A rigorous modular specification method requires a proof rule asserting that if each
component behaves correctly in isolation, then it behaves correctly in concert with other …

A rigorous modular specification method requires a proof rule asserting that if each
component behaves correctly in isolation, then it behaves correctly in concert with other …

Many state-based specification languages, including the Java Modeling Language (JML),
contain at their core specification constructs familiar to most undergraduates: eg, assertions …

Module mechanisms have received considerable theoretical attention, but the associated
concepts of separate compilation and linking have not been emphasized. Anomalous …

Specifications that are used in detailed design and in the documentation of existing code are
primarily written and read by programmers. However, most formal specification languages …

This collection of articles by well-known experts was originally published in 2000 and is
intended for researchers in computer science, practitioners of formal methods, and computer …

This paper presents a variant of the SML module system that introduces a strict distinction
between abstract types and manifest types (types whose definitions are part of the module …

Most existing modular model checking techniques betray their hardware roots: they assume
that modules compose in parallel. In contrast, collaboration-based software designs, which …

We show how to specify components of concurrent systems. The specification of a system is
the conjunction of its components' specifications. Properties of the system are proved by …

In computer system design, we distinguish between closed and open systems. A closed
system is a system whose behavior is completely determined by the state of the system. An …