Refining Model Checking by Abstract Interpretation

被引:50
|
作者
Cousot P. [1 ,2 ]
Cousot R. [1 ,2 ]
机构
[1] École Normale Supérieure, DMI, 45, rue d'Ulm, Paris cedex 05
[2] CNRS & École Polytechnique, LIX, Palaiseau cedex
关键词
Abstract interpretation; Model-checking; Static analysis; Transition system; Universal safety;
D O I
10.1023/A:1008649901864
中图分类号
学科分类号
摘要
Formal methods combining abstract interpretation and model-checking have been considered for automated analysis of software. In abstract model-checking, the semantics of an infinite transition system is abstracted to get a finite approximation on which temporal-logic/μ-calculus model-checking can be directly applied. The paper proposes two improvements of abstract model-checking which can be applied to infinite abstract transition systems: - A new combination of forwards and backwards abstract fixed-point model-checking computations for universal safety. It computes a more precise result than that computed by conjunction of the forward and backward analyses alone, without needing to refine the abstraction; - When abstraction is unsound (as can happen in minimum/maximum path-length problems), it is proposed to use the partial results of a classical combination of forward and backward abstract interpretation analyses for universal safety in order to reduce, on-the-fly, the concrete state space to be searched by model-checking.
引用
收藏
页码:69 / 95
页数:26
相关论文
共 50 条