Verification of the Formal Concept Analysis

Save this PDF as:

Size: px
Start display at page:

Transcription

1 RACË Å Rev. R. Acad. Cien. Serie A. Mat. VOL. 98 (1), 2004, pp Ciencias de la Computación / Computational Sciences Verification of the Formal Concept Analysis José Antonio Alonso, Joaquín Borrego, María José Hidalgo, Francisco Jesús Martín Mateos and José Luis Ruiz Reina Abstract. This paper is concerned with a formal verification of the Formal Concept Analysis framework. We use the PVS system to represent and formally verify some algorithms of this theory. We also develop a method to transform specifications of algorithms based on finite sets into other executable ones, preserving its correctness. We illustrate this method by constructing an executable algorithm to compute an implicational base of the system of implications between attributes of a finite formal context. Verificación del Análisis formal de conceptos Resumen. En este trabajo se realiza una verificación formal de la teoría del Análisis formal de conceptos. Usamos el sistema PVS para especificar y verificar formalmente los fundamentos matemáticos de esta teoría. Además, desarrollamos un método para transformar especificaciones de algoritmos basadas en el uso de conjuntos finitos en otras evaluables, preservando la corrección. Ilustramos este método construyendo un algoritmo evaluable para calcular una base de implicaciones del sistema de implicaciones entre atributos de un contexto formal finito. 1. Introduction Formal Concept Analysis (FCA) is a learning technique for discovering conceptual structures in a large amount of data, developed since 1982 by R. Wille and B. Ganter [6]. Using FCA techniques several systems have been created, making possible interactive exploration of large database [11]. This technique has been applied to a wide variety of issues related to knowledge representation and database exploration: inheritance and interfaces relationships [1], integration of free text and ontologies [5], management conceptual of s [3], knowledge and data discovery in medical texts [2], etc. Our goal is to show an experience on formalization, validation and correct implementation of a mathematical concept (FCA) in an automated reasoning system. For that purpose, we will follow the first chapters of the book Formal Concept Analysis [6], in which the authors present the mathematical foundations of this theory as well as some algorithms. So far the FCA has been studied in the Mizar system, where a formalization and characterization of the lattice of concepts has been done [9]. In this paper, we show that the PVS theorem prover [8] provides an adequate support for the formalization of FCA. We have two main reasons to tackle this work. First, show that the PVS specification language, in addition to its associated theorem prover, is adequate for achieving a suitable formal verification of the foundations of FCA. The definitions and reasoning in PVS are close to the theory FCA due, mainly, to the Presentado por Luis M. Laita. Recibido: February 27, Aceptado: October 13, Palabras clave / Keywords: Formalized Mathematics, Formal Concept Analysis, Formal Methods, PVS, Higher Order Logic Mathematics Subject Classifications: 68T15, 68T30, 03G10 c 2004 Real Academia de Ciencias, España. 3

2 J.A. Alonso, J. Borrego, M.J. Hidalgo, F.J. Martín Mateos and J.L. Ruiz Reina use of the set theory included in PVS. In our work we have also done an extensive use of the available library of finite sets. Second, we explore how we can transform specifications constructed over finite sets, hence not executable, in other executable ones. Although not every definitions in PVS are executable, there are a wide fragment of PVS executable, by generating Common Lisp code [10]. In that sense, we formalize the notions of data refinement and operation refinement used by Dold [4, 7] and we establish their main properties, building thus a framework in which we could relate differents specifications of the same notion. Then, we apply it to obtain executable specifications of the functions of the theory FCA. 2. The PVS system The PVS system combines an expressive specification language with an interactive theorem prover [8]. In this section, we present a brief description of the PVS language and prover, introducing some of the notions used in this paper. The PVS specification language is built on a classical typed higher order logic with the basic types bool, nat, int, in addition to the function type constructor [D -> R] and the product type constructor [A, B]. The type system is also augmented with dependent types and abstract data types. In PVS, a set A with elements of a type T is identified with its characteristic predicates and thus, the expressions pred[t] and set[t] have the same meaning. A feature of the PVS specification language is predicate subtypes: the subtype x:t p(x) consists of elements of type T satisfying p. It uses (A) to indicate the subtype x:t A(x). Predicate subtypes are used for constraining domains and ranges of functions in a specification and, therefore, for defining partial functions. In general, type-checking with predicate subtypes is undecidable. So, the type-checker generates proof obligations, called type correctness conditions(tccs). This TCCs are either discharged by specialized proof strategies or proved by the user. In particular, for defining a recursive function, it must be ensured that the function terminates. For this reason, in the definition of a recursive function, we have to provide a measure function. This generates a TCC which states that the measure function applied to the recursive arguments decreases with respect to a well founded ordering. A built-in prelude and loadable libraries provide standard specifications and proved facts on a large number of theories. PVS specifications are packaged as theories that can be parametrized in types and constants. The definitions and theorems of a theory can be used by another theory by importing it. Proofs in PVS are presented in a sequent calculus. The commands of the PVS prover include induction, quantifier instantiation, rewriting and simplification. 3. Formal Concept Analysis in PVS In this section, we briefly describe the FCA foundations. At the same time, we show the formalization we have developed in PVS. The framework in which concepts are placed is known as a formal context: a tuple Ç Áµ, where Ç is a set of objects, is a set of attributes and Á Ç is a relation such that µ ¾ Á means the object has the attribute. We illustrate this definition by means of an example from the theory of binary relations. The objects of our example are six binary relations. The attributes are five well known properties of binary relations: reflexive, symmetric, transitive, total and equivalence. A simple format for writing a finite formal context is a cross table: one row for each object and one column for each attribute, marking a cross in the intersection to show that an object has an attribute. 4

3 Verification of FCA Reflexive (R) Symetric (S) Transitive (Tr) Total (To) Equivalence (E) Ë ½ x x x x x Ë ¾ x x Ë x x x Ë x x Ë x x x Ë x x x In the sequel, we will use this example. In order to specify this notion in PVS, we consider two uninterpreted types, T1 and T2, denoting the type of the objects and the type of the attributes, respectively. We define the type FFCT for representing the general structures over which we will construct the type for representing a finite formal context: FFCT: TYPE = [# obj: finite_set[t1], attrib: non_empty_finite_set[t2], relation: finite_set[[t1, T2]] #] where ½ Ø ½ Ò Ø Ò is the form for record types in the language of PVS. Then, the finite formal contexts can be represented by the following subtype of FFCT 1 : FFC:TYPE = C:FFCT LET Ob = obj(c), A = attrib(c), I = relation(c) IN pair¾i: LET (ob, a) = pair IN ob¾ob a¾a In what follows, Ç Áµ always denotes a finite formal context The lattice of concepts FCA is based on the idea that a concept is an unit consisting of two parts: the extent, which covers all the objects belonging to the concept; and the intent, which compresses all the attributes valid for all those objects. Thus, the derivation operators for a formal context can be defined as follows: Given a set of objects of, the intent of, denoted as ¼, is the set of their common attributes intent(c)(x: finite_set[t1]): finite_set[t2] = IF X = THEN attrib(c) ELSE a: T2 (d:(x)): (d, a) ¾ relation(c) ENDIF Dually, given a set of attributes of, the extent of, denoted by ¼ is the set of the objects having all attributes from. extent(c)(y: finite_set[t2]): finite_set[t1] = IF Y = THEN obj(c) ELSE d: T1 (a: (Y)): (d, a) ¾ relation(c) ENDIF A pair µ is a formal concept of iff Ç ¼ and ¼. concept?(c)(pair: [finite_set[t1], finite_set[t2]]): bool = LET (X, Y) = pair IN X obj(c) Y attrib(c) intent(c)(x) = Y extent(c)(y) = X 1 The syntax of PVS specifications has been modified to increase its readability with a more familiar mathematical notation. 5

