Software model checking Page 1 21 Software Model Checking RANJIT JHALA University of
California, San Diego and RUPAK MAJUMDAR University of California, Los Angeles We survey …

System-level design (SLD) is considered by many as the next frontier in electronic design
automation (EDA). SLD means many things to different people since there is no wide …

The concept of one event happening before another in a distributed system is examined,
and is shown to define a partial ordering of the events. A distributed algorithm is given for …

Reliable computer systems must handle malfunctioning components that give conflicting
information to different parts of the system. This situation can be expressed abstractly in …

Recent archaeological discoveries on the island of Paxos reveal that the parliament
functioned despite the peripatetic propensity of its part-time legislators. The legislators …

Temporal logic comes in two varieties: linear-time temporal logic assumes implicit universal
quantification over all paths that are generated by the execution of a system; branching-time …

Recently, contract-based design has been proposed as an “orthogonal” approach that
complements system design methodologies proposed so far to cope with the complexity of …

We present a formal model for concurrent systems. The model represents synchronous and
asynchronous components in a uniform framework that supports compositional (assume …

Knuth [1], deBruijn [2], and Eisenberg and McGuire [3] have given solutions to a concurrent
programming problem originally proposed and solved by Dijkstra [4]. A simpler solution …

When separately written programs are composed so that they may cooperate, they may
instead destructively interfere in unanticipated ways. These hazards limit the scale and …