{"id":"https://openalex.org/W4394923329","doi":"https://doi.org/10.1145/3627703.3650077","title":"SandTable: Scalable Distributed System Model Checking with Specification-Level State Exploration","display_name":"SandTable: Scalable Distributed System Model Checking with Specification-Level State Exploration","publication_year":2024,"publication_date":"2024-04-18","ids":{"openalex":"https://openalex.org/W4394923329","doi":"https://doi.org/10.1145/3627703.3650077"},"language":"en","primary_location":{"id":"doi:10.1145/3627703.3650077","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3627703.3650077","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Nineteenth European Conference on Computer Systems","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5021282644","display_name":"Ruize Tang","orcid":"https://orcid.org/0009-0001-0590-1620"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Ruize Tang","raw_affiliation_strings":["SKL for Novel Soft. Tech., Nanjing University, Nanjing, China"],"raw_orcid":"https://orcid.org/0009-0001-0590-1620","affiliations":[{"raw_affiliation_string":"SKL for Novel Soft. Tech., Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101923614","display_name":"Xudong Sun","orcid":"https://orcid.org/0009-0005-6734-0928"},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xudong Sun","raw_affiliation_strings":["University of Illinois, Urbana-Champaign, IL, USA"],"raw_orcid":"https://orcid.org/0009-0005-6734-0928","affiliations":[{"raw_affiliation_string":"University of Illinois, Urbana-Champaign, IL, USA","institution_ids":["https://openalex.org/I157725225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102718047","display_name":"Yu Huang","orcid":"https://orcid.org/0000-0001-8921-036X"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Huang","raw_affiliation_strings":["SKL for Novel Soft. Tech., Nanjing University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0001-8921-036X","affiliations":[{"raw_affiliation_string":"SKL for Novel Soft. Tech., Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010937486","display_name":"Y. Wei","orcid":"https://orcid.org/0009-0002-8137-2203"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuyang Wei","raw_affiliation_strings":["SKL for Novel Soft. Tech., Nanjing University, Nanjing, China"],"raw_orcid":"https://orcid.org/0009-0002-8137-2203","affiliations":[{"raw_affiliation_string":"SKL for Novel Soft. Tech., Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086859369","display_name":"Lingzhi Ouyang","orcid":"https://orcid.org/0000-0001-7523-8759"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lingzhi Ouyang","raw_affiliation_strings":["SKL for Novel Soft. Tech., Nanjing University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0001-7523-8759","affiliations":[{"raw_affiliation_string":"SKL for Novel Soft. Tech., Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041674680","display_name":"Xiaoxing Ma","orcid":"https://orcid.org/0000-0001-7970-1384"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoxing Ma","raw_affiliation_strings":["SKL for Novel Soft. Tech., Nanjing University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0001-7970-1384","affiliations":[{"raw_affiliation_string":"SKL for Novel Soft. Tech., Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5021282644"],"corresponding_institution_ids":["https://openalex.org/I881766915"],"apc_list":null,"apc_paid":null,"fwci":1.7285,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.85207395,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"736","last_page":"753"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.8565381765365601},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.813725471496582},{"id":"https://openalex.org/keywords/bottleneck","display_name":"Bottleneck","score":0.7260513305664062},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.7027319073677063},{"id":"https://openalex.org/keywords/model-checking","display_name":"Model checking","score":0.5980637073516846},{"id":"https://openalex.org/keywords/state-space","display_name":"State space","score":0.5950603485107422},{"id":"https://openalex.org/keywords/heuristics","display_name":"Heuristics","score":0.5761027932167053},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.5065127611160278},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4668481945991516},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.4615040421485901},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3613295555114746},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.229765385389328},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.1081133782863617},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.09462535381317139},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.08583417534828186}],"concepts":[{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.8565381765365601},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.813725471496582},{"id":"https://openalex.org/C2780513914","wikidata":"https://www.wikidata.org/wiki/Q18210350","display_name":"Bottleneck","level":2,"score":0.7260513305664062},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.7027319073677063},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.5980637073516846},{"id":"https://openalex.org/C72434380","wikidata":"https://www.wikidata.org/wiki/Q230930","display_name":"State