Let them be part of our lives

CPS: Monitoring Techniques for Safety Critical Cyber-Physical Systems

CPS now is a new emerging research area that include a wide range of related disciplines with different approaches, methods, tools and experimental platforms. This project is looking into one of the branch in this broad area: Monitoring.

The growing complexity of modern engineered systems,and their increased reliance on computation, calls for novel approaches to guaranteeing their correct functioning. This is especially important for automotive systems where a failure can have catastrophic consequences.

One way to ensure correctness of acomplex system is to thoroughly test and/or verify it. While testing can increase condence in a component, it can not guarantee correctness. Verication, on the other hand, can guarantee correctness, but it is simply not feasible, for example, for a car with advanced engine controls and numerous networked microprocessors. In other cases, the component might have been veried for correctness on a model which was not accurate. And more importantly, even if acomponent is found to be defective through verication,we may still want to use it if the incorrect behavior only occurs rarely.

Runtime monitoring of the behavior of a component is an approach that can complement testing and verication. It can provide another layer of safety to the operation of the system. The monitor observes the inputs and outputs of the component and checks whether the behavior of the system is consistent with the expected behavior. Monitors can be especially useful if a fail-safe shut down procedures can be developed, which is true for abroad class of systems. We propose that monitor design be separate from the system design and be performed after the design of the system by a different set of designers. The fundamental advantage of monitors is that they are inprinciple easy to design and implement, and they do not fundamentally constrain the design of acomponent. Such two layer approach ensures that incorrect behaviors, due to potential faulty component designs, are detected by the monitor and are acted upon.


Principal Investigator(s) : Prof. Prasad Sistla

CoPrincipal Investigator(s) : Prof. Milos Zefran

Graduate student(s) : Yao Feng; Andrey Yavolovsky

Support: NSF Award number 1035914




You are here: Home Overview