Abstract With the rapid growth of machine learning, deep neural networks (DNNs) are now being used in numerous domains. Unfortunately, DNNs “black-boxes”, and cannot be interpreted by humans, which is a substantial concern safety-critical systems. To mitigate this issue, researchers have begun working on explainable AI (XAI) methods, can identify subset input features that cause DNN’s decision ...

1. INTRODUCTION. The Jordan curve theorem states that every simple closed pla-nar curve separates the plane into a bounded interior region and an unbounded exterior. One hundred years ago, Oswald Veblen declared that this theorem is " justly regarded as a most important step in the direction of a perfectly rigorous mathematics " [13, p. 83]. Its position as a benchmark of mathematical rigor has...

Last year, the L4.verified project produced a formal, machinechecked Isabelle/HOL proof that the C code of the seL4 OS microkernel correctly implements its abstract implementation. In my presentation I will summarise the proof together with its main implications and assumptions, I will describe in which kinds of systems this formally verified kernel can be used for gaining assurance on overall ...

One of the goals of software engineering is to provide what is necessary to write relevant, legible, useful descriptions of the systems to be developed, which will be the basis of successful developments. This goal was addressed both from informal approaches (providing in particular visual notations) and formal ones (providing a formal sound semantic basis). Informal approaches are often driven...

Designing and implementing security-critical systems correctly is difficult. In practice, most vulnerabilities arise from bugs in implementations. We present work towards systematic specification-based testing of security-critical systems using the CASE tool AutoFocus. Cryptographic systems are formally specified with state transition diagrams, a notation for state machines in the AutoFocus sys...

A geometric modeller is a piece of software allowing to create, manipulate and modify geometric objects. Modern geometric modellers usually use a mathematical model to represent objects and are developed around a kernel that proposes basic operations to create and manipulate objects called by high level operations. Because of these proceedings, the context is a priori in favour of the use of fo...

In a previous paper [Lan-00] we explained that smart cards could be the ideal domain for applying formal methods. We said that the need of formal methods has three origins: mastering the complexity of the new operating systems, certifying at a high level a part of the smart card and reducing the cost of the test. We believed that these reasons were enough to introduce formal methods in the soft...

The paper presents the aims and research plan of the CONFORMED project (Conformance Of Radiological/Medical Devices). This three-year project will develop tools and techniques for modelling and testing radiotherapy equipment. Formal specifications in LOTOS (Language Of Temporal Ordering Specification) will be used to model accelerators formally and to derive tests rigorously based on these spec...

When using formal methods to generate compilers it is desirable for all levels of the compiler to be formally specified. Typically, register allocation has been thought to be equivalent to graph coloring. Since graph coloring is NP-Complete most algorithms for register allocation have been ad-hoc. This paper presents a framework for register allocation that has been formally verified using an i...