p,egp AFp EFp ... p,agp
|
|
- Annice Nash
- 6 years ago
- Views:
Transcription
1 TUESDAY, Session 2 Temoral logic and model checking, cont 1 Branching time and CTL model checking In a branching time temoral logics, we consider not just a single ath through the Krike model, but all ossible aths emanating from agiven state [1, 2] Path quantiers A ath quantier indicates whether a given formula alies to all all ossible aths from a given state or to some ossible ath: Note that A :E: M s i j= A i for all aths = s1 s2 :::: j= M s i j= E i for some aths = s1 s2 :::: j= The temoral logic CTL In the temoral logc CTL, every temoral oerator F, G, X, or U receded by a ath quantier Some CTL modalities and their interretations: is immediately AG AF EF EG \globally " \inevitably " \ossibly " \?",AG AF EF,EG Note the following dualities: AG :EF: AF :EG: 1
2 Other CTL oerators: AX EX A( Uq) E( U q) Examle: some secications for the mutual exclusion rotocol AG:(C1 ^ C2) AG(T1 ) AF C1) AG(N1 ) EX T1) mutual exclusion liveness non-blocking Note the last can't be stated in PLTL 11 CTL model checking Suose we have already labeled the set of states satisfying the roosition To label the set of states satisfying AF : 1 If any state s is labelled with, label it with AF ==>, AF 2 Reeat label any state AF if all successors labeled AF AF AF AF ==> AF AF AF AF until no change 3 Label all states with :AF if not labeled AF Now the truth value of AF in every state is known So AF can be treated as an atomic roosition while checking, for examle AG AF That is, model checking rocedes from smaller subformulas to larger subformulas Algorithms for the other oerators AG EF EG AX EX A( U q) E( U q) are similar 2
3 Comlexity is O(fV(V + E)) where { f is the number of oerators in the formula { V is the number of states { E is the number of transitions since each oerator terminates after at most V asses over the state grah Examle: checking AG(T1 ) AF C1) for the mutual exclusion rotocol \always, if [1] trying then inevitably [1] critical" 1 label grah with AF C1 2 label every state T1 ) AF C1 if T1 is false or C1 is true 3 OK, if all states labeled T1 ) AF C1 Result of labeling state grah with AF C1 (numbers in [] indicate on which ass the state was labeled) N1,N2 turn=0 [3] T1,N2 turn=1 N1,T2 turn=2 C1,N2 T1,T2 turn=1 turn=1 [1] [2] C1,T2 turn=1 [1] T1,T2 turn=2 [5] T1,C2 turn=2 [4] N1,C2 turn=2 In every state, if T1 is true, then AG C1 is true, hence AG AF C1 is true in the initial state A more ecient algorithm (Clarke/Emerson/Sistla) { First note, all formulas can be exressed using only EX, EU, EG eg AG :EF: { E( U ) case: backward breadth-rst search { EG case: restrict grah to states satisfying nd maximal strongly connected comonents use BFS to nd any state that can reach an SCC 3
4 states satisfying =EG SCC SCC SCC This algorithm is O(f(V + E)) (ie linear in both formula size and model size) 12 Examle: the ABP revisited M lossy chan inut I sender S lossy chan A recvr R outut O We construct a very abstract model, ignoring message data and considering only sequence numbers The sender rocess S :: in ctr, ack ctr : 01, initially 0 [ in ctr = ack ctr ) I?data() in ctr := in ctr + 1mod2 2 in ctr 6= ack ctr ) M!msg(in ctr) 2 A?ack(ack ctr) ]* the message channel (note, ack channel is similar) M :: ctr : 01, initially 0 [ S?msg(ctr) [ R!msg(ctr) 2 ski] ]* the receiver rocess 4
5 R:: rcv ctr, out ctr : 01, initially 0 [ M?msg(rcv ctr) [ out ctr 6= rcvctr ) O!data() out ctr := rcv ctr] A!ack(rcv ctr) ]* Verifying the model Generate Krike model from rogram text Exress secications in CTL Note: in the following, atomic rositions like (PmsgQ) will be used to denote \P sends msg to Q" These are roerly transition labels and not state labels However, this roblem is usually solved by using the \transition grah", where every transition becomes a state { No dulicaiton of messages (and no buering) in before out (:(R data O) W (I data S)) safe in before out ^ AG((R data O) ) AXin before out) { liveness { every time a message is inut one is eventually outut live AG((I data S) ) AF (R data O)) When checking live, the model checker roduces a counterexamle like the following: I-->S S-->M (M loses message) That is, an innite loo in the state grah, where every message is lost by the M channel Fairness assumtions We want to verify the model assuming the channels do not lose messages forever In PLTL, we could exress this assumtion as follows: M fair (GF (SmsgM) ) GF (MmsgR)) 5
