Prophecy Variables for Hyperproperty Verification

Temporal logics for hyperproperties like HyperLTL use trace quantifiers to express properties that relate multiple system runs. In practice, the verification of such specifications is mostly limited to formulas without quantifier alternation, where verification can be reduced to checking a trace pro...

Full description

Saved in:
Bibliographic Details
Published in2022 IEEE 35th Computer Security Foundations Symposium (CSF) pp. 471 - 485
Main Authors Beutner, Raven, Finkbeiner, Bernd
Format Conference Proceeding
LanguageEnglish
Published IEEE 01.08.2022
Subjects
Completeness
Computer security
Games
Hyperliveness
HyperLTL
Hyperproperties
Prophecy Variables
Verification
Online AccessGet full text

Cover

More Information
Summary:Temporal logics for hyperproperties like HyperLTL use trace quantifiers to express properties that relate multiple system runs. In practice, the verification of such specifications is mostly limited to formulas without quantifier alternation, where verification can be reduced to checking a trace property over the self-composition of the system. Quantifier alternations like \forall\pi.\exists\pi^{\prime}.\phi , can either be solved by complementation or with an interpretation as a two-person game between a v-player, who incrementally constructs the trace, and an 3-player, who constructs. The game-based approach is significantly cheaper but incomplete because the 3-player does not know the future moves of the \omega -player. In this paper, we establish that the game-based approach can be made complete by adding (w-regular) temporal prophecies. Our proof is constructiphecies.
DOI:10.1109/CSF54842.2022.9919658