210 likes | 389 Views
Mathematics throughout the CS Curriculum. Support by NSF #. General Consensus. Most CS faculty agree that math is important. Discrete Math is usually required. The Problem. Students study math, but don’t see the connection to their CS courses. Content Reasoning skills
E N D
Mathematics throughout the CS Curriculum Support by NSF #
General Consensus • Most CS faculty agree that math is important. • Discrete Math is usually required.
The Problem • Students study math, but don’t see the connection to their CS courses. • Content • Reasoning skills • Why Reasoning Skills? • What Reasoning Skills??
Beyond the Classroom • Current Software is too large for one person to understand at the code level. • Software engineers must work at the modular level. • How do we prepare future programmers? • What do they need to know? • How can they reason about large programs composed of many parts?
Apply in All Courses • Introductory Level Programming • Data Structures and Algorithms • Software Engineering • Theory of Programming Languages • Electives
Motivation for Reasoning • Binary search in C++ library • Proven correct? • Failed!
Need Precise Specs • Need to distinguish between mathematical integers and computer integers • Specs take this distinction into account.
Introductory Programming • Informal and Formal Reasoning • Reasoning Tables • Reasoning based on specification without needing to see code.
Example OperationPlusTwo(updatesi: int) requires ?? ensuresi = #i + 2; Code Increment(i); Increment(i);
Increment • Operation Increment (updatesi: int) requiresi< max_int; ensuresi = #i + 1; No need to see Code i:= i + 1;
Example OperationPlusTwo(updatesi: int) requiresi< max_int - 1; ensuresi = #i + 2; Code Increment(i); Increment(i);
Upper Level • Formal Methods in Software Engineering • Algorithms (Distinction between proving an algorithm and that an implementation meets the specification of the algorithm) • Theory of Programming Languages • (Verifying Compiler Challenge)
Formal Methods Unit • Often at end of text • Missing altogether
Precise Specifications • requiresclause (pre-condition) • ensuresclause (post-condition) • loop invariants • Math modeling
Stack Model • Stack_Familyis_modeled_byStr(Entry) exemplar S; Initialization ensures S = Λ; Note: Entry is a generic type.
Example Operation Push(alters E: Entry; updates S: Stack); requires |S| < Max_Depth; ensures S = <#E> o #S; Operation Pop(replaces R: Entry; updates S: Stack); requires |S| > 0; ensures #S = <R> o S;
Proof Rules for Verification • code: Assume B; code1; Confirm Q; • code; Assume B; code2; Confirm Q; • -------------------------------------------------------------- • code; If B then code1 else code2; endif; Confirm Q;
Verification Conditions • Automated generation of VC’s • http://resolve.cs.clemson.edu/interface/#
Summary • To meet the challenges of current software, students need • To reason about large programs modularly • To read and write mathematical specs • To distinguish between spec and implementation