1. VIP: A Visual Interface for Promela Stefan Leue University of Waterloo sleue@uwaterloo.ca http://fee.uwaterloo.ca/~sleue September 21, 1999

2. Stefan Leue- 2 - Joint work with Moataz Kamel

3. Stefan Leue- 3 - Visual Interface for Promela (VIP)  Based on v-Promela [Holzmann, Leue]  visual notation for describing structure and behaviour of concurrent, object-based systems  90% compatible with UML-RT (ROOM in UML’s clothes)  incorporates Promela features  supports abstraction and hierarchy  can be compiled into Promela code  VIP  GUI-based tool for editing and maintaining v-Promela models  v-Promela to Promela compiler

4. Stefan Leue- 4 - Visual Interface for Promela (VIP) VIP v-Promela (UML-RT) (Currently: JAVA Serialization planned: XML)

5. Stefan Leue- 5 - Protocol Class Definition

6. Stefan Leue- 6 - Data Class Definition

7. Stefan Leue- 7 - VIP: Structure Definition

8. Stefan Leue- 8 - VIP: State Machine Definition

9. Stefan Leue- 9 - VIP: Transition Code Definition

10. Stefan Leue- 10 - VIP: HFSM Definition and Entry Code

11. Stefan Leue- 11 - VIP: Valid End State Definition

12. Stefan Leue- 12 - VIP: Promela Code, SPIN Simulation

13. Stefan Leue- 13 - SPIN: Validation of v-Promela Model

14. Stefan Leue- 14 - VIP  Implemented in JAVA, using SDK 1.2  Approximately 0.5 man-year  Currently beta-beta version 0.8999  Expected to be publicly available this Fall/Winter (under GNU-type license)  Contact: sleue@uwaterloo.ca m2kamel@uwaterloo.ca

15. Stefan Leue- 15 - VIP vs. v-Promela/UML-RT  No capsule instance replication  No dynamic instantiation/termination of capsule instances  Only one-directional connectors and protocols  Capacity per connector, not per port

16. Stefan Leue- 16 - VIP/v-Promela vs. UML-RT  Synchronizers and buffers  Flexible transition priority semantics  Capacities attached to connectors, not ports

17. Stefan Leue- 17 - Conclusions  Goals for furture research:  definition/implementation of linear form  support for compositional verification  notations for expressing requirements –end states –progress labels –pre-/post conditions, invariants, link to OCL –automata notations –tables –LTL properties –interval logics –Message Sequence Charts  simulation capability inside VIP  synthesizing models in related notations –ROOM/UML-RT (ObjecTime) –UML class diagrams –…–…