Formale Methoden der Softwareentwicklung

Time and Place

Mo 14:15 – 15:45 00.131-128
Di 12:15 – 13:45 01.255-128

A general description


In the first part of the course, we will engage in the formal verification of reactive systems. Students learn the syntax and semantics of the temporal logics LTL, CTL, and CTL* and their application in the specification of e.g. safety and liveness properties of systems. Simple models of systems are designed and verified using model checkers and dedicated frameworks for asynchronous and synchronous reactive systems, and the algorithms working in the background are explained.

The second part of the course focuses on functional correctness of programs; more precisely, we discuss the theory of pre- and postconditions, Hoare triples, loop invariants, and weakest (liberal) preconditions, in order to introduce automatised correctness proofs using the Hoare calculus.

  • Tools we are planning to use for the first part of the material include at least the model checker nuSMV/nuXmv.
  • Tools we are planning to use for the second part of the material include at least the framework frama-c
  • Depending on whether there is more interest in the first or in the second part (and on other factors), we will devote the remaining tutorials either to SCADE or to VeriFast, correspondingly.




  • G. Winskel: The Formal Semantics of Programming Languages: An Introduction, The MIT Press, 1993.
  • Ch. Baier, J-P. Katoen, Principles of Model Checking, The MIT Press, 2008.
  • M. Huth, M. Ryan: Logic in Computer Science, Cambridge University Press, 2. Aufl., 2004.