From symptom to cause: localizing errors in counterexample traces
There is significant room for improving users' experiences with model checking tools. An
error trace produced by a model checker can be lengthy and is indicative of a symptom of an …
error trace produced by a model checker can be lengthy and is indicative of a symptom of an …
Program repair as a game
We present a conservative method to automatically fix faults in a finite state program by
considering the repair problem as a game. The game consists of the product of a modified …
considering the repair problem as a game. The game consists of the product of a modified …
What went wrong: Explaining counterexamples
One of the chief advantages of model checking is the production of counterexamples
demonstrating that a system does not satisfy a specification. However, it may require a great …
demonstrating that a system does not satisfy a specification. However, it may require a great …
Explaining counterexamples using causality
I Beer, S Ben-David, H Chockler, A Orni… - Formal Methods in System …, 2012 - Springer
When a model does not satisfy a given specification, a counterexample is produced by the
model checker to demonstrate the failure. A user must then examine the counterexample …
model checker to demonstrate the failure. A user must then examine the counterexample …
Error explanation with distance metrics
In the event that a system does not satisfy a specification, a model checker will typically
automatically produce a counterexample trace that shows a particular instance of the …
automatically produce a counterexample trace that shows a particular instance of the …
Minimal assignments for bounded model checking
A traditional counterexample to a linear-time safety property shows the values of all signals
at all times prior to the error. However, some signals may not be critical to causing the …
at all times prior to the error. However, some signals may not be critical to causing the …
Error explanation with distance metrics
A Groce - International Conference on Tools and Algorithms for …, 2004 - Springer
In the event that a system does not satisfy a specification, a model checker will typically
automatically produce a counterexample trace that shows a particular instance of the …
automatically produce a counterexample trace that shows a particular instance of the …
[書籍][B] Counterexamples revisited: Principles, algorithms, applications
Algorithmic counterexample generation is a central feature of model checking which sets the
method apart from other approaches such as theorem proving. The practical value of …
method apart from other approaches such as theorem proving. The practical value of …
Explaining abstract counterexamples
When a program violates its specification a model checker produces a counterexample that
shows an example of undesirable behavior. It is up to the user to understand the error …
shows an example of undesirable behavior. It is up to the user to understand the error …
Finding and fixing faults
We present a method for combined fault localization and correction for sequential systems.
We assume that the specification is given in linear-time temporal logic and state the …
We assume that the specification is given in linear-time temporal logic and state the …