This paper is about state estimation in a timed probabilistic setting. The main contribution is a general procedure to design an observer for computing the probabilities of the states for labeled continuous time Markov models as functions of time, based on a sequence of observations and their associated time stamps that have been collected thus far. Two notions of state consistency with respect to such a timed observation sequence are introduced and related necessary and sufficient conditions are derived. The method is then applied to the detection of cyber-attacks. The plant and the possible attacks are described in terms of a labeled continuous time Markov model that includes both observable and unobservable events, and where each attack corresponds to a particular subset of states. Consequently, attack detection is reformulated as a state estimation problem.
{"title":"Probabilistic state estimation for labeled continuous time Markov models with applications to attack detection","authors":"Lefebvre, Dimitri, Seatzu, Carla, Hadjicostis, Christoforos N., Giua, Alessandro","doi":"10.1007/s10626-021-00348-y","DOIUrl":"https://doi.org/10.1007/s10626-021-00348-y","url":null,"abstract":"<p>This paper is about state estimation in a timed probabilistic setting. The main contribution is a general procedure to design an observer for computing the probabilities of the states for labeled continuous time Markov models as functions of time, based on a sequence of observations and their associated time stamps that have been collected thus far. Two notions of state consistency with respect to such a timed observation sequence are introduced and related necessary and sufficient conditions are derived. The method is then applied to the detection of cyber-attacks. The plant and the possible attacks are described in terms of a labeled continuous time Markov model that includes both observable and unobservable events, and where each attack corresponds to a particular subset of states. Consequently, attack detection is reformulated as a state estimation problem.</p>","PeriodicalId":92890,"journal":{"name":"Discrete event dynamic systems","volume":"25 56","pages":""},"PeriodicalIF":0.0,"publicationDate":"2021-09-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"138495698","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2021-08-05DOI: 10.1007/s10626-021-00343-3
Camilli, Matteo, Capra, Lorenzo
Engineering distributed self-adaptive systems is challenging due to multiple interacting components, some of which monitor and possibly modify the behavior of managed components that operate in highly dynamic settings. Formalizing such systems having a decentralized adaptation control has been recognized as a hard task. In this article, we introduce a formal framework based on Symmetric Nets (a well-established subclass of Colored Petri nets) for modeling and analyzing distributed self-adaptive discrete-event systems. Even though Petri Nets represent a sound and expressive formal model of concurrency and distribution, they cannot specify in a natural way structural changes enacted by adaptation procedures. We overcome this limitation by means of a two-layer modeling approach that enables clear separation of concerns and allows multiple decentralized adaptation procedures to be specified, validated, and verified against formal requirements. Validation and verification techniques are supported by powerful off-the-shelf tools tailored to Symmetric Nets. A self-healing manufacturing system case study is used to show applicability, advantages, and shortcomings of the approach. In particular, complexity issues are thoroughly discussed and mitigated by adopting complementary approaches based on interleaving reduction and behavioral symmetries exploitation.
{"title":"Formal specification and verification of decentralized self-adaptive systems using symmetric nets","authors":"Camilli, Matteo, Capra, Lorenzo","doi":"10.1007/s10626-021-00343-3","DOIUrl":"https://doi.org/10.1007/s10626-021-00343-3","url":null,"abstract":"<p>Engineering distributed self-adaptive systems is challenging due to multiple interacting components, some of which monitor and possibly modify the behavior of managed components that operate in highly dynamic settings. Formalizing such systems having a decentralized adaptation control has been recognized as a hard task. In this article, we introduce a formal framework based on Symmetric Nets (a well-established subclass of Colored Petri nets) for modeling and analyzing distributed self-adaptive discrete-event systems. Even though Petri Nets represent a sound and expressive formal model of concurrency and distribution, they cannot specify in a natural way structural changes enacted by adaptation procedures. We overcome this limitation by means of a two-layer modeling approach that enables clear separation of concerns and allows multiple decentralized adaptation procedures to be specified, validated, and verified against formal requirements. Validation and verification techniques are supported by powerful off-the-shelf tools tailored to Symmetric Nets. A self-healing manufacturing system case study is used to show applicability, advantages, and shortcomings of the approach. In particular, complexity issues are thoroughly discussed and mitigated by adopting complementary approaches based on interleaving reduction and behavioral symmetries exploitation.</p>","PeriodicalId":92890,"journal":{"name":"Discrete event dynamic systems","volume":"25 58","pages":""},"PeriodicalIF":0.0,"publicationDate":"2021-08-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"138495729","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2021-03-02DOI: 10.1007/s10626-021-00339-z
M. Elena Martínez-Manzanares, J. Adolfo Minjárez-Sosa
We study a class of discrete-time stochastic systems composed of a large number of N interacting objects, which are classified in a finite number of classes. The behavior of the objects is controlled by a central decision-maker as follows. At each stage, once the configuration of the system is observed, the controller takes a decision; then a cost is incurred and there is a positive probability the process stops, otherwise the objects move randomly among the classes according to a transition probability. That is, with positive probability, the system is absorbed by a configuration that represents the death of the system, and there it will remain without incurring cost. Due to the large number of objects, the control problem is studied according to the mean field theory. Thus, instead of analyzing a single object, we focus on the proportions of objects occupying each class, and then we study the limit as N goes to infinity.