4 J.A. Alonso, J. Borrego, M.J. Hidalgo, F.J. Martín Mateos and J.L. Ruiz Reina The set of all formal concepts of Ç Áµ is denoted as Ç Áµ. In PVS, we define the type representing the concepts of a formal context and the corresponding accessor functions 2 as follow: concept(c): TYPE = (concept?(c)) extent_concept(c)(pair: concept(c)): finite_set[t1] = proj_1(pair) intent_concept(c)(pair: concept(c)): finite_set[t2] = proj_2(pair) Formal concepts can be partially ordered in a natural way: a concept ½ ½ µ is a subconcept of ¾ ¾ µ iff ½ ¾ or, equivalently, ¾ ½. subconcept?(c)(pair1, pair2: concept(c)): bool = extent_concept(c)(pair1) extent_concept(c)(pair2) We can view the relationship among the concepts of our example by the following diagram. In it, the nodes are the concepts, represented only by their intents, and the arcs represent the subconcept relation. {To} {S, To} {Tr, To} {R, To} {R, Tr, To} {R, S, To} {S, Tr, To} {R, S, Tr, E, To} The main algebraic property of the set of concepts of a formal context is the following Theorem 1 Ç Áµ, subconcept?µ is a complete lattice, in which for every set of formal concepts, µ ¾ Ã, the supremum and the infimum are given by µ ¾ Ãµ µ ¼¼ µ ¾ Ãµ ¾Ã ¾Ã ¾Ã µ ¼¼ where we have denoted intent(c)(extent(c)(y)) by ¼¼ and extent(c)(intent(c)(x)) by ¼¼ : PROOF. 1. The relation is a partial order. We prove this property using the built in relation partial order?, where partial order?[d](rel) is verified if rel is a partial order in D: po_subconcept: LEMMA partial_order?[concept(c)](subconcept?(c)) 2. We define in PVS the expressions to compute the supremum lub fca. For this purpose, we use the Union and the Intersection of an arbitrary set of sets, and we define a function to obtain the set of extents (resp. intents) of a set of concepts, using the built in function image(f)(s), that applies f to the elements of the set S. 2 The built in selector proj i(x) selects the i th element of a tuple. ¾Ã 6

5 Verification of FCA Union(I:set[set[T]]): set[t] = x: (A: (I)): A(x) Intersection(I:set[set[T]]):set[T] = x: (A:(I)):A(x) extents_set_concepts(c)(s: set[concept(c)]): set[set[t1]] = image(extent_concept(c))(s) lub_fca(c)(s:set[concept(c)]): concept(c) = (extent(c)(intent(c)(union(extents_set_concepts(c)(s)))), Intersection(intents_set_concepts(C)(S))) In this specification, we have constrained both the domain and the range of the function lub fca. So, it generates the following TCC ensuring that lub fca satisfies the range constraint given by the predicate subtype concept(c): lub_fca_tcc1: OBLIGATION FORALL (C: FFC, S: set[concept(c)]): concept?(c) (extent(c)(intent(c)(union(extents_set_concepts(c)(s)))), intersection(intents_set_concepts(c)(s))) This TCC is not automatically proved. In order to prove it, we establish that for an arbitrary set ¾ Ã of sets of objects, Ì ¾Ã ¼ Ë¾Ã µ ¼. So, Ì ¾Ã Ì ¾Ã ¼ Ë¾Ã µ ¼. Then, we have µ ¾ Ãµ and we prove that this is a formal concept of. ¾Ã µ ¼¼ ¾Ã µ ¼ 3. Finally, we prove the following result using the built in predicate least upper bound?, where least upper bound?(rel)(x,s) is satisfied if x is the least upper bound of S: lub_fca_is_lub: LEMMA (S:set[concept(C)]): least_upper_bound?(subconcept?(c))(lub_fca(c)(s), S) Hence, we have proved that each collection of formal concepts have a supremum, belonging to the lattice. In the same way, we prove the results corresponding to the infimum Implications between attributes In those cases in which we have to classify a large number of objects with respect to a relative small number of attributes, we could deal with rules or the implications between attributes, i.e, with statements of the form: every object with attributes also have attributes ¼ ¼. Then, we could characterize the intents of concepts of a formal context by a set of rules. In this situation, we study the possible attribute combinations, the attribute logic. Formally, an implication between attributes in Ç Áµ is a pair of subsets of attributes ½ ¾ µ, denoted as ½ ¾. The set ½ is the premise or antecedent of the implication and ¾ its conclusion. In PVS, we use a structure for representing a generalized type of implications implication_gen: TYPE = [# premise: finite_set[t2], conclusion: finite_set[t2] #] 7

6 J.A. Alonso, J. Borrego, M.J. Hidalgo, F.J. Martín Mateos and J.L. Ruiz Reina and we specify the type of implications between attributes of a context as the subtype: implication(c): TYPE = imp:implication_gen premise(imp)attrib(c) ² conclusion(imp)attrib(c) Let us now see the semantic of implications between attributes, specifying it in PVS. A set of attributes respects or is a model of the implication ½ ¾ if ½ ¾ (i.e., ½ µ ¾ ). respects(c)(z: finite_set[t2], imp: implication(c)): bool = premise(imp) Z conclusion(imp) Z A set of attributes respects a set of implications Ä if respects each implication in Ä. respects(c)(z: finite_set[t2], L:set[implication(C)]): bool = (imp: (L)): respects(c)(z, imp) An implication ½ ¾ holds in a set of sets of attributes if each of its elements respects ½ ¾. holds(c)(imp: implication(c), S:set[finite_set[T2]]): bool = (Z:(S)): respects(c)(z, imp) An implication ½ ¾ holds in a context, or ½ ¾ is an implication of, if the intent of every object of respects ½ ¾. That is, whenever each object having all the attributes in ½ also has all the attributes in ¾. holds(c)(imp: implication(c)): bool = (ob: T1): ob ¾ obj(c) => respects(c)(intent(c)(ob), imp) Then, for each formal context, we define the set of concepts of, concepts(c), the set of implications that holds in, holds(c), and the set of models of the implications hold in, models(c). concepts(c) = pair: [finite_set[t1], finite_set[t2]] concept?(c)(pair) holds(c) = imp: implication(c) holds(c)(imp) models(c)(s) = Z: finite_set[t2] Z attrib(c) respects(c)(z,s) And we prove the relationship between the models of the implications that hold in and the concepts of : Theorem 2 The set of models of the implications that hold in C is the set of the intents of concepts of C. models_holds: THEOREM models(c)(holds(c))=intents_set_concepts(c)(concepts(c)) Let us note that to specify this result in PVS we have used the expression intents set concepts(c)(s), that obtains the set of intents of the concepts of Ë. Using this property, we can to obtain the concepts of a finite formal context from the models of the implications that hold in, and vice versa. Nevertheless, the number of implications that hold in a context can be very large and contain many trivial implications. Therefore, it is natural to look for a small set of implications from which everything else could be derived: an implicational base. Specifically, an implication ½ ¾ follows (semantically) from a set of implications Ä in if each subset of attributes of respecting Ä also respects ½ ¾. So, given formal context, we look for a set of implications Ä having the following properties: 8

