1. OOTI Workshop on Model Checking and Static Analysis Day 2 Dragan Bošnački Eindhoven University of Technology The Netherlands

2. Some Practical Information Lecturer: Dragan Bošnački WH 3.101 (BME), LaQuSo (CS) dragan@win.tue.nl D.Bosnacki@tue.nl Spin web page: http://spinroot.com Workshop web page: http://www.win.tue.nl/~dragan/OOTI2009 Literature: The Spin Model Checker by Gerard Holzmann, IEEE Trans. on Software Engineering, Vol. 23, No. 5, May 1997, pp. 279-295.

3. Topics Previous Lecture Intro on Formal Methods, Spin, Model Checking –history, advantages, drawbacks A quick start with Spin –About Promela, Dijsktra’s guarded commands Demo: Mutual Exclusion Protocol

4. Outline for Today Recall some basics about Promela and Spin Linear Temporal Logic (LTL) Some More Examples of Spin/Promela Models Exercises

5. Spin, Promela, Xspin ProcessGlobal variable Channel (buffered) Channel (rendez-vous) Promela: C, CSP-like communications, Dijkstra’s guarded commands Spin

6. Spin, Promela, XSpin (3) C compiler SPIN Analyzer (exec) Verification output Error trail Model (Promela source) Simulation output Simulation: random, interactive guided Analyzer (C source) Verification