Formal verification of PLC programs using the B Method

PLCs (acronym for Programmable Logic Controllers) perform control operations, receiving information from the environment, processing it and modifying this same environment according to the results produced. They are commonly used in industry in several applications, from mass transport to petroleum industry. As the complexity of these applications increase, and as various are safety critical, a necessity for ensuring that they are reliable arouses. Testing and simulation are the de-facto methods used in the industry to do so, but they can leave flaws undiscovered. Formal methods can provide more confidence in an application s safety, once they permit their mathematical verification. We make use of the B Method, which has been successfully applied in the formal verification of industrial systems, is supported by several tools and can handle decomposition, refinement, and verification of correctness according to the specification. The method we developed and present in this work automatically generates B models from PLC programs and verify them in terms of safety constraints, manually derived from the system requirements. The scope of our method is the PLC programming languages presented in the IEC 61131-3 standard, although we are also able to verify programs not fully compliant with the standard. Our approach aims to ease the integration of formal methods in the industry through the abbreviation of the effort to perform formal verification in PLCs

BSmart: desenvolvimento rigoroso de aplicações Java Card com base no método formal B

Java Card technology allows the development and execution of small applications embedded in smart cards. A Java Card application is composed of an external card client and of an application in the card that implements the services available to the client by means of an Application Programming Interface (API). Usually, these applications manipulate and store important information, such as cash and confidential data of their owners. Thus, it is necessary to adopt rigor on developing a smart card application to improve its quality and trustworthiness. The use of formal methods on the development of these applications is a way to reach these quality requirements. The B method is one of the many formal methods for system specification. The development in B starts with the functional specification of the system, continues with the application of some optional refinements to the specification and, from the last level of refinement, it is possible to generate code for some programming language. The B formalism has a good tool support and its application to Java Card is adequate since the specification and development of APIs is one of the major applications of B. The BSmart method proposed here aims to promote the rigorous development of Java Card applications up to the generation of its code, based on the refinement of its formal specification described in the B notation. This development is supported by the BSmart tool, that is composed of some programs that automate each stage of the method; and by a library of B modules and Java Card classes that model primitive types, essential Java Card API classes and reusable data structures

Especificação do micronúcleo FreeRTOS utilizando o método B

This paper presents a contribution to the international Verified Software Repository effort through the formal specification of the microkernel FreeRTOS real-time system. Such specification was made in abstract level making use of the B method . For thus, properties of the microkernel were chosen and selected as specification requisites, which was constructed centered at the functionalities responsible for the utilization of these properties. This properties weres setting as specification requirements. The specification was constructed modeling the function of microkernel that implement this properties. This work intended to encourage the formal verification of FreeRTOS and also contribute to the formal creation of a microkernel real-time systems, based in FreeRTOS. Furthermore, this model brings a formal documentation point view of the microkernel, demonstrating features and how this internal states is changing. Finally, this work could be an example of specification of the actual system by the B method.

Beta: uma ferramenta para geração de testes de unidade a partir de especificações B

Formal methods and software testing are tools to obtain and control software quality. When used together, they provide mechanisms for software specification, verification and error detection. Even though formal methods allow software to be mathematically verified, they are not enough to assure that a system is free of faults, thus, software testing techniques are necessary to complement the process of verification and validation of a system. Model Based Testing techniques allow tests to be generated from other software artifacts such as specifications and abstract models. Using formal specifications as basis for test creation, we can generate better quality tests, because these specifications are usually precise and free of ambiguity. Fernanda Souza (2009) proposed a method to define test cases from B Method specifications. This method used information from the machine s invariant and the operation s precondition to define positive and negative test cases for an operation, using equivalent class partitioning and boundary value analysis based techniques. However, the method proposed in 2009 was not automated and had conceptual deficiencies like, for instance, it did not fit in a well defined coverage criteria classification. We started our work with a case study that applied the method in an example of B specification from the industry. Based in this case study we ve obtained subsidies to improve it. In our work we evolved the proposed method, rewriting it and adding characteristics to make it compatible with a test classification used by the community. We also improved the method to support specifications structured in different components, to use information from the operation s behavior on the test case generation process and to use new coverage criterias. Besides, we have implemented a tool to automate the method and we have submitted it to more complex case studies

KitSmart: Uma biblioteca de componentes para o desenvolvimento rigoroso de aplicações Java Card com o método B