7 Verification of FCA sound: each implication in Ä holds in sound(c)(l): bool = (imp:(l)): holds(c)(imp) complete: each implication that holds in follows from Ä complete(c)(l):bool=(imp:implication(c)):holds(c)(imp)µfollows(c)(imp,l) non redundant: no implication in Ä follows from other implications in Ä non_redundant(c)(l):bool=(imp:(l)): NOT follows(c)(imp, remove(imp, L)) Guigess and Duquenne [6] have proved that for every context with a finite set of attributes, there is a sound, complete and non redundant set of implications, called stem base or Duquenne Guigues Basis. For this purpose, it defines a pseudo intent as a set of attributes Ë which is not an intent (Ë ¼¼ Ë), but contains the closure (È ¼¼ ) of every proper subset that is also pseudo intent. In our example: is a pseudo intent, since ¼¼ ÌÓ Ê is not a pseudo intent, since Ê ¼¼ Ë ½ Ë Ë ¼ Ê Ì Ó Ê, but the only proper subset of Ê that is a pseudo intent is, and ¼¼ ÌÓ Ê We specify this definition in PVS, providing the cardinal of Ë as measure function to prove its termination: pseudo_intent?(c)(s: finite_set[t2]): RECURSIVE bool = S intent(c)(extent(c)(s)) (P: finite_set[t2]): P S pseudo_intent?(c)(p) => intent(c)(extent(c)(p) S MEASURE card(s) Then, we establish the following theorem: Theorem 3 For every finite formal context, the set of implications Ä Ë Ë ¼¼ Ë is pseudo intent of is sound, non redundant and complete (Ä is called stem base). In our example, the stem base is ÌÓ ÌÓÊ Ë Ì ÖÌÓ Ë Ê Ì ÖÌÓË Ê Ì Ö Ì Ó and a slightly modified version of the stem base is ÌÓ ÌÓÊ Ë Ì Ö Ë Ê Ì ÖÌÓ obtained by Ë Ë ¼¼ Ò Ë Ë is pseudo intent of Let us note that the specification in PVS of the notion of pseudo intent is more general than the definition itself. Therefore, in order to describe the stem base, we only consider the subsets of the attributes that verify the PVS definition of pseudo intent: 9

8 J.A. Alonso, J. Borrego, M.J. Hidalgo, F.J. Martín Mateos and J.L. Ruiz Reina pseudointents(c): set[finite_set[t2]] = S: finite_set[t2] S attrib(c) pseudo_intent?(c)(s) stem_base(c): set[implication(c)] = LET fun = (S:finite_set[T2]): (# premise:= S, conclusion:= intent(c)(extent(c)(s)) #) IN image(fun)(pseudointents(c)) We have proved the stem base properties in PVS in a similar way as they are stated in [6]: stem_base_sound: LEMMA sound(c)(stem_base(c)) stem_base_non_redundant: LEMMA non_redundant(c)(stem_base(c)) stem_base_complete: LEMMA complete(c)(stem_base(c)) The stem base is not the only implicational base, but it plays a special role. Among other reasons, there is not other implicational base with less elements and it can be algorithmically obtained. Moreover, to built the stem base we only need an algorithm to compute the pseudo intents of. We are going to specify such an algorithm, based on the recursive definition of pseudo intent. Here, we are interested in constructing an abstract and correct specification of this algorithm and later, we will transform it into another executable specification, preserving its correctness. Hence, if gen pseudo intents(c) computes the set of pseudo intents of, we can compute the stem base, as follows: gen_stem_base(c): set[implication_gen] = LET fun = (Y: finite_set[t2]): (# premise:= Y, conclusion:= intent(c)(extent(c)(y)) #) IN image(fun)(gen_pseudo_intents(c)) Let us describe the generation of the pseudo intents of Ç Áµ stepwise, according to its cardinal: Step ¼: generate the pseudo intents of cardinal ¼: Ë ¼ if is pseudo intent and Ë ¼, otherwise. Step ½: generate the pseudo intents of cardinal up to ½, Ë ½, from the pseudo intents of cardinal up to Ë. For this, we introduce a restricted notion of pseudo intent. That is, È is a pseudo intent restricted to a set of sets Ë if È È ¼¼ and for every ¾Ë,if È then ¼¼ È.Now, the set Ë ½ can be defined as follows: Ë ½ Ë È È ½ È is a pseudo intent restricted to Ë. Thus, if subsets card(r,k) is the set Ê and pseudo restricts(c)(g,s) is È ¾ È is pseudo intent restricted to S, the specification of this algorithm in PVS is the following: gen_pseudo_intents(c): set[finite_set[t2]] = gen_pseudo_intents_aux(c)(attrib(c), 0, ) gen_pseudo_intents_aux(c)(a: finite_set[t2], k:upto(card(a)), S: finite_set[finite_set[t2]]): RECURSIVE set[finite_set[t2]] = LET NS = pseudo_restricts(c)(subsets_card(a,k), S) IN IF k = card(a) THEN S NS ELSE gen_pseudo_intents_aux(c)(a, k+1, S NS) ENDIF MEASURE card(a)-k 10

9 Verification of FCA Finally, we prove the correctness of this specification in PVS, that is, gen pseudo intents(c) builds the set of pseudo intents of. correct_gen_pseudo_intents: THEOREM gen_pseudo_intents(c) = pseudointents(c) PROOF. The proof of gen pseudo intents(c) pseudointents(c) is obtained by establishing that if ¾ gen pseudo intents aux(a,k,ë), (i.e, has been introduced in the step ), then and is pseudo intent. We prove it using card(a)-k as measure induction. In order to prove pseudointents(c) gen pseudo intents(c), we establish by induction to, that if and has not been introduced in the step, then is not a pseudo intent. 4. Executable specifications in FCA The PVS specification language is designed to be expressive rather than executable, since it allows quantification over infinite domains and higher order equalities. However, a wide fragment of PVS is executable, by generating Common Lisp code from PVS, that can be evaluated in the PVS ground evaluator [10]. Specifically, the executable expressions are those that do not contain free variables, uninterpreted functions or constants, quantification over infinite domains and equality between higher order terms. The specifications we have constructed in the previous section use operations over finite sets, which are not executable. Our main goal in this section is to show how to transform the specifications of FCA built so far into their respective executable specifications. Based on the notion of refinement of data types used for Dold [4] and Jones [7] we have done the following: We have built a theory, REF, establishing the general notions of refinements and its main properties. We have established a refinement of the theory of finite sets, FS, by the theory of lists, FS-REF. We have used both theories to refine the theory FCA from the previous section by the theory FCA- REF, in which the specifications of the functions are executables. Finally, we have instantiated the parameters of the theory FCA-REF and we have evaluated some examples, included in the theory FCA-EXAMPLE. We can see the relationship between these theories in the following diagram: REF FS FCA FS REF FCA REF FCA EXAMPLE 4.1. Refinement of data types. Given the types Ì and Ê, we say that a data refinement of type Ì by the type Ê is a surjective application Ê Ì. 11

