Jan Friso Groote Marieke Huisman (Eds.) Formal Methods 7 8 for Industrial 4 3 1 S Critical Systems C N L 27th International Conference, FMICS 2022 Warsaw, Poland, September 14–15, 2022 Proceedings Lecture Notes in Computer Science 13487 FoundingEditors GerhardGoos KarlsruheInstituteofTechnology,Karlsruhe,Germany JurisHartmanis CornellUniversity,Ithaca,NY,USA EditorialBoardMembers ElisaBertino PurdueUniversity,WestLafayette,IN,USA WenGao PekingUniversity,Beijing,China BernhardSteffen TUDortmundUniversity,Dortmund,Germany MotiYung ColumbiaUniversity,NewYork,NY,USA Moreinformationaboutthisseriesathttps://link.springer.com/bookseries/558 · Jan Friso Groote Marieke Huisman (Eds.) Formal Methods for Industrial Critical Systems 27th International Conference, FMICS 2022 Warsaw, Poland, September 14–15, 2022 Proceedings Editors JanFrisoGroote MariekeHuisman EindhovenUniversityofTechnology UniversityofTwente Eindhoven,TheNetherlands Enschede,TheNetherlands ISSN 0302-9743 ISSN 1611-3349 (electronic) LectureNotesinComputerScience ISBN 978-3-031-15007-4 ISBN 978-3-031-15008-1 (eBook) https://doi.org/10.1007/978-3-031-15008-1 ©TheEditor(s)(ifapplicable)andTheAuthor(s),underexclusivelicense toSpringerNatureSwitzerlandAG2022 Thisworkissubjecttocopyright.AllrightsarereservedbythePublisher,whetherthewholeorpartofthe material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation, broadcasting, reproduction on microfilms or in any other physical way, and transmission or information storageandretrieval,electronicadaptation,computersoftware,orbysimilarordissimilarmethodologynow knownorhereafterdeveloped. Theuseofgeneraldescriptivenames,registerednames,trademarks,servicemarks,etc.inthispublication doesnotimply,evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfromtherelevant protectivelawsandregulationsandthereforefreeforgeneraluse. Thepublisher,theauthors,andtheeditorsaresafetoassumethattheadviceandinformationinthisbookare believedtobetrueandaccurateatthedateofpublication.Neitherthepublishernortheauthorsortheeditors give a warranty, expressed or implied, with respect to the material contained herein or for any errors or omissionsthatmayhavebeenmade.Thepublisherremainsneutralwithregardtojurisdictionalclaimsin publishedmapsandinstitutionalaffiliations. ThisSpringerimprintispublishedbytheregisteredcompanySpringerNatureSwitzerlandAG Theregisteredcompanyaddressis:Gewerbestrasse11,6330Cham,Switzerland Preface The International Conference on Formal Methods in Industrial Critical Systems (FMICS),organizedbyERCIM,isthekeyconferenceattheintersectionofindustrial applicationsandformalmethods.TheaimoftheFMICSseriesistoprovideaforumfor researcherswhoareinterestedinthedevelopmentandapplicationofformalmethodsin industry.FMICSbringstogetherscientistsandengineerswhoareactiveintheareaof formal methods and interested in exchanging their experiences in the industrial usage of these methods. FMICS also strives to promote research and development for the improvementofformalmethodsandtoolsforindustrialapplications. This volume contains the papers presented at the 27th International Conference on Formal Methods in Industrial Critical Systems (FMICS 2022), which was held during September 14–15, 2022. The symposium took place in the beautiful capital of Poland, Warsaw, but could also be attended online. The conference was organized under the umbrella of CONFEST, alongside with the 33rd International Conference on Concurrency Theory (CONCUR 2022), the 19th International Conference on QuantitativeEvaluationofSystems(QEST2022),andthe20thInternationalConference onFormalModelingandAnalysisofTimedSystems(FORMATS2022). FMICS 2022 received 22 paper submissions. We selected a total of 13 papers for presentation during the conference and inclusion in these proceedings, resulting in an overallacceptancerateof59%. ThesubmissionswerereviewedbyaninternationalProgramCommittee(PC)of28 membersfromamixofuniversities,industry,andresearchinstitutes.Allsubmissions wentthrougharigoroussingle-blindreviewprocessoverseenbytheProgramCommittee Chairs.Eachsubmissionreceivedthreereviewreportsandwasactivelyandthoroughly discussedbythePC. TheprogramofCONFEST2022includedtwoFMICSinvitedkeynotes.OnebySven Schewe from Liverpool University about reinforcement learning with guarantees, and onebyBasLuttikfromEindhovenUniversityofTechnologyaboutrailwayinnovations viaformalmodelingandverification. WearegratefultoallinvolvedinFMICS2022.Wethanktheauthorsforsubmitting andpresentingtheirworkatFMICS2022andthePCmembersandsub-reviewersfor