6 We could then verify that M fair ^ A fair ) live As we will see, however, model checking for PLTL has exonential comlexity in the formula size Using many fairness constraints in this way would therefore be imractical Suose we try translating M fair ^ A fair ) live into CTL In general if there is a CTL equivalent of an LTL formula it is obtained by adding A ath quantier to every oerator For examle, M fair becomes M fair 0 (AGAF S msg M) ) (AGAF M msg R) This, however, is simly false in every state Therefore is trivially true M fair ^ A fair ) live In general, we can't exress fairness constraints directly in CTL CTL with fairness constraints A simle fairness constraint is a formula of the form GF, where is a state formula In a model with fairness constraints, ath quantiers aly only to aths satisfying all fairness constraints: M s i j= A f i for all fair aths = s1 s2 :::: j= M s i j= E f i for some fair aths = s1 s2 :::: j= where we us A f and E f to indicate the fair interretation For examle, under the fairness constraint AG, A f F q A(GF ) Fq) Model checking under fairness constraints ^ni=1 n { A state is fair (is the start of some fair ath) i it satises E f G true { E f (U q) E( U (q ^ E f G true)) 6
7 { Algorithm for E f G: restrict the state grah to states satisfying nd the SCC's remove an SCC if it does not contain astatesatisfying each i use BFS to nd any state that can reach a (fair) SCC states satisfying =EG o3 SCC o1 o2 Comlexity of this algorithm: O(f(V + E)n) (ie, still linear) Fairness constraints for ABP { A simle fairness constraint: GF ((MmsgR)) is sucient to make the \live" secication true, but this is too strong an assumtion (ie, what if the sender stos sending?) { A Streett fairness constraint GF (SmsgM) ) GF (MmsgR) is a weaker assumtion (but erhas still not justied, in case the reciever in- nitely blocks recetion of messages) CTL formulas under Streett fairness constraints can be veried in time O(f(V + E)n 2 ) A yet weaker set of assumtions might be GF EX(MmsgR) ) GF (MmsgR) GF EX(R data O) ) GF (R data O) (the latter is to eliminate the case where the recvr receives a msg and then forever blocks further recetions while the M channel innitely loses messages) 7
8 { A recetiveness roerty recetive AG AF EX((I data S)) \sender must eventually be ready to accet another message" This requires a fairness constraint on the A as well as the M channel 2 Exressiveness Issues 21 Linear vs branching time The logic CTL* subsumes PLTL and CTL { ath formulas: U q G F X : _ q { state formulas A E where is a ath formula An LTL formula like GF is equivalent to the CTL* state formula AGF Some exressiveness results { \Existential" roerties like AG EF not exressible in LTL, These are very useful for nding deadlocks in rotocols { \fairness" roerties, like A(GF ) GF ) not exressible in CTL Comlexity of model checking CTL (with fairness) O(f(V + E)n 2 ) PLTL (with fairness) O(2 f (V + E)n 2 ) (PSPACE comlete) CTL* (with fairness) same as PLTL Note: LTL formulas are often small (when fairness constraints are built into the model) This means it is often ractical to check them in site of the exonential comlexity Note: CTL* has same comlexity as PLTL because we can treat state formulas as atomic roositions when checking ath formulas Because of this, it is often said that branching time is suerior to linear time for model checking, since the comlexity is the same or better, and it is strictly more exressive 8
9 22 Data indeendence To check that ABP delivers correct data, we can add a one-bit data eld to the messages and check AG((I data(1) S) ) AF (R data(1) O)) Question: Can we infer from this that rotocol works for any data size? Suose we want to allow arbitrary buering of data? in out unbounded buffer eg allow behavior like: in(0) in(1) in(2) out(1) out(2) out(3) This is not exressible in roositional temoral logic Data indeendence (Woler) A model is \data indeendent" [3] if all \data" variables occur only in assignments of the form: x := y or as message arameters, eg P!data(x) or Q?data(y) The bounded buer roerty can be broken into two arts: 1 no dulication or loss of messages 2 messages delivered in order received Proerty (1) can be veried on a data-indeendent model with only two data values (say, 0 and 1): exactly once(x) (:x U (x ^ XG:x)) (1) exactly once(in(1)) ) exactly once(out(1)) The reasoning behind this is as follows: suose a message is dulicated, eg in(1) in(2) in(3) out(1) out(2) out(2) Every out() value must derive from some in() value by some sequence of assignments So, by changing the dulicated inut to 1, and all the others to 1, we a run like: which violates our roerty (1) in(0) in(1) in(0) out(0) out(1) out(1) 9
10 Proerty (2) can be veried with three data values (say, 0, 1and2) as follows: before(x y) :y W (x ^:y) (2) exactly once(in(1)) ^ exactly once(in(2)) ^ before(in(1) in(2)) ) before(out(1) out(2)) The reasoning is similar to the above 10
