HAL CCSD
Decentralized Asynchronous Crash-resilient Runtime Verification
Bonakdarpour, Borzoo
Fraigniaud, Pierre
Rajsbaum, Sergio
Rosenblueth, David
Travers, Corentin
Institut de Recherche en Informatique Fondamentale (IRIF (UMR_8243)) ; Centre National de la Recherche Scientifique (CNRS)-Université Paris Cité (UPCité)
International audience
ISSN: 0004-5411
EISSN: 1557-735X
Journal of the ACM (JACM)
Association for Computing Machinery
hal-03872283
https://cnrs.hal.science/hal-03872283
https://cnrs.hal.science/hal-03872283
Journal of the ACM (JACM), 2022, 69 (5), pp.1-31. ⟨10.1145/3550483⟩
DOI: 10.1145/3550483
info:eu-repo/semantics/altIdentifier/doi/10.1145/3550483
en
[INFO.INFO-DS]Computer Science [cs]/Data Structures and Algorithms [cs.DS]
[INFO.INFO-DC]Computer Science [cs]/Distributed, Parallel, and Cluster Computing [cs.DC]
info:eu-repo/semantics/article
Journal articles
Runtime verification is a lightweight method for monitoring the formal specification of a system during its execution. It has recently been shown that a given state predicate can be monitored consistently by a set of crash-prone asynchronous distributed monitors observing the system, only if each monitor can emit verdicts taken from a large enough finite set. We revisit this impossibility result in the concrete context of linear-time logic ( ltl ) semantics for runtime verification, that is, when the correctness of the system is specified by an ltl formula on its execution traces. First, we show that monitors synthesized based on the 4-valued semantics of ltl ( rv-ltl ) may result in inconsistent distributed monitoring, even for some simple ltl formulas. More generally, given any ltl formula φ, we relate the number of different verdicts required by the monitors for consistently monitoring φ, with a specific structural characteristic of φ called its alternation number . Specifically, we show that, for every k ≥ 0 , there is an ltl formula φ with alternation number k that cannot be verified at runtime by distributed monitors emitting verdicts from a set of cardinality smaller than k + 1. On the positive side, we define a family of logics, called distributed ltl (abbreviated as dltl ), parameterized by k ≥ 0, which refines rv-ltl by incorporating 2k + 4 truth values. Our main contribution is to show that, for every k ≥ 0, every ltl formula φ with alternation number k can be consistently monitored by distributed monitors, each running an automaton based on a (2 ⌈ k /2 ⌉ +4)-valued logic taken from the dltl family.
2022-10-31