NASA/CP–2005–212788 IEEE/NASA ISoLA 2005 IEEE/NASA Workshop on Leveraging Applications of Formal Methods, Verification, and Validation Tiziana Margaria, Bernhard Steffen, and Michael G. Hinchey, Editors Proceedings of a workshop held at the Loyola College Graduate Center Columbia, Maryland, USA 23–24 September 2005 September 2005 The NASA STI Program Offi ce … in Profi le Since its founding, NASA has been ded i cat ed to the • CONFERENCE PUBLICATION. Collected ad vance ment of aeronautics and space science. The pa pers from scientifi c and technical conferences, NASA Sci en tifi c and Technical Information (STI) symposia, sem i nars, or other meet ings spon sored Pro gram Offi ce plays a key part in helping NASA or co spon sored by NASA. maintain this im por tant role. • SPECIAL PUBLICATION. Scientifi c, tech ni cal, The NASA STI Program Offi ce is operated by or historical information from NASA pro grams, Langley Re search Center, the lead center for projects, and mission, often con cerned with sub- NASA’s scientifi c and technical in for ma tion. The jects having sub stan tial public interest. NASA STI Program Offi ce pro vides ac cess to the NASA STI Database, the largest col lec tion of • TECHNICAL TRANSLATION. En glish-language aero nau ti cal and space science STI in the world. trans la tions of foreign sci en tifi c and tech ni cal ma- The Pro gram Offi ce is also NASA’s in sti tu tion al terial pertinent to NASA’s mis sion. mech a nism for dis sem i nat ing the results of its research and de vel op ment ac tiv i ties. These results Specialized services that complement the STI Pro- are published by NASA in the NASA STI Report gram Offi ce’s diverse offerings include cre at ing Series, which includes the following report types: custom the sau ri, building customized da ta bas es, organizing and pub lish ing research results . even • TECHNICAL PUBLICATION. Reports of pro vid ing videos. com plet ed research or a major signifi cant phase of research that present the results of NASA pro- For more information about the NASA STI Pro gram grams and include ex ten sive data or the o ret i cal Offi ce, see the following: analysis. Includes com pi la tions of sig nifi cant • Access the NASA STI Program Home Page at scientifi c and technical data and in for ma tion http://www.sti.nasa.gov/STI-homepage.html deemed to be of con tinu ing ref er ence value. NASA’s counterpart of peer-re viewed formal • E-mail your question via the Internet to pro fes sion al papers but has less stringent lim i ta - [email protected] tions on manuscript length and ex tent of graphic pre sen ta tions. • Fax your question to the NASA Access Help Desk at (301) 621-0134 • TECHNICAL MEMORANDUM. Scientifi c and tech ni cal fi ndings that are pre lim i nary or of • Telephone the NASA Access Help Desk at spe cial ized interest, e.g., quick re lease reports, (301) 621-0390 working papers, and bib li og ra phies that contain • Write to: minimal annotation. Does not contain extensive NASA Access Help Desk analysis. NASA Center for AeroSpace In for ma tion • CONTRACTOR REPORT. Scientifi c and techni- 7121 Standard Drive cal fi ndings by NASA-sponsored con trac tors and Hanover, MD 21076–1320 grantees. NASA/CP–2005–212788 IEEE/NASA ISoLA 2005 IEEE/NASA Workshop on Leveraging Applications of Formal Methods, Verification, and Validation Editors: Tiziana Margaria University of Göttingen, Göttingen, Germany Bernhard Steffen University of Dortmund, Dortmund, Germany Michael G. Hinchey NASA Goddard Space Flight Center, Greenbelt, Maryland Proceedings of a workshop held at the Loyola College Graduate Center Columbia, Maryland, USA 23–24 September 2005 National Aeronautics and Space Administration Goddard Space Flight Center Greenbelt, Maryland 20771 September 2005 Available from: NASA Center for AeroSpace Information National Technical Information Service 7121 Standard Drive 5285 Port Royal Road Hanover, MD 21076-1320 Springfield, VA 22161 Price Code: A17 Price Code: A10 T. Margaria, B. Steffen, and M.G. Hinchey Preface This volume contains the Preliminary Proceedings of the 2005 IEEE ISoLA Workshop on Leverag- ing Applications of Formal Methods, Verification, and Validation, with a special track on the theme of Formal Methods in Human and Robotic Space Exploration. The workshop was held on 23–24 September 2005 at the Loyola College Graduate Center, Columbia, Maryland, USA. The idea behind the Workshop arose from the experience and feedback of ISoLA 2004—the 1st Inter- national Symposium on Leveraging Applications of Formal Methods—held in Paphos (Cyprus) held during October–November. ISoLA 2004 served the need of providing a forum for developers, users, and researchers to discuss issues related to the adoption and use of rigorous tools and methods for the specification, analysis, verification, certification, construction, test, and maintenance of systems from the point of view of their different application