Professional Documents
Culture Documents
PDF Formal Modeling and Analysis of Timed Systems 17Th International Conference Formats 2019 Amsterdam The Netherlands August 27 29 2019 Proceedings Etienne Andre Ebook Full Chapter
PDF Formal Modeling and Analysis of Timed Systems 17Th International Conference Formats 2019 Amsterdam The Netherlands August 27 29 2019 Proceedings Etienne Andre Ebook Full Chapter
https://textbookfull.com/product/formal-modeling-and-analysis-of-
timed-systems-18th-international-conference-formats-2020-vienna-
austria-september-1-3-2020-proceedings-nathalie-bertrand/
https://textbookfull.com/product/formal-modeling-and-analysis-of-
timed-systems-12th-international-conference-
formats-2014-florence-italy-september-8-10-2014-proceedings-1st-
edition-axel-legay/
https://textbookfull.com/product/the-practice-of-enterprise-
modeling-12th-ifip-working-conference-poem-2019-luxembourg-
luxembourg-november-27-29-2019-proceedings-jaap-gordijn/
Videogame Sciences and Arts 11th International
Conference VJ 2019 Aveiro Portugal November 27 29 2019
Proceedings Nelson Zagalo
https://textbookfull.com/product/videogame-sciences-and-
arts-11th-international-conference-vj-2019-aveiro-portugal-
november-27-29-2019-proceedings-nelson-zagalo/
https://textbookfull.com/product/trust-privacy-and-security-in-
digital-business-16th-international-conference-
trustbus-2019-linz-austria-august-26-29-2019-proceedings-
stefanos-gritzalis/
https://textbookfull.com/product/soft-computing-in-data-
science-5th-international-conference-scds-2019-iizuka-japan-
august-28-29-2019-proceedings-michael-w-berry/
https://textbookfull.com/product/automated-deduction-
cade-27-27th-international-conference-on-automated-deduction-
natal-brazil-august-27-30-2019-proceedings-pascal-fontaine/
https://textbookfull.com/product/computational-methods-in-
systems-biology-17th-international-conference-cmsb-2019-trieste-
italy-september-18-20-2019-proceedings-luca-bortolussi/
Étienne André
Mariëlle Stoelinga (Eds.)
Formal Modeling
LNCS 11750
and Analysis
of Timed Systems
17th International Conference, FORMATS 2019
Amsterdam, The Netherlands, August 27–29, 2019
Proceedings
Lecture Notes in Computer Science 11750
Founding Editors
Gerhard Goos
Karlsruhe Institute of Technology, Karlsruhe, Germany
Juris Hartmanis
Cornell University, Ithaca, NY, USA
Formal Modeling
and Analysis
of Timed Systems
17th International Conference, FORMATS 2019
Amsterdam, The Netherlands, August 27–29, 2019
Proceedings
123
Editors
Étienne André Mariëlle Stoelinga
Université Paris 13 University of Twente
Villetaneuse, France Enschede, The Netherlands
Radboud University
Nijmegen, The Netherlands
This Springer imprint is published by the registered company Springer Nature Switzerland AG
The registered company address is: Gewerbestrasse 11, 6330 Cham, Switzerland
Preface
Third, following the tradition initiated in 2018, FORMATS 2019 was happy to
award the best paper of the conference with the Oded Maler Award in timed systems.
This prize, named after one of the founding fathers of FORMATS, commemorates the
pioneering work of Oded Maler, whose untimely death in 2018 was a big loss to the
community.
This year, we received a higher number of submissions than in past years, resulting
in a lower acceptance rate. We received 36 long papers (of which 5 in the probabilities
special session and 4 in the data special session) and 6 tool papers. After discussion, the
Program Committee (PC) decided to accept 15 long papers (of which 3 in each special
session) and 2 tool papers. This resulted in an overall acceptance rate of 40%. 29 PC
members helped to provide at least 3 reviews for each of the 42 submitted
contributions.
FORMATS 2019 is a three-day event, featuring 3 invited talks and 17 paper pre-
sentations. A highlight of FORMATS 2019 was an invited talk by Nathalie Bertrand, as
well as two further invited talks jointly organized with CONCUR 2019, by Marta
Kwiatkowska and Kim Larsen.
Further details on FORMATS 2019 are featured on the website: https://lipn.univ-
paris13.fr/formats2019/.
