Aplicação do método B ao projeto formal de software embarcado

This work shows a project method proposed to design and build software components from the software functional m del up to assembly code level in a rigorous fashion. This method is based on the B method, which was developed with support and interest of British Petroleum (BP). One goal of this methodology is to contribute to solve an important problem, known as The Verifying Compiler. Besides, this work describes a formal model of Z80 microcontroller and a real system of petroleum area. To achieve this goal, the formal model of Z80 was developed and documented, as it is one key component for the verification upto the assembly level. In order to improve the mentioned methodology, it was applied on a petroleum production test system, which is presented in this work. Part of this technique is performed manually. However, almost of these activities can be automated by a specific compiler. To build such compiler, the formal modelling of microcontroller and modelling of production test system should provide relevant knowledge and experiences to the design of a new compiler. In ummary, this work should improve the viability of one of the most stringent criteria for formal verification: speeding up the verification process, reducing design time and increasing the quality and reliability of the product of the final software. All these qualities are very important for systems that involve serious risks or in need of a high confidence, which is very common in the petroleum industry

Decision making in the product portfolio: methods adopted by Brazil?s innovative companies

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

A formal methodology for the verification of concurrent systems

There is an increasing emphasis on the use of software to control safety critical plants for a wide area of applications. The importance of ensuring the correct operation of such potentially hazardous systems points to an emphasis on the verification of the system relative to a suitably secure specification. However, the process of verification is often made more complex by the concurrency and real-time considerations which are inherent in many applications. A response to this is the use of formal methods for the specification and verification of safety critical control systems. These provide a mathematical representation of a system which permits reasoning about its properties. This thesis investigates the use of the formal method Communicating Sequential Processes (CSP) for the verification of a safety critical control application. CSP is a discrete event based process algebra which has a compositional axiomatic semantics that supports verification by formal proof. The application is an industrial case study which concerns the concurrent control of a real-time high speed mechanism. It is seen from the case study that the axiomatic verification method employed is complex. It requires the user to have a relatively comprehensive understanding of the nature of the proof system and the application. By making a series of observations the thesis notes that CSP possesses the scope to support a more procedural approach to verification in the form of testing. This thesis investigates the technique of testing and proposes the method of Ideal Test Sets. By exploiting the underlying structure of the CSP semantic model it is shown that for certain processes and specifications the obligation of verification can be reduced to that of testing the specification over a finite subset of the behaviours of the process.

Enhanced semantic access to formal software models

The success of the Semantic Web, as the next generation of Web technology, can have profound impact on the environment for formal software development. It allows both the software engineers and machines to understand the content of formal models and supports more effective software design in terms of understanding, sharing and reusing in a distributed manner. To realise the full potential of the Semantic Web in formal software development, effectively creating proper semantic metadata for formal software models and their related software artefacts is crucial. In this paper, a methodology with tool support is proposed to automatically derive ontological metadata from formal software models and semantically describe them.

An automated tool for semantic accessing to formal software models

Many software engineers have found that it is difficult to understand, incorporate and use different formal models consistently in the process of software developments, especially for large and complex software systems. This is mainly due to the complex mathematical nature of the formal methods and the lack of tool support. It is highly desirable to have software models and their related software artefacts systematically connected and used collaboratively, rather than in isolation. The success of the Semantic Web, as the next generation of Web technology, can have profound impact on the environment for formal software development. It allows both the software engineers and machines to understand the content of formal models and supports more effective software design in terms of understanding, sharing and reusing in a distributed manner. To realise the full potential of the Semantic Web in formal software development, effectively creating proper semantic metadata for formal software models and their related software artefacts is crucial. This paper proposed a framework that allows users to interconnect the knowledge about formal software models and other related documents using the semantic technology. We first propose a methodology with tool support is proposed to automatically derive ontological metadata from formal software models and semantically describe them. We then develop a Semantic Web environment for representing and sharing formal Z/OZ models. A method with prototype tool is presented to enhance semantic query to software models and other artefacts. © 2014.

Grounded Theory methods in child psychotherapy research

This article considers the place of qualitative research in psychoanalysis and child psychotherapy. It discusses why research methodology for many years occupied so small a place in these fields, and examines the cultural and social developments since the 1960s which have changed this situation, giving formal methods of research much greater significance. It reflects on the different pressures to develop formal research methods which arise both from outside the psychoanalytic field, as a condition of its continued professional survival, and from within it, where its main aim is the development of fundamental psychoanalytic knowledge, It suggests that the conduct of mainly quantitative research into treatment outcomes is largely a response to these external pressures, whilst the main benefits to be gained from the development of qualitative research methods, such as Grounded Theory, are in facilitating the knowledge-generating capacities and achievements of child psychotherapists themselves. The paper describes Grounded Theory methods, and explains how they can be valuable in the recognition of hitherto unrecognised meanings and patterns as these are made visible in clinical practice. Finally, it briefly describes five different examples of completed doctoral studies, all of which have added significantly to the knowledge-base of child psychotherapy, and which demonstrate how much can be accomplished using this method of research.

