VIP: A Visual Interface for Promela

Stefan LeueUniversity of Waterloo

sleue@uwaterloo.ca

http://fee.uwaterloo.ca/~sleue

September 21, 1999

Stefan Leue - 2 -

Joint work with

Moataz Kamel

Stefan Leue - 3 -

Visual Interface for Promela (VIP)

Based on v-Promela [Holzmann, Leue] visual notation for describing structure and behaviour of

concurrent, object-based systems 90% compatible with UML-RT (ROOM in UML’s

clothes) incorporates Promela features supports abstraction and hierarchy can be compiled into Promela code

VIP GUI-based tool for editing and maintaining v-Promela

models v-Promela to Promela compiler

Stefan Leue - 4 -

Visual Interface for Promela (VIP)

VIP

v-Promela(UML-RT)

(Currently: JAVA Serialization

planned: XML)

Stefan Leue - 5 -

Protocol Class Definition

Stefan Leue - 6 -

Data Class Definition

Stefan Leue - 7 -

VIP: Structure Definition

Stefan Leue - 8 -

VIP: State Machine Definition

Stefan Leue - 9 -

VIP: Transition Code Definition

Stefan Leue - 10 -

VIP: HFSM Definition and Entry Code

Stefan Leue - 11 -

VIP: Valid End State Definition

Stefan Leue - 12 -

VIP: Promela Code, SPIN Simulation

Stefan Leue - 13 -

SPIN: Validation of v-Promela Model

Stefan Leue - 14 -

VIP

Implemented in JAVA, using SDK 1.2

Approximately 0.5 man-year

Currently beta-beta version 0.8999

Expected to be publicly available this Fall/Winter (under GNU-type license)

Contact:sleue@uwaterloo.cam2kamel@uwaterloo.ca

Stefan Leue - 15 -

VIP vs. v-Promela/UML-RT

No capsule instance replication

No dynamic instantiation/termination of capsule instances

Only one-directional connectors and protocols

Capacity per connector, not per port

Stefan Leue - 16 -

VIP/v-Promela vs. UML-RT

Synchronizers and buffers

Flexible transition priority semantics

Capacities attached to connectors, not ports

Stefan Leue - 17 -

Conclusions

Goals for furture research: definition/implementation of linear form support for compositional verification notations for expressing requirements

– end states– progress labels– pre-/post conditions, invariants, link to OCL– automata notations– tables– LTL properties– interval logics– Message Sequence Charts

simulation capability inside VIP synthesizing models in related notations

– ROOM/UML-RT (ObjecTime)– UML class diagrams– …