High-Assurance SPIRAL: End-to-End Guarantees for Robot and Car Control

Franchetti, Franz; Low, Tze Meng; Mitsch, Stefan; Mendoza, Juan Pablo; Gui, Liang-Yan; Phaosawasdi, Amarin; Padua, David; Kar, Soummya; Moura, J.M.F.; Franusich, Michael; Johnson, Jeremy; Platzer, André; Veloso, Manuela

doi:10.1109/mcs.2016.2643244

Cited by 21 publications

(2 citation statements)

References 41 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Nondeterministic assignments are used to represent sensing in (8) and (13) and external control in (9). Sound implementation of external control (9) and actuation (12) are still expressed abstractly. Nondeterminism must be resolved also in choosing between external (10) and fallback (11) control, and in choosing the sandbox loop duration.…”

Section: Sandbox Implementation In Cakemlmentioning

confidence: 99%

See 1 more Smart Citation

VeriPhy: verified controller executables from verified cyber-physical system models

et al. 2018

View full text Add to dashboard Cite

We present VeriPhy, a verified pipeline which automatically transforms verified high-level models of safety-critical cyberphysical systems (CPSs) in differential dynamic logic (dL) to verified controller executables. VeriPhy proves that all safety results are preserved end-to-end as it bridges abstraction gaps, including: i) the gap between mathematical reals in physical models and machine arithmetic in the implementation, ii) the gap between real physics and its differentialequation models, and iii) the gap between nondeterministic controller models and machine code. VeriPhy reduces CPS safety to the faithfulness of the physical environment, which is checked at runtime by synthesized, verified monitors. We use three provers in this effort: KeYmaera X, HOL4, and Isabelle/HOL. To minimize the trusted base, we cross-verify KeYmaera X in Isabelle/HOL. We evaluate the resulting controller and monitors on commodity robotics hardware. CCS Concepts • Computer systems organization → Embedded and cyber-physical systems; • Software and its engineering → Formal software verification;

show abstract

Section: Sandbox Implementation In Cakemlmentioning

confidence: 99%

“…Toolchains. High-Assurance SPIRAL [12] translates Model-Plex monitors to x64 machine code. Its verification is not end-to-end: because it only treats hybrid systems syntactically, it cannot verify across semantic gaps, e.g., in interval arithmetic and compilation.…”

Section: Related Workmentioning

confidence: 99%