Specification and Verification of Recovery in Asynchronous Communicating Systems

This paper presents a method for specifying and verifying that an asynchronously communicating program recovers from the presence of physical faults in its execution environment. A physical fault is modelled as an action which performs state transformations, in the same way as any other program action. The possible effects of faults on the execution of a program are described by transforming the program into its fault-affected version.