Combining Theorem Proving and Model Checking in the Safety-Critical Software Development through Translating Event-B to SMV

Model checking and theorem proving are two key vertification techniques in the formal method, but each has its advantages and disadvantages. In this paper, we first try to present the general model transformation rules from Event-B to SMV in order to realize complementary advantages, and then design the model converter of Event-B to SMV according to the rules. ProB is the only tool to implement Event-B model checking, but it lacks the real-time property verification, while nuXmv is able to verify temporal logic formulas with the real-time property for SMV models. After completing the model transformation, we use ProB and nuXmv to make the verification of LTL and CTL formulas for two equivalent models respectively. Compared to the experimental results, in solving the same problem, nuXmv has more advantages over memory consumption, time efficiency and so on than ProB, especially when the formula to be verified is very complex. Therefore, if complex verifications of system models need to be performed, it is necessary to implement the model transformation between Event-B and SMV by using our translation rules, which is of great significance for the development, design and verification of safety-critical system softwares