Real-time simulation support for runtime verification of cyber-physical systems
Version 2 2024-06-03, 14:56Version 2 2024-06-03, 14:56
Version 1 2018-05-07, 15:06Version 1 2018-05-07, 15:06
journal contribution
posted on 2024-06-03, 14:56authored byX Zheng, C Julien, H Chen, R Podorozhny, F Cassez
In Cyber-Physical Systems (CPS), cyber and physical components must work seamlessly in tandem. Runtime verification of CPS is essential yet very difficult, due to deployment environments that are expensive, dangerous, or simply impossible to use for verification tasks. A key enabling factor of runtime verification of CPS is the ability to integrate real-time simulations of portions of the CPS into live running systems. We propose a verification approach that allows CPS application developers to opportunistically leverage real-time simulation to support runtime verification. Our approach, termed BRACEBIND, allows selecting, at runtime, between actual physical processes or simulations of them to support a running CPS application. To build BRACEBIND, we create a real-time simulation architecture to generate and manage multiple realtime simulation environments based on existing simulation models in a manner that ensures sufficient accuracy for verifying a CPS application. Specifically, BRACEBIND aims to both improve simulation speed and minimize latency, thereby making it feasible to integrate simulations of physical processes into the running CPS application. BRACEBIND then integrates this real-time simulation architecture with an existing runtime verification approach that has low computational overhead and high accuracy. This integration uses an aspect-oriented adapter architecture that connects the variables in the cyber portion of the CPS application with either sensors and actuators in the physical world or the automatically generated real-time simulation. Our experimental results show that, with a negligible performance penalty, our approach is both efficient and effective in detecting program errors that are otherwise only detectable in a physical deployment.