Automated Software Verification with First-Order Theorem Provers
Profile picture for user Pamina Georgiou
Pamina Georgiou

Automated Software Verification with First-Order Theorem Provers

Förderjahr 2021 / Stipendien Call #16 / Stipendien ID: 5761

Automating formal methods is an ongoing effort in software verification necessary to conclusively prove that critical software infrastructure is error-free. Applications such as IoT, cloud computing and blockchain show that bugs can have severe implications on the safety and security of software. In this thesis, we propose trace logic to automate deductive verification of software using first-order theorem proving. Automated reasoning in trace logic helps to prove safety properties of while-like programs in full first-order logic with support for theories and sorts. Our aim is to extend the logical expressiveness of program semantics in trace logic, offering a fully automated and scalable approach towards reasoning-based software verification. Specifically, our project extends reasoning with first-order theorem provers to interprocedural analysis of functional paradigms to make automated verification of these technologies possible and thereby pushing the state-of-the-art in automated reasoning.

Uni | FH [Universität]

Technische Universität Wien


Distributed Systems
Sicherheit | Privacy | Überwachung


Dissertation | PhD




Zwischenbericht CC-BY-SA

Progress summary of recent developments and results on our work with trace logic and the Rapid verification framework.

Endbericht CC-BY-SA

Final Report summarizing developments of automating verification with first-order theorem provers

Summary CC-BY-SA

Final Summary

Paper CC-BY-SA

We present a novel approach to automate the verification of first-order inductive program properties capturing the partial correctness of imperative program loops with branching, integers and arrays. We rely on trace logic, an instance of first-order logic with theories, to express first-order program semantics by quantifying over program execution timepoints. Program verification in trace logic is translated into a first-order theorem proving problem where, to date, effective reasoning has required the introduction of so-called trace lemmas to establish inductive properties. In this work, we extend trace logic with generic induction schemata over timepoints and loop counters, reducing reliance on trace lemmas. Inferring and proving loop invariants becomes an inductive inference step within superposition-based first-order theorem proving. We implemented our approach in the Rapid framework, using the first-order theorem prover Vampire. Our extensive experimental analysis shows that automating inductive verification in trace logic is an improvement compared to existing approaches.

Paper CC-BY-SA

We present the Rapid framework for automatic software verification by applying first-order reasoning in trace logic. Rapid establishes partial correctness of programs with loops and arrays by inferring invariants necessary to prove program correctness using a saturation-based automated theorem prover. Rapid can heuristically generate trace lemmas, common program properties that guide inductive invariant reasoning. Alternatively, Rapid can exploit nascent support for induction in modern provers to fully automate inductive reasoning without the use of trace lemmas. In addition, Rapid can be used as an invariant generation engine, supplying other verification tools with quantified loop invariants necessary for proving partial program correctness.

Paper CC-BY-SA

We present a reasoning framework in support of software quality assurance, allowing us to automatically verify the functional correctness of programs with recursive data structures. Specifically, we focus on functional programs implementing sorting algorithms. We formalize the semantics of recursive programs in many-sorted first-order logic while introducing sortedness/permutation properties as part of our first-order formalization. Rather than focusing on sorting lists of elements of specific first-order theories such as integer arithmetic, our list formalization relies on a sort parameter abstracting (arithmetic) theories and, hence, concrete sorts. Software validation is powered by automated theorem proving: we adjust recent efforts for automating inductive reasoning in saturation-based first-order theorem proving. Importantly, we advocate a compositional reasoning approach for fully automating the verification of functional programs implementing and preserving sorting and permutation properties over parameterized list structures. We showcase the applicability of our framework over recursive sorting algorithms, including Mergesort and Quicksort; to this end, we turn first-order theorem proving into an automated verification engine by guiding automated inductive reasoning with manual proof splits.


Der datenschutzrechtliche Verantwortliche (Internet Privatstiftung Austria - Internet Foundation Austria, Österreich) würde gerne mit folgenden Diensten Ihre personenbezogenen Daten verarbeiten. Zur Personalisierung können Technologien wie Cookies, LocalStorage usw. verwendet werden. Dies ist für die Nutzung der Website nicht notwendig, ermöglicht aber eine noch engere Interaktion mit Ihnen. Falls gewünscht, treffen Sie bitte eine Auswahl: