Automatic predicate testing in formal certification : you’ve only proven what you’ve said, not what you meant!
MetadataShow full item record
The use of formal methods and proof assistants helps to increase the confidence in critical software. However, a formal proof is only a guarantee relative to a formal specification, and not necessary about the real requirements. There is always a jump when going from an informal specification to a formal specification expressed in a logical theory. Thus, proving the correctness of a piece of software always makes the implicit assumption that there is adequacy between the formalised specification -written with logical statements and predicates- and the real requirements -often written in English-. Unfortunately, a huge part of the complexity lies precisely in the specification itself, and it is far from obvious that the formal specification says exactly and completely what it should say. Why should we trust more these predicates than the code that we’ve first refused to trust blindly, leading to these proofs? We show in this paper that the proving activity has not replaced the testing activity but has only changed the object which requires to be tested. Instead of testing code, we now need to test predicates.We present recent ideas about how to conduct these tests inside the proof assistant on a few examples, and how to automate them as far as possible.
Slama , F 2016 , Automatic predicate testing in formal certification : you’ve only proven what you’ve said, not what you meant! in B K Aichernig & C A Furia (eds) , Tests and Proofs - 10th International Conference, TAP 2016 Held as Part of STAF 2016 . Lecture Notes in Computer Science , vol. 9762 , Springer-Verlag , pp. 191-198 , 10th International Conference on Tests and Proofs, TAP 2016 and Held as Part of Software Technologies: Applications and Foundations, STAF 2016 , Vienna , Austria , 5/07/16 . DOI: 10.1007/978-3-319-41135-4_12conference
Tests and Proofs - 10th International Conference, TAP 2016 Held as Part of STAF 2016
© Springer International Publishing Switzerland 2016. This work has been made available online in accordance with the publisher’s policies. This is the author created accepted version manuscript following peer review and as such may differ slightly from the final published version. The final published version of this work is available at https://doi.org/10.1007/978-3-319-41135-4_12
Items in the St Andrews Research Repository are protected by copyright, with all rights reserved, unless otherwise indicated.