
<?xml version="1.0"?>
<?xml-stylesheet type="text/css" href="https://wiki.hh.se/ceres/skins/common/feed.css?303"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
		<id>https://wiki.hh.se/ceres/index.php?action=history&amp;feed=atom&amp;title=Phase_3%3A_Specification_and_Model_Checking</id>
		<title>Phase 3: Specification and Model Checking - Revision history</title>
		<link rel="self" type="application/atom+xml" href="https://wiki.hh.se/ceres/index.php?action=history&amp;feed=atom&amp;title=Phase_3%3A_Specification_and_Model_Checking"/>
		<link rel="alternate" type="text/html" href="https://wiki.hh.se/ceres/index.php?title=Phase_3:_Specification_and_Model_Checking&amp;action=history"/>
		<updated>2026-05-17T02:27:30Z</updated>
		<subtitle>Revision history for this page on the wiki</subtitle>
		<generator>MediaWiki 1.22.6</generator>

	<entry>
		<id>https://wiki.hh.se/ceres/index.php?title=Phase_3:_Specification_and_Model_Checking&amp;diff=4857&amp;oldid=prev</id>
		<title>Ceres at 20:52, 5 February 2015</title>
		<link rel="alternate" type="text/html" href="https://wiki.hh.se/ceres/index.php?title=Phase_3:_Specification_and_Model_Checking&amp;diff=4857&amp;oldid=prev"/>
				<updated>2015-02-05T20:52:52Z</updated>
		
		<summary type="html">&lt;p&gt;&lt;/p&gt;
&lt;table class='diff diff-contentalign-left'&gt;
				&lt;col class='diff-marker' /&gt;
				&lt;col class='diff-content' /&gt;
				&lt;col class='diff-marker' /&gt;
				&lt;col class='diff-content' /&gt;
				&lt;tr style='vertical-align: top;'&gt;
				&lt;td colspan='2' style=&quot;background-color: white; color:black; text-align: center;&quot;&gt;← Older revision&lt;/td&gt;
				&lt;td colspan='2' style=&quot;background-color: white; color:black; text-align: center;&quot;&gt;Revision as of 20:52, 5 February 2015&lt;/td&gt;
				&lt;/tr&gt;&lt;tr&gt;&lt;td colspan=&quot;2&quot; class=&quot;diff-lineno&quot;&gt;Line 14:&lt;/td&gt;
&lt;td colspan=&quot;2&quot; class=&quot;diff-lineno&quot;&gt;Line 14:&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;==General Description== &amp;#160;&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;==General Description== &amp;#160;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;The subject of this phase is to mathematically model the core functionality of the WhatsUpGU server, &amp;#160;&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;The subject of this phase is to mathematically model the core functionality of the WhatsUpGU server, &amp;#160;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;−&lt;/td&gt;&lt;td style=&quot;color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;specify its correctness &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;property &lt;/del&gt;and prove, using model checking, that all properties are satisfied by the model. &amp;#160;&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;+&lt;/td&gt;&lt;td style=&quot;color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;specify its correctness &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;properties &lt;/ins&gt;and prove, using model checking, that all properties are satisfied by the model. &amp;#160;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;To this end, you make&amp;#160; network of timed automata capturing the basic functionality of the server and its concurrent behavior with respect to user requests.&amp;#160; &amp;#160;&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;To this end, you make&amp;#160; network of timed automata capturing the basic functionality of the server and its concurrent behavior with respect to user requests.&amp;#160; &amp;#160;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;To make the model finite and manageable, we assume that there are 2 users and can send each other at most 2 messages and message types. We represent both the users and the message with constants 0 and 1. &amp;#160;&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;To make the model finite and manageable, we assume that there are 2 users and can send each other at most 2 messages and message types. We represent both the users and the message with constants 0 and 1. &amp;#160;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td colspan=&quot;2&quot; class=&quot;diff-lineno&quot;&gt;Line 26:&lt;/td&gt;
&lt;td colspan=&quot;2&quot; class=&quot;diff-lineno&quot;&gt;Line 26:&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;Also, you model 2 users that can perform the above-mentioned operations in any sensible order.&amp;#160; &amp;#160;&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;Also, you model 2 users that can perform the above-mentioned operations in any sensible order.&amp;#160; &amp;#160;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;−&lt;/td&gt;&lt;td style=&quot;color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;In addition you phrase 5 most important properties &lt;del class=&quot;diffchange diffchange-inline&quot;&gt;of this core model &lt;/del&gt;and verify it on the developed model.&lt;/div&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;+&lt;/td&gt;&lt;td style=&quot;color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;In addition you phrase 5 most important properties &lt;ins class=&quot;diffchange diffchange-inline&quot;&gt;about its behavior &lt;/ins&gt;and verify it on the developed model.&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;/td&gt;&lt;td class='diff-marker'&gt;&amp;#160;&lt;/td&gt;&lt;td style=&quot;background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;/table&gt;</summary>
		<author><name>Ceres</name></author>	</entry>