The development of smart card applications requires a high level of reliability. Formal methods provide means for this reliability to be achieved. The BSmart method and tool contribute to the development of smart card applications with the support of the B method, generating Java Card code from B specifications. For the development with BSmart to be effectively rigorous without overloading the user it is important to have a library of reusable components built in B. The goal of KitSmart is to provide this support. A first research about the composition of this library was a graduation work from Universidade Federal do Rio Grande do Norte, made by Thiago Dutra in 2006. This first version of the kit resulted in a specification of Java Card primitive types byte, short and boolean in B and the creation of reusable components for application development. This work provides an improvement of KitSmart with the addition of API Java Card specification made in B and a guide for the creation of new components. The API Java Card in B, besides being available to be used for development of applications, is also useful as a documentation of each API class. The reusable components correspond to modules to manipulate specific structures, such as date and time. These structures are not available for B or Java Card. These components for Java Card are generated from specifications formally verified in B. The guide contains quick reference on how to specify some structures and how some situations were adapted from object-orientation to the B Method. This work was evaluated through a case study made through the BSmart tool, that makes use of the KitSmart library. In this case study, it is possible to see the contribution of the components in a B specification. This kit should be useful for B method users and Java Card application developers

Aplicação do método B ao projeto formal de software embarcado

This work shows a project method proposed to design and build software components from the software functional m del up to assembly code level in a rigorous fashion. This method is based on the B method, which was developed with support and interest of British Petroleum (BP). One goal of this methodology is to contribute to solve an important problem, known as The Verifying Compiler. Besides, this work describes a formal model of Z80 microcontroller and a real system of petroleum area. To achieve this goal, the formal model of Z80 was developed and documented, as it is one key component for the verification upto the assembly level. In order to improve the mentioned methodology, it was applied on a petroleum production test system, which is presented in this work. Part of this technique is performed manually. However, almost of these activities can be automated by a specific compiler. To build such compiler, the formal modelling of microcontroller and modelling of production test system should provide relevant knowledge and experiences to the design of a new compiler. In ummary, this work should improve the viability of one of the most stringent criteria for formal verification: speeding up the verification process, reducing design time and increasing the quality and reliability of the product of the final software. All these qualities are very important for systems that involve serious risks or in need of a high confidence, which is very common in the petroleum industry

Induktiomoottorin hyötysuhdemittaukset verkko- ja taajuusmuuttajasyötössä

Hyötysuhde on tärkeätekijä moottorimarkkinoilla, sillä moottorin ostajan kannalta moottorin hyvä hyötysuhde merkitsee taloudellisuutta pitkällä aikavälillä. Tästä johtuen hyötysuhde on merkittävä kriteeri moottorisuunnittelussa. Moottorin hyötysuhteen määrittämisen mittausmenetelmät on määritelty IEC- ja IEEE-standardeissa. Diplomityössäkäydään läpi eri standardimenetelmillä tehtäviä mittauksia ja vertaillaan niitäkeskenään, koska hyötysuhteen määrityksen tarkkuus riippuu käytettävästä mittausmenetelmästä. Työssä keskitytään sinimuotoisella jännitteellä syötetyn induktiomoottoriin hyötysuhteen määritysmenetelmiin perehtyen erityisesti IEEE 112-standardin B-menetelmään, ja mitataan erään induktiomoottorin hyötysuhde B-menetelmällä. Työssä tehdään selkoa sinisyötölle tarkoitettujen hyötysuhdemittausmenetelmien soveltamisesta epäsinimuotoiseen taajuusmuuttajasyöttöön sekä tutkitaan taajuusmuuttajalla syötetyn moottorin sähköisten suureiden mittaamiseen liittyvää mittausepävarmuutta. Lisäksi selvitetään kokeellisesti taajuusmuuttajasyötöllä tehdyistä mittauksista saatujen tulosten riippuvuutta käytetystä virranmittaustavasta.

