Logo image
Merit and Blame Assignment with Kind 2
Book chapter   Open access   Peer reviewed

Merit and Blame Assignment with Kind 2

Daniel Larraz, Mickaël Laurent and Cesare Tinelli
Formal Methods for Industrial Critical Systems, pp.212-220
Lecture Notes in Computer Science, Springer International Publishing
08/19/2021
DOI: 10.1007/978-3-030-85248-1_14
url
https://arxiv.org/pdf/2105.06575View
Open Access

Abstract

We introduce two new major features of the open-source model checker Kind 2 which provide traceability information between specification and design elements such as assumptions, guarantees, or other behavioral constraints in synchronous reactive system models. This new version of Kind 2 can identify minimal sets of design elements, known as Minimal Inductive Validity Cores, which are sufficient to prove a given set of safety properties, and also determine the set of MUST elements, design elements that are necessary to prove the given properties. In addition, Kind 2 is able to find minimal sets of design constraints, known as Minimal Cut Sets, whose violation leads the system to an unsafe state. We illustrate with an example how to use the computed information for tracking the safety impact of model changes, and for analyzing the tolerance and resilience of a system against faults.
Inductive validity cores Minimal Cut Sets MUST-set generation SMT-based model checking Traceability

Details

Metrics

Logo image