	<entry>
		<id>https://wiki.hh.se/ceres/index.php?title=Phase_3:_Specification_and_Model_Checking&amp;diff=4816&amp;oldid=prev</id>
		<title>Ceres: Created page with &quot;==Objectives==  This phase of the project is designed to apply a formal (mathematical) modeling and verification technique to a part of  our ongoing case study:     * apply ma...&quot;</title>
		<link rel="alternate" type="text/html" href="https://wiki.hh.se/ceres/index.php?title=Phase_3:_Specification_and_Model_Checking&amp;diff=4816&amp;oldid=prev"/>
				<updated>2015-01-27T20:51:29Z</updated>
		
		<summary type="html">&lt;p&gt;Created page with &amp;quot;==Objectives==  This phase of the project is designed to apply a formal (mathematical) modeling and verification technique to a part of  our ongoing case study:     * apply ma...&amp;quot;&lt;/p&gt;
&lt;p&gt;&lt;b&gt;New page&lt;/b&gt;&lt;/p&gt;&lt;div&gt;==Objectives==&lt;br /&gt;
&lt;br /&gt;
This phase of the project is designed to apply a formal (mathematical) modeling and verification technique to a part of &lt;br /&gt;
our ongoing case study:  &lt;br /&gt;
 &lt;br /&gt;
* apply mathematical modeling to capture the core behavior of the WhatsUpGU server, &lt;br /&gt;
&lt;br /&gt;
* apply simulation to gain insight on some of its basic behavior, &lt;br /&gt;
&lt;br /&gt;
* specify some of its correctness properties in a temporal logic, and &lt;br /&gt;
&lt;br /&gt;
* apply model checking to verify the properties of the modeled behavior.&lt;br /&gt;
 &lt;br /&gt;
==General Description== &lt;br /&gt;
The subject of this phase is to mathematically model the core functionality of the WhatsUpGU server, &lt;br /&gt;
specify its correctness property and prove, using model checking, that all properties are satisfied by the model. &lt;br /&gt;
To this end, you make  network of timed automata capturing the basic functionality of the server and its concurrent behavior with respect to user requests.  &lt;br /&gt;
To make the model finite and manageable, we assume that there are 2 users and can send each other at most 2 messages and message types. We represent both the users and the message with constants 0 and 1. &lt;br /&gt;
To do this we model the following functionality: &lt;br /&gt;
&lt;br /&gt;
* adding a message,&lt;br /&gt;
* editing a message, &lt;br /&gt;
* deleting a message, &lt;br /&gt;
* fetching messages one by one, and&lt;br /&gt;
* fetching complete. &lt;br /&gt;
&lt;br /&gt;
Also, you model 2 users that can perform the above-mentioned operations in any sensible order.  &lt;br /&gt;
In addition you phrase 5 most important properties of this core model and verify it on the developed model.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
==Deliverables==&lt;br /&gt;
&lt;br /&gt;
The deliverable for this phase consists of a single zip file with two folders: a folder containing a single pdf file of the report and another folder containing all Uppaal models, queries (properties) and simulation traces. &lt;br /&gt;
This phase is organized into 2 sections. &lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
==Modeling and Simulation in Uppaal==&lt;br /&gt;
&lt;br /&gt;
After finishing your modeling try the test scenarios you have designed in your integration testing (Phase 2); save these traces and include them as an appendix to your report. &lt;br /&gt;
If any of the scenarios fail in your simulation, &lt;br /&gt;
redesign your model to make the simulation trace possible. &lt;br /&gt;
Document all major changes you made. &lt;br /&gt;
In your final report present both the initial and the final model and report in a step-wise manner the changes leading to the final model. &lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
==Specifying and Model Checking Properties==&lt;br /&gt;
&lt;br /&gt;
Specify at least 5 properties that you expect from the server behavior. &lt;br /&gt;
Examples of such properties are the following: &lt;br /&gt;
&lt;br /&gt;
* The server should never deadlock, &lt;br /&gt;
* If a user deletes a message and does not add it again, the message will not appear when fetch is performed. &lt;br /&gt;
&lt;br /&gt;
Include these properties in your final report. &lt;br /&gt;
&lt;br /&gt;
Translate these messages into the temporal logic language of Uppaal. &lt;br /&gt;
In some cases you may need to design monitor automata to make the coding feasible / more straightforward. &lt;br /&gt;
Discuss the properties (and their monitor automata) with the instructors before you proceed with the next step. &lt;br /&gt;
Document your temporal logic formulae after that you discuss them with the instructor; include both the formulae and the monitor automata and sufficient explanation to show that they reflect the intuitive properties. &lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Then proceed with model checking the properties. &lt;br /&gt;
In case you find a counter-example, correct the model (or the property) until all properties are verified correct. In case of any major changes in the model or property, &lt;br /&gt;
document and explain the counter-examples witnessing the initially incorrect design and the changes leading to a correct model. &lt;br /&gt;
In case you change a model to satisfy property, &lt;br /&gt;
verify all previous properties to make sure that you have not invalidated them.&lt;/div&gt;</summary>
		<author><name>Ceres</name></author>	</entry>

	</feed>