An Agda Formalization of Uresin & Dubois' Asynchronous Fixed-Point Theory

被引:1
作者
Zmigrod, Ran [1 ]
Daggitt, Matthew L. [1 ]
Griffin, Timothy G. [1 ]
机构
[1] Univ Cambridge, Comp Lab, Cambridge, England
来源
INTERACTIVE THEOREM PROVING, ITP 2018 | 2018年 / 10895卷
关键词
SEMANTICS;
D O I
10.1007/978-3-319-94821-8_37
中图分类号
TP301 [理论、方法];
学科分类号
081202 ;
摘要
In this paper we describe an Agda-based formalization of results from Uresin & Dubois' "Parallel Asynchronous Algorithms for Discrete Data." That paper investigates a large class of iterative algorithms that can be transformed into asynchronous processes. In their model each node asynchronously performs partial computations and communicates results to other nodes using unreliable channels. Uresin & Dubois provide sufficient conditions on iterative algorithms that guarantee convergence to unique fixed points for the associated asynchronous iterations. Proving such sufficient conditions for an iterative algorithm is often dramatically simpler than reasoning directly about an asynchronous implementation. These results are used extensively in the literature of distributed computation, making formal verification worthwhile. Our Agda library provides users with a collection of sufficient conditions, some of which mildly relax assumptions made in the original paper. Our primary application has been in reasoning about the correctness of network routing protocols. To do so we have derived a new sufficient condition based on the ultrametric theory of Alexander Gurney. This was needed to model the complex policy-rich routing protocol that maintains global connectivity in the internet. Additionally we highlight and discuss two propositions from Uresin & Dubois, which during the course of the formalisation, turned out to be false.
引用
收藏
页码:623 / 639
页数:17
相关论文
共 22 条