四川大学软件系统形式化验证(双语)Software System Model Checking教学大纲
嵌入式软件体系结构级能耗建模方法
（ 都信息 工程学 院 控制工程 学院， 成 四川 成都
Ｅｍ ｂ ｄ ｅ ｏ ｔ ｒ ｅ ｇ ｏ ｅ ｉ ｇ Ｍ ｅ ｈ ｄ ａ ｃ ｉｅ ｔ ｒ ｖ ｌ ｅ ｄ ｄ Ｓ ｆｗａ ｅＥｎ ｒ ｙ Ｍ ｄ ｌ ｔ ｏ ｔ ｎ Ａｒ ｈ ｔ ｃ ｕ ｅＬｅ ｅ
．
Ｅｍａｌｊｓ ｓａ．ｃ ｎ ・ ｉ ｏ＠ｉ ｓ ． ： ｃ ａｃ ｈｔ：ｗ ｊ ｓ ｒ． ｔ ／ ｗｗ． ． ｇｅ ｐ／ ｏｏ ｎ
Ｔ ｌＦ ｘ ＋８ ． ０． ２ ６ ６ ｅ／ ａ ： ６． ． ５ ２５ ３ １ ６
嵌 入 式软件体 系结构级 能耗建模 方法
刘 滨Ｈ 啸 ，郭 兵 ，沈 艳 ，熊 冰 ，王 禾 ，伍 胜 ，刘 本 继 元 云
倡 导低碳 经 济 的背景下 ， 嵌入式 系统 的 能耗是 一个 日益 引起人 们关 注 的热点 问题， 为嵌入 式系 统设 计的 重要 成
考量 因素 ［＿ 】 】
・
基金 项 目：国家 自然科 学基 金 （１７ ０ ５；四 川杰 出青年 科 技 基 金（０ ０Ｑ ０ １ ６０３４） ２ １Ｊ ０ １） 收稿 时 间：２ １－７ １；修 改 时 间： ０ １０ —６ ０ １０ ．５ ２ １－９０ ；定 稿 时 间： ０ １１－４ ２ １－１１
的角 度 对嵌 入式 软件 的 能耗进 行优 化 ． 但该模 型 采用 线性 回归方 法， 在面 对 多种输 入 时模 型 不具 有通 用性 ， 另
外， 模型的准确性不够稳定．ｅ Ｌ ｅ等人在文献【 描述 了一种基于进程代数的形式化框架， ４ 仲 对能源受限的实时系 统进行建模与分析．ｅｎ等人在文献［】 Ｓｎ ５中针对具体的体系结构建模语言 Ａ Ｄ （ ｅ ａ ｈ ｅｔ ｅａａ ｓａｄ Ａ Ｌｔ ｒ ｉ ｃ ｒ ｎｌｓ ｎ ｈ ｃ ｔ ｕ ｙｉ
软件生态系统的负熵流模型
文章编号：1007-1423（2020）13-0010-07DOI：10.3969/j.issn.1007-1423.2020.13.002软件生态系统的负熵流模型韩雨泓1,2，祝鹏程3（1.四川大学计算机学院，成都610000；2.中国人民解放军32620部队，西宁810000；3.中国人民解放军78100部队，成都610000）摘要：软件生态系统（SECO）是应用生态学理论和方法，解决软件问题的热门研究方向。
通过对软件生态系统中负熵机制的研究，提出软件以输出负熵为使命的观点，构建一种基于负熵流的软件生态系统模型，并对该模型进行实证研究和可行性分析。
关键词：软件生态系统；模型；熵；负熵流0引言软件工程自20世纪60年代末诞生以来，有效解决了“软件危机”，推动了软件产业的持续快速发展。
但随着软件复杂度不断提高，研究人员逐步认识到，传统软件工程中源于传统工业领域的工程化思维和基于还原论的研究方法，在复杂系统软件的研究中存在诸多局限，面临重大挑战[1]。
近年来，受到开源软件的启发，越来越多的研究者把开源软件的成功，定性为软件生态系统的成功，转向对软件生态系统的反思与研究[2]。
但目前国内外对软件生态系统还没有统一的定义，研究也主要集中于开源软件生态系统的技术报告，分析方法与框架、过程与技术、工具及表达等方面研究还比较少[3]。
本文分析了现有的软件生态系统分析方法与框架，对软件生态系统的负熵机制进行了研究，提出了“软件以输出负熵为使命”的观点，构建了一种基于软件负熵流的形式化分析模型——软件负熵流（SoftwareNegative Entropy Flow，SNEF）模型，并对该模型进行了实证分析和可行性研究。
1软件生态系统的研究现状1.1定义与元模型软件生态系统（Software Ecosystem，SECO）最早由Messerchmitt等人[4]于2003年提出，认为“软件生态系统是一系列具有一定程度共生关系的软件产品集合”，而后十多年内研究人员又从不同角度对软件生态系统的定义进行了丰富和创新。
软件工程导论期末试题A(带答案)
评阅教师得分四川大学期末考试试题（闭卷）（2014~2015学年第1学期）课程号： 311078040 课程名称：软件工程导论（A卷）任课教师：洪玫,刘东权,李旭伟等适用专业年级：软件工程 2013级学号：姓名：2. 请将答案全部填写在本试题纸上；3. 考试结束，请将试题纸、添卷纸和草稿纸一并交给监考老师。
✍✍✍✍✍✍✍✍✍✍✍✍✍✍✍✍✍✍✍✍✍✍✍✍✍✍✍✍✍一、单项选择题（本大题共20小题，每小题1分，共20分）提示：在每小题列出的四个备选项中只有一个是符合题目要求的，请将其代码填写在下表中。
错选、多选或未选均无分。
1. Software is the collection of ( ).(A) Programs(B) Data(C) Documents(D) All of above2．Which of the items listed below is not one of the software engineering layers? ( )(A) Process(B) Methods(C) Tools(D) Manufacturing3．The prototyping model of software development is ( ).(A) A reasonable approach when requirements are well defined.(B) The best approach to use for projects with large development teams.(C) A useful approach when a customer cannot define requirements clearly.注：试题字迹务必清晰，书写工整。
