## Formale Methoden der Softwareentwicklung

Dozenten | Dr Tadeusz Litak und Christoph Rauch |

Umfang | Vorlesung+Übung, 4 SWS, ECTS-Credits: 7,5 |

Zeit und Ort | Di, Mi, 16:15 - 17:45, 01.255-128 |

### Slides

The slides are protected by a password the participants of the course can obtain directly from me:

- Oct 18: Introducing LTL
- Oct 24: Introducing CTL
- Nov 14: Model checking for CTL
- Nov 21: CTL* and in the second part introduction to bounded model checking
- Dec 19: Soundness of Hoare calculus

### Tutorials

## A general description

### Contents

In the first part of the course, we will engage in the formal verification of reactive systems. Students learn the syntax and semantics of the temporal logics LTL, CTL, and CTL* and their application in the specification of e.g. safety and liveness properties of systems. Simple models of systems are designed and verified using model checkers and dedicated frameworks for asynchronous and synchronous reactive systems, and the algorithms working in the background are explained.

The second part of the course focuses on functional correctness of programs; more precisely, we discuss the theory of pre- and postconditions, Hoare triples, loop invariants, and weakest (liberal) preconditions, in order to introduce automatised correctness proofs using the Hoare calculus.

- Tools we are planning to use for the first part of the material include at least the model checker nuSMV/nuXmv.
- Tools we are planning to use for the second part of the material include at least the framework frama-c
- Depending on whether there is more interest in the first or in the second part (and on other factors), we will devote the remaining tutorials either to SCADE or to VeriFast, correspondingly.

### Literatur

- G. Winskel: The Formal Semantics of Programming Languages: An Introduction, The MIT Press, 1993.
- Ch. Baier, J-P. Katoen, Principles of Model Checking, The MIT Press, 2008.
- M. Huth, M. Ryan: Logic in Computer Science, Cambridge University Press, 2. Aufl., 2004.