Table Of ContentLecture Notes in Computer Science 6664
CommencedPublicationin1973
FoundingandFormerSeriesEditors:
GerhardGoos,JurisHartmanis,andJanvanLeeuwen
EditorialBoard
DavidHutchison
LancasterUniversity,UK
TakeoKanade
CarnegieMellonUniversity,Pittsburgh,PA,USA
JosefKittler
UniversityofSurrey,Guildford,UK
JonM.Kleinberg
CornellUniversity,Ithaca,NY,USA
AlfredKobsa
UniversityofCalifornia,Irvine,CA,USA
FriedemannMattern
ETHZurich,Switzerland
JohnC.Mitchell
StanfordUniversity,CA,USA
MoniNaor
WeizmannInstituteofScience,Rehovot,Israel
OscarNierstrasz
UniversityofBern,Switzerland
C.PanduRangan
IndianInstituteofTechnology,Madras,India
BernhardSteffen
TUDortmundUniversity,Germany
MadhuSudan
MicrosoftResearch,Cambridge,MA,USA
DemetriTerzopoulos
UniversityofCalifornia,LosAngeles,CA,USA
DougTygar
UniversityofCalifornia,Berkeley,CA,USA
GerhardWeikum
MaxPlanckInstituteforInformatics,Saarbruecken,Germany
Michael Butler Wolfram Schulte (Eds.)
FM 2011:
Formal Methods
17thInternationalSymposiumonFormalMethods
Limerick, Ireland, June 20-24, 2011
Proceedings
1 3
VolumeEditors
MichaelButler
UniversityofSouthampton,ElectronicsandComputerScience
Highfield,SouthamptonS0171BJ,UK
E-mail:[email protected]
WolframSchulte
MicrosoftResearch
OneMicrosoftWay,Redmond,WA98052-6399,USA
E-mail:[email protected]
ISSN0302-9743 e-ISSN1611-3349
ISBN978-3-642-21436-3 e-ISBN978-3-642-21437-0
DOI10.1007/978-3-642-21437-0
SpringerHeidelbergDordrechtLondonNewYork
LibraryofCongressControlNumber:2011928375
CRSubjectClassification(1998):D.2,F.3,D.3,D.1,J.1,K.6,F.4
LNCSSublibrary:SL2–ProgrammingandSoftwareEngineering
©Springer-VerlagBerlinHeidelberg2011
Thisworkissubjecttocopyright.Allrightsarereserved,whetherthewholeorpartofthematerialis
concerned,specificallytherightsoftranslation,reprinting,re-useofillustrations,recitation,broadcasting,
reproductiononmicrofilmsorinanyotherway,andstorageindatabanks.Duplicationofthispublication
orpartsthereofispermittedonlyundertheprovisionsoftheGermanCopyrightLawofSeptember9,1965,
initscurrentversion,andpermissionforusemustalwaysbeobtainedfromSpringer.Violationsareliable
toprosecutionundertheGermanCopyrightLaw.
Theuseofgeneraldescriptivenames,registerednames,trademarks,etc.inthispublicationdoesnotimply,
evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfromtherelevantprotectivelaws
andregulationsandthereforefreeforgeneraluse.
Typesetting:Camera-readybyauthor,dataconversionbyScientificPublishingServices,Chennai,India
Printedonacid-freepaper
SpringerispartofSpringerScience+BusinessMedia(www.springer.com)
Preface
The FM 2011 Symposium was held in Limerick during June 20–24, 2011. FM
2011wasthe 17thinaseriesofsymposiaorganizedbyFormalMethods Europe,
an independent association whose aim is to stimulate the use of, and research
on, formal methods for software development.
The FM 2011 Symposium had the goal of highlighting and celebrating ad-
vancesandmaturityinformalmethodsresearch,education,anddeploymentvia
toolsupportandindustrialbestpractice,andtheirroleinavarietyofindustries
and domains. The call for papers invited contributions covering the use of for-
mal methods in practice, tools for formal methods, the role of formal methods
insoftwareandsystemsengineering,theoreticalfoundationsforformalmethods
and teaching of formal methods.
Therewere101submissionsintotalforFM2011.After thoroughreviewand
discussion, including a rebuttal phase where authors were invited to submit a
shortresponse to the reviews, the committee decided to accept 29 papers based
on originality, technical soundness, presentation and relevance to the themes of
FM 2011.
