Re: [irtf-discuss] Usable formal methods side meeting at IETF 115

Buday Gergely <buday.gergely.istvan@uni-mate.hu> Sun, 06 November 2022 18:19 UTC

Return-Path: <Buday.Gergely.Istvan@uni-mate.hu>
X-Original-To: irtf-discuss@ietfa.amsl.com
Delivered-To: irtf-discuss@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D2B54C14F733 for <irtf-discuss@ietfa.amsl.com>; Sun, 6 Nov 2022 10:19:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_FONT_SIZE_LARGE=0.001, HTML_MESSAGE=0.001, NICE_REPLY_A=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=uni-mate.hu
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aWbD9Sk8h0ha for <irtf-discuss@ietfa.amsl.com>; Sun, 6 Nov 2022 10:19:31 -0800 (PST)
Received: from mx1.szie.hu (mx1.szie.hu [IPv6:2001:738:5800:1903::66]) by ietfa.amsl.com (Postfix) with ESMTP id CE7B0C14F727 for <irtf-discuss@irtf.org>; Sun, 6 Nov 2022 10:19:29 -0800 (PST)
Received: from EUR03-VI1-obe.outbound.protection.outlook.com (mail-vi1eur03lp2109.outbound.protection.outlook.com [104.47.30.109]) by mx1.szie.hu (Postfix) with ESMTPS id 4N52gx0sLFz2k; Sun, 6 Nov 2022 19:19:25 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=uni-mate.hu; s=uni-mate; t=1667758765; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=KaV0dBufElRIPEQmrWxKoJ1AUpv9Pb0PlwRahOOXj9U=; b=REAvoDosb7yNwQo1rYlPnvLHMn6ryYi5FrkzLdS98BBwAkNwbjTuYoeJCAW7sD5v/vgX5w V4D+VvLy75jjl4RrSMf9MQc6mAV1fYfSt9EOvWukTF6yprDRtjbiWDTqL6AEEPXMUXOyWi 1y+04px15uwUwbTx+SGOrTVqLHiOu6M=
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ayHku1M1rtL+Wsp+SxiAYaKZ7T/I6jls+tPRS+J3DBUSDRg9v6nB4b1W1QwDkOgJ20GcHQRNOEwFMx3HXD335DCgS/ohf0hykX8KEf8QO+pL+WHkX1+OJvuTuXUpUBJRhsMEHxsrVmW0TbXqZyvROPlsH+/AFD3hjcNksT2dfzrJlkF24jXcQ1N6FtnfM28bAZtDrg6i0DzWjTpfBpO3mHskdvq7p6A3JKhsOofwyD64OT6PB6hEVpSHaadHX0Vt8JYzOUetHw8YTkncKorJrjBMxs5/IDptIjWDEyl+KNyns4rJ/aylIY+oHUbBQrb+0vGv18FRMWsFJhmqmpkh3w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=KaV0dBufElRIPEQmrWxKoJ1AUpv9Pb0PlwRahOOXj9U=; b=kdV5eARrum1ey6Jo9r2UwQVQOQ0sRVMClxGQQn23U0qpyp3CCQsrziGOWNmm2yZkpnYiFc/0+CJGT1kBOnBXxC6iZIIbKsdYu5tGJGMK2udo7cH3K/13Fc+rUkudDXkD8IU3c5FGgj5UbBvaz11lp9bhbnfJCmQ92zWFnu8O3s1KB046yOUwtnBRxuKnoKx/m3JBcztKDGjlcuRzLkMem1ENtgIwRqMqwUOprmLILNR49E0xJqSNE81WUDmN/+ld35haI6XdXCCsvHD+NT90XR1m6kERRB0o/HE4BEB2rzXHAbSbScXgiXMKMQR+gJ0Oylfvp7+NS/iGBxmrpvPcSw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=uni-mate.hu; dmarc=pass action=none header.from=uni-mate.hu; dkim=pass header.d=uni-mate.hu; arc=none
Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=uni-mate.hu;
Received: from PA4PR06MB8572.eurprd06.prod.outlook.com (2603:10a6:102:2ab::11) by DB7PR06MB6010.eurprd06.prod.outlook.com (2603:10a6:10:8d::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5791.25; Sun, 6 Nov 2022 18:19:23 +0000
Received: from PA4PR06MB8572.eurprd06.prod.outlook.com ([fe80::b20e:573a:6991:a96a]) by PA4PR06MB8572.eurprd06.prod.outlook.com ([fe80::b20e:573a:6991:a96a%9]) with mapi id 15.20.5791.025; Sun, 6 Nov 2022 18:19:23 +0000
Content-Type: multipart/alternative; boundary="------------uYZ5lBMJJJHqJrLxKPC5k2qE"
Message-ID: <ff7d4c86-0b30-66ee-4e3e-32a81d0a6df1@uni-mate.hu>
Date: Sun, 06 Nov 2022 19:19:22 +0100
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.4.1
From: Buday Gergely <buday.gergely.istvan@uni-mate.hu>
To: Colin Perkins <csp@csperkins.org>, irtf-discuss@irtf.org
References: <C91D3863-37D3-4E09-B1F9-588C316240CD@csperkins.org> <281e560d-0b89-53a5-de75-bfe68004917c@uni-mate.hu>
Content-Language: en-GB
In-Reply-To: <281e560d-0b89-53a5-de75-bfe68004917c@uni-mate.hu>
X-ClientProxiedBy: VI1PR08CA0156.eurprd08.prod.outlook.com (2603:10a6:800:d5::34) To PA4PR06MB8572.eurprd06.prod.outlook.com (2603:10a6:102:2ab::11)
MIME-Version: 1.0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: PA4PR06MB8572:EE_|DB7PR06MB6010:EE_
X-MS-Office365-Filtering-Correlation-Id: 9fad6307-1f27-4421-a718-08dac0236e08
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PA4PR06MB8572.eurprd06.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230022)(39840400004)(366004)(396003)(136003)(376002)(346002)(451199015)(2906002)(166002)(66574015)(66556008)(66946007)(66476007)(8676002)(83380400001)(33964004)(6506007)(478600001)(966005)(31696002)(86362001)(6486002)(2616005)(186003)(6512007)(316002)(36756003)(786003)(5660300002)(66899015)(8936002)(38100700002)(31686004)(5930299009)(41300700001)(43740500002)(45980500001)(15940465004); DIR:OUT; SFP:1101;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-OriginatorOrg: uni-mate.hu
X-MS-Exchange-CrossTenant-Network-Message-Id: 9fad6307-1f27-4421-a718-08dac0236e08
X-MS-Exchange-CrossTenant-AuthSource: PA4PR06MB8572.eurprd06.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Nov 2022 18:19:22.9889 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: b6ad7b0a-cc14-418c-8492-54b2753f96a4
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: fMLD2TRrwN5lpUFuQ7fzyGMscqfRHszJ76LkOX81bT7NHDZJDEyMx1ulpv0AdQARmf8hvb6Rw0ffY7gsY+ZXUA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB7PR06MB6010
Archived-At: <https://mailarchive.ietf.org/arch/msg/irtf-discuss/KDtLA4WxuhGFY3KKZXkvpKDYZ_0>
Subject: Re: [irtf-discuss] Usable formal methods side meeting at IETF 115
X-BeenThere: irtf-discuss@irtf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: IRTF general and new-work discussion list <irtf-discuss.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/irtf-discuss>, <mailto:irtf-discuss-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/irtf-discuss/>
List-Post: <mailto:irtf-discuss@irtf.org>
List-Help: <mailto:irtf-discuss-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/irtf-discuss>, <mailto:irtf-discuss-request@irtf.org?subject=subscribe>
X-List-Received-Date: Sun, 06 Nov 2022 18:19:35 -0000

