Verification of UML Models by Translation to UML-B

  • Colin Snook
  • Vitaly Savicks
  • Michael Butler
Part of the Lecture Notes in Computer Science book series (LNCS, volume 6957)

Abstract

UML-B is a ‘UML like’ notation based on the Event-B formalism which allows models to be progressively detailed through refinements that are proven to be consistent and to satisfy safety invariants using the Rodin platform and its automatic proof tools. UML, on the other hand, encourages large models to be expressed in a single, detailed level and relies on simulation and model testing techniques for verification. The advantage of proof over model-testing is that the proof is valid for all instantiations of the model whereas a simulation must choose a typical instantiation. In the INESS project we take an extant UML model of a railway interlocking system and explore methodical ways to translate it into UML-B in such a way as to facilitate proof that the model satisfies certain safety properties which are expressed as invariants. We describe the translation attempted so far and insights that we have gained from attempting to prove a safety property. We propose some possible improvements to the translation which we believe will make the proof easier.

Keywords

State Machine Safety Requirement Safety Property Micro2010 Model Proof Obligation 
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. 1.
    INESS (2010), http://www.iness.eu/
  2. 2.
    Snook, C.: Specifying Safety Requirements for a Railway Interlocking System. Dagstuhl Seminar on Refinement based methods for the construction of dependable systems (2009)Google Scholar
  3. 3.
    Rumbaugh, J., Jacobson, I., Booch, G.: Unified Modeling Language Reference Manual, 2nd edn. Addison-Wesley Object Technology. Addison-Wesley Professional, Reading (2004)Google Scholar
  4. 4.
    Metayer, C., Abrial, J.R., Voisin, L.: Event-B Language. Rodin deliverable 3.2, EU Project IST-511599 -RODIN (May 2005)Google Scholar
  5. 5.
    Abrial, J.R.: Modelling in Event-B: System and Software Engineering. Cambridge University Press, Cambridge (2010)CrossRefMATHGoogle Scholar
  6. 6.
    Abrial, J.R., Butler, M., Hallerstede, S., Hoang, T.S., Mehta, F., Voisin, L.: Rodin: an open toolset for modelling and reasoning in Event-B. International Journal on Software Tools for Technology Transfer (STTT) 12(6), 447–466 (2010)CrossRefGoogle Scholar
  7. 7.
    Abrial, J.R., Butler, M., Hallerstede, S., Voisin, L.: An Open Extensible Tool Environment for Event-B. In: Liu, Z., Kleinberg, R.D. (eds.) ICFEM 2006. LNCS, vol. 4260, pp. 588–605. Springer, Heidelberg (2006)CrossRefGoogle Scholar
  8. 8.
    Snook, C., Butler, M.: UML-B: Formal modeling and design aided by UML. ACM Trans. Softw. Eng. Methodol. 15(1), 92–122 (2006)CrossRefGoogle Scholar
  9. 9.
    Snook, C., Butler, M.: UML-B and Event-B: an integration of languages and tools. In: The IASTED International Conference on Software Engineering SE 2008 (February 2008)Google Scholar
  10. 10.
    Said, M., Butler, M., Snook, C.: Language and Tool Support for Class and State Machine Refinement in UML-B. In: Cavalcanti, A., Dams, D.R. (eds.) FM 2009. LNCS, vol. 5850, pp. 579–595. Springer, Heidelberg (2009)CrossRefGoogle Scholar
  11. 11.
    Savicks, V., Snook, C., Butler, M.: Animation of UML-B Statemachines. Technical Report (http://eprints.ecs.soton.ac.uk/18261/1/TBFMsmAnim.pdf) and presented at Rodin User and Developer Workshop (2010)
  12. 12.
    Leuschel, M., Butler, M.: ProB: A model checker for B. In: Araki, K., Gnesi, S., Mandrioli, D. (eds.) FME 2003. LNCS, vol. 2805, pp. 855–874. Springer, Heidelberg (2003)CrossRefGoogle Scholar
  13. 13.
    Schacher, M.: Micro interlocking 2010. Know Gravity Inc (2010), http://knowgravity.com
  14. 14.
  15. 15.
    Mellor, S., Balcer, M.: Executable UML: A foundation for model-driven architecture. Addison-Wesley, Reading (2002)Google Scholar
  16. 16.

Copyright information

© Springer-Verlag Berlin Heidelberg 2011

Authors and Affiliations

  • Colin Snook
    • 1
  • Vitaly Savicks
    • 1
  • Michael Butler
    • 1
  1. 1.University of SouthamptonUK

Personalised recommendations