SGER: Monitoring Off-the-shelf Components

这笔用于探索性研究的小额赠款研究了一种有前途的新方法，用于检查由组件组成的软件的正确执行。开发新的响应式软件的一个有吸引力的方法是使用“现成的”？没有或可能不能完全满足所需需求的第三方组件。为了安全地使用这些组件，需要使用运行时监视器来检测违反需求的行为。这类需求通常由安全部分和活动部分组成，前者的运行时监控研究得很好，后者的运行时监控难以捉摸。最常见的是，运行时监视器提取一个安全属性，该属性要么过于接近原始需求，要么低于原始需求，因此往往具有很高的不准确性。提出了一种新的方法，采用随机化来监测活动性。粗略地说，该方法偶尔掷硬币来决定是否放弃实现活度要求。这种方法精度高，并且具有优雅退化的特性：寿命属性不满足的时间越长，被监视器拒绝的可能性越大。该项目还研究了评估监测方法准确性的新方法，以比较各种算法。最后，监视器通常是被动的。——他们只观察计算，但不参与计算？但这项工作探索？活跃？与组件合作以生成满足需求的计算的监视器。

This small grant for exploratory research investigates a promising new approach to checking the proper execution of software composed of components. An attractive method for developing new reactive software is to use ?off-the-shelf? third-party components that do not, or may not, exactly satisfy the desired requirements. To safely use such components, the use of run-time monitors is used to detect behaviors violating the requirements. Such requirements are usually composed of a safety part, whose run-time monitoring is well studied, and a liveness part, whose run-time monitoring is elusive. Most commonly, run-time monitors extract a safety property, that either over-approximates or under-approximate the original requirements, and thus tend to have a have high level of inaccuracy.A novel class of methods is proposed that employs randomization for monitoring the liveness properties. Roughly speaking, the method occasionally tosses a coin to determine whether to give up achieving a liveness requirement. Such methods are highly accurate and enjoy the property of graceful degradation: the longer a liveness property is not satisfied, the more likely is it to be rejected by the monitor. The project also investigates novel methods for evaluating the accuracy of monitoring approaches to compare various algorithms. Finally, monitors are usually ?passive? -- they only observe the computation, but do not participate in them ? but this work explores ?active? monitors that cooperate with the component to generate a computation that satisfies the requirements.