11 3 Summary Reactive systems { Concurrency! temoral roerties { LTL adds temoral oerators to roositonal logic model is an innite sequence of rogram states { Can exress safety, liveness, fairness { Proofs are somewhat laborious Model checking { Translate model (eg in CSP) to nite state grah (Krike model) interleaving semantics for concurrency model must be fairly abstract { Model checking algorithm for CTL Naive xed oint algorithm O(n 2 ) SCC based algorithm linear in formula size and model size { Fairness constraints Simle fairness (GF ) Streett fairness (GF ) GF q) Exressiveness issues { CTL* subsumes LTL and CTL { Tradeo of exressivenes vs comlexity { Unbounded buer roerties Cannot exress directly in TL Can verify using data indeendence arguments References [1] E M Clarke and O Grumberg Research on automatic verication of nite state systems Ann Rev Comut Sci, 2:269{90, 1987 [2] E A Emerson Temoral and modal logic In Handbook of Theoretical Com Sci, vol B: Formal Methods and Semantics, chater 16 Elsevier, 1990 [3] P Woler Exressing interesting roerties of rograms in roositional temoral logic In 13th ACM POPL, ages 184{193 11
Model checking, verification of CTL. One must verify or expel... doubts, and convert them into the certainty of YES [Thomas Carlyle]
Chater 5 Model checking, verification of CTL One must verify or exel... doubts, and convert them into the certainty of YES or NO. [Thomas Carlyle] 5. The verification setting Page 66 We introduce linear
More informationCTL, the branching-time temporal logic
CTL, the branching-time temoral logic Cătălin Dima Université Paris-Est Créteil Cătălin Dima (UPEC) CTL 1 / 29 Temoral roerties CNIL Safety, termination, mutual exclusion LTL. Liveness, reactiveness, resonsiveness,
More informationPrinciples. Model (System Requirements) Answer: Model Checker. Specification (System Property) Yes, if the model satisfies the specification
Model Checking Princiles Model (System Requirements) Secification (System Proerty) Model Checker Answer: Yes, if the model satisfies the secification Counterexamle, otherwise Krike Model Krike Structure
More informationFinite-State Verification or Model Checking. Finite State Verification (FSV) or Model Checking
Finite-State Verification or Model Checking Finite State Verification (FSV) or Model Checking Holds the romise of roviding a cost effective way of verifying imortant roerties about a system Not all faults
More informationComputation Tree Logic
Comutation Tree Logic Finite State Model Checking of Branching Time Logic Kim Guldstrand Larsen BRICS@Aalborg 1 Tool Suort Finite State Systems System Descrition A Reuirement F CTL TOOL Course Objectives:
More informationFinite State Model Checking
Finite State Model Checking Finite State Model Checking Finite State Systems System Descrition A Requirement F CTL TOOL No! Debugging Information Yes, Prototyes Executable Code Test sequences Tools: visualstate,
More informationDRAFT - do not circulate
An Introduction to Proofs about Concurrent Programs K. V. S. Prasad (for the course TDA383/DIT390) Deartment of Comuter Science Chalmers University Setember 26, 2016 Rough sketch of notes released since
More informationIntroduction to Model Checking. Debdeep Mukhopadhyay IIT Madras
Introduction to Model Checking Debdeep Mukhopadhyay IIT Madras How good can you fight bugs? Comprising of three parts Formal Verification techniques consist of three parts: 1. A framework for modeling
More informationUsing BDDs to Decide CTL
Using BDDs to Decide CTL Will Marrero DePaul University, Chicago, IL 60604, USA wmarrero@cs.deaul.edu Abstract. Comutation Tree Logic (CTL) has been used uite extensively and successfully to reason about
More informationSMV the Symbolic Model Verifier. Example: the alternating bit protocol. LTL Linear Time temporal Logic
Model Checking (I) SMV the Symbolic Model Verifier Example: the alternating bit protocol LTL Linear Time temporal Logic CTL Fixed Points Correctness Slide 1 SMV - Symbolic Model Verifier SMV - Symbolic
More informationCTL Model checking. 1. finite number of processes, each having a finite number of finite-valued variables. Model-Checking
CTL Model checking Assumptions:. finite number of processes, each having a finite number of finite-valued variables.. finite length of CTL formula Problem:Determine whether formula f 0 is true in a finite
More informationFeedback-error control
Chater 4 Feedback-error control 4.1 Introduction This chater exlains the feedback-error (FBE) control scheme originally described by Kawato [, 87, 8]. FBE is a widely used neural network based controller
More informationOverview. overview / 357
Overview overview6.1 Introduction Modelling parallel systems Linear Time Properties Regular Properties Linear Temporal Logic (LTL) Computation Tree Logic syntax and semantics of CTL expressiveness of CTL
More informationSummary. Computation Tree logic Vs. LTL. CTL at a glance. KM,s =! iff for every path " starting at s KM," =! COMPUTATION TREE LOGIC (CTL)
Summary COMPUTATION TREE LOGIC (CTL) Slides by Alessandro Artale http://www.inf.unibz.it/ artale/ Some material (text, figures) displayed in these slides is courtesy of: M. Benerecetti, A. Cimatti, M.