post scriptum: in the draft chapter, there is a sentence:

"Technical limitations include formalisms that cannot fully describe the 
complexity of modern protocols or the network environment."

Knowing the expressivity of various theorem provers this seems to be an 
unfounded statement.

May I get examples of these overly complex protocols and network 
environments, and the formalisms that that cannot handle these complexities?

This might be a challenge for new research.

- Gergely

11/6/2022 6:13 PM keltezéssel, Buday Gergely írta:
>
> Formal methods is a broad term, what did people actually suggest?
>
> Model checking has a long track record of verifying protocols, 
> especially the Spin model checker by Gerald Holzmann.
>
> Theorem provers were also used, e.g. for security protocols, the work 
> of Larry Paulson and Giampaolo Bella and others.
>
> I think English should augment formal specifications as it could 
> ignite debate whether the formalisation is correct and unambigous.
>
> Unfortunately I cannot attend this meeting as I will give a talk 
> exactly this time.
>
> I do not have a voting right but I certainly support setting up such a 
> research group, and I am willing to volunteer working on it.
>
> My research is at the intersection of concurrency and formal 
> verification, and doing that for Internet-wide deployed protocols is 
> indeed a good case study.
>
> Cheers
>
> - Gergely
>
> 11/4/2022 5:42 PM keltezéssel, Colin Perkins írta:
>>
>> Hi,
>>
>> How should we describe and specify protocols?
>>
>> How can we ensure that network protocol specifications are consistent 
>> and correct, and verify that implementations match the specification?
>>
>> The IETF community has long used natural language, English, to 
>> describe and specify its protocols, with occasional use of formal 
>> languages and a some limited amounts of formal verification. One of 
>> the sessions in the Applied Networking Research Workshop at IETF 114 
>> [1] started to discuss whether this is the right approach, and to 
>> what extent formal methods, structured specification languages, and 
>> natural language processing techniques can help describe network 
>> protocols.
>>
>> Chris Wood and I are organising a side meeting at IETF 115 to 
>> continue this discussion, and to assess interest in forming a new 
>> IRTF research group to explore usable formal methods for protocol 
>> specification.
>>
>> This will takes place on Thursday lunchtime, 10 November, from 
>> 11:30-13:00 UK time in room Richmond 5 of the IETF meeting hotel (the 
>> IAB breakout room).
>>
>> The draft agenda is as follows:
>>
>>   * Welcome, Goals, Motivation, Introductions
>>       o (15 mins)
>>   * Short presentations (45 mins)
>>       o “What are Formal Methods and Why Should We Care?”Jonathan Hoyland
>>       o “Formal Specification and Specification-Based Testing of
>>         QUIC”, Ken McMillan
>>   * Discussion of proposed charter (20 mins)
>>       o See Google Doc
>>         <https://docs.google.com/document/d/1X1aFFXg-LTNcT4cpo3FZ6w1PwHG33Q0RAUUf-R7Kmus/edit#>
>>   * Next steps (10 mins)
>>       o Does this seem appropriate for an RG?
>>       o Are there volunteers to work on this topic?
>>       o What, if anything, have we missed?
>>
>> if you’re interested in this topic, please review the draft charter 
>> <https://docs.google.com/document/d/1X1aFFXg-LTNcT4cpo3FZ6w1PwHG33Q0RAUUf-R7Kmus/edit#> 
>> and come along to the side meeting to give your feedback.
>>
>> Hope to see you in London!
>>
>> Colin
>>
>> [1] https://www.youtube.com/watch?v=tCsiB87s-f4
>>
>> --
>> Colin Perkins
>> https://csperkins.org/
>>