10 J.A. Alonso, J. Borrego, M.J. Hidalgo, F.J. Martín Mateos and J.L. Ruiz Reina f: VAR [R->T] refinement?(f): bool = (t:t): (r:r): f(r) = t Intuitively, this function provides the relationship between abstract values and their representations. It is clear that there is at least one representation, non necessarily unique, for any abstract value. It is easy to see that a type can be refined stepwise by sequential composition of refinements. We have proved that, if Ê Ì is a data refinement of Ì by Ê and É Ê is a data refinenemt of Ê by É, then Æ É Ì is a data refinement of Ì by É. On the other hand, let us consider a function ÓÔ Ì ½ Ì ¾ and let us suppose that we have the data refinements given by the functions ½ Ê ½ Ì ½ and ¾ Ê ¾ Ì ¾. Then, we say that the function ÓÔ Ö Ê ½ Ê ¾ is a refinement of ÓÔ if the following diagram commutes: ÓÔ Ì ½ Ì¾ ½ ¾ Ê ½ ÓÔ Ö op: VAR [T1 -> T2] op_ref: VAR [R1 -> R2] refinement_op?(op,op_ref): bool = (r1:r1): op(f1(r1)) = f2(op_ref(r1)) Ê ¾ In essence, we require that ÓÔ Ö has the same behaviour as ÓÔ. Being more precise, let us suppose that we have established a correctness theorem for ÓÔ, in terms of pre and post conditions. That is, a theorem like Ý ¾ Ì ½ µ Ýµ µ Ý ÓÔ Ýµµ where is the precondition and is the postcondition. Then, if ÓÔ Ö Ö and Ö are refinements of ÓÔ and, respectively, we have proved that Ü ¾ Ê ½ µ Ö Üµ µ Ö ÜÓÔ Ö Üµµ which is just the correctness theorem corresponding to ÓÔ Ö. Moreover, a specification of an algorithm is normally built combining some other specifications of functions. Hence, we hope that for constructing a refinement of a specification of an algorithm it is enough to construct a refinement of each function used in it, and to replace it. In that sense, we have proved that if ÓÔ½ Ö and ÓÔ¾ Ö are refinements of ÓÔ½ y ÓÔ¾, respectively, then ÓÔ¾ Ö Æ ÓÔ½ Ö is a refinement of ÓÔ¾ Æ ÓÔ½: ÓÔ ½ ÓÔ ¾ Ì ½ Ì¾ Ì ½ ¾ ÓÔ ½Ö ÓÔ ¾Ö Ê ¾ Ê Ê ½ 4.2. Executable refinements of operations over finite sets A natural way to represent finite sets is by means of lists. First, we can think in representing a finite set by a list with the same elements of, although with possibly repeated elements. However, the elements of could also be finite sets, or another type that was necessary to refine to. Hence, let us consider 12

11 Verification of FCA a data refinement given by Ê Ì. From this, we can establish a data refinement of type finite sets with elements in Ì by the type lists with elements in Ê, by the function c(f):list[r] finite set[t], defined as follows: c(f)(l: list[r]): RECURSIVE finite_set[t] = CASES l OF null:, cons(x, l1): add(f(x), c(f)(l1)) ENDCASES MEASURE length(l) We are interested in building refinements corresponding to the operations over finite sets specified in the theory FCA, developed in section 3. For this, we have used operations on lists such that simulate the behaviour of analogous operations on finite sets. We have proved that the built in operations null?, cons and append are refinements of empty?, add and union, respectively. As for the membership relation, we have to notice that if is injective, the operation member from lists is a refinement of the operation member of finite sets. Otherwise, that is not true. Thus, we have defined a new membership relation, with respect to an equivalent relation, and we have proved that, if is the equivalence relation induced in Ê by (Ö ½ Ö ¾ Ö ½ µ Ö ¾ µ), member( ) is a refinement of member. The specification in PVS is the following: member(rel:(equivalence?[r]))(x:r, l:list[r]): RECURSIVE bool = CASES l OF null: false, cons(a, l2): rel(a, x) member(rel)(x, l2) ENDCASES MEASURE length(l) Note that if the relation Ö ½ µ Ö ¾ µ is executable, then the operation member( ) is also executable. We have followed the same process for the refinements of inter, subset?, remove, rest and card. Without going into more details, we show a table with the names of operations over lists which are refinements of the corresponding operations over finite sets: finite sets lists finite sets lists empty? null? add cons member member( ) union append intersection inter( ) remove remove l( ) choose car rest rest l( ) subset? subset? l( ) card card l( ) image map Union Append powerset powerset ref subsets card subsets card Ð In case that we have finite sets which elements are also finite sets, the data refinement is given by c(c(f)):list[list[r]] finite set[finite set[t]] and the relation member( µ ) is not executable because the expression c(f)(l1) = c(f)(l2). In order to solve this problem we have defined an equivalence relation equal l?(f) in list[r], whose evaluability only depends on evaluability of. This relation also verify equal l?(f)(l1, l2) c(f)(l1) = c(f)(l2). Thus, we could consider that given a data refinement Ê Ì, for each operation over finite sets with elements in Ì, we have an operation over lists in Ê which it is its refinement. Now, we are going to use them to construct in PVS a refinement of data and operations of the theory FCA specified in section. 13

12 J.A. Alonso, J. Borrego, M.J. Hidalgo, F.J. Martín Mateos and J.L. Ruiz Reina 4.3. Executable specifications in FCA In order to construct an executable refinement of the theory FCA, we have to build a data refinement for each type or data type in FCA, and an executable refinement of each function specified in FCA. Next, we show a scheme of this process, applied to the function that computes the stem base of a finite formal context. 1. The types FFCT and FFC are refined by the types FFCT_ref: TYPE = [# obj_ref: list[t1], attrib_ref: (cons?[t2]), relation_ref: list[[t1, T2]] #] FFC_ref: TYPE = R: FFCT_ref LET Ob_ref = obj_ref(r), A_ref = attrib_ref(r), Re_ref=relation_ref(R) IN every( (pair): proj_1(pair) ¾ obj_ref(r) & proj_2(pair) ¾ attrib_ref(r))(re_ref) by the data refinement trans(r: FFCT_ref): FFCT[T1,T2] = (# obj:= c(id[t1])(obj_ref(r)), attrib:= c(id[t2])(attrib_ref(r)), relation:= c(id[[t1,t2]])(relation_ref(r)) #) The types implication gen and implication are refined by the types R: VAR FFC_ref[T1, T2] implication_gen_ref: TYPE = [# premise_ref: list[t2], conclusion_ref: list[t2] #] implication_ref(r): TYPE = imp_r: implication_gen_ref subset?_l(premise_ref(imp_r), attrib_ref(r)) subset?_l(conclusion_ref(imp_r), attrib_ref(r)) by the data refinement transf_imp_gen(imp_g_r:implication_gen_ref):implication_gen[t1, T2]= (# premise:= c(id[t2])(premise_ref(imp_g_r)), conclusion:= c(id[t2])(conclusion_ref(imp_g_r)) #) 2. A refinement of the specification to compute the set of pseudo intents is built replacing each function by its refinement: gen_pseudo_intents_aux_ref(r)(ls: list[t2], k:upto(cardinal_l[t2, T2](ls)), S: list[list[t2]]): RECURSIVE list[list[t2]] = LET NSL=pseudo_restricts_ref(R)(subsets_card_l(ls,k),S) IN IF k = cardinal_l(ls) THEN append(s, NSL) ELSE gen_pseudo_intents_aux_ref(r)(ls, k+1, append(s, NSL)) ENDIF MEASURE cardinal_l(ls)-k gen_pseudo_intents_ref(r): list[list[t2]] = gen_pseudo_intents_aux_ref(r)(attrib_ref(r), 0, null) Let us remark the similarity of this specification with the specification showed in page. 14