More informationTemporal & Modal Logic. Acronyms. Contents. Temporal Logic Overview Classification PLTL Syntax Semantics Identities. Concurrency Model Checking
Temporal & Modal Logic E. Allen Emerson Presenter: Aly Farahat 2/12/2009 CS5090 1 Acronyms TL: Temporal Logic BTL: Branching-time Logic LTL: Linear-Time Logic CTL: Computation Tree Logic PLTL: Propositional
More informationABSTRACT MODEL REPAIR
Logical Methods in Comuter Science Vol. 11(3:11)2015,. 1 43 www.lmcs-online.org Submitted Jul. 2, 2014 Published Se. 17, 2015 ABSTRACT MODEL REPAIR GEORGE CHATZIELEFTHERIOU a, BORZOO BONAKDARPOUR b, PANAGIOTIS
More informationABSTRACT MODEL REPAIR
ABSTRACT MODEL REPAIR GEORGE CHATZIELEFTHERIOU a, BORZOO BONAKDARPOUR b, PANAGIOTIS KATSAROS c, AND SCOTT A. SMOLKA d a Deartment of Informatics, Aristotle University of Thessaloniki, 54124 Thessaloniki,
More informationMemoryfull Branching-Time Logic
Memoryfull Branching-Time Logic Orna Kuferman 1 and Moshe Y. Vardi 2 1 Hebrew University, School of Engineering and Comuter Science, Jerusalem 91904, Israel Email: orna@cs.huji.ac.il, URL: htt://www.cs.huji.ac.il/
More informationMATH 2710: NOTES FOR ANALYSIS
MATH 270: NOTES FOR ANALYSIS The main ideas we will learn from analysis center around the idea of a limit. Limits occurs in several settings. We will start with finite limits of sequences, then cover infinite
More informationDistributed Rule-Based Inference in the Presence of Redundant Information
istribution Statement : roved for ublic release; distribution is unlimited. istributed Rule-ased Inference in the Presence of Redundant Information June 8, 004 William J. Farrell III Lockheed Martin dvanced
More informationVerification Using Temporal Logic
CMSC 630 February 25, 2015 1 Verification Using Temporal Logic Sources: E.M. Clarke, O. Grumberg and D. Peled. Model Checking. MIT Press, Cambridge, 2000. E.A. Emerson. Temporal and Modal Logic. Chapter
More informationModel Checking with CTL. Presented by Jason Simas
Model Checking with CTL Presented by Jason Simas Model Checking with CTL Based Upon: Logic in Computer Science. Huth and Ryan. 2000. (148-215) Model Checking. Clarke, Grumberg and Peled. 1999. (1-26) Content
More informationCSC165H, Mathematical expression and reasoning for computer science week 12
CSC165H, Mathematical exression and reasoning for comuter science week 1 nd December 005 Gary Baumgartner and Danny Hea hea@cs.toronto.edu SF4306A 416-978-5899 htt//www.cs.toronto.edu/~hea/165/s005/index.shtml
More informationECE 534 Information Theory - Midterm 2
ECE 534 Information Theory - Midterm Nov.4, 009. 3:30-4:45 in LH03. You will be given the full class time: 75 minutes. Use it wisely! Many of the roblems have short answers; try to find shortcuts. You
More informationChapter 6: Computation Tree Logic
Chapter 6: Computation Tree Logic Prof. Ali Movaghar Verification of Reactive Systems Outline We introduce Computation Tree Logic (CTL), a branching temporal logic for specifying system properties. A comparison
More informationApproximating min-max k-clustering
Aroximating min-max k-clustering Asaf Levin July 24, 2007 Abstract We consider the roblems of set artitioning into k clusters with minimum total cost and minimum of the maximum cost of a cluster. The cost
More informationThe Logic of Compound Statements. CSE 2353 Discrete Computational Structures Spring 2018
CSE 2353 Discrete Comutational Structures Sring 2018 The Logic of Comound Statements (Chater 2, E) Note: some course slides adoted from ublisher-rovided material Outline 2.1 Logical Form and Logical Equivalence
More informationComputation Tree Logic (CTL)
Computation Tree Logic (CTL) Fazle Rabbi University of Oslo, Oslo, Norway Bergen University College, Bergen, Norway fazlr@student.matnat.uio.no, Fazle.Rabbi@hib.no May 30, 2015 Fazle Rabbi et al. (UiO,
More informationFigure 4: Expansion of (S b jt jc 1 jc 2 jr b ) n L. def. def. def. P T ABP as given in section 5, we can conclude
(S b jt jc 1 jc 2 jr b ) n L A B C T accet:a n L where = (S 0 b jt jc 1jC 2 jr b ) T :(send S;b :start:s 00 b jt jc 1jC 2 jr b ) T ::(start:s 00 b jt jh0; send R;b:C 1 + :C 1 i s jc 2 jr b ) T :::(R 00
More informationTopic 7: Using identity types
Toic 7: Using identity tyes June 10, 2014 Now we would like to learn how to use identity tyes and how to do some actual mathematics with them. By now we have essentially introduced all inference rules
More informationUnbounded Integer Variables: Symbolic. Representations, Approximations and Experimental. Results y. Abstract
Model Checking Concurrent Systems with Unbounded Integer Variables: Symbolic Reresentations, Aroximations and Exerimental Results y Tevk Bultan, Richard Gerber and William Pugh Deartment of Comuter Science
More informationCryptanalysis of Pseudorandom Generators
CSE 206A: Lattice Algorithms and Alications Fall 2017 Crytanalysis of Pseudorandom Generators Instructor: Daniele Micciancio UCSD CSE As a motivating alication for the study of lattice in crytograhy we
More informationSets of Real Numbers
Chater 4 Sets of Real Numbers 4. The Integers Z and their Proerties In our revious discussions about sets and functions the set of integers Z served as a key examle. Its ubiquitousness comes from the fact
More informationLinear Temporal Logic and Büchi Automata
Linear Temporal Logic and Büchi Automata Yih-Kuen Tsay Department of Information Management National Taiwan University FLOLAC 2009 Yih-Kuen Tsay (SVVRL @ IM.NTU) Linear Temporal Logic and Büchi Automata
More information2 J.Burton and M.Koutny we have to exlicitly generate a state sace, namely when testing for trace inclusion, only two rocesses are involved and the te
Verication of Communicating Processes in the Event of Interface Dierence Jonathan Burton and Maciej Koutny Deartment of Comuting Science, University of Newcastle, Newcastle uon Tyne NE1 7RU, U.K. fj.i.burton,
More informationSection 0.10: Complex Numbers from Precalculus Prerequisites a.k.a. Chapter 0 by Carl Stitz, PhD, and Jeff Zeager, PhD, is available under a Creative
Section 0.0: Comlex Numbers from Precalculus Prerequisites a.k.a. Chater 0 by Carl Stitz, PhD, and Jeff Zeager, PhD, is available under a Creative Commons Attribution-NonCommercial-ShareAlike.0 license.
