We combine model learning and model checking in a challenging case study involving
Linux, Windows and FreeBSD implementations of TCP. We use model learning to infer …

Variety of computing systems have been proposed to provide protection for sensitive code or
data through hardware or software mechanisms. This paper surveys the landscape of …

The control software of the CERN Compact Muon Solenoid experiment contains over 27 500
finite state machines. These state machines are organised hierarchically: commands are …

We revisit the IEEE 1394 high-performance serial bus (" FireWire"), which became a success
story in formal methods after three PhD students, by using process algebra and model …

We report on a case study in which the model checker Uppaal is used to formally model
parts of Zeroconf, a protocol for dynamic configuration of IPv4 link-local addresses that has …

A topology-aware network is a dynamic network in which the nodes can detect whether
locally topology changes occur. Many modern networks, like IEEE 1394.1, are topology …

The timed automaton framework of Alur and Dill is a natural choice for the specification of
partially synchronous distributed systems (systems which have only partial information about …

In this paper we advocate that formal verification should be a part of the development of a
communication standard; in a short period of time issues are uncovered that have been in …

This article presents the formal work done for the ISO/IEEE P11073-20601 draft standard for
health informatics-personal health device communication-application profile-optimized …

The model checker Uppaal is used to formally model and analyze parts of Zeroconf, a
protocol for dynamic configuration of IPv4 link-local addresses that has been defined in RFC …