{"id":"https://openalex.org/W7170187646","doi":"https://doi.org/10.1007/978-3-032-32519-8_7","title":"Model Checking for\u00a0Flexible Network Protocols","display_name":"Model Checking for\u00a0Flexible Network Protocols","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7170187646","doi":"https://doi.org/10.1007/978-3-032-32519-8_7"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-032-32519-8_7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-032-32519-8_7","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-032-32519-8_7.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/978-3-032-32519-8_7.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072406424","display_name":"Andrew Johnson","orcid":"https://orcid.org/0000-0002-6665-3472"},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Andrew Johnson","raw_affiliation_strings":["Princeton University, Princeton, NJ, 08544, USA"],"raw_orcid":"https://orcid.org/0000-0003-0532-8198","affiliations":[{"raw_affiliation_string":"Princeton University, Princeton, NJ, 08544, USA","institution_ids":["https://openalex.org/I20089843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060832606","display_name":"Dennis Fetterly","orcid":null},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dennis Fetterly","raw_affiliation_strings":["Google, Inc., Mountain View, CA, 94043, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Google, Inc., Mountain View, CA, 94043, USA","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5143477006","display_name":"Sean Song","orcid":null},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sean Song","raw_affiliation_strings":["Google, Inc., Mountain View, CA, 94043, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Google, Inc., Mountain View, CA, 94043, USA","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5143508368","display_name":"Jonathan Zolla","orcid":"https://orcid.org/0009-0001-0315-7316"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jonathan Zolla","raw_affiliation_strings":["Google, Inc., Mountain View, CA, 94043, USA"],"raw_orcid":"https://orcid.org/0009-0001-0315-7316","affiliations":[{"raw_affiliation_string":"Google, Inc., Mountain View, CA, 94043, USA","institution_ids":["https://openalex.org/I1291425158"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5072406424"],"corresponding_institution_ids":["https://openalex.org/I20089843"],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":{"value":5000,"currency":"EUR","value_usd":5392},"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"136","last_page":"150"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":null,"topics":[],"keywords":[{"id":"https://openalex.org/keywords/model-checking","display_name":"Model checking","score":0.7128999829292297},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.48730000853538513},{"id":"https://openalex.org/keywords/formal-verification","display_name":"Formal verification","score":0.46219998598098755},{"id":"https://openalex.org/keywords/formal-specification","display_name":"Formal specification","score":0.439300000667572},{"id":"https://openalex.org/keywords/formal-methods","display_name":"Formal methods","score":0.4180999994277954},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.3928000032901764},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.3824000060558319},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.37619999051094055}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9187999963760376},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.7128999829292297},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.48730000853538513},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4871000051498413},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.46219998598098755},{"id":"https://openalex.org/C116253237","wikidata":"https://www.wikidata.org/wiki/Q1437424","display_name":"Formal specification","level":2,"score":0.439300000667572},{"id":"https://openalex.org/C75606506","wikidata":"https://www.wikidata.org/wiki/Q1049183","display_name":"Formal methods","level":2,"score":0.4180999994277954},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.3928000032901764},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.3824000060558319},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.37619999051094055},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.367900013923645},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.3400999903678894},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.33959999680519104},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.31450000405311584},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.31349998712539673},{"id":"https://openalex.org/C57493831","wikidata":"https://www.wikidata.org/wiki/Q3134666","display_name":"Projection (relational algebra)","level":2,"score":0.3052000105381012},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2759999930858612},{"id":"https://openalex.org/C2779618445","wikidata":"https://www.wikidata.org/wiki/Q1640628","display_name":"Network service","level":2,"score":0.2757999897003174},{"id":"https://openalex.org/C2775948798","wikidata":"https://www.wikidata.org/wiki/Q5160261","display_name":"Conformance checking","level":5,"score":0.2750999927520752},{"id":"https://openalex.org/C2985583900","wikidata":"https://www.wikidata.org/wiki/Q722617","display_name":"Formal description","level":2,"score":0.2599000036716461},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.25440001487731934},{"id":"https://openalex.org/C104122410","wikidata":"https://www.wikidata.org/wiki/Q1416406","display_name":"Network model","level":2,"score":0.2513999938964844}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/978-3-032-32519-8_7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-032-32519-8_7","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-032-32519-8_7.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"}],"best_oa_location":{"id":"doi:10.1007/978-3-032-32519-8_7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-032-32519-8_7","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-032-32519-8_7.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7170187646.pdf","grobid_xml":"https://content.openalex.org/works/W7170187646.grobid-xml"},"referenced_works_count":25,"referenced_works":["https://openalex.org/W61606928","https://openalex.org/W1561492939","https://openalex.org/W1596602992","https://openalex.org/W1879996931","https://openalex.org/W2033546932","https://openalex.org/W2043100293","https://openalex.org/W2049314312","https://openalex.org/W2054198444","https://openalex.org/W2091776255","https://openalex.org/W2141992894","https://openalex.org/W2798442694","https://openalex.org/W2819252821","https://openalex.org/W2884883145","https://openalex.org/W2960694955","https://openalex.org/W2981638325","https://openalex.org/W3019119050","https://openalex.org/W3021027963","https://openalex.org/W3184791836","https://openalex.org/W4236202168","https://openalex.org/W4241197535","https://openalex.org/W4241223029","https://openalex.org/W4241316177","https://openalex.org/W4364387774","https://openalex.org/W4366723917","https://openalex.org/W4386556337"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"Operating":[1,8],"a":[2,5,11,36,88,119,146],"network":[3,64,74],"is":[4,27],"daunting":[6],"task.":[7],"one":[9],"at":[10,102,185],"global":[12],"scale,":[13],"with":[14],"stringent":[15],"service":[16],"objectives":[17],"and":[18,25,55,76,80,99,118,135,179,188],"requirements":[19],"to":[20,46,66,68,73,86,122,130,154,166,192],"be":[21],"available":[22],"during":[23],"maintenance":[24,79],"failures,":[26,75],"even":[28],"more":[29],"so.":[30],"At":[31],"Google,":[32],"we":[33,109,144,152,164],"operate":[34],"such":[35],"network.":[37],"This":[38],"paper":[39],"details":[40],"our":[41,111,161,190],"experience":[42],"applying":[43],"formal":[44,84],"methods":[45,85],"some":[47],"of":[48,90,160],"the":[49,103,124,138,158,167],"networking":[50],"protocols":[51,61,112],"that":[52,137,151,181],"are":[53],"developed":[54],"maintained":[56],"by":[57],"in-house":[58],"engineers.":[59],"These":[60],"centrally":[62],"route":[63],"traffic":[65],"respond":[67],"changes":[69],"in":[70,157],"demand,":[71],"react":[72],"allow":[77],"for":[78,171],"upgrades.":[81],"We":[82,106,127,173],"used":[83,153],"target":[87],"class":[89],"bugs":[91,134,187],"stemming":[92],"from":[93],"unclear":[94],"specifications,":[95],"unintended":[96],"system":[97],"interactions,":[98],"logical":[100],"errors":[101],"specification":[104],"level.":[105],"show":[107],"how":[108],"modeled":[110],"using":[113],"an":[114],"off-the-shelf":[115],"model":[116,125,169],"checker":[117,170],"custom":[120],"harness":[121],"scale":[123],"horizontally.":[126],"were":[128,141,183],"able":[129],"recreate":[131],"several":[132],"recent":[133],"verify":[136],"fixes":[139,191],"implemented":[140],"correct.":[142],"Finally,":[143],"present":[145],"method":[147],"called":[148],"state":[149],"projection":[150],"increase":[155],"confidence":[156],"coverage":[159],"models,":[162],"which":[163],"added":[165],"TLC":[168],"TLA+.":[172],"created":[174],"7":[175],"different":[176],"TLA+":[177],"models":[178],"showed":[180],"they":[182],"effective":[184],"recreating":[186],"verifying":[189],"those":[193],"bugs.":[194]},"counts_by_year":[],"updated_date":"2026-07-25T05:54:39.514286","created_date":"2026-07-24T00:00:00"}