Summary: Verifying Event-Driven Programs
using Ramified Frame Properties
Neelakantan R. Krishnaswami
IT University of Copenhagen
Carnegie Mellon University
Interactive programs, such as GUIs or spreadsheets, often maintain
dependency information over dynamically-created networks of ob-
jects. That is, each imperative object tracks not only the objects its
own invariant depends on, but also all of the objects which depend
upon it, in order to notify them when it changes.
These bidirectional linkages pose a serious challenge to verifi-
cation, because their correctness relies upon a global invariant over
the object graph.