Most of the properties established during verification are either invariants or depend crucially on invariants. The effectiveness
of automated formal verification is therefore sensitive to the ease with which invariants, even trivial ones, can be automatically
deduced. While the strongest invariant can be defined as the least fixed point of the strongest post-condition of a transition
system starting with the set of initial states, this symbolic computation rarely converges. We present a method for invariant
generation and strengthening that relies on the simultaneous construction of least and greatest fixed points, restricted widening
and narrowing, and quantifier elimination. The effectiveness of the method is demonstrated on a number of examples.
The research described in this paper was supported in part by NSF contract CCR- 9712383 and DARPA/AFRL contract F33615-00-C-3043.