An Error Occurred Setting Your User Cookie
An Error Occurred Setting Your User Cookie
This site uses cookies to improve performance. If your browser does not accept cookies, you cannot view this site.
Setting Your Browser to Accept Cookies
There are many reasons why a cookie could not be set correctly. Below are the most common reasons:
You have cookies disabled in your browser. You need to reset your browser to accept cookies or to ask you if you want to accept cookies.
Your browser asks you whether you want to accept cookies and you declined.
To accept cookies from this site, use the Back button and accept the cookie.
Your browser does not support cookies. Try a different browser if you suspect this.
The date on your computer is in the past. If your computer's clock shows a date before 1 Jan 1970,
the browser will automatically forget the cookie. To fix this, set the correct time and date on your computer.
You have installed an application that monitors or blocks cookies from being set.
You must disable the application while logging in or check with your system administrator.
Why Does this Site Require Cookies?
This site uses cookies to improve performance by remembering that you are logged in when you go from page to page. To provide access without cookies
would require the site to create a new session for every page you visit, which slows the system down to an unacceptable level.
What Gets Stored in a Cookie?
This site stores nothing other than an automatically generated session ID no other information is captured.
In general, only the information that you provide, or the choices you make while visiting a web site, can be stored in a cookie. For example, the site
cannot determine your email name unless you choose to type it. Allowing a website to create a cookie does not give that or any other site access to the
rest of your computer, and only the site that created the cookie can read it.%!PS-Adobe-2.0
%%Creator: dvips(k) 5.86 Copyright 1999 Radical Eye Software
%%Title: talk.dvi
%%Pages: 29
%%PageOrder: Ascend
%%Orientation: Landscape
%%BoundingBox: 0 0 596 842
%%DocumentFonts: Times-Roman Times-Bold Symbol Benguiat-Book
%%+ Times-Italic Helvetica Helvetica-Oblique Courier
%%EndComments
%DVIPSWebPage: ()
%DVIPSCommandLine: dvips talk.dvi -o talk.ps
%DVIPSParameters: dpi=600, compressed
%DVIPSSource:
TeX output :1506
%%BeginProcSet: texc.pro
/TeXDict 300 dict def TeXDict begin/N{def}def/B{bind def}N/S{exch}N/X{S
N}B/A{dup}B/TR{translate}N/isls false N/vsize 11 72 mul N/hsize 8.5 72
mul N/landplus90{false}def/@rigin{isls{[0 landplus90{1 -1}{-1 1}ifelse 0
0 0]concat}if 72 Resolution div 72 VResolution div neg scale isls{
landplus90{VResolution 72 div vsize mul 0 exch}{Resolution -72 div hsize
mul 0}ifelse TR}if Resolution VResolution vsize -72 div 1 add mul TR[
matrix currentmatrix{A A round sub abs 0.00001 lt{round}if}forall round
exch round exch]setmatrix}N/@landscape{/isls true N}B/@manualfeed{
statusdict/manualfeed true put}B/@copies{/#copies X}B/FMat[1 0 0 -1 0 0]
N/FBB[0 0 0 0]N/nn 0 N/IEn 0 N/ctr 0 N/df-tail{/nn 8 dict N nn begin
/FontType 3 N/FontMatrix fntrx N/FontBBox FBB N string/base X array
/BitMaps X/BuildChar{CharBuilder}N/Encoding IEn N end A{/foo setfont}2
array copy cvx N load 0 nn put/ctr 0 N[}B/sf 0 N/df{/sf 1 N/fntrx FMat N
df-tail}B/dfs{div/sf X/fntrx[sf 0 0 sf neg 0 0]N df-tail}B/E{pop nn A
definefont setfont}B/Cw{Cd A length 5 sub get}B/Ch{Cd A length 4 sub get
}B/Cx{128 Cd A length 3 sub get sub}B/Cy{Cd A length 2 sub get 127 sub}
B/Cdx{Cd A length 1 sub get}B/Ci{Cd A type/stringtype ne{ctr get/ctr ctr
1 add N}if}B/id 0 N/rw 0 N/rc 0 N/gp 0 N/cp 0 N/G 0 N/CharBuilder{save 3
1 roll S A/base get 2 index get S/BitMaps get S get/Cd X pop/ctr 0 N Cdx
0 Cx Cy Ch sub Cx Cw add Cy setcachedevice Cw Ch true[1 0 0 -1 -.1 Cx
sub Cy .1 sub]/id Ci N/rw Cw 7 add 8 idiv string N/rc 0 N/gp 0 N/cp 0 N{
rc 0 ne{rc 1 sub/rc X rw}{G}ifelse}imagemask restore}B/G{{id gp get/gp
gp 1 add N A 18 mod S 18 idiv pl S get exec}loop}B/adv{cp add/cp X}B
/chg{rw cp id gp 4 index getinterval putinterval A gp add/gp X adv}B/nd{
/cp 0 N rw exit}B/lsh{rw cp 2 copy get A 0 eq{pop 1}{A 255 eq{pop 254}{
A A add 255 and S 1 and or}ifelse}ifelse put 1 adv}B/rsh{rw cp 2 copy
get A 0 eq{pop 128}{A 255 eq{pop 127}{A 2 idiv S 128 and or}ifelse}
ifelse put 1 adv}B/clr{rw cp 2 index string putinterval adv}B/set{rw cp
fillstr 0 4 index getinterval putinterval adv}B/fillstr 18 string 0 1 17
{2 copy 255 put pop}for N/pl[{adv 1 chg}{adv 1 chg nd}{1 add chg}{1 add
chg nd}{adv lsh}{adv lsh nd}{adv rsh}{adv rsh nd}{1 add adv}{/rc X nd}{
1 add set}{1 add clr}{adv 2 chg}{adv 2 chg nd}{pop nd}]A{bind pop}
forall N/D{/cc X A type/stringtype ne{]}if nn/base get cc ctr put nn
/BitMaps get S ctr S sf 1 ne{A A length 1 sub A 2 index S get sf div put
}if put/ctr ctr 1 add N}B/I{cc 1 add D}B/bop{userdict/bop-hook known{
bop-hook}if/SI save N @rigin 0 0 moveto/V matrix currentmatrix A 1 get A
mul exch 0 get A mul add .99 lt{/QV}{/RV}ifelse load def pop pop}N/eop{
SI restore userdict/eop-hook known{eop-hook}if showpage}N/@start{
userdict/start-hook known{start-hook}if pop/VResolution X/Resolution X
1000 div/DVImag X/IEn 256 array N 2 string 0 1 255{IEn S A 360 add 36 4
index cvrs cvn put}for pop 65781.76 div/vsize X 65781.76 div/hsize X}N
/p{show}N/RMat[1 0 0 -1 0 0]N/BDot 260 string N/Rx 0 N/Ry 0 N/V{}B/RV/v{
/Ry X/Rx X V}B statusdict begin/product where{pop false[(Display)(NeXT)
(LaserWriter 16/600)]{A length product length le{A length product exch 0
exch getinterval eq{pop true exit}if}{pop}ifelse}forall}{false}ifelse
end{{gsave TR -.1 .1 TR 1 1 scale Rx Ry false RMat{BDot}imagemask
grestore}}{{gsave TR -.1 .1 TR Rx Ry scale 1 1 false RMat{BDot}
imagemask grestore}}ifelse B/QV{gsave newpath transform round exch round
exch itransform moveto Rx 0 rlineto 0 Ry neg rlineto Rx neg 0 rlineto
fill grestore}B/a{moveto}B/delta 0 N/tail{A/delta X 0 rmoveto}B/M{S p
delta add tail}B/b{S p tail}B/c{-4 M}B/d{-3 M}B/e{-2 M}B/f{-1 M}B/g{0 M}
B/h{1 M}B/i{2 M}B/j{3 M}B/k{4 M}B/w{0 rmoveto}B/l{p -4 w}B/m{p -3 w}B/n{
p -2 w}B/o{p -1 w}B/q{p 1 w}B/r{p 2 w}B/s{p 3 w}B/t{p 4 w}B/x{0 S
rmoveto}B/y{3 2 roll p a}B/bos{/SS save N}B/eos{SS restore}B end
%%EndProcSet
%%BeginProcSet: 8r.enc
% @@psencodingfile@{
author = "S. Rahtz, P. MacKay, Alan Jeffrey, B. Horn, K. Berry",
version = "0.6",
date = "22 June 1996",
filename = "8r.enc",
email = "kb@@mail.tug.org",
address = "135 Center Hill Rd. // Plymouth, MA 02360",
codetable = "ISO/ASCII",
checksum = "119
docstring = "Encoding for TrueType or Type 1 fonts to be used with TeX."
