38 research outputs found
The Hierarchy of Hyperlogics
Hyperproperties, which generalize trace properties by relating multiple
traces, are widely studied in information-flow security. Recently, a number of
logics for hyperproperties have been proposed, and there is a need to
understand their decidability and relative expressiveness. The new logics have
been obtained from standard logics with two principal extensions: temporal
logics, like LTL and CTL, have been generalized to hyperproperties by
adding variables for traces or paths. First-order and second-order logics, like
monadic first-order logic of order and MSO, have been extended with the
equal-level predicate. We study the impact of the two extensions across the
spectrum of linear-time and branching-time logics, in particular for logics
with quantification over propositions. The resulting hierarchy of hyperlogics
differs significantly from the classical hierarchy, suggesting that the
equal-level predicate adds more expressiveness than trace and path variables.
Within the hierarchy of hyperlogics, we identify new boundaries on the
decidability of the satisfiability problem. Specifically, we show that while
HyperQPTL and HyperCTL are both undecidable in general, formulas within
their fragments are decidable.Comment: Originally published at LICS 201
Logical methods for the hierarchy of hyperlogics
In this thesis, we develop logical methods for reasoning about hyperproperties. Hyperproperties describe relations between multiple executions of a system. Unlike trace properties, hyperproperties comprise relational properties like noninterference, symmetry, and robustness. While trace properties have been studied extensively, hyperproperties form a relatively new concept that is far from fully understood. We study the expressiveness of various hyperlogics and develop algorithms for their satisfiability and synthesis problems. In the first part, we explore the landscape of hyperlogics based on temporal logics, first-order and second-order logics, and logics with team semantics. We establish that first-order/second-order and temporal hyperlogics span a hierarchy of expressiveness, whereas team logics constitute a radically different way of specifying hyperproperties. Furthermore, we introduce the notion of temporal safety and liveness, from which we obtain fragments of HyperLTL (the most prominent hyperlogic) with a simpler satisfiability problem. In the second part, we develop logics and algorithms for the synthesis of smart contracts. We introduce two extensions of temporal stream logic to express (hyper)properties of infinite-state systems. We study the realizability problem of these logics and define approximations of the problem in LTL and HyperLTL. Based on these approximations, we develop algorithms to construct smart contracts directly from their specifications.In dieser Arbeit beschreiben wir logische Methoden, um ĂŒber Hypereigenschaften zu argumentieren. Hypereigenschaften beschreiben Relationen zwischen mehreren AusfĂŒhrungen eines Systems. Anders als pfadbasierte Eigenschaften können Hypereigenschaften relationale Eigenschaften wie Symmetrie, Robustheit und die Abwesenheit von Informationsfluss ausdrĂŒcken. WĂ€hrend pfadbasierte Eigenschaften in den letzten Jahrzehnten ausfĂŒhrlich erforscht wurden, sind Hypereigenschaften ein relativ neues Konzept, das wir noch nicht vollstĂ€ndig verstehen. Wir untersuchen die AusdrucksmĂ€chtigkeit verschiedener Hyperlogiken und entwickeln ausfĂŒhrbare Algorithmen, um deren ErfĂŒllbarkeits- und Syntheseproblem zu lösen. Im ersten Teil erforschen wir die Landschaft der Hyperlogiken basierend auf temporalen Logiken, Logiken erster und zweiter Ordnung und Logiken mit Teamsemantik. Wir stellen fest, dass temporale Logiken und Logiken erster und zweiter Ordnung eine Hierarchie an AusdrucksmĂ€chtigkeit aufspannen. Teamlogiken hingegen spezifieren Hypereigenschaften auf eine radikal andere Art. Wir fĂŒhren auĂerdem das Konzept von temporalen Sicherheits- und Lebendigkeitseigenschaften ein, durch die Fragmente der bedeutensten Logik HyperLTL entstehen, fĂŒr die das ErfĂŒllbarkeitsproblem einfacher ist. Im zweiten Teil entwickeln wir Logiken und Algorithmen fĂŒr die Synthese digitaler VertrĂ€ge. Wir fĂŒhren zwei Erweiterungen temporaler Stromlogik ein, um (Hyper)eigenschaften in unendlichen Systemen auszudrĂŒcken. Wir untersuchen das Realisierungsproblem dieser Logiken und definieren Approximationen des Problems in LTL und HyperLTL. Basierend auf diesen Approximationen entwickeln wir Algorithmen, die digitale VertrĂ€ge direkt aus einer Spezifikation erstellen