space","level":2,"score":0.5950603485107422},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.5761027932167053},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.5065127611160278},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4668481945991516},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.4615040421485901},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3613295555114746},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.229765385389328},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.1081133782863617},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.09462535381317139},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.08583417534828186},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3627703.3650077","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3627703.3650077","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Nineteenth European Conference on Computer Systems","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3147907945","display_name":null,"funder_award_id":"62025202, 62372222","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"},{"id":"https://openalex.org/G6223999815","display_name":null,"funder_award_id":"CNS 2145295, CNS 2130560","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"}],"funders":[{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W95608104","https://openalex.org/W1972433423","https://openalex.org/W2033546932","https://openalex.org/W2065675749","https://openalex.org/W2075854425","https://openalex.org/W2091776255","https://openalex.org/W2096503829","https://openalex.org/W2109213558","https://openalex.org/W2127574686","https://openalex.org/W2135274583","https://openalex.org/W2143149536","https://openalex.org/W2147891468","https://openalex.org/W2167814583","https://openalex.org/W2169870841","https://openalex.org/W2295903414","https://openalex.org/W2358431938","https://openalex.org/W2472899067","https://openalex.org/W2981593401","https://openalex.org/W3031474432","https://openalex.org/W3103682315","https://openalex.org/W3114324652","https://openalex.org/W3204018925","https://openalex.org/W4248669688","https://openalex.org/W4281749479","https://openalex.org/W4299626704","https://openalex.org/W4313459347","https://openalex.org/W4318541571","https://openalex.org/W4372259572","https://openalex.org/W4384302765","https://openalex.org/W4386556337","https://openalex.org/W4387321514","https://openalex.org/W6640455568"],"related_works":["https://openalex.org/W2595172197","https://openalex.org/W2084856301","https://openalex.org/W1572578464","https://openalex.org/W2804745155","https://openalex.org/W2736259393","https://openalex.org/W2529542719","https://openalex.org/W2997654205","https://openalex.org/W2182066955","https://openalex.org/W2162351207","https://openalex.org/W2106934209"],"abstract_inverted_index":{"Implementation-level":[0],"distributed":[1,15],"system":[2],"model":[3],"checkers":[4],"(DMCKs)":[5],"have":[6,27],"proven":[7],"valuable":[8],"in":[9,116],"verifying":[10,113],"the":[11,49,53,60,81,99,117],"correctness":[12],"of":[13,71],"real":[14],"systems.":[16],"However,":[17],"they":[18],"primarily":[19],"focus":[20],"on":[21,30],"state":[22,100],"space":[23,101],"reduction,":[24],"and":[25,56,90,94,106,108,112],"often":[26],"a":[28,42,68],"bottleneck":[29],"another":[31],"crucial":[32],"dimension:":[33],"exploration":[34,47],"speed.":[35],"To":[36],"scale":[37],"DMCK,":[38],"we":[39],"introduce":[40],"SandTable,":[41],"technique":[43],"for":[44,104],"lifting":[45],"state-space":[46],"from":[48],"implementation":[50,61],"level":[51],"to":[52,80,86],"specification":[54,88],"level,":[55],"confirming":[57,110],"bugs":[58,111],"at":[59],"level.":[62],"We":[63],"made":[64],"SandTable":[65],"practical":[66],"through":[67],"methodology":[69],"consisting":[70],"four":[72],"essential":[73],"parts:":[74],"(1)":[75],"writing":[76],"specifications":[77],"that":[78],"adhere":[79],"implementation,":[82],"(2)":[83],"checking":[84],"conformance":[85],"enhance":[87],"quality":[89],"reduce":[91],"false":[92,95],"positives":[93],"negatives,":[96],"(3)":[97],"exploring":[98],"with":[102],"heuristics":[103],"effectiveness":[105],"efficiency,":[107],"(4)":[109],"their":[114],"fixes":[115],"implementation.":[118]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":1}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}
