OERITTE: user-friendly counterexample explanation for model checking

Polina Ovsiannikova, Igor Buzhinsky, Antti Pakonen, Valeriy Vyatkin

    Research output: Contribution to journalArticleScientificpeer-review

    8 Citations (Scopus)
    24 Downloads (Pure)


    Thorough verification is a part of the design process of instrumentation and control systems if they must comply with crucial safety requirements. Model checking can be applied to the formal model of such a system to reason about its correctness based on the specification provided. When a violation occurs, the model checking tool outputs the proof of the violation in the form of a failure trace, which represents a state sequence of system model transitions where the requirement does not hold. This sequence, however, even for modular systems, is a mere table of values. Due to the lack of any insights into the inner model processes and structures that caused a problem, the debugging process of the formal model becomes time and effort consuming. The tool presented in this paper, Oeritte, is aimed at assisting the analyst in this challenge. It implements a method for automatic visual counterexample explanation which includes reasoning both over the falsified LTL formula and over the NuSMV function block diagram of the formal model of the system. The tool is applied to an industrial-sized safety control system of a nuclear power plant.

    Original languageEnglish
    Article number9405616
    Pages (from-to)61383-61397
    Number of pages15
    JournalIEEE Access
    Early online date15 Apr 2021
    Publication statusPublished - 2021
    MoE publication typeA1 Journal article-refereed


    • Counterexample explanation
    • counterexample visualization
    • Delays
    • function block diagram
    • Input variables
    • Model checking
    • NuSMV
    • Power generation
    • Safety
    • Tools
    • user-friendly model checking
    • Visualization


    Dive into the research topics of 'OERITTE: user-friendly counterexample explanation for model checking'. Together they form a unique fingerprint.

    Cite this