% Idea is to have all the characters normally included in Type 1 fonts
% available for typesetting. This is effectively the characters in Adobe
% Standard Encoding + ISO Latin 1 + extra characters from Lucida.
% Character code assignments were made as follows:
% (1) the Windows ANSI characters are almost all in their Windows ANSI
% positions, because some Windows users cannot easily reencode the
% fonts, and it makes no difference on other systems. The only Windows
% ANSI characters not available are those that make no sense for
% typesetting -- rubout (127 decimal), nobreakspace (160), softhyphen
% (173). quotesingle and grave are moved just because it's such an
% irritation not having them in TeX positions.
% (2) Remaining characters are assigned arbitrarily to the lower part
% of the range, avoiding 0, 10 and 13 in case we meet dumb software.
% (3) Y&Y Lucida Bright includes some e in the
% hopes that other PostScript fonts, perhaps created for public
% consumption, will include them, they are included starting at 0x12.
% (4) Remaining positions left undefined are for use in (hopefully)
% upward-compatible revisions, if someday more characters are generally
% available.
% (5) hyphen appears twice for compatibility with both ASCII and Windows.
/TeXBase1Encoding [
% 0x00 (encoded characters from Adobe Standard not in Windows 3.1)
/.notdef /dotaccent /fi /fl
/fraction /hungarumlaut /Lslash /lslash
/ogonek /ring /.notdef
/breve /minus /.notdef
% These are the only two remaining unencoded characters, so may as
% well include them.
/Zcaron /zcaron
/caron /dotlessi
% (unusual TeX characters available in, e.g., Lucida Bright)
/dotlessj /ff /ffi /ffl
/.notdef /.notdef /.notdef /.notdef
/.notdef /.notdef /.notdef /.notdef
% it's so painful not having quoteleft and quoteright
% at 96 and 145 that we move the things normally found there down to here.
/grave /quotesingle
% 0x20 (ASCII begins)
/space /exclam /quotedbl /numbersign
/dollar /percent /ampersand /quoteright
/parenleft /parenright /asterisk /plus /comma /hyphen /period /slash
/zero /one /two /three /four /five /six /seven
/eight /nine /colon /semicolon /less /equal /greater /question
/at /A /B /C /D /E /F /G /H /I /J /K /L /M /N /O
/P /Q /R /S /T /U /V /W
/X /Y /Z /bracketleft /backslash /bracketright /asciicircum /underscore
/quoteleft /a /b /c /d /e /f /g /h /i /j /k /l /m /n /o
/p /q /r /s /t /u /v /w
/x /y /z /braceleft /bar /braceright /asciitilde
/.notdef % ASCII ends
/.notdef /.notdef /quotesinglbase /florin
/quotedblbase /ellipsis /dagger /daggerdbl
/circumflex /perthousand /Scaron /guilsinglleft
/OE /.notdef /.notdef /.notdef
/.notdef /.notdef /.notdef /quotedblleft
/quotedblright /bullet /endash /emdash
/tilde /trademark /scaron /guilsinglright
/oe /.notdef /.notdef /Ydieresis
/.notdef % nobreakspace
/exclamdown /cent /sterling
/currency /yen /brokenbar /section
/dieresis /copyright /ordfeminine /guillemotleft
/logicalnot
/hyphen % Y&Y (also at 45); Windows' softhyphen
/registered
/degree /plusminus /twosuperior /threesuperior
/acute /mu /paragraph /periodcentered
/cedilla /onesuperior /ordmasculine /guillemotright
/onequarter /onehalf /threequarters /questiondown
/Agrave /Aacute /Acircumflex /Atilde /Adieresis /Aring /AE /Ccedilla
/Egrave /Eacute /Ecircumflex /Edieresis
/Igrave /Iacute /Icircumflex /Idieresis
/Eth /Ntilde /Ograve /Oacute
/Ocircumflex /Otilde /Odieresis /multiply
/Oslash /Ugrave /Uacute /Ucircumflex
/Udieresis /Yacute /Thorn /germandbls
/agrave /aacute /acircumflex /atilde
/adieresis /aring /ae /ccedilla
/egrave /eacute /ecircumflex /edieresis
/igrave /iacute /icircumflex /idieresis
/eth /ntilde /ograve /oacute
/ocircumflex /otilde /odieresis /divide
/oslash /ugrave /uacute /ucircumflex
/udieresis /yacute /thorn /ydieresis
%%EndProcSet
%%BeginProcSet: texps.pro
TeXDict begin/rf{findfont dup length 1 add dict begin{1 index/FID ne 2
index/UniqueID ne and{def}{pop pop}ifelse}forall[1 index 0 6 -1 roll
exec 0 exch 5 -1 roll VResolution Resolution div mul neg 0 0]/Metrics
exch def dict begin Encoding{exch dup type/integertype ne{pop pop 1 sub
dup 0 le{pop}{[}ifelse}{FontMatrix 0 get div Metrics 0 get div def}
ifelse}forall Metrics/Metrics currentdict end def[2 index currentdict
end definefont 3 -1 roll makefont/setfont cvx]cvx def}def/ObliqueSlant{
dup sin S cos div neg}B/SlantFont{4 index mul add}def/ExtendFont{3 -1
roll mul exch}def/ReEncodeFont{CharStrings rcheck{/Encoding false def
dup[exch{dup CharStrings exch known not{pop/.notdef/Encoding true def}
if}forall Encoding{]exch pop}{cleartomark}ifelse}if/Encoding exch def}
%%EndProcSet
%%BeginProcSet: special.pro
TeXDict begin/SDict 200 dict N SDict begin/@SpecialDefaults{/hs 612 N
