Asynchronous programs are notoriously difficult to reason about because they spawn
computation tasks which take effect asynchronously in a nondeterministic way. Devising …

Frama-C is a source code analysis platform that aims at conducting verification of industrial-
size C programs. It provides its users with a collection of plug-ins that perform static and …

Bounded model checking is among the most efficient techniques for the automated
verification of concurrent programs. However, due to the nondeterministic thread …

Synchronous programs are easy to specify because the side effects of an operation are
finished by the time the invocation of the operation returns to the caller. Asynchronous …

Many large applications are now built using collections of microservices, each of which is
deployed in isolated containers and which interact with each other through the use of remote …

A real-world distributed system is rarely implemented as a standalone monolithic system.
Instead, it is composed of multiple independent interacting components that together ensure …

In the language-theoretic approach to refinement verification, we check that the language of
traces of an implementation all belong to the language of a specification. We consider the …

Formal specification of multi-threaded programs is notoriously hard, because thread
execution may be preempted at any point. In contrast, abstract concurrency models such as …

Asynchronous programming is a standard approach for designing responsive applications.
Modern languages such as C# provide async/await primitives for the disciplined use of …

Networks provide functionality beyond just packet routing and delivery. Network functions
such as firewalls, caches, WAN optimizers, etc. are crucial for scaling networks and in …