Scenario-driven analysis of systems specified through graph transformations

Model checking is one of the successful techniques in automated verification of software and hardware systems. However, employing this technique for verification of properties such as the safety and liveness requires that all possible states of a system are generated and then the given property is checked. In large and complex systems, generating all states causes the state space explosion problem. Hence, it is possible to refute such properties by searching the state space to find a state in which the given property is violated. Of course, it is possible that detecting such states in complex systems leads to the exhaustive exploration of the state space. Recent researches confirm that using meta-heuristic and evolutionary approaches to intelligently explore a portion of the state space can be a promising idea. Hence, in this paper, we propose an approach based on ant colony optimization algorithm for refuting the safety and liveness properties and also analyzing reachability ones in systems specified formally through graph transformation system. Refutation of liveness and analyzing reachability properties in systems modeled by graph transformations are the prominent advantages of this approach in comparison with the previous approaches. The proposed approach is implemented in GROOVE which is an open source toolset for designing and model checking graph transformation systems. Experimental results show that our proposed approach is faster and it generates shorter counterexamples in comparison with others.

A heuristic solution for model checking graph transformation systems

Graph Transformation Systems (GTSs) provide visual and explicit semantics for dynamically evolving multi-process systems such as network programs and communication protocols. Existing symmetry reduction techniques that generate a reduced, bisimilar model for alleviating state explosion in model checking are not applicable to dynamic models such as those given by GTSs. We develop symmetry reduction techniques applicable to evolving GTS models and the programs that generate them. We also provide an on-the-fly algorithm for generating a symmetry-reduced quotient model directly from a set of graph transformation rules. The generated quotient model is GTS-bisimilar to the model under verification and may be exponentially smaller than that model. Thus, analysis of the system model can be performed by checking the smaller GTS-bisimilar model.

The main idea of graph grammars and graph transformation is the rule-based graph rewriting, where the application of every rule graph rule leads to a graph transformation step. Graph grammars can be used to generate graph languages which is similar to Chomsky grammars in formal language theory. Moreover, graphs can be used to model the states of all kinds of systems, which allows one to use graph transformation to model state changes in these systems. A rule-based transformation system may show two kinds of nondeterminism: (1) for each rule can exist several matches, and (2) several rules can be applicable. This paper concentrates on the second non-determinism, studying a method to detect the rules which are not applicable in graph transformation systems, proposing a backward graph transformation conflict detecting algorithm. At first the computation of conflict and dependency of two rules is available by use of AGG . Secondly the set of dependencies has to be tested by Warshall algorithm and the set of conflicts has to be computed by backward algorithm. At last, the termination of graph transformation systems and validity of rules can be detected as well.

The high selectivities of liquid chromatography and mass spectrometry make liquid chromatography-mass spectrometry one of the most popular tools for quantitative analysis in complex chemical, biological, and environmental systems, while the potential mathematical selectivity of liquid chromatography-mass spectrometry is rarely investigated. This work discussed the mathematical selectivity of liquid chromatography-mass spectrometry by three-way calibration based on the trilinear model, with an application to quantitative analysis of coeluting aromatic amino acids in human plasma. By the trilinear decomposition of the constructed liquid chromatography-mass spectrometry-sample trilinear model and individual regression of the decomposed relative intensity versus concentration, the proposed three-way calibration method successfully achieved quantitative analysis of coeluting aromatic amino acids in human plasma, even in the presence of uncalibrated interferent(s) and a varying background. This analytical method can ease the requirements for sample preparation and complete chromatographic separation of components, reduce the use of organic solvents, decrease the time of chromatographic separation, and increase the peak capacity of liquid chromatography-mass spectrometry. As a "green analytical method", the liquid chromatography-mass spectrometry three-way calibration method can provide a promising tool for direct and fast quantitative analysis in complex systems containing uncalibrated spectral interferents, especially for the situation where the coelution problem is difficult to overcome.

On translating UML models into graph transformation systems

UML state machines are quite popular and useful to specify dynamic components of software systems. They have a formal static semantics but their execution semantics is described only informally. Graph transformation, on the other hand, constitutes a well-studied area with many theoretical results and practical application domains. In this paper, an operational semantics for a subset of UML state machines is proposed which is based on graph transformation. In more detail, a UML state machine is described as a structured graph transformation system in such a way that the wellformedness rules of UML state machines are satisfied and the firing of a (maximum) set of enabled non-conflicting transitions corresponds to the application of a graph transformation rule. The presented approach uses the concept of transformation units, a recently developed modularization concept for graph transformation systems.

A rich concurrent semantics has been developed along the years for graph transformation systems, often generalizing in non-trivial ways concepts and results fist introduced for Petri nets. Besides the theoretical elegance, the concurrent semantic has potential applications in verification, e.g. in partial order reduction or in the use of finite prefixes of the unfolding for model checking. In practice (graph) transformation systems are often equipped with Negative Application Conditions, that describe forbidden contexts for the application of a rule. The talk will summarize some recent results showing that if the NACs are sufficiently simple (“incremental”) the concurrent semantics lifts smoothly to systems with NACs, but the general case requires original definitions and intuitions. Joint work with Reiko Heckel, Frank Hermann, Susann Gottmann and Nico Nachtigall

