Publications by C. Norris Ip

(as of Dec 1999)



Ph.D. Dissertation:

  1. C. Norris Ip, " "State Reduction Methods for Automatic Formal Verification", Ph.D. Dissertation, Department of Computer Science, Stanford University, December 1996. Also available as technical report, STAN-CS-TR-96-1578, Stanford University. abstract
    postscript version (formated doubleside, 124pp. main text, 204pp. total)

Journal Paper:

  1. C. Norris Ip and David L. Dill, "Verifying Systems with Replicated Components in Murphi", Formal Methods in System Design, Volume 14, Number 3, pp. 273-310, May 1999. abstract
    postscript version

  2. C. Norris Ip and David L. Dill, "Better Verification Through Symmetry", Formal Methods in System Design, Volume 9, Numbers 1/2, pp. 41-75, August 1996. abstract
    postscript version

Conference/Workshop Papers:

  1. C. Norris Ip, "Using Symbolic Analysis to Optimize Explicit Reachability Analysis," IEEE International High Level Design Validation and Test Workshop, San Diego, November 1999. abstract. postscript version

  2. C. Norris Ip, "Generalized Reversible Rules", International Conference on Formal Methods in Computer-Aided Design, November 1998. abstract. postscript version

  3. C. Norris Ip and David L. Dill, "Verifying Systems with Replicated Components in Murphi", International Conference on Computer-Aided Verification, pp. 147-158, July-August 1996. abstract
    postscript version

  4. C. Norris Ip and David L. Dill, "State Reduction Using Reversible Rules", 33nd Design Automation Conference, pp. 564-567, June, 1996. abstract. slide presentation.
    postscript version

  5. C. Norris Ip and David L. Dill, "Efficient Verification of Symmetric Concurrent Systems", IEEE International Conference on Computer Design: VLSI in Computers and Processors, Cambridge, MA, October 3-6, 1993. abstract
    postscript version

  6. C. Norris Ip and David L. Dill, "Better Verification Through Symmetry", Proc. 11th International Symposium on Computer Hardware Description Languages and Their Application, April 1993. abstract
    postscript version

User Manuals and Notes

  1. C. Norris Ip, "Notes on Formal Verification Using Non-full Symmetry Such as Circularset."; This note has been incorporated into my Ph.D. thesis. abstract

Abstracts

Ph.D. Dissertation

  1. click here

Journal Paper

  1. C. Norris Ip and David L. Dill, "Verifying Systems with Replicated Components in Murphi", to appear in Formal Methods in System Design
    postscript version

    Abstract: An extension to the Murphi verifier is presented to verify systems with replicated identical components. Although most systems are finite-state in nature, many of them are also designed to be scalable, so that a description gives a family of systems, each member of which has a different number of replicated components. It is therefore desirable to be able to verify the entire family of systems, independent of the exact number of replicated components.

    The verification is performed by explicit state enumeration in an abstract state space where states do not record the exact numbers of components. We provide an extension to the existing Murphi language, by which a designer can easily specify a system in its concrete form. Through a new datatype, called RepetitiveID, a designer can suggest the use of this abstraction to verify a family of systems.

    First of all, Murphi automatically checks the soundness of this abstraction. Then it automatically translates the system description to an abstract state graph for a system of a fixed size. During the verification of the system of a fixed size, Murphi uses a simple run-time check to determine if the result can be generalized for a family of systems with sizes larger than the original system, including the system with an unbounded number of components.

  2. C. Norris Ip and David L. Dill, "Better Verification Through Symmetry", Formal Methods in System Design, Volume 9, Numbers 1/2, pp. 41-75, August 1996.
    postscript version

    Summary: This paper is an extended version of the two conference papers on symmetry; We also included in this paper the formal semantic of a description language, the formal proof of the full symmetry behavior of systems with scalarset, and the formal proof of the data saturation behaviour. The symmetry reduction algorithm was improved through the use of graph isomorphism heuristic; the speedups obtained for several realistic high-level designs range from 65% to 98%.

Conference/Workshop Papers

  1. C. Norris Ip, "Using Symbolic Analysis to Optimize Explicit Reachability Analysis," IEEE International High Level Design Validation and Test Workshop, San Diego, November 1999.
    Abstract: Advanced techniques in formal verification have allowed us to verify larger systems using less memory, but run-time requirement is becoming another limiting factor. This work proposes the use of symbolic analysis to extract high-level information about a design, and develops optimizations that use such information to reduce the run-time requirement of explicit reachability analysis. This work also investigates how the optimizations can be used in conjunction with two state reduction techniques: symmetry reduction and reversible rule reduction.