/vs 792 N/ho 0 N/vo 0 N/hsc 1 N/vsc 1 N/ang 0 N/CLIP 0 N/rwiSeen false N
/rhiSeen false N/letter{}N/note{}N/a4{}N/legal{}N}B/@scaleunit 100 N
/@hscale{@scaleunit div/hsc X}B/@vscale{@scaleunit div/vsc X}B/@hsize{
/hs X/CLIP 1 N}B/@vsize{/vs X/CLIP 1 N}B/@clip{/CLIP 2 N}B/@hoffset{/ho
X}B/@voffset{/vo X}B/@angle{/ang X}B/@rwi{10 div/rwi X/rwiSeen true N}B
/@rhi{10 div/rhi X/rhiSeen true N}B/@llx{/llx X}B/@lly{/lly X}B/@urx{
/urx X}B/@ury{/ury X}B/magscale true def end/@MacSetUp{userdict/md known
{userdict/md get type/dicttype eq{userdict begin md length 10 add md
maxlength ge{/md md dup length 20 add dict copy def}if end md begin
/letter{}N/note{}N/legal{}N/od{txpose 1 0 mtx defaultmatrix dtransform S
atan/pa X newpath clippath mark{transform{itransform moveto}}{transform{
itransform lineto}}{6 -2 roll transform 6 -2 roll transform 6 -2 roll
transform{itransform 6 2 roll itransform 6 2 roll itransform 6 2 roll
curveto}}{{closepath}}pathforall newpath counttomark array astore/gc xdf
pop ct 39 0 put 10 fz 0 fs 2 F/|______Courier fnt invertflag{PaintBlack}
if}N/txpose{pxs pys scale ppr aload pop por{noflips{pop S neg S TR pop 1
-1 scale}if xflip yflip and{pop S neg S TR 180 rotate 1 -1 scale ppr 3
get ppr 1 get neg sub neg ppr 2 get ppr 0 get neg sub neg TR}if xflip
yflip not and{pop S neg S TR pop 180 rotate ppr 3 get ppr 1 get neg sub
neg 0 TR}if yflip xflip not and{ppr 1 get neg ppr 0 get neg TR}if}{
noflips{TR pop pop 270 rotate 1 -1 scale}if xflip yflip and{TR pop pop
90 rotate 1 -1 scale ppr 3 get ppr 1 get neg sub neg ppr 2 get ppr 0 get
neg sub neg TR}if xflip yflip not and{TR pop pop 90 rotate ppr 3 get ppr
1 get neg sub neg 0 TR}if yflip xflip not and{TR pop pop 270 rotate ppr
2 get ppr 0 get neg sub neg 0 S TR}if}ifelse scaleby96{ppr aload pop 4
-1 roll add 2 div 3 1 roll add 2 div 2 copy TR .96 dup scale neg S neg S
TR}if}N/cp{pop pop showpage pm restore}N end}if}if}N/normalscale{
Resolution 72 div VResolution 72 div neg scale magscale{DVImag dup scale
}if 0 setgray}N/psfts{S 65781.76 div N}N/startTexFig{/psf$SavedState
save N userdict maxlength dict begin/magscale true def normalscale
currentpoint TR/psf$ury psfts/psf$urx psfts/psf$lly psfts/psf$llx psfts
/psf$y psfts/psf$x psfts currentpoint/psf$cy X/psf$cx X/psf$sx psf$x
psf$urx psf$llx sub div N/psf$sy psf$y psf$ury psf$lly sub div N psf$sx
psf$sy scale psf$cx psf$sx div psf$llx sub psf$cy psf$sy div psf$ury sub
TR/showpage{}N/erasepage{}N/copypage{}N/p 3 def @MacSetUp}N/doclip{
psf$llx psf$lly psf$urx psf$ury currentpoint 6 2 roll newpath 4 copy 4 2
roll moveto 6 -1 roll S lineto S lineto S lineto closepath clip newpath
moveto}N/endTexFig{end psf$SavedState restore}N/@beginspecial{SDict
begin/SpecialSave save N gsave normalscale currentpoint TR
@SpecialDefaults count/ocount X/dcount countdictstack N}N/@setspecial{
CLIP 1 eq{newpath 0 0 moveto hs 0 rlineto 0 vs rlineto hs neg 0 rlineto
closepath clip}if ho vo TR hsc vsc scale ang rotate rwiSeen{rwi urx llx
sub div rhiSeen{rhi ury lly sub div}{dup}ifelse scale llx neg lly neg TR
}{rhiSeen{rhi ury lly sub div dup scale llx neg lly neg TR}if}ifelse
CLIP 2 eq{newpath llx lly moveto urx lly lineto urx ury lineto llx ury
lineto closepath clip}if/showpage{}N/erasepage{}N/copypage{}N newpath}N
/@endspecial{count ocount sub{pop}repeat countdictstack dcount sub{end}
repeat grestore SpecialSave restore end}N/@defspecial{SDict begin}N
/@fedspecial{end}B/li{lineto}B/rl{rlineto}B/rc{rcurveto}B/np{/SaveX
currentpoint/SaveY X N 1 setlinecap newpath}N/st{stroke SaveX SaveY
moveto}N/fil{fill SaveX SaveY moveto}N/ellipse{/endangle X/startangle X
/yrad X/xrad X/savematrix matrix currentmatrix N TR xrad yrad scale 0 0
1 startangle endangle arc savematrix setmatrix}N end
%%EndProcSet
%%BeginProcSet: color.pro
TeXDict begin/setcmykcolor where{pop}{/setcmykcolor{dup 10 eq{pop
setrgbcolor}{1 sub 4 1 roll 3{3 index add neg dup 0 lt{pop 0}if 3 1 roll
}repeat setrgbcolor pop}ifelse}B}ifelse/TeXcolorcmyk{setcmykcolor}def
/TeXcolorrgb{setrgbcolor}def/TeXcolorgrey{setgray}def/TeXcolorgray{
setgray}def/TeXcolorhsb{sethsbcolor}def/currentcmykcolor where{pop}{
/currentcmykcolor{currentrgbcolor 10}B}ifelse/DC{exch dup userdict exch
known{pop pop}{X}ifelse}B/GreenYellow{0.15 0 0.69 0 setcmykcolor}DC
/Yellow{0 0 1 0 setcmykcolor}DC/Goldenrod{0 0.10 0.84 0 setcmykcolor}DC
/Dandelion{0 0.29 0.84 0 setcmykcolor}DC/Apricot{0 0.32 0.52 0
setcmykcolor}DC/Peach{0 0.50 0.70 0 setcmykcolor}DC/Melon{0 0.46 0.50 0
setcmykcolor}DC/YellowOrange{0 0.42 1 0 setcmykcolor}DC/Orange{0 0.61
0.87 0 setcmykcolor}DC/BurntOrange{0 0.51 1 0 setcmykcolor}DC
/Bittersweet{0 0.75 1 0.24 setcmykcolor}DC/RedOrange{0 0.77 0.87 0
setcmykcolor}DC/Mahogany{0 0.85 0.87 0.35 setcmykcolor}DC/Maroon{0 0.87
