论文标题
痕量检查CPS属性:桥接网络物理差距
Trace-Checking CPS Properties: Bridging the Cyber-Physical Gap
论文作者
论文摘要
网络物理系统结合了软件和物理组件。针对CPS的规范驱动的跟踪检查工具通常为用户提供一种指示语言以表达感兴趣的要求,以及一个自动过程,以检查这些要求是否在CPS的执行轨迹上保留。尽管有几种CPS的规范语言,但它们通常不足以表达能够允许与软件和物理组件及其交互有关的复杂CPS属性的规范。 在本文中,我们提出了(i)信号(HLS)的混合逻辑,这是一种基于逻辑的语言,允许对复杂的CPS要求进行规范,以及(ii)Theodore,一种有效的基于SMT的跟踪检查过程。此过程减少了检查CPS要求对执行跟踪的问题,以检查SMT公式的满意度。 我们通过在卫星领域使用代表性的工业案例研究来评估我们的贡献。我们通过考虑我们的案例研究的212条要求评估了HLS的表现力。 HLS可以表达所有212条要求。我们还通过运行747个痕量要求组合的痕量检查程序来评估西奥多的适用性。西奥多能够在74.5%的案件中作出判决。最后,我们将HLS和Theodore与文献中的其他规范语言和跟踪检查工具进行了比较。我们的结果表明,从实际的角度来看,我们的方法在表现力和性能之间提供了更好的权衡。
Cyber-physical systems combine software and physical components. Specification-driven trace-checking tools for CPS usually provide users with a specification language to express the requirements of interest, and an automatic procedure to check whether these requirements hold on the execution traces of a CPS. Although there exist several specification languages for CPS, they are often not sufficiently expressive to allow the specification of complex CPS properties related to the software and the physical components and their interactions. In this paper, we propose (i) the Hybrid Logic of Signals (HLS), a logic-based language that allows the specification of complex CPS requirements, and (ii) ThEodorE, an efficient SMT-based trace-checking procedure. This procedure reduces the problem of checking a CPS requirement over an execution trace, to checking the satisfiability of an SMT formula. We evaluated our contributions by using a representative industrial case study in the satellite domain. We assessed the expressiveness of HLS by considering 212 requirements of our case study. HLS could express all the 212 requirements. We also assessed the applicability of ThEodorE by running the trace-checking procedure for 747 trace-requirement combinations. ThEodorE was able to produce a verdict in 74.5% of the cases. Finally, we compared HLS and ThEodorE with other specification languages and trace-checking tools from the literature. Our results show that, from a practical standpoint, our approach offers a better trade-off between expressiveness and performance.