Lecture Notes in Computer Science 5454

Transcription

1 Lecture Notes in Computer Science 5454 Commenced Publication in 1973 Founding and Former Series Editors: Gerhard Goos, Juris Hartmanis, and Jan van Leeuwen Editorial Board David Hutchison Lancaster University, UK Takeo Kanade Carnegie Mellon University, Pittsburgh, PA, USA Josef Kittler University of Surrey, Guildford, UK Jon M. Kleinberg Cornell University, Ithaca, NY, USA Alfred Kobsa University of California, Irvine, CA, USA Friedemann Mattern ETH Zurich, Switzerland John C. Mitchell Stanford University, CA, USA Moni Naor Weizmann Institute of Science, Rehovot, Israel Oscar Nierstrasz University of Bern, Switzerland C. Pandu Rangan Indian Institute of Technology, Madras, India Bernhard Steffen University of Dortmund, Germany Madhu Sudan Massachusetts Institute of Technology, MA, USA Demetri Terzopoulos University of California, Los Angeles, CA, USA Doug Tygar University of California, Berkeley, CA, USA Gerhard Weikum Max-Planck Institute of Computer Science, Saarbruecken, Germany

2 Michael Butler Cliff Jones Elena Troubitsyna (Eds.) Methods, Models and Tools for Fault Tolerance 13

3 Volume Editors Michael Butler University of Southampton School of Electronics and Computer Science Highfield, Southampton, SO17 1BJ, UK Cliff Jones Newcastle University, School of Computing Science Newcastle upon Tyne, NE1 7RU, UK Newcastle University, School of Computing Science Newcastle upon Tyne, NE1 7RU, UK Elena Troubitsyna Åbo Akademi University, Department of Computer Science Lemminkaisenkatu 14 A, Turku, Finland Library of Congress Control Number: Applied for CR Subject Classification (1998): D.4.5, C.2.4, D.1.3, D.2, F.2.1-2, D.3, F.3 LNCS Sublibrary: SL 2 Programming and Software Engineering ISSN ISBN Springer Berlin Heidelberg New York ISBN Springer Berlin Heidelberg New York This work is subject to copyright. All rights are reserved, whether the whole or part of the material is concerned, specifically the rights of translation, reprinting, re-use of illustrations, recitation, broadcasting, reproduction on microfilms or in any other way, and storage in data banks. Duplication of this publication or parts thereof is permitted only under the provisions of the German Copyright Law of September 9, 1965, in its current version, and permission for use must always be obtained from Springer. Violations are liable to prosecution under the German Copyright Law. springer.com Springer-Verlag Berlin Heidelberg 2009 Printed in Germany Typesetting: Camera-ready by author, data conversion by Scientific Publishing Services, Chennai, India Printed on acid-free paper SPIN: /

4 Preface The growing complexity of modern software systems increases the difficulty of ensuring the overall dependability of software-intensive systems. Complexity of environments, in which systems operate, high dependability requirements that systems have to meet, as well as the complexity of infrastructures on which they rely make system design a true engineering challenge. Mastering system complexity requires design techniques that support clear thinking and rigorous validation and verification. Formal design methods help to achieve this. Coping with complexity also requires architectures that are tolerant of faults and of unpredictable changes in environment. This issue can be addressed by fault-tolerant design techniques. Therefore, there is a clear need of methods enabling rigorous modelling and development of complex fault-tolerant systems. This book addresses such acute issues in developing fault-tolerant systems as: Verification and refinement of fault-tolerant systems Integrated approaches to developing fault-tolerant systems Formal foundations for error detection, error recovery, exception and fault handling Abstractions, styles and patterns for rigorous development of fault tolerance Fault-tolerant software architectures Development and application of tools supporting rigorous design of dependable systems Integrated platforms for developing dependable systems Rigorous approaches to specification and design of fault tolerance in novel computing systems The editors of this book were involved in the EU (FP-6) project RODIN (Rigorous Open Development Environment for Complex Systems), which brought together researchers from the fault tolerance and formal methods communities. In 2007 RODIN organized the MeMoT workshop 1 held in conjunction with the Integrated Formal Methods 2007 Conference at Oxford University. The aim of this workshop was to bring together researchers who were interested in the application of rigorous design techniques to the development of fault-tolerant software-intensive systems. We proposed to the authors of the best workshop papers to expand their work and a number of well-established researchers working in the area to write invited chapters. This book contains the refereed and revised papers that came 1 The proceedings of the Workshop on Methods, Models and Tools for Fault Tolerance are at

5 VI Preface in response. Twelve of the papers are reworked from the workshop; three papers are invited. The editors would like to thank the reviewers: Elisabeth Ball, Jeremy Bryans, Joey Coleman, Alan Fekete, Michael Fisher, John Fitzgerald, Michael Harrison, Alexei Iliasov, Michael Jackson, Linas Laibinis, Qaisar Ahmad Malik, Annabelle McIver, Larissa Meinicke, Luc Moreau, Luigia Petre, Martha Plaska, Mike Poppleton, Brian Randell, Colin Snook and Divakar Yadav. We would particularly like to thank Louise Talbot, who has efficiently handled the collation of this book. Both in organizing MeMoT 2007 and in publishing this edited book, we are aiming to build a network of researchers from the wider community to promote the integration of dependability and formal methods research. We hope that you will find this volume interesting and encourage you to join the interest group of the EU FP-7 Deploy project (Industrial Deployment of System Engineering Methods Providing High Dependability and Productivity) that in particular aims at establishing closer collaboration between dependability and formal methods research. December 2008 Michael Butler Cliff Jones Elena Troubitsyna

6 Table of Contents Part I: Formal Reasoning about Fault Tolerant Systems and Protocols Graphical Modelling for Simulation and Formal Analysis of Wireless Network Protocols... 1 A.Fehnker,M.Fruth,andA.K.McIver Reasoning about System-Degradation and Fault-Recovery with Deontic Logic Pablo F. Castro and T.S.E. Maibaum Temporal Verification of Fault-Tolerant Protocols Michael Fisher, Boris Konev, and Alexei Lisitsa Design and Verification of Fault-Tolerant Components Miaomiao Zhang, Zhiming Liu, Charles Morisset, and Anders P. Ravn Dynamically Detecting Faults via Integrity Constraints Ian J. Hayes Part II: Fault Tolerance: Modelling in B Event-B Patterns for Specifying Fault-Tolerance in Multi-agent Interaction Elisabeth Ball and Michael Butler Formal Reasoning about Fault Tolerance and Parallelism in Communicating Systems Linas Laibinis, Elena Troubitsyna, and Sari Leppänen Formal Development of a Total Order Broadcast for Distributed Transactions Using Event-B Divakar Yadav and Michael Butler Model-Based Testing Using Scenarios and Event-B Refinements Qaisar A. Malik, Johan Lilius, and Linas Laibinis Part III: Fault Tolerance in System Development Process Recording Process Documentation in the Presence of Failures Zheng Chen and Luc Moreau

7 VIII Table of Contents DREP: A Requirements Engineering Process for Dependable Reactive Systems Sadaf Mustafiz and Jörg Kienzle Documenting the Progress of the System Development Marta Plaska, Marina Waldén, and Colin Snook Fault Tolerance Requirements Analysis Using Deviations in the CORRECT Development Process Andrey Berlizev and Nicolas Guelfi Part IV: Fault Tolerant Applications Step-Wise Development of Resilient Ambient Campus Scenarios Alexei Iliasov, Budi Arief, and Using Inherent Service Redundancy and Diversity to Ensure Web Services Dependability Anatoliy Gorbenko, Vyacheslav Kharchenko, and Author Index