theiraccurateandtimelyreviewing.Wealsothanktheinvitedspeakers,sessionchairs, and attendees, all of whom contributed to making the conference a success. We are alsogratefultotheprovidersoftheEasyChairsystem,whichwasusedtomanagethe submissions, to Springer for sponsoring the Best Paper Award and for publishing the proceedings,andtotheSteeringCommitteeofFMICSfortheirtrustandsupport.We thanktheGeneralChairofCONFEST,SławekLasota,forprovidingthelogisticsthat enabledandfacilitatedtheorganizationofFMICS2022. July2022 JanFrisoGroote MariekeHuisman Organization ProgramCommittee ErikaÁbrahám RWTHAachenUniversity,Germany MauriceterBeek ISTI-CNR,Italy SimonBliudze Inria,France RafaelC.Cardoso UniversityofAberdeen,UK MilanCˇeška BrnoUniversityofTechnology,CzechRepublic HubertGaravel Inria,France JanFrisoGroote(Chair) EindhovenUniversityofTechnology,TheNetherlands ErnstMoritzHahn UniversityofTwente,TheNetherlands PaulaHerber UniversityofMünster,Germany MariekeHuisman(Chair) UniversityofTwente,TheNetherlands PeterHöfner AustralianNationalUniversity,Australia NikolaiKosmatov CEAList,UniversitéParis-SaclayandThales,France AlfonsLaarman LeidenUniversity,TheNetherlands PeterGormLarsen AarhusUniversity,Denmark IstvánMajzik BudapestUniversityofTechnologyandEconomics, Hungary RosemaryMonahan MaynoothUniversity,Ireland ThomasNeele EindhovenUniversityofTechnology,TheNetherlands WytseOortwijn TNO-ESI,TheNetherlands PawełParys UniversityofWarsaw,Poland WojciechPenczek InstituteofComputerScience,PolishAcademyof Sciences,Poland JacovandePol AarhusUniversity,Denmark MarcoRoveri UniversityofTrento,Italy KristinYvonneRozier IowaStateUniversity,USA CristinaSeceleanu MälardalenUniversity,Sweden MartinaSeidl JohannesKeplerUniversityLinz,Austria JiriSrba AalborgUniversity,Denmark AlexanderJ.Summers UniversityofBritishColumbia,Canada AshutoshTrivedi UniversityofColoradoBoulder,USA ElenaTroubitsyna KTH,Sweden NaijunZhan InstituteofSoftware,ChineseAcademyofSciences, China viii Organization AdditionalReviewers Backeman,Peter Longuet,Delphine Franken,Tom Oda,Tomohiro Gora,Paweł Schubert,Aleksy Grosen,ThomasMøller Sidoruk,Teofil Iwanicki,Konrad Szekeres,Dániel Jin,Xiangyu Wang,Qiang Kurkowski,Mirosław Xu,Runqing Contents InvitedKeynoteTalks ReinforcementLearningwithGuaranteesthatHoldforEver ................. 3 ErnstMoritzHahn, MateoPerez, SvenSchewe, FabioSomenzi, AshutoshTrivedi,andDominikWojtczak SupportingRailwayInnovationswithFormalModellingandVerification ...... 8 BasLuttik Certification Formal Monotony Analysis of Neural Networks with Mixed Inputs: AnAssetforCertification ............................................... 15 GuillaumeVidot,MélanieDucoffe,ChristopheGabreau,IleanaOber, andIulianOber GeneratingDomain-SpecificInteractiveValidationDocuments ............... 32 FabianVu,ChristopherHappe,andMichaelLeuschel DeductiveVerificationofSmartContractswithDafny ...................... 50 FranckCassez,JoanneFuller,andHoracioMijailAntónQuiles IndustrialUseCases Towards Reusable Formal Models for Custom Real-Time Operating Systems .............................................................. 69 JuliusAdelt,JulianGebker,andPaulaHerber FormalVerificationofanIndustrialUML-likeModelusingmCRL2 .......... 86 AnnaStramagliaandJeroenJ.A.Keiren ChemicalCaseStudiesinKeYmaeraX ................................... 103 RoseBohrer AnalysingCapacityBottlenecksinRailInfrastructurebyEpisodeMining ..... 121 PhilippBerger, WiebkeLenze, ThomasNoll, SimonSchotten, ThorstenBüker,MarioFietze,andBastianKogel x Contents TestingandMonitoring TestSuiteAugmentationforReconfigurablePLCSoftwareintheInternet ofProduction ......................................................... 137 MarcoGrochowski,MarcusVölker,andStefanKowalewski MonitoringofSpatio-TemporalPropertieswithNonlinearSATSolvers ....... 155 AndrédeMatosPedro,TomásSilva,TiagoSequeira,JoãoLourenço, JoãoCostaSeco,andCarlaFerreira Model-BasedTestingofInternetofThingsProtocols ....................... 172 XavierManuelvanDommelen,MachielvanderBijl,andAndyPimentel Methodology FormallyVerifyingDecompositionsofStochasticSpecifications ............. 193 AntonHampusandMattiasNyberg VerificationofBehaviorTreesusingLinearConstrainedHornClauses ........ 211 ThomasHenn, MarcusVölker, StefanKowalewski, MinhTrinh, OliverPetrovic,andChristianBrecher A Multi-level Methodology for Behavioral Comparison ofSoftware-IntensiveSystems ........................................... 226 DennisHendriks,ArjanvanderMeer,andWytseOortwijn AuthorIndex ......................................................... 245