安全性与活性的形式化定义.DOCVIP

互斥协议的安全性分析 赵梦龙1，唐郑熠2，万 良3，韦 立4 (1.贵州职业技术学院 信息技术系,贵阳 550023；2. 福建工程学院 信息科学与工程学院,福州 350118；3.贵州大学 计算机科学与技术学院 贵阳 550023；4.贵州师范大学 数学与计算机科学学院 贵阳 550004) 摘 要: 安全性和活性是两大基本的系统属性，对于指导系统的设计与验证具有重要意义。通过对它们原始定义的形式化梳理，发现其缺乏对状态序列的具体约束。针对这一问题，此使用对系统动作刻画更完善的行为时序逻辑进行了重定义，加入了初始状态和转移条件的约束。以此为基础，对互斥这一并发系统的典型属性进行了形式化的分析，由此说明如何判断一个属性是否满足安全性或活性的定义。该技术为实现系统性质的自动推理与验证提供了形式化基础。 关键词: 互斥协议；属性分类；安全性；活性；行为时序逻辑 中图分类号: TP3　　　 文献标志码: A 文章编号：（作者可不填） doi:10.3969/j.issn.1001-3695 (作者可不填) Safety analysis of mutual exclusion protocol ZHAO Menglong1, TANG Zhengyi2, WANG Liang3 , WEI Li4 (1.Dept of information technology, Guizhou Vocational Technology Institute, Guiyang, 550023, China; 2. School of Information Science and Engineering, Fujian University of Technology, Fuzhou, 350118, China; 3. School of Computer Science and Technology, Guizhou University, Guiyang, 550025, China; 4. School of Mathematics and Computer Science, Guizhou Normal University, Guiyang, 550004, China) Abstract: Safety and liveness are tow basic types of system property and are very useful for the design and verification of system. This paper points out the disadvantage of lacking restricts to state sequence in their original definition. For this problem, it gives redefinition by the temporal logic of action which is more suitable to describe system action. The new formal definition adds initial state and constraint conditions for transfer. On this basis, it analyzes the mutual exclusion which is the typical property of concurrent system by formal method. It also shows that how to judge whether a property meets the definition of safety or liveness. This technology provides the formal basic for the automatic reasoning and verification of system property. Key words: mutual exclusion protocol；classification of properties；Safety；Liveness；Temporal Logic of Action 引言 在操作系统中，为了保证程序最终执行结果的正确性，必须对并发执行的各进程进行制约，以控制它们的执行速度和对资源的竞争[1]。进程之间的间接制约在操作系统中通常叫互斥，互斥是系统设计的关键问题之一[2]，它保证了相互冲突的并发进程可以共享资源。本文介绍了安全性与活性的形式化定义，