On ACTL Formulas Having Linear Counterexamples

作者:

Highlights:

摘要

In case an ACTL formula φ fails over a transition graph M, it is most useful to provide a counterexample, i.e., a computation tree of M, witnessing the failure. If there exists a single path in M which by itself witnesses the failure of φ, then φ has a linear counterexample. We show that, given M and φ, where M⊭φ, it is NP-hard to determine whether there exists a linear counterexample. Moreover, it is PSPACE-hard to decide whether an ACTL formula φ always admits a linear counterexample if it fails. This means that there exists no simple characterization of the ACTL formulas that guarantee linear counterexamples. Consequently, we study templates of ACTL formulas, i.e., skeletons of modal formulas whose atoms are disregarded. We identify the (unique) maximal set LIN of templates whose instances (obtained by replacing atoms with arbitrary pure state formulas) always guarantee linear counterexamples. We show that for each ACTL formula φ which is an instance of a template γ★∈LIN, and for each Kripke structure M such that M⊭φ, a single path of M witnessing the failure by itself can be computed in polynomial time.

论文关键词:model checking,verification,counterexamples,linear counterexamples,counterpaths,temporal reasoning,ACTL,branching time logics

论文评审过程:Received 12 November 1999, Revised 18 August 2000, Available online 25 May 2002.

论文官网地址:https://doi.org/10.1006/jcss.2000.1734