07.01.2013 Views

Lecture Notes in Computer Science 3472

Lecture Notes in Computer Science 3472

Lecture Notes in Computer Science 3472

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

co<strong>in</strong><br />

co<strong>in</strong><br />

e<br />

c<br />

co<strong>in</strong><br />

co<strong>in</strong> τ<br />

5 Preorder Relations 141<br />

co<strong>in</strong><br />

coffee<br />

Fig. 5.12. Two vend<strong>in</strong>g mach<strong>in</strong>es (e ⊑R c; e �⊑FT c).<br />

So we f<strong>in</strong>d that refusal preorder is coarser than observation preorder. This also<br />

allows us to compare refusal and test<strong>in</strong>g preorders. Indeed, recall that the <strong>in</strong>f<strong>in</strong>ite<br />

processes shown <strong>in</strong> Figure 5.6 on page 133 are equivalent under observation<br />

preorder (and then accord<strong>in</strong>g to Proposition 5.12 under refusal preorder). We<br />

have shown <strong>in</strong> the previous section that these processes are not equivalent under<br />

test<strong>in</strong>g preorder. Given that on the other hand refusal preorder dist<strong>in</strong>guishes<br />

between processes <strong>in</strong>dist<strong>in</strong>guishable <strong>in</strong> test<strong>in</strong>g preorder, we have<br />

Corollary 5.13. The preorders ⊑T and ⊑R are not comparable.<br />

We note here an apparent contradiction with results given elsewhere [Phi87]<br />

that the two preorders are comparable. This contradiction turns out to be caused<br />

by the unfortunate (and <strong>in</strong>correct) term<strong>in</strong>ology used <strong>in</strong> [Phi87].<br />

In practical terms, refusal preorder is clearly more appeal<strong>in</strong>g than observation<br />

preorder. Arguably, it is also more appeal<strong>in</strong>g than test<strong>in</strong>g preorder, because of<br />

the simplicity of tests; <strong>in</strong>deed, we elim<strong>in</strong>ated all nondeterm<strong>in</strong>ism from the tests<br />

<strong>in</strong> O1 and O2 (and thus <strong>in</strong> O). The only possible practical downside (of refusal<br />

preorder compared with test<strong>in</strong>g preorder) is that we need the ability to block<br />

actions.<br />

5.7 Failure Trace Test<strong>in</strong>g<br />

In refusal test<strong>in</strong>g, whenever we observe a process that cannot cont<strong>in</strong>ue because<br />

we blocked all of its possible actions we have a failed test. This seems a reasonable<br />

test<strong>in</strong>g strategy, but we end up with surpris<strong>in</strong>g preorder relations because of it.<br />

Consider for example the rather <strong>in</strong>structive example [Lan90] of the two vend<strong>in</strong>g<br />

mach<strong>in</strong>es c and e depicted <strong>in</strong> Figure 5.12. Mach<strong>in</strong>e c may give us coffee if we

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!