Results 1  10
of
14
A theory of timed automata
, 1999
"... Model checking is emerging as a practical tool for automated debugging of complex reactive systems such as embedded controllers and network protocols (see [23] for a survey). Traditional techniques for model checking do not admit an explicit modeling of time, and are thus, unsuitable for analysis of ..."
Abstract

Cited by 1975 (31 self)
 Add to MetaCart
Model checking is emerging as a practical tool for automated debugging of complex reactive systems such as embedded controllers and network protocols (see [23] for a survey). Traditional techniques for model checking do not admit an explicit modeling of time, and are thus, unsuitable for analysis of realtime systems whose correctness depends on relative magnitudes of different delays. Consequently, timed automata [7] were introduced as a formal notation to model the behavior of realtime systems. Its definition provides a simple way to annotate statetransition graphs with timing constraints using finitely many realvalued clock variables. Automated analysis of timed automata relies on the construction of a finite quotient of the infinite space of clock valuations. Over the years, the formalism has been extensively studied leading to many results establishing connections to circuits and logic, and much progress has been made in developing verification algorithms, heuristics, and tools. This paper provides a survey of the theory of timed automata, and their role in specification and verification of realtime systems.
Metrics for Labelled Markov Systems
, 2001
"... The notion of process equivalence of probabilistic processes is sensitive to the exact probabilities of transitions. Thus, a slight change in the transition probabilities will result in two equivalent processes being deemed no longer equivalent. This instability is due to the quantitative nature of ..."
Abstract

Cited by 48 (10 self)
 Add to MetaCart
The notion of process equivalence of probabilistic processes is sensitive to the exact probabilities of transitions. Thus, a slight change in the transition probabilities will result in two equivalent processes being deemed no longer equivalent. This instability is due to the quantitative nature of probabilistic processes. In a situation where the process behaviour has a quantitative aspect there should be a more robust approach to process equivalence. This paper studies a metric between labelled Markov processes. This metric has the property that processes are at zero distance if and only if they are bisimilar. The metric is inspired by earlier work on logics for characterizing bisimulation and is related, in spirit, to the Hutchinson metric.
Metrics for Labelled Markov Processes
, 2003
"... The notion of process equivalence of probabilistic processes is sensitive to the exact probabilities of transitions. Thus, a slight change in the transition probabilities will result in two equivalent processes being deemed no longer equivalent. This instability is due to the quantitative nature ..."
Abstract

Cited by 45 (10 self)
 Add to MetaCart
The notion of process equivalence of probabilistic processes is sensitive to the exact probabilities of transitions. Thus, a slight change in the transition probabilities will result in two equivalent processes being deemed no longer equivalent. This instability is due to the quantitative nature of probabilistic processes. In a situation where the process behaviour has a quantitative aspect there should be a more robust approach to process equivalence. This paper studies a metric between labelled Markov processes. This metric has the property that processes are at zero distance if and only if they are bisimilar. The metric is inspired by earlier work on logics for characterizing bisimulation and is related, in spirit, to the Kantorovich metric.
Stochastic processes as concurrent constraint programs
 In Symposium on Principles of Programming Languages
, 1999
"... ) Vineet Gupta Radha Jagadeesan Prakash Panangaden y vgupta@mail.arc.nasa.gov radha@cs.luc.edu prakash@cs.mcgill.ca Caelum Research Corporation Dept. of Math. and Computer Sciences School of Computer Science NASA Ames Research Center Loyola UniversityLake Shore Campus McGill University Moffe ..."
Abstract

Cited by 29 (1 self)
 Add to MetaCart
) Vineet Gupta Radha Jagadeesan Prakash Panangaden y vgupta@mail.arc.nasa.gov radha@cs.luc.edu prakash@cs.mcgill.ca Caelum Research Corporation Dept. of Math. and Computer Sciences School of Computer Science NASA Ames Research Center Loyola UniversityLake Shore Campus McGill University Moffett Field CA 94035, USA Chicago IL 60626, USA Montreal, Quebec, Canada Abstract This paper describes a stochastic concurrent constraint language for the description and programming of concurrent probabilistic systems. The language can be viewed both as a calculus for describing and reasoning about stochastic processes and as an executable language for simulating stochastic processes. In this language programs encode probability distributions over (potentially infinite) sets of objects. We illustrate the subtleties that arise from the interaction of constraints, random choice and recursion. We describe operational semantics of these programs (programs are run by sampling random choices), deno...
Approximating Continuous Markov Processes
, 2000
"... Markov processes with continuous state spaces arise in the analysis of stochastic physical systems or stochastic hybrid systems. The standard logical and algorithmic tools for reasoning about discrete (finitestate) systems are, of course, inadequate for reasoning about such systems. In this work we ..."
Abstract

