9,416 research outputs found
Modal Interface Automata
De Alfaro and Henzinger's Interface Automata (IA) and Nyman et al.'s recent
combination IOMTS of IA and Larsen's Modal Transition Systems (MTS) are
established frameworks for specifying interfaces of system components. However,
neither IA nor IOMTS consider conjunction that is needed in practice when a
component shall satisfy multiple interfaces, while Larsen's MTS-conjunction is
not closed and Bene\v{s} et al.'s conjunction on disjunctive MTS does not treat
internal transitions. In addition, IOMTS-parallel composition exhibits a
compositionality defect. This article defines conjunction (and also
disjunction) on IA and disjunctive MTS and proves the operators to be
'correct', i.e., the greatest lower bounds (least upper bounds) wrt. IA- and
resp. MTS-refinement. As its main contribution, a novel interface theory called
Modal Interface Automata (MIA) is introduced: MIA is a rich subset of IOMTS
featuring explicit output-must-transitions while input-transitions are always
allowed implicitly, is equipped with compositional parallel, conjunction and
disjunction operators, and allows a simpler embedding of IA than Nyman's. Thus,
it fixes the shortcomings of related work, without restricting designers to
deterministic interfaces as Raclet et al.'s modal interface theory does.Comment: 28 page
A multi-paradigm language for reactive synthesis
This paper proposes a language for describing reactive synthesis problems
that integrates imperative and declarative elements. The semantics is defined
in terms of two-player turn-based infinite games with full information.
Currently, synthesis tools accept linear temporal logic (LTL) as input, but
this description is less structured and does not facilitate the expression of
sequential constraints. This motivates the use of a structured programming
language to specify synthesis problems. Transition systems and guarded commands
serve as imperative constructs, expressed in a syntax based on that of the
modeling language Promela. The syntax allows defining which player controls
data and control flow, and separating a program into assumptions and
guarantees. These notions are necessary for input to game solvers. The
integration of imperative and declarative paradigms allows using the paradigm
that is most appropriate for expressing each requirement. The declarative part
is expressed in the LTL fragment of generalized reactivity(1), which admits
efficient synthesis algorithms, extended with past LTL. The implementation
translates Promela to input for the Slugs synthesizer and is written in Python.
The AMBA AHB bus case study is revisited and synthesized efficiently,
identifying the need to reorder binary decision diagrams during strategy
construction, in order to prevent the exponential blowup observed in previous
work.Comment: In Proceedings SYNT 2015, arXiv:1602.0078
Information Security as Strategic (In)effectivity
Security of information flow is commonly understood as preventing any
information leakage, regardless of how grave or harmless consequences the
leakage can have. In this work, we suggest that information security is not a
goal in itself, but rather a means of preventing potential attackers from
compromising the correct behavior of the system. To formalize this, we first
show how two information flows can be compared by looking at the adversary's
ability to harm the system. Then, we propose that the information flow in a
system is effectively information-secure if it does not allow for more harm
than its idealized variant based on the classical notion of noninterference
A Rice-style theorem for parallel automata
AbstractWe present a general result, similar to Rice’s theorem, concerning the complexity of detecting properties on finite automata enriched by bounded cooperative concurrency, such as statecharts and abstract parallel automata, which we denote by CFAs (Concurrent Finite Automata). On one extreme, the complexity of detecting non-trivial properties that preserve equivalence of machines, i.e. properties of the accepted language, on finite automata, can be as little as O(1). On the other extreme, Rice’s theorem states that all such properties on Turing machines are undecidable. We state that all the non-trivial properties of the regular (or ω-regular) languages, are PSPACE-hard on CFAs with ϵ-moves and on CFAs without ϵ-moves accepting infinite words. We also extend this result to CFAs without ϵ-moves accepting finite words that satisfy a condition that holds for many properties
- …