0.68 0.32 setcmykcolor}DC/BrickRed{0 0.89 0.94 0.28 setcmykcolor}DC/Red{
0 1 1 0 setcmykcolor}DC/OrangeRed{0 1 0.50 0 setcmykcolor}DC/RubineRed{
0 1 0.13 0 setcmykcolor}DC/WildStrawberry{0 0.96 0.39 0 setcmykcolor}DC
/Salmon{0 0.53 0.38 0 setcmykcolor}DC/CarnationPink{0 0.63 0 0
setcmykcolor}DC/Magenta{0 1 0 0 setcmykcolor}DC/VioletRed{0 0.81 0 0
setcmykcolor}DC/Rhodamine{0 0.82 0 0 setcmykcolor}DC/Mulberry{0.34 0.90
0 0.02 setcmykcolor}DC/RedViolet{0.07 0.90 0 0.34 setcmykcolor}DC
/Fuchsia{0.47 0.91 0 0.08 setcmykcolor}DC/Lavender{0 0.48 0 0
setcmykcolor}DC/Thistle{0.12 0.59 0 0 setcmykcolor}DC/Orchid{0.32 0.64 0
0 setcmykcolor}DC/DarkOrchid{0.40 0.80 0.20 0 setcmykcolor}DC/Purple{
0.45 0.86 0 0 setcmykcolor}DC/Plum{0.50 1 0 0 setcmykcolor}DC/Violet{
0.79 0.88 0 0 setcmykcolor}DC/RoyalPurple{0.75 0.90 0 0 setcmykcolor}DC
/BlueViolet{0.86 0.91 0 0.04 setcmykcolor}DC/Periwinkle{0.57 0.55 0 0
setcmykcolor}DC/CadetBlue{0.62 0.57 0.23 0 setcmykcolor}DC
/CornflowerBlue{0.65 0.13 0 0 setcmykcolor}DC/MidnightBlue{0.98 0.13 0
0.43 setcmykcolor}DC/NavyBlue{0.94 0.54 0 0 setcmykcolor}DC/RoyalBlue{1
0.50 0 0 setcmykcolor}DC/Blue{1 1 0 0 setcmykcolor}DC/Cerulean{0.94 0.11
0 0 setcmykcolor}DC/Cyan{1 0 0 0 setcmykcolor}DC/ProcessBlue{0.96 0 0 0
setcmykcolor}DC/SkyBlue{0.62 0 0.12 0 setcmykcolor}DC/Turquoise{0.85 0
0.20 0 setcmykcolor}DC/TealBlue{0.86 0 0.34 0.02 setcmykcolor}DC
/Aquamarine{0.82 0 0.30 0 setcmykcolor}DC/BlueGreen{0.85 0 0.33 0
setcmykcolor}DC/Emerald{1 0 0.50 0 setcmykcolor}DC/JungleGreen{0.99 0
0.52 0 setcmykcolor}DC/SeaGreen{0.69 0 0.50 0 setcmykcolor}DC/Green{1 0
1 0 setcmykcolor}DC/ForestGreen{0.91 0 0.88 0.12 setcmykcolor}DC
/PineGreen{0.92 0 0.59 0.25 setcmykcolor}DC/LimeGreen{0.50 0 1 0
setcmykcolor}DC/YellowGreen{0.44 0 0.74 0 setcmykcolor}DC/SpringGreen{
0.26 0 0.76 0 setcmykcolor}DC/OliveGreen{0.64 0 0.95 0.40 setcmykcolor}
DC/RawSienna{0 0.72 1 0.45 setcmykcolor}DC/Sepia{0 0.83 1 0.70
setcmykcolor}DC/Brown{0 0.81 1 0.60 setcmykcolor}DC/Tan{0.14 0.42 0.56 0
setcmykcolor}DC/Gray{0 0 0 0.50 setcmykcolor}DC/Black{0 0 0 1
setcmykcolor}DC/White{0 0 0 0 setcmykcolor}DC end
%%EndProcSet
TeXDict begin
600 600 (talk.dvi)
@start /Fa 136[103 103 103 103 103 103 1[103 103 103
1[103 3[103 2[103 103 1[103 103 1[103 95[{TeXBase1Encoding ReEncodeFont}
16 172.188 /Courier rf /Fb 134[83 83 83 83 83 83 83 83
1[83 83 83 83 83 83 1[83 83 83 83 83 83 83 83 83 1[83
1[83 1[83 5[83 83 83 2[83 83 83 83 83 83 1[83 2[83 1[83
83 1[83 2[83 83 83 1[83 83 1[83 83 83 83 83 83 83 83
2[83 83 1[83 83 83 40[{TeXBase1Encoding ReEncodeFont}58
137.75 /Courier rf /Fc 134[124 2[124 124 69 96 83 2[124
5[69 2[83 110 1[110 124 110 10[179 2[138 3[179 11[165
67[{TeXBase1Encoding ReEncodeFont}17 247.95 /Times-Roman
%DVIPSBitmapFont: Fd cmex10 20.74 7
/Fd 7 101 df56 D58
D[<C14C0B3B3B3B3AE4CA25EA360A25EA260A25E60A393B55A
AD605D95C7FCA24B5B5F5D5F5D5F4B5BA292B55A4A5CA24A91C8FC5E4A5B4A
5BA24A5B4A5B4A5B5E91B5C9FC495B495B495B495B495B495B495B4948CAFC485B485B00
0F5BBB448CBFC5B13F05BA27F13FC7F383FFF806C7F6C13FC7F6C7F
6D6C7E6D7F6D7F6D7F6D7F6D7F6D7F6D7F6E7F826E7F6E7F6E7FA26E7F6E7F826E80A26E
806F7FA26F7FF7FAAFA2A284A382
AC0B3B3B3B3AE 314 99 129 153 60 D62 D98 D[173
34 129 260 172 I[<213C9D3803FFC00E3F13FC0D07B612E00D7F15FE0C07B812E00C7F
17FE0B07BA12E09ABCFC0A0F1BF099BEFC090F4CC66C16F098B800C1F04F8
CFB8CAEEFF0FCCC003FEDFFF805
03B700E00907EDFFC0053F03FCD03BEDFFCD2000F15
FCCECFFCFB600F0D6000FECFFEC66C14
FEA10103ECFFED7C07B6D7CAECFFE0B600E0A10507
14FF02FCD7CC123F91D7CEFC01E0A11B0700FCD7D
128 260 249 I E
%EndDVIPSBitmapFont
%DVIPSBitmapFont: Fe cmmi7 14.518 5
/Fe 5 111 df<F03FFE7F14FEFD9CFFCC713F8
922601FFE0EC1FFC4B0180EC07FFDB0FFEC86C7FDB3FF86F7FDB7FE06F6C7E4A4848834A
90CA6C7E4A17E4A2CBFC497313
CF4A1AEC5A485BA25A5C5A91CCFC5A635B123FAC0
A400FFD00AAAB05B626D97C7FC003F
4F5A505A6D4E5A001F4F5A4F5B6C6C4D5B6C4E5B6E4C90C8FC6C6D4C5A6C6D4C5A6EEEFF
F06C6D4B5B6D6CC031F90C9FC90260FFF80EC7FFC6D01E0903803FFF06D01
FE013F13CCAFC023F15FC004ACBFC030F13C05B
D<DD7FFC13F0043FECE3E00303EDFCC01FFE0F
923B1FFC0001FF1FDB7FFFBFC0DBFFC0EC1FFF4A90C1DA07F86F13
804A5A854A5A4A48EE7F00A24A5AA24ACA127E1A3EA25B1A3CA21A7CA26FFC81
FF16E06E13FF6E14F017FF6E15F06E15FC6E15FFE
81DB003F3F7F05037FEF007F181FA284A2EA01C
96C7FC5BA24E5A120F7F4E5AD4C5A4E5A7F486C4C5A6DEEFF806D4B90C8FC
6D6CEC07FEFF8D99FFCEC7FF0903B0FFFC003FFE0D87E6C4BC9
FC486C6C14FEFFECAFC4C D<153C15FE4A7E4A1380
A25CA6E5A6E5A92C7FCB1EB07F8EB1FFEEB7FFF90B512C03F01F
E0D807C07FEA0FE133F123E123C127CF85C85A00
005C5B92C7FCA25B5C130FA25C131F5CAF14E0ECE001A213FFECC
ECFE153E5D6C495AECFFED90C7FCEB03
FC25 DI110 D E
%EndDVIPSBitmapFont
/Ff 139[38 69 46 8[31 1[77 1[77 101[{TeXBase1Encoding ReEncodeFont}6
137.75 /Helvetica-Oblique rf
%DVIPSBitmapFont: Fg cmti10 20.74 6
