Retrenching the Purse: Finite Exception Logs, and Validating the Small

Banach, Richard, Jeske, Czeslaw, Poppleton, Michael and Stepney, Susan (2006) Retrenching the Purse: Finite Exception Logs, and Validating the Small At IEEE SEW-30: 30th Annual Software Engineering Workshop, United States. 25 - 27 Apr 2006.


[img] PDF Retrench.Mondex.Log.pdf - Other
Download (160kB)


The Mondex Electronic Purse is an outstanding example of industrial scale formal refinement, and was the first verification to achieve ITSEC level E6 certification. A formal abstract model and a formal concrete model were developed, and a formal refinement was hand-proved between them. Nevertheless, certain requirements issues were set beyond the scope of the formal development, or handled in an unnatural manner. The retrenchment Tower Pattern is used to address one such issue in detail: the finiteness of the purse log (which records unsuccessful transactions). A retrenchment is constructed from the lowest level model of the purse system to a model in which logs are finite, and is then lifted to create two refinement developments of the purse, working at different levels of detail, and connected via retrenchments, forming the tower. The tower development is appropriately validated, vindicating the design used.

Item Type: Conference or Workshop Item (Paper)
Additional Information: [1] R. Banach. Maximally abstract retrenchments. In Proc. IEEE ICFEM2000, pages 133–142, York, August 2000. IEEE Computer Society Press. [2] R. Banach, C. Jeske, and M. Poppleton. Composition mechanisms for retrenchment. 2004. submitted,˜banach/some.pubs/ Retrench. Composition.pdf. [3] R. Banach and M. Poppleton. Retrenchment: An engineering variation on refinement. In D. Bert, editor, 2nd International B Conference, volume 1393 of LNCS, pages 129–147, Montpellier, France, April 1998. Springer. Event Dates: 25-27 April 2006
Venue - Dates: IEEE SEW-30: 30th Annual Software Engineering Workshop, United States, 2006-04-25 - 2006-04-27
Keywords: retrenchment, refinement, mondex, pattern
Organisations: Electronics & Computer Science
ePrint ID: 262809
Date :
Date Event
Date Deposited: 06 Jul 2006
Last Modified: 17 Apr 2017 21:36
Further Information:Google Scholar

Actions (login required)

View Item View Item