DEDICATION

remainsdicult. propertiesexpressedinrequirementsarepreservedinothersoftwarelifecycleartifacts easytoreadandscalabletolargesystems.Wehavedenedconsistencybetweenresistencyofsoftwarerequirementsanddetaileddesigns.Requirementsdescribesystems asstatemachineswithevent-driventransitionsusingaspecicationlanguagethatis Thisdissertationdescribesmethodsandtoolsforautomaticallyanalyzingthecon-safetypropertiesspeciedintherequirementsarepreservedinthedesigns.Tojudge globalpropertieslikethese,wedeterminethepossiblesystemstateswhichexistat dierentpointsindesigns.Thedetailedbookkeepingnecessarytodothisexceedsthe quirementsanddetaileddesignstobethatexactlythesametransitionsandglobal capabilitiesofhumanreviewersforallbutsmallsystems. tocreateamodelofadesignthroughabstractinterpretationofthelanguageconstructs, andamethodtoautomaticallygenerateandcheckpropertiesderivedfromrequirements toensureadesign'sconsistencywiththem.Theseideasareimplementedinatoolwhich Wehavedevelopedalanguageforspecifyingdetaileddesigns,ananalysistechnique iscapableofanalyzingdesignswithmultipleproceduresandprocesses.Usingourtool, wewereabletouncovererrorsindesignsofexistingsequentialsystemsandanalyze ourowndesignsofconcurrentsystems. BETWEENREQUIREMENTSANDDESIGNS AUTOMATICANALYSISOFCONSISTENCY DissertationsubmittedtotheFacultyoftheGraduateSchoolofthe Maria\Marsha"A.Chechik b