Computer Science Stack Exchange is a question and answer site for students, researchers and practitioners of computer science. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I apologies if my title is vague, I'm trying to apply CTL/LTL model-checking on some system written in java, however, I still don't understand how to reach a result using either of the approaches mentioned. Do I model my LTS/write specification and use a tool like SPIN to validate that or? I'm mainly looking for a point at a direction that will help me in making a start.

Again sorry but I made this thread after so much frustration searching for an explanation to my problem.

Thank you

share|cite|improve this question

migrated from Feb 25 '13 at 21:50

This question came from our site for theoretical computer scientists and researchers in related fields.

up vote 2 down vote accepted

I'm pretty sure that you need your system to be designed in Promela, rather than Java. You then input the system in Promela, and the specification in LTL (or CTL) to SPIN, which outputs a C code for a model checker for the specific instance.

share|cite|improve this answer
Thanks for your answer! so I have to specify what properties of my system I'm checking and then I can move to Promela stage? also what about using SpinJa as an alternative? – Meldar Feb 21 '13 at 13:44
Yes, that sounds about right (I'm a theoretician in formal verification, so I don't really know the practice of it). I only know of Spinja by name, I guess it's worth checking out, given that your program is in Java. – Shaull Feb 21 '13 at 14:05

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.