%T A Circus Development and Verification of an Internet Packet Filter.
%A Alistair A. McEwan
%E Peter H. Welch, Jon Kerridge, Frederick R. M. Barnes
%B Communicating Process Architectures 2006
%X In this paper, we present the results of a significant and
large case study in Circus. Development is top\-down \- from
a sequential abstract specification about which safety
properties can be verified, to a highly concurrent
implementation on a Field Programmable Gate Array.
Development steps involve applying laws of Circus allowing
for the refinement of specifications; confidence in the
correctness of the development is achieved through the
applicability of the laws applied; proof obligations are
discharged using the model\-checker for CSP, FDR, and the
theorem prover for Z, Z/Eves. An interesting feature of this
case study is that the design of the implementation is
guided by domain knowledge of the application \- the
application of this domain knowledge is supported by, rather
than constrained by the calculus. The design is not what
would have been expected had the calculus been applied
without this domain knowledge. Verification highlights a
curious error made in early versions of the implementation
that were not detected by testing.
If you have any comments on this database, including inaccuracies, requests to remove or add information, or suggestions for improvement, the WoTUG web team are happy to hear of them. We will do our best to resolve problems to everyone's satisfaction.
Copyright for the papers presented in this database normally resides with the authors; please contact them directly for more information. Addresses are normally presented in the full paper.
Pages © WoTUG, or the indicated author. All Rights Reserved.
Comments on these web pages should be addressed to: www at wotug.org