@article{2596,
abstract = {A γ-aminobutyric acid (GABA)(B) receptor (named GABA(B)R1) has been recently cloned in the rat and human brain and two variants generated by alternative RNA splicing were identified. In the present study, we addressed the question as to whether these variants contribute to the diversity of GABA(B) receptor-mediated physiological responses and constitute real receptor subtypes with distinct functions. To this aim, we have mapped the GABA(B)R1 (R1a) and GABA(B)R1b (R1b) transcript distribution in the rat brain using in situ hybridization. We have compared the mRNA distribution with the distribution of [ 3H]CGP54626-labeled binding GABA(B)R1 receptor sites as assessed in adjacent cryosections by quantitative autoradiography. We found that GABA(B) receptor transcripts and binding sites are expressed in the brain in almost all neuronal cell populations. Expression in glial cells, if any, is marginal. We observed a good parallelism between GABA(B)R1 mRNA transcripts and binding sites in broad neuroanatomical entities with highest densities in hippocampus, thalamic nuclei, and cerebellum. By contrast, R1a and R1b transcripts exhibit marked differences in their regional and cellular distribution pattern. A typical example is the cerebellum with an almost exclusive expression of R1b in the Purkinje cells and of R1a in the granule, stellate, and basket cells. Data pointing at a pre- versus postsynaptic localization for R1a and R1b, respectively, at some neuronal sites are presented.
},
author = {Bischoff, Serge F and Leonhard, Sabine and Reymann, Nicole C and Schuler, Valérie and Ryuichi Shigemoto and Kaupmann, Klemens and Bettler, Bernhard},
journal = {Journal of Comparative Neurology},
number = {1},
pages = {1 -- 16},
publisher = {Wiley-Blackwell},
title = {{Spatial distribution of GABA(B)R1 receptor mRNA and binding sites in the rat brain^}},
doi = {10.1002/(SICI)1096-9861(19990913)412:1<1::AID-CNE1>3.0.CO;2-D},
volume = {412},
year = {1999},
}
@article{2597,
abstract = {Metabotropic glutamate receptors (mGlus) are known to modulate synaptic transmission in various pathways of the central nervous system, but the exact mechanisms by which this modulation occurs remain unclear. Here we utilise electrophysiological and immunocytochemical techniques on cultured autaptic hippocampal neurones to investigate the mechanism of action and distribution of mGlus. Agonists at all three groups of mGlus depressed glutamatergic transmission, whereas only agonists at group I mGlus depressed GABAergic transmission. Agonists at all mGlus failed to modulate Ca2+ and K+ channels in glutamatergic autapses whereas an agonist at group III mGlus did depress the frequency of miniature excitatory postsynaptic currents (mEPSCs). Agonists failed to modulate Ca2+ or K+ channels and miniature inhibitory postsynaptic currents (mIPSCs) in GABAergic autapses. Distribution studies using selective antibodies revealed punctate staining for group III mGlus that co-localised with the synaptic marker, synaptophysin. Staining for the remaining mGlus was more diffuse throughout the soma and processes with little co-localisation with synaptophysin. The distribution of the group III receptors is consistent with the direct 'downstream' modulation of mEPSCs, although the exact mechanism of action for the remaining receptors remains unclear.},
author = {Bushell, Trevor J and Lee, Chong C and Ryuichi Shigemoto and Miller, Richard J},
journal = {Neuropharmacology},
number = {10},
pages = {1553 -- 1567},
publisher = {Elsevier},
title = {{Modulation of synaptic transmission and differential localisation of mGlus in cultured hippocampal autapses}},
doi = {10.1016/S0028-3908(99)00103-3},
volume = {38},
year = {1999},
}
@inproceedings{2711,
abstract = {We study the long time evolution of a quantum particle in a Gaussian random environment. We show that in the weak coupling limit the Wigner distribution of the wave function converges to the solution of a linear Boltzmann equation globally in time. The Boltzmann collision kernel is given by the Born approximation of the quantum scattering cross section.},
author = {László Erdös},
pages = {233 -- 242},
publisher = {World Scientific Publishing},
title = {{Linear Boltzmann equation as the weak coupling limit of the random Schrödinger equation}},
doi = {10.1007/978-3-0348-8745-8_20},
volume = {108},
year = {1999},
}
@article{2730,
author = {László Erdös and Solovej, Jan P},
journal = {Duke Mathematical Journal},
number = {1},
pages = {127 -- 173},
publisher = {Duke University Press},
