物件導向軟體之架構(Object-Oriented Software Construction)探討

This is a review of Collected Works of John Tate. Parts I, II, edited by Barry Mazur and Jean-Pierre Serre. American Mathematical Society, Providence, Rhode Island, 2016. For several decades it has been clear to the friends and colleagues of John Tate that a “Collected Works” was merited. The award of the Abel Prize to Tate in 2010 added impetus, and finally, in Tate’s ninety-second year we have these two magnificent volumes, edited by Barry Mazur and Jean-Pierre Serre. Beyond Tate’s published articles, they include five unpublished articles and a selection of his letters, most accompanied by Tate’s comments, and a collection of photographs of Tate. For an overview of Tate’s work, the editors refer the reader to [4]. Before discussing the volumes, I describe some of Tate’s work. 1. Hecke L-series and Tate’s thesis Like many budding number theorists, Tate’s favorite theorem when young was Gauss’s law of quadratic reciprocity. When he arrived at Princeton as a graduate student in 1946, he was fortunate to find there the person, Emil Artin, who had discovered the most general reciprocity law, so solving Hilbert’s ninth problem. By 1920, the German school of algebraic number theorists (Hilbert, Weber, . . .) together with its brilliant student Takagi had succeeded in classifying the abelian extensions of a number field K: to each group I of ideal classes in K, there is attached an extension L of K (the class field of I); the group I determines the arithmetic of the extension L/K, and the Galois group of L/K is isomorphic to I. Artin’s contribution was to prove (in 1927) that there is a natural isomorphism from I to the Galois group of L/K. When the base field contains an appropriate root of 1, Artin’s isomorphism gives a reciprocity law, and all possible reciprocity laws arise this way. In the 1930s, Chevalley reworked abelian class field theory. In particular, he replaced “ideals” with his “idèles” which greatly clarified the relation between the local and global aspects of the theory. For his thesis, Artin suggested that Tate do the same for Hecke L-series. When Hecke proved that the abelian L-functions of number fields (generalizations of Dirichlet’s L-functions) have an analytic continuation throughout the plane with a functional equation of the expected type, he saw that his methods applied even to a new kind of L-function, now named after him. Once Tate had developed his harmonic analysis of local fields and of the idèle group, he was able prove analytic continuation and functional equations for all the relevant L-series without Hecke’s complicated theta-formulas. Received by the editors September 5, 2016. 2010 Mathematics Subject Classification. Primary 01A75, 11-06, 14-06. c ©2017 American Mathematical Society

The collected works

ing WS1S Systems to Verify Parameterized Networks . . . . . . . . . . . . 188 Kai Baukus, Saddek Bensalem, Yassine Lakhnech and Karsten Stahl FMona: A Tool for Expressing Validation Techniques over Infinite State Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204 J.-P. Bodeveix and M. Filali Transitive Closures of Regular Relations for Verifying Infinite-State Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220 Bengt Jonsson and Marcus Nilsson Diagnostic and Test Generation Using Static Analysis to Improve Automatic Test Generation . . . . . . . . . . . . . 235 Marius Bozga, Jean-Claude Fernandez and Lucian Ghirvu Efficient Diagnostic Generation for Boolean Equation Systems . . . . . . . . . . . . 251 Radu Mateescu Efficient Model-Checking Compositional State Space Generation with Partial Order Reductions for Asynchronous Communicating Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 266 Jean-Pierre Krimm and Laurent Mounier Checking for CFFD-Preorder with Tester Processes . . . . . . . . . . . . . . . . . . . . . . . 283 Juhana Helovuo and Antti Valmari Fair Bisimulation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 299 Thomas A. Henzinger and Sriram K. Rajamani Integrating Low Level Symmetries into Reachability Analysis . . . . . . . . . . . . . 315 Karsten Schmidt Model-Checking Tools Model Checking Support for the ASM High-Level Language . . . . . . . . . . . . . . 331 Giuseppe Del Castillo and Kirsten Winter Table of

Tools and Algorithms for the Construction and Analysis of Systems. Proc. TACAS 2009

In compiler research, polytopes and related mathematical objects have been successfully used for several decades to represent and manipulate computer programs in an approach that has become known as the polyhedral model. The key insight is that the kernels of many compute-intensive applications are composed of loops with bounds that are affine combinations of symbolic constants and outer loop iterators. The iterations of a loop nest can then be represented as the integer points in a (parametric) polytope and manipulated as a whole, rather than as individual iterations. A similar reasoning holds for the elements of an array and for mappings between loop iterations and array elements.

