coq-club AT inria.fr
Subject: The Coq mailing list
List archive
- From: Pierre Courtieu <pierre.courtieu AT gmail.com>
- To: Coq Club <coq-club AT inria.fr>
- Subject: Re: [Coq-Club] Verification of GUIs in Coq
- Date: Wed, 11 Oct 2017 11:11:52 +0200
- Authentication-results: mail3-smtp-sop.national.inria.fr; spf=None smtp.pra=pierre.courtieu AT gmail.com; spf=Pass smtp.mailfrom=pierre.courtieu AT gmail.com; spf=None smtp.helo=postmaster AT mail-oi0-f51.google.com
- Ironport-phdr: 9a23:dJQNSBWYMwN8sEKdzC7POQXCBGnV8LGtZVwlr6E/grcLSJyIuqrYZR2At8tkgFKBZ4jH8fUM07OQ6P+wHzFYqb+681k8M7V0HycfjssXmwFySOWkMmbcaMDQUiohAc5ZX0Vk9XzoeWJcGcL5ekGA6ibqtW1aMlzFOAF0PuX4HJLJx4Tyjrjqus6bXwIdrz2kKZh2MR/++Q7Wr4wdhZZoAqc30BrA5HVSLbd432RtcGqSkgzm64+b+4N57yVdprp1789NS7/3Oa8/UKZEDTk7G28w7czv8xLESF3ctTMnTmwKn08QUED+5xbgU8K063Oiuw==
I think one of an important facts to check in GUIs is that a crucial
(urgent) information (like say a temperature alarm in a nuclear plant)
is not hidden by a window displaying less important data. For instance
in an aircraft particularly nasty things happen when an alarm (visual
or sound) hides another.
P.
2017-10-10 23:03 GMT+02:00 Valentin Robert
<valentin.robert.42 AT gmail.com>:
> Probably relevant:
> http://neutrons.uwplse.org/
>
> - Valentin
>
> On 10 October 2017 at 11:00, Daniel Schepler
> <dschepler AT gmail.com>
> wrote:
>>
>> On Tue, Oct 10, 2017 at 10:36 AM, Abhishek Anand
>> <abhishek.anand.iitg AT gmail.com>
>> wrote:
>> > I am curious what you want to prove about GUIs.
>> >
>> > In the healthcare domain, I guess privacy is the biggest concern.
>>
>> I was thinking correctness of things like recommended medication
>> doses, or if it's an interface to medical equipment, then verifying
>> that certain dangerous operating conditions never happen. A while
>> ago, somewhere on Wikipedia I read about a situation with control
>> software of a radiation therapy device. Under a certain sequence of
>> actions that wasn't anticipated by the software designers, it could
>> end up opening all filters which was never supposed to happen,
>> resulting in a massive overdose of radiation. (Of course, the rest of
>> what you wrote also applies here - in that particular situation, the
>> recommendation was to design hardware interlocks so that it would be
>> physically impossible for the software to accidentally leave all
>> filters open and still activate the radiation.)
>> --
>> Daniel
>
>
- [Coq-Club] Verification of GUIs in Coq, stvienna wiener, 10/10/2017
- Re: [Coq-Club] Verification of GUIs in Coq, Matthieu Sozeau, 10/10/2017
- Re: [Coq-Club] Verification of GUIs in Coq, Abhishek Anand, 10/10/2017
- Re: [Coq-Club] Verification of GUIs in Coq, Jim Fehrle, 10/10/2017
- Re: [Coq-Club] Verification of GUIs in Coq, Daniel Schepler, 10/10/2017
- Re: [Coq-Club] Verification of GUIs in Coq, Valentin Robert, 10/10/2017
- Re: [Coq-Club] Verification of GUIs in Coq, Pierre Courtieu, 10/11/2017
- Re: [Coq-Club] Verification of GUIs in Coq, David MENTRÉ, 10/30/2017
- Re: [Coq-Club] Verification of GUIs in Coq, Valentin Robert, 10/10/2017
Archive powered by MHonArc 2.6.18.