The papers accepted covered a range of topics including the use of formal
methods for analysis of cyber-physical systems and secure systems. Several pa-
personreasoningaboutconcurrencyandaboutdynamicstructureswereselected
as well as papers addressing process algebra. On the tools front, there were pa-
pers on tools for model checking, runtime verification and programcompilation
and transformation. There were also papers on verification experiments and on
formal methods education. The authors of the submitted papers represented 36
different countries
The symposium included three exciting and challenging presentations from
invitedspeakers.JanosSztipanovitsgaveatalkonmodellingandcyber-physical
systems,DavidHarelgaveatalkonbehavioralprogrammingandJasminFisher
gave a talk on executable biology.
We wish to thank the members of the Program Committee and the numer-
ous sub-reviewers for their work. Lero, the Irish Software Engineering Research
Centre, at the University of Limerick, hosted the conference. Thanks to Mike
Hinchey and other Lero members for managing the local organization and to
FMEfortheirstrongsupportofthesymposium.TheEasychairsystemwasused
for management of the submission and reviewing process. Thanks to Springer
for publication of the proceedings.
April 2011 Michael Butler
Wolfram Schulte
Organization
General Chair Mike Hinchey, Lero
ProgramChairs Michael Butler, University of Southampton
Wolfram Schulte, Microsoft Research
Workshop Chairs Emil Vassev, Lero
David Sinclair, Lero
Tutorials Chair Nico Plat, West Consulting
Industry Day Chairs Andrew Butterfield, Trinity College Dublin
Thierry Lecomte, ClearSy
Doctoral Chair Norah Power,Lero
Publicity Chair Jonathan P. Bowen, Museophile Limited
Program Committee
Farhad Arbab CWI and Leiden University, The Netherlands
Jos Baeten TUE
Anindya Banerjee IMDEA Software Institute, Spain
David Basin ETH Zurich, Switzerland
Eerke Boiten University of Kent, UK
Jonathan P. Bowen Museophile Limited, UK
Michael Butler University of Southampton, UK
Andrew Butterfield Trinity College Dublin, Ireland
Ana Cavalcanti University of York, UK
Byron Cook Microsoft Research
Jin Song Dong National University of Singapore
Colin Fidge Queensland University of Technology, Australia
Bernd Finkbeiner Saarland University, Germany
John Fitzgerald Newcastle University, UK
Marc Frappier University of Sherbrooke,Canada
Dimitra Giannakopoulou Carnegie Mellon / NASA Ames, USA
Stefania Gnesi ISTI-CNR Pisa, Italy
Reiner Hahnle Chalmers University of Technology, Sweden
Klaus Havelund Jet Propulsion Laboratory,California Institute of
Technology, USA
VIII Organization
Mats Heimdahl University of Minnesota, USA
Jane Hillston University of Edinburgh, UK
Daniel Jackson MIT, USA
Einar Broch Johnsen University of Oslo, Norway
Randolph Johnson National Security Agency, USA
Sarfraz Khurshid The University of Texas at Austin, USA
Gerwin Klein NICTA and UNSW, Australia
Daniel Kroening Computing Laboratory,Oxford University, UK
Regine Laleau Paris Est Creteil University, France
Kim Larsen Aalborg University, Denmark
Peter Gorm Larsen Aarhus School of Engineering, Denmark
Timo Latvala Space Systems, Finland
Gary Leavens University of Central Florida, USA
Elizabeth Leonard Naval Research Laboratory, USA
Michael Leuschel University of Du¨sseldorf, Germany
Zhiming Liu United Nations University - International Institute
for Software Technology, Macao
Tom Maibaum McMaster University, Canada
Joao Marques-Silva University College Dublin, Ireland
Sjouke Mauw University of Luxembourg
Annabelle Mciver Macquarie University, Australia
Sim˜ao Melo De Sousa LIACC and Departamento de Inform´atica,
Universidade da Beira Interior, Portugal
Tobias Nipkow TU Mu¨nchen, Germany
Manuel Nunez University Complutense de Madrid, Spain
Colin O’Halloran QinetiQ
Jose Nuno Oliveira Universidade do Minho, Portugal
Ganesan Ramalingam Microsoft Research
