• Publications
  • Influence
Formal Verification for Fault-Tolerant Architectures: Prolegomena to the Design of PVS
TLDR
PVS is the most recent in a series of verification systems developed at SRI. Expand
  • 669
  • 42
  • PDF
ANNA A Language for Annotating Ada Programs
TLDR
Anna is a proposed language extension of Ada to include facilities for formally specifying the intended behavior of Ada programs (or portions thereof) at all stages of program development. Expand
  • 141
  • 6
Formal Verification of Algorithms for Critical Systems
TLDR
The authors describe their experience with formal, machine-checked verification of algorithms for critical applications, concentrating on a Byzantine fault-tolerant algorithm for synchronizing clocks in the replicated computers of a digital flight control system. Expand
  • 61
  • 5
An Overview of Anna, a Specification Language for Ada
TLDR
The Anna approach to specification language design strengthens the existing explanatory constructs in Ada and adds new ones where there is an obvious need. Expand
  • 249
  • 4
  • PDF
Pvs: a Prototype Veriication System
5] John Rushby. F ormal speciication and veriication of a fault-masking and transient-recovery model for digital ight-control systems. In Vytopil 10], pages 237{257. 6] John Rushby a n d F riedrich vExpand
  • 134
  • 4
  • PDF
Real-World Reasoning with OWL
TLDR
This paper tries to provide some insights into currently available reasoning approaches and aims at identifying requirements to make future benchmarks more useful for application developers. Expand
  • 50
  • 4
  • PDF
Formal verification of algorithms for critical systems
TLDR
We describe our experience with formal, machine- checked verification of algorithms for critical applications, con- centrating on a Byzantine fault-tolerant algorithm for synchro- nizing the clocks in the replicated computers of a digital flight control system. Expand
  • 55
  • 2
Rigorous development of a safety-critical system based on coordinated atomic actions
TLDR
This paper describes our experience using coordinated atomic (CA) actions as a system structuring tool to design and validate a sophisticated control system for a complex industrial application that has high reliability and safety requirements. Expand
  • 62
  • 2
  • PDF
A Completely Verified Realistic Bootstrap Compiler
TLDR
This paper reports on a large verification effort in constructing an initial fully trusted bootstrap compiler executable for a realistic system programming language and real target processor that guarantees, for the first time, trusted execution of generated machine programs. Expand
  • 14
  • 2
A Mechanically Verified Compiling Specification for a Realistic Compiler ∗
We report on a large formal verification effort in mechanically proving correct a compiling specification for a realistic bootstrap compiler from ComLisp (a subset of ANSI Common Lisp sufficientlyExpand
  • 8
  • 2
  • PDF