FSP相关笔记

1.Safety properties: nothing bad happens during exeution.

2.Liveness properties: something good eventually happens.

3.Safety properties are used to specify some desirable properites and check that the model maintains them. FSP uses the property keyword, e.g property SAFE = (command->respond->SAFE).

4.Property processes may be composed with a system without affecting the correct behavior of that system. In other words, composing a property process with a set of processes does not affect their normal operation. However, if behavior can occur which violates the safety property, then a transition to the ERROR state results. To preserve this transparency of safety properties, property processes must be deterministic. That is they must not contain non-deterministic choices. Experience has shown that this is rarely a restriction in practice.

5.Thus, if P is composed with S, then traces of actions that are in the alphabet of S and the alphabet of P, must also be valid traces of P, otherwise ERROR is reachable. 

6.Progress is related to liveness property. It is used to state that a spepcified action will eventually execute.