domains. The ISoLA series of events serves the purpose of bridging the gap between designers and developers of rigorous tools, and users in engineering and in other disciplines, and to foster and exploit synergetic relationships among scientists, engineers, software developers, decision makers, and other critical thinkers in companies and organizations. In particular, by providing a venue for the discussion of common problems, requirements, algorithms, methodologies, and practices, ISoLA aims at support- ing researchers in their quest to improve the utility, reliability, flexibility, and efficiency of tools for building systems, and users in their search for adequate solutions to their problems. This Workshop has a particular focus on Formal Methods in Human and Robotic Space Exploration. It concentrates on application domains relevant to the use of rigorous and/or provable techniques in several aspects of space exploration, as well as on the enabling technologies and infrastructure. The workshop program consisted of one keynote lecture by John Knight (University of Virginia, USA); two invited talks by Ramesh Bharadwaj (Naval Research Laboratory, Washington, DC) and by César A. Muñoz (National Institute of Aerospace, Hampton, VA); and three thematic sessions composed of nine regular papers, and a panel. Additionally, two doctoral symposium sessions offered students the possibility to orally present and demonstrate their ongoing research in the course of their graduate and advanced undergraduate studies. We thank the members of the Program committee and their sub-referees for selecting the papers to be presented. Our thanks also goes to Ben Benokraitis and Binod Rai of Loyola College in Maryland for the excellent local organization. Special thanks are due to the following organizations for their sponsorship: the IEEE-CS TC on Complexity in Computing, NASA Goddard Space Flight Center, Loyola College in Maryland (who provided extremely comfortable premises at their Graduate Center in Columbia), the University of Dortmund, and the University of Göttingen. We are also very grateful to the IFIP TC10 on Computer Systems Technology for the support granted to the doctoral students. Finally, we thank EASST for its endorsement of the workshop. — Tiziana Margaria, Bernhard Steffen, and Michael Hinchey iii IEEE/NASA ISoLA 2005 ISoLA 2005 Chairs and Committee Members General Chair Tiziana Margaria (University of Göttingen, Germany) Program Chairs Bernhard Steffen (University of Dortmund, Germany) Michael Hinchey (NASA GSFC, USA) Organization Chairs V.J. “Ben” Benokraitis (Loyola College in Maryland, USA) Binod Rai (Loyola College in Maryland, USA) Publicity Chairs Lenore Zuck (University of Illinois at Chicago, USA) Program Committee Yamine Ait Ameur (ENSMA, France) V.J. “Ben” Benokraitis (Loyola College in Maryland, USA) Ramesh Bharadwaj (Naval Research Laboratory, USA) Shawn Bohner (Virginia Tech, USA) Jonathan Bowen (London South Bank University, UK) Martin Featjer (JPL, USA) Stefania Gnesi (IEI Pisa, Italy) John Hatcliff (Kansas State University, USA) Joost Kok (University of Leiden, The Netherlands) Mike Lowry (NASA Ames, USA) Markus Müller-Olm (University of Dortmund, Germany) Jim Rash (NASA GSFC, USA) Chris Rouff (SAIC, USA) Walt Truszkowski (NASA GSFC, USA) iv T. Margaria, B. Steffen, and M.G. Hinchey Table of Contents 1. Hybrid Verification of an Air Traffic Operational Concept C.A. Muñoz and G. Dowek . .1 2. Modelling SystemC Scheduler by Refinement D. Cansell, D. Méry, and C. Proch. 15 3. REAL-IT: Model-Based Interface Development Environment A.N. Ivanov and D.V. Koznov . 31 4. Flexibility in Modeling Languages and Tools: A Call to Arms E. Van Wyk and M.P.E. Heimdahl. 41 5. Satisfiability Solving for Software Verification D. Déharbe and S. Ranise . .53 6. Model Checking C Source Code for Embedded Systems B. Schlich and S. Kowalewski . .65 7. Towards the Verification of Human-Robot Teams M. Fisher, E. Pearce, M. Wooldridge, M. Sierhuis, W. Visser, and R.H. Bordini . .79 8. Formalizing Interoperability for Test Case Generation Purposes A. Desmoulin and C. Viho. .95 9. Encoding a Process Algebra Using the Event B Method: Application to the Validation of User Interfaces Y. Ait-Ameur, M. Baron, and N. Kamel . 109 10. An Automated Testing Experiment for Multi-Layered Embedded C Code B. Chetali, M.-N. Lepareux, and Q.-H. Nguyen . 127 v T. Margaria, B. Steffen, and M.G. Hinchey HYBRID VERIFICATION OF AN AIR TRAFFIC OPERATIONAL CONCEPT∗ Cesar´ A. Munoz˜ † National Institute of Aerospace, USA Gilles Dowek‡ Ecole´ polytechnique, France ABSTRACT A concept of operations for air traffic management consists of a set of flight rules and procedures aimed to keep aircraft safely separated. This paper reports on the formal verification of separation properties of the NASAʼs Small Aircraft Transportation System, Higher Volume Operations (SATS HVO) concept for non-towered, non-radar airports.