Titrimetric assay of lisinopril in aqueous and non-aqueous media

Four simple titrimetric procedures are described for the determination of lisinopril (LNP) in bulk and in pharmaceuticals based on the neutralization of basic-amino and acidic carboxylic acid groups present in LNP. Method A is based on the neutralization of basic amino groups using perchloric acid as titrant in anhydrous acetic acid medium. Method B, method C and method D are based on neutralization of carboxylic acid group using NaOH, sodium methoxide and methanolic KOH, as titrants, respectively. Method A is applicable over 2.0-20.0 mg range and the calculations are based in the molar ratio of 1:2 (LNP:HClO4). Method B, method C and method D are applicable over 2.0-20.0 mg, 1.0-10.0 mg and 5.0-15.0 mg range, respectively, and their respective molar ratios are 1:1 (LNP:NaOH), 1:2 (LNP:CH3ONa) and 1:1 (LNP:KOH). Intraday and inter day accuracy and precision of the methods were evaluated and the results showed intra- and inter-day precision less than 2.7% (RSD), and accuracy of < 2.5 % (RE). The developed methods were applied to determine LNP in tablets and the results were validated statistically by comparing the results with those of the reference method by applying the Student's t-test and F-test. The accuracy was further ascertained by recovery studies via standard addition technique. No interferences from common tablet exipients was observed.

Desenvolvimento formal de aplicações para smartcards

Smart card applications represent a growing market. Usually this kind of application manipulate and store critical information that requires some level of security, such as financial or confidential information. The quality and trustworthiness of smart card software can be improved through a rigorous development process that embraces formal techniques of software engineering. In this work we propose the BSmart method, a specialization of the B formal method dedicated to the development of smart card Java Card applications. The method describes how a Java Card application can be generated from a B refinement process of its formal abstract specification. The development is supported by a set of tools, which automates the generation of some required refinements and the translation to Java Card client (host) and server (applet) applications. With respect to verification, the method development process was formalized and verified in the B method, using the Atelier B tool [Cle12a]. We emphasize that the Java Card application is translated from the last stage of refinement, named implementation. This translation process was specified in ASF+SDF [BKV08], describing the grammar of both languages (SDF) and the code transformations through rewrite rules (ASF). This specification was an important support during the translator development and contributes to the tool documentation. We also emphasize the KitSmart library [Dut06, San12], an essential component of BSmart, containing models of all 93 classes/interfaces of Java Card API 2:2:2, of Java/Java Card data types and machines that can be useful for the specifier, but are not part of the standard Java Card library. In other to validate the method, its tool support and the KitSmart, we developed an electronic passport application following the BSmart method. We believe that the results reached in this work contribute to Java Card development, allowing the generation of complete (client and server components), and less subject to errors, Java Card applications.

Estudos por imagem e físico dos membros pélvicos de pacas (Cuniculus paca) criadas em cativeiro

Conselho Nacional de Desenvolvimento Científico e Tecnológico (CNPq)

LABSQL: laboratório de ensino de SQL

Este trabalho apresenta uma nova abordagem para avaliação automática de consultas SQL. Essa abordagem propõe uma solução para o desafio de estimular o aprendiz a aperfeiçoar a sua solução: buscando, além de uma resposta que retorna o resultado correto, uma consulta com complexidade próxima da solução ótima. Essa proposta pode ser utilizada em ambientes de educação a distancia ou na educação presencial em atividades de laboratório, incluindo as avaliações. A solução proposta tem como vantagens: (1) o aprendiz recebe um feedback instantâneo durante a atividade prática de programação, o qual permite ao aprendiz refatorar a sua solução em direção a uma solução ótima; (2) completa integração entre o ensino de conceitos de programação com exemplo de fragmentos de programas executáveis on-line; (3) monitoramento das atividades do aprendiz (quantos exemplos foram executados; em cada exercício quantas tentativas de execução foram feitas, etc). Este trabalho é um primeiro passo na direção de construção de um ambiente totalmente assistido (por exemplo com avaliação automática) para ensino da linguagem de programação SQL, onde o professor é liberado do árduo trabalho de correção de comandos SQL podendo realizar tarefas pedagógicas mais relevantes. O método, fundamentado em estatística e métricas da Engenharia de Software, pode ser adaptado para outras linguagens tais como Java e Pascal. Além disso, o LabSQL serve com um laboratório para experimentação de duas novas técnicas, uma de avaliação e outra de acompanhamento, que estão sendo pesquisadas em trabalhos em paralelos: (a) avaliação automática de questões conceituais discursivas, além de permitir as tradicionais perguntas objetivas, (b) método de acompanhamento através de montagem de uma rubrica de avaliação.