title = {{Semiclassical eigenvalue estimates for the Pauli operator with strong nonhomogeneous magnetic fields, I: Nonasymptotic Lieb-Thirring-type estimate}},
doi = {10.1215/S0012-7094-99-09604-7},
volume = {96},
year = {1999},
}
@article{2783,
abstract = {Pattern formation in a layer of fluid heated from below is an example of macroscopic ordering in continuous media. Here we show that in a relatively compact experimental version of the problem, a rich and diverse set of stable flows can be found. These flows, many of which are novel, can be categorized and understood in terms of their symmetry properties. This approach shows promise for providing insight into the more complicated fluid motion that occurs as the lateral dimension of the layer is increased.},
author = {Björn Hof and Lucas, Peter G and Mullin, Tom P},
journal = {Physics of Fluids},
number = {10},
pages = {2815 -- 2817},
publisher = {American Institute of Physics},
title = {{Flow state multiplicity in convection}},
doi = {10.1063/1.870178 },
volume = {11},
year = {1999},
}
@article{2864,
abstract = {Using an electrospray tandem mass spectrometer as a concentration-sensitive detector, a method has been developed to quantify femtomole amounts of plant growth regulators (i.e. isoprenoid type cytokinins, zeatin, dihydrozeatin, isopentenyladenine and their respective riboside and glucoside analogues) and the second messenger adenosine 3':5'-cyclic monophosphate (3':5'-cAMP). Miniaturisation of the chromatographic setup using capillary high performance liquid chromatographic (HPLC) ion spray mass spectrometry increased the sensitivity to the low femtomole region. Application of automated capillary column switching allowed the introduction of large injection volumes into the HPLC system. Aliquots (25 μL) were injected into one dimension of the HPLC set-up and stacked onto a micro pre-column. By means of mobile phase switching the pre-column was back-flushed to introduce the analytes onto the analytical column. For cytokinin analysis positive electrospray ionisation was used and resulted in 2.5-25 fmol detection limits. Cyclic nucleotides were separated under ion-pair conditions using tetrabutyl ammonium bromide as ion-pair reagent and were detected under negative electrospray ionisation conditions. Here a 25 fmol detection limit was determined. Following this approach, cytokinins and 3':5'-cAMP extracted from only mg amounts of apical shoot meristem and chloroplasts obtained from Nicotiana tabacum cv. Petit Havana SR1 were identified and quantified.},
author = {Witters, Erwin and Vanhoutte, Koen and Dewitte, Walter and Macháčková, Ivana and Eva Benková and Van Dongen, Walter and Esmans, Eddy L and Van Onckelen, Henri A},
journal = {Phytochemical Analysis},
number = {3},
pages = {143 -- 151},
publisher = {Wiley-Blackwell},
title = {{Analysis of cyclic nucleotides and cytokinins in minute plant samples using phase system switching capillary electrospray liquid chromatography tandem mass spectrometry}},
doi = {10.1002/(SICI)1099-1565(199905/06)10:3<143::AID-PCA441>3.0.CO;2-G},
volume = {10},
year = {1999},
}
@article{2865,
abstract = {Although cytokinins (CKs) affect a number of processes connected with chloroplasts, it has never been rigorously proven that chloroplasts contain CKs. We isolated intact chloroplasts from tobacco (Nicotiana tabacum L. cv SR1) and wheat (Triticum aestivum L. cv Ritmo) leaves and determined their CKs by liquid chromatography/tandem mass spectroscopy. Chloroplasts from both species contained a whole spectrum of CKs, including free bases (zeatin and isopentenyladenine), ribosides (zeatin riboside, and isopentenyladenosine), ribotides (isopentenyladenosine-5′-monophosphate, zeatin riboside-5′-monophosphate, and dihydrozeatin riboside-5′-monophosphate), and N-glucosides (zeatin-N 9-glucoside, dihydrozeatin-N 9-glucoside, zeatin-N 7-glucoside, and isopentenyladenine-N-glucosides). In chloroplasts there was a moderately higher relative amount of bases, ribosides, and ribotides than in leaves, and a significantly increased level ofN 9-glucosides of zeatin and dihydrozeatin. Tobacco and wheat chloroplasts were prepared from leaves at the end of either a dark or light period. After a dark period, chloroplasts accumulated more CKs than after a light period. The differences were moderate for free bases and ribosides, but highly significant for glucosides. Tobacco chloroplasts from dark-treated leaves contained zeatin riboside-O-glucoside and dihydrozeatin riboside-O-glucoside, as well as a relatively high CK oxidase activity. These data show that chloroplasts contain a whole spectrum of CKs and the enzymatic activity necessary for their metabolism. },