{"title":"A mean field absorbing control model for interacting objects systems","authors":"M. Elena Martínez-Manzanares, J. Adolfo Minjárez-Sosa","doi":"10.1007/s10626-021-00339-z","DOIUrl":"https://doi.org/10.1007/s10626-021-00339-z","url":null,"abstract":"<p>We study a class of discrete-time stochastic systems composed of a large number of <i>N</i> interacting objects, which are classified in a finite number of classes. The behavior of the objects is controlled by a central decision-maker as follows. At each stage, once the configuration of the system is observed, the controller takes a decision; then a cost is incurred and there is a positive probability the process stops, otherwise the objects move randomly among the classes according to a transition probability. That is, with positive probability, the system is absorbed by a configuration that represents the death of the system, and there it will remain without incurring cost. Due to the large number of objects, the control problem is studied according to the mean field theory. Thus, instead of analyzing a single object, we focus on the proportions of objects occupying each class, and then we study the limit as <i>N</i> goes to infinity.</p>","PeriodicalId":92890,"journal":{"name":"Discrete event dynamic systems","volume":"25 66","pages":""},"PeriodicalIF":0.0,"publicationDate":"2021-03-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"138495728","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2021-01-07DOI: 10.1007/s10626-020-00334-w
Martijn A. Goorden, Martin Fabian, Joanna M. van de Mortel-Fronczak, Michel A. Reniers, Wan J. Fokkink, Jacobus E. Rooda
To avoid the state-space explosion problem, a set of supervisors may be synthesized using divide and conquer strategies, like modular or multilevel synthesis. Unfortunately, these supervisors may be conflicting, meaning that even though they are individually non-blocking, they are together blocking. Abstraction-based compositional nonblocking verification of extended finite automata provides means to verify whether a set of models is nonblocking. In case of a blocking system, a coordinator can be synthesized to resolve the blocking. This paper presents a framework for compositional coordinator synthesis for discrete-event systems modeled as extended finite automata. The framework allows for synthesis of a coordinator on the abstracted system in case compositional verification identifies the system to be blocking. As the abstracted system may use notions not present in the original model, like renamed events, the synthesized coordinator is refined such that it will be nonblocking, controllable, and maximally permissive for the original system. For each abstraction, it is shown how this refinement can be performed. It turns out that for the presented set of abstractions the coordinator refinement is straightforward.
