🤖 AI Summary
Strict hyperproperty satisfaction—particularly for hyper-safety properties expressed in HyperLTL—is often unrealizable in practical systems due to implementation imprecision, environmental noise, or resource constraints.
Method: This work pioneers the integration of qualitative reasoning into HyperLTL by introducing a [0,1]-valued quality assessment framework that jointly characterizes both propositional truth degrees and temporal relaxation. We extend HyperLTL’s syntax and semantics to define an approximate satisfaction relation and establish decidability results for approximate model checking. For broad syntactic fragments—including universal and alternation-free formulas—we design scalable, polynomial-time algorithms.
Contributions: (1) The first formal unification of qualitative reasoning with hyper-temporal logic; (2) The first theoretically grounded framework for approximate HyperLTL model checking, with soundness, completeness, and decidability guarantees; (3) Substantially improved practicality and verifiability of high-assurance hyperproperties—e.g., noninterference and observational determinism—in complex, real-world systems.
📝 Abstract
Hyperproperties allow one to specify properties of systems that inherently involve not single executions of the system, but several of them at once: observational determinism and non-inference are two examples of such properties used to study the security of systems. Logics like HyperLTL have been studied in the past to model check hyperproperties of systems. However, most of the time, requiring strict security properties is actually ineffective as systems do not meet such requirements. To overcome this issue, we introduce qualitative reasoning in HyperLTL, inspired by a similar work on LTL by Almagor, Boker and Kupferman where a formula has a value in the interval [0, 1], obtained by considering either a propositional quality (how much the specification is satisfied), or a temporal quality (when the specification is satisfied). We show decidability of the approximated model checking problem, as well as the model checking of large fragments.