{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,7,30]],"date-time":"2025-07-30T14:09:27Z","timestamp":1753884567128,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":40,"publisher":"ACM","license":[{"start":{"date-parts":[[2019,3,25]],"date-time":"2019-03-25T00:00:00Z","timestamp":1553472000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1615102"],"award-info":[{"award-number":["CNS-1615102"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,3,25]]},"DOI":"10.1145\/3302424.3303947","type":"proceedings-article","created":{"date-parts":[[2019,3,22]],"date-time":"2019-03-22T13:10:03Z","timestamp":1553260203000},"page":"1-15","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["Teaching Rigorous Distributed Systems With Efficient Model Checking"],"prefix":"10.1145","author":[{"given":"Ellis","family":"Michael","sequence":"first","affiliation":[{"name":"University of Washington"}]},{"given":"Doug","family":"Woos","sequence":"additional","affiliation":[{"name":"University of Washington"}]},{"given":"Thomas","family":"Anderson","sequence":"additional","affiliation":[{"name":"University of Washington"}]},{"given":"Michael D.","family":"Ernst","sequence":"additional","affiliation":[{"name":"University of Washington"}]},{"given":"Zachary","family":"Tatlock","sequence":"additional","affiliation":[{"name":"University of Washington"}]}],"member":"320","published-online":{"date-parts":[[2019,3,25]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"DSLabs. https:\/\/github.com\/emichael\/dslabs.  DSLabs. https:\/\/github.com\/emichael\/dslabs."},{"key":"e_1_3_2_1_2_1","unstructured":"Project Lombok. https:\/\/projectlombok.org.  Project Lombok. https:\/\/projectlombok.org."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/BF01782772"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/800221.806707"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3149.214121"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/1040305.1040315"},{"key":"e_1_3_2_1_8_1","volume-title":"Proceedings of the 4th USENIX Conference on Networked Systems Design and Implementation (NSDI '07)","author":"Geels D.","year":"2007","unstructured":"D. Geels , G. Altekar , P. Maniatis , T. Roscoe , and I. Stoica . Friday: Global comprehension for distributed replay . In Proceedings of the 4th USENIX Conference on Networked Systems Design and Implementation (NSDI '07) , Cambridge, MA , 2007 . D. Geels, G. Altekar, P. Maniatis, T. Roscoe, and I. Stoica. Friday: Global comprehension for distributed replay. In Proceedings of the 4th USENIX Conference on Networked Systems Design and Implementation (NSDI '07), Cambridge, MA, 2007."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"crossref","DOI":"10.1007\/3-540-60761-7","volume-title":"Partial-Order Methods for the Verification of Concurrent Systems: An Approach to the State-Explosion Problem","author":"Godefroid P.","year":"1996","unstructured":"P. Godefroid . Partial-Order Methods for the Verification of Concurrent Systems: An Approach to the State-Explosion Problem . Springer-Verlag , Berlin, Heidelberg , 1996 . P. Godefroid. Partial-Order Methods for the Verification of Concurrent Systems: An Approach to the State-Explosion Problem. Springer-Verlag, Berlin, Heidelberg, 1996."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/263699.263717"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043582"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/79147.79161"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/2815400.2815428"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.5555\/1624775.1624804"},{"key":"e_1_3_2_1_15_1","volume-title":"The SPIN Model Checker: Primer and Reference Manual","author":"Holzman G.","year":"2004","unstructured":"G. Holzman . The SPIN Model Checker: Primer and Reference Manual . Addison-Wesley , 2004 . G. Holzman. The SPIN Model Checker: Primer and Reference Manual. Addison-Wesley, 2004."