当前位置: X-MOL 学术Future Gener. Comput. Syst. › 论文详情
Our official English website, www.x-mol.net, welcomes your feedback! (Note: you will need to create a separate account there.)
Evaluating verification awareness as a method for assessing adaptation risk
Future Generation Computer Systems ( IF 7.5 ) Pub Date : 2021-02-02 , DOI: 10.1016/j.future.2021.01.034
Ian Riley , Sharmin Jahan , Allen Marshall , Charles Walter , Rose F. Gamble

Self-integration requires a system to be self-aware and self-protecting of its functionality and communication processes to mitigate interference in accomplishing its goals. Incorporating self-protection into a framework for reasoning about compliance with critical requirements is a major challenge when the system’s operational environment may have uncertainties resulting in runtime changes. The reasoning should be over a range of impacts and tradeoffs in order for the system to immediately address an issue, even if only partially or imperfectly. Assuming that critical requirements can be formally specified and embedded as part of system self-awareness, runtime verification often involves extensive on-board resources and state explosion, with minimal explanation of results. Model-checking partially mitigates runtime verification issues by abstracting the system operations and architecture. However, validating the consistency of a model given a runtime change is generally performed external to the system and translated back to the operational environment, which can be inefficient.

This paper focuses on codifying and embedding verification awareness into a system. Verification awareness is a type of self-awareness related to reasoning about compliance with critical properties at runtime when a system adaptation is needed. The premise is that an adaptation that interferes with a design-time proof process for requirement compliance increases the risk that the original proof process cannot be reused. The greater the risk to limiting proof process reuse, the higher the probability that the requirement would be violated by the adaptation. The application of Rice’s 1953 theorem to this domain indicates that determining whether a given adaptation inherently inhibits proof reuse is undecidable, suggesting the heuristic, comparative approach based on proof metadata that is part of our approach. To demonstrate our deployment of verification awareness, we predefine four adaptations that are all available to three distinct wearable simulations (hearables, stress, and insulin delivery). We capture metadata from applying automated theorem proving to wearable requirements and assess the risk among the four adaptations for limiting the proof process reuse for each of their requirements. The results show that the adaptations affect proof process reuse differently on each wearable. We evaluate our reasoning framework by embedding checkpoints for requirement compliance within the wearable code and log the execution trace of each adaptation. The logs confirm that the adaptation selected by each wearable with the lowest risk of inhibiting proof process reuse for its requirements also causes the least number of requirement failures in execution.



中文翻译:

评估验证意识,作为评估适应风险的一种方法

自集成要求系统具有自我意识并对其功能和通信过程进行自我保护,以减轻实现目标的干扰。当系统的操作环境可能不确定并导致运行时更改时,将自我保护纳入框架以推理是否符合关键要求是一项重大挑战。推理应该在一系列的影响和折衷范围内进行,以使系统立即解决问题,即使只是部分或不完善。假设可以正式指定关键需求并将其嵌入为系统自我意识的一部分,则运行时验证通常涉及大量的板载资源和状态爆炸,而对结果的解释则很少。模型检查通过抽象化系统操作和体系结构,部分缓解了运行时验证问题。但是,在给定运行时更改的情况下,验证模型的一致性通常是在系统外部执行的,并转换回操作环境,这可能是低效率的。

本文着重于将验证意识编码并嵌入到系统中。验证意识是一种自我意识,与需要系统适应时在运行时符合关键属性的推理有关。前提是,适应会影响设计时证明过程的需求符合性,这会增加原始证明过程无法重用的风险。限制证明过程重用的风险越大,适应将违反要求的可能性就越大。赖斯1953年定理在该领域的应用表明,确定给定的适应性是否固有地抑制证明重用尚不确定,这表明基于证明元数据的启发式比较方法是我们方法的一部分。为了演示我们对验证意识的部署,我们预定义了四种适应性设置,它们可用于三个不同的可穿戴模拟(可听性,压力和胰岛素释放)。我们从将自动定理证明应用于可穿戴需求的过程中捕获元数据,并评估四种适应方案中的风险,以限制证明流程对每种需求的重复使用。结果表明,适应性影响证明过程在每种可穿戴设备上的重复使用均不同。我们通过在可穿戴代码中嵌入检查点以实现需求合规性来评估推理框架,并记录每次改编的执行轨迹。日志确认,由每个可穿戴设备选择的适应性要求最低的禁止证明过程重用的风险也使执行中的需求失败次数最少。

更新日期:2021-02-22
down
wechat
bug