Logics and Algorithms for Hyperproperties
System requirements related to concepts like information flow, knowledge, and robustness cannot be judged in terms of individual system executions, but rather require an analysis of the relationship between multiple executions. Such requirements belong to the class of hyperproperties, which generalize classic trace properties to properties of sets of traces. During the past decade, a range of new specification logics has been introduced with the goal of providing a unified theory for reasoning about hyperproperties. This paper gives an overview on the current landscape of logics for the specification of hyperproperties and on algorithms for satisfiability checking, model checking, monitoring, and synthesis
Logical and deep learning methods for temporal reasoning
In this thesis, we study logical and deep learning methods for the temporal reasoning of reactive systems. In Part I, we determine decidability borders for the satisfiability and realizability problem of temporal hyperproperties. Temporal hyperproperties relate multiple computation traces to each other and are expressed in a temporal hyperlogic. In particular, we identify decidable fragments of the highly expressive hyperlogics HyperQPTL and HyperCTL*. As an application, we elaborate on an enforcement mechanism for temporal hyperproperties. We study explicit enforcement algorithms for specifications given as formulas in universally quantified HyperLTL. In Part II, we train a (deep) neural network on the trace generation and realizability problem of linear-time temporal logic (LTL). We consider a method to generate large amounts of additional training data from practical specification patterns. The training data is generated with classical solvers, which provide one of many possible solutions to each formula. We demonstrate that it is sufficient to train on those particular solutions such that the neural network generalizes to the semantics of the logic. The neural network can predict solutions even for formulas from benchmarks from the literature on which the classical solver timed out. Additionally, we show that it solves a significant portion of problems from the annual synthesis competition (SYNTCOMP) and even out-of-distribution examples from a recent case study.Diese Arbeit befasst sich mit logischen Methoden und mehrschichtigen Lernmethoden fĂŒr das zeitabhĂ€ngige Argumentieren ĂŒber reaktive Systeme. In Teil I werden die Grenzen der Entscheidbarkeit des ErfĂŒllbarkeits- und des Realisierbarkeitsproblem von temporalen Hypereigenschaften bestimmt. Temporale Hypereigenschaften setzen mehrere Berechnungsspuren zueinander in Beziehung und werden in einer temporalen Hyperlogik ausgedrĂŒckt. Insbesondere werden entscheidbare Fragmente der hochexpressiven Hyperlogiken HyperQPTL und HyperCTL* identifiziert. Als Anwendung wird ein Enforcement-Mechanismus fĂŒr temporale Hypereigenschaften erarbeitet. Explizite Enforcement-Algorithmen fĂŒr Spezifikationen, die als Formeln in universell quantifiziertem HyperLTL angegeben werden, werden untersucht. In Teil II wird ein (mehrschichtiges) neuronales Netz auf den Problemen der Spurgenerierung und Realisierbarkeit von Linear-zeit Temporallogik (LTL) trainiert. Es wird eine Methode betrachtet, um aus praktischen Spezifikationsmustern groĂe Mengen zusĂ€tzlicher Trainingsdaten zu generieren. Die Trainingsdaten werden mit klassischen Solvern generiert, die zu jeder Formel nur eine von vielen möglichen Lösungen liefern. Es wird gezeigt, dass es ausreichend ist, an diesen speziellen Lösungen zu trainieren, sodass das neuronale Netz zur Semantik der Logik generalisiert. Das neuronale Netz kann Lösungen sogar fĂŒr Formeln aus Benchmarks aus der Literatur vorhersagen, bei denen der klassische Solver eine ZeitĂŒberschreitung hatte. ZusĂ€tzlich wird gezeigt, dass das neuronale Netz einen erheblichen Teil der Probleme aus dem jĂ€hrlichen Synthesewettbewerb (SYNTCOMP) und sogar Beispiele auĂerhalb der Distribution aus einer aktuellen Fallstudie lösen kann
Realizing Omega-regular Hyperproperties
We studied the hyperlogic HyperQPTL, which combines the concepts of trace
relations and -regularity. We showed that HyperQPTL is very expressive,
it can express properties like promptness, bounded waiting for a grant,
epistemic properties, and, in particular, any -regular property. Those
properties are not expressible in previously studied hyperlogics like HyperLTL.
