Floating Point Verification in HOL Light: The Exponential Function

Since they often embody compact but mathematically sophisticated algorithms, operations for computing the common transcendental functions in floating point arithmetic seem good targets for formal verification using a mechanical theorem prover. We discuss some of the general issues that arise in verifications of this class, and then present a machine-checked verification of an algorithm for computing the exponential function in IEEE-754 standard binary floating point arithmetic. We confirm (indeed strengthen) the main result of a previousl published error analysis, though we uncover a minor error in the hand proof and are forced to confront several subtle issues that might easily be overlooked informally.The development described here includes, apart from the proof itself, a formalization of IEEE arithmetic, a mathematical semantics for the programming language in which the algorithm is expressed, and the body of pure mathematics needed. All this is developed logically from first principles using the HOL Light prover, which guarantees strict adherence to simple rules of inference while allowing the user to perform proofs using higher-level derived rules.     

Representational Reasoning and Verification

Formal approaches to the design of interactive systems rely on reasoning about properties of the system at a very high level of abstraction. Specifications to support such an approach typically provide little scope for reasoning about presentations and the representation of information in the presentation. In contrast, psychological theories such as distributed cognition place a strong emphasis on the role of representations, and their perception by the user, in the cognitive process. However, the post-hoc techniques for the observation and analysis of existing systems which have developed out of the theory do not help us in addressing such issues at the design stage. Mn this paper we show how a formalisation can be used to investigate the representational aspects of an interface. Our goal is to provide a framework to help identify and resolve potential problems with the representation of information, and to support understanding of representational issues in design. We present a model for linking properties at the abstract and perceptual levels, and illustrate its use in a case study of a ight deck instrument. There is a widespread consensus that proper tool support is a prerequisite for the adoption of formal techniques, but the use of such tools can have a profound effect on the process itself. In order to explore this issue, we apply a higher-order logic theorem prover to the analysis. Received May 1999 / Accepted in revised form July 2000     

Organizational climate in air traffic control Innovative preparedness for implementation of new technology and organizational development in a rule governed organization

A positive and innovative organizational climate is of great importance in order to manage and adapt to change. Such a climate seldom evolves in organizations closely governed by rules and regulations. Because of ongoing organizational and technical changes within the Swedish Air Navigation Services Provider, a study concerning the organizational climate for changes and innovations was conducted to investigate the organization's capacity to cope with changes. Study locations were the two Swedish main air traffic control centers and parts of the civil aviation administration headquarters. In the study 390 subjects took part and the CCQ questionnaire was used to measure the organizational climate. The results show that the organizational climate is quite positive despite the rule-governed work. The results also show that administrative personnel assess the organizational climate as more positive than operative personnel. Comparisons between management positions did not result in any differences.     

Distributed Symbolic Bounded Property Checking

In this paper we describe an algorithm for distributed, BDD-based bounded property checking and its implementation in the verification tool SymC. The distributed algorithm verifies larger models and returns results faster than the sequential version.The core algorithm distributes partitions of the state set to computation nodes after reaching a threshold size. The nodes proceed with image computation on the nodes asynchronously. The main scalability problem of this scheme is the overlap of state set partitions. We present static and dynamic overlap reduction techniques.     

A new method for evaluating antiarrhythmic drug efficacy

To develop standards for distinguishing antiarrhythmic drug effect from spontaneous variability of premature ventricular complexes (PVCs), 21 males (mean age 56 +/- 8 years) with chronic ischemic heart disease and PVCs underwent symptom-limited treadmill exercise testing and 24-hour ambulatory monitoring before and after 2 weeks of placebo medication. Linear regression analysis was used to describe the relationship between baseline and placebo PVC frequency for various indexes of ventricular ectopic activity and to establish 95% and 99% one-tailed confidence intervals for this relationship within the group of 21 patients. The lower limit of baseline PVC frequency for which the procedure could distinguish a placebo from a true drug response, termed the "sensitivity threshold," was an average frequency of 2.2 PVCs/hour for ambulatory electrocardiographic monitoring and 1.2 PVCs/min for treadmill exercise testing. All patients exceeded the sensitivity threshold on baseline ambulatory ECGs, but only 38% of patients did so on baseline treadmill exercise tests. To establish antiarrhythmic efficacy with 95% confidence, the minimal percent reduction of PVCs between baseline and placebo visits was 68% for treadmill exercise testing and 65% for ambulatory electrocardiography. Although these standards were developed in patients with chronic ischemic heart disease, the model can be used to establish antiarrhythmic drug efficacy in any patient group.     

Interferometer for cold neutrons

Design and setup of an interferometer for cold and ultracold neutrons are described. As neutron optical components three holographically produced gratings are arranged in triple Laue geometry. The gratings are adjusted during their recording process in photosensitized polymer slabs once for ever. Employing this device we measured the coherence function of a cold neutron beam by means of interferometry.     

Investigation of thermal effects in quantum-cascade lasers

The development of a thermal model for quantum cascade lasers (QCLs) is presented. The model is used in conjunction with a self-consistent scattering rate calculation of the electron dynamics of an InGaAs-AlAsSb QCL to calculate the temperature distribution throughout the device which can be a limiting factor for high temperature operation. The model is used to investigate the effects of various driving conditions and device geometries, such as epilayer down bonding and buried heterostructures, on the active region temperature. It is found that buried heterostructures have a factor of eight decrease in thermal time constants compared to standard ridge waveguide structures in pulsed mode and allow a /spl sim/78% increase in heat sink temperature compared to epilayer down mounted devices in continuous-wave mode. The model presented provides a valuable tool for understanding the thermal dynamics inside a quantum cascade laser and will help to improve their operating temperatures.