本题共11页，本页为第1页(D) A risky model that rarely produces a meaningful product.4. The linear sequential model of software development is also known as the ( ).(A) Prototyping model(B) Waterfall model(C) Fountain model(D) Spiral model5．Which one of the following phases is not one of the phase names defined by the Unified Process model for software development? ( )(A) Inception phase(B) V alidation phase(C) Elaboration phase(D) Construction phase6. The spiral model of software development ( )(A) Ends with the delivery of the software product(B) Includes project risks evaluation during each iteration(C) Is more chaotic than the incremental model(D) All of the above7. The Capability Maturity Model Integration (CMMI) is used to measure ( )(A) the quality of the product(B) quality in the context of the business environment(C) the quality of the process(D) none of the above8. Analysis models depict software in which three representations? ( )(A) information, function, behavior(B) architecture, interface, component(C) cost, risk, schedule(D) None of the above9. Software engineers collaborate with customers to define which of the following? ( )(A) Customer visible usage scenarios(B) Important software features(C) System inputs and outputs(D) All of the above10. Views are “slices”of architecture. Which view focuses on structural issues? ( )(A) Logical(B) Use-case(C) Process(D) Implementation11. The Data Flow Diagram(DFD) ( ).(A) depicts relationships between data objects(B) depicts functions that transform the data flow(C) indicates how data are transformed by the system(D) both b and c12. The entity relationship diagram ( )(A) depicts functions that transform the data flow(B) depicts relationships between data objects(C) indicates how data are transformed by the system(D) indicates system reactions to external events13. Which one of the following items is not an element of a class definition? ( )(A) Class responsibilities(B) Class attribution(C) Class name(D) Class operations14. The importance of software design can be summarized in a single word: ( )(A) accuracy(B) quality(C) complexity(D) efficiency15. Polymorphism can be described as? ( )(A) Inheritance(B) Information(C) Placing Generalization(D) one interface encapsulates different implementations16. Which one of the following is not an area of concern in the design model? ( )(A) architecture(B) project scope(C) data(D) interfaces17. In component design, elaboration does not require which of the following elements to bedescribed in detail? ( )(A) Attributes(B) Source code(C) Interfaces(D) Operations18. What is the normal order of activities in which traditional software testing is organized? ( )(A) unit testing, integration testing, validation testing, system testing(B) integration testing, unit testing, system testing, validation testing(C) validation