13 Verification of FCA 3. The corresponding correctness theorem is proved using that a refinement preserves the correctness correct_gen_pseudo_intents_ref: THEOREM pseudo_intents_set_ref?(r, gen_pseudo_intents_ref(r)) pseudo_intents_set_ref?(r, LL): bool = (l1:list[t2]): pseudo_intent_ref?(r)(l1) (l2:list[t2]): l2 ¾ LL equal_l?(l1, l2) 4. Finally, a refinement of the specification to compute the stem base is: gen_stem_base_ref(r): list[implication_gen_ref[t1, T2]] = LET fun = ( Y: list[t2]): (# premise_ref:= Y, conclusion_ref:= intent_ref(r)(extent_ref(r)(y)) #) IN map(fun)(gen_pseudo_intents_ref(r)) In order to show a computation of the stem base, we represent in PVS the formal context of page : IMPORTING FCA_REF[string, string] obj: list[string] = (: "S1", "S2", "S3", "S4", "S5", "S6" :) atr: list[string] = (: "R", "S", "Tr", "To", E :) rel: list[[string, string]] = (: ("S1", "R"), ("S1", "S"), ("S1", "Tr"),..., ("S6", "To") :) C: FFC_ref[string, string] = (# obj_ref:= obj, attrib_ref:= atr, relation_ref:= rel #) and executing the function gen stem base ref in the pvs ground evaluator, we obtain: <GndEval> "gen_stem_base_ref(c)" ==> (: (# premise_ref := (: :), conclusion_ref := (: "To" :) #), (# premise_ref := (: "E", "To" :), conclusion_ref := (: "R", "S", "Tr", "To", "E" :) #), (# premise_ref := (: "To", "Tr", "S", "R" :), conclusion_ref := (: "R", "S", "Tr", "To", "E" :) #) :) Let us remark that the base obtained is the same of the stem base cited at page : ÌÓ ÌÓÊ Ë Ì ÖÌÓ Ë Ê Ì ÖÌÓË Ê Ì Ö Ì Ó 5. Conclusions We have presented in this paper an experience on formalization, validation and correct implementation of a mathematical concept (FCA) using PVS, introducing the basic concepts and results that allows us to verify related algorithms in the theory. As a first step, we have developed the theory using finite sets. The advantage of using finite sets is that the formalization is more natural in the sense that definitions, theorems and their proofs are very close to the ones of the source theory. Since one of our goals is to obtain formally verified executable algorithms, we have developed a methodology that allows us to obtain executable specifications (using lists) from specifications done using finite sets. For that purpose, we have formalized the notions of type refinement and operation refinement. This is a generic methodology which we have applied successfully to obtain executable specifications of algorithms of other theories. 15

14 J.A. Alonso, J. Borrego, M.J. Hidalgo, F.J. Martín Mateos and J.L. Ruiz Reina References [1] Arévalo, G.; Mens, T. Analysing Object-Oriented Application Frameworks Using Concept Analysis Workshop on Managing Specialization/Generalization Hierarchies, LNCS 2426, pp , September 2002 [2] Cole, R.; Eklund, P.; Wlaker, D. Using Conceptual Scaling in Formal Concept Analysis for Knowledge and Data Discovery in Medical Texts International Symposium on Knowledge Retrieval, Use, and Storage for Efficiency, pp , 1997 [3] Cole, R.; Stumme, G. CEM: A Conceptual Manager 7th International Conference on Conceptual Structures, ICCS 2000, Springer Verlag, 2000 [4] Dold, A. Formal Software Development using Generic Development Steps PhD thesis. Ulm University, [5] Erdmann, M. Formal Concept Analysis to learn from the Sisyphus-III Material Gaines, Musen (eds.) Proceedings of the 11th knowledge Acquisition for Knowledge Based Systems Workshop (KAN 98) Banff, Canada, 1998 [6] Ganter, B. and Wille, R. Formal Concept Analysis. Springer Verlag, [7] Jones, C. B. Systematic Software Development using VDM Prentice Hall International, The University, Manchester, U.K., second edition, [8] PVS (Prototype Verification System), See [9] Schwarzweller, C. Mizar Formalization of Concept Lattices. In Mechanize Mathematics and its Applications, vol. 1, 2000 [10] Shankar, N. Efficiently executing PVS. Technical report, SRI International, November [11] Stumme, G.; Wille, R. and Wille, U. Conceptual Knowledge Discovery in Databases Using Formal Concept Analysis Methods. In: J. M. Zytkow, M. Quafofou (eds.): Principles of Data Mining and Knowledge Discovery. Proc. 2nd European Symposium on PKDD 98, LNAI 1510, Springer, Heidelberg 1998, J.A. Alonso, J. Borrego, M.J. Hidalgo, F.J. Martín Mateos and J.L. Ruiz Reina Dpto. de Ciencias de la Computación e Inteligencia Artificial E.T.S. de Ingeniería Informática Universidad de Sevilla Avd. Reina Mercedes, s/n Sevilla Spain 16

CHAPTER 7 GENERAL PROOF SYSTEMS

CHAPTER 7 GENERAL PROOF SYSTEMS 1 Introduction Proof systems are built to prove statements. They can be thought as an inference machine with special statements, called provable statements, or sometimes

Mathematics for Computer Science/Software Engineering. Notes for the course MSM1F3 Dr. R. A. Wilson

Mathematics for Computer Science/Software Engineering Notes for the course MSM1F3 Dr. R. A. Wilson October 1996 Chapter 1 Logic Lecture no. 1. We introduce the concept of a proposition, which is a statement

4 Domain Relational Calculus

4 Domain Relational Calculus We now present two relational calculi that we will compare to RA. First, what is the difference between an algebra and a calculus? The usual story is that the algebra RA is

Completing Description Logic Knowledge Bases using Formal Concept Analysis

Completing Description Logic Knowledge Bases using Formal Concept Analysis Franz Baader, 1 Bernhard Ganter, 1 Barış Sertkaya, 1 and Ulrike Sattler 2 1 TU Dresden, Germany and 2 The University of Manchester,

The Language of Mathematics

CHPTER 2 The Language of Mathematics 2.1. Set Theory 2.1.1. Sets. set is a collection of objects, called elements of the set. set can be represented by listing its elements between braces: = {1, 2, 3,

A Propositional Dynamic Logic for CCS Programs

A Propositional Dynamic Logic for CCS Programs Mario R. F. Benevides and L. Menasché Schechter {mario,luis}@cos.ufrj.br Abstract This work presents a Propositional Dynamic Logic in which the programs are

Software Verification and Testing. Lecture Notes: Z I

Software Verification and Testing Lecture Notes: Z I Motivation so far: we have seen that properties of software systems can be specified using first-order logic, set theory and the relational calculus

A set is a Many that allows itself to be thought of as a One. (Georg Cantor)

Chapter 4 Set Theory A set is a Many that allows itself to be thought of as a One. (Georg Cantor) In the previous chapters, we have often encountered sets, for example, prime numbers form a set, domains

The countdown problem

JFP 12 (6): 609 616, November 2002. c 2002 Cambridge University Press DOI: 10.1017/S0956796801004300 Printed in the United Kingdom 609 F U N C T I O N A L P E A R L The countdown problem GRAHAM HUTTON

Sets, Relations and Functions

Sets, Relations and Functions Eric Pacuit Department of Philosophy University of Maryland, College Park pacuit.org epacuit@umd.edu ugust 26, 2014 These notes provide a very brief background in discrete

Lecture 16 : Relations and Functions DRAFT

CS/Math 240: Introduction to Discrete Mathematics 3/29/2011 Lecture 16 : Relations and Functions Instructor: Dieter van Melkebeek Scribe: Dalibor Zelený DRAFT In Lecture 3, we described a correspondence

INTRODUCTORY SET THEORY

M.Sc. program in mathematics INTRODUCTORY SET THEORY Katalin Károlyi Department of Applied Analysis, Eötvös Loránd University H-1088 Budapest, Múzeum krt. 6-8. CONTENTS 1. SETS Set, equal sets, subset,

Discrete Mathematics, Chapter 5: Induction and Recursion

Discrete Mathematics, Chapter 5: Induction and Recursion Richard Mayr University of Edinburgh, UK Richard Mayr (University of Edinburgh, UK) Discrete Mathematics. Chapter 5 1 / 20 Outline 1 Well-founded

OPERATIONAL TYPE THEORY by Adam Petcher Prepared under the direction of Professor Aaron Stump A thesis presented to the School of Engineering of

WASHINGTON NIVERSITY SCHOOL OF ENGINEERING AND APPLIED SCIENCE DEPARTMENT OF COMPTER SCIENCE AND ENGINEERING DECIDING JOINABILITY MODLO GROND EQATIONS IN OPERATIONAL TYPE THEORY by Adam Petcher Prepared

