Detecting Unrealizability of Distributed Fault-tolerant Systems

Writing formal specifications for distributed systems is difficult. Even simple consistency requirements often turn out to be unrealizable because of the complicated information flow in the distributed system: not all information is available in every component, and information transmitted from othe...

Full description

Bibliographic Details
Main Authors: Bernd Finkbeiner, Leander Tentrup
Format: Article
Language:English
Published: Logical Methods in Computer Science e.V. 2015-09-01
Series:Logical Methods in Computer Science
Subjects:
Online Access:https://lmcs.episciences.org/1588/pdf
_version_ 1811313068670451712
author Bernd Finkbeiner
Leander Tentrup
author_facet Bernd Finkbeiner
Leander Tentrup
author_sort Bernd Finkbeiner
collection DOAJ
description Writing formal specifications for distributed systems is difficult. Even simple consistency requirements often turn out to be unrealizable because of the complicated information flow in the distributed system: not all information is available in every component, and information transmitted from other components may arrive with a delay or not at all, especially in the presence of faults. The problem of checking the distributed realizability of a temporal specification is, in general, undecidable. Semi-algorithms for synthesis, such as bounded synthesis, are only useful in the positive case, where they construct an implementation for a realizable specification, but not in the negative case: if the specification is unrealizable, the search for the implementation never terminates. In this paper, we introduce counterexamples to distributed realizability and present a method for the detection of such counterexamples for specifications given in linear-time temporal logic (LTL). A counterexample consists of a set of paths, each representing a different sequence of inputs from the environment, such that, no matter how the components are implemented, the specification is violated on at least one of these paths. We present a method for finding such counterexamples both for the classic distributed realizability problem and for the fault-tolerant realizability problem. Our method considers, incrementally, larger and larger sets of paths until a counterexample is found. For safety specifications in weakly ordered architectures we obtain a decision procedure, while counterexamples for full LTL and arbitrary architectures may consist of infinitely many paths. Experimental results, obtained with a QBF-based prototype implementation, show that our method finds simple errors very quickly, and even problems with high combinatorial complexity, like the Byzantine Generals' Problem, are tractable.
first_indexed 2024-04-13T10:47:43Z
format Article
id doaj.art-2eb05a67ae344885bd0b75daf747d1d7
institution Directory Open Access Journal
issn 1860-5974
language English
last_indexed 2024-04-13T10:47:43Z
publishDate 2015-09-01
publisher Logical Methods in Computer Science e.V.
record_format Article
series Logical Methods in Computer Science
spelling doaj.art-2eb05a67ae344885bd0b75daf747d1d72022-12-22T02:49:45ZengLogical Methods in Computer Science e.V.Logical Methods in Computer Science1860-59742015-09-01Volume 11, Issue 310.2168/LMCS-11(3:12)20151588Detecting Unrealizability of Distributed Fault-tolerant SystemsBernd FinkbeinerLeander TentrupWriting formal specifications for distributed systems is difficult. Even simple consistency requirements often turn out to be unrealizable because of the complicated information flow in the distributed system: not all information is available in every component, and information transmitted from other components may arrive with a delay or not at all, especially in the presence of faults. The problem of checking the distributed realizability of a temporal specification is, in general, undecidable. Semi-algorithms for synthesis, such as bounded synthesis, are only useful in the positive case, where they construct an implementation for a realizable specification, but not in the negative case: if the specification is unrealizable, the search for the implementation never terminates. In this paper, we introduce counterexamples to distributed realizability and present a method for the detection of such counterexamples for specifications given in linear-time temporal logic (LTL). A counterexample consists of a set of paths, each representing a different sequence of inputs from the environment, such that, no matter how the components are implemented, the specification is violated on at least one of these paths. We present a method for finding such counterexamples both for the classic distributed realizability problem and for the fault-tolerant realizability problem. Our method considers, incrementally, larger and larger sets of paths until a counterexample is found. For safety specifications in weakly ordered architectures we obtain a decision procedure, while counterexamples for full LTL and arbitrary architectures may consist of infinitely many paths. Experimental results, obtained with a QBF-based prototype implementation, show that our method finds simple errors very quickly, and even problems with high combinatorial complexity, like the Byzantine Generals' Problem, are tractable.https://lmcs.episciences.org/1588/pdfcomputer science - logic in computer science
spellingShingle Bernd Finkbeiner
Leander Tentrup
Detecting Unrealizability of Distributed Fault-tolerant Systems
Logical Methods in Computer Science
computer science - logic in computer science
title Detecting Unrealizability of Distributed Fault-tolerant Systems
title_full Detecting Unrealizability of Distributed Fault-tolerant Systems
title_fullStr Detecting Unrealizability of Distributed Fault-tolerant Systems
title_full_unstemmed Detecting Unrealizability of Distributed Fault-tolerant Systems
title_short Detecting Unrealizability of Distributed Fault-tolerant Systems
title_sort detecting unrealizability of distributed fault tolerant systems
topic computer science - logic in computer science
url https://lmcs.episciences.org/1588/pdf
work_keys_str_mv AT berndfinkbeiner detectingunrealizabilityofdistributedfaulttolerantsystems
AT leandertentrup detectingunrealizabilityofdistributedfaulttolerantsystems