Tech Weeklies Theorem proving: What, how and why Isabelle, HOL 08, 21 Jan van Brügge

Modern software development means building on existing foundations. You do not need to write your own binary search tree because there is already a library for that. But with these foundations being so important, how can we be sure that they are correct After all, the more projects depend on a library, the worse would be the fallout for bugs, be it a semantic bug where it does not do the right thing or a security bug that might put your users data in jeopardy. Todays answer to this problem is testing. But this has flaws. It is simply impossible to show the absence of bugs with tests, as they can only test a finite subset of the possible inputs. This is where theorem proving comes into play. We can verify key properties of our system not only for some inputs, but for all possible inputs. In this talk I will start with the basics and show how you can get your feet wet with Isabelle, HOL, a theorem proving assistant developed by the Technical University of Munich. I will also show some m