Runtime Enforcement of Hybrid System Properties
混合系统属性的运行时强制执行
Mir Md Sajid Sarwar, Srinivas Pinisetty, Rajarshi Ray, Thierry Jéron
AI总结 提出一种结合离散事件编辑与连续时间监控的运行时强制执行框架,使用混合自动机建模安全需求,通过运行时可达性分析合成安全纠正动作,在自适应巡航控制系统中验证有效性。
详情
运行时强制执行已成为确保在不确定和动态环境中运行的自主和网络物理系统安全的一种有前景的方法。与传统的运行时验证不同,运行时强制执行通过在执行期间主动干预,修改不安全系统行为以防止属性违反。现有的强制执行框架主要关注无时间或离散时间规范,并且通常仅限于延迟或抑制事件,这使得它们对于表现出复杂连续动态的反应式系统不充分。在本文中,我们提出了一种运行时强制执行框架,其中安全需求使用混合自动机(HA)建模。该框架将离散事件编辑与连续时间监控相结合,以支持在任意时间点执行抑制、延迟和插入事件等强制执行操作。在观察环境输入后,自动机被初始化,并使用运行时可达性分析来综合安全纠正动作。我们正式定义了安全混合自动机的强制执行问题,建立了可强制执行条件,并提出了一种用于反应式系统的在线强制执行算法。关于自适应巡航控制(ACC)系统的详细案例研究证明了所提出方法在不安全控制器行为下维护安全属性的有效性。实验结果表明,该框架在实时确保持续符合安全要求的同时,引入了最小的计算开销。
Runtime enforcement has emerged as a promising approach for ensuring the safety of autonomous and cyber-physical systems operating in uncertain and dynamic environments. Unlike traditional runtime verification, runtime enforcement actively intervenes during execution to prevent property violations by modifying unsafe system behaviors. Existing enforcement frameworks primarily focus on untimed or discrete-time specifications and are often limited to delaying or suppressing events, making them inadequate for reactive systems exhibiting complex continuous dynamics. In this paper, we propose a runtime enforcement framework where safety requirements are modeled using Hybrid Automata (HA). The framework combines discrete-event editing with continuous-time monitoring to support enforcement actions such as suppression, delay, and insertion of events at arbitrary time instants. Upon observing environmental inputs, the automaton is initialized, and runtime reachability analysis is used to synthesize safe corrective actions. We formally define the enforcement problem for safety hybrid automata, establish enforceability conditions, and present an online enforcement algorithm for reactive systems. A detailed case study on an Adaptive Cruise Control (ACC) system demonstrates the effectiveness of the proposed approach in maintaining safety properties under unsafe controller behaviors. Experimental results show that the framework introduces minimal computational overhead while ensuring continuous compliance with safety requirements in real time.