Synthesizing dynamically updating controllers from changes in scenario-based specifications

Ghezzi,; Greenyer, Joel; Manna,

doi:10.1109/seams.2012.6224401

Cited by 26 publications

(28 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Based on their definition, they claimed that in the example of the RailCab system it is too late to apply an update when the RailCab is at the lastEmergencyBrake section because the RailCab cannot starts the second communication with the controller after update takes place and hence cannot know the status of the crossing status [24]. This coincides with our second counterexample in Section V-C.…”

Section: Related Worksupporting

confidence: 69%

“…It has been observed that the mechanism may cause problems [24]. Suppose that the controller fails to close the gate Fig.…”

Section: A a Buggy Railcab Crossing Mechanism And A Fixed Versionmentioning

confidence: 99%

“…This work has been significantly influenced by some related works, including Gupta et al's work on the validity of dynamic updates [4], Ghezzi et al's study on the dynamic update of the RailCab System [24], and our previous work on a case study of design-level correctness of dynamic updates [11].…”

Section: Related Workmentioning

confidence: 99%

See 2 more Smart Citations

Towards a Formal Approach to Modeling and Verifying the Design of Dynamic Software Updates

Zhang

Ogata

Futatsugi

2015

2015 Asia-Pacific Software Engineering Conference (APSEC)

View full text Add to dashboard Cite

Even though software systems in some domains are expected to provide continuous services, most of them must undergo some form of changes. It leads to the emergence of dynamic software updating, a technique for updating a running software system without incurring any downtime. One of the challenges of designing a correct dynamic update is to identify a set of update points where the update can be safely applied to a running system. In this paper, we present a formal approach to modeling dynamic software updates and use the formal model to identify safe update points. In our approach, we formalize dynamic updates as state machines, and verify by model checking a set of desired properties which the running system is expected to satisfy after being updated. If counterexamples are found, we exclude those states that cause the counterexamples, and do model checking again. The process is iterated until all desired properties are successfully verified. We then finally obtain a set of safe update points. A case study is also presented to demonstrate the feasibility of the proposed approach.

show abstract

Section: Related Worksupporting

confidence: 69%

“…It has been observed that the mechanism may cause problems [24]. Suppose that the controller fails to close the gate Fig.…”

Section: A a Buggy Railcab Crossing Mechanism And A Fixed Versionmentioning

confidence: 99%

See 1 more Smart Citation

Towards a Formal Approach to Modeling and Verifying the Design of Dynamic Software Updates

Zhang

Ogata

Futatsugi

2015

2015 Asia-Pacific Software Engineering Conference (APSEC)

View full text Add to dashboard Cite

show abstract

“…In this work, the model is updated dynamically at runtime. In [GGM12], the aim is introducing safe and automatic self-adaptation mechanisms driven by the requirement and environment changes. In this research, the system is controlled by a controller that enforces requirements and environment assumptions.…”

Section: Related Workmentioning

confidence: 99%

Synthesizing structural and behavioral control for reconfigurations in component-based systems

2016

View full text Add to dashboard Cite

Abstract. Correctness of the behavior of an adaptive system during dynamic adaptation is an important challenge to realize correct adaptive systems. Dynamic adaptation refers to changes to both the functionality of the computational entities that comprise a composite system, as well as the structure of their interconnections, in response to variations in the environment, e.g., the load of requests on a server system. In this research, we view the problem of correct structural adaptation as a supervisory control problem and synthesize a reconfiguration controller that guides the behavior of a system during adaptation. The reconfiguration controller observes the system behavior during an adaptation and controls the system behavior by allowing/disallowing actions in a way to ensure that a given property is satisfied and a deadlock is avoided. The system during adaptation is modeled using a graph transition system and properties to be enforced are specified using a graph automaton. We adapt a classical theory of supervisory control for synthesizing a controller for controlling the behavior of a system modeled using graph transition systems. This theory is used to synthesize a controller that can impose both behavioral and structural constraints on the system during an adaptation. We apply a tool that we have implemented to support our approach on a case study involving https servers.

show abstract

“…For instance, Whittle et al [25,26] have proposed RELAX, which supports a fuzzy logic-based approach to analyzing uncertainty in adaptive systems. Ghezzi et al [5] have examined the problem of when to introduce a new controller to a running system without restarting it, and verifying that the new controller meets its speciication. Souza et al [23] have proposed a method for weakening requirements as a way to adapt to the changing context.…”

Section: Introductionmentioning

confidence: 99%

Requirements and specifications for adaptive security

Tun

Yang

Bandara

et al. 2018

Proceedings of the 13th International Conference on Software Engineering for Adaptive and Self-Managing Systems

View full text Add to dashboard Cite

In an adaptive security-critical system, security mechanisms change according to the type of threat posed by the environment. Specifying the behavior of these systems is diicult because conditions of the environment are diicult to describe until the system has been deployed and used for a length of time. This paper deines the problem of adaptation in security-critical systems, and outlines the RELAIS approach for expressing requirements and specifying the behavior in a way that helps identify the need for adaptation, and the appropriate adaptation behavior at runtime. The paper introduces the notion of adaptation via input approximation and proposes statistical machine learning techniques for realizing it. The approach is illustrated with a running example and is applied to a realistic security example from a cloud-based ile-sharing application. Bayesian classiication and logistic regression methods are used to implement adaptive speciications and these methods ofer diferent levels of adaptive security and usability in the ile-sharing application. CCS CONCEPTS· Security and privacy; · Software and its engineering;

show abstract

Synthesizing dynamically updating controllers from changes in scenario-based specifications

Cited by 26 publications

References 19 publications

Towards a Formal Approach to Modeling and Verifying the Design of Dynamic Software Updates

Towards a Formal Approach to Modeling and Verifying the Design of Dynamic Software Updates

Synthesizing structural and behavioral control for reconfigurations in component-based systems

Requirements and specifications for adaptive security

Contact Info

Product

Resources

About