At the same time, we argued that the expressiveness of HyperQPTL is optimal in
a sense that a more expressive logic for -regular hyperproperties would
have an undecidable model checking problem. We furthermore studied the
realizability problem of HyperQPTL. We showed that realizability is decidable
for HyperQPTL fragments that contain properties like promptness. But still, in
contrast to the satisfiability problem, propositional quantification does make
the realizability problem of hyperlogics harder. More specifically, the
HyperQPTL fragment of formulas with a universal-existential propositional
quantifier alternation followed by a single trace quantifier is undecidable in
general, even though the projection of the fragment to HyperLTL has a decidable
realizability problem. Lastly, we implemented the bounded synthesis problem for
HyperQPTL in the prototype tool BoSy. Using BoSy with HyperQPTL specifications,
we have been able to synthesize several resource arbiters. The synthesis
problem of non-linear-time hyperlogics is still open. For example, it is not
yet known how to synthesize systems from specifications given in branching-time
hyperlogics like HyperCTL.Comment: International Conference on Computer Aided Verification (CAV 2020
Set Semantics for Asynchronous TeamLTL: Expressivity and Complexity
We introduce and develop a set-based semantics for asynchronous TeamLTL. We consider two canonical logics in this setting: the extensions of TeamLTL by the Boolean disjunction and by the Boolean negation. We relate the new semantics with the original semantics based on multisets and establish one of the first positive complexity theoretic results in the temporal team semantics setting. In particular we show that both logics enjoy normal forms that can be utilised to obtain results related to expressivity and complexity (decidability) of the new logics
Propositional Dynamic Logic for Hyperproperties
Information security properties of reactive systems like non-interference often require relating different executions of the system to each other and following them simultaneously. Such hyperproperties can also be useful in other contexts, e.g., when analysing properties of distributed systems like linearizability. Since common logics like LTL, CTL, or the modal ?-calculus cannot express hyperproperties, the hyperlogics HyperLTL and HyperCTL^* were developed to cure this defect. However, these logics are not able to express arbitrary ?-regular properties. In this paper, we introduce HyperPDL-?, an adaptation of the Propositional Dynamic Logic of Fischer and Ladner for hyperproperties, in order to remove this limitation. Using an elegant automata-theoretic framework, we show that HyperPDL-? model checking is asymptotically not more expensive than HyperCTL^* model checking, despite its vastly increased expressive power. We further investigate fragments of HyperPDL-? with regard to satisfiability checking
Set Semantics for Asynchronous TeamLTL: Expressivity and Complexity
We introduce and develop a set-based semantics for asynchronous TeamLTL. We
consider two canonical logics in this setting: the extensions of TeamLTL by the
Boolean disjunction and by the Boolean negation. We establish fascinating
connections between the original semantics based on multisets and the new
set-based semantics as well as show one of the first positive complexity
theoretic results in the temporal team semantics setting. In particular we show
that both logics enjoy normal forms that can be utilised to obtain results
related to expressivity and complexity (decidability) of the new logics. We
also relate and apply our results to recently defined logics whose
asynchronicity is formalized via time evaluation functions
Second-Order Hyperproperties
We introduce HyperLTL, a temporal logic for the specification of
hyperproperties that allows for second-order quantification over sets of
traces. Unlike first-order temporal logics for hyperproperties, such as
HyperLTL, HyperLTL can express complex epistemic properties like common
knowledge, Mazurkiewicz trace theory, and asynchronous hyperproperties. The
model checking problem of HyperLTL is, in general, undecidable. For the
expressive fragment where second-order quantification is restricted to smallest
and largest sets, we present an approximate model-checking algorithm that
computes increasingly precise under- and overapproximations of the quantified
sets, based on fixpoint iteration and automata learning. We report on
encouraging experimental results with our model-checking algorithm, which we
implemented in the tool~\texttt{HySO}