Sacrificing a Little Space can Significantly Improve Monitoring of Time-Sensitive Cyber-Physical Systems

• Published in: ICCPS '14: ACM/IEEE 5th International Conference on Cyber-Physical Systems (with CPS Week 2014) pp. 115 - 126
• Main Authors: Medhat, Ramy, Kumar, Deepak, Bonakdarpour, Borzoo, Fischmeister, Sebastian
• Format: Conference Proceeding
• Language: English
• Published: Washington, DC, USA IEEE Computer Society 15.04.2014; IEEE
• Series: ACM Conferences
• Subjects: Computing methodologies > Artificial intelligence > Control methods; Computing methodologies > Artificial intelligence > Control methods > Computational control theory; Control Theory; Educational institutions; Engines; Equations; Fuzzy sets; Information systems > Data management systems > Middleware for databases > Distributed transaction monitors; Inspection; Monitoring; Runtime; Runtime Verification; Software and its engineering > Software organization and properties > Contextual software domains > Operating systems > Process management > Monitors; Time Predictability; Control Theory; Time Predictability; Runtime Verification; Monitoring
• ISBN: 1479949302; 9781479949304; 1479949310; 9781479949311
• DOI: 10.1109/ICCPS.2014.6843716

The goal of runtime verification is to inspect the correctness of a system by incorporating a monitor during its execution. Predictability of time distribution of monitor invocations and memory usage are two indicators of the quality of a monitoring solution, specially in cyber-physical systems, where the physical environment is a part of the system dynamics. In our previous work, we proposed a control-theoretic approach for coordinating time predictability and memory utilization in runtime verification of time-sensitive systems. To this end, we designed controllers that attempt to improve time predictability, while ensuring the soundness of verification by incorporating a maximally utilized bounded memory buffer that accumulates events. Since the frequency of occurrence of environment actions in cyber-physical systems is not known a priori, the system may run into situations, where the buffer is full, but a monitor invocation has not yet been scheduled. In control theory, this is called the overshooting phenomenon, which inherently decreases time predictability. In this paper, we address the issue of overshoots, by employing a second controller that allows limited memory reservations to temporarily extend the size of the event buffer when the system is subject to bursts of environment actions. We apply our solution to the verification of the air/fuel ratio in a car engine exhaust. The acceptable ratio varies depending on the driving circumstances, and monitoring that ratio is important to control emissions in a vehicle. A highly predictable monitor imposes uniform load on the engine control unit (ECU), thus, not negatively or sporadically affecting its control tasks. The experimental results exhibit two significant contributions: we (1) demonstrate the advantages of applying our approach to achieve low variation in the frequency of monitor invocations for verication, while maintaining maximum memory utilization, and (2) clearly illustrate that by negligible temporary increases in the size of the event buffer, the number of overshoots decreases significantly, which in turn substantially increases time predictability of runtime verication.