The formalization and analysis of a communications protocol

The MSMIE protocol [SBC89] allows processors in a distributed system to communicate via shared memory. It was designed to meet the reliability and efficiency needs of applications such as nuclear safety systems. We present a formal model of the MSMIE protocol expressed in the notation CCS. Desirable properties of the protocol are expressed in the modal mu-calculus, an expressive modal logic. We show that the protocol lacks an important liveness property. In actual operation, additional operating constraints are checked to avoid potential problems. We present a modified protocol and show that it possesses the liveness property even without checking operating constraints. We also show how parts of the analysis were automated with the Concurrency Workbench.     

AC—600反应堆压力容器设计探讨

本文根据 ALWR 的基本设计原则,初步分析了我国 AC-600反应堆压力容器的设计特点,探讨了保证 AC-600反应堆压力容器的可靠性应采取的主要技术措施.     

Safety,liveness and fairness in temporal logic

In this paper we present syntactic characterization of temporal formulas that express various properties of interest in the verification of concurrent programs. Such a characterization helps us in choosing the right techniques for proving correctness with respect to these properties. The properties that we consider include safety properties, liveness properties and fairness properties. We also present algorithms for checking if a given temporal formula expresses any of these properties.This work is partly supported by NSF grant CCR-9212183. A preliminary version of this paper appeared in the Fourth ACM Symposium on Principles of Distributed Computing.     

Formal methods: The next generation of system design tools

Because of the growing demand for increasingly complex computer-based systems there is now an urgent need to provide tools to assist during the design of such systems. Formal specifications and formal methods provide such assistance but their widespread adoption has been hindered by the so-called ‘math fear’ and the perception that the tools are too difficult, too time consuming and too costly to use in a commercial environment. The aim of this article is to dispel the mystery surrounding the topic and to explain what formal methods are, how and why they are used, the benefits that accrue and why the technology should be accepted on a broader front. The application of formal methods to the design of computer-based systems will be discussed without resorting to jargon or mathematics. The discussion will concentrate more on the software content of systems but the arguments apply equally well to hardware. Some of the available tools will also be introduced.     

核电厂运行安全指标

本文着重介绍了 IAEA 所制定的核电厂运行安全指标,同时也介绍了美国所制定的类似指标。这些指标为定量地评估和比较各国核电厂运行安全提供了可靠的依据。     

起重搬运作业的安全风险分析

用安全系统的理论和方法 ,以起重作业为研究对象 ,通过危险识别 ,对造成人员损伤的危险事件发生的可能性和导致伤害后果的严重程度 ,进行了定性的风险分析 ,介绍了我国采取的针对性综合管理对策     

器具开关安全使用的条件分析

本文分析器具形状安全使用的各种条件及适用性，提出实施器具安全认证应强调和重视的问题。     

液态烃球罐安全应用探讨

液态烃常温球罐储存技术相当成熟,但在实际应用方面仍然存在许多问题,影响安全储存。针对使用过程中所了解的一些具体做法进行了分析和探讨,对球罐的改造和设计提供了必要的参考。     

构筑企业级信息系统安全体系

本文以跨地区公司为例,探讨企业级信息系统安全体系的构筑,所述的原则和做法可以实现在外部网-内部网-主机-用户体系上,形成多道防线,使企业计算机网络具有相当程度的安全性,从而达到企业信息系统的安全目标。     

Seismic safety of lifelines—an optimum design method

Lifeline systems are vulnerable to two types of hazards arising from potential earthquake sources. These are the hazard of a fault-rupture strike on elements of a lifeline system and the hazard of overstress induced in different elements of the system because of the ground vibration. An optimum design method is presented in this paper for the design of a lifeline system for a maximum accepted probability of failure because of any of the two modes of failure. The method may be used to determine an optimum path between a number of fixed points which represent supply or demand stations in the system.