a Refinement Based Approach to Calculating a Fault-Tolerant Railway Signal Device
Alistair A. McEwan, Jim Woodcock · 2008
In this extended abstract, we present a technique whereby a new, fail-safe and fault-tolerant architecture for an existing device is calculated, and verified, from an existing abstract specification. The inspiration for the architecture draws from the Byzantine Generals problem. The model is presented in Hoare’s CSP, safety properties are proved using the model checker FDR, and development is guided by the laws of Circus . The case study is Montigel’s Dwarf Signal.