50
Logical Foundations of Cyber-Physical Systems 01: Cyber-Physical Systems: Overview Logical Foundations of Cyber-Physical Systems André Platzer André Platzer André Platzer (CMU) LFCPS/01: Overview LFCPS/01 1 / 28

01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

  • Upload
    others

  • View
    1

  • Download
    0

Embed Size (px)

Citation preview

Page 1: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

Logical Foundations of Cyber-Physical Systems01: Cyber-Physical Systems: Overview

Logical Foundations of Cyber-Physical Systems

André Platzer

André Platzer

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 1 / 28

Page 2: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

Outline

1 CPS: IntroductionHybrid Systems & Cyber-Physical SystemsApplicationsRobot Labs

2 Course: Logical Foundations of Cyber-Physical SystemsEducational ApproachObjectivesOutlineLabsCPS V&V Grand PrixAssessmentResources

3 Summary

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 1 / 28

Page 3: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

Outline

1 CPS: IntroductionHybrid Systems & Cyber-Physical SystemsApplicationsRobot Labs

2 Course: Logical Foundations of Cyber-Physical SystemsEducational ApproachObjectivesOutlineLabsCPS V&V Grand PrixAssessmentResources

3 Summary

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 1 / 28

Page 4: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

Cyber-Physical Systems Analysis: Aircraft ExampleWhich control decisions are safe for aircraft collision avoidance?

Cyber-Physical SystemsCPSs combine cyber capabilities with physical capabilitiesto solve problems that neither part could solve alone.

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 2 / 28

Page 5: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPSs Promise Transformative Impact!

Prospects: Safe & EfficientDriver assistanceAutonomous cars

Pilot decision supportAutopilots / UAVs

Train protectionRobots near humans

Prerequisite: CPSs need to be safeHow do we make sure CPSs make the world a better place?

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 3 / 28

Page 6: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

Can you trust a computer to control physics?

1 Depends on how it has been programmed2 And on what will happen if it malfunctions

Rationale1 Safety guarantees require analytic foundations.2 A common foundational core helps all application domains.3 Foundations revolutionized digital computer science & our society.4 Need even stronger foundations when software reaches out into our

physical world.

CPSs deserve proofs as safety evidence!

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28

Page 7: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

Can you trust a computer to control physics?

1 Depends on how it has been programmed2 And on what will happen if it malfunctions

Rationale1 Safety guarantees require analytic foundations.2 A common foundational core helps all application domains.3 Foundations revolutionized digital computer science & our society.4 Need even stronger foundations when software reaches out into our

physical world.

CPSs deserve proofs as safety evidence!

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28

Page 8: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPSs are Multi-Dynamical Systems

dis

cre

te contin

uo

us

nondet

sto

chastic

advers

arial

CPS DynamicsCPS are characterized by multiplefacets of dynamical systems.

CPS CompositionsCPS combines multiplesimple dynamical effects.

Descriptive simplification

Tame PartsExploiting compositionalitytames CPS complexity.

Analytic simplification

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 5 / 28

Page 9: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPSs are Multi-Dynamical Systems

dis

cre

te contin

uo

us

nondet

sto

chastic

advers

arial

hybrid systemsHS = discrete+ ODE

stochastic hybrid sys.SHS = HS+ stochastics

5 10 15 20

-0.3

-0.2

-0.1

0.1

0.2

0.3

hybrid gamesHG = HS+ adversary

distributed hybrid sys.DHS = HS+ distributed

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 6 / 28

Page 10: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPS Analysis

Challenge (CPS)

Fixed rule describing stateevolution with both

Discrete dynamics(control decisions)Continuous dynamics(differential equations)

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2 4 6 8 10t

-0.8

-0.6

-0.4

-0.2

0.2

a

2 4 6 8 10t

0.2

0.4

0.6

0.8

1.0

v

2 4 6 8 10t

2

4

6

8

p

px

py

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 7 / 28

Page 11: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPS Analysis

Challenge (CPS)

Fixed rule describing stateevolution with both

Discrete dynamics(control decisions)Continuous dynamics(differential equations)

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2 4 6 8 10t

-0.8

-0.6

-0.4

-0.2

0.2

a

2 4 6 8 10t

-1.0

-0.5

0.5

Ω

2 4 6 8 10t

-0.5

0.5

1.0

d

dx

dy

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 7 / 28

Page 12: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

Hybrid Systems Versus Cyber-Physical Systems

Mathematical model for complex physical systems:

Definition (Hybrid Systems)Systems with interacting discrete and continuous dynamics

Technical characteristics:

Definition (Cyber-Physical Systems)(Distributed networks of) computerized control for physical systemCommunication, computation, and control for physics

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 8 / 28

Page 13: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

What CPSs are around us?

What CPSs will be around us in the future?

Which CPSs do we trust with our lives?