Plankton biomass, POC and PON concentrations, and sinking velocities during the 2008 spring diatom bloom in Disko Bay

Phytoplankton and copepod succession was investigated in Disko Bay, western Greenland from February to July 2008. The spring phytoplankton bloom developed immediately after the breakup of sea ice and reached a peak concentration of 24 mg chl a/m**3 2 wk later. The bloom was analyzed during 3 phases: the developing, the decaying, and the post-bloom phases. Grazing impact by the copepod community was assessed by 4 methods; gut fluorescence, in situ faecal pellet production, and egg and faecal pellet production from bottle incubations. Calanus spp. dominated the mesozooplankton community. They were present from the initiation of the bloom but only had a small grazing impact on the phytoplankton. Consequently, there was a close coupling between the spring phytoplankton bloom and sedimentation of particulate organic carbon (POC). Out of 1836 ±180 mg C/m**2/d leaving the upper 50 m, 60 % was phytoplankton based carbon (PPC). The composition and quality of the sedimenting material changed throughout the bloom succession from PPC dominance in the initial phase with a POC/PON ratio close to 6.6 to a dominance of amorphous detritus with a higher POC/PON ratio (>10) in the post-bloom phase. The succession and fate of the phytoplankton spring bloom was controlled by nitrogen limitation and subsequent sedimentation, while grazing-mediated flux by the Calanus-dominated copepod community played a minor role in the termination of the spring bloom of Disko Bay.

The Role of G Protein In Alcohol Related Behaviours Using Drosophila melanogaster As A Model

Ethanol, classified as a drug, affects the central nervous system, and its consumption has been linked to the development of several behaviours including tolerance and dependence. Alcohol tolerance is defined as the need for higher doses of alcohol to induce the same changes observed in the initial exposure or where repetitive exposures of the same alcohol dose induce a lower response. Ethanol has been shown to interact with numerous targets and ultimately influence both short and long term adaptation at the cellular and molecular level in brain [1]. These adaptation processes are likely to involve signalling molecules: our work has focussed on G proteins gene expression. Using both wild type and several mutant fruit fly (Drosophila melanogaster) as a model for behaviour and molecular studies, we observed significant increases in sedation time (ST50) in response to alcohol (P<0.001) Fig.A. We also observed a consistent and significant decrease of Gq protein mRNA expression in Drosophila dUNC and DopR2 mutants chronically exposed to alcohol (*P<0.05). Fig B. Method: Six male flies were observed in drosophila polystyrene 25 x 95mm transparent vial in between cotton plugs. To the top plug, 500uL of 100% ethanol was added. Time till 50% of the flies were sedated was recorded on each day following the schedule. Fig. C (n=4-6). Using RT-PCR, we also quantified G protein mRNA expression levels one hour post initial 30 minutes of ethanol expression on day 1 and day 3 relative to expression in naïve flies.(n=2) [A] Increase in sedation time indicative of tolerance in different mutant lines and wild type flies. Six male flies were used in each experiment and (n= 4-6. ***P<0.001 unpaired t tests). [B] RT-PCR results showing significant reduction in Gq mRNA in flies chronically exposed to alcohol. (n=2. *P<0.05) [C] Alcohol exposure schedule. (1) Kaun K.R., R. Azanchi, Z. Maung, J. Hirsh, U. Heberlein. (2011). A Drosophila model for alcohol reward. Nature Neuroscience. 14 (5), 612–619.

Synthesis of optimization of [11C] Pittsburgh compound B by the captive solvent method

Mestrado em Medicina Nuclear.

Analysis of functionally graded sandwich plate structures with piezoelectric skins, using B-spline finite strip method

Functionally graded materials are composite materials wherein the composition of the constituent phases can vary in a smooth continuous way with a gradation which is function of its spatial coordinates. This characteristic proves to be an important issue as it can minimize abrupt variations of the material properties which are usually responsible for localized high values of stresses, and simultaneously providing an effective thermal barrier in specific applications. In the present work, it is studied the static and free vibration behaviour of functionally graded sandwich plate type structures, using B-spline finite strip element models based on different shear deformation theories. The effective properties of functionally graded materials are estimated according to Mori-Tanaka homogenization scheme. These sandwich structures can also consider the existence of outer skins of piezoelectric materials, thus achieving them adaptive characteristics. The performance of the models, are illustrated through a set of test cases. (C) 2012 Elsevier Ltd. All rights reserved.