Development of Control Systems for Safety Instrumented Systems

Safety Instrumented Systems (SIS) are designed to prevent and / or mitigate accidents, avoiding undesirable high potential risk scenarios, assuring protection of people`s health, protecting the environment and saving costs of industrial equipment. The design of these systems require formal methods for ensuring the safety requirements, but according material published in this area, has not identified a consolidated procedure to match the task. This sense, this article introduces a formal method for diagnosis and treatment of critical faults based on Bayesian network (BN) and Petri net (PN). This approach considers diagnosis and treatment for each safety instrumented function (SIF) including hazard and operability (HAZOP) study in the equipment or system under control. It also uses BN and Behavioral Petri net (BPN) for diagnoses and decision-making and the PN for the synthesis, modeling and control to be implemented by Safety Programmable Logic Controller (PLC). An application example considering the diagnosis and treatment of critical faults is presented and illustrates the methodology proposed.

Modeling extended Petri nets compatible with GHENeSys IEC61131 for industrial automation

Petri net (PN) modeling is one of the most used formal methods in the automation applications field, together with programmable logic controllers (PLCs). Therefore, the creation of a modeling methodology for PNs compatible with the IEC61131 standard is a necessity of automation specialists. Different works dealing with this subject have been carried out; they are presented in the first part of this paper [Frey (2000a, 2000b); Peng and Zhou (IEEE Trans Syst Man Cybern, Part C Appl Rev 34(4):523-531, 2004); Uzam and Jones (Int J Adv Manuf Technol 14(10):716-728, 1998)], but they do not present a completely compatible methodology with this standard. At the same time, they do not maintain the simplicity required for such applications, nor the use of all-graphical and all-mathematical ordinary Petri net (OPN) tools to facilitate model verification and validation. The proposal presented here completes these requirements. Educational applications at the USP and UEA (Brazil) and the UO (Cuba), as well as industrial applications in Brazil and Cuba, have already been carried out with good results.

On compliance of business processes with business contracts

This paper addresses the problem of ensuring compliance of business processes, implemented within and across organisational boundaries, with the constraints stated in related business contracts. In order to deal with the complexity of this problem we propose two solutions that allow for a systematic and increasingly automated support for addressing two specific compliance issues. One solution provides a set of guidelines for progressively transforming contract conditions into business processes that are consistent with contract conditions thus avoiding violation of the rules in contract. Another solution compares rules in business contracts and rules in business processes to check for possible inconsistencies. Both approaches rely on a computer interpretable representation of contract conditions that embodies contract semantics. This semantics is described in terms of a logic based formalism allowing for the description of obligations, prohibitions, permissions and violations conditions in contracts. This semantics was based on an analysis of typical building blocks of many commercial, financial and government contracts. The study proved that our contract formalism provides a good foundation for describing key types of conditions in contracts, and has also given several insights into valuable transformation techniques and formalisms needed to establish better alignment between these two, traditionally separate areas of research and endeavour. The study also revealed a number of new areas of research, some of which we intend to address in near future.

Teaching Psychodynamics to Psychiatric Residents through Psychiatric Outpatient Interviews

Objective: This study evaluates whether a course that was designed for first-year psychiatric residents and that specifically addressed psychodynamic principles fostered residents` progress in knowledge, skills, and attitudes regarding these concepts. Methods: The course was given in the 2005 academic year to all residents (N = 18) in their first psychiatric postgraduate year at the Department and Institute of Psychiatry, University of Sao Paulo, Brazil. The residents were assessed in the first and last sessions of the course through a written test that was blindly rated by two independent judges. Residents were also interviewed to observe whether psychodynamic concepts had been integrated into actual practice. Their responses were subjected to content analysis. Significance was tested using analysis of variance or nonparametric tests when necessary. Agreement between the judges was tested using intraclass correlation coefficients. Results: The judges demonstrated a high level of agreement. The difference in mean scores before and after the course was such that the total score increased by a mean of 2.5 points (total test score was 10 points). Additionally, residents started to undergo personal psychotherapy after the course. They reported that this course had markedly improved their relationship with patients. They emphasized the opportunities for self-reflection and gaining insights into themselves and patient treatment issues. Conclusion: This initial study indicates that this educational method can effectively promote psychodynamic knowledge, skills, and appropriate attitudes for managing psychiatric outpatients among residents. The course was very well received by the residents, and a similar method can easily be instituted within other residency programs that pursue integrated teaching methods.

