© 1995 by British Computer Society
Tracking design changes with formal machine-checked proof
University of Cambridge Computer Laboratory, Pembroke Street, Cambridge, UK Email: pc{at}cl.cam.ac.uk WWW:http://www.cl.cam.ac.uk/users/pc/
Designs are often modified for use in new circumstances. If formal proof is to be an acceptable verification methodology for industry, it must be capable of tracking design change quickly. We describe our experiences formally verifying an implementation of an ATM network component, and on our subsequent verification of modified designs. Three of the design verified are in use in a working network. They were designed and implemented with no consideration for formal methods. This case study gives an indication of the difficulties in formally verifying a real design and of subsequently tracking design changes.
* University of Cambridge Computer Laboratory, Pembroke Street, Cambridge, UK Email: pc{at}cl.cam.ac.uk WWW:http://www.cl.cam.ac.uk/users/pc/