Titlebook: Automated Verification of Concurrent Search Structures; Siddharth Krishna,Nisarg Patel,Thomas Wies Book 2021 Springer Nature Switzerland A

使乳化

哄骗

Ghost State,ghost state is purely logical and ghost commands are represented as proof rules, which gives us such an erasure theorem for free. The ghost state concept has shown itself to be an invaluable tool in the verifier’s toolbox, and has been used to encode many common reasoning techniques including permissions, tokens, capabilities, and protocols.

不安

Callus

Toward another Kind of Development Practice. a proposition when the state is described by the proposition. Separation logic also gives us a set of proof rules that can be used to prove that states of interest (such as the set of resulting states after a program executes) satisfy a particular proposition.

他很灵活

1932-1228 e the value associated with a key. Concurrent search structures are parallel algorithms to speed access to search structures on multicore and distributed servers. These sophisticated algorithms perform fine-grained synchronization between threads, making them notoriously difficult to design correctl

流眼泪

Toxoid-Vaccines

https://doi.org/10.1007/978-3-319-41234-4l operations satisfy the template-level atomic triples (§10.3). The template and proof parameterize over the implementation of the single-copy data structures used at the node-level. Instantiating the template for a specific implementation involves only sequential reasoning about the implementation-specific node-level operations.

Iniquitous

Verifying Multicopy Structures,far handle only search structures that perform all operations on keys .. That is, an operation on key . searches for the unique node containing . in the structure and then performs any necessary modifications on that node. Since every key occurs at most once in the data structure at any given moment, we refer to these structures as ..

含水层

Verifying the LSM DAG Template,l operations satisfy the template-level atomic triples (§10.3). The template and proof parameterize over the implementation of the single-copy data structures used at the node-level. Instantiating the template for a specific implementation involves only sequential reasoning about the implementation-specific node-level operations.

Lineage