The problem of mechanically formalizing and proving metatheoretic properties of programming language calculi, type systems, operational semantics, and related formal systems has received considerable attention recently. However, the dual problem of searching for errors in such formalizations has attracted comparatively little attention. In this article, we present αCheck, a bounded model-checke...

Winegrowers and winemakers have always been a special group of producers not only because of their product that can be manipulated from rootstock all the way to final bottling, but also because of their very special language. Winegrowers speak of phylloxera, Pierce's Disease, Botrytis cinerea, canopy management, veraison, anthocyanins and tannins until the average person looks askance at the sp...

In the field of structural operational semantics (SOS), there have been several proposals both for syntactic rule formats guaranteeing the validity of algebraic laws, and for algorithms for automatically generating ground-complete axiomatizations. However, there has been no synergy between these two types of results. This paper takes the first steps in marrying these two areas of research in th...

In this paper a uniform formalization in PVS of various kinds of semantics of imper ative programming language constructs is presented Based on a comprehensive de velopment of xed point theory the denotational semantics of elementary constructs of imperative programming languages are de ned as state transformers These state transformers induce corresponding predicate transformers providing a me...

This thesis presents several module systems, in particular Mei and DMei, designed for mechanized mathematics systems. Mei is a λ-calculus style module system that supports higher-order functors in a natural way. The semantics of functor application is based on substitution. A novel coercion mechanism integrates a parameter passing mechanism based on theory interpretations with simple λ-calculus...

Maize originated under warm, seasonally dry conditions of Mesoamerica, and was by human selection converted from a low-yielding progenitor species into its modern form, with a large rachis (cob) of the female inflorescence bearing up to 1,000 seeds. Maize is a C4 plant and is very efficient in water use. If subjected to water stress, however, especially during the mid-season pollination process...

In this paper we explain how to formalize an “operational” or “state-transition” semantics of a von Neumann programming language in a functional programming language. By adopting an “interpretive” style, one can execute the model in the functional language to “run” programs in the von Neumann language. Given the ability to reason about the functional language, one can use the model to reason ab...

In distributed systems, asynchronous communication is often viewed as a whole whereas there are actually many di erent interaction protocols whose properties are involved in the compatibility of peer compositions. A hierarchy of asynchronous communication models, based on re nements, is established and proven with the TLA Proof System. The work serves as a rst step in the study of the substitua...

Kerberos is designed to allow a user to repeatedly authenticate herself to multiple servers based on a single login. The PKINIT extension to Kerberos modifies the initial round of the protocol to use a PKI instead of long-term shared keys (e.g., password-derived keys). Especially with PKINIT, Kerberos uses a rich collection of cryptographic operations and constructs, and Kerberos, both with and...