testing, unit testing, integration testing, system testing(D) system testing, validation testing, integration testing, unit testing评阅教师得分19. Which of the following tests is a system test that forces the software to fail in a variety of ways and verifies that software is able to continue execution without interruption? ( )(A) security testing (B) performance testing (C) recovery testing (D) stress testing20. The testing technique that requires devising test cases to demonstrate that each program function is operational is called? ( )(A) glass-box testing (B) black-box testing (C) grey-box testing (D) white-box testing二、名词解释题（本大题共5小题，每小题2分，共10分）。
多核系统动态温度管理TAPE策略的形式化验证
第44卷第11A期2017年11月计算机科学COMPUTER SCIENCEVol.44 No. 11ANov.2017多核系统动态温度管理TAPE策略的形式化验证屈媛媛洪玫孙琳(四川大学计算机学院成都610025)摘要多核系统中，分布式D T M策略因其良好的可扩展性得到了广泛应用。
在部署分布式D T M策略前，必须验 证其可靠性。
为了克服传统分析方法的局限，模型检测技术被应用于分布式D T M策略的分析中。
提出使用统计模 型检测技术来验证多核系统中分布式D T M策略（以T A P E策略为例）的方案。
使用U P P A A L S M C对T A P E策略的 验证证明了 T A P E策略的安全性、有效性、活性以及稳定性，从而验证D T M策略方案的可靠性。
关键词动态温度管理策略，统计模型检测，多核系统中图法分类号TP306.7 文献标识码AFormal Verification of TAPE Strategy for Dynamic Temperature Management in Multi-core SystemQ U Yuan-yuan H O N G M ei S UN Ning(Department of Computer Science,Sichuan University,Chengdu 610025,China)Abstract Distributed D T M strategy in m ulti-core system is widely used because of its scalability. Before a distributed D T M policy is deployed,its reliab ility m ust be verified. In order to overcome the lim itations of the traditional analytical m ethods,the model checking technique is applied to the analysis of distributed D T M strategies. T his paper analyzed a T A P E policy which is a distributed D T M policy instance in a m ulticore system using statistical model checking techniques. The verification of T A P E strategy by U P P A A L SMC proves the security, validity, activity and stability of T A P E strategy,and proves the reliab ility of D T M scheme.Keywords Dynamic temperature management strategy,Statistical model checking,M ulti-core system1绪论为了维持多核系统的温度在阈值之下并最大化计算机的 性能，近年来出现了多种温度管理技术。
【豆丁-精品】-基于Delta_Grammar的软件体系结构演化的描述
第37卷 第9期2010年9月计算机科学Comp uter Science Vol.37No.9Sep 2010到稿日期:2009210230 返修日期:2010201229 本文受863项目(2007AA01Z425,2009AA012201),973课题(2007CB316502),国家自然基金项目(90718015),NSFC 2微软亚洲研究院联合资助项目(60970155),教育部博士点基金项目(20090072110035),上海市优秀学科带头人计划项目(10XD1404400),高效能服务器和存储技术国家重点实验室开放基金项目(2009HSSA06)资助。
程晓瑜(1986-),女,硕士生,主要研究方向为软件演化、可信软件,E 2mail :fish.c0616@ ;曾国荪(1964-),男,博士,教授,博士生导师,主要研究方向为并行分布处理、可信计算;徐洪珍(1976-),男,博士生,副教授,主要研究方向为软件演化、可信软件。
基于Delta 2G rammar 的软件体系结构演化的描述程晓瑜 曾国荪 徐洪珍(同济大学计算机科学与技术系 上海201804) (嵌入式系统与服务计算教育部重点实验室 上海201804)摘 要 软件需要不断演化以适应复杂多变的环境和需求。