In this work we show that the reachability problem for graph transformation systems is in the complexity class XP when parameterized with respect to the depth of derivations and the cutwidth of the source graph. More precisely, we show that for any set \(\mathcal {R}\) of graph transformation rules, one can determine in time \(f(c,d)\cdot |G|\cdot |H|^{g(c,d)}\) whether a graph G of cutwidth c can be transformed into a graph H in depth at most d by the application of graph transformation rules from \(\mathcal {R}\). In particular, our algorithm runs in polynomial time when c and d are constants. On the other hand, we show that the problem becomes NP-hard if we allow \(c=O(|G|)\) and \(d=5\). In the case in which all transformation rules are monotone we get an algorithm running in time \(f(c,d)\cdot |G|^{O(c)}\cdot |H|\). To prove our main theorems we will establish an interesting connection between graph transformation systems and regular slice languages. More precisely, we show that if \(\mathcal {A}\) is a slice automaton representing a set \({\mathcal {L}}_{{\mathcal {G}}}(\mathcal {A})\) of graphs, then one can construct in time linear in \(|\mathcal {A}|\) a slice automaton \(\mathcal {N}(\mathcal {A})\) representing the set of all graphs that can be obtained from graphs in \({\mathcal {L}}_{{\mathcal {G}}}(\mathcal {A})\) by the application of one layer of transformation rules in \(\mathcal {R}\).

This document is intended to contribute to the area of validation and verification of communicating real time systems, with emphasis put on parametric reachability analysis of systems modeled using timed automata.Reachability analysis is a crucial aspect of validation and verification of software and hardware systems. The reachability analysis for real time systems is area that is studied by many researchers in academic and industrial communities. However, not much work has been done for systems, where time constraints are expressed using parameters. This is serious disproportion with real world, where specifications of most of the communication protocols or embedded software and hardware systems are indeed parameterized.This thesis presents a complete framework for forward and backward parametric reachability analysis. The solution presented here can be used as a base of algorithms for validation and verification of software and hardware real-time systems, modeled as timed automata with parameters. The results of the thesis can be easily applied to model checking or test generation tools and algorithms.The core idea of the thesis is a concept of Extended Difference Bound Matrix (EDBM). This is a data structure that stores relations between all system"s clocks and parameters. In contrast to Parametric DBM, that is the state-of-the-art data structure for parametric analysis, EDBM does not require storing constraints on clocks and constraints on parameters separately. This leads to significant benefits regarding memory consumption and time necessary to perform basic operations for symbolic analysis.The maturity of the solution was proven by implementation of a proof-of-concept tool and by experiments performed with modern communication protocol. The results show that even complex systems can be efficiently handled by the framework.

Worst Case Execution Time (WCET) analysis of large and complex hybrid systems can be time consuming. Contract based design allows for compositional reasoning of complex systems. Contracts justify the behavior of a system by way of assumptions (which are to be satisfied by the system environment) and guarantees, which are to be met by the system. Contracts also play a major role in compositional reasoning, refinement and re-usability of the system components. In this paper, we present a formal framework to enforce real-time contracts using Hoare triples, for synchronous system design and verification. In that regard, we propose real-time Hoare rules which are based on the WCET of the system and its components. We verify the real-time behavior of the system by applying these rules. These rules not only justify the system behavior and the behavior of its components but their timing as well. We also show that these Hoare rules are sound. Then we show that the synchronous composition of component level Hoare rules based contracts justify a system level contract. This real-time contract composition and reasoning technique which is based on real-time Hoare logic rules is the first ever attempt in synchronous system design and verification.

This paper presents a new local refining meshing algorithm which is referred to as the exposed face mesh (EFM) algorithm, for 3D coupled electromechanical analysis with multiple dielectrics. This algorithm allows for the independent refinement of the electrostatic mesh and mechanical mesh in a coupled system. This approach is compared to the commonly used volume refining mesh method in which both the electrostatic and mechanical mesh domains are refined concurrently. The new EFM method is shown to have substantial improvement in increasing accuracy of results and reducing computational expense especially for fringe electric field dominated structures. For a typical comb drive structure, the EFM algorithm generates much fewer volume mesh nodes for mechanical analysis and fewer surface mesh panels for electrostatic analysis than the standard volume refining mesh method. At the same time, the EFM method showed an improvement in accuracy from 15 percent to within 5 percent for this case. The IntelliCAD MEMS modeling software has incorporated this EFM algorithm and made it a unique software system to handle general device structures accurately.

Enhanced robust stability analysis of large hydraulic control systems via a bifurcation-based procedure

Graph transformation has recently become more and more popular as a general, rule-based visual specification paradigm to formally capture (a) requirements or behavior of user models (on the model-level), and (b) the operational semantics of modeling languages (on the meta-level) as demonstrated by benchmark applications around the Unified Modeling Language (UML). The current paper focuses on the model checking-based automated formal verification of graph transformation systems used either on the model-level or meta-level. We present a general translation that inputs (i) a metamodel of an arbitrary visual modeling language, (ii) a set of graph transformation rules that defines a formal operational semantics for the language, and (iii) an arbitrary well-formed model instance of the language and generates a transitions system (TS) that serve as the underlying mathematical specification formalism of various model checker tools. The main theoretical benefit of our approach is an optimization technique that projects only the dynamic parts of the graph transformation system into the target transition system, which results in a drastical reduction in the state space. The main practical benefit is the use of existing back-end model checker tools, which directly provides formal verification facilities (without additional efforts required to implement an analysis tool) for many practical applications captured in a very high-level visual notation. The practical feasibility of the approach is demonstrated by modeling and analyzing the well-known verification benchmark of dining philosophers both on the model and meta-level.

Managing international mining — a case study in the application of system dynamics to complex, multiple ownership systems