This article addresses the challenge of sound typestate verification, with acceptable
precision, for real-world Java programs. We present a novel framework for verification of …

The right software architecture is critical to achieving essential quality attributes, but these
qualities are only realized if the program as implemented conforms to its intended …

Reasoning about imperative programs requires the ability to track aliasing and ownership
properties. We present a type system that provides this ability, by using regions, capabilities …

Zdancewic and Myers introduced observational determinism as a scheduler independent
notion of security for concurrent programs. This paper proposes a type system for verifying …

We adapt a variant of permission-accounting separation logic to a concurrent Java-like
language with fork/join. To support both concurrent reads and information hiding, we …

40 simplest end of the range, a specifier can mark those methods that allocate and release
resource (s). A specifier can also limit the order in which an objects methods may be called …

This article presents a static system for checking determinism (technically, partial
confluence) of communicating concurrent processes. Our approach automatically detects …

We present a programming language, model, and logic appropriate for implementing and
reasoning about a memory management system. We state semantically what is meant by …

Linear typing schemes can be used to guarantee non-interference and so the soundness of
in-place update with respect to a functional semantics. But linear schemes are restrictive in …

We present a new approach to the old problem of adding global mutable state to purely
functional languages. Our idea is to extend the language with “witnesses,” which is based …