author = {Eva Benková and Witters, Erwin and Van Dongen, Walter and Kolář, Jan and Motyka, Václav and Brzobohatý, Břetislav and Van Onckelen, Henri A and Macháčková, Ivana},
journal = {Plant Physiology},
number = {1},
pages = {245 -- 251},
publisher = {American Society of Plant Biologists},
title = {{Cytokinins in tobacco and wheat chloroplasts. Occurrence and changes due to light/dark treatment}},
doi = {10.1104/pp.121.1.245},
volume = {121},
year = {1999},
}
@article{8526,
author = {Kaloshin, Vadim},
issn = {0003-486X},
journal = {The Annals of Mathematics},
keywords = {Statistics, Probability and Uncertainty, Statistics and Probability},
number = {2},
pages = {729--741},
publisher = {JSTOR},
title = {{An extension of the Artin-Mazur theorem}},
doi = {10.2307/121093},
volume = {150},
year = {1999},
}
@article{883,
abstract = {Sympatric speciation, the origin of two or more species from a single local population, has almost certainly been involved in formation of several species flocks, and may be fairly common in nature. The most straightforward scenario for sympatric speciation requires disruptive selection favouring two substantially different phenotypes, and consists of the evolution of reproductive isolation between them followed by the elimination of all intermediate phenotypes. Here we use the hypergeometric phenotypic model to show that sympatric speciation is possible even when fitness and mate choice depend on different quantitative traits, so that speciation must involve formation of covariance between these traits. The increase in the number of variable loci affecting fitness facilitates sympatric speciation, whereas the increase in the number of variable loci affecting mate choice has the opposite effect. These predictions may enable more cases of sympatric speciation to be identified.},
author = {Kondrashov, Alexey S and Fyodor Kondrashov},
journal = {Nature},
number = {6742},
pages = {351 -- 354},
publisher = {Nature Publishing Group},
title = {{Interactions among quantitative traits in the course of sympatric speciation}},
doi = {10.1038/22514},
volume = {400},
year = {1999},
}
@inproceedings{4601,
abstract = {Temporal logic comes in two varieties: linear-time temporal logic assumes implicit universal quantification over all paths that are generated by system moves; branching-time temporal logic allows explicit existential and universal quantification over all paths. We introduce a third, more general variety of temporal logic: alternating-time temporal logic offers selective quantification over those paths that are possible outcomes of games, such as the game in which the system and the environment alternate moves. While linear-time and branching-time logics are natural specification languages for closed systems, alternating-time logics are natural specification languages for open systems. For example, by preceding the temporal operator “eventually” with a selective path quantifier, we can specify that in the game between the system and the environment, the system has a strategy to reach a certain state. Also the problems of receptiveness, realizability, and controllability can be formulated as model-checking problems for alternating-time formulas.
Depending on whether we admit arbitrary nesting of selective path quantifiers and temporal operators, we obtain the two alternating-time temporal logics ATL and ATL. We interpret the formulas of ATL and ATL over alternating transition systems. While in ordinary transition systems, each transition corresponds to a possible step of the system, in alternating transition systems, each transition corresponds to a possible move in the game between the system and the environment. Fair alternating transition systems can capture both synchronous and asynchronous compositions of open systems. For synchronous systems, the expressive power of ATL beyond CTL comes at no cost: the model-checking complexity of synchronous ATL is linear in the size of the system and the length of the formula. The symbolic model-checking algorithm for CTL extends with few modifications to synchronous ATL, and with some work, also to asynchronous ATL, whose model-checking complexity is quadratic. This makes ATL an obvious candidate for the automatic verification of open systems. In the case of ATL, the model-checking problem is closely related to the synthesis problem for linear-time formulas, and requires doubly exponential time for both synchronous and asynchronous systems.
