Michael Winikoff

Why they're in the Luvo100

Winikoff addresses an important limit of formal verification: a tool can check a property without establishing that it is the right property. His work on deriving verification properties helps connect mathematical checks to the behaviour a system is actually meant to deliver.