SlideServe
Télécharger Obtenir Pro
Menu
Accueil Pro
Préférences
ApparenceLight Aide et commentaires
© SlideServe · v2026

Exploring Trigger Querying in Model Checking: Understanding and Verifying Models

miya avatar
miya
22 diapositives · 317 Views · Oct 09, 2014

In model exploration, the objective is to understand the model compared to model checking that verifies model specifications. Query checking, based on CTL, is formalized by Chan (CAV 2000) introducing query checking. Users interested in scenarios might explore what triggers specific functions. Triggers semantics use temporal operators to describe scenarios. Trigger querying aims to identify words triggering scenarios in models. The problem of identifying the set of scenarios is akin to global model checking. Computing solutions can be done in PSPACE. Variants include partial, relevant, constrained, and observable trigger querying. Constrained trigger querying incorporates user constraints for specific solutions. Observable trigger querying focuses on solutions linked to observable signals. Necessary conditions are explored in trigger querying variations.

#exploring trigger querying in model checking: understanding and verifying models #exploring trigger querying in model checking: understanding and verifying models ppt #powerpoint #presentation
Exploring Trigger Querying in Model Checking: Understanding and Verifying Models - slide 1
01 / 22Exploring Trigger Querying in Model Checking: Understanding and Verifying Models
1 / 17

Télécharger la présentation

Exploring Trigger Querying in Model Checking: Understanding and Verifying Models
Une image / un lien ci-dessous est fourni (tel quel) pour télécharger la présentation

Politique de téléchargement : le contenu du site vous est fourni TEL QUEL pour votre information et votre usage personnel ; il ne peut être vendu, concédé sous licence ni partagé sur d’autres sites sans l’accord de son auteur.Le contenu vous est fourni TEL QUEL, pour votre information et votre usage personnel uniquement. Téléchargez la présentation en cliquant sur ce lien. Lors du téléchargement, si vous ne parvenez pas à télécharger une présentation, l’éditeur a peut-être supprimé le fichier de son serveur.Pendant le téléchargement, si vous ne parvenez pas à obtenir une présentation, le fichier a peut-être été supprimé par l’éditeur.

F I N

Plus de contenu associé

Transcription de la présentation

  1. Trigger Querying Orna Kupferman Yoad Lustig

  2. ? Motivation

  3. Model exploration • In model exploration, the objective is to explore and understand the model. • Contrast this with model checking, in which the objective is to verify that the model satisfies the specification. • Model exploration was formalized as a problem by Chan (CAV 2000) who introduced query checking.

  4. Query Checking • Query checking is based on CTL. • In CTL model checking we get a Kripke structure M and a formula, say AG[ p ], and ask whether M ² AG[ p ]. • In query checking, a Boolean subformula is replaced by “?”, and one may ask M ²AG[?]. • The solution is the “strongest” Boolean expression that can replace the “?”.

  5. Query Checking - shortcoming • In query checking we search for a Boolean expression (that can replace the “?”). • A Boolean expression is evaluated at a state, and therefore refers to one point in time. • No temporal dynamics. • The user is usually interested in scenarios. • Example: what scenarios lead to the calling of the function.

  6. Triggers semantics • We use the temporal operator triggers (a.k.a. suffix implication) to describe scenarios. • M ² r triggers means:for every computation  of M and index i,If [1..i]2 L(r) then i2 L(). i  [1..i] i

  7. p Triggers semantics - example • In this model • Does M ² p¢q triggers next p • ALL computations inducing p¢q must be considered. • Does M ² p¢p triggers next q q p q p p,q q ? ?

  8. Trigger Querying - Definition • In the trigger query M ² ? triggers we ask which words trigger , orwhat is { u2* | M ² u triggers  }? • The solution is the set of scenarios that trigger . • The solution is guaranteed to be a regular set, and can be represented as a regular expression or a DFA.

  9. q2 q1 q3 q8 q4 q4 q1 q0 q7 q1 q8 q7 q5 q2 q5 q7  w Trigger Querying technical characterization • Trigger querying: do all paths that induce a word does (w) µ []M? are followed by ? (w) []M []M : states from which all paths satisfy . (w) : states a computation inducing w might end in.

  10. Trigger Querying branching-time view • M ² u triggers  iff (u) µ []M. • In other words, the query is about states (rather than infinite words / computations). • M ² w triggers is equivalent toM ² A[ w triggers  ]and toM ² A[ w triggers A[  ] ].

  11. Solving Trigger Querying • The problem of identifying the set []M is the well studied problem of global model checking. • The problem of computing (u) is easily solvable by a type of subset construction on the states of M. • Construct a DFA AM, with state space 2Q, such that AM visits state (u) after reading u, and the accepting states of AM are sets contained in []M.

  12. Complexity of Trigger Querying • Computing both []M and AM can be done in PSPACE. • For []M, the dependency on || is polyspace, but the dependency on |M| (structure complexity) is only polytime. • For AM, however, the dependency on M is also polyspace. Unfortunately, this is unavoidable.

  13. w Complexity of Trigger Querying - lower bound idea. • Trigger querying: do all paths that induce a word • NFA complementation: do all runs on a word end in some set? are followed by ? end in some set? []M

  14. Variants of trigger querying • Partial trigger querying. • Relevant trigger querying. • Constrained trigger querying. • Observable trigger querying. • Search for necessary conditions.

  15. Partial Trigger Querying • Motivation: trying to overcome high complexity demands. • In partial trigger querying, we search for a subset of the solution to M ² ? triggers that is not empty unless so is the solution. • Simplest case: find a single word, of length bounded by a unary parameter, that trigger . This case is NP hard.

  16. [1..i] i Relevant Trigger Querying M ² r triggers  means: 8 computation  8 i≥0 If[1..i]2 L(r) theni2 L(). • Words that are not a prefix of any computation are solutions to M ² r triggers . • In relevant trigger querying we do not accept such vacuous solutions. • Technical solution: remove ; from AM’s set of accepting states.

  17. Constrained Trigger Querying • Sometimes a user would like to have a dialog with the query-checking tool. • Example: • What are the solutions in which the signal xis initially 0? Solutions in which x is initially 0 but then turns to 1? • In constrained trigger querying the user provides a query as well as a constraint; the solution set is intersected with the constraint.

  18. Observable trigger querying • Sometimes a user would like to see solutions that refer only to a subset of “observable” signals. • Examples: • A user that doesn’t want to hear about internal signals used in the implementation. • A user that want to know if there is a way to control input signal x that will force the system to behave in some way.

  19. Necessary conditions • When M ² r triggers , the language of r can be seen as a sufficient reason for . • If a word from L(r) “happens” then  will inevitably “happen”. • What about necessary conditions? • Informally: what “event” always precedes ?

  20. Necessary conditions (cont’)  • 8 computation  8 i≥0 If i2 L() then [1..i]2 L(r) . • No unique solution. In fact, * is always a solution. • A solution r1 is stronger than r2 iff L(r1)µ L(r2). • A unique stronger solution exists. [1..i] i

  21. Necessary conditions - technical • Similar technical details: • Set G = { s | Ms ² : }. • Necessary condition is { u2* | (u)Å G ; }. • The complexity is polynomial space in ||, but only nondeterministic logspace in |M|.

  22. Queries? A query A trigger(fish)