论文标题
部分可观测时空混沌系统的无模型预测
Runtime Enforcement of Hyperproperties
论文作者
论文摘要
执行机制在运行时监视不希望的行为的反应系统，并纠正系统的输出，以防其违反给定规范。在本文中，我们研究了超代理的执行问题，即将多个计算痕迹相互关联的属性。 We elaborate the notion of sound and transparent enforcement mechanisms for hyperproperties in two trace input models: 1) the parallel trace input model, where the number of traces is known a-priori and all traces are produced and processed in parallel and 2) the sequential trace input model, where traces are processed sequentially and no a-priori bound on the number of traces is known.对于这两种模型，我们都会研究以普遍量化的超ltl的公式（用于超普罗代理的时间逻辑）中给出的规格的执法算法。对于平行模型，我们描述了基于平等游戏的执行机制。对于顺序模型，我们表明执行通常是不可决定的，并且目前是对问题进行合理简化的算法（部分保证或对安全性能的限制）。此外，我们报告了平行模型的原型实现的实验结果。
An enforcement mechanism monitors a reactive system for undesired behavior at runtime and corrects the system's output in case it violates the given specification. In this paper, we study the enforcement problem for hyperproperties, i.e., properties that relate multiple computation traces to each other. We elaborate the notion of sound and transparent enforcement mechanisms for hyperproperties in two trace input models: 1) the parallel trace input model, where the number of traces is known a-priori and all traces are produced and processed in parallel and 2) the sequential trace input model, where traces are processed sequentially and no a-priori bound on the number of traces is known. For both models, we study enforcement algorithms for specifications given as formulas in universally quantified HyperLTL, a temporal logic for hyperproperties. For the parallel model, we describe an enforcement mechanism based on parity games. For the sequential model, we show that enforcement is in general undecidable and present algorithms for reasonable simplifications of the problem (partial guarantees or the restriction to safety properties). Furthermore, we report on experimental results of our prototype implementation for the parallel model.
