Carnegie Mellon: The Rare Glitch ProjectE. Clarke
and D. Kroenig
Abstraction Hierarchy:
Formalization
Formalizing TTP/C
l
lLet rx denote the transition relation for level x
lLet a, b denote levels and let b<a hold.
lc rad holds
liffthere is a set of states c1,
…, cnwith
lcirbci+1for i=1 to n-1 and
lc1=c and cn=d
ln
can be fixed depending on the level and on c1.
Slide shows states and
transition relation. If one considers a transition from, e.g., state 4 to 11,
there must be a path inthe machine
for the lower level that starts in state 4 and ends in state 11. The number of
transitions done by the lower level is fixed in this example (it is exactly
the number of macro ticks for the given message slot).