/Fg 6 117 df65
D70 D97 D99
D114 D116 D E
%EndDVIPSBitmapFont
/Fh 136[99 2[38 69 46 8[31 77 77 1[77 101[{
TeXBase1Encoding ReEncodeFont}8 137.75 /Helvetica rf
%DVIPSBitmapFont: Fi cmtt10 20.74 6
/Fi 6 118 df68
%EndDVIPSBitmapFont
%DVIPSBitmapFont: Fj cmss10 20.74 1
/Fj 1 73 df72
%EndDVIPSBitmapFont
%DVIPSBitmapFont: Fk cmbx10 20.74 4
/Fk 4 117 df89 D102 D<912603FFFEEB03CFFE0
0FE00103B6EAFC3F010F92B5FC133F49EBFFF0EB007F90C81207
F5B183F127FAFA27F7F6D6CED0FC06E92C7FC14
F814FF6C14FCEDFFE0EEFF806C16F017FC6C16FF18C06C17F06C836C836C836C836D1780
011F17CE020F16FFCED000FFE83007E
7F6D163FA36D161FA219FC7FA27F6DEE3FF8A26D17F06D167F6D17E06E15
FF02EE4A1F1300913AFFC003FFFE92B65A01E316F001C016C0D9
003F92C7FC78DFC3F5 DI
%EndDVIPSBitmapFont
%DVIPSBitmapFont: Fl cmmi10 20.74 15
/Fl 15 121 df18 D30 D58 DI[<
F103CA93FA2F17F80A21AAE5AA2
6FAE5AA296C7FC60AAA0
171FAD5AA295C8FC5FA25F3A24C5AA25F160FA25F161FA25F16
3FA24C5AA294C9FC5EA25E3A24B5AA25E150FA25E151FA25E153FA24B5AA2
93CAFC5DA25D3A24A5AA25D140FA25D141FA25D143FA24A5AA292CBFC5CA2
5C3AFA25C131FA25C133FACCFC5BA25B1201A25B
AA25B120FA25B121FA25B123FACDFC5AA25AA
172 119 256 86 61 D89 D103 DIII110 D115
DI118 D120 D E
%EndDVIPSBitmapFont
%DVIPSBitmapFont: Fm cmr10 20.74 15
/Fm 15 115 df[40
171 111 256 67 40 D[40
171 119 256 67 I43 D48
D61 D[<BFCB3B3B3B3B3B3B3B3AEB
172 109 256 48 91 D[25
172 125 256 48 93 DI100 DI114 D E
%EndDVIPSBitmapFont
%DVIPSBitmapFont: Fn cmr7 14.518 7
/Fn 7 103 df48 DIII<4DB4FC0407B5FCA5EE001FA5
913801FFE7F13FF49B612CFF3903A0FFE0003FBD93FF80100
B5FCD97FEFC87E485AAAFA35B12FFAA
127FA27FAEA26C7E5F6C6C5DE6C6D147F6D6C91B57ED93FF0D903
FB13E0D91FFCD90FF3EBFF80903A0FFF807FC830100ECFE03
FC40 DII E
%EndDVIPSBitmapFont
%DVIPSBitmapFont: Fo line10 20.74 3
/Fo 3 64 df27 D45
%EndDVIPSBitmapFont
%DVIPSBitmapFont: Fp linew10 20.74 6
/Fp 6 65 df[186 186 135 306 172 0 D27 D45 D49 D63 D[186 186 135 306
%EndDVIPSBitmapFont
/Fq 105[86 31[86 96 57 67 76 1[96 86 96 143 48 96 1[48
96 86 57 76 96 76 96 86 10[124 1[115 96 2[105 6[67 2[105
115 10[57 6[86 86 86 1[48 1[57 42[96 2[{TeXBase1Encoding ReEncodeFont}
35 172.188 /Times-Bold rf /Fr 134[103 1[149 103 115 69
80 92 1[115 103 115 172 57 115 1[57 115 103 69 92 115
92 115 103 10[149 1[138 115 149 1[126 161 1[195 6[126
138 1[149 1[149 11[103 1[103 103 103 2[52 69 42[115 2[{
TeXBase1Encoding ReEncodeFont}40 206.625 /Times-Bold
rf /Fs 134[76 1[115 1[86 48 67 67 1[86 86 86 124 48 76
48 48 86 86 48 76 86 76 86 86 13[86 5[143 3[57 5[115
67[{TeXBase1Encoding ReEncodeFont}26 172.188 /Times-Italic
%DVIPSBitmapFont: Ft cmsy10 20.74 13
/Ft 13 108 df15
D29 D33 D41
D50 D67 D77 D83 D94 D[39 171 110 256
67 104 D[<127CA212FEA27EA26C7EAC7EAEA21201
7FA26C7EA27F80A26D7EA0F80A26D7EAD7EAE7EA2
143F81A26E7EAEAE7EAED3FC0A2151F16
E0AA2ED07F8A2150316FCA2ED01FEAED03FCA216FF
F0A216E53FA2ED7F80AA5AA25DAA25D140FA25D14
1FA24A5AA25D147FA24AC7FCA25CAA25CAA25C131FA25C133FA249
5AA291C8FC5BA3AFA25B121FAFA248C9FCA2
5AA 171 119 256 67 I[<127CA212FEB3B3B3B3B3B3B3B3B3A
172 108 256 48 I[<C5D00FEED3F80B3B3B3B3B3B3B3B3B3A5007CED1F00
171 106 256 86 I E
%EndDVIPSBitmapFont
/Fu 198[60 60 60 60 60 60 60 60 60 60 48[{TeXBase1Encoding ReEncodeFont}
10 120.531 /Times-Roman rf /Fv 75[57 28[172 86 27[76
86 86 124 86 86 48 67 57 86 86 86 86 134 48 86 48 48
86 86 57 76 86 76 86 76 57 2[57 1[57 1[124 1[163 124
124 105 96 115 1[96 124 124 153 105 124 1[57 124 124
96 105 124 115 115 124 1[76 3[48 48 86 86 86 86 86 86
86 86 86 86 1[43 57 43 97 1[57 57 57 5[57 29[96 96 2[{
TeXBase1Encoding ReEncodeFont}77 172.188 /Times-Roman
rf /Fw 134[69 1[99 69 69 38 54 46 2[69 69 1[38 2[38 69
69 46 61 69 61 69 61 9[130 1[99 84 77 92 3[99 1[84 1[54
3[77 2[92 1[99 19[46 34 1[69 42[{TeXBase1Encoding ReEncodeFont}33
137.75 /Times-Roman rf
%DVIPSBitmapFont: Fx cmsy8 16.592 2
/Fx 2 122 df3 D121
%EndDVIPSBitmapFont
%DVIPSBitmapFont: Fy cmsy10 24.888 1
/Fy 1 122 df[) y(>) y() y(>) y(:) y Fl(Y)1560
3102 y Fe(i) y Fm(\()p Fk(s)p Fm(\))172 b Fl(i)68
b(=)-106 b Ft(2)48 b Fg(F)-18 b(A) y Fl(Y)1560
3394 y Fe(i) y Fm(\()p Fk(s)p Fm(\))172 b Fl(i)48
b Ft(2)g Fg(F)-18 b(A)q Fl(;)57 b(\022)5 b Fm(\()p Fk(s)p
Fm(\))47 b(=)h Fk(f) y Fl(v) y Fe(j)2001
3661 y Fl(i)g Ft(2)g Fg(F)-18 b(A)q Fl(;)57 b(\022)5
b Fm(\()p Fk(s)p Fm(\))47 b(=)h Fk(t) y Fu(15)p
%%Page: 16 16
16 15 bop 150 1082 a Fv(And,)44 b(so)788 1027 y Fd(d)729
1082 y Fk(Y)5 b Fm(\()p Fk(s)p Fm(\)) y Fn(def)1171
1082 y Fm(=)76 b Ft(h) y Fm(^) y Fl(Y)1548
1108 y Fn(1) y Fm(\()p Fk(s)p Fm(\))p Fl(;)29
b(:)g(:)g(:)e(;) y Fm(^) y Fk(Y)2370
1108 y Fe(n) y Fm(\()p Fk(s)p Fm(\)\))p Ft(i)p
Fv(.)150 1429 y(`F)m(aulty')44 b(FSM)f(to)g(be)
y Fd(c) y Ft(M) y Fn(def)
y Fm(=)75 b(\()p Ft(S)13 b Fl(;) y Fd(b)2268
1429 y Fk(Y)5 b Fm(\))p Fv(.)150 1750 y Fq(Semantics)44