A preliminary version of this paper appeared in the Proceedings of the 38th IEEE Symposium on Foundations of Computer Science (FOCS 1997), pp. 100–109.},
author = {Alur, Rajeev and Thomas Henzinger and Kupferman, Orna},
pages = {23 -- 60},
publisher = {Springer},
title = {{Alternating-time temporal logic}},
doi = {10.1007/3-540-49213-5_2},
volume = {1536},
year = {1999},
}
@inproceedings{4602,
abstract = {Modular techniques for automatic verification attempt to overcome the state-explosion problem by exploiting the modular structure naturally present in many system designs. Unlike other tasks in the verification of finite-state systems, current modular techniques rely heavily on user guidance. In particular, the user is typically required to construct module abstractions that are neither too detailed as to render insufficient benefits in state exploration, nor too coarse as to invalidate the desired systemproperties. In this paper, we construct abstractmodules automatically, using reachability and controllability information about the concrete modules. This allows us to leverage automatic verification techniques by applying them in layers: first we compute on the state spaces of system components, then we use the results for constructing abstractions, and finally we compute on the abstract state space of the system. Our experimental results indicate that if reachability and controllability information is used in the construction of abstractions, the resulting abstract modules are often significantly smaller than the concrete modules and can drastically reduce the space and time requirements for verification.},
author = {Alur, Rajeev and de Alfaro, Luca and Thomas Henzinger and Mang, Freddy Y},
pages = {82 -- 97},
publisher = {Schloss Dagstuhl - Leibniz-Zentrum für Informatik},
title = {{Automating modular verification}},
doi = {10.1007/3-540-48320-9_8},
volume = {1664},
year = {1999},
}
@article{4014,
abstract = {A new paradigm for designing smooth surfaces is described. A finite set of points with weights specifies a closed surface in space referred to as skin. It consists of one or more components, each tangent continuous and free of self-intersections and intersections with other components. The skin varies continuously with the weights and locations of the points, and the variation includes the possibility of a topology change facilitated by the violation of tangent continuity at a single point in space and time. Applications of the skin to molecular modeling and to geometric deformation are discussed.},
author = {Herbert Edelsbrunner},
journal = {Discrete & Computational Geometry},
number = {1},
pages = {87 -- 115},
publisher = {Springer},
title = {{Deformable smooth surface design}},
doi = {10.1007/PL00009412},
volume = {21},
year = {1999},
}
@article{4204,
abstract = {During the development of the zebrafish nervous system both noi, a zebrafish pax2 homolog, and ace, a zebrafish fgf8 homolog, are required for development of the midbrain and cerebellum. Here we describe a dominant mutation, aussicht (aus), in which the expression of noi and ace is upregulated, In aus mutant embryos, ace is upregulated at many sites in the embryo, while Itoi expression is only upregulated in regions of the forebrain and midbrain which also express ace. Subsequent to the alterations in noi and ace expression, aus mutants exhibit defects in the differentiation of the forebrain, midbrain and eyes. Within the forebrain, the formation of the anterior and postoptic commissures is delayed and the expression of markers within the pretectal area is reduced. Within the midbrain, En and wnt1 expression is expanded. In heterozygous aus embryos, there is ectopic outgrowth of neural retina in the temporal half of the eyes, whereas in putative homozygous aus embryos, the ventral retina is reduced and the pigmented retinal epithelium is expanded towards the midline, The observation that ans mutant embryos exhibit widespread upregulation of ace raised the possibility that aus might represent an allele of the ace gene itself. However, by crossing carriers for both aus and ace, we were able to generate homozygous ace mutant embryos that also exhibited the aus phenotype, This indicated that aus is not tightly linked to ace and is unlikely to be a mutation directly affecting the ace locus. However, increased Ace activity may underly many aspects of the aus phenotype and we show that the upregulation of noi in the forebrain of aus mutants is partially dependent upon functional Ace activity. Conversely, increased ace expression in the forebrain of arcs mutants is not dependent upon functional Noi activity. We conclude that aus represents a mutation involving a locus normally required for the regulation of ace expression during embryogenesis.},
