Model Checking and the State Explosion Problem

Clarke, Edmund M.; Klieber, William; Nováček, Miloš; Zuliani, Paolo

doi:10.1007/978-3-642-35746-6_1

Cited by 190 publications

(124 citation statements)

References 27 publications

Supporting

Mentioning

123

Contrasting

Unclassified

Order By: Relevance

“…In order to identify these valid states S', the Kripke structure (which comprises all possible program processes) will first be generated, and then uninformed search methods will be used on these. However, this is not trivial in practice as the size of a Kripke structure relates exponentially to the description of the modelled system [9]. This problem is known as state space explosion and ensures that the Kripke structure will either no longer be completely written into the working memory or that the search for desired states can take a very long time.…”

Section: Model Checkingmentioning

confidence: 99%

A Study on Configuration and Integration of Sub-Systems to System-of-Systems with Rule Verification

Warnecke¹

2015

ENG

View full text Add to dashboard Cite

Increasing complexity of today's software systems is one of the major challenges software engineers have to face. This is aggravated by the fact that formerly isolated systems have to be interconnected to more complex systems, called System-of-Systems (SoS). Those systems are in charge to provide more functionality to the user than all of their independent sub-systems could do. Reducing the complexity of such systems is one goal of the software engineering paradigm called component-based software engineering (CBSE). CBSE enables the developers to treat individual sub-systems as components which interact via interfaces with a simulated environment. Thus those components can be developed and implemented independently from other components. After the implementation a system integrator is able to interconnect the components to a SoS. Despite this much-used approach it is possible to show that constraints, which are valid in an isolated sub-system, are broken after this system is integrated into a SoS. To emphasize this issue we developed a technique based on interconnected timed automata for modelling sub-systems and System-of-Systems in the model checking tool UPPAAL. The presented modelling technique allows it to verify the correctness of single sub-systems as well as the resulting SoS. Additionally we developed a tool which abstracts the complicated timed automata to an easy to read component based language with the goal to help system integrators building and verifying complex SoS.

show abstract

Section: Model Checkingmentioning

confidence: 99%

A Study on Configuration and Integration of Sub-Systems to System-of-Systems with Rule Verification

Warnecke¹

2015

ENG

View full text Add to dashboard Cite

show abstract

“…Model checking techniques suffer from a major problem known as the state explosion problem [4,7,16]. This problem occurs when the state space to be explored is large and cannot be explored by the algorithms for a lack of capacity memory resources or an important time because the memory space needed to carry out exploration is higher than the memory space contained in the machine.…”

Section: Introductionmentioning

confidence: 99%

Sequential and Parallel Algorithms for the State Space Exploration

Allal

Belalem

Dhaussy

et al. 2016

Cybernetics and Information Technologies

View full text Add to dashboard Cite

show abstract

“…It has been successfully applied to discover insidious attacks and anomalies for the risk analysis and security assessment of the model-based systems (Solhaug and Seehusen 2014). However, although efficiently implemented in specific cases (Clarke et al 2012), model checking's worst-case time complexity is exponential in the size of the system's and of the property's models. Large systems may be beyond reach for this type of analysis.…”

Section: Introductionmentioning

confidence: 99%

Generating attacks in SysML activity diagrams by detecting attack surfaces

Ouchani

Lenzini

2015

J Ambient Intell Human Comput

View full text Add to dashboard Cite

In the development process of a secure system is essential to detect as early as possible the system's vulnerable points, the so called attack surfaces, and to estimate how feasible it would be that known attacks breach through them. Even if attack surfaces can be sometimes detected automatically, mapping them against known attacks still is a step apart. Systems and attacks are not usually modelled in compatible formalisms. We develop a practical framework that automates the whole process. We formalize a system as SysML activity diagrams and in the same formalism we model libraries of patterns taken from standard catalogues of social engineering and technical attacks. An algorithm that we define, navigates the system's diagrams in search for its attack surfaces; then it evaluates the possibility and the probability that the detected weak points host attacks among those in the modelled library. We prove the correctness and the completeness of our approach and we show how it works on a use case scenario. It represents a very common situation in the domain of communication and data security for corporations.

show abstract

Model Checking and the State Explosion Problem

Cited by 190 publications

References 27 publications

A Study on Configuration and Integration of Sub-Systems to System-of-Systems with Rule Verification

A Study on Configuration and Integration of Sub-Systems to System-of-Systems with Rule Verification

Sequential and Parallel Algorithms for the State Space Exploration

Generating attacks in SysML activity diagrams by detecting attack surfaces

Contact Info

Product

Resources

About