Conformance Relations and Hyperproperties for Doping Detection in Time and Space

Abstract

We present a novel and generalised notion of doping cleanness for cyber-physical systems that allows for perturbing the inputs and observing the perturbed outputs both in the time- and value-domains. We instantiate our definition using existing notions of conformance for cyber-physical systems. As a formal basis for monitoring conformance-based cleanness, we develop the temporal logic HyperSTL*, an extension of Signal Temporal Logics with trace quantifiers and a freeze operator. We show that our generalised definitions are essential in a data-driven method for doping detection and apply our definitions to a case study concerning diesel emission tests.

Trustworthy Autonomous Systems Through Verifiability

“…We have also investigated real-world examples of autonomous systems where a high level of trust is not justified due to their nontransparent violation of beneficiality, for example, by polluting the environment more than legally allowed. 3 Although trust is itself subjective, being confident…”

“…Verification techniques range across formal and empirical and across static and dynamic. These comprise logical specification and verification; 21 dynamic testing, including model-based methods; 2,22 simulation-based testing; 5 runtime verification; 3,12 and stochastic methods. 28 While there are many options, it has become clear that we cannot, and should not, rely on one approach and that a heterogeneous (or corroborative) collection of verification approaches is needed.…”

Software Verification of Hyperproperties Beyond k-Safety

“…, P ⟨k+l⟩ where each P ⟨i⟩ is obtained from P by replacing each variable x ∈ V with x i ∈ V i . FEHTs capture a range of important properties, including e.g., non-inference [46], opacity [61], GNI [45], refinement [59], software doping [16], and robustness [18]. It is easy to see that FEHTs can also express (purely universal) k-safety properties over programs P 1 , .…”

Conformance Relations and Hyperproperties for Doping Detection in Time and Space

“…We identify a concrete test execution by a suffix -1 or -2 to test cycle identifier (e.g., NEDC-1 is the first and NEDC-2 the second execution of NEDC). Raw data and the implementation of the analysis is available online [11]. For NEDC, we combined the result of both executions to an average value of 182 mg/km of NO x .…”