  2. C. Norris Ip, "Generalized Reversible Rules", International Conference on Formal Methods in Computer-Aided Design, November 1998.
    Abstract: A generalized notion of reversible rules is presented in this paper to perform state reduction in automatic formal verification. The key idea is that some of the transition rules in a design may be invertible, and therefore, they can be used to collapse subgraphs into abstract states, thereby reducing the state explosion problem.

    This paper improves upon previous work to achieve the following goals: 1) the definition of reversible rules is simpliified so that it is easy to apply the reduction method on practice; 2) the definition is generalized to allow more reduction in the size of the state graph.

    The reduction algorithm can be combined with symmetry reduction techniques, for verification of invariants, deadlock-freedom, and stuttering-invariant temporal properties.

  3. C. Norris Ip and David L. Dill, "Verifying Systems with Replicated Components in Murphi", International Conference on Computer-Aided Verification, pp. 147-158, July-August 1996.
    postscript version

    Abstract: We present an extension to the Murphi verifier to verify systems with replicated identical components . Verification is by explicit state enumeration in an abstract state space where states do not record the exact numbers of components.

    Through a new datatype, called RepetitiveID , the user can suggest the use of such an abstraction to verify a system of fixed size. Murphi automatically checks the soundness of the abstract state graph, and automatically constructs the abstract state graph using the system description.

    Using a simple run time check, Murphi can also determine if it can generalize the verification result of a system with fixed size to systems of larger sizes, including the system with infinite number of components.

  4. C. Norris Ip and David L. Dill, "State Reduction Using Reversible Rules", 33nd Design Automation Conference, pp. 564-567, June, 1996.
    postscript version

    Abstract: We reduce the state explosion problem in automatic verification of finite state systems by automatically collapsing subgraphs of the state graph into abstract states. The key idea of the method is to identify state generateion rules that can be invertted. It can be used for verifcation of deadlock-freedom, error and invariant checking and stuttering-inveariant CTL model checking.

  5. C. Norris Ip and David L. Dill, "Efficient Verification of Symmetric Concurrent Systems", IEEE International Conference on Computer Design: VLSI in Computers and Processors, Cambridge, MA, October 3-6, 1993.
    postscript version

    Summary: Previously, we proposed a reduction technique based on symmetries to alleviate the state explosion problem in automatic verification of concurrent systems. This paper describes the results of testing the technique on a wide range of algorithms and protocols, including realistic multiprocessor synchronization algorithms and cache coherence protocols. Memory requirements were reduced by amounts ranging from 83% to over 99%, and time requirements were often reduced as well. We also consider the effectiveness of the technique on different types of symmetries, such as symmetries in identical system components and symmetries in data values.)

  6. C. Norris Ip and David L. Dill, "Better Verification Through Symmetry", Proc. 11th International Symposium on Computer Hardware Description Languages and Their Application, April 1993.
    postscript version

    Summary: We address the state explosion problem in automatic verification of finite-state systems by exploiting symmetries in the system description. We also make symmetries easy to detect by introducing a new data type scalarset, a finite and unordered set, to our description language. In some cases, this method can collapse infinite state spaces into finite spaces. We call this property data saturation. Data saturation can be used to exploit data-independence of protocols automatically, without hand-modification of the protocol descriptions.

User Manuals and Notes

  1. C. Norris Ip, "Notes on Formal Verification Using Non-full Symmetry Such as Circularset."

    Summary: In published work, we have described the theory behind the use of symmetry in automatic verification of deadlock and invariants, and the datatype scalarset to detect when a system exhibit the full symmetry behavior. The purposes of this note are to clarify why we can use other types of symmetries, and how we can use other types of symmetries, such as using circularsets in the case of dining philosopher problem.


  • WARNING: This directory contains postcript files of articles that may be covered by copyright. You may browse the articles at your convenience. (in the same spirit as you may read a journal or a proceeding article in a public library). Retrieving, copying, distributing these files may violate the copyright protection law. We recommend that the user abides US and international law in accessing this directory.

  • For example, the copyright notice for ACM publications states that:

    Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation of the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, to republish, to post on servers or to redistributed to list, requires prior specific permission and/or a fee.

  • In case you are worrying about my own posting of the papers in this servers, don't worry. E.g., in the ACM copyright agreement, the authors retain the right to post a personal copy on non-ACM servers for limited non-commercial distributions.