author = {Heisenberg, Carl-Philipp J and Brennan, Caroline and Wilson, Stephen},
journal = {Development},
number = {10},
pages = {2129 -- 2140},
publisher = {Company of Biologists},
title = {{Zebrafish aussicht mutant embryos exhibit widespread overexpression of ace (fgf8) and coincident defects in CNS development}},
volume = {126},
year = {1999},
}
@article{4277,
abstract = {Reproductive isolation between two taxa may be due to endogenous selection, which is generated by incompatibilities between the respective genomes, to exogenous selection, which is generated by differential adaptations to alternative environments, or to both. The continuing debate over the relative importance of either mode of selection has highlighted the need for unambiguous data on the fitness of hybrid genotypes. The hybrid zone between the fire-bellied toad (Bombina bombina) and the yellow-bellied toad (B. variegata) in central Europe involves adaptation to different environments, but evidence of hybrid dysfunction is equivocal. In this study, we followed the development under laboratory conditions of naturally laid eggs collected from a transect across the Bombina hybrid zone in Croatia. Fitness was significantly reduced in hybrid populations: Egg batches from the center of the hybrid zone showed significantly higher embryonic and larval mortality and higher frequencies of morphological abnormalities relative to either parental type. Overall mortality from day of egg collection to three weeks after hatching reached 20% in central hybrid populations, compared to 2% in pure populations. There was no significant difference in fitness between two parental types. Within hybrid populations, there was considerable variation in fitness, with some genotypes showing no evidence of reduced viability. We discuss the implications of these findings for our understanding of barriers to gene flow between species.},
author = {Kruuk, Loeske E and Gilchrist, Jason S and Nicholas Barton},
journal = {Evolution; International Journal of Organic Evolution},
number = {5},
pages = {1611 -- 1616},
publisher = {Wiley-Blackwell},
title = {{Hybrid dysfunction in fire-bellied toads (Bombina)}},
doi = {10.2307/2640907},
volume = {53},
year = {1999},
}
@article{4279,
abstract = {In this article we describe the structure of a hybrid zone in Argyll, Scotland, between native red deer (Cervus elaphus) and introduced Japanese sika deer (Cervus nippon), on the basis of a genetic analysis using 11 microsatellite markers and mitochondrial DNA. In contrast to the findings of a previous study of the same population, we conclude that the deer fall into two distinct genetic classes, corresponding to either a sika-like or red- like phenotype. Introgression is rare at any one locus, but where the taxa overlap up to 40% of deer carry apparently introgressed alleles. While most putative hybrids are heterozygous at only one locus, there are rare multiple heterozygotes, reflecting significant linkage disequilibrium within both sika- and red-like populations. The rate of backcrossing into the sika population is estimated as H = 0.002 per generation and into red, H = 0.001 per generation. On the basis of historical evidence that red deer entered Kintyre only recently, a diffusion model evaluated by maximum likelihood shows that sika have increased at ~9.2% yr-1 from low frequency and disperse at a rate of ~3.7 km yr-1. Introgression into the red-like population is greater in the south, while introgression into sika varies little along the transect. For both sika- and red-like populations, the degree of introgression is 30-40% of that predicted from the rates of current hybridization inferred from linkage disequilibria; however, in neither case is this statistically significant evidence for selection against introgression.},
author = {Goodman, Simon J and Nicholas Barton and Swanson, Graeme M and Abernethy, Kate and Pemberton, Josephine M},
journal = {Genetics},
number = {1},
pages = {355 -- 371},
publisher = {Genetics Society of America},
title = {{Introgression through rare hybridisation: A genetic study of a hybrid zone between red and sika deer (genus Cervus), in Argyll, Scotland}},
volume = {152},
year = {1999},
}
@phdthesis{4411,
abstract = {Model checking algorithms for the verification of reactive systems proceed by a systematic and exhaustive exploration of the system state space. They do not scale to large designs because of the state explosion problem --the number of states grows exponentially with the number of components in the design. Consequently, the model checking problem is PSPACE-hard in the size of the design description. This dissertation proposes three novel techniques to combat the state explosion problem.
