Downloads & Free Reading Options - Results

We present a method for fighting the state space explosion of parameterised Boolean equation systems (PBESs); these essentially are systems of mutually recursive Boolean fixed point equations, parameterised with data. PBESs can encode equivalence checking problems and model checking problems for symbolic, process algebraic specifications. Our method essentially consists of three phases: (1) the control flow in the PBES is reconstructed, detecting control flow parameters that were encoded in the description of the process, as well as control flow parameters that were introduced during the construction of the PBES; (2) we use a data flow analysis based on the control flow in the PBES to detect irrelevant data parameters and (3) we reset those data parameters of the equations in the PBES that were found to be irrelevant. Our reduction preserves the solution to the PBES, and never increases the size of the underlying Boolean equation system. The reduction is evaluated using a number of case studies.

The well-known problem of state space explosion in model checking is even more critical when applying this technique to programming languages, mainly due to the presence of complex data structures. One recent and promising approach to deal with this problem is the construction of an abstract and correct representation of the global program state allowing to match visited states during program model exploration. In particular, one powerful method to implement abstract matching is to fill the state vector with a minimal amount of relevant variables for each program point. In this paper, we combine the on-the-fly model-checking approach (incremental construction of the program state space) and the static analysis method called influence analysis (extraction of significant variables for each program point) in order to automatically construct an abstract matching function. Firstly, we describe the problem as an alternation-free value-based mu-calculus formula, whose validity can be checked on the program model expressed as a labeled transition system (LTS). Secondly, we translate the analysis into the local resolution of a parameterised boolean equation system (PBES), whose representation enables a more efficient construction of the resulting abstract matching function. Finally, we show how our proposal may be elegantly integrated into CADP, a generic framework for both the design and analysis of distributed systems and the development of verification tools.