S Ramesh India Science Lab., GM R&D Labs., Bangalore
Grigore Rosu Runtime Verification, Inc., and The University
of Illinois at Urbana-Champaign,USA
Andreas Roth SAP Research
Augusto Sampaio Federal University of Pernambuco,Brazil
Wolfgang Schreiner Research Institute for Symbolic Computation
(RISC), Austria
Wolfram Schulte Microsoft Research
Kaisa Sere Abo Akademi University, Finland
Kenji Taguchi AIST Japan
Andrzej Tarlecki Institute of Informatics, Faculty of Mathematics,
Informatics and Mechanics, Warsaw University,
Poland
Mark Utting The University of Waikato, New Zealand
Huibiao Zhu Software Engineering Institute, East China
Normal University, China
Organization IX
Additional Reviewers
Aguirre, Nazareno Ji, Ran
Ahrendt, Wolfgang Jonker, Hugo
Ait Ameur, Yamine Jost, Steffen
Alglave, Jade Kaiser, Alexander
Alkassar, Eyad Kamali, Maryam
Andres, Cesar Khalek, Shadi
Andr´e, E´tienne Kozyura, Vitaly
Bendisposto, Jens Kumar Mohalik, Swarup
Bertolini, Cristiano Li, Qin
Bherer, Hans Lin, Shang-Wei
Bostr¨om, Pontus Liu, Yang
Broda, Sabine Llana, Luis
Bryans, Jeremy W. Malkis, Alexander
Bubel, Richard Mammar, Amel
B¨ohme, Sascha Mariano, Georges
Bøgholm, Thomas Markovski,Jasen
Castro, Pablo Marriott, Chris
Cazorla, Diego Mazzanti, Franco
Chen, Chunqing Mehlhorn, Kurt
Cornelio, Marcio Meinicke, Larissa
Crocker,Paul Meredith, Patrick
Daum, Matthias Moreira, Nelma
Degerlund, Fredrik Morgan, Carroll
Demasi, Ramiro Mota, Alexandre
Dimitrova, Rayna Murray, Toby
Donaldson, Alastair Myreen, Magnus O.
Ehlers, Ru¨diger Møller, Mikael H.
Ellison, Chucky Naumann, David
Fantechi, Alessandro Nishihara, Hideki
Ferrari, Alessio Nogueira, Sidney
Genaim, Samir Nokhbeh, Razieh
Gervais, Frederic Olesen, Mads Chr.
Gopinath, Divya Olszewska Plaska, Marta
Greenaway,David Pang, Jun
Gregorio-Rodr´ıguez,Carlos Patcas, Lucian
Griesmayer,Andreas Pereira, David
Haller, Leopold Peter, Hans-J¨org
Hansen, Helle Hvid Plagge, Daniel
He, Nannan Qiu, Zongyan
Hoang, Thai Son Rabe, Markus
Homeier, Peter Reniers, Michel
Ilic, Dubravka Rinetzky, Noam
Jacobs, Bart Rodrigues, Vitor Gabriel
X Organization
Rosa, Fernando Stolz, Volker
Ruemmer, Philipp Sun, Jun
Rungta, Neha Tapia Tarifa, Silvia Lizeth
Ryan, Mark Tautschnig, Michael
Satpathy, Manoranjan Vain, Juri
Schlatte, Rudolf Valarcher, Pierre
Schmidt, Benedikt Van De Mortel-Fronczak,Asia
Scha¨f, Martin Varpaaniemi, Kimmo
Serbanuta, Traian Wei, Wei
Siddiqui, Junaid Westerholm, Jan
Sprenger, Christoph Winwood, Simon
Stefanescu, Andrei Yang, Guowei
Steffen, Martin Yatsu, Hirokazu
Table of Contents
Invited Talks
Model Integration and Cyber Physical Systems: A Semantics
Perspective...................................................... 1
Janos Sztipanovits
Some Thoughts on Behavioral Programming......................... 2
David Harel
The Only Way Is Up ............................................. 3
Jasmin Fisher, Nir Piterman, and Moshe Y. Vardi
Cyber-Physical Systems
Does It Pay to Extend the Perimeter of a World Model? .............. 12
Werner Damm and Bernd Finkbeiner
System Verification through ProgramVerification .................... 27
Daniel Dietsch, Bernd Westphal, and Andreas Podelski
Adaptive Cruise Control: Hybrid, Distributed, and Now Formally
Verified......................................................... 42
Sarah M. Loos, Andr´e Platzer, and Ligia Nistor
Runtime Analysis
TraceContract: A Scala DSL for Trace Analysis .................. 57
Howard Barringer and Klaus Havelund
Using Debuggers to Understand Failed Verification Attempts .......... 73
Peter Mu¨ller and Joseph N. Ruskiewicz
Sampling-Based Runtime Verification............................... 88
Borzoo Bonakdarpour, Samaneh Navabpour, and
Sebastian Fischmeister
Case Studies / Tools
Specifying and Verifying the SYNERGY ReconfigurationProtocolwith
LOTOS NT and CADP........................................... 103
Fabienne Boyer, Olivier Gruber, and Gwen Salau¨n