Finally, a few words of acknowledgment are due. Thanks to Jos Baeten for helping
with the local organization and the relationship with CONCUR. Thanks to Springer for
publishing the FORMATS proceedings in the series Lecture Notes in Computer
Science, and to EasyChair for providing a convenient platform for coordinating the
paper submission and evaluation. Thanks to the Steering Committee, and notably to
Martin Fränzle, for their support, to all the PC members and additional reviewers for
their work (128 reviews in total) in ensuring the quality of the contributions to
FORMATS 2019, and to all the authors and participants for contributing to this event.
As PC chairs, we hope that these papers in this volume will provide readers with
novel insights and ideas.
Program Committee
Alessandro Abate University of Oxford, UK
S. Akshay Indian Institute of Technology Bombay, India
Étienne André Université Paris 13, France
Enrico Bini University of Turin, Italy
Sergiy Bogomolov The Australian National University, Australia
Franck Cassez Macquarie University, Australia
Jyotirmoy Deshmukh University of Southern California, USA
Martin Fränzle Carl von Ossietzky Universität Oldenburg, Germany
Tingting Han University of London, UK
Ichiro Hasuo National Institute of Informatics, Japan
David N. Jansen Chinese Academy of Sciences, China
Jan Krĕtínský Technical University of Munich, Germany
Didier Lime École Centrale Nantes, France
Brian Nielsen Aalborg University, Denmark
Peter Ölveczky University of Oslo, Norway
Pavithra Prabhakar Kansas State University, USA
Karin Quaas Leipzig University, Germany
Pierre-Alain Reynier Aix-Marseille University, France
César Sánchez IMDEA Software Institute, Spain
Ocan Sankur Univ Rennes, Inria, CNRS, IRISA, Rennes, France
Ana Sokolova University of Salzburg, Austria
Oleg Sokolsky University of Pennsylvania, USA
Jiří Srba Aalborg University, Denmark
Mariëlle Stoelinga University of Twente, The Netherlands
Jun Sun Singapore Management University, Singapore
Lothar Thiele ETH Zürich, Switzerland
Enrico Vicario University of Florence, Italy
James Worrell University of Oxford, UK
Wang Yi Uppsala University, Sweden
General Chair
Jos Baeten CWI, The Netherlands
Steering Committee
Rajeev Alur University of Pennsylvania, USA
Eugene Asarin Université de Paris, France
Martin Fränzle Carl von Ossietzky Universität Oldenburg, Germany
viii Organization
Additional Reviewers
Nathalie Bertrand
Short biography Nathalie Bertrand obtained her PhD from ENS Cachan in 2006,
supervised by Philippe Schnoebelen. She spent a year at TU Dresden working with
Christel Baier, and was in 2007 hired junior research scientist at Inria Rennes. Her
expertise is in model checking specifically for probabilistic systems.
References
1. Abdulla, P.A., Ben Henda, N., Mayr, R.: Decisive markov chains. Log. Methods. Comput.
Sci. 3(4) (2007). https://doi.org/10.2168/LMCS-3(4:7)2007
2. Bertrand, N., Bouyer, P., Brihaye, T., Carlier, P.: When are stochastic transition systems
tameable? J. Log. Algebraic Program. 99, 41–96 (2018). https://doi.org/10.1016/j.jlamp.2018.
03.004
Safety Verification for Deep Neural Networks
with Provable Guarantees
Marta Kwiatkowska
Abstract. Computing systems are becoming ever more complex, with decisions
increasingly often based on deep learning components. A wide variety of
applications are being developed, many of them safety-critical, such as
self-driving cars and medical diagnosis. Since deep learning is unstable with
respect to adversarial perturbations, there is a need for rigorous software
development methodologies that encompass machine learning components. This
lecture will describe progress with developing automated verification techniques
for deep neural networks to ensure safety and robustness of their decisions with
respect to input perturbations. The techniques exploit Lipschitz continuity of the
networks and aim to approximate, for a given set of inputs, the reachable set of
network outputs in terms of lower and upper bounds, in anytime manner, with
provable guarantees. We develop novel algorithms based on feature-guided
search, games, global optimisation and Bayesian methods, and evaluate them on
state-of-the-art networks. The lecture will conclude with an overview of the
challenges in this field.
Kim G. Larsen
Timed Systems
Timed Automata
1 Introduction
Background Monitoring a system behavior plays an essential role in the runtime
verification or falsification of cyber-physical systems (CPSs), where various for-
malisms such as temporal logic formulas or automata are used for specification.