One of the most important advances in model checking in recent years has been the discovery of symbolic methods, which use a calculus of expressions, such as binary decision diagrams, to represent the state sets encountered during state space exploration. Symbolic model checking has proved to be effective for verifying hardware designs. Traditionally, symbolic checking of temporal logic specifications is performed by backward fixpoint reasoning with the operator Pre. Backward reasoning can be wasteful since unreachable states are explored. We suggest the use of forward fixpoint reasoning based on the operator Post. We show how all linear temporal logic specifications can be model checked symbolically by forward reasoning. In contrast to backward reasoning, forward reasoning performs computations only on the reachable states.
Heuristics that improve algorithms for application domains, such as symbolic methods for hardware designs, are useful but not enough to make model checking feasible on industrial designs. Currently, exhaustive state exploration is possible only on designs with about 50-100 boolean state variables. Assume-guarantee verification attempts to combat the state explosion problem by using the principle of "divide and conquer," where the components of the implementation are analyzed one at a time. Typically, an implementation component refines its specification only when its inputs are suitably constrained by other components in the implementation. The assume-guarantee principle states that instead of constraining the inputs by implementation components, it is sound to constrain them by the corresponding specification components, which can be significantly smaller. We extend the assume-guarantee proof rule to deal with the case where the specification operates at a coarser time scale than the implementation. Using our model checker Mocha, which implements this methodology, we verify VGI, a parallel DSP processor chip with 64 compute processors each containing approximately 800 state variables and 30K gates.
Our third contribution is a systematic model checking methodology for verifying the abstract shared-memory interface of sequential consistency on multiprocessor systems with three parameters --number of processors, number of memory locations, and number of data values. Sequential consistency requires that some interleaving of the local temporal orders of read/write events at different processors be a trace of serial memory. Therefore, it suffices to construct a non-interfering serializer that watches and reorders read/write events so that a trace of serial memory is obtained. While in general such a serializer must be unbounded even for fixed values of the parameters --checking sequential consistency is undecidable!-- we show that the paradigmatic class of snoopy cache coherence protocols has finite-state serializers. In order to reduce the arbitrary-parameter problem to the fixed-parameter problem, we develop a novel framework for induction over the number of processors and use the notion of a serializer to reduce the problem of verifying sequential consistency to that of checking language inclusion between finite state machines.},
author = {Qadeer, Shaz},
pages = {1 -- 150},
publisher = {University of California, Berkeley},
title = {{Algorithms and Methodology for Scalable Model Checking}},
year = {1999},
}
@article{4442,
abstract = {Rectangular hybrid automata model digital control programs of analog plant environments. We study rectangular hybrid automata where the plant state evolves continuously in real-numbered time, and the controller samples the plant state and changes the control state discretely, only at the integer points in time. We prove that rectangular hybrid automata have finite bisimilarity quotients when all control transitions happen at integer times, even if the constraints on the derivatives of the variables vary between control states. This is in contrast with the conventional model where control transitions may happen at any real time, and already the reachability problem is undecidable. Based on the finite bisimilarity quotients, we give an exponential algorithm for the symbolic sampling-controller synthesis of rectangular automata. We show our algorithm to be optimal by proving the problem to be EXPTIME-hard. We also show that rectangular automata form a maximal class of systems for which the sampling-controller synthesis problem can be solved algorithmically.},
author = {Thomas Henzinger and Kopke, Peter W},
journal = {Theoretical Computer Science},
number = {1-2},
pages = {369 -- 392},
publisher = {Elsevier},
title = {{Discrete-time control for rectangular hybrid automata}},
doi = {10.1016/S0304-3975(99)00038-9},
volume = {221},
year = {1999},
}
@inproceedings{4480,