/pdf/isl-an-integer-set-library-for-the-polyhedral-model-2r59thvn86.pdf

isl: an integer set library for the polyhedral model

Computer systems are often difficult to debug and understand. A common way of gaining insight into system behavior is to inspect execution logs and documentation. Unfortunately, manual inspection of logs is an arduous process and documentation is often incomplete and out of sync with the implementation.This paper presents Synoptic, a tool that helps developers by inferring a concise and accurate system model. Unlike most related work, Synoptic does not require developer-written scenarios, specifications, negative execution examples, or other complex user input. Synoptic processes the logs most systems already produce and requires developers only to specify a set of regular expressions for parsing the logs.Synoptic has two unique features. First, the model it produces satisfies three kinds of temporal invariants mined from the logs, improving accuracy over related approaches. Second, Synoptic uses refinement and coarsening to explore the space of models. This improves model efficiency and precision, compared to using just one approach.In this paper, we formally prove that Synoptic always produces a model that satisfies exactly the temporal invariants mined from the log, and we argue that it does so efficiently. We empirically evaluate Synoptic through two user experience studies, one with a developer of a large, real-world system and another with 45 students in a distributed systems course. Developers used Synoptic-generated models to verify known bugs, diagnose new bugs, and increase their confidence in the correctness of their systems. None of the developers in our evaluation had a background in formal methods but were able to easily use Synoptic and detect implementation bugs in as little as a few minutes.

/pdf/leveraging-existing-instrumentation-to-automatically-infer-52o6nyk7e1.pdf

Leveraging existing instrumentation to automatically infer invariant-constrained models

This work presents a technique to compute symbolic polynomial approximations of the amount of dynamic memory required to safely execute a method without running out of memory, for Javalike imperative programs. We consider object allocations and deallocations made by the method and the methods it transitively calls. More precisely, given an initial configuration of the stack and the heap, the peak memory consumption is the maximum space occupied by newly created objects in all states along a run from it. We over-approximate the peak memory consumption using a scopedmemory management where objects are organized in regions associated with the lifetime of methods. We model the problem of computing the maximum memory occupied by any region configuration as a parametric polynomial optimization problem over a polyhedral domain and resort to Bernstein basis to solve it. We apply the developed tool to several benchmarks.

Parametric prediction of heap memory requirements

Memory requirement estimation is an important issue in the development of embedded systems, since memory directly influences performance, cost and power consumption. It is therefore crucial to have tools that automatically compute accurate estimates of the memory requirements of programs to better control the development process and avoid some catastrophic execution exceptions. Many important memory issues can be expressed as the problem of maximizing a parametric polynomial defined over a parametric convex domain. Bernstein expansion is a technique that has been used to compute upper bounds on polynomials defined over intervals and parametric ldquoboxesrdquo. In this paper, we propose an extension of this theory to more general parametric convex domains and illustrate its applicability to the resolution of memory issues with several application examples.

/pdf/symbolic-polynomial-maximization-over-convex-sets-and-its-5b0x60szra.pdf

Symbolic Polynomial Maximization Over Convex Sets and Its Application to Memory Requirement Estimation

We present a static analysis for computing a parametric upper-bound of the amount of memory dynamically allocated by (Java-like) imperative object-oriented programs. We propose a general procedure for synthesizing non-linear formulas which conservatively estimate the quantity of memory explicitly allocated by a method as a function of its parameters. We have implemented the procedure and evaluated it on several benchmarks. Experimental results produced exact estimations for most test cases, and quite precise approximations for many of the others. We also apply our technique to compute usage in the context of scoped memory and discuss some open issues.

/pdf/a-static-analysis-for-synthesizing-parametric-specifications-13jxc8n6qw.pdf

A Static Analysis for Synthesizing Parametric Specifications of Dynamic Memory Consumption.

Pre/postcondition-based specifications are commonplace in a variety of software engineering activities that range from requirements through to design and implementation. The fragmented nature of these specifications can hinder validation as it is difficult to understand if the specifications for the various operations fit together well. In this paper, we propose a novel technique for automatically constructing abstractions in the form of behavior models from pre/postcondition-based specifications. Abstraction techniques have been used successfully for addressing the complexity of formal artifacts in software engineering; however, the focus has been, up to now, on abstractions for verification. Our aim is abstraction for validation and hence, different and novel trade-offs between precision and tractability are required. More specifically, in this paper, we define and study enabledness-preserving abstractions, that is, models in which concrete states are grouped according to the set of operations that they enable. The abstraction results in a finite model that is intuitive to validate and which facilitates tracing back to the specification for debugging. The paper also reports on the application of the approach to two industrial strength protocol specifications in which concerns were identified.

Automated Abstractions for Contract Validation

http://www.runtime-verification.org/rv2004/papers/paper07.pdf

Diego Garbervetsky

Papers

Parametric prediction of heap memory requirements

Symbolic Polynomial Maximization Over Convex Sets and Its Application to Memory Requirement Estimation

A Static Analysis for Synthesizing Parametric Specifications of Dynamic Memory Consumption.

Automated Abstractions for Contract Validation

Program Instrumentation and Run-Time Analysis of Scoped Memory in Java