SETS, RELATIONS, AND FUNCTIONS

September 27, 2009 and notations Common Universal Subset and Power Set Cardinality Operations A set is a collection or group of objects or elements or members (Cantor 1895). the collection of the four

Non-deterministic Semantics and the Undecidability of Boolean BI

1 Non-deterministic Semantics and the Undecidability of Boolean BI DOMINIQUE LARCHEY-WENDLING, LORIA CNRS, Nancy, France DIDIER GALMICHE, LORIA Université Henri Poincaré, Nancy, France We solve the open

Math 3000 Running Glossary

Math 3000 Running Glossary Last Updated on: July 15, 2014 The definition of items marked with a must be known precisely. Chapter 1: 1. A set: A collection of objects called elements. 2. The empty set (

Chapter 8 The Enhanced Entity- Relationship (EER) Model

Chapter 8 The Enhanced Entity- Relationship (EER) Model Copyright 2011 Pearson Education, Inc. Publishing as Pearson Addison-Wesley Chapter 8 Outline Subclasses, Superclasses, and Inheritance Specialization

facultad de informática universidad politécnica de madrid On the Confluence of CHR Analytical Semantics Rémy Haemmerlé Universidad olitécnica de Madrid & IMDEA Software Institute, Spain TR Number CLI2/2014.0

(Refer Slide Time: 1:41)

Discrete Mathematical Structures Dr. Kamala Krithivasan Department of Computer Science and Engineering Indian Institute of Technology, Madras Lecture # 10 Sets Today we shall learn about sets. You must

MAT2400 Analysis I. A brief introduction to proofs, sets, and functions

MAT2400 Analysis I A brief introduction to proofs, sets, and functions In Analysis I there is a lot of manipulations with sets and functions. It is probably also the first course where you have to take

Verifying Specifications with Proof Scores in CafeOBJ

Verifying Specifications with Proof Scores in CafeOBJ FUTATSUGI, Kokichi 二 木 厚 吉 Chair of Language Design Graduate School of Information Science Japan Advanced Institute of Science and Technology (JAIST)

Computing and Informatics, Vol. 20, 2001,????, V 2006-Nov-6 UPDATES OF LOGIC PROGRAMS Ján Šefránek Department of Applied Informatics, Faculty of Mathematics, Physics and Informatics, Comenius University,

SOLUTIONS TO ASSIGNMENT 1 MATH 576

SOLUTIONS TO ASSIGNMENT 1 MATH 576 SOLUTIONS BY OLIVIER MARTIN 13 #5. Let T be the topology generated by A on X. We want to show T = J B J where B is the set of all topologies J on X with A J. This amounts

Sets and functions. {x R : x > 0}.

Sets and functions 1 Sets The language of sets and functions pervades mathematics, and most of the important operations in mathematics turn out to be functions or to be expressible in terms of functions.

Domain Theory: An Introduction

Domain Theory: An Introduction Robert Cartwright Rebecca Parsons Rice University This monograph is an unauthorized revision of Lectures On A Mathematical Theory of Computation by Dana Scott [3]. Scott

Deterministic Discrete Modeling

Deterministic Discrete Modeling Formal Semantics of Firewalls in Isabelle/HOL Cornelius Diekmann, M.Sc. Dr. Heiko Niedermayer Prof. Dr.-Ing. Georg Carle Lehrstuhl für Netzarchitekturen und Netzdienste

PROPERTECHNIQUEOFSOFTWARE INSPECTIONUSING GUARDED COMMANDLANGUAGE

International Journal of Computer ScienceandCommunication Vol. 2, No. 1, January-June2011, pp. 153-157 PROPERTECHNIQUEOFSOFTWARE INSPECTIONUSING GUARDED COMMANDLANGUAGE Neeraj Kumar Singhania University,

A Simple Observation Concerning Contraction Mappings

Revista Colombiana de Matemáticas Volumen 46202)2, páginas 229-233 A Simple Observation Concerning Contraction Mappings Una simple observación acerca de las contracciones German Lozada-Cruz a Universidade

Formal Engineering for Industrial Software Development

Shaoying Liu Formal Engineering for Industrial Software Development Using the SOFL Method With 90 Figures and 30 Tables Springer Contents Introduction 1 1.1 Software Life Cycle... 2 1.2 The Problem 4 1.3

[Refer Slide Time: 05:10]

Principles of Programming Languages Prof: S. Arun Kumar Department of Computer Science and Engineering Indian Institute of Technology Delhi Lecture no 7 Lecture Title: Syntactic Classes Welcome to lecture

Termination Checking: Comparing Structural Recursion and Sized Types by Examples

Termination Checking: Comparing Structural Recursion and Sized Types by Examples David Thibodeau Decemer 3, 2011 Abstract Termination is an important property for programs and is necessary for formal proofs

Relations Graphical View

Relations Slides by Christopher M. Bourke Instructor: Berthe Y. Choueiry Introduction Recall that a relation between elements of two sets is a subset of their Cartesian product (of ordered pairs). A binary

Automated Program Behavior Analysis

Automated Program Behavior Analysis Stacy Prowell sprowell@cs.utk.edu March 2005 SQRL / SEI Motivation: Semantics Development: Most engineering designs are subjected to extensive analysis; software is

REAL ANALYSIS I HOMEWORK 2

REAL ANALYSIS I HOMEWORK 2 CİHAN BAHRAN The questions are from Stein and Shakarchi s text, Chapter 1. 1. Prove that the Cantor set C constructed in the text is totally disconnected and perfect. In other

Logic & Discrete Math in Software Engineering (CAS 701) Dr. Borzoo Bonakdarpour

Logic & Discrete Math in Software Engineering (CAS 701) Background Dr. Borzoo Bonakdarpour Department of Computing and Software McMaster University Dr. Borzoo Bonakdarpour Logic & Discrete Math in SE (CAS

Parametric Domain-theoretic models of Linear Abadi & Plotkin Logic

Parametric Domain-theoretic models of Linear Abadi & Plotkin Logic Lars Birkedal Rasmus Ejlers Møgelberg Rasmus Lerchedahl Petersen IT University Technical Report Series TR-00-7 ISSN 600 600 February 00

MATH20302 Propositional Logic. Mike Prest School of Mathematics Alan Turing Building Room

MATH20302 Propositional Logic Mike Prest School of Mathematics Alan Turing Building Room 1.120 mprest@manchester.ac.uk April 10, 2015 Contents I Propositional Logic 3 1 Propositional languages 4 1.1 Propositional

Classical Analysis I

Classical Analysis I 1 Sets, relations, functions A set is considered to be a collection of objects. The objects of a set A are called elements of A. If x is an element of a set A, we write x A, and if

SQLMutation: A tool to generate mutants of SQL database queries

SQLMutation: A tool to generate mutants of SQL database queries Javier Tuya, Mª José Suárez-Cabal, Claudio de la Riva University of Oviedo (SPAIN) {tuya cabal claudio} @ uniovi.es Abstract We present a

Sets and Cardinality Notes for C. F. Miller

Sets and Cardinality Notes for 620-111 C. F. Miller Semester 1, 2000 Abstract These lecture notes were compiled in the Department of Mathematics and Statistics in the University of Melbourne for the use

Announcements. CompSci 230 Discrete Math for Computer Science Sets. Introduction to Sets. Sets

CompSci 230 Discrete Math for Computer Science Sets September 12, 2013 Prof. Rodger Slides modified from Rosen 1 nnouncements Read for next time Chap. 2.3-2.6 Homework 2 due Tuesday Recitation 3 on Friday

the lemma. Keep in mind the following facts about regular languages:

CPS 2: Discrete Mathematics Instructor: Bruce Maggs Assignment Due: Wednesday September 2, 27 A Tool for Proving Irregularity (25 points) When proving that a language isn t regular, a tool that is often

Specification and Analysis of Contracts Lecture 1 Introduction

Specification and Analysis of Contracts Lecture 1 Introduction Gerardo Schneider gerardo@ifi.uio.no http://folk.uio.no/gerardo/ Department of Informatics, University of Oslo SEFM School, Oct. 27 - Nov.

