Arrays are a fundamental abstraction to represent collections of data. It is often possible to exploit structural properties of the data stored in an array (e.g., repetition or sparsity) to develop a specialised representation optimised for space efficiency. Formally reasoning about correctness of manipulations with such structured data is challenging, as they are often composed of multiple loops with non-trivial invariants.
In this work, we observe that specifications for structured data manipulations can be phrased as hypersafety properties, i.e., predicates that relate traces of k programs. To turn this observation into an effective verification methodology, we developed the Logic for Graceful Tensor Manipulation (LGTM), a new Hoare-style relational separation logic for specifying and verifying computations over structured data. The key enabling idea of LGTM is that of parametrised hypersafety specifications that allow the number k of the program components to depend on the program variables. We implemented LGTM as a foundational embedding into Coq, mechanising its rules, meta-theory, and the proof of soundness. Furthermore, we developed a library of domain-specific tactics that automate computer-aided hypersafety reasoning, resulting in pleasantly short proof scripts that enjoy a high degree of reuse. We argue for the effectiveness of relational reasoning about structured data in LGTM by specifying and mechanically proving correctness of 13 case studies including computations on compressed arrays and efficient operations over multiple kinds of sparse tensors.
Thu 27 JunDisplayed time zone: Windhoek change
13:40 - 14:40 | |||
13:40 20mTalk | Mechanised Hypersafety Proofs about Structured Data PLDI Research Papers Vladimir Gladshtein National University of Singapore, Qiyuan Zhao National University of Singapore, Willow Ahrens Massachusetts Institute of Technology, Saman Amarasinghe Massachusetts Institute of Technology, Ilya Sergey National University of Singapore DOI Pre-print | ||
14:00 20mTalk | Hyper Hoare Logic: (Dis-)Proving Program Hyperproperties PLDI Research Papers DOI | ||
14:20 20mTalk | A HAT Trick: Automatically Verifying Representation Invariants using Symbolic Finite Automata PLDI Research Papers Zhe Zhou Purdue University, Qianchuan Ye Purdue University, Benjamin Delaware Purdue University, Suresh Jagannathan Purdue University DOI |