Reading Assignment 2 Enumerative software model checking

1
Reading Assignment 2Enumerativesoftware model
checking
2
Enumerative vs. Symbolic

• Enumerative search is simple to implement
• a mechanism to execute a transition on a state
• a mechanism to backtrack the state in order to
  try a different transition
• akin to systematic testing
• Symbolic search is usually complicated
• symbolic representation for transitions
• symbolic representation for states
• symbolic computation of pre, post, boolean
  operations

3
Model vs. Code

• Models
• small and more amenable to analysis
• but gap between model and code may lead to false
  errors or missed errors
• abstraction gives good coverage and might reveal
  interesting behaviors
• Code
• large and complicated
• usually no false errors
• very difficult to achieve coverage

4
The environment problem