abstract = {We describe the formal specification and verification of the VGI parallel DSP chip [1], which contains 64 compute processors with ~30K gates in each processor. Our effort coincided in time with the “informal” verification stage of the chip. By interacting with the designers, we produced an abstract but executable specification of the design which embodies the programmer's view of the system. Given the size of the design, an automatic check that even one of the 64 processors satisfies its specification is well beyond the scope of current verification tools. However, the check can be decomposed using assume-guarantee reasoning. For VGI, the implementation and specification operate at different time scales: several steps of the implementation correspond to a single step in the specification. We generalized both the assume-guarantee method and our model checker MOCHA to allow compositional verification for such applications. We used our proof rule to decompose the verification problem of the VGI chip into smaller proof obligations that were discharged automatically by MOCHA. Using our formal approach, we uncovered and fixed subtle bugs that were unknown to the designers.},
author = {Thomas Henzinger and Liu, Xiaojun and Qadeer,Shaz and Rajamani, Sriram K},
pages = {494 -- 499},
publisher = {IEEE},
title = {{Formal specification and verification of a dataflow processor array}},
year = {1999},
}
@inproceedings{4484,
abstract = {In shared-memory multiprocessors sequential consistency offers a natural tradeoff between the flexibility afforded to the implementor and the complexity of the programmer’s view of the memory. Sequential consistency requires that some interleaving of the local temporal orders of read/write events at different processors be a trace of serial memory. We develop a systematic methodology for proving sequential consistency for memory systems with three parameters —number of processors, number of memory locations, and number of data values. From the definition of sequential consistency it suffices to construct a non-interfering observer that watches and reorders read/write events so that a trace of serial memory is obtained. While in general such an observer must be unbounded even for fixed values of the parameters —checking sequential consistency is undecidable!— we show that for two paradigmatic protocol classes—lazy caching and snoopy cache coherence—there exist finite-state observers. In these cases, sequential consistency for fixed parameter values can thus be checked by language inclusion between finite automata.
In order to reduce the arbitrary-parameter problem to the fixed-parameter problem, we develop a novel framework for induction over the number of processors. Classical induction schemas, which are based on process invariants that are inductive with respect to an implementation preorder that preserves the temporal sequence of events, are inadequate for our purposes, because proving sequential consistency requires the reordering of events. Hence we introduce merge invariants, which permit certain reorderings of read/write events. We show that under certain reasonable assumptions about the memory system, it is possible to conclude sequential consistency for any number of processors, memory locations, and data values by model checking two finite-state lemmas about process and merge invariants: they involve two processors each accessing a maximum of three locations, where each location stores at most two data values. For both lazy caching and snoopy cache coherence we are able to discharge the two lemmas using the model checker MOCHA.},
author = {Thomas Henzinger and Qadeer,Shaz and Rajamani, Sriram K},
pages = {301 -- 315},
publisher = {Springer},
title = {{Verifying sequential consistency on shared-memory multiprocessor systems}},
doi = {10.1007/3-540-48683-6_27},
volume = {1633},
year = {1999},
}
@inproceedings{4485,
abstract = {In order to study control problems for hybrid systems, we generalize hybrid automata to hybrid games —say, controller vs. plant. If we specify the continuous dynamics by constant lower and upper bounds, we obtain rectangular games. We show that for rectangular games with objectives expressed in Ltl (linear temporal logic), the winning states for each player can be computed, and winning strategies can be synthesized. Our result is sharp, as already reachability is undecidable for generalizations of rectangular systems, and optimal —singly exponential in the size of the game structure and doubly exponential in the size of the Ltl objective. Our proof systematically generalizes the theory of hybrid systems from automata (single-player structures) [9] to games (multi-player structures): we show that the successively more general infinite-state classes of timed, 2D rectangular, and rectangular games induce successively weaker, but still finite, quotient structures called game bisimilarity, game similarity, and game trace equivalence. These quotients can be used, in particular, to solve the Ltl control problem.},
author = {Thomas Henzinger and Horowitz, Benjamin and Majumdar, Ritankar S},
pages = {320 -- 335},
publisher = {Schloss Dagstuhl - Leibniz-Zentrum für Informatik},
title = {{Rectangular hybrid games}},
doi = {10.1007/3-540-48320-9_23},
volume = {1664},
year = {1999},
}