, Dominique Méry, and Stephan Merz Modular Verification for a Class of PLTL Properties...398 Pierre-Alain Masson, Hassan Mountassir, and Jacques Julliand Towards Model Checking Stochastic Process Algebra...420 Holger Hermanns, Joost-Pieter Katoen, Joachim Meyer-Kayser, and Markus Siegle Author Index... 441