User Tools

Site Tools


start

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Last revisionBoth sides next revision
start [2016/04/19 22:16] jonathanstart [2016/04/19 22:16] jonathan
Line 60: Line 60:
  
 1. High-level state/event models and proof rules for invariant preservation 1. High-level state/event models and proof rules for invariant preservation
 +
 2. Refining a system and proving that the refinement preserves correctness 2. Refining a system and proving that the refinement preserves correctness
 +
 3. Proving convergence and absence of deadlock  3. Proving convergence and absence of deadlock 
 +
 4. Overview of system modelling constructs and proof rules for correctness in a reactive system 4. Overview of system modelling constructs and proof rules for correctness in a reactive system
 +
 5. Design of a distributed systems illustrated with an ftp protocol 5. Design of a distributed systems illustrated with an ftp protocol
 +
 6. Anticipated events in high-level models for convergence 6. Anticipated events in high-level models for convergence
 +
 7. Use of contexts to develop relevant theories such as parity  7. Use of contexts to develop relevant theories such as parity 
 +
 8. Nondeterministic systems and associated safety invariant proof rules 8. Nondeterministic systems and associated safety invariant proof rules
 +
 9. Design of sequential programs with correction by construction via refinement rules 9. Design of sequential programs with correction by construction via refinement rules
 +
 10. Hoare logic and weakest preconditions for program design and its use in a variety of developments 10. Hoare logic and weakest preconditions for program design and its use in a variety of developments
 +
 11. Methods for systematic development of correct-by-construction of reactive systems, illustrated with a train system 11. Methods for systematic development of correct-by-construction of reactive systems, illustrated with a train system
 +
 12. Thinking before Programming using Lamport’s TLA+ specification method 12. Thinking before Programming using Lamport’s TLA+ specification method
  
start.txt · Last modified: 2016/04/19 22:22 by jonathan