Constructing a Safety Case for Automatically Generated Code from Formal Program Verification Information

Basir, Nurlida, Denney, Ewen and Fischer, Bernd (2008) Constructing a Safety Case for Automatically Generated Code from Formal Program Verification Information. In, The 27th International Conference on Computer Safety, Reliability and Security (SAFECOMP'08), Newcastle upon Tyne, UK, 22 - 25 Sep 2008.


[img] PDF - Accepted Manuscript
Download (158Kb)


Formal methods can in principle provide the highest levels of assurance of code safety by providing formal proofs as explicit evidence for the assurance claims. However, the proofs are often complex and difficult to relate to the code, in particular if it has been generated automatically. They may also be based on assumptions and reasoning principles that are not justified. This causes concerns about the trustworthiness of the proofs and thus the assurance claims. Here we present an approach to systematically construct safety cases from information collected during a formal verification of the code, in particular from the construction of the logical annotations necessary for a formal, Hoare-style safety certification. Our approach combines a generic argument that is instantiated with respect to the certified safety property (i.e., safety claims) with a detailed, program-specific argument that can be derived systematically because its structure directly follows the course the annotation construction takes through the code. The resulting safety cases make explicit the formal and informal reasoning principles, and reveal the top-level assumptions and external dependencies that must be taken into account. However, the evidence still comes from the formal safety proofs. Our approach is independent of the given safety property and program, and consequently also independent of the underlying code generator. Here, we illustrate it for the AutoFilter system developed at NASA Ames.

Item Type: Conference or Workshop Item (Paper)
Additional Information: Event Dates: 22-25 September 2008
Keywords: Automated code generation, formal program verification, Hoare logic, fault tree analysis, safety case, Goal Structuring Notation.
Divisions : Faculty of Physical Sciences and Engineering > Electronics and Computer Science > Electronic & Software Systems
ePrint ID: 266007
Accepted Date and Publication Date:
30 May 2008Submitted
Date Deposited: 27 Jun 2008 15:42
Last Modified: 31 Mar 2016 14:11
Further Information:Google Scholar

Actions (login required)

View Item View Item

Downloads from ePrints over the past year. Other digital versions may also be available to download e.g. from the publisher's website.

View more statistics