More informationProbabilistic Model Checking Michaelmas Term Dr. Dave Parker. Department of Computer Science University of Oxford
Probabilistic Model Checking Michaelmas Term 2011 Dr. Dave Parker Department of Computer Science University of Oxford Overview Temporal logic Non-probabilistic temporal logic CTL Probabilistic temporal
More informationSums of independent random variables
3 Sums of indeendent random variables This lecture collects a number of estimates for sums of indeendent random variables with values in a Banach sace E. We concentrate on sums of the form N γ nx n, where
More informationSolved Problems. (a) (b) (c) Figure P4.1 Simple Classification Problems First we draw a line between each set of dark and light data points.
Solved Problems Solved Problems P Solve the three simle classification roblems shown in Figure P by drawing a decision boundary Find weight and bias values that result in single-neuron ercetrons with the
More informationute measures of uncertainty called standard errors for these b j estimates and the resulting forecasts if certain conditions are satis- ed. Note the e
Regression with Time Series Errors David A. Dickey, North Carolina State University Abstract: The basic assumtions of regression are reviewed. Grahical and statistical methods for checking the assumtions
More informationCSE 599d - Quantum Computing When Quantum Computers Fall Apart
CSE 599d - Quantum Comuting When Quantum Comuters Fall Aart Dave Bacon Deartment of Comuter Science & Engineering, University of Washington In this lecture we are going to begin discussing what haens to
More informationOn the Chvatál-Complexity of Knapsack Problems
R u t c o r Research R e o r t On the Chvatál-Comlexity of Knasack Problems Gergely Kovács a Béla Vizvári b RRR 5-08, October 008 RUTCOR Rutgers Center for Oerations Research Rutgers University 640 Bartholomew
More informationGame Specification in the Trias Politica
Game Secification in the Trias Politica Guido Boella a Leendert van der Torre b a Diartimento di Informatica - Università di Torino - Italy b CWI - Amsterdam - The Netherlands Abstract In this aer we formalize
More informationSAT based Abstraction-Refinement using ILP and Machine Learning Techniques
SAT based Abstraction-Refinement using ILP and Machine Learning Techniques 1 SAT based Abstraction-Refinement using ILP and Machine Learning Techniques Edmund Clarke James Kukula Anubhav Guta Ofer Strichman
More informationEvaluating Circuit Reliability Under Probabilistic Gate-Level Fault Models
Evaluating Circuit Reliability Under Probabilistic Gate-Level Fault Models Ketan N. Patel, Igor L. Markov and John P. Hayes University of Michigan, Ann Arbor 48109-2122 {knatel,imarkov,jhayes}@eecs.umich.edu
More informationAutomatic Synthesis of Distributed Protocols
Automatic Synthesis of Distributed Protocols Rajeev Alur Stavros Tripakis 1 Introduction Protocols for coordination among concurrent processes are an essential component of modern multiprocessor and distributed
More informationPeriodic scheduling 05/06/
Periodic scheduling T T or eriodic scheduling, the best that we can do is to design an algorithm which will always find a schedule if one exists. A scheduler is defined to be otimal iff it will find a
More informationLecture 16: Computation Tree Logic (CTL)
Lecture 16: Computation Tree Logic (CTL) 1 Programme for the upcoming lectures Introducing CTL Basic Algorithms for CTL CTL and Fairness; computing strongly connected components Basic Decision Diagrams
More informationOutline. CS21 Decidability and Tractability. Regular expressions and FA. Regular expressions and FA. Regular expressions and FA
Outline CS21 Decidability and Tractability Lecture 4 January 14, 2019 FA and Regular Exressions Non-regular languages: Puming Lemma Pushdown Automata Context-Free Grammars and Languages January 14, 2019
More informationComputer arithmetic. Intensive Computation. Annalisa Massini 2017/2018
Comuter arithmetic Intensive Comutation Annalisa Massini 7/8 Intensive Comutation - 7/8 References Comuter Architecture - A Quantitative Aroach Hennessy Patterson Aendix J Intensive Comutation - 7/8 3
More informationDistributed Maximality based CTL Model Checking
IJCSI International Journal of Comuter Science Issues Vol 7 Issue No ay ISSN Onlin: 694-784 ISSN Print: 694-84 Distributed aximality based CTL odel Checking Djamel Eddine Saidouni ine EL Abidine Bouneb
More informationComputation Tree Logic (CTL) & Basic Model Checking Algorithms
Computation Tree Logic (CTL) & Basic Model Checking Algorithms Martin Fränzle Carl von Ossietzky Universität Dpt. of Computing Science Res. Grp. Hybride Systeme Oldenburg, Germany 02917: CTL & Model Checking
More informationComputation Tree Logic
Computation Tree Logic Computation tree logic (CTL) is a branching-time logic that includes the propositional connectives as well as temporal connectives AX, EX, AU, EU, AG, EG, AF, and EF. The syntax
