Table of Contents
Fetching ...

Verification of Quantitative Temporal Properties in RealTime-DEVS

Ariel González, Maximiliano Cristiá, Carlos Luna

TL;DR

The paper tackles the challenge of verifying quantitative temporal properties in Real-Time DEVS models, which go beyond what standard simulation can guarantee. It proposes a workflow that translates RT-DEVS models to Timed Automata and uses Uppaal with automata observers to verify a class of recurrent quantitative temporal properties expressed as patterns, without requiring full MTL support. The approach is augmented by mutation-based techniques to reveal timing-interpretation errors and to generate test cases for implementations, demonstrated on a Railway Control System case study with patterns such as Time-Bounded Response, Time-Restricted Precedence, and Conditional Security. While effective on the case study, the method acknowledges potential state-explosion and manual translation steps, and outlines future work toward automation, broader pattern support, and tool integration. Collectively, the work provides a practical pathway to combine model checking with RT-DEVS for rigorous timing verification and debugging in real-time systems.

Abstract

Real-Time DEVS (RT-DEVS) can model systems with quantitative temporal requirements. Ensuring that such models verify that kind of temporal properties requires to use something beyond simulation. In this work we use the model checker Uppaal to verify a class of recurrent quantitative temporal properties appearing in RT-DEVS models, even though Uppaal cannot deal in general with this kind of properties. In order to overcome these limitations we use the technique known as automata observer. Secondly, by introducing mutations to quantitative temporal properties we are able to find errors in RT-DEVS models and their implementations. A case study from the railway domain is presented.

Verification of Quantitative Temporal Properties in RealTime-DEVS

TL;DR

The paper tackles the challenge of verifying quantitative temporal properties in Real-Time DEVS models, which go beyond what standard simulation can guarantee. It proposes a workflow that translates RT-DEVS models to Timed Automata and uses Uppaal with automata observers to verify a class of recurrent quantitative temporal properties expressed as patterns, without requiring full MTL support. The approach is augmented by mutation-based techniques to reveal timing-interpretation errors and to generate test cases for implementations, demonstrated on a Railway Control System case study with patterns such as Time-Bounded Response, Time-Restricted Precedence, and Conditional Security. While effective on the case study, the method acknowledges potential state-explosion and manual translation steps, and outlines future work toward automation, broader pattern support, and tool integration. Collectively, the work provides a practical pathway to combine model checking with RT-DEVS for rigorous timing verification and debugging in real-time systems.

Abstract

Real-Time DEVS (RT-DEVS) can model systems with quantitative temporal requirements. Ensuring that such models verify that kind of temporal properties requires to use something beyond simulation. In this work we use the model checker Uppaal to verify a class of recurrent quantitative temporal properties appearing in RT-DEVS models, even though Uppaal cannot deal in general with this kind of properties. In order to overcome these limitations we use the technique known as automata observer. Secondly, by introducing mutations to quantitative temporal properties we are able to find errors in RT-DEVS models and their implementations. A case study from the railway domain is presented.
Paper Structure (37 sections, 1 equation, 19 figures, 3 tables)

This paper contains 37 sections, 1 equation, 19 figures, 3 tables.

Figures (19)

  • Figure 1: Activity Flow of the Formal Verification Process
  • Figure 2: TCTL formulas admitted by Uppaal
  • Figure 3: RT-DEVS modeling the Railway Control System (RCS)
  • Figure 4: TA resulting from the translation of the RT-DEVS models of Figure \ref{['fig:train-alarm-rtdevs']}
  • Figure 5: Time-Bounded Response
  • ...and 14 more figures

Theorems & Definitions (3)

  • Definition 1
  • Definition 2
  • Definition 3