We suggest that mechanized multi-agent deontic logics might be appropriate vehicles for engineering trustworthy robots. Mechanically checked proofs in such logics can serve to establish the permissibility (or obligatoriness) of agent actions, and such proofs, when translated into English, can also explain the rationale behind those actions. We use the logical framework Athena to encode a natura...

A novel protocol has been formally analyzed using the prover Isabelle/HOL, following the inductive approach described in earlier work [10]. There is no limit on the length of a run, the nesting of messages or the number of agents involved. A single run of the protocol delivers session keys for all the agents, allowing neighbours to perform mutual authentication. The basic security theorem state...

As airspace becomes ever more crowded, air traffic management must reduce both space and time between aircraft to increase throughput, and on-board collision avoidance systems become ever more important. These systems and the policies that they implement must be extremely reliable. In this paper we consider implementations of distributed collision avoidance policies designed to work in environm...

We present an expressive information-flow control type system with recursive types, existential label polymorphism, and impredicative polymorphism for a higher-order programming language state. give novel semantic model of this show that well-typed programs satisfy termination-insensitive noninterference. Our approach supports compositional integration syntactically ill-typed---but semantically...

UML Sequence Diagrams are widely used in software development. When putting to applications such as code generation, model simulation and other automated analysis, the formalization of UML Sequence Diagrams, especially correctness of it becomes increasingly important. This article presents the formal specification including denotational semantics and operational semantics of UML Sequence Diagra...

The problem of mechanically formalizing and proving metatheoretic properties of programming language calculi, type systems, operational semantics, and related formal systems has received considerable attention recently. However, the dual problem of searching for errors in such formalizations has attracted comparatively little attention. In this article, we present αCheck, a bounded model-checke...

Winegrowers and winemakers have always been a special group of producers not only because of their product that can be manipulated from rootstock all the way to final bottling, but also because of their very special language. Winegrowers speak of phylloxera, Pierce's Disease, Botrytis cinerea, canopy management, veraison, anthocyanins and tannins until the average person looks askance at the sp...