More information1/25/2018 LINEAR INDEPENDENCE LINEAR INDEPENDENCE LINEAR INDEPENDENCE LINEAR INDEPENDENCE
/25/28 Definition: An indexed set of vectors {v,, v } in R n is said to be linearly indeendent if the vector equation x v x v... x v 2 2 has only the trivial solution. The set {v,, v } is said to be linearly
More informationAnalysis of execution time for parallel algorithm to dertmine if it is worth the effort to code and debug in parallel
Performance Analysis Introduction Analysis of execution time for arallel algorithm to dertmine if it is worth the effort to code and debug in arallel Understanding barriers to high erformance and redict
More informationUPPAAL tutorial What s inside UPPAAL The UPPAAL input languages
UPPAAL tutorial What s inside UPPAAL The UPPAAL inut languages 1 UPPAAL tool Develoed jointly by Usala & Aalborg University >>8,000 downloads since 1999 1 UPPAAL Tool Simulation Modeling Verification 3
More informationMicroeconomics Fall 2017 Problem set 1: Possible answers
Microeconomics Fall 07 Problem set Possible answers Each answer resents only one way of solving the roblem. Other right answers are ossible and welcome. Exercise For each of the following roerties, draw
More informationJohn Weatherwax. Analysis of Parallel Depth First Search Algorithms
Sulementary Discussions and Solutions to Selected Problems in: Introduction to Parallel Comuting by Viin Kumar, Ananth Grama, Anshul Guta, & George Karyis John Weatherwax Chater 8 Analysis of Parallel
More informationAnalysis of some entrance probabilities for killed birth-death processes
Analysis of some entrance robabilities for killed birth-death rocesses Master s Thesis O.J.G. van der Velde Suervisor: Dr. F.M. Sieksma July 5, 207 Mathematical Institute, Leiden University Contents Introduction
More informationA Reduction Theorem for the Verification of Round-Based Distributed Algorithms
A Reduction Theorem for the Verification of Round-Based Distributed Algorithms Mouna Chaouch-Saad 1, Bernadette Charron-Bost 2, and Stehan Merz 3 1 Faculté des Sciences, Tunis, Tunisia, Mouna.Saad@fst.rnu.tn
More informationLecture 21: Quantum Communication
CS 880: Quantum Information Processing 0/6/00 Lecture : Quantum Communication Instructor: Dieter van Melkebeek Scribe: Mark Wellons Last lecture, we introduced the EPR airs which we will use in this lecture
More informationConvex Optimization methods for Computing Channel Capacity
Convex Otimization methods for Comuting Channel Caacity Abhishek Sinha Laboratory for Information and Decision Systems (LIDS), MIT sinhaa@mit.edu May 15, 2014 We consider a classical comutational roblem
More informationNotes on Instrumental Variables Methods
Notes on Instrumental Variables Methods Michele Pellizzari IGIER-Bocconi, IZA and frdb 1 The Instrumental Variable Estimator Instrumental variable estimation is the classical solution to the roblem of
More informationModel Checking. Temporal Logic. Fifth International Symposium in Programming, volume. of concurrent systems in CESAR. In Proceedings of the
Sérgio Campos, Edmund Why? Advantages: No proofs Fast Counter-examples No problem with partial specifications can easily express many concurrency properties Main Disadvantage: State Explosion Problem Too
More informationA Social Welfare Optimal Sequential Allocation Procedure
A Social Welfare Otimal Sequential Allocation Procedure Thomas Kalinowsi Universität Rostoc, Germany Nina Narodytsa and Toby Walsh NICTA and UNSW, Australia May 2, 201 Abstract We consider a simle sequential
More informationComputation Tree Logic
Computation Tree Logic Hao Zheng Department of Computer Science and Engineering University of South Florida Tampa, FL 33620 Email: zheng@cse.usf.edu Phone: (813)974-4757 Fax: (813)974-5456 Hao Zheng (CSE,
More informationA Brief Introduction to Model Checking
A Brief Introduction to Model Checking Jan. 18, LIX Page 1 Model Checking A technique for verifying finite state concurrent systems; a benefit on this restriction: largely automatic; a problem to fight:
More informationModel for reactive systems/software
Temporal Logics CS 5219 Abhik Roychoudhury National University of Singapore The big picture Software/ Sys. to be built (Dream) Properties to Satisfy (caution) Today s lecture System Model (Rough Idea)
More informationBayesian Networks Practice
Bayesian Networks Practice Part 2 2016-03-17 Byoung-Hee Kim, Seong-Ho Son Biointelligence Lab, CSE, Seoul National University Agenda Probabilistic Inference in Bayesian networks Probability basics D-searation
More informationProbabilistic Algorithms
Probabilistic Algorithms Klaus Sutner Carnegie Mellon University Fall 2017 1 Some Probabilistic Algorithms Probabilistic Primality Testing RP and BPP Where Are We? 3 Examle 1: Order Statistics 4 We have
More informationFuzzy Methods. Additions to Chapter 5: Fuzzy Arithmetic. Michael Hanss.
