A Hierarchy of Monitoring Properties for Autonomous Systems
A Hierarchy of Monitoring Properties for Autonomous Systems
复制标题
DOI：
10.2514/6.2023-2588
复制
发表时间：
2023-01
期刊：
影响因子：
--
通讯作者：
Sebastian Schirmer;Christoph Torens;Johann C. Dauer;Jan Baumeister;B. Finkbeiner;Kristin Yvonne Rozier
中科院分区：
文献类型：
--
作者：
Sebastian Schirmer;Christoph Torens;Johann C. Dauer;Jan Baumeister;B. Finkbeiner;Kristin Yvonne Rozier
监测能力在缓解当前、特别是未来自动驾驶飞机系统的安全风险方面发挥着核心作用。这些未来的系统可能包括复杂的组件，如用于环境感知的神经网络，这对当前的核查方法构成了挑战；它们被视为黑箱组件。为了确保这些黑盒符合它们的规范，必须对它们进行监视，以检测在执行期间与其输入和输出行为有关的违规行为。这样的行为属性通常包括更复杂的方面，如时间或空间概念。还可以将输出与来自飞机其他可靠传感器或部件的数据进行比较，使监测成为系统的组成部分，理想情况下，该系统可以利用所有可用资源来评估行动的整体健康状况。当前使用手写代码来监控功能的方法存在无法跟上这些挑战的风险。因此，在本文中，我们提出了一种监控属性的层次结构，为整体健康状况提供了一个视角。我们还给出了监控属性的分类，并展示了如何使用不同的监控规范语言进行形式化。这些监控语言代表了通用代码的更高抽象，因此更紧凑，更易于用户编写和阅读，我们可以独立于他们推理的系统来验证它们的实现。它们提高了监控性能的可维护性，这是应对未来自动驾驶飞机系统日益复杂所需的。
Monitoring capabilities play a central role in mitigating safety risks of current, and especially future autonomous aircraft systems. These future systems are likely to include complex components such as neural networks for environment perception, which pose a challenge for current verification approaches; they are considered as black-box components. To assure that these black-boxes comply with their specification, they must be monitored to detect violations during execution with respect to their input and output behaviors. Such behavioral properties often include more complex aspects such as temporal or spatial notions. The outputs can also be compared to data from other assured sensors or components of the aircraft, making monitoring an integral part of the system, which ideally has access to all available resources to assess the overall health of the operation. Current approaches using handwritten code for monitoring functions run the risk of not being able to keep up with these challenges. Therefore, in this paper, we present a hierarchy of monitoring properties that provides a perspective for overall health. We also present a categorization of monitoring properties and show how different monitoring specification languages can be used for formalization. These monitoring languages represent a higher abstraction of general-purpose code and are therefore more compact and easier for a user to write and read, and we can validate their implementations independently from the systems they reason about. They improve the maintainability of monitoring properties that is required to handle the increased complexity of future autonomous aircraft systems.