Usually, a CPS is a real-time system, and real-time constraints must be included
Thanks are due to Ichiro Hasuo for a lot of useful comments and Sasinee Pruekprasert
for a feedback. This work is partially supported by JST ERATO HASUO Metamath-
ematics for Systems Design Project (No. JPMJER1603) and by JSPS Grants-in-Aid
No. 15KT0012 & 18J22498.
c Springer Nature Switzerland AG 2019
É. André and M. Stoelinga (Eds.): FORMATS 2019, LNCS 11750, pp. 3–22, 2019.
https://doi.org/10.1007/978-3-030-29662-9_1
4 M. Waga
70 signal σ 30 10
60 25 0
50 20 -10
40
x
15 -20
30
10 -30
20
5 -40
10
0 5 10 15 20 25 30 0 -50
t 0 5 10 15 20 25 30
c < 5 /c := 0 c < 10
l0 , x < 15 l1 , x > 5 l2 ,
κr u, (a1 a2 . . . am ) = inf κr (u, (ai ))
i∈{1,2,...,n}
n
κr (xi i di ), (a) = inf κr (xi i di , (a)) where i ∈ {>, ≥, ≤, <}
i∈{1,2,...,n}
i=1
Fig. 2. Example of a TSWA W = (A, κr ) which is the pair of the TSA A (upper) and
the cost function κr (lower). See Definition 5 for the precise definition.
W ···
Fig. 3. Illustration of our online algorithm for quantitative timed pattern matching of
a signal σ = aτ11 aτ22 · · · aτnn meaning “the signal value is a1 for τ1 , the signal value is
a2 for the next τ2 , . . .” and a TSWA W. The intermediate data weight i for the weight
computation is represented by zones. The precise definition of the weight i is introduced
later in Definition 16.
Related Work. Table 1 shows a comparison of the present study with some
related studies. Since the formulation of qualitative timed pattern matching [28],
many algorithms have been presented [8,28,29,32,35], including the online algo-
rithms [8,35] using timed automata. Quantitative timed pattern matching was
formulated and solved by an offline algorithm in [7]. This offline algorithm is
based on the syntax trees of signal regular expressions, and it is difficult to extend
for online monitoring. Weighted automata are used for quantitative monitoring
in [12,20,21], but the time model was discrete.
The online quantitative monitoring for signal temporal logic [14] is one of
the closest work. Since we use the clock variables of TSAs to represent the
intervals of timed pattern matching, it seems hard to use the algorithm in [14]
for quantitative timed pattern matching.
8 M. Waga
2 Preliminary
For a set X, its powerset is denoted by P(X). We use ε to represent the empty
sequence. All the signals in this paper are piecewise-constant, which is one of
the most common interpolation methods of sampled signals.
Definition 2 (signal). Let X be a finite set of variables defined over a data
domain D. A (piecewise-constant) signal σ is a sequence σ = aτ11 aτ22 · · · aτnn ,
where for each i ∈ {1, 2, . . . , n}, ai ∈ DX and τi ∈ R>0 . The set of signals over
n
DX is denoted by T (DX ). The duration i=1 τi of a signal σ is denoted by |σ|.
The sequence a1 ◦ a2 ◦ · · · ◦ an of the values of a signal σ is denoted by Values(σ),
where a◦a is a◦a = aa if a = a and a◦a = a if a = a . We denote the set {a1 ◦
a2 ◦ . . . ◦ an | n ∈ Z≥0 , a1 , a2 , . . . , an ∈ DX } by (DX ) . For t ∈ [0, |σ|), we define
k−1 k
σ(t) = ak , where k is such that i=1 τi ≤ t < i=1 τi . For an interval [t, t ) ⊆
k l−1
τ −t τ τ t − τ
[0, |σ|), we define σ([t, t )) = ak i=1 i ak+1
k+1
. . . a l−1 . . . a i=1 i
, where k and
k−1 k l−1l−1 l l
l are such that i=1 τi ≤ t < i=1 τi and i=1 τi < t ≤ i=1 τi .
For a signal σ and a TSWA W, by α(σ, W), we denote the trace value α(S)
of the WTTS S of σ and W.
Example 8. By changing the semiring S and the cost function κ, various seman-
tics can be defined by the trace value. Let D = R. For the Boolean semiring
({ , ⊥}, ∨, ∧, ⊥, ) in Example 4, the following function κb is a prototypical
example of a cost function, where u ∈ Φ(X, D) and (a1 a2 . . . am ) ∈ (DX ) .