Fuzzy Methods Additions to Chater 5: Fuzzy Arithmetic Michael Hanss Part I: A short review of the Institute of Engineering Comutational Mechanics University of Stuttgart Germany Examle : q = f( ) = 2 2
More informationCTL Model Checking. Prof. P.H. Schmitt. Formal Systems II. Institut für Theoretische Informatik Fakultät für Informatik Universität Karlsruhe (TH)
CTL Model Checking Prof. P.H. Schmitt Institut für Theoretische Informatik Fakultät für Informatik Universität Karlsruhe (TH) Formal Systems II Prof. P.H. Schmitt CTLMC Summer 2009 1 / 26 Fixed Point Theory
More informationProof Nets and Boolean Circuits
Proof Nets and Boolean Circuits Kazushige Terui terui@nii.ac.j National Institute of Informatics, Tokyo 14/07/04, Turku.1/44 Motivation (1) Proofs-as-Programs (Curry-Howard) corresondence: Proofs = Programs
More informationTemporal Logic. Stavros Tripakis University of California, Berkeley. We have designed a system. We want to check that it is correct.
EE 244: Fundamental Algorithms for System Modeling, Analysis, and Optimization Fall 2016 Temporal logic Stavros Tripakis University of California, Berkeley Stavros Tripakis (UC Berkeley) EE 244, Fall 2016
More informationElementary Analysis in Q p
Elementary Analysis in Q Hannah Hutter, May Szedlák, Phili Wirth November 17, 2011 This reort follows very closely the book of Svetlana Katok 1. 1 Sequences and Series In this section we will see some
More informationTemporal Logic. M φ. Outline. Why not standard logic? What is temporal logic? LTL CTL* CTL Fairness. Ralf Huuck. Kripke Structure
Outline Temporal Logic Ralf Huuck Why not standard logic? What is temporal logic? LTL CTL* CTL Fairness Model Checking Problem model, program? M φ satisfies, Implements, refines property, specification
More informationPublic Key Cryptosystems RSA
Public Key Crytosystems RSA 57 17 Receiver Sender 41 19 and rime 53 Attacker 47 Public Key Crytosystems RSA Comute numbers n = * 2337 323 57 17 Receiver Sender 41 19 and rime 53 Attacker 2491 47 Public
More informationAn Introduction to Temporal Logics
An Introduction to Temporal Logics c 2001,2004 M. Lawford Outline Motivation: Dining Philosophers Safety, Liveness, Fairness & Justice Kripke structures, LTS, SELTS, and Paths Linear Temporal Logic Branching
More informationIntroduction to Temporal Logic. The purpose of temporal logics is to specify properties of dynamic systems. These can be either
Introduction to Temporal Logic The purpose of temporal logics is to specify properties of dynamic systems. These can be either Desired properites. Often liveness properties like In every infinite run action
More informationModel Checking: An Introduction
Model Checking: An Introduction Meeting 3, CSCI 5535, Spring 2013 Announcements Homework 0 ( Preliminaries ) out, due Friday Saturday This Week Dive into research motivating CSCI 5535 Next Week Begin foundations
More information3. Temporal Logics and Model Checking
3. Temporal Logics and Model Checking Page Temporal Logics 3.2 Linear Temporal Logic (PLTL) 3.4 Branching Time Temporal Logic (BTTL) 3.8 Computation Tree Logic (CTL) 3.9 Linear vs. Branching Time TL 3.16
More informationPart III. for energy minimization
ICCV 2007 tutorial Part III Message-assing algorithms for energy minimization Vladimir Kolmogorov University College London Message assing ( E ( (,, Iteratively ass messages between nodes... Message udate
More informationStatics and dynamics: some elementary concepts
1 Statics and dynamics: some elementary concets Dynamics is the study of the movement through time of variables such as heartbeat, temerature, secies oulation, voltage, roduction, emloyment, rices and
More information1 1 c (a) 1 (b) 1 Figure 1: (a) First ath followed by salesman in the stris method. (b) Alternative ath. 4. D = distance travelled closing the loo. Th
18.415/6.854 Advanced Algorithms ovember 7, 1996 Euclidean TSP (art I) Lecturer: Michel X. Goemans MIT These notes are based on scribe notes by Marios Paaefthymiou and Mike Klugerman. 1 Euclidean TSP Consider
More informationOperations Management
Universidade Nova de Lisboa Faculdade de Economia Oerations Management Winter Semester 009/010 First Round Exam January, 8, 009, 8.30am Duration: h30 RULES 1. Do not searate any sheet. Write your name
More informationFormal Modeling in Cognitive Science Lecture 29: Noisy Channel Model and Applications;
