The Mondex Purse: Requirements and Retrenchments
نویسنده
چکیده
منابع مشابه
Composing and Promoting Retrenchments in Z
We briefly review the the compositional mechanisms of Z, i.e. the schema calculus and promotion. Retrenchment, a generalization of classical data refinement, is reviewed in a Z setting. Experience applying retrenchment to the Mondex Electronic Purse specification [16, 8] – which used promotion in combination with refinement – has established that promotion is a useful tool in the requirements e...
متن کاملRetrenching the Purse: Finite Sequence Numbers, and the Tower Pattern
The Mondex Electronic Purse system [18] is an outstanding example of formal refinement techniques applied to a genuine industrial scale application, and notably, was the first verification to achieve ITSEC level E6 certification. A formal abstract model including security properties, and a formal concrete model of the system design were developed, and a formal refinement was hand-proved between...
متن کاملRetrenching the Purse: Finite Sequence Numbers
The Mondex Electronic Purse system [18] is an outstanding example of formal refinement techniques applied to a genuine industrial scale application, and is notable for being the first verification to achieve ITSEC level E6 certification. A formal abstract model including security properties, and a formal concrete model of the system design were developed, and a complex formal refinement was the...
متن کاملSpecification and Proof of the Mondex Electronic Purse
This paper describes how the communication protocol of Mondex electronic purses can be specified and verified wrt. desired security properties. The specification is developed by stepwise refinement using the RAISE formal specification language, RSL, and the proofs are made by translation to PVS and SAL.
متن کاملEvaluation of OCL for Large-Scale Modelling: A Different View of the Mondex Purse
OCL is used to add rigour to UML/MOF models, and in particular can be used to express behavioural details (e.g., operation preand postconditions, class invariants) of such models. The applicability and utility of OCL can be assessed by applying it to realistic applications and by investigating its capabilities both in terms of language characteristics and tool support. With this in mind, in thi...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
عنوان ژورنال:
دوره شماره
صفحات -
تاریخ انتشار 2008