b(of)g(an)e(f-assertion)150 2072 y Fv(Gi)l(v)m(en)i(a)f(model)h
Ft(M)f Fv(the)g(formal)h(semantics)h(of)e(an)h(f-assertion)150
2315 y Fl(g)83 b Fm(=)-29 b Ft(\))77 b Fl(h)g Fh(where)37
b Fl(\036)47 b Fh(tr)r(iggers)37 b Fl(\022)5 b Fv(,)43
b(the)g(formal)h(semantics)g(is)f(gi)l(v)m(en)h(by)728
2896 y Ft(M)j(j)-29 b Fm(=)48 b Fl(g)83 b Fm(=)-29 b
Ft(\))77 b Fl(h)g Fh(where)37 b Fl(\036)47 b Fh(tr)r(iggers)37
b Fl(\022) y Fn(def) y Fm(=)
y Fd(c) y Ft(M)48 b(j)-29 b Fm(=)47 b Ft(h)-9
b Fl(g)6 b Fm(=)-29 b(=)-77 b Ft(\035)q Fl(h)-10 b Ft(i)q
Fl(:) y Fu(16)p eop
%%Page: 17 17
17 16 bop 1 0 0 TeXcolorrgb 150 231 a Fz(4)p Black 1 0 0
TeXcolorrgb 248 w(An)62 b(integrated)f(v)n(eri\002cation)g(methodology)
p Black 150 715 a Fv(Ho)l(w)43 b(to)g(check)i(an)f(assertion)g(lik)n(e)
f Fl(g)83 b Fm(=)-29 b Ft(\))77 b Fl(h)g Fh(where)37
b Fl(\036)48 b Fh(tr)r(iggers)36 b Fl(\022)5 b Fv(?)150
1021 y(Can)43 b(be)h(check)n(ed)h(using)f(STE,)f(and)h(basic)f
(algorithm)h(has)g(been)g(implemented)g(in)150 1260 y(the)f(V)-22
b(ossPro)m(v)m(er)46 b(system)d(using)g(de\002nition)g(pre)l(viously)h
(gi)l(v)m(en)p Black Black 0 0 0.54 TeXcolorrgb 628 1569
1057 14 v 628 5 v 812 2509 a Fc(Circuit)p
v Black 0.54 0 0.54 TeXcolorrgb
a Fp(-)p Black 0.54 0 0.54
TeXcolorrgb 14 setlinewidth np
a(1)p Black 0.54 0 0.54 TeXcolorrgb 2296
a Fc(Observ)l(er)p
V 57 14 v Black 1 0 0 0 TeXcolorcmyk
a Fp(?)p Black 1 0 0 0 TeXcolorcmyk
a Fc(Saboteur)p
V 57 14 v Black 29
a Fp(\033)p 478
v 478 3352
a Fc(V)-28
b(erify)p Black
a Fv(Figure)43 b(1:)54 b(FSM)42
b(of)i(circuit,)g(observ)m(er)h(and)f(saboteur)p Black
a Fu(17)p eop
%%Page: 18 18
18 17 bop Black 288 887 a Ft(\017)p Black 86 w Fv(Construct)44
b(an)f(observ)m(er)j(machine)e Ft(M) y Fe(O)3005
887 y Fv(that)f(monitors)g Ft(M)p Fv(.)460 1169 y(When)g
Fl(\036)g Fv(is)g(true)g(of)h Ft(M)p Fv(,)f Ft(M)2215
1195 y Fe(O) y Fv(sets)g(a)h(\003ag.)p Black
288 1514 a Ft(\017)p Black 86 w Fv(Construct)g(a)f(saboteur)i
Ft(M) y Fe(S) y Fv(to)e(inject)h(f)n(ault)g(in)f
Ft(M)p Fv(.)460 1796 y(When)g(the)h(observ)m(er)h(sets)e(trigger)h
(\003ag,)g(saboteur)g(tak)n(es)g(o)m(v)m(er)h(machine)g(and)460
2040 y(injects)f(f)n(ault)f Fl(\022)5 b Fv(.)p Black
288 2405 a Ft(\017)p Black 86 w Fv(Ne)l(w)44 b(machine)1491
2361 y Fd(c) y Ft(M) y Fn(def)1733
2405 y Fm(=)75 b Ft(MkM) y Fe(O) y
Ft(kM) y Fe(S) y Fv(.)p Black 288 2749
a Ft(\017)p Black 86 w Fv(V)-19 b(erify)974 2706 y Fd(c)933
2749 y Ft(M)48 b(j)-29 b Fm(=)48 b Ft(h)-10 b Fl(g)6
b Fm(=)-29 b(=)-77 b Ft(\035)q Fl(h)-10 b Ft(i)q Fv(.)150
3094 y(All)43 b(done)h(automatically)-11 b(.)
y Fu(18)p eop
%%Page: 19 19
19 18 bop 1 0 0 TeXcolorrgb 150 339 a Fz(5)p Black 1 0 0
TeXcolorrgb 248 w(A)62 b(case)h(study)p Black 150 838
a Fv(System)43 b(initially)g(proposed)h(by)g(K)-6 b(opetz)44
b([1995],)g(implemented)g(by)f(Bou) y(\264)4692
838 y(e)150 1082 y([1997].)p Black Black 321
a Fs(network)p 479
2 v 488 1752 a Fq(S1)p
V 479 2995
1400 14 v 658
1029 v 1693
2809 V 7 7 v 3 7 v
7 172 v 836
v 837 1438 a Fo(\033)664 1403
y Fv(actuator)p
a Fv(sensor)p
172 v 00 14 v
V 00 14 v 7
357 7 v 3 7 v
a Fo(\033) y Fv(actuator)p
a Fo(?)p 2 7
a Fv(sensor)p
a Fq(S3)p 5294
2981 V 00 14 v 7 7 v
172 v 2 7 v
a Fo(\033) y Fv(actuator)p
a Fo(?)p 2 7 v
a Fv(sensor)p
172 v Black
a(Figure)h(2:)53 b(Ov)m(erall)45
b(architecture)h(of)d(system)p Black
%%Page: 20 20
20 19 bop 150 177 a Fv(Channels)44 b(operate)h(in)e(rounds.)150
476 y(Each)h(channel)h(follo)l(ws)e(same)h(protocol.)150
775 y(In)f(each)i(round,)f(one)f(channel)i(acts)f(as)f(master)p
Black 262 991 a(1.)p Black 69 w(Initialisation:)p Black
262 1225 a(2.)p Black 69 w(Synchronisation)p Black 262
1458 a(3.)p Black 69 w(Broadcast:)55 b(master)44 b(broadcasts)h
(internal)f(state)f(information)p Black 262 1692 a(4.)p
Black 69 w(Sensor:)54 b(Each)44 b(channels)h(reads)f(its)f
(sensor\(s\).)p Black 262 1925 a(5.)p Black 69 w(Interchange:)56
b(Each)44 b(channel)h(broadcasts)g(its)d(sensor)i(v)l()p
Black 262 2158 a(6.)p Black 69 w(Median:)54 b(Each)44
b(channel)h(chooses)f(the)g(median)g(v)l(alue)f(recei)l(v)m(ed.)56
b(That)460 2395 y(channel)44 b(that)g(produces)g(median)g(v)l(alue)g
(is)f(ne)m(xt)h(master)-9 b(.)p Black 262 2629 a(7.)p
Black 69 w(Re)m(gulation:)54 b(Do)44 b(some)f(real)h(processing)p
Black 262 2862 a(8.)p Black 69 w(Result:)53 b(Each)45
b(channel)f(broadcasts)h(the)e(result)p Black 262 3095
a(9.)p Black 69 w(Exact:)54 b(Each)44 b(channel)h(chooses)f(the)g(mode)
f(of)h(the)f(v)l(alues)p Black 176 3329 a(10.)p Black
69 w(Actuator:)55 b(Each)44 b(channel)g(outputs)g(the)f(chosen)h(v)l
(alue)g(to)f(its)g()p Black 176 3562 a(11.)p
Black 69 w(Spare:)54 b(Some)44 b(cleaning)g(up)f(is)g(done)h(and)g(the)
f(channels)i(mo)m(v)m(e)f(to)f(the)460 3799 y(synchronisation)h(state.)
