arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1002.4616cs.LO
收藏

分支时序逻辑的鲁棒并行性

Robust Vacuity for Branching Temporal Logic

Arie Gurfinkel, Marsha Chechik

摘要:

人们对检测逻辑规范是否太容易满足或空洞的技术越来越感兴趣。例如,“每个请求最终都有一个确认”的规范被一个从不生成任何请求的系统空洞地满足。错误的满足会误导模型检查的用户,使他们认为系统是正确的。有几个现有的定义空。最初,Beer等人将真空形式化为对句法扰动的不敏感性。然而,这个定义只适用于单一事件中的空性。Armoni等人认为,空性必须是鲁棒的--不受语义不变变化的影响,比如用额外的原子命题扩展模型。他们指出句法空性对LTL来说是不可靠的,并提出了另一种定义--迹空性。在这篇文章中,我们将继续这一研究方向。我们表明,迹真空是不强大的分支时间逻辑。我们改进它,使其统一适用于线性和分支时间逻辑,而不受先前定义的常见陷阱的影响。我们的新定义-互模拟真空-是一个适当的非平凡的扩展,句法和跟踪真空。我们讨论了检测互模拟空的复杂性,并给出了有效的算法来检测几个实际相关的CTL * 子集的空。

英文摘要:

There is a growing interest in techniques for detecting whether a logic specification is satisfied too easily, or vacuously. For example, the specification "every request is eventually followed by an acknowledgment" is satisfied vacuously by a system that never generates any requests. Vacuous satisfaction misleads users of model-checking into thinking that a system is correct. There are several existing definitions of vacuity. Originally, Beer et al. formalized vacuity as insensitivity to syntactic perturbation. However, this definition is only reasonable for vacuity in a single occurrence. Armoni et al. argued that vacuity must be robust -- not affected by semantically invariant changes, such as extending a model with additional atomic propositions. They show that syntactic vacuity is not robust for LTL, and propose an alternative definition -- trace vacuity. In this article, we continue this line of research. We show that trace vacuity is not robust for branching time logic. We refine it to apply uniformly to linear and branching time logic and to not suffer from the common pitfalls of prior definitions. Our new definition -- bisimulation vacuity -- is a proper non-trivial extension of both syntactic and trace vacuity. We discuss the complexity of detecting bisimulation vacuity, and give efficient algorithms to detect vacuity for several practically-relevant subsets of CTL*.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