Online Quantitative Timed Pattern Matching 11
m
κb u, (a1 a2 . . . am ) = κb (u, (ai ))
i=1
n n
κb (xi i di ), (a) = κb xi i di , (a) where i ∈ {>, ≥, ≤, <}
i=1 i=1
if a |= x d
κb (x d, (a)) =
⊥ if a | = x d
For the sup-inf semiring (R {±∞}, sup, inf, −∞, +∞) in Example 4, the trace
value defined by the cost function κr in Fig. 2 captures the essence of the so-called
space robustness [7,19]. For the tropical semiring (R {+∞}, inf, +, +∞, 0) in
Example 4, an example cost function κt is as follows.
n
κt u, (a1 a2 . . . am ) = κr (u, (ai ))
i=1
n n
κt (xi i di ), (a) = κt (xi i di , (a)) where i ∈ {>, ≥, ≤, <}
i=1 i=1
κt (x d, (a)) = a(x) − d where ∈ {≥, >}
κt (x ≺ d, (a)) = d − a(x) where ≺∈ {≤, <}
Example 11. Let W be the TSWA shown in Fig. 2, which is defined over
the reals R and the sup-inf semiring (R {±∞}, sup, inf, −∞, +∞), and σ
be the signal σ = {x = 10}7.5 {x = 40}10.0 {x = 60}13.0 . The quantita-
tive matching function M(σ, W) is as follows. Figure 1 shows an illustration.
12 M. Waga
Theorem 13. For any TSWA W over D and S and for any signal σ ∈ T (DX ),
there is a finite set {(Z1 , s1 ), (Z2 , s2 ), . . . , (Zn , sn )} ⊆ Z({cbegin , cend }) × S such
that Z1 , Z2 , . . . , Zn is a partition of the domain {(t, t ) | 0 ≤ t < t ≤ |σ|}, and
for any [t, t ) ⊆ R≥0 satisfying 0 ≤ t < t ≤ |σ|, there exists i ∈ {1, 2, . . . , n} and
ν ∈ Zi satisfying ν(cbegin ) = t, ν(cend ) = t , and (M(σ, W))(t, t ) = si .
l0
c = T = 0, ε
+∞ (= e⊗ )
8 +∞ +∞ +∞
l0 (= κ(u0 , a1 )) l1 (= e⊗ ) l1 (= e⊗ ) l1 (= e⊗ ) l1
0 < c = T < 3, 5 0 = c < T < 3.5 0 < c < T < 3.5 0 < c < T = 3.5 0 < c < T ∈ (3.5, 7)
a1 ε a1 a1 a1 a2
+∞ (= e⊗ ) +∞ (= e⊗ )
8
l0 (= κ(u0 , a1 )) l1 +∞ (= e⊗ ) l1 l1
0 < c = T = 3.5 0 = c < T = 3.5 0 < c < T ∈ (3.5, 7) 0 < c < T = 7.0
a1 ε a2 a1 a2
+∞ (= e⊗ ) +∞ (= e⊗ ) 2 (= κ(u1 , a1 a2 ))
l0 l1 +∞ (= e⊗ ) l1
l2
3.5 < c = T < 7.0 0 = c < T ∈ (3.5, 5) 0 < c < T = 7.0
3 7 0 < c < T = 7, ε
a 1 a2 ε a2
(= κ(u0 , a1 a2 )) (= κ(u1 , a2 ))
Fig. 4. WSTTS S sym of the TSWA W in Fig. 2 and the signal σ = a3.5 3.5
1 a2 , where
u0 = x < 15, u1 = x > 5, a1 = {x = 7}, and a2 = {x = 12}. The states unreachable
from the initial state or unreachable to the accepting state are omitted. The transition
for time elapse which can be represented by the composition of other transitions are
also omitted. A dashed transition is for the time elapse and a solid transition is for a
transition of A.
Although the state space Qsym of the WSTTS S sym may be infinite, there are
only finitely many states reachable from Qsym 0 and therefore, we can construct
the reachable part of S sym . See the appendix of [31] for the proof. An example
of a WSTTS is shown in Fig. 4. For a WSTTS S sym , we define the symbolic trace
value αsym (S sym ) as the shortest distance Dist(Qsym sym
0 , QF , Q
sym
, →sym , W sym )
sym sym
from Q0 to QF .
Theorem 15. Let W be a TSWA over D and S, and σ ∈ T (DX ) be a signal. Let
S and S sym be the WTTS (in Definition 6) and WSTTS of W and σ, respectively.
If S is idempotent, we have α(S) = αsym (S sym ).
1
The choice of ν̃ and ν̃ does not change σ(ν̃(T )) and σ(ν̃ (T )) due to the definition
of Qsym .
