Verifying an ATM Protocol Using a Combination of Formal Techniques

ions of infinite state systems compositionally and automatically. In Proc. 10th Int. Conf. Computer Aided Verification (CAV’98), Vancouver, BC, Canada, June 28– July 2, pp. 319–331. Springer-Verlag, Berlin. [11] Burch, J. R., Clarke, E. M., McMillan, K. L., Dill, D. L. andHwang, L. J. (1992) Symbolic model checking: 10 states andbeyond. Inform. Comput., 98, 142–170. [12] Recommendation Q.2110 (1994) ATM Adaptation Layer—Service Specific Connection Oriented Protocol. [13] Henderson, T. and Katz, R. (1999) Transport protocols forinternet-compatible satellite networks. IEEE J. Selected AreasCommuni., 17, 326–244. [14] Telelogic SDL products http://www.telelogic.com/products/sdl. [15] Abdulla, P. A., Jonsson, B., Kindahl, M. and Peled, D. (1998) A general approach to partial order reductions in symbolic verification (extended abstract). In Proc. 10th Int. Conf. Computer Aided Verification (CAV’98), Vancouver, BC, Canada, June 28–July 2, pp. 379–390. Springer-Verlag, Berlin. [16] Godefroid, P. (1996) Partial-Order Methods for theVerification of Concurrent Systems—An Approach to theState-Explosion Problem, Springer Verlag, Berlin. [17] Katz, S. and Peled, D. (1992) Defining conditional indepen-dence using collapses. Theor. Comp. Sci., 101, 337–359. [18] Saı̈di, H. and Shankar, N. (1999) Abstract and model check while you prove. In Proc. 11th Int. Conf. Computer Aided Verification (CAV’99), Trento, Italy, July 6–10, pp. 443–454. Springer-Verlag, Berlin. [19] Havelund, K. and Shankar, N. (1996) Experiments in theorem proving and model checking for protocol verification. In Proc. Third Int. Symp. Formal Methods Europe (FME’96), Oxford, UK, March 18–22, pp. 662–681. Springer-Verlag, Berlin. [20] Bozga, M., Fernandez, J.-C., Ghirvu, L., Graf, S., Krimm, J.-P. and Mounier, L. (2000) If: a validation environment for timed asynchronous systems. In Proc. 12th Int. Conf. Computer Aided Verification (CAV’00), Chicago, IL, USA, July 15–19, pp. 543–547. Springer-Verlag, Berlin. [21] Bozga, M., Fernandez, J.-C., Ghirvu, L., Jard, C., Jéron, T., Kerbrat, A., Morel, P. and Mounier, L. (2000) Verification andtest generation for the sscop protocol. Science of ComputerProgramming, 36, 27–52. [22] Rusu, V. (2004) Verifying an ATM Protocol Using A Com-bination of Formal Techniques, Technical Report 5089. INRIA. [23] Rusu, V. (2003) Compositional verification of an ATM protocol. In Proc. Int. Sym. Formal Methods Europe (FME’03), Pisa, Italy, September 8–14, pp. 223–243. Springer-