{"title":"Compositional coordinator synthesis of extended finite automata","authors":"Martijn A. Goorden, Martin Fabian, Joanna M. van de Mortel-Fronczak, Michel A. Reniers, Wan J. Fokkink, Jacobus E. Rooda","doi":"10.1007/s10626-020-00334-w","DOIUrl":"https://doi.org/10.1007/s10626-020-00334-w","url":null,"abstract":"To avoid the state-space explosion problem, a set of supervisors may be synthesized using divide and conquer strategies, like modular or multilevel synthesis. Unfortunately, these supervisors may be conflicting, meaning that even though they are individually non-blocking, they are together blocking. Abstraction-based compositional nonblocking verification of extended finite automata provides means to verify whether a set of models is nonblocking. In case of a blocking system, a coordinator can be synthesized to resolve the blocking. This paper presents a framework for compositional coordinator synthesis for discrete-event systems modeled as extended finite automata. The framework allows for synthesis of a coordinator on the abstracted system in case compositional verification identifies the system to be blocking. As the abstracted system may use notions not present in the original model, like renamed events, the synthesized coordinator is refined such that it will be nonblocking, controllable, and maximally permissive for the original system. For each abstraction, it is shown how this refinement can be performed. It turns out that for the presented set of abstractions the coordinator refinement is straightforward.","PeriodicalId":92890,"journal":{"name":"Discrete event dynamic systems","volume":"25 69","pages":""},"PeriodicalIF":0.0,"publicationDate":"2021-01-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"138495727","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2021-01-04DOI: 10.1007/s10626-020-00332-y
Zhiguo Wang, Tsan Sheng Ng, Chee Khiang Pang
This paper studies the scheduling problem for the manufacturing systems with uncertain job duration, and the possibility of planning due-date quotations for critical manufacturing tasks given a fixed contingency budget. We propose a due-date quotation model to measure the risk of delay in the manufacturing process in terms of the allocated contingency budget. The risk of delay is measured in the same unit as its corresponding milestone factor such that the decision makers could directly visualize and quantify the level of risks in units of hours or days. In addition, the proposed model possesses various great properties required by a convex risk measure and it represents a minimized certainty equivalent of the overall expected risk in achieving the manufacturing due-dates. Extensive computational experiments are conducted to evaluate the model performance. The results show that our proposed model, compared to various existing methods, provides a much more balanced performance in terms of success rate of due-date achievement, due-date quotation shortfall, as well as, robustness against uncertainties. The practical applicability of the proposed models are also tested with the job scheduling problem in a real stamping industry application.
{"title":"Due-date quotation model for manufacturing system scheduling under uncertainty","authors":"Zhiguo Wang, Tsan Sheng Ng, Chee Khiang Pang","doi":"10.1007/s10626-020-00332-y","DOIUrl":"https://doi.org/10.1007/s10626-020-00332-y","url":null,"abstract":"This paper studies the scheduling problem for the manufacturing systems with uncertain job duration, and the possibility of planning due-date quotations for critical manufacturing tasks given a fixed contingency budget. We propose a due-date quotation model to measure the risk of delay in the manufacturing process in terms of the allocated contingency budget. The risk of delay is measured in the same unit as its corresponding milestone factor such that the decision makers could directly visualize and quantify the level of risks in units of hours or days. In addition, the proposed model possesses various great properties required by a convex risk measure and it represents a minimized certainty equivalent of the overall expected risk in achieving the manufacturing due-dates. Extensive computational experiments are conducted to evaluate the model performance. The results show that our proposed model, compared to various existing methods, provides a much more balanced performance in terms of success rate of due-date achievement, due-date quotation shortfall, as well as, robustness against uncertainties. The practical applicability of the proposed models are also tested with the job scheduling problem in a real stamping industry application.","PeriodicalId":92890,"journal":{"name":"Discrete event dynamic systems","volume":"25 70","pages":""},"PeriodicalIF":0.0,"publicationDate":"2021-01-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"138495726","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2020-11-02DOI: 10.1007/s10626-020-00325-x
Berend Jan Christiaan van Putten, Bram van der Sanden, Michel Reniers, Jeroen Voeten, Ramon Schiffelers
One of the challenges in the design of supervisors with optimal throughput for manufacturing systems is the presence of behavior outside the control of the supervisor. Uncontrollable behavior is typically encountered in the presence of (user) inputs, external disturbances, and exceptional behavior. This paper introduces an approach for the modeling and synthesis of a throughput-optimal supervisor for manufacturing systems with partially-controllable behavior on two abstraction levels. Extended finite automata are used to model the high abstraction level in terms of system activities, where uncontrollability is modeled by the presence of uncontrollable activities. In the lower abstraction level, activities are modeled as directed acyclic graphs that define the constituent actions and dependencies between them. System feedback from the lower abstraction level, including timing, is captured using variables in the extended finite automata of the higher abstraction level. For throughput optimization, game-theoretic methods are employed on the state space of the synthesized supervisor to determine a guarantee to the lower-bound system performance. This result is also used in a new method to automatically compute a throughput-optimal controller that is robust to the uncontrollable behavior.
