监控部分同步分布式系统的精确度、召回率和灵敏度
Precision, Recall, and Sensitivity of Monitoring Partially Synchronous Distributed Systems
摘要：
监视器验证的重点是通过监视器分析给定程序的执行，以确定它是否可能违反其规范。监视器的假设/模型与基础程序的假设/模型之间通常存在阻抗不匹配。这构成了问题，特别是对于分布式系统，其中当前时间和状态的概念本质上是不确定的。在异步系统模型假设下设计的监视器可能会导致在部分同步系统中执行的程序的误报：监视器可能会标记一个在底层系统中实际上没有发生的全局谓词。设计有部分同步系统模型假设的监视器可能会导致在部分同步的界限与监视器模型假设不同（尽管是暂时的）的环境中执行的程序的假阴性和假阳性。在本文中，我们分析了监测器和底层程序之间的阻抗不匹配检测合取谓词的影响。我们发现，有一个小的间隔，监视器的假设是高度敏感的底层程序环境。我们提供了这个时间间隔的分析推导，并提供模拟支持，探索谓词检测的灵敏度监测器和程序之间的阻抗不匹配的部分同步系统。
英文摘要：
Runtime verification focuses on analyzing the execution of a given program by a monitor to determine if it is likely to violate its specifications. There is often an impedance mismatch between the assumptions/model of the monitor and that of the underlying program. This constitutes problems especially for distributed systems, where the concept of current time and state are inherently uncertain. A monitor designed with asynchronous system model assumptions may cause false-positives for a program executing in a partially synchronous system: the monitor may flag a global predicate that does not actually occur in the underlying system. A monitor designed with a partially synchronous system model assumption may cause false negatives as well as false positives for a program executing in an environment where the bounds on partial synchrony differ (albeit temporarily) from the monitor model assumptions. In this paper we analyze the effects of the impedance mismatch between the monitor and the underlying program for the detection of conjunctive predicates. We find that there is a small interval where the monitor assumptions are hypersensitive to the underlying program environment. We provide analytical derivations for this interval, and also provide simulation support for exploring the sensitivity of predicate detection to the impedance mismatch between the monitor and the program under a partially synchronous system.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