},{"key":"e_1_3_2_1_16_1","volume-title":"Proceedings of the 4th USENIX Conference on Networked Systems Design and Implementation (NSDI '07)","author":"Killian C.","year":"2007","unstructured":"C. Killian , J. W. Anderson , R. Jhala , and A. Vahdat . Life, death, and the critical transition: Finding liveness bugs in systems code . In Proceedings of the 4th USENIX Conference on Networked Systems Design and Implementation (NSDI '07) , Cambridge, MA , 2007 . C. Killian, J. W. Anderson, R. Jhala, and A. Vahdat. Life, death, and the critical transition: Finding liveness bugs in systems code. In Proceedings of the 4th USENIX Conference on Networked Systems Design and Implementation (NSDI '07), Cambridge, MA, 2007."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1250734.1250755"},{"key":"e_1_3_2_1_18_1","unstructured":"L. Lamport. Foundations of Azure Cosmos DB. https:\/\/www.youtube.com\/watch?v=L_PPKyAsR3w.  L. Lamport. Foundations of Azure Cosmos DB. https:\/\/www.youtube.com\/watch?v=L_PPKyAsR3w."},{"key":"e_1_3_2_1_19_1","unstructured":"L. Lamport. The TLA home page. https:\/\/lamport.azurewebsites.net\/tla\/tla.html.  L. Lamport. The TLA home page. https:\/\/lamport.azurewebsites.net\/tla\/tla.html."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/359545.359563"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/279227.279229"},{"key":"e_1_3_2_1_22_1","volume-title":"Proceedings of the 11th USENIX Conference on Operating Systems Design and Implementation (OSDI '14)","author":"Leesatapornwongsa T.","year":"2014","unstructured":"T. Leesatapornwongsa , M. Hao , P. Joshi , J. F. Lukman , and H. S. Gunawi . SAMC: Semantic-aware model checking for fast discovery of deep bugs in cloud systems . In Proceedings of the 11th USENIX Conference on Operating Systems Design and Implementation (OSDI '14) , Broomfield, CO , 2014 . T. Leesatapornwongsa, M. Hao, P. Joshi, J. F. Lukman, and H. S. Gunawi. SAMC: Semantic-aware model checking for fast discovery of deep bugs in cloud systems. In Proceedings of the 11th USENIX Conference on Operating Systems Design and Implementation (OSDI '14), Broomfield, CO, 2014."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/567532.567547"},{"key":"e_1_3_2_1_25_1","volume-title":"Proceedings of the 4th USENIX Conference on Networked Systems Design and Implementation (NSDI '07)","author":"Liu X.","year":"2007","unstructured":"X. Liu , W. Lin , A. Pan , and Z. Zhang . WiDS checker: Combating bugs in distributed systems . In Proceedings of the 4th USENIX Conference on Networked Systems Design and Implementation (NSDI '07) , Cambridge, MA , 2007 . X. Liu, W. Lin, A. Pan, and Z. Zhang. WiDS checker: Combating bugs in distributed systems. In Proceedings of the 4th USENIX Conference on Networked Systems Design and Implementation (NSDI '07), Cambridge, MA, 2007."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/41840.41852"},{"key":"e_1_3_2_1_27_1","first-page":"219","article-title":"An introduction to input\/output automata","volume":"2","author":"Lynch N. A.","year":"1989","unstructured":"N. A. Lynch and M. R. Tuttle . An introduction to input\/output automata . CWI Quarterly , 2 : 219 -- 246 , 1989 . N. A. Lynch and M. R. Tuttle. An introduction to input\/output automata. CWI Quarterly, 2:219--246, 1989.","journal-title":"CWI Quarterly"},{"key":"e_1_3_2_1_28_1","volume-title":"Proceedings of the 31st International Symposium on Distributed Computing (DISC '17)","author":"Michael E.","year":"2017","unstructured":"E. Michael , D. R. K. Ports , N. K. Sharma , and A. Szekeres . Recovering shared objects without stable storage . In Proceedings of the 31st International Symposium on Distributed Computing (DISC '17) , Vienna, Austria , 2017 . E. Michael, D. R. K. Ports, N. K. Sharma, and A. Szekeres. Recovering shared objects without stable storage. In Proceedings of the 31st International Symposium on Distributed Computing (DISC '17), Vienna, Austria, 2017."},{"key":"e_1_3_2_1_29_1","unstructured":"R. Morris. 6.824: Distributed systems. http:\/\/nil.csail.mit.edu\/6.824\/2015\/ 2015.  R. Morris. 6.824: Distributed systems. http:\/\/nil.csail.mit.edu\/6.824\/2015\/ 2015."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.5555\/1060289.1060297"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/2699417"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/62546.62549"},{"key":"e_1_3_2_1_33_1","volume-title":"July","author":"Ongaro D.","year":"2015","unstructured":"D. Ongaro . Bug in single-server membership changes. https:\/\/groups.google.com\/forum\/#!topic\/raft-dev\/t4xj6dJTP6E , July 2015 . D. Ongaro. Bug in single-server membership changes. https:\/\/groups.google.com\/forum\/#!topic\/raft-dev\/t4xj6dJTP6E, July 2015."