1. Network Structure Modelling and Traffic Simulation with CO-OPN David Hürzeler SMV Group, Geneva University 5/7/2005

2. Plan Introducing the problem Introducing the problem The network example The network example A first simple model A first simple model Adding queues to routers Adding queues to routers Detecting model flaws through simulation Detecting model flaws through simulation Future work: extensions and verification. Future work: extensions and verification.

3. Plan Introducing the problem Introducing the problem The network example The network example A first simple model A first simple model Adding queues to routers Adding queues to routers Detecting model flaws through simulation Detecting model flaws through simulation Future work: extensions and verification. Future work: extensions and verification.

4. The problem Using Petri nets and formal methods for accident modelling and risk analysis. Using Petri nets and formal methods for accident modelling and risk analysis. Focus on network problems which raise many interesting issues (performance, fault-tolerance, mobility, error propagation, probabilities, etc…) and the results on which can be translated to other risk domains. Focus on network problems which raise many interesting issues (performance, fault-tolerance, mobility, error propagation, probabilities, etc…) and the results on which can be translated to other risk domains.

5. Plan Introducing the problem Introducing the problem The network example The network example A first simple model A first simple model Adding queues to routers Adding queues to routers Detecting model flaws through simulation Detecting model flaws through simulation Future work: extensions and verification. Future work: extensions and verification.

6. The network example Router C Router BRouter A Router E Router DRouter F

7. Plan Introducing the problem Introducing the problem The network example The network example A first simple model A first simple model Adding queues to routers Adding queues to routers Detecting model flaws through simulation Detecting model flaws through simulation Future work: extensions and verification. Future work: extensions and verification.

8. First CO-OPN model

9. The network context r1.sendMess m from id to idd via id2 With r2.routerId id2.. r2.receiveMess m from id to idd; Router r1 (id1) routerId _ receiveMess _ from _ to _ sendMess _ from _to _ via _ Router r2 (id2) routerId _ receiveReqMess _ from _ to _ sendMess _ from _to _ via _..

10. Plan Introducing the problem Introducing the problem The network example The network example A first simple model A first simple model Adding queues to routers Adding queues to routers Detecting model flaws through simulation Detecting model flaws through simulation Future work: extensions and verification. Future work: extensions and verification.

11. Router with Queues Router r1 Routing Table Queue Receive Send Routing Table Queue Receive Send Router r2

12. Plan Introducing the problem Introducing the problem The network example The network example A first simple model A first simple model Adding queues to routers Adding queues to routers Detecting model flaws through simulation Detecting model flaws through simulation Future work: extensions and verification. Future work: extensions and verification.

13. Simulation In fact, the above model is wrong : the « proceedAllrequests » method of the Network context is never firable.

14. Plan Introducing the problem Introducing the problem The network example The network example A first simple model A first simple model Adding queues to routers Adding queues to routers Detecting model flaws through simulation Detecting model flaws through simulation Future work: extensions and verification. Future work: extensions and verification.

15. Extensions Bigger systems (more routers, hierarchy of networks), Bigger systems (more routers, hierarchy of networks), Dynamic routing, message lotss, and fault olerance, Dynamic routing, message lotss, and fault olerance, Time, Time, Probabilities, Probabilities, Complex messages. Complex messages.

16. Verification CoopnBuilder Prototype tool CoopnBuilder Prototype tool GreatSPN GreatSPN SPIN (?) SPIN (?)