OERITTE: user-friendly counterexample explanation for model checking

Polina Ovsiannikova; Igor Buzhinsky; Antti Pakonen; Valeriy Vyatkin

doi:10.1109/ACCESS.2021.3073459

OERITTE: user-friendly counterexample explanation for model checking

Polina Ovsiannikova, Igor Buzhinsky, Antti Pakonen, Valeriy Vyatkin

Research output: Contribution to journal › Article › Scientific › peer-review

10 Citations (Scopus)

51 Downloads (Pure)

Abstract

Thorough verification is a part of the design process of instrumentation and control systems if they must comply with crucial safety requirements. Model checking can be applied to the formal model of such a system to reason about its correctness based on the specification provided. When a violation occurs, the model checking tool outputs the proof of the violation in the form of a failure trace, which represents a state sequence of system model transitions where the requirement does not hold. This sequence, however, even for modular systems, is a mere table of values. Due to the lack of any insights into the inner model processes and structures that caused a problem, the debugging process of the formal model becomes time and effort consuming. The tool presented in this paper, Oeritte, is aimed at assisting the analyst in this challenge. It implements a method for automatic visual counterexample explanation which includes reasoning both over the falsified LTL formula and over the NuSMV function block diagram of the formal model of the system. The tool is applied to an industrial-sized safety control system of a nuclear power plant.

Original language	English
Article number	9405616
Pages (from-to)	61383-61397
Number of pages	15
Journal	IEEE Access
Volume	9
Early online date	15 Apr 2021
DOIs	https://doi.org/10.1109/ACCESS.2021.3073459
Publication status	Published - 2021
MoE publication type	A1 Journal article-refereed

Keywords

Counterexample explanation
counterexample visualization
Delays
function block diagram
Input variables
Model checking
NuSMV
Power generation
Safety
Tools
user-friendly model checking
Visualization

Access to Document

10.1109/ACCESS.2021.3073459Licence: CC BY

ACCESS.2021.3073459Licence: CC BY

Cite this

@article{06545af2822f49659ca4a96eacc93c80,

title = "OERITTE: user-friendly counterexample explanation for model checking",

abstract = "Thorough verification is a part of the design process of instrumentation and control systems if they must comply with crucial safety requirements. Model checking can be applied to the formal model of such a system to reason about its correctness based on the specification provided. When a violation occurs, the model checking tool outputs the proof of the violation in the form of a failure trace, which represents a state sequence of system model transitions where the requirement does not hold. This sequence, however, even for modular systems, is a mere table of values. Due to the lack of any insights into the inner model processes and structures that caused a problem, the debugging process of the formal model becomes time and effort consuming. The tool presented in this paper, Oeritte, is aimed at assisting the analyst in this challenge. It implements a method for automatic visual counterexample explanation which includes reasoning both over the falsified LTL formula and over the NuSMV function block diagram of the formal model of the system. The tool is applied to an industrial-sized safety control system of a nuclear power plant.",

keywords = "Counterexample explanation, counterexample visualization, Delays, function block diagram, Input variables, Model checking, NuSMV, Power generation, Safety, Tools, user-friendly model checking, Visualization",

author = "Polina Ovsiannikova and Igor Buzhinsky and Antti Pakonen and Valeriy Vyatkin",

note = "Funding Information: This work was supported in part by the Finnish Research Programme on Nuclear Power Plant Safety 2018–2022 (SAFIR 2022), and in part by the Government of the Russian Federation under Grant 08-08. Publisher Copyright: {\textcopyright} 2013 IEEE.",

year = "2021",

doi = "10.1109/ACCESS.2021.3073459",

language = "English",

volume = "9",

pages = "61383--61397",

journal = "IEEE Access",

issn = "2169-3536",

publisher = "IEEE Institute of Electrical and Electronic Engineers",

}

TY - JOUR

T1 - OERITTE

T2 - user-friendly counterexample explanation for model checking

AU - Ovsiannikova, Polina

AU - Buzhinsky, Igor

AU - Pakonen, Antti

AU - Vyatkin, Valeriy

N1 - Funding Information: This work was supported in part by the Finnish Research Programme on Nuclear Power Plant Safety 2018–2022 (SAFIR 2022), and in part by the Government of the Russian Federation under Grant 08-08. Publisher Copyright: © 2013 IEEE.

PY - 2021

Y1 - 2021

N2 - Thorough verification is a part of the design process of instrumentation and control systems if they must comply with crucial safety requirements. Model checking can be applied to the formal model of such a system to reason about its correctness based on the specification provided. When a violation occurs, the model checking tool outputs the proof of the violation in the form of a failure trace, which represents a state sequence of system model transitions where the requirement does not hold. This sequence, however, even for modular systems, is a mere table of values. Due to the lack of any insights into the inner model processes and structures that caused a problem, the debugging process of the formal model becomes time and effort consuming. The tool presented in this paper, Oeritte, is aimed at assisting the analyst in this challenge. It implements a method for automatic visual counterexample explanation which includes reasoning both over the falsified LTL formula and over the NuSMV function block diagram of the formal model of the system. The tool is applied to an industrial-sized safety control system of a nuclear power plant.

AB - Thorough verification is a part of the design process of instrumentation and control systems if they must comply with crucial safety requirements. Model checking can be applied to the formal model of such a system to reason about its correctness based on the specification provided. When a violation occurs, the model checking tool outputs the proof of the violation in the form of a failure trace, which represents a state sequence of system model transitions where the requirement does not hold. This sequence, however, even for modular systems, is a mere table of values. Due to the lack of any insights into the inner model processes and structures that caused a problem, the debugging process of the formal model becomes time and effort consuming. The tool presented in this paper, Oeritte, is aimed at assisting the analyst in this challenge. It implements a method for automatic visual counterexample explanation which includes reasoning both over the falsified LTL formula and over the NuSMV function block diagram of the formal model of the system. The tool is applied to an industrial-sized safety control system of a nuclear power plant.

KW - Counterexample explanation

KW - counterexample visualization

KW - Delays

KW - function block diagram

KW - Input variables

KW - Model checking

KW - NuSMV

KW - Power generation

KW - Safety

KW - Tools

KW - user-friendly model checking

KW - Visualization

UR - http://www.scopus.com/inward/record.url?scp=85104629291&partnerID=8YFLogxK

U2 - 10.1109/ACCESS.2021.3073459

DO - 10.1109/ACCESS.2021.3073459

M3 - Article

AN - SCOPUS:85104629291

SN - 2169-3536

VL - 9

SP - 61383

EP - 61397

JO - IEEE Access

JF - IEEE Access

M1 - 9405616

ER -

OERITTE: user-friendly counterexample explanation for model checking

Abstract

Keywords

Access to Document

Other files and links

Fingerprint

Cite this