{"title":"Supervisor synthesis and throughput optimization of partially-controllable manufacturing systems","authors":"Berend Jan Christiaan van Putten, Bram van der Sanden, Michel Reniers, Jeroen Voeten, Ramon Schiffelers","doi":"10.1007/s10626-020-00325-x","DOIUrl":"https://doi.org/10.1007/s10626-020-00325-x","url":null,"abstract":"One of the challenges in the design of supervisors with optimal throughput for manufacturing systems is the presence of behavior outside the control of the supervisor. Uncontrollable behavior is typically encountered in the presence of (user) inputs, external disturbances, and exceptional behavior. This paper introduces an approach for the modeling and synthesis of a throughput-optimal supervisor for manufacturing systems with partially-controllable behavior on two abstraction levels. Extended finite automata are used to model the high abstraction level in terms of system activities, where uncontrollability is modeled by the presence of uncontrollable activities. In the lower abstraction level, activities are modeled as directed acyclic graphs that define the constituent actions and dependencies between them. System feedback from the lower abstraction level, including timing, is captured using variables in the extended finite automata of the higher abstraction level. For throughput optimization, game-theoretic methods are employed on the state space of the synthesized supervisor to determine a guarantee to the lower-bound system performance. This result is also used in a new method to automatically compute a throughput-optimal controller that is robust to the uncontrollable behavior.","PeriodicalId":92890,"journal":{"name":"Discrete event dynamic systems","volume":"26 3","pages":""},"PeriodicalIF":0.0,"publicationDate":"2020-11-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"138495725","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2020-09-19DOI: 10.1007/s10626-020-00326-w
Patrice Bonhomme
This paper proposes a state estimation technique in a decentralized context for time dependent systems. The plant of the studied system is modeled by P-time labeled Petri nets (P-TLPN) and the set of events is partitioned into a set of observable and unobservable ones, leading to a partial observation configuration. Indeed, the observation is distributed over a set of distinct sites which have their own local vision of the system. Moreover, some event are indistinguishable as the same label can be associated with the same transition adding another source of non-determinism. Thus, thanks to a global coordinator helped by the consideration of the timing factor, the local information transmitted via the different sites will be exploited to assess the set of states consistent with the current considered observation. The developed technique is an iterative procedure coupled with a time feasibility analysis (i.e., schedulability) conducted for particular firing sequences allowing to explain the considered observation, called time explanations. A diagnosis procedure aiming at evaluating the occurrence of particular faults for each behavior is also provided.
{"title":"Decentralized state estimation and diagnosis of p-time labeled Petri nets systems","authors":"Patrice Bonhomme","doi":"10.1007/s10626-020-00326-w","DOIUrl":"https://doi.org/10.1007/s10626-020-00326-w","url":null,"abstract":"This paper proposes a state estimation technique in a decentralized context for time dependent systems. The plant of the studied system is modeled by P-time labeled Petri nets (P-TLPN) and the set of events is partitioned into a set of observable and unobservable ones, leading to a partial observation configuration. Indeed, the observation is distributed over a set of distinct sites which have their own local vision of the system. Moreover, some event are indistinguishable as the same label can be associated with the same transition adding another source of non-determinism. Thus, thanks to a global coordinator helped by the consideration of the timing factor, the local information transmitted via the different sites will be exploited to assess the set of states consistent with the current considered observation. The developed technique is an iterative procedure coupled with a time feasibility analysis (i.e., schedulability) conducted for particular firing sequences allowing to explain the considered observation, called time explanations. A diagnosis procedure aiming at evaluating the occurrence of particular faults for each behavior is also provided.","PeriodicalId":92890,"journal":{"name":"Discrete event dynamic systems","volume":"26 5","pages":""},"PeriodicalIF":0.0,"publicationDate":"2020-09-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"138495706","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2020-05-21DOI: 10.1007/s10626-020-00319-9
Pedro A. C. F. Leite, Fabio L. Baldissera, J. Cury
{"title":"State-based supervisory control with restrictions on the supervisor realization","authors":"Pedro A. C. F. Leite, Fabio L. Baldissera, J. Cury","doi":"10.1007/s10626-020-00319-9","DOIUrl":"https://doi.org/10.1007/s10626-020-00319-9","url":null,"abstract":"","PeriodicalId":92890,"journal":{"name":"Discrete event dynamic systems","volume":"55 07","pages":"671 - 693"},"PeriodicalIF":0.0,"publicationDate":"2020-05-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"141203824","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}