Model Checking Event-B by Encoding into Alloy

TL;DR

This paper explores encoding Event-B specifications into Alloy to leverage Alloy's SAT-based model checking for invariant validation, addressing limitations of automatic proof in Event-B.

Contribution

It introduces a method to encode Event-B models into Alloy, enabling temporal model checking to verify invariants where automatic proof fails.

Findings

Encoding allows effective invariant validation

Model checking complements theorem proving

Improves verification process for complex systems

Abstract

As systems become ever more complex, verification becomes more main stream. Event-B and Alloy are two formal specification languages based on fairly different methodologies. While Event-B uses theorem provers to prove that invariants hold for a given specification, Alloy uses a SAT-based model finder. In some settings, Event-B invariants may not be proved automatically, and so the often difficult step of interactive proof is required. One solution for this problem is to validate invariants with model checking. This work studies the encoding of Event-B machines and contexts to Alloy in order to perform temporal model checking with Alloy's SAT-based engine.