This asserts two sets are equal iff they have the same elements, that is, a set is determined by its elements.

3. Axioms of Set theory Before presenting the axioms of set theory, we first make a few basic comments about the relevant first order logic. We will give a somewhat more detailed discussion later, but

Software Engineering

Software Engineering Lecture 04: The B Specification Method Peter Thiemann University of Freiburg, Germany SS 2013 Peter Thiemann (Univ. Freiburg) Software Engineering SWT 1 / 50 The B specification method

Lecture 1. Basic Concepts of Set Theory, Functions and Relations

September 7, 2005 p. 1 Lecture 1. Basic Concepts of Set Theory, Functions and Relations 0. Preliminaries...1 1. Basic Concepts of Set Theory...1 1.1. Sets and elements...1 1.2. Specification of sets...2

2.5 Gaussian Elimination

page 150 150 CHAPTER 2 Matrices and Systems of Linear Equations 37 10 the linear algebra package of Maple, the three elementary 20 23 1 row operations are 12 1 swaprow(a,i,j): permute rows i and j 3 3

Module 7. Software Engineering Issues. Version 2 EE IIT, Kharagpur 1

Module 7 Software Engineering Issues Version 2 EE IIT, Kharagpur 1 Lesson 34 Requirements Analysis and Specification Version 2 EE IIT, Kharagpur 2 Specific Instructional Objectives At the end of this lesson,

We give a basic overview of the mathematical background required for this course.

1 Background We give a basic overview of the mathematical background required for this course. 1.1 Set Theory We introduce some concepts from naive set theory (as opposed to axiomatic set theory). The

Introducing Formal Methods. Software Engineering and Formal Methods

Introducing Formal Methods Formal Methods for Software Specification and Analysis: An Overview 1 Software Engineering and Formal Methods Every Software engineering methodology is based on a recommended

Course 221: Analysis Academic year , First Semester

Course 221: Analysis Academic year 2007-08, First Semester David R. Wilkins Copyright c David R. Wilkins 1989 2007 Contents 1 Basic Theorems of Real Analysis 1 1.1 The Least Upper Bound Principle................

Degrees that are not degrees of categoricity

Degrees that are not degrees of categoricity Bernard A. Anderson Department of Mathematics and Physical Sciences Gordon State College banderson@gordonstate.edu www.gordonstate.edu/faculty/banderson Barbara

Notes. Sets. Notes. Introduction II. Notes. Definition. Definition. Slides by Christopher M. Bourke Instructor: Berthe Y. Choueiry.

Sets Slides by Christopher M. Bourke Instructor: Berthe Y. Choueiry Spring 2006 Computer Science & Engineering 235 Introduction to Discrete Mathematics Sections 1.6 1.7 of Rosen cse235@cse.unl.edu Introduction

CARDINALITY, COUNTABLE AND UNCOUNTABLE SETS PART ONE

CARDINALITY, COUNTABLE AND UNCOUNTABLE SETS PART ONE With the notion of bijection at hand, it is easy to formalize the idea that two finite sets have the same number of elements: we just need to verify

F. ABTAHI and M. ZARRIN. (Communicated by J. Goldstein)

Journal of Algerian Mathematical Society Vol. 1, pp. 1 6 1 CONCERNING THE l p -CONJECTURE FOR DISCRETE SEMIGROUPS F. ABTAHI and M. ZARRIN (Communicated by J. Goldstein) Abstract. For 2 < p

Discrete Mathematics. Hans Cuypers. October 11, 2007

Hans Cuypers October 11, 2007 1 Contents 1. Relations 4 1.1. Binary relations................................ 4 1.2. Equivalence relations............................. 6 1.3. Relations and Directed Graphs.......................

Type Classes with Functional Dependencies

Appears in Proceedings of the 9th European Symposium on Programming, ESOP 2000, Berlin, Germany, March 2000, Springer-Verlag LNCS 1782. Type Classes with Functional Dependencies Mark P. Jones Department

Solutions to In-Class Problems Week 4, Mon.

Massachusetts Institute of Technology 6.042J/18.062J, Fall 05: Mathematics for Computer Science September 26 Prof. Albert R. Meyer and Prof. Ronitt Rubinfeld revised September 26, 2005, 1050 minutes Solutions

Two approaches to the integration of heterogeneous data warehouses

Distrib Parallel Databases (2008) 23: 69 97 DOI 10.1007/s10619-007-7022-z Two approaches to the integration of heterogeneous data warehouses Riccardo Torlone Published online: 23 December 2007 Springer

Chapter 2 Mathematical Background

Chapter 2 Mathematical Background We start this chapter with a summary of basic concepts and notations for sets and first-order logic formulas, which will be used in the rest of the book. Our aim is to

Formal Specification Methods for the Improvement of Process and Product Quality

Formal Specification Methods for the Improvement of Process and Product Quality Satish Mishra 1 and Prof Holger Schlingloff 12 1 Institut für Informatik, HU Berlin, 2 Fraunhofer FIRST, Berlin Rudower Chaussee

Lecture 4 -- Sets, Relations, Functions 1

Lecture 4 Sets, Relations, Functions Pat Place Carnegie Mellon University Models of Software Systems 17-651 Fall 1999 Lecture 4 -- Sets, Relations, Functions 1 The Story So Far Formal Systems > Syntax»

Outline. Database Theory. Perfect Query Optimization. Turing Machines. Question. Definition VU , SS Trakhtenbrot s Theorem

Database Theory Database Theory Outline Database Theory VU 181.140, SS 2016 4. Trakhtenbrot s Theorem Reinhard Pichler Institut für Informationssysteme Arbeitsbereich DBAI Technische Universität Wien 4.

Sets and Subsets. Countable and Uncountable

Sets and Subsets Countable and Uncountable Reading Appendix A Section A.6.8 Pages 788-792 BIG IDEAS Themes 1. There exist functions that cannot be computed in Java or any other computer language. 2. There

Arkansas Tech University MATH 4033: Elementary Modern Algebra Dr. Marcel B. Finan

Arkansas Tech University MATH 4033: Elementary Modern Algebra Dr. Marcel B. Finan 3 Binary Operations We are used to addition and multiplication of real numbers. These operations combine two real numbers

High Integrity Software Conference, Albuquerque, New Mexico, October 1997.

Meta-Amphion: Scaling up High-Assurance Deductive Program Synthesis Steve Roach Recom Technologies NASA Ames Research Center Code IC, MS 269-2 Moffett Field, CA 94035 sroach@ptolemy.arc.nasa.gov Jeff Van

POWER SETS AND RELATIONS

POWER SETS AND RELATIONS L. MARIZZA A. BAILEY 1. The Power Set Now that we have defined sets as best we can, we can consider a sets of sets. If we were to assume nothing, except the existence of the empty

Continuous first-order model theory for metric structures Lecture 2 (of 3)

Continuous first-order model theory for metric structures Lecture 2 (of 3) C. Ward Henson University of Illinois Visiting Scholar at UC Berkeley October 21, 2013 Hausdorff Institute for Mathematics, Bonn

Tableaux Modulo Theories using Superdeduction

Tableaux Modulo Theories using Superdeduction An Application to the Verification of B Proof Rules with the Zenon Automated Theorem Prover Mélanie Jacquel 1, Karim Berkani 1, David Delahaye 2, and Catherine

THE SEARCH FOR NATURAL DEFINABILITY IN THE TURING DEGREES

THE SEARCH FOR NATURAL DEFINABILITY IN THE TURING DEGREES ANDREW E.M. LEWIS 1. Introduction This will be a course on the Turing degrees. We shall assume very little background knowledge: familiarity with

Computing basics. Ruurd Kuiper

Computing basics Ruurd Kuiper October 29, 2009 Overview (cf Schaum Chapter 1) Basic computing science is about using computers to do things for us. These things amount to processing data. The way a computer

Database Management System Dr. S. Srinath Department of Computer Science & Engineering Indian Institute of Technology, Madras Lecture No.