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 9 / 28

Page 14: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

LFCPS Labs

1: Charging Station

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

X Design, modelX Verify

2: Follow the Leader

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4: Obstacles

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 10 / 28

Page 15: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

LFCPS Labs

1: Charging Station

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

X Design, modelX Verify

2: Follow the Leader

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4: Obstacles

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 10 / 28

Page 16: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

LFCPS Labs

1: Charging Station

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2: Follow the Leader

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

X Design, modelX Verify

4: Obstacles

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 10 / 28

Page 17: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

LFCPS Labs

1: Charging Station

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2: Follow the Leader

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

X Design, modelX Verify

4: Obstacles

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 10 / 28

Page 18: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

LFCPS Labs

1: Charging Station

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2: Follow the Leader

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4: Obstacles

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

X Design, modelX Verify

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 10 / 28

Page 19: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

LFCPS Labs

1: Charging Station

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2: Follow the Leader

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4: Obstacles

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

X Design, modelX Verify

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 10 / 28

Page 20: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

LFCPS Labs

1: Charging Station

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

3: Racetrack

X Design, modelX Verify

4: Obstacles

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 10 / 28

Page 21: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPS Analysis & Design: Robot Lab

Challenge (Hybrid Systems)

Design & verify controller fora robot avoiding obstacles

Accelerate / brake(discrete dynamics)1D motion(continuous dynamics)

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2 4 6 8 10t

-0.3

-0.2

-0.1

0.1

0.2

a

2 4 6 8 10t

0.2

0.4

0.6

0.8

v

2 4 6 8 10t

1

2

3

4

5

p

px

py

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 11 / 28

Page 22: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPS Analysis & Design: Robot Lab

Challenge (Hybrid Systems)

Design & verify controller fora robot avoiding obstacles

Accelerate / brake(discrete dynamics)1D motion(continuous dynamics)

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2 4 6 8 10t

-0.3

-0.2

-0.1

0.1

0.2

a

2 4 6 8 10t

0.00002

0.00004

0.00006

0.00008

Ω

2 4 6 8 10t

0.2

0.4

0.6

0.8

1.0

d

dx

dy

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 11 / 28

Page 23: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPS Analysis & Design: Robot Lab

Challenge (Hybrid Systems)

Design & verify controller fora robot avoiding obstacles

Accelerate / brake / stop(discrete dynamics)1D motion(continuous dynamics)

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2 4 6 8 10t

-0.20

-0.15

-0.10

-0.05

a

2 4 6 8 10t

0.2

0.4

0.6

0.8

1.0

1.2

v

2 4 6 8 10t

0.5

1.0

1.5

2.0

2.5

3.0

3.5

ppx

py

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 12 / 28

Page 24: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPS Analysis & Design: Robot Lab

Challenge (Hybrid Systems)

Design & verify controller fora robot avoiding obstacles

Accelerate / brake / stop(discrete dynamics)1D motion(continuous dynamics)

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2 4 6 8 10t

-0.20

-0.15

-0.10

-0.05

a

2 4 6 8 10t

0.00002

0.00004

0.00006

0.00008

0.00010

0.00012

Ω

2 4 6 8 10t

-1.0

-0.5

0.5

1.0

d

dx

dy

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 12 / 28

Page 25: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPS Analysis & Design: Robot Lab

Challenge (Hybrid Systems)

Design & verify controller fora robot avoiding obstacles

Accelerate / brake(discrete dynamics)1D motion(continuous dynamics)

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2 4 6 8 10t

-0.3

-0.2

-0.1

0.1

0.2

a

2 4 6 8 10t

0.2

0.4

0.6

0.8

v

2 4 6 8 10t

0.5

1.0

1.5

2.0

2.5

p

px

py

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 13 / 28

Page 26: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPS Analysis & Design: Robot Lab

Challenge (Hybrid Systems)

Design & verify controller fora robot avoiding obstacles

Accelerate / brake(discrete dynamics)1D motion(continuous dynamics)

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2 4 6 8 10t

-0.3

-0.2

-0.1

0.1

0.2

a

2 4 6 8 10t

0.00002

0.00004

0.00006

0.00008

Ω

2 4 6 8 10t

0.2

0.4

0.6

0.8

1.0

d

dx

dy

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 13 / 28

Page 27: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPS Analysis & Design: Robot Lab

Challenge (Hybrid Systems)

Design & verify controller fora robot avoiding obstacles

Accel / brake / steer(discrete dynamics)2D motion(continuous dynamics)

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2 4 6 8 10t

-0.8

-0.6

-0.4

-0.2

0.2

a

2 4 6 8 10t

0.2

0.4

0.6

0.8

1.0

v

2 4 6 8 10t

2

4

6

8

p

px

py

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 14 / 28

Page 28: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPS Analysis & Design: Robot Lab