Formal Modeling in Cognitive Science Lecture 9: and ; ; Frank Keller School of Informatics University of Edinburgh keller@inf.ed.ac.uk Proerties of 3 March, 6 Frank Keller Formal Modeling in Cognitive
More informationPHYS 301 HOMEWORK #9-- SOLUTIONS
PHYS 0 HOMEWORK #9-- SOLUTIONS. We are asked to use Dirichlet' s theorem to determine the value of f (x) as defined below at x = 0, ± /, ± f(x) = 0, - < x
More informationCryptography Assignment 3
Crytograhy Assignment Michael Orlov orlovm@cs.bgu.ac.il) Yanik Gleyzer yanik@cs.bgu.ac.il) Aril 9, 00 Abstract Solution for Assignment. The terms in this assignment are used as defined in [1]. In some
More informationA SIMPLE AD EFFICIET PARALLEL FFT ALGORITHM USIG THE BSP MODEL MARCIA A. IDA AD ROB H. BISSELIG Abstract. In this aer, we resent a new arallel radix-4
Universiteit-Utrecht * Deartment of Mathematics A simle and ecient arallel FFT algorithm using the BSP model by Marcia A. Inda and Rob H. Bisseling Prerint nr. 3 March 2000 A SIMPLE AD EFFICIET PARALLEL
More informationPrinciples of Computed Tomography (CT)
Page 298 Princiles of Comuted Tomograhy (CT) The theoretical foundation of CT dates back to Johann Radon, a mathematician from Vienna who derived a method in 1907 for rojecting a 2-D object along arallel
More informationTHE ERDÖS - MORDELL THEOREM IN THE EXTERIOR DOMAIN
INTERNATIONAL JOURNAL OF GEOMETRY Vol. 5 (2016), No. 1, 31-38 THE ERDÖS - MORDELL THEOREM IN THE EXTERIOR DOMAIN PETER WALKER Abstract. We show that in the Erd½os-Mordell theorem, the art of the region
More informationWhy Proofs? Proof Techniques. Theorems. Other True Things. Proper Proof Technique. How To Construct A Proof. By Chuck Cusack
Proof Techniques By Chuck Cusack Why Proofs? Writing roofs is not most student s favorite activity. To make matters worse, most students do not understand why it is imortant to rove things. Here are just
More informationFor q 0; 1; : : : ; `? 1, we have m 0; 1; : : : ; q? 1. The set fh j(x) : j 0; 1; ; : : : ; `? 1g forms a basis for the tness functions dened on the i
Comuting with Haar Functions Sami Khuri Deartment of Mathematics and Comuter Science San Jose State University One Washington Square San Jose, CA 9519-0103, USA khuri@juiter.sjsu.edu Fax: (40)94-500 Keywords:
More information4. Score normalization technical details We now discuss the technical details of the score normalization method.
SMT SCORING SYSTEM This document describes the scoring system for the Stanford Math Tournament We begin by giving an overview of the changes to scoring and a non-technical descrition of the scoring rules
More informationOutline. Markov Chains and Markov Models. Outline. Markov Chains. Markov Chains Definitions Huizhen Yu
and Markov Models Huizhen Yu janey.yu@cs.helsinki.fi Det. Comuter Science, Univ. of Helsinki Some Proerties of Probabilistic Models, Sring, 200 Huizhen Yu (U.H.) and Markov Models Jan. 2 / 32 Huizhen Yu
More informationMODEL CHECKING. Arie Gurfinkel
1 MODEL CHECKING Arie Gurfinkel 2 Overview Kripke structures as models of computation CTL, LTL and property patterns CTL model-checking and counterexample generation State of the Art Model-Checkers 3 SW/HW
More informationON THE INJECTIVE DOMINATION OF GRAPHS
Palestine Journal of Mathematics Vol. 7(1)(018), 0 10 Palestine Polytechnic Uniersity-PPU 018 ON THE INJECTIVE DOMINATION OF GRAPHS Anwar Alwardi, R. Rangarajan and Akram Alqesmah Communicated by Ayman
More informationPSPACE-completeness of LTL/CTL model checking
PSPACE-completeness of LTL/CTL model checking Peter Lohmann April 10, 2007 Abstract This paper will give a proof for the PSPACE-completeness of LTLsatisfiability and for the PSPACE-completeness of the
More informationMATH 829: Introduction to Data Mining and Analysis Consistency of Linear Regression
1/9 MATH 829: Introduction to Data Mining and Analysis Consistency of Linear Regression Dominique Guillot Deartments of Mathematical Sciences University of Delaware February 15, 2016 Distribution of regression
More informationA Study of Active Queue Management for Congestion Control
A Study of Active Queue Management for Congestion Control Victor Firoiu vfiroiu@nortelnetworks.com Nortel Networks 3 Federal St. illerica, MA 1821 USA Marty orden mborden@tollbridgetech.com Tollridge Technologies
More information