6 Hits in 4.8 sec

A Circus Semantics for Ravenscar Protected Objects [chapter]

Diyaa-Addein Atiya, Steve King, Jim C. P. Woodcock
2003 Lecture Notes in Computer Science  
We give a semantics to protected objects using Circus, a combination of Z and CSP, and prove several important properties; this is the first time that these properties have been verified.  ...  A central feature of Ravenscar is the use of protected objects to ensure mutually exclusive access to shared data.  ...  Thanks are also due to Alan Burns and Ana Cavalcanti for their insightful comments and useful discussions.  ... 
doi:10.1007/978-3-540-45236-2_34 fatcat:lmlswh6cober7o6emlgeqdthta

FPGAs in critical hardware/software systems

Adrian J. Hilton J. Adrian J. Hilton, Gemma Townson, Jon G. Hall
2003 Proceedings of the 2003 ACM/SIGDA eleventh international symposium on Field programmable gate arrays - FPGA '03  
Newer standards now make similar requirements for safety-related electronic hardware, such as FPGAs, in these systems.  ...  We pay particular attention to the development and analysis of high-level language programs for FPGAs designed to interact with conventional software.  ...  Channels between threads could be modelled using Ravenscar protected objects.  ... 
doi:10.1145/611817.611871 dblp:conf/fpga/HiltonTH03 fatcat:nmkyo47eszfh3gf63xdkthvv2m

Safety-Critical Java: level 2 in practice

Matt Luckcuck, Andy Wellings, Ana Cavalcanti
2016 Concurrency and Computation  
To illustrate the benefit of our changes, we present excerpts from a formal model of SCJ Level~2 written in Circus, a state-rich process algebra for refinement.  ...  Safety Critical Java (SCJ) is a profile of the Real-Time Specification for Java that brings to the safety-critical industry the possibility of using Java.  ...  Wellings is a member of the Java Community Process JSR 302 Expert Group, which is tasked with developing the Safety-Critical Java Specification.  ... 
doi:10.1002/cpe.3951 fatcat:5xh6rc4denagtjo4cowssqbvze

Circus Models for Safety-Critical Java Programs

F. Zeyda, L. Lalkhumsanga, A. Cavalcanti, A. Wellings
2013 Computer journal  
Our modelling language is part of the Circus family; at the core, we have Z, CSP, and Morgan's calculus, but we also use object-oriented and timed constructs from the OhCircus and Circus Time variants.  ...  Safety-Critical Java (SCJ) is a restriction of the Real-Time Specification for Java to support the development and certification of safety-critical applications.  ...  ACKNOWLEDGEMENTS We are grateful to Chris Marriott, Kun Wei, and Jim Woodcock for useful discussions of our models. This work is funded by the EPSRC grant EP/H017461/1.  ... 
doi:10.1093/comjnl/bxt060 fatcat:t4izhlvz2jhy3jdsqubux4sypm

Java in the Safety-Critical Domain [chapter]

Ana Cavalcanti, Alvaro Miyazawa, Andy Wellings, Jim Woodcock, Shuai Zhao
2017 Lecture Notes in Computer Science  
For modelling, we use the Circus family of notations, which combine Z, CSP, Timed CSP, and object orientation.  ...  SCJ Level 1 corresponds roughly to the Ravenscar profile for Ada [6] . We also present here a technique for verification by refinement of SCJ Level 1 programs [12] .  ...  So, what we have is a Circus semantics for the SCJ paradigm, (very much as explained in [50] for SCJ itself).  ... 
doi:10.1007/978-3-319-56841-6_4 fatcat:6h4qh74t5jgpnfkdachghf73we

High integrity hardware-software codesign

Adrian J. Hilton
This process incorporates the use of Synchronous Receptive Process Theory as a semantic basis for specifying and proving properties of programs executing on PLDs, and extends the use of SPARK Ada from  ...  We propose a process for developing a system incorporating software and PLDs, suitable for safety critical systems of the highest levels of integrity.  ...  We produced a detailed mechanism for asynchronous transfer of data between a software SPARK program and the SPARK interpreter.  ... 
doi:10.21954/ fatcat:2jmjhbz4kjet7cgpfdkjbplg3q