(2018) Synthesizing Reactive Systems from Hyperproperties.
Abstract
We study the reactive synthesis problem for hyperproperties given as formulas of the temporal logic HyperLTL. Hyperproperties generalize trace properties, i.e., sets of traces, to sets of sets of traces. Typical examples are information-flow policies like noninterference, which stipulate that no sensitive data must leak into the public domain. Such properties cannot be expressed in standard linear or branching-time temporal logics like LTL, CTL, or CTL∗ . We show that, while the synthesis problem is undecidable for full HyperLTL, it remains decidable for the ∃ ∗ , ∃ ∗∀ 1 , and the linear ∀ ∗ fragments. Beyond these fragments, the synthesis problem immediately becomes undecidable. For universal HyperLTL, we present a semi-decision procedure that constructs implementations and counterexamples up to a given bound. We report encouraging experimental results obtained with a prototype implementation on example specifications with hyperproperties like symmetric responses, secrecy, and information-flow.
| Item Type: | Conference or Workshop Item (A Paper) (Paper) |
|---|---|
| Conference: | CAV Computer Aided Verification |
| Depositing User: | Bernd Finkbeiner |
| Date Deposited: | 23 Jun 2019 18:39 |
| Last Modified: | 15 Oct 2020 13:43 |
| Primary Research Area: | NRA2: Reliable Security Guarantees |
| URI: | https://publications.cispa.saarland/id/eprint/2929 |
Actions
Actions (login required)
 |
View Item |