Donald I. Good’s research while affiliated with University of Texas at Austin and other places

... The Encrypted Packet Interface was an encryption system (using DES symmetric-key algorithms) that was tested (but never implemented) on the Arpanet and had the unique quality of being built from verifiable code, in precisely the same way as the efforts to create secure operating systems, like the Provably Secure Operating System. 49 However, these developments occurred largely after the critical developmental steps of the PLI. ...

Reference:

Edge Cryptography and the Codevelopment of Computer Networks and Cybersecurity

... Classical Hoare-style specification and verification techniques [18] work well for simple first-order imperative languages. Specification languages adapted these techniques to imperative languages with procedural abstractions, writing contracts for procedures in the form of pre-and postconditions plus frame axioms [1,16,19,35]. The design by contract methodology [23,24] is a well-known popularization of these ideas. ...

Reference:

Specifying and Verifying Advanced Control Features

... Yet, it proves to be a very challenging task, both for students and educators. Formal concepts are much harder to assimilate 3 normally in the form of method pre and postconditions, loop and class invariants, etc. Verifyingcompilers generate verification conditions (VCs) from the annotated sources, which are fed into automated provers [23]. ...

Reference:

Integrated program verification tools in education

... The first language for specification and verification was Gypsy, introduced by Ambler et al. (1977). Later, Meyer (1992) introduced the term software contract with the language Eiffel, along with our moderns notions of pre-and post-condition contract enforcement, and Findler & Felleisen (2002) brought software contracts into functional languages. ...

Reference:

An extended account of contract monitoring strategies as patterns of communication

... The operational semantics of Micro-Gypsy is an interpreter written as a recursive function (called MG-MEANING) in the Boyer-Moore theorem prover. As the focus of this paper was on the code generator and its veri cation, the MG-MEANING function is taken for granted and is not described in depth; however, it is indicated in GSY90] that the semantics of Micro-Gypsy is similar to the mathematical semantics for Middle Gypsy. ...

Reference:

The Machine-Assisted Proof Of Programming Language Properties

... However, since that time, continued, subsequent research in classrooms continues to demonstrate that teachers do make a tangible and indelible difference in student academic performance and achievement. Variegation in student achievement, for example, has been systematically related to variations in the classroom behaviors of teachers (Good, London, & Bledsoe, 1975). Connected to these findings, King and Newman (2000) state, "since teachers have the most direct, sustained contact with students and considerable control over what is taught and the climate for learning, improving teachers' knowledge, skills, and dispositions through professional development is a critical step in improving student achievement" (p. ...

Reference:

Effectively Managing Bias in Teacher Preparation. In Management Association I. (Ed.), Research Anthology on Instilling Social Justice in the Classroom (pp. 1566-1580).

... In addition, since the semantics of Micro-Gypsy is guaranteed by the entire veri ed computing system, this work can also be viewed as an implementation veri cation for the high-level programming language through the layered veri cation of the computing system. By changing the component layer FM8502 to FM9001 in the short stack, CLI has also demonstrated that the speci cation and veri cation for the upper layers in the original stack can be reused to compose a system veri cation for the changed or new stack (Good, Kaufmann, and Moore, 1992). ...

Reference:

LVT: A Layered Verification Technique for Distributed Computing Systems

... Unfortunately, few mechanical tools directly support formal reasoning about such systems. The Gypsy Verification Environment [8] is useful for the verification of a variety of concurrent applications, but limits on the form of the specification and implementation of concurrent programs make it awkward to use for the repeater. At this writing, it is difficult, for example to specify in Gypsy program exit conditions of the form "at the time a message is received over channel A, the history of channel B satisfies property P." ...

Reference:

The RS-232 Character Repeater Refinement and Assurance Argument

... The Encrypted Packet Interface was an encryption system (using DES symmetric-key algorithms) that was tested (but never implemented) on the Arpanet and had the unique quality of being built from verifiable code, in precisely the same way as the efforts to create secure operating systems, like the Provably Secure Operating System. 49 However, these developments occurred largely after the critical developmental steps of the PLI. ...

Reference:

Edge Cryptography and the Codevelopment of Computer Networks and Cybersecurity

... Languages for functional properties rely heavily on one or two-state assertions, including pre-and postconditions, as well as invariants. This style of specification language is typified by Eiffel [Eiffel 2005] and includes languages such as Gypsy [Ambler et al. 1977], Anna [Luckham and von Henke 1985; Luckham 1990], SPARK [Barnes 1997; Chapman 2000], VDM [Andrews 1996; Fitzgerald and Larsen 1998; Fitzgerald 2008; Jones 1990], VDM++ [Fitzgerald et al. 2005; Mitra 1994], Larch interface specification languages [Guttag et al. 1993; Guttag et al. 1985; Wing 1987], the RESOLVE family [Ogden et al. 1994; Edwards et al. 1994], Spec# [Barnett et al. 2005; Barnett et al. 2006], and JML [Burdy et al. 2005;. The Object Constraint Language of the UML [ In this survey, we focus on code interface specification languages for functional behavior properties. ...

Reference:

Behavioral Interface Specification Languages