Programming and Verifying Real-Time Systems by Means of the Synchronous Data-Flow Language LUSTRE

We investigate the beneets of using a synchronous data-ow language for programming critical real-time systems. These beneets concern ergonomy | since the dataaow approach meets traditional description tools used in this domain |, and ability to support formal design and veriication methods. We show, on a simple example, how the language Lustre and its associated veriication tool Lesar, can be used to design a program, to specify its critical properties, and to verify these properties. As the language Lustre and its use have been already published in several papers (e.g., 11, 18]), we put particular emphasis on program veriication. A preliminary version of this paper has been published in 28].