为了分析软件演化的过程和规则,提出了一种特殊的图文法delta 2grammar 用以描述软件体系结构的演化,具体给出了增加、删除、替换、重组、拆分、并发等演化的产生式规则,从而能够方便、直观、图示化地刻画演化过程。
并且,以电子商务信息系统为例,展示了应用delta 2grammar 进行软件体系结构演化描述的过程和作用。
关键词 软件演化,Delta 2grammar ,产生式规则中图法分类号 TP311 文献标识码 A Description of Soft w are Architecture Evolution B ased on Delta 2G rammarCH EN G Xiao 2yu ZEN G Guo 2sun XU Hong 2zhen(Depart ment of Computer Science and Technology ,Tongji University ,Shanghai 201804,China )(Embedded System and Service Computing Key Lab of Ministry of Education ,Shanghai 201804,China )Abstract Software requires continuing evolution to adapt complex environment and meet variable requirements.In or 2der to analyze the process and rules of software evolution ,we proposed a special graph grammar ,delta 2grammar to de 2scribe the evolution of software architecture (SA ).In particular ,we provided the production rules of insertion ,removal ,replacement ,recombination ,split and concurrency for depicting the evolution process more conveniently ,intuitively and graphically.Finally ,we showed the process and effect of applying delta 2grammar to describe software architecture evo 2lution by taking e 2commerce information system for example.K eyw ords Software evolution ,Delta 2grammar ,Production rule1 引言变化是自然界的客观规律,软件作为客观事物也在进行持续的变化活动,例如环境的变化、管理制度的改变、硬件设备的更新、新功能的增加、新技术的出现等,都迫切需要软件进行不断地变化。
基于形式化监控的可信软件构造模型
问题 ， 出基于 形式化监控的可信软件构造技术 Ｆ Ｔ Ｐ 提 Ｍ－ Ｓ Ｍ，将形式化方法和运行时监控相结合 ，实现 跨领 域的方法融合。用形式化方法 描 述监控 约束 ，根 据监 控约束 生成方面监控代码 ，解决代码分散 问题 。采用 Ａ Ｐ编织器将方面代码编织 到 目 系统中 ，构造 出带监 控能 Ｏ 标 力的可信软 件。 关麓 诃：运行 时监控 ；确 定有 限 自动机 ；面向方面编程
ｔｇｔｅ，Ｏａ ｊｃ ｎｔｒ ｇａ ｉｔ ｅｓｆ ｒ． ｏ ｅｈｒＳ ｔ ｉ ｅｔ ｓ ｏｎ ｍｏ ｉ ｉ ｂｌｙｔ ｔ ｔ ｅ ｏｎ ｉ Ｏｈ ｏ ｗａ
［ ｙｗｏ ｄ ｉｒｎｉ ｎｔｒ ｇ ＤＦ Ａｓｅ ｔ ｒ ｎｅ ｒｇａ Ｋｅ ｒ ｓ ｔ ｍｏ ｉ ｉ ； Ａ； ｐ ｃ— ｉ ｔ Ｐ ｏｒｍｍｉｇＡＯＰ ｕ ｍｅ ｏｎ Ｏｅ ｄ ｎ（ ）
第３ ７卷 第 １ 期
Ｖ＿ ． ０ ３７ １
・
计
算
机
工
程
２ １ 年 １月 ０１
Ｊ ｎｕ ｒ ２ ａ ａ ｙ ０１ １
Ｎｏ． １
Ｃｏ ｕｔｒＥｎ ｉ ｅ ｉ ｍｐ ｅ ｇ ｎｅ ｒｎｇ
软件 技 术 与数据 库 ・
文章编号： ０ ３２（ ｌ）— ｏ５ 文献ｊ识码； １０一 ４８ ０１ｌ ６— ４ ２ ｏ 幕 Ａ
ｉ ｔ ｇ ａ ｏ ｏ ｎ ｅ ｄｉｃ ｐ ｉ ａ ｙ ｐ ｒ ａ ｈ ｓ Ｓ ｓ ｅ ｎ ｅ ｒ ｔ ｎ ｆ Ｉ ｔ ｒ ｓ ｉ ｌ ｒ ａ ｐ ｏ ｃ ｅ ． ｙ ｔ ｍ ｒ ｑ ｉｅ ｎ ｓ ｒ ｅ ｐ ｅ ｓ ｄ ｓ ｎ ｆ ｒ ａ ｓ ｅ ｉ ｃ ｔ ｎｓ Ｅ ｃ ｅ ｍｏ ｉ ｉ ｃ ｄ ｉ ｉ ｎ ｅ ｕｒ ｍｅ ｔ ａ ｅ ｘ ｒ ｓ ｅ ｕ ｉ ｇ ｏ ｍ ｌ ｐ ｃ ｆ ａ ｏ ． ｆ ｉ ｎｔ ｉ ｉ ｉ ｎ ｔ ｎｇ ｏ ｅ ｓ ｏｒ ａ ｔ ｍａ ｃ ｌ ｅ ｅ ａ ｅ ｃ ｏ ｄ ｎ ｏ ｔ ｅ ｓ ｅ ｉ ｃ ｔ ｎ ，ｓ ｌ ｉ ｇ ｔ ｅ ｃ ｄ ｃ ｔ ｒｎ ｒ ｂｌｍ ．Ｉ ｗｅ ｖ ｓ ｔ ｅ ｍｏ ｉｏ ｎ ｏ ｅ ａ ｄ ｔ ｅ ｓ ｒ ｅ ｃ ｅ ｕ ｏ ｔ ａ ｙ ｇ ｎ ｒ ｔｄ ａ ｃ ｒ ｉ ｇ ｔ ｐ ｃ ｆ ａ ｉ ｓ ｏ ｖ ｎ ｏ ｅ ｓ ａ ｅ ｇ ｐ ｏ ｅ ｉｌ ｈ ｉ ｏ ｈ ｔｉ ｔ ａ ｅ ｈ ｎ ｔ ｒ ｇ ｃ ｉ ｄ ｎ ｏｕ ｃ ｏ ｈ ｄ
四川大学软件工程教学计划(一定对照修学分)
Chinese Culture（Philosophy）
公共管理学院
3 48 32 16
2春
998013000 形势与政策-5
Situation and Policy-5
学工部
0 16 16
3秋
998014000 形势与政策-6
Situation and Policy-6
学工部
0 16 16
3春
998015000 形势与政策-7
311004030 编译原理
程
311009030 多媒体技术
群
311012030 网络工程