Challenge (Hybrid Systems)

Design & verify controller fora robot avoiding obstacles

Accel / brake / steer(discrete dynamics)2D motion(continuous dynamics)

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2 4 6 8 10t

-0.8

-0.6

-0.4

-0.2

0.2

a

2 4 6 8 10t

-1.0

-0.5

0.5

Ω

2 4 6 8 10t

-0.5

0.5

1.0

d

dx

dy

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 14 / 28

Page 29: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPS Analysis & Design: Robot Lab

Challenge (Hybrid Systems)

Design & verify controller fora robot avoiding obstacles

Dynamic obstacles(other agents)Avoid collisions(define safety)

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2 4 6 8 10t

-4

-3

-2

-1

a

2 4 6 8 10t

0.2

0.4

0.6

0.8

1.0

v

2 4 6 8 10t

1

2

3

4

ppx

py

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 15 / 28

Page 30: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPS Analysis & Design: Robot Lab

Challenge (Hybrid Systems)

Design & verify controller fora robot avoiding obstacles

Dynamic obstacles(other agents)Avoid collisions(define safety)

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2 4 6 8 10t

-4

-3

-2

-1

a

2 4 6 8 10t

-1.0

-0.5

0.5

Ω

2 4 6 8 10t

-0.5

0.5

1.0

d

dx

dy

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 15 / 28

Page 31: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPS Analysis & Design: Robot Lab

Challenge (Hybrid Systems)

Design & verify controller fora robot avoiding obstacles

Control robot(respect delays)Environment interaction(obstacles, agents,uncertainty)

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2 4 6 8 10t

-0.6

-0.4

-0.2

0.2

0.4

a

2 4 6 8 10t

0.2

0.4

0.6

0.8

1.0

1.2

v

2 4 6 8 10t

1

2

3

4

5

6

7

p

px

py

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 16 / 28

Page 32: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPS Analysis & Design: Robot Lab

Challenge (Hybrid Systems)

Design & verify controller fora robot avoiding obstacles

Control robot(respect delays)Environment interaction(obstacles, agents,uncertainty)

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

2 4 6 8 10t

-0.6

-0.4

-0.2

0.2

0.4

a

2 4 6 8 10t

-1.0

-0.5

0.5

Ω

2 4 6 8 10t

-0.5

0.5

1.0

d

dx

dy

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 16 / 28

Page 33: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

Outline

1 CPS: IntroductionHybrid Systems & Cyber-Physical SystemsApplicationsRobot Labs

2 Course: Logical Foundations of Cyber-Physical SystemsEducational ApproachObjectivesOutlineLabsCPS V&V Grand PrixAssessmentResources

3 Summary

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 16 / 28

Page 34: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

LogicalFoundations

ofCyber-Physical

Systems

Logic

TheoremProving

ProofTheory

ModalLogic Model

Checking

Algebra

ComputerAlgebra

RAlgebraicGeometry

DifferentialAlgebra

LieAlgebra

Analysis

DifferentialEquations

CarathedorySolutions

ViscosityPDE

Solutions

DynamicalSystems

Stochastics Doob’sSuper-

martingales

Dynkin’sInfinitesimalGenerators

DifferentialGenerators

StochasticDifferentialEquations

Numerics

HermiteInterpolation

WeierstraßApprox-imation

ErrorAnalysis

NumericalIntegration

Algorithms

DecisionProcedures

ProofSearch

Procedures

Fixpoints& Lattices

ClosureOrdinals

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 17 / 28

Page 35: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

How to Teach Cyber-Physical Systems?Onion Model

1 Going outside in2 Unpeel layer by layer3 Progress when all prereqs are

covered4 First study CS ∧ math ∧

engineering5 Talk about CPS in the big

finale

Scenic Tour Model1 Start at the heart: CPS2 Go on scenic expeditions into

various directions3 Explore the world around us

as we find the need4 Stay on CPS the whole time5 Leverage CPS as the guiding

motivation for understandingmore about connected areas

LogicalFoundations

ofCyber-Physical

Systems

Logic

TheoremProving

ProofTheory

ModalLogic Model

Checking

Algebra

ComputerAlgebra

RAlgebraicGeometry

DifferentialAlgebra

LieAlgebra

Analysis

DifferentialEquations

CarathedorySolutions

ViscosityPDE

Solutions

DynamicalSystems

Stochastics Doob’sSuper-

martingales

Dynkin’sInfinitesimalGenerators

DifferentialGenerators

StochasticDifferentialEquations

Numerics

HermiteInterpolation

WeierstraßApprox-imation

ErrorAnalysis

NumericalIntegration

Algorithms

DecisionProcedures

ProofSearch

Procedures

Fixpoints& Lattices

ClosureOrdinals

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 18 / 28

Page 36: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

Computational Thinking for CPS

Logical scrutiny, formalization, and correctnessproofs are critical for CPS!