y Fu(20)p eop
%%Page: 21 21
21 20 bop 150 364 a Fv(Internally)-11 b(,)44 b(each)h(channel)f
(consists)g(of)f(tw)n(o)h Fs(nodes)g Fv(internal)g(connection.)p
Black 288 709 a Ft(\017)p Black 86 w Fv(control)g(node)p
Black 288 1053 a Ft(\017)p Black 86 w Fv(monitor)f(node)150
1398 y(If)h(control)g(and)f(monitor)h(de)l(viate,)g(channel)g(is)f(e)m
(xtracted.)150 1719 y(Needs)h(to)f(be)h(reinitialised)g(before)h(it)e
(operates)h(ag)o(ain.)150 2040 y(F)m(ail-silent)g(mode)f(assumed)150
2614 y Fq(Implementation)150 3051 y Fv(Gate)h(le)l(v)m(el)g
(implementation)g(translation)g(from)g(VHDL)g(code.)150
3372 y(F)m(or)g(32-bit)f(v)m(ersion)h(circuit)g(has)g(o)m(v)m(er)h(100)
e(000)g(g)o(ates)h(and)g(10000)g(state-holding)150 3616
y(components) y Fu(21)p eop
%%Page: 22 22
22 21 bop 0.86 0.08 0.23 TeXcolorrgb 150 202 a Fr(5.1)p
Black 0.86 0.08 0.23 TeXcolorrgb 207 w(V)-21 b(eri\002cation)52
b(of)g(nominal)h(beha)-5 b(viour)p Black Black Black
150 576 a Fb(ClockAnt)162 b(and)150 766 y(During)81 b(\(0,)g(10\))578
b(S1init)80 b(=)i(T)h(and)164 b(network_signal)78 b(=)k(F)165
b(and)150 956 y(During)81 b(\(11,)g(3099\))329 b(S1init)80
b(=)i(F)2149 b(and)150 1145 y(During)81 b(\(0,)g(200\))495
b(S2init)80 b(=)i(T)h(and)e(S3init)g(=)h(T)909 b(and)150
1335 y(During)81 b(\(201,)f(3099\))247 b(S2init)80 b(=)i(F)h(and)e
(S3init)g(=)h(F)909 b(and)150 1524 y(During)81 b(\(1500,)f(1599\))481
1714 y(S1input=s1[3-0])d(and)82 b(S2input=s2[3-0])77
b(and)82 b(S3input=s3[3-0])315 1904 y(===>)646 2093 y(During)e
([\(2600,)h(2649\)]) y(S1output)f(=)i(\(2*median)e
([s1[3-0],s2[3-0],s3)o([3)o(-0])o(]\)[)o(3-0)o(])d(and)1059
2473 y(S2output)j(=)i(\(2*median)e([s1[3-0],s2[3-0],s3)o([3)o(-0])o
(]\)[)o(3-0)o(])d(and) y(S3output)j(=)i(\(2*median)e
([s1[3-0],s2[3-0],s3)o([3)o(-0])o(]\)[)o(3-0)o(])1142
2852 y(and)646 3042 y(During)g([\(2700,)h(2749\)])1059
3231 y(if_c)g(S1cont:Pstatus)d(then_c)j(s1_got_med)244
b(and) y(if_c)81 b(S2cont:Pstatus)d(then_c)j(s2_got_med)244
b(and) y(if_c)81 b(S3cont:Pstatus)d(then_c)j(s3_got_med)244
b(and) y(exactly_one_master_)o(act)o(ive)2640
4236 y Fu(22)p eop
%%Page: 23 23
23 22 bop 150 288 a Fq(Pr)m(o)n(ving)44 b(corr)m(ectness)i(in)c(the)i
(general)g(case)150 726 y Fv(De\002ne)g(in)-7 b(v)l(ariant:)54
b Fs(Corr)-6 b(ectInitState)150 1047 y Fv(Pro)m(v)m(e)45
b(it)d(is)h(an)h(in)-7 b(v)l(ariant.)p Black Black 150
1341 a Fb(During)81 b([\(0,)g(3099\)])163 b(S1init)81
b(=)h(F)g(and)g(S2init)e(=)j(F)f(and)g(S2init)e(=)i(F)h(and)150
1534 y(During)e([\(200,)f(299\)])h(S1input)f(=)i(s1[3-0])f(and)150
1727 y(During)g([\(200,)f(299\)])h(S2input)f(=)i(s2[3-0])f(and)150
1920 y(During)g([\(200,)f(299\)])h(S3input)f(=)i(s3[3-0])494
b(and)150 2113 y(During)81 b([\(0,)g(51\)])329 b(S1cont:Pstatus)78
b(=)k(T)g(and)g(S1mont:Pstatus)c(=)k(T)g(and)150 2306
y(During)f([\(0,)g(51\)])329 b(S2cont:Pstatus)78 b(=)k(F)g(and)g
(S2mont:Pstatus)c(=)k(F)g(and)150 2499 y(During)f([\(0,)g(51\)])329
b(S3cont:Pstatus)78 b(=)k(F)g(and)g(S3mont:Pstatus)c(=)k(F)g(and)150
2692 y(During)f([\(0,)g(2\)])412 b(CorrectInitState)573
b(and)150 2885 y(ClockAnt)906 b(==>>) y(During)80
b([\(1400,)h(1402\)]) y(CorrectInitState)150
3693 y Fv(Other)44 b(things)f(to)g(sho)l(w)g(too.)2640
4236 y Fu(23)p eop
%%Page: 24 24
24 23 bop 0.86 0.08 0.23 TeXcolorrgb 150 806 a Fr(5.2)p
Black 0.86 0.08 0.23 TeXcolorrgb 207 w(V)-21 b(erifying)53
b(fault-tolerant)e(beha)-5 b(viour)p Black 150 1244 a
Fq(Stuck)43 b(at)h(fault)150 1565 y Fv(Suppose)g(stuck-at)g(f)n(ault)g
(in)f(S1.)53 b(T)-6 b(rigger?)55 b(Action?)p Black Black
150 1859 a Fb(Ant)398 2052 y(==>>)646 2245 y(During)80
b([\(2600,)h(2649\)])894 2438 y(S2output)f(=)i(\(2*min)f
([s2[2-0],s3[2-0]]\))o([3-)o(0])76 b(and)894 2631 y(S3output)k(=)i
(\(2*min)f([s2[2-0],s3[2-0]]\))o([3-)o(0])150 3017 y
(-------------FAULT)76 b(ASSUMPTION)j(------)150 3210
y(STUCK)i(AT)h(Fault)329 b(:)165 b(S1contnwval)78 b(=)83
b(F) y Fu(24)p eop
%%Page: 25 25
25 24 bop 150 239 a Fv(Or)p Black Black 150 533 a Fb(Ant)315
726 y(==>>)398 919 y(During)80 b([\(2600,)h(2649\)])563
1112 y(if_c)g(well_behaved_sensors)811 1305 y(then_c)g
(well_behaved_outpu)o(t)c(else_c)j(T)150 1691 y(------------FAULT)d
(ASSUMPTION)i(------)150 1884 y(STUCK)i(AT)h(Fault)329
b(:)82 b(S1contnwval)d(=)j(F)150 2229 y Fv(where)45 b
Fa(well_behaved_sensors)k Fv(is)43 b(de\002ned)h(to)f(be:)p
