Quantitative Analysis of Systems Using Game-Theoretic Learning

Sanjit A. Seshia, Alexander Rakhlin
2012 ACM Transactions on Embedded Computing Systems  
The analysis of quantitative properties, such as timing and power, is central to the design of reliable embedded software and systems. However, the verification of such properties on a program is made difficult by their heavy dependence on the program's environment, such as the processor it runs on. Modeling the environment by hand can be tedious, error-prone and time consuming. In this paper, we present a new, game-theoretic approach to analyzing quantitative properties that is based on
more » ... ing systematic measurements to automatically learn a model of the environment. We model the problem as a game between our algorithm (player) and the environment of the program (adversary), where the player seeks to accurately predict the property of interest while the adversary sets environment states and parameters. To solve this problem, we employ a randomized strategy that repeatedly tests the program along a linear-sized set of program paths called basis paths, using the resulting measurements to infer a weighted-graph model of the environment, from which quantitative properties can be predicted. Test cases are automatically generated using satisfiability modulo theories (SMT) solving. We prove that our algorithm can, under certain assumptions and with arbitrarily high probability, accurately predict properties such as worst-case execution time or estimate the distribution of execution times. Experimental results for execution time analysis demonstrate that our approach is efficient, accurate, and highly portable. 1 In "software-in-the-loop" simulation, the actual software implementation of a controller is simulated along with a model of the continuous plant it controls. However, for scalability, such simulation must be performed on a workstation, not on the embedded target. Consequently, the timing behavior of different execution paths in the program must be inferred a-priori on the target and then used during the workstation-based simulation.
doi:10.1145/2331147.2331165 fatcat:axdktvviezbw5c2ohpfgwwmh54