Microcomputer System & Interface Technology Introduction to Game Design UNIX Operating System Compiler Principles Multimedia Technology Network Engineering
Game Programming Technology-I
软件学院
3 48 32
16
3秋
311010020 分布式系统与互联网（双语）
Distributed System and Internet
2春
2春
999005030 中华文化（历史篇）
Chinese Culture（History）
历史文化学院3 48 32 Fra bibliotek62春
999006030 中华文化（文学篇）
Chinese Culture（Literature）
文学与新闻学院 3 48 32 16
2春
999007030 中华文化（哲学篇）
软件系统形式化验证课程简介
Reference Booksand Other Materials
（Including title, author, press and publication date）
课程说明
内
容
简
介
随着系统复杂性的增加，设计出错的可能性也正在增加。在系统设计过程中,由于顶层说明的定义是人工的，并且综合设计的细化过程通常需要人工的精细调整才能达到更高的性能，所以有必要保证中间设计步骤与用户说明的特性的一致性和正确性。成功的设计方法要求验证设计是设计过程的必需部分，而不是可有可无的。对于一个数字系统，花费在验证设计上的时间是花费在设计上时间的80%。设计验证是任何重大系统开发过程面临的主要挑战。虽然传统的模拟技术仍被用于验证设计，但是越来越复杂的设计使得该技术创建足够多的向量集变得很困难，甚至是不可能。所以，需要一种新的验证方法来应付这种情况。形式化验证技术已经成为保证系统正确性的一种强有力的方法。
Evaluation of Learning
The written test (100%)
Total Hours
(including Lecture hours Lab hours)
Textbooks
（Including title, author, press and publication date）
Course Description
Software systems are widely used in applications where failure is unacceptable. Because of the success of the Internet and embedded systems in automobiles, airplanes, and other safety critical systems, we are likely to become even more dependent on the proper functioning of computing devices in the future. Due to this rapid growth in technology, it will become more important to develop methods that increase our confidence in the correctness of such systems. Traditional verification techniques use simulators with handcrafted or random test vectors to validate the design. Unfortunately, generating test vectors is very labor-intensive. The overall complexity of the designed systems implies that simulation cannot remain the sole means of design verification, and one must look at alternative methods to complement simulation. Recent years have brought about the development of powerful formal verification tools for verifying of software systems. By now, the information technology industry has realized the impact and importance of such tools in their own design and implementation processes.
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
College of Software Engineering
Undergraduate Course Syllabus Course ID 311031020 Course Name Software System Model Checking
Course Attribute □Compulsory
■Selective
Course
Language
■English
□Chinese
Credit Hour 2 Period 32
Semester □First Fall □First Spring □Second Fall □Second Spring ■Third Fall □Third Spring □Fourth Fall □Fourth Spring
Instructors Song Xiaoyu
Description
