Model Checking Classes of Metric LTL Properties of Object-Oriented Real-Time Maude Specifications

Abstract

This paper presents a transformational approach for model checking two important classes of metric temporal logic (MTL) properties, namely, bounded response and minimum separation, for nonhierarchical object-oriented Real-Time Maude specifications. We prove the correctness of our model checking algorithms, which terminate under reasonable non-Zeno-ness assumptions when the reachable state space is finite. These new model checking features have been integrated into Real-Time Maude, and are used to analyze a network of medical devices and a 4-way traffic intersection system

Twenty years of rewriting logic

“…Real-Time Maude systematically exploits the underlying Maude efficient rewriting, search, and LTL model-checking capabilities to both execute and formally analyze real-time specifications, which are internally desugared into ordinary Maude specifications and Maude search and model-checking queries using reflection [371]. It furthermore supports model checking in a subset of MTL [283], and in TCTL [282] (see Section 3.11). Real-Time Maude has been applied in a wide range of industrial applications, including networks, embedded car software, and scheduling algorithms.…”

“…More recent work has developed two new model-checking algorithms for real-time rewrite theories. In [283], a model-checking algorithm to verify properties in a subset of MTL for object-oriented real-time rewrite theories whose state is a multiset of objects and messages is presented; and [282] presents an algorithm to model check real-time rewrite theories for the satisfaction of TCTL formulas, except for formulas of the form ϕ U =t ψ. In Section 6.1.8 I discuss the Real-Time Maude tool, which supports all the model-checking procedures mentioned above; and in Section 7.4 I discuss many real-time system applications that have been specified and analyzed in Real-Time Maude.…”

Modeling and Analyzing Adaptive User-Centric Systems in Real-Time Maude

“…Up to know, Real-Time Maude has lacked the ability to model check any timed temporal logic formulas. In [13], Lepri et al show how to model check specific classes of timed temporal logic formulas, expressed in metric temporal logic. In the same line as [13], we describe how to model check (different) classes of metric temporal logic which will be shown useful for analyzing our real-time specification for our case study.…”

“…[15],Ölveczky showed how to verify some simple MTL formulas by using the time-bounded search command of Real-Time Maude or the LTL model checker of Maude. In [13], Lepri et al present an automatized analysis algorithm of two important classes of MTL formulas, namely the bounded response property (p → (♦ ≤b q)) and the minimum separation property (p → (p W ( ≤b ¬p))). The underlying idea is to extend a Real-Time Maude model by a suitable clock and to transform the MTL formulas into LTL formulas over the extended specification.…”

Checking MTL Properties of Discrete Timed Automata via Bounded Model Checking

“…Next, [15] provides an automata model checking technique for MTL that is also based on a translation to LTL, and it is implemented on top of the Spin model-checker [16]. Further, [19] shows a model checking technique of the two classes of MTL properties: bounded response and minimum separation. This technique has been implemented in the Real-Time Maude Tool.…”