Database Management System Dr. S. Srinath Department of Computer Science & Engineering Indian Institute of Technology, Madras Lecture No. # 8 Functional Dependencies and Normal Forms Two different kinds

Proofs by induction, Alphabet, Strings [1] Proofs by Induction

Proofs by induction, Alphabet, Strings [1] Proofs by Induction Proposition: If f(0) = 0 and f(n + 1) = f(n) + n + 1 then, for all n N, we have f(n) = n(n + 1)/2 Let S(n) be f(n) = n(n + 1)/2 We prove S(0)

CmSc 175 Discrete Mathematics Lesson 10: SETS A B, A B

CmSc 175 Discrete Mathematics Lesson 10: SETS Sets: finite, infinite, : empty set, U : universal set Describing a set: Enumeration = {a, b, c} Predicates = {x P(x)} Recursive definition, e.g. sequences

Verifying security protocols using theorem provers

1562 2007 79-86 79 Verifying security protocols using theorem provers Miki Tanaka National Institute of Information and Communications Technology Koganei, Tokyo 184-8795, Japan Email: miki.tanaka@nict.go.jp

Integrating Benders decomposition within Constraint Programming

Integrating Benders decomposition within Constraint Programming Hadrien Cambazard, Narendra Jussien email: {hcambaza,jussien}@emn.fr École des Mines de Nantes, LINA CNRS FRE 2729 4 rue Alfred Kastler BP

4. CLASSES OF RINGS 4.1. Classes of Rings class operator A-closed Example 1: product Example 2:

4. CLASSES OF RINGS 4.1. Classes of Rings Normally we associate, with any property, a set of objects that satisfy that property. But problems can arise when we allow sets to be elements of larger sets

Chapter 1. Sigma-Algebras. 1.1 Definition

Chapter 1 Sigma-Algebras 1.1 Definition Consider a set X. A σ algebra F of subsets of X is a collection F of subsets of X satisfying the following conditions: (a) F (b) if B F then its complement B c is

SMALL SKEW FIELDS CÉDRIC MILLIET

SMALL SKEW FIELDS CÉDRIC MILLIET Abstract A division ring of positive characteristic with countably many pure types is a field Wedderburn showed in 1905 that finite fields are commutative As for infinite

1. LINEAR EQUATIONS. A linear equation in n unknowns x 1, x 2,, x n is an equation of the form

1. LINEAR EQUATIONS A linear equation in n unknowns x 1, x 2,, x n is an equation of the form a 1 x 1 + a 2 x 2 + + a n x n = b, where a 1, a 2,..., a n, b are given real numbers. For example, with x and

Is Sometime Ever Better Than Alway?

Is Sometime Ever Better Than Alway? DAVID GRIES Cornell University The "intermittent assertion" method for proving programs correct is explained and compared with the conventional method. Simple conventional

Mathematics for Computer Science

Mathematics for Computer Science Lecture 2: Functions and equinumerous sets Areces, Blackburn and Figueira TALARIS team INRIA Nancy Grand Est Contact: patrick.blackburn@loria.fr Course website: http://www.loria.fr/~blackbur/courses/math

Random vs. Structure-Based Testing of Answer-Set Programs: An Experimental Comparison

Random vs. Structure-Based Testing of Answer-Set Programs: An Experimental Comparison Tomi Janhunen 1, Ilkka Niemelä 1, Johannes Oetsch 2, Jörg Pührer 2, and Hans Tompits 2 1 Aalto University, Department

Chapter 1 LOGIC AND PROOF

Chapter 1 LOGIC AND PROOF To be able to understand mathematics and mathematical arguments, it is necessary to have a solid understanding of logic and the way in which known facts can be combined to prove

Semantics of UML class diagrams

1 Otto-von-Guericke Universität Magdeburg, Germany April 26, 2016 Sets Definition (Set) A set is a collection of objects. The basic relation is membership: x A (x is a member of A) The following operations

Extending Semantic Resolution via Automated Model Building: applications

Extending Semantic Resolution via Automated Model Building: applications Ricardo Caferra Nicolas Peltier LIFIA-IMAG L1F1A-IMAG 46, Avenue Felix Viallet 46, Avenue Felix Viallei 38031 Grenoble Cedex FRANCE

Determination of the normalization level of database schemas through equivalence classes of attributes

Computer Science Journal of Moldova, vol.17, no.2(50), 2009 Determination of the normalization level of database schemas through equivalence classes of attributes Cotelea Vitalie Abstract In this paper,

CS 3719 (Theory of Computation and Algorithms) Lecture 4

CS 3719 (Theory of Computation and Algorithms) Lecture 4 Antonina Kolokolova January 18, 2012 1 Undecidable languages 1.1 Church-Turing thesis Let s recap how it all started. In 1990, Hilbert stated a

Relational Algebra The Relational Algebra and Relational Calculus. Relational Query Languages

The Relational Algebra and Relational Calculus Relational Algebra Slide 6-2 Relational Query Languages Query languages Allow manipulation and retrieval of data Not like programming languages Not intend

FUZZY CLUSTERING ANALYSIS OF DATA MINING: APPLICATION TO AN ACCIDENT MINING SYSTEM

International Journal of Innovative Computing, Information and Control ICIC International c 0 ISSN 34-48 Volume 8, Number 8, August 0 pp. 4 FUZZY CLUSTERING ANALYSIS OF DATA MINING: APPLICATION TO AN ACCIDENT

Chapter II. Controlling Cars on a Bridge

Chapter II. Controlling Cars on a Bridge 1 Introduction The intent of this chapter is to introduce a complete example of a small system development. During this development, you will be made aware of the

Automata and Languages

Automata and Languages Computational Models: An idealized mathematical model of a computer. A computational model may be accurate in some ways but not in others. We shall be defining increasingly powerful

Regular Languages and Finite Automata

Regular Languages and Finite Automata 1 Introduction Hing Leung Department of Computer Science New Mexico State University Sep 16, 2010 In 1943, McCulloch and Pitts [4] published a pioneering work on a

µz An Efficient Engine for Fixed points with Constraints

µz An Efficient Engine for Fixed points with Constraints Kryštof Hoder, Nikolaj Bjørner, and Leonardo de Moura Manchester University and Microsoft Research Abstract. The µz tool is a scalable, efficient

TREES IN SET THEORY SPENCER UNGER

TREES IN SET THEORY SPENCER UNGER 1. Introduction Although I was unaware of it while writing the first two talks, my talks in the graduate student seminar have formed a coherent series. This talk can be

Discrete Maths. Philippa Gardner. These lecture notes are based on previous notes by Iain Phillips.

Discrete Maths Philippa Gardner These lecture notes are based on previous notes by Iain Phillips. This short course introduces some basic concepts in discrete mathematics: sets, relations, and functions.

Verifying Semantic of System Composition for an Aspect-Oriented Approach

2012 International Conference on System Engineering and Modeling (ICSEM 2012) IPCSIT vol. 34 (2012) (2012) IACSIT Press, Singapore Verifying Semantic of System Composition for an Aspect-Oriented Approach