Abstract: The present invention relates to a method and device for model resolution and its use for detecting attacks against computer systems. The device comprises adapter software for translating the information from the log file, formulated in the specific language of the machine, into a language understandable by the interpreter, an interpreter receiving the information from the adapter and receiving the formulation of the specification in the temporal logic in a specification formula in order to expand this formula and fill in the table and the stack of worked subformulas described above resulting from the scanning of the machine's log file, and a clause processing algorithm for resolving the Horn clauses using the information from the table and the stack of worked subformulas, this clause processing algorithm generating an output file or generating an action.

Abstract: The invention relates to a method for automatic proving theorems describing physical systems in first order logic. This method is used to produce complex systems and is implemented with the aid of a computer in whose memory a theorem to be proved is represented by at least one binary decision diagram (BDD). The method seeks to reduce the BDD to a constant T, symbolizing truth, by a substitution, by constructing and exploring a search tree of possible substitutions. The tree is constructed by minimizing the branching factor and is explored by maximizing in accordance with the Shannon theory, the information gain obtained at each node of the search tree.