Automated environment generation for software model checking

• Published in: 18th IEEE International Conference on Automated Software Engineering, 2003. Proceedings pp. 116 - 127
• Main Authors: Tkachuk, Oksana, Dwyer, Matthew B., Pasareanu, Corina S.
• Format: Conference Proceeding
• Language: English
• Published: Piscataway, NJ, USA IEEE Press 06.10.2003; IEEE
• Series: ACM Conferences
• Subjects: Computational Intelligence Society; Context modeling; Costs; Independent component analysis; Java; NASA; Open systems; Software and its engineering; Software and its engineering > Software organization and properties; Software and its engineering > Software organization and properties > Software functional properties; Software and its engineering > Software organization and properties > Software functional properties > Formal methods; Software and its engineering > Software organization and properties > Software functional properties > Formal methods > Model checking; Software systems; Space technology; Yarn
• ISBN: 0769520359; 9780769520353
• ISSN: 1938-4300
• DOI: 10.1109/ASE.2003.1240300

A key problem in model checking open systems is environment modeling (i.e., representing the behavior of the execution context of the system under analysis). Software systems are fundamentally open since their behavior is dependent on patterns of invocation of system components and values defined outside the system but referenced within the system. Whether reasoning about the behavior of whole programs or about program components, an abstract model of the environment can be essential in enabling sufficiently precise yet tractable verification. In this paper, we describe an approach to generating environments of Java program fragments. This approach integrates formally specified assumptions about environment behavior with sound abstractions of environment implementations to form a model of the environment. The approach is implemented in the Bandera Environment Generator (BEG) which we describe along with our experience using BEG to reason about properties of several non-trivial concurrent Java programs.