},{"key":"e_1_3_2_1_34_1","volume-title":"Proceedings of the 2014 USENIX Annual Technical Conference (USENIX ATC '14)","author":"Ongaro D.","year":"2014","unstructured":"D. Ongaro and J. Ousterhout . In search of an understandable consensus algorithm . In Proceedings of the 2014 USENIX Annual Technical Conference (USENIX ATC '14) , Philadelphia, PA , 2014 . D. Ongaro and J. Ousterhout. In search of an understandable consensus algorithm. In Proceedings of the 2014 USENIX Annual Technical Conference (USENIX ATC '14), Philadelphia, PA, 2014."},{"key":"e_1_3_2_1_35_1","volume-title":"CMU Computer Science: a 25th Anniversary Commemorative","author":"Ousterhout J.","year":"1991","unstructured":"J. Ousterhout . The role of distributed state . In CMU Computer Science: a 25th Anniversary Commemorative , 1991 . J. Ousterhout. The role of distributed state. In CMU Computer Science: a 25th Anniversary Commemorative, 1991."},{"key":"e_1_3_2_1_36_1","volume-title":"Proceedings of the 13th USENIX Symposium on Networked Systems Design and Implementation (NSDI '16)","author":"Scott C.","year":"2016","unstructured":"C. Scott , A. Panda , V. Brajkovic , G. Necula , A. Krishnamurthy , and S. Shenker . Minimizing faulty executions of distributed systems . In Proceedings of the 13th USENIX Symposium on Networked Systems Design and Implementation (NSDI '16) , Santa Clara, CA , 2016 . C. Scott, A. Panda, V. Brajkovic, G. Necula, A. Krishnamurthy, and S. Shenker. Minimizing faulty executions of distributed systems. In Proceedings of the 13th USENIX Symposium on Networked Systems Design and Implementation (NSDI '16), Santa Clara, CA, 2016."},{"key":"e_1_3_2_1_37_1","unstructured":"Synergy Research Group. Cloud growth rate increased again in Q1. https:\/\/www.srgresearch.com\/articles\/cloud-growth-rate-increased-again-q1-amazon-maintains-market-share-dominance.  Synergy Research Group. Cloud growth rate increased again in Q1. https:\/\/www.srgresearch.com\/articles\/cloud-growth-rate-increased-again-q1-amazon-maintains-market-share-dominance."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.5555\/786768.786967"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/2737924.2737958"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/1731060.1731062"},{"key":"e_1_3_2_1_41_1","volume-title":"Proceedings of the 6th USENIX Symposium on Networked Systems Design and Implementation (NSDI '09)","author":"Yang J.","year":"2009","unstructured":"J. Yang , T. Chen , M. Wu , Z. Xu , X. Liu , H. Lin , M. Yang , F. Long , L. Zhang , and L. Zhou . MoDist: Transparent model checking of unmodified distributed systems . In Proceedings of the 6th USENIX Symposium on Networked Systems Design and Implementation (NSDI '09) , Boston, MA , 2009 . J. Yang, T. Chen, M. Wu, Z. Xu, X. Liu, H. Lin, M. Yang, F. Long, L. Zhang, and L. Zhou. MoDist: Transparent model checking of unmodified distributed systems. In Proceedings of the 6th USENIX Symposium on Networked Systems Design and Implementation (NSDI '09), Boston, MA, 2009."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/2185376.2185383"}],"event":{"name":"EuroSys '19: Fourteenth EuroSys Conference 2019","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems"],"location":"Dresden Germany","acronym":"EuroSys '19"},"container-title":["Proceedings of the Fourteenth EuroSys Conference 2019"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3302424.3303947","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3302424.3303947","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3302424.3303947","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T01:01:48Z","timestamp":1750208508000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3302424.3303947"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,3,25]]},"references-count":40,"alternative-id":["10.1145\/3302424.3303947","10.1145\/3302424"],"URL":"https:\/\/doi.org\/10.1145\/3302424.3303947","relation":{},"subject":[],"published":{"date-parts":[[2019,3,25]]},"assertion":[{"value":"2019-03-25","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}