Black Black 150 2522 a Fb(diff)81 b([max)g([s1[2-0],s2[2-0],s3[)o(2-0)o
(]],)646 2715 y(min)g([s1[2-0],s2[2-0],s3[)o(2-0)o(]]])76
b(<)82 b(delta[2-0])150 3060 y Fv(and)44 b Fa(well_behaved_output)49
b Fv(is)43 b(de\002ned)h(as)p Black Black 150 3354 a
Fb(diff)81 b([S2output,)646 3547 y(\(2*median)e([s1[2-0],s2[2-0],s3[)o
(2-0)o(]]\))o([3-)o(0]])894 3740 y(>)481
859 y(During)80 b([\(2600,)g(2649\)])563 1052 y(S2output)g(=)i(if)g
(\(s1[2-0])e(=)i(7\))g(then) y(\(2*min)f([s2[2-0],s3[2-0]]\)[)
o(3-0)o(]) y(else)h(\(2*median)d([s1[2-0],s2[2-0],s3[)o(2-)o
(0]])o(\)[3)o(-0])150 1631 y(------------FAULT)e(ASSUMPTION)i(------)
150 1824 y(Trigger)h(:)i(s1[2-0])f(=)h(7)150 2017 y(Fault)329
b(:)165 b(S1contnwval)79 b(=)j(F)150 2362 y Fq(T)-13
b(riggering)44 b(faults)g(on)f(state)h(inf)l(ormation)p
Black Black 150 2655 a Fb(Ant)315 2848 y(==>>)481 3041
y(During)80 b([\(2600,)g(2649\)])811 3234 y(S2output)g(=)i(\(2*median)e
([0,s2[2-0],s3[2-0]])o(\)[3)o(-0)o(])150 3427 y(------------FAULT)d
(ASSUMPTION)i(------)150 3620 y(Trigger)h(:)165 b(S1cont:Pstinterchan)o
(ge)76 b(and)82 b(S1cont:Pmyid)150 3814 y(Fault)246 b(:)165
b(S1contdata)79 b(=)k(0)f(and)f(S1montdata)f(=)i(0)2640
4236 y Fu(26)p eop
%%Page: 27 27
27 26 bop 0.86 0.08 0.23 TeXcolorrgb 150 276 a Fr(5.3)p
Black 0.86 0.08 0.23 TeXcolorrgb 207 w(Computational)53
b(cost)p Black 150 714 a Fv(V)-19 b(eri\002ed)44 b(beha)m(viour)g
(under)g(both)g(nominal)f(and)h(f)n(aulty)g(conditions.)p
Black Black 706
v 809 1272
a(Bit-width)p
V 1038 w(4)p
V 465 w(16)p
V 551 w(32)p 4690
1360 V 706
v 809 1572 a(T)-6
b(ime)44 b(tak)n(en)p
V 841 w(74)p
V 379 w(113)p
V 379 w(305)p
v 809 1871 a(Number)h(of)e(g)o(ates)p
V 207 w(50000)p
V 207 w(85000)p
V 207 w(150000)p
7 v Black 758 2306 a(T)-14 b(able)45 b(1:)53 b(Cost)43
b(of)g(v)m(erifying)i(nominal)e(beha)m(viour)i(in)e(seconds)p
Black Black Black 66 7 v
a(Bit-width)p
V 405 w(4)p 2721
2978 V 293 w(8)p
V 292 w(16)p
a(T)-6 b(ime)44 b(tak)n(en)p
208 w(67)p
V 207 w(77)p
V 206 w(156)p
V 207 w(525)p
v Black 881 3626 a(T)-14 b(able)44 b(2:)54 b(Cost)42
b(of)i(v)m(erifying)h(FT)e(properties)h(\(in)g(seconds\))p
a Fu(27)p eop
%%Page: 28 28
28 27 bop 150 569 a Fv(V)-19 b(ery)44 b(reasonable)h(computational)g
(costs.)150 891 y(And)f(.)26 b(.)g(.)p Black 288 1235
a Ft(\017)p Black 86 w Fv(The)44 b(cost)f(of)h(not)f(\002nding)g
(errors)h(in)f(the)h(nominal)f(or)h(f)n(ault-tolerant)460
1479 y(beha)m()p Black 288 1824 a Ft(\017)p Black
86 w Fv(Man)m(y)g(designs)g(can)g(be)f(parameterised)p
Black 529 2118 a Fq(\226)p Black 86 w Fv(Ev)m(en)h(if)g(the)f(\002nal)g
(v)m(ersion)i(of)e(the)h(proof)g(tak)n(es)g(a)f(fe)l(w)h(hours)g(\(or)f
(e)l(v)m(en)701 2362 y(days\))g(to)g(run,)g(this)f(cost)h(will)f(not)h
(necessarily)h(be)f(prohibiti)l(v)m(e)g(if)g(smaller)701
2606 y(v)m(ersions)h(of)g(the)f(circuit)h(can)g(be)g(check)n(ed)h
()p Black 529 2900 a Fq(\226)p Black 86 w Fv(It)e(is)g(v)m(ery)
i(important)e(for)h(the)g(v)m(eri\002cation)g(tool)f(to)g(gi)l(v)m(e)h
(useful)701 3144 y(information)g(when)g(the)g(v)m(eri\002cation)g(f)n
(ails)g(in)f(order)i(to)e(help)g(the)701 3387 y(de)l(v)m(eloper)i
(\002nd)e(errors)i(quickly)-11 b(.) y Fu(28)p
%%Page: 29 29
29 28 bop 1 0 0 TeXcolorrgb 150 231 a Fz(6)p Black 1 0 0
TeXcolorrgb 248 w(Conclusion)p Black 150 708 a Fv(Initial)43
b(results)h(promising.)150 1007 y(Can)f(specify)p Black
305 1223 a Ft(\017)p Black 69 w Fv(stuck)g(at)h(f)n()p
Black 305 1456 a Ft(\017)p Black 69 w Fv(f)n(aults)g(triggered)g(by)g
(input)f(v)l()g(and)p Black 305 1690 a Ft(\017)p
Black 69 w Fv(f)n(aults)h(triggered)g(by)g(state)f(conditions.)p
Black 305 1923 a Ft(\017)p Black 69 w Fv(e)m(xact)i(conditions)p
Black 305 2157 a Ft(\017)p Black 69 w Fv(approximate)g(conditions)150
2471 y(Reasonable)g(computational)f(costs)150 2770 y
Fq(Futur)m(e)g(r)m(esear)m(ch)p Black 305 2986 a Ft(\017)p
Black 69 w Fv(Language)h(for)f(specifying)g(f)n(ault-tolerance.)p
Black 305 3220 a Ft(\017)p Black 69 w Fv(Use)g(for)g(determining)g(f)n
(ault)g(co)m(v)m(erage:)p Black 305 3453 a Ft(\017)p
Black 69 w Fv(Compositional)f(theory)p Black 305 3686
a Ft(\017)p Black 69 w Fv(Impro)m(ving)h(the)g(performance)i(of)d
(algorithms)p Black 305 3920 a Ft(\017)p Black 69 w Fv(More)h(case)g
(studies.) y Fu(29)p eop
userdict /end-hook known{end-hook}if