Search Results

In data-driven systems, we often encounter tuples on which the predictions of a machine-learned model are untrustworthy. A key cause of such untrustworthiness is non-conformance of a new tuple with respect to the training dataset. To check conformance, ...

Dedicated to the memory of Stephen L. Bloom (1940--2010).

Shared mutable objects pose grave challenges in reasoning, especially for information hiding and modularity. This article presents a novel technique for reasoning about error-avoiding partial ...

Dedicated to the memory of John C. Reynolds (1935--2013).

The hiding of internal invariants creates a mismatch between procedure specifications in an interface and proof obligations on the implementations of those procedures. The mismatch is sound if ...

Testing and instrumenting software are among the foremost techniques for ensuring software reliability. We present ongoing work on two Eclipse extensions that try to make the use of axioms and data invariants as convenient a part of the development ...