Formal methods in the railways signalling industry
Software is becoming increasingly involved in safety-critical systems. Such systems are ideal fields of application of formal methods. A rigorous development accompanied by formal proofs is a guarantee of the correctness of the development. We summarize our experience of using the B formal method in the development of safety-critical railway signalling applications. Our applications range in size from 2000 lines to 22000 lines. They are specified, refined and implemented in B. Issues (technical and non technical) related to the utilization of B are discussed and solutions presented.
KeywordsFormal Method Preliminary Design Proof Obligation Control Flow Graph Informal Specification
- 1.Abrial, J., R.,The B Book, book to appear.Google Scholar
- 2.Bicarregui, J., Ritchie, B., Invariants, Frames and Postconditions: a Comparison of the VDM and B Notations, In the proceedings of Formal Methods Europe '93, LNCS 670, Springer-Verlag.Google Scholar
- 3.Craigen, D., Gerhart, S., Ralston, T., An International Survey of Industrial Applications of Formal Methods, Vol 1, can be provided by writing to authors or e-mailing to firstname.lastname@example.org, also as a paper version in, Observations on Industrial Practice using Formal Methods, in the proceedings of ACM-IEEE 15th International Conference on Software Engineering, Baltimore, May 1993Google Scholar
- 4.Houston, I., King, S., CICS Project Report: Experiences and Results from the Use of Z in IBM, in Proceedings of VDM'91, LNCS 551, Springer-Verlag, 1991.Google Scholar