Anvil: Verifying liveness of cluster management controllers

X Sun, W Ma, JT Gu, Z Ma, T Chajed, J Howell… - … USENIX Symposium on …, 2024 - usenix.org
Modern clouds depend crucially on an extensible ecosystem of thousands of controllers,
each managing critical systems (eg, a ZooKeeper cluster). A controller continuously …

Mostly automated verification of liveness properties for distributed protocols with ranking functions

J Yao, R Tao, R Gu, J Nieh - Proceedings of the ACM on Programming …, 2024 - dl.acm.org
Distributed protocols have long been formulated in terms of their safety and liveness
properties. Much recent work has focused on automatically verifying the safety properties of …

Ivy: A multi-modal verification tool for distributed algorithms

KL McMillan, O Padon - … : 32nd International Conference, CAV 2020, Los …, 2020 - Springer
Ivy is a multi-modal verification tool for correct design and implementation of distributed
protocols and algorithms, supporting modular specification, implementation and proof. Ivy …

Deductive verification in decidable fragments with ivy

KL McMillan, O Padon - International Static Analysis Symposium, 2018 - Springer
This paper surveys the work to date on Ivy, a language and a tool for the formal specification
and verification of distributed systems. Ivy supports deductive verification using automated …

Prophecy variables for hyperproperty verification

R Beutner, B Finkbeiner - 2022 IEEE 35th Computer Security …, 2022 - ieeexplore.ieee.org
Temporal logics for hyperproperties like HyperLTL use trace quantifiers to express
properties that relate multiple system runs. In practice, the verification of such specifications …

Sound and complete witnesses for template-based verification of LTL properties on polynomial programs

K Chatterjee, A Goharshady, E Goharshady… - … Symposium on Formal …, 2024 - Springer
We study the classical problem of verifying programs with respect to formal specifications
given in the linear temporal logic (LTL). We first present novel sound and complete …

Verification of threshold-based distributed algorithms by decomposition to decidable logics

I Berkovits, M Lazić, G Losa, O Padon… - … City, NY, USA, July 15-18 …, 2019 - Springer
Verification of fault-tolerant distributed protocols is an immensely difficult task. Often, in these
protocols, thresholds on set cardinalities are used both in the process code and in its …

Regular abstractions for array systems

CD Hong, AW Lin - Proceedings of the ACM on Programming …, 2024 - dl.acm.org
Verifying safety and liveness over array systems is a highly challenging problem. Array
systems naturally capture parameterized systems such as distributed protocols with an …

Counterexample-guided prophecy for model checking modulo the theory of arrays

M Mann, A Irfan, A Griggio, O Padon… - Logical Methods in …, 2022 - lmcs.episciences.org
We develop a framework for model checking infinite-state systems by automatically
augmenting them with auxiliary variables, enabling quantifier-free induction proofs for …

Toward liveness proofs at scale

KL McMillan - International Conference on Computer Aided …, 2024 - Springer
While the problem of mechanized proof of liveness of reactive programs has been studied
for decades, there is currently no method of proving liveness that is conceptually simple to …