Cited by 9 (3 self)
 Add to MetaCart
Markov processes with continuous state spaces arise in the analysis of stochastic physical systems or stochastic hybrid systems. The standard logical and algorithmic tools for reasoning about discrete (finitestate) systems are, of course, inadequate for reasoning about such systems. In this work we develop three related ideas for making such reasoning principles applicable to continuous systems. ffl We show how to approximate continuous systems by a countable family of finitestate probabilistic systems, we can reconstruct the full system from these finite approximants, ffl we define a metric between processes and show that the approximants converge in this metric to the full process, ffl we show that reasoning about properties definable in a rich logic can be carried out in terms of the approximants. The systems that we consider are Markov processes where the state space is continuous but the time steps are discrete. We allow such processes to interact with the environment by syn...
Probabilistic resource failure in realtime process algebra
 IN PROCEEDINGS CONCUR 98
, 1998
"... ..."
Explanationbased Scenario Generation for Reactive System Models
 Automated Software Engineering
, 1998
"... Reactive systems control many useful and complex realworld devices. Toolsupportedspeci#cation modeling helps software engineers design such systems correctly. One such tool is a scenario generator, which constructs an input event sequence for the specmodel that reaches a state satisfying given cri ..."
Abstract

Cited by 5 (0 self)
 Add to MetaCart
Reactive systems control many useful and complex realworld devices. Toolsupportedspeci#cation modeling helps software engineers design such systems correctly. One such tool is a scenario generator, which constructs an input event sequence for the specmodel that reaches a state satisfying given criteria. It can uncover counterexamples to desired safety properties, explain feature interactions in concrete terms to requirements analysts, and even provide online help to end users learning how to use a system. However, while exhaustive search algorithms work in limited domains, the problem is highly intractable for the functionally rich models that correspond naturally to complex systems engineers wish to design. This paper describes a novel heuristic approach to the problem that is applicable to a large class of in#nite state reactive systems. The key ideaistopiecetogether scenarios that achieve subgoals into a single scenario achieving the conjunction of the subgoals. The scenarios are ...
Modeldriven Development and Analysis of High Assurance Systems
, 2006
"... Capturing, refining, and analyzing requirements are some of the most challenging tasks in building a software system. How well these tasks are performed significantly impacts the quality of the developed software system. The difficulty of these tasks is greatly exacerbated for the software of embedd ..."
Abstract

Cited by 2 (2 self)
 Add to MetaCart
Capturing, refining, and analyzing requirements are some of the most challenging tasks in building a software system. How well these tasks are performed significantly impacts the quality of the developed software system. The difficulty of these tasks is greatly exacerbated for the software of embedded systems, since these systems are commonly used for critical applications, have to operate reliably for long periods of time, and need to adhere to realtime constraints. In this dissertation, we introduce a modeling and analysis approach for centralized and distributed realtime embedded systems that supports the use of formal specifications and model checking. The approach comprises four main elements: First, we developed specification patterns for specifying realtime properties to aid the developer in formally specifying critical realtime system properties. Second, to enhance the accessibility of the specification patterns, we developed natural language representation and specification capabilities for qualitative and realtime properties. Third, based on industrial project information, we developed object analysis patterns to facilitate the creation of UML analysis models of embedded systems. Fourth, we defined an iterative modeling and analysis
Bounded Model Checking of Compositional Processes
 In Proceedings of the Second IEEE International Symposium on Theoretical Aspects of Software Engineering
, 2008
"... Verification techniques like SATbased bounded model checking have been successfully applied to a variety of system models. Applying bounded model checking to compositional process algebras is, however, not a trivial task. One challenge is that the number of system states for process algebra models ..."
Abstract

Cited by 2 (1 self)
 Add to MetaCart
Verification techniques like SATbased bounded model checking have been successfully applied to a variety of system models. Applying bounded model checking to compositional process algebras is, however, not a trivial task. One challenge is that the number of system states for process algebra models is not statically known, whereas exploring the full state space is computationally expensive. This paper presents a compositional encoding of hierarchical processes as SAT problems and then applies stateoftheart SAT solvers for bounded model checking. The encoding avoids exploring the full state space for complex systems so as to deal with state space explosion. We developed an automated analyzer which combines complementing model checking techniques (i.e., bounded model checking and explicit onthefly model checking) to validate system models against eventbased temporal properties. The experiment results show the analyzer handles large systems. 1.