Today, software systems are widely used in applications where failure is unacceptable. Because of the success of the Internet and embedded systems in automobiles, airplanes, and other safety critical systems, we are likely to become even more dependent on the proper functioning of computing devices in the future. Due to this rapid growth in technology, it will become more important to develop methods that increase our confidence in the correctness of such systems.
Traditional verification techniques use simulators with handcrafted or random test vectors to validate the design. Unfortunately, generating test vectors is very labor-intensive. The overall complexity of the designed systems implies that simulation cannot remain the sole means of design verification, and one must look at alternative methods to complement simulation. Recent years have brought about the development of powerful formal verification tools for verifying of software systems. By now, the information technology industry has realized the impact and importance of such tools in their own design and implementation processes.
The objective of the course is to introduce the participants to the practical formal verification techniques for hardware/software systems that are beginning to penetrate industrial applications. Topics to be covered include: system modeling, formal logics for system verification (Boolean & first-order logic, higher-order logic, temporal logic), formal specifications, CTL model checking, BDDs, applications of theorem proving systems, and SA T solvers. Exercises are provided in the class.
Prerequisites
Software and Hardware Systems, Discrete Mathematics. Any senior or graduate student in ECE and CS is welcome to take this course.
T extbook E. Clark, O. Grumberg, D. Peled, "Model Checking", MIT Press, 2000. Resource Lecture notes.
Grading Assignments, attendance rate (40%) and final exam (60%)
T opics Introduction to verification technology. Understand the basic notions of correctness Introduction to formal logics. Understand the basic notions for logics, proofs, specifications. System modeling. Understand the importance of system modeling and specification. Temporal logics. Understand the basic notions of temporal logics.
Temporal Logic and Modeling Checking. Understand the extension of CTL, CTL*, etc. Modeling Checking with fixpoint computation.
Boolean representations. Find a canonical Boolean representation, etc.
Symbolic verification based on BDD and SA T.
Symbolic Simulation, BMC
Theorem proving systems. L TL model checking, Buchi automata, Omega- automata, etc.
T ools & Environment Projects SAT-based verification Version No Version No：： 1.0 Author Author：： Date Date：： 20020099-6-10 Auditor Auditor：： Mei Hong Date Date：： 20020099-6-1010
Signature of leader Signature of leader：： Date Date：：20020099-6-1010。