A Fully Verified Executable LTL Model Checker

Javier Esparza (1) , Peter Lammich (1) , René Neumann (1) , Tobias Nipkow (1) , Alexander Schimpf (2) , Jan-Georg Smaus (3)

1 TUM - Technische Universität Munchen - Technical University Munich - Université Technique de Munich
2 University of Freiburg [Freiburg]
3 IRIT-ACADIE - Assistance à la Certification d’Applications DIstribuées et Embarquées

We present an LTL model checker whose code has been completely verified using the Isabelle theorem prover. The checker consists of over 4000 lines of ML code. The code is produced using recent Isabelle technology called the Refinement Framework, which allows us to split its correctness proof into (1) the proof of an abstract version of the checker, consisting of a few hundred lines of “formalized pseudocode”, and (2) a verified refinement step in which mathematical sets and other abstract structures are replaced by implementations of efficient structures like red-black trees and functional arrays. This leads to a checker that, while still slower than unverified checkers, can already be used as a trusted reference implementation against which advanced implementations can be tested. We report on the structure of the checker, the development process, and some experiments on standard benchmarks.

Mots clés: Model checking; Interactive theorem proving; LTL

Domaines: Génie logiciel [cs.SE]; Systèmes embarqués; Cryptographie et sécurité [cs.CR]; Interface homme-machine [cs.HC]; Architectures Matérielles [cs.AR]; Modélisation et simulation

Javier Esparza, Peter Lammich, René Neumann, Tobias Nipkow, Alexander Schimpf, et al.. A Fully Verified Executable LTL Model Checker. 25th International Conference on Computer Aided Verification (CAV 2013), Jun 2013, Saint Petersbourg, Russia. pp.463-478, ⟨10.1007/978-3-642-39799-8_31⟩. ⟨hal-01226469⟩