14 M. Waga
Fig. 5. Matching automaton Amatch for the TSA A shown in Fig. 2. The fresh initial
location linit and the transition to the original initial location l0 are added.
whole signal to compute the trace value, and it does not suit for the use in
online quantitative timed pattern matching. Instead, we define the intermediate
weight weight i and give an incremental algorithm to compute α(S). Intuitively,
for each state (l, Z, a) ∈ Qsym of the WSTTS S sym , the intermediate weight
weight i assign the shortest distance to reach (l, Z, a) by reading the sub-signal
aτ11 aτ22 · · · aτi i of σ = aτ11 aτ22 · · · aτnn .
Definition 16 (incr , weight i ). For a TSWA W = (A, κ) over the data domain
D and complete semiring S, a ∈ DX , and t ∈ R>0 , the increment function
incr (a, t) : P(L × Z(C {T }) × (DX ) × S) → P(L × Z(C {T }) × (DX ) × S)
αsym (S sym ) = s
(l,Z,a)∈Qsym
F
(l,Z,a,s)∈weight n
Online Quantitative Timed Pattern Matching 15
Definition 19 (incr < ). For a TSWA W = (A, κ) over the data domain D and
complete semiring S, a ∈ DX , and t ∈ R>0 , the partial increment function
incr < (a, t) : P(L × Z(C {T }) × (DX ) × S) → P(L × Z(C {T }) × (DX ) × S)
Algorithm 2 shows our online algorithm for quantitative timed pattern match-
ing. We construct the matching automaton Amatch from the TSA A (line 1),
Another random document with
no related content on Scribd:
Fig. 2
J, Mechanism of Lever-Action Repeating Rifle; 2, Breechblock; 7,
Cocking Lever; 19, Firing Pin, Front; 21, Firing Pin, Rear; 29, Guard
Finger Lever; 34, Hammer; 36, Lifter; 37, Locking Slide; 45, Mainspring
Plunger; 46, Mainspring Plunger Seat; 63, Trigger
K, Mechanism of Falling-Breechblock, Single-Shot Rifle; L, Gold-Bead
Front Sight; M and N, Combination Rear Aperture or Tang Sight, Raised
and Folded; O, P, Q, Folding-Leaf Rear Sight, Used as V-Crotched Sight,
Straight-Bar Sight, and Folded Flat to Barrel
Hunting and fishing have always held the most important places in
the field of sport. Primitive man was an expert hunter and a
skilled fisherman. He had to be in order to secure food and skins,
and while but few men are now dependent upon this method of
getting a living, the call of the outdoor world is still heard by millions
of men and women. This, then, may be reckoned the inheritance
which our primitive ancestors have bequeathed to every man, and
every man will find health and recreation through it. It would be
interesting to begin this chapter at the start and set down the history
of weapons, trace the evolution of the hunting arm all the way from
the bow down to the modern hammerless shotgun, but as this is a
practical article on how to pick out a good gun and the knack of
using it, only modern weapons will be discussed. While the novice
need not know the detailed process of constructing a shotgun, he will
find it an advantage to know something of the way in which a
serviceable weapon is manufactured, for with this knowledge he is
better qualified to pick out a suitable arm for his own particular use.
The Side-Plate Lock Is a Development of the Old Hammer Lock with Striker
Inside
The frame of a shotgun—that is, the part to one end of which the
barrels are affixed, the stock being bolted to the other—contains the
lock mechanism, and that the weapon may give the most satisfaction
for many years, the stock must be of good quality, of the exquisite
temper, and the bolting mechanism—securing the barrels to the
frame—must be simple, yet strong and serviceable. For the frame, a
solid drop forging is milled to make a shell into which the working
mechanism is fitted, and two types of frames are used in making the
modern shotguns. The side-plate lock is really a development of the
old hammer lock, with the striker inside. This lock is preferred by
some shooters because of its neat and graceful lines, and some
manufacturers use this type because it enables them to make use of
a lighter frame.
The Box Type of Frame Likewise Has Its Champions and Possesses Its
Advantages
The box type of frame likewise has its champions and possesses
certain advantages. Certainly it makes a strong and rigid frame, and
for inexpensive weapons it would be difficult to improve upon. While
its square, boxlike form is not graceful in line, it enables the maker to
use a spiral, or coil, spring instead of a flat spring for operating the
locks, which is an advantage. In brief, the merits of both types may
be summed up in this fashion: The use of the box type of lock
enables the maker to turn out a better quality of gun at a low price,
but in the case of a well-made gun, selling for a reasonable figure,
there is very little choice between them so far as dependability and
long service are concerned. Both are much used by manufacturers
of the finest weapons, hence the shooter may pick out the one which
best suits his fancy.
A Lug is Forged on the End of Each Barrel, and When Fitted Together They
are Brazed