API documentation with executable examples

The rise of component-based software development has created an urgent need for effective application program interface (API) documentation. Experience has shown that it is hard to create precise and readable documentation. Prose documentation can provide a good overview but lacks precision. Formal methods offer precision but the resulting documentation is expensive to develop. Worse, few developers have the skill or inclination to read formal documentation. We present a pragmatic solution to the problem of API documentation. We augment the prose documentation with executable test cases, including expected outputs, and use the prose plus the test cases as the documentation. With appropriate tool support, the test cases are easy to develop and read. Such test cases constitute a completely formal, albeit partial, specification of input/output behavior. Equally important, consistency between code and documentation is demonstrated by running the test cases. This approach provides an attractive bridge between formal and informal documentation. We also present a tool that supports compact and readable test cases; and generation of test drivers and documentation, and illustrate the approach with detailed case studies. (C) 2002 Elsevier Science Inc. All rights reserved.

Integrating environmental and economic life cycle analysis in product development: a material selection case study

Purpose Achieving sustainability by rethinking products, services and strategies is an enormous challenge currently laid upon the economic sector, in which materials selection plays a critical role. In this context, the present work describes an environmental and economic life cycle analysis of a structural product, comparing two possible material alternatives. The product chosen is a storage tank, presently manufactured in stainless steel (SST) or in a glass fibre reinforced polymer composite (CST). The overall goal of the study is to identify environmental and economic strong and weak points related to the life cycle of the two material alternatives. The consequential win-win or trade-off situations will be identified via a Life Cycle Assessment/Life Cycle Costing (LCA/LCC) integrated model. Methods The LCA/LCC integrated model used consists in applying the LCA methodology to the product system, incorporating, in parallel, its results into the LCC study, namely those of the Life Cycle Inventory (LCI) and the Life Cycle Impact Assessment (LCIA). Results In both the SST and CST systems the most significant life cycle phase is the raw materials production, in which the most significant environmental burdens correspond to the Fossil fuels and Respiratory inorganics categories. The LCA/LCC integrated analysis shows that the CST has globally a preferable environmental and economic profile, as its impacts are lower than those of the SST in all life cycle stages. Both the internal and external costs are lower, the former resulting mainly from the composite material being significantly less expensive than stainless steel. This therefore represents a full win-win situation. As a consequence, the study clearly indicates that using a thermoset composite material to manufacture storage tanks is environmentally and economically desirable. However, it was also evident that the environmental performance of the CST could be improved by altering its End-of-Life stage. Conclusions The results of the present work provide enlightening insights into the synergies between the environmental and the economic performance of a structural product made with alternative materials. Further, they provide conclusive evidence to support the integration of environmental and economic life cycle analysis in the product development processes of a manufacturing company, or in some cases even in its procurement practices.

Component identification through program slicing

This paper reports on the development of specific slicing techniques for functional programs and their use for the identification of possible coherent components from monolithic code. An associated tool is also introduced. This piece of research is part of a broader project on program understanding and re-engineering of legacy code supported by formal methods

Beliefs and Conflicts in a Real World Multi-Agent System

In a real world multiagent system, where the agents are faced with partial, incomplete and intrinsically dynamic knowledge, conflicts are inevitable. Frequently, different agents have goals or beliefs that cannot hold simultaneously. Conflict resolution methodologies have to be adopted to overcome such undesirable occurrences. In this paper we investigate the application of distributed belief revision techniques as the support for conflict resolution in the analysis of the validity of the candidate beams to be produced in the CERN particle accelerators. This CERN multiagent system contains a higher hierarchy agent, the Specialist agent, which makes use of meta-knowledge (on how the con- flicting beliefs have been produced by the other agents) in order to detect which beliefs should be abandoned. Upon solving a conflict, the Specialist instructs the involved agents to revise their beliefs accordingly. Conflicts in the problem domain are mapped into conflicting beliefs of the distributed belief revision system, where they can be handled by proven formal methods. This technique builds on well established concepts and combines them in a new way to solve important problems. We find this approach generally applicable in several domains.

A proof system for lock-free concurrency

Dissertação para obtenção do Grau de Mestre em Engenharia Informática