Open Incremental Model Checking ( Extended Abstract )

This paper focuses on the interaction between two components: base and extension. Specifically, the extension refines or modifies the base, i.e. the interferences of the base and extension execution paths occur. Unlike traditional modular model checking methods which treat systems as static, a new method of model checking, called open incremental model checking (OIMC) in our opinion, is proposed to address the changes to systems [1]. Given a base component, an extension component is attached such that the extension does not violate some property inherent to the base. A primitive model and a simple verification procedure are suggested to ensure the consistency between two components [1]. The model checking is executed in an incremental manner within the extension component only. This approach is also open for various kinds of changes. This paper is quite different the work of [1] in several key points such as proposing a generalized model with overriding capability (Section 3), an explicit consistency condition among components (Section 4). More importantly, we also examine key issues not addressed in [1] such as the soundness (Section 5.1) and scalability (Section 5.2). Discussion about the contribution of this paper, its future and related work are presented in Section 6.