MODIST is the first model checker designed for transparently checking unmodified
distributed systems running on unmodified operating systems. It achieves this transparency …

Distributed systems are notorious for harboring subtle bugs. Verification can, in principle,
eliminate these bugs a priori, but verification has historically been difficult to apply at full …

Despite many efforts, the predominant practice of debugging a distributed system is still
printf-based log mining, which is both tedious and error-prone. In this paper, we present …

The last five years have seen a rise of implementationlevel distributed system model
checkers (dmck) for verifying the reliability of real distributed systems. Existing dmcks …

Distributed systems are notorious for harboring subtle bugs. Verification can, in principle,
eliminate these bugs, but it has historically been difficult to apply at full-program scale, much …

Distributed systems are difficult to implement correctly because they must handle both
concurrency and failures: machines may crash at arbitrary points and networks may reorder …

Implementation-level software model checking explores the state space of a system
implementation directly to find potential software defects without requiring any specification …

Modern software model checkers find safety violations: breaches where the system enters
some bad state. However, we argue that checking liveness properties offers both a richer …

Robust distributed systems commonly employ high-level recovery mechanisms enabling the
system to recover from a wide variety of problematic environmental conditions such as node …

This paper introduces Perennial, a framework for verifying concurrent, crash-safe systems.
Perennial extends the Iris concurrency framework with three techniques to enable crash …