1 CPSs are so easy to get wrong.2 Retrofitting CPSs for safety is not possible.3 These logical aspects are an integral part of CPS design.4 Critical to your understanding of the intricate complexities of CPS.5 Tame complexity by a simple programming language for core aspects.

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 19 / 28

Page 37: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

About Logical Foundations of Cyber-Physical Systems

Foundations!Modeling & Control

1 Understand the core principles behind CPSs.2 Develop models and controls.3 Identify the relevant dynamical aspects.

Computational Thinking1 Identify safety specifications and critical properties of CPSs.2 Understand abstraction in system design.3 Express pre- and postconditions for CPS models.4 Use design-by-invariant.5 Reason rigorously about CPS models.6 Verify CPS models of appropriate scale.

CPS Skills1 Understand the semantics of a CPS model.2 Develop an intuition for operational effects.3 Identify control constraints.4 Understand opportunities and challenges in CPS and verification.

Byproducts1 Well-motivated exposure to numerous math and science areas in action.

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 20 / 28

Page 38: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

Learning Objectives

CT

M&C CPS

identify safety specifications for CPSrigorous reasoning about CPSunderstand abstraction & architecturesprogramming languages for CPSverify CPS models at scale

cyber+physics modelscore principles of CPSrelate discrete+continuous

semantics of CPS modelsoperational effectsidentify control constraintsopportunities and challenges

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 21 / 28

Page 39: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

Textbook and Course OutlineI Part: Elementary Cyber-Physical Systems1. Differential Equations & Domains2. Choice & Control3. Safety & Contracts4. Dynamical Systems & Dynamic Axioms5. Truth & Proof6. Control Loops & Invariants7. Events & Responses8. Reactions & DelaysII Part: Differential Equations Analysis9. Differential Equations & Differential Invariants10. Differential Equations & Proofs11. Ghosts & Differential Ghosts12. Differential Invariants & Proof TheoryIII Part: Adversarial Cyber-Physical Systems

-16. Hybrid Systems & Hybrid GamesIV Part: Comprehensive CPS Correctness

Logical Foundations of Cyber-Physical Systems

André Platzer

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 22 / 28

Page 40: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

1 Introduction

2 Differential Equations & Domains 3 Choice & Control

4 Safety & Contracts

5 Dynamical Systems & Dynamic Axioms 6 Truth & Proof

7 Control Loops & Invariants

8 Events 9 Reactions & Delays 10 Differential Invariants 14–17 Hybrid Games

I Elementary CPS III Adversarial CPS11 Differential Equations & Proofs

12 Differential Ghosts

13 Differential Proof TheoryII Advanced CPS

18 Axioms & Uniform Subst.19 Verified Models & Runtime Validation

20 Virtual Substitution & Real Equations

21 Virtual Substitution & Real ArithmeticIV Comprehensive CPS

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 23 / 28

Page 41: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

Robot Model Labs

1 Robot on Railsa Autobots, Roll Outb Charging Station

2 Robot on Highways: Follow the Leadera with event-triggered controlb with time-triggered control

3 Robot on Racetracksa stay on the circular racetrackb slow down to avoid collisions

4 Robot in a Planea with obstacle avoidanceb Robot vs. Roguebot: don’t collide with moving obstacles

5 Robot in Star-lab: self-defined final project6 Final project presented at CPS V&V Grand Prix

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

0 1 2 3 4 5 60.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

CPS V&V Grand Prix

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 24 / 28

Page 42: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

CPS V&V Grand Prix: Course Competition2016 CPS V&V Grand Prix

Carnegie Mellon University

May 5th, 2016

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 25 / 28

Page 43: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

Assessment

TODO: Read Course Policies Syllabus

≈22% Theory homework Due at midnight≈51% Labs, including ≈22% final project

1 Betabot in first week Due at beginning of lecture2 Veribot in second week Due at midnight

Whitepaper For final projectProposal For final projectTerm paper Due with final projectCPS V&V Grand Prix presentation Tue Dec 11≈11% Midterm In class≈11% Final In class≈5% Participation in class and in online commentsPartner allowed for labs only and only starting in lab 2TODO: Theory 0 prep homework Due this week

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 26 / 28

Page 44: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

Resources

Prerequisites15-122 Principles of Imperative Computation if-then-else21-120 Differential and Integral Calculus x ′

(21-241 Matrix algebra or15-251 Great Theoretical Ideas in Computer Science or Math proofs18-202 Mathematical Foundations of Electrical Engineering)Substitutes: 21-242 Matrix theory or 21-341 Linear algebra I for 21-241

You are expected to follow extra material in the textbook.Further reading and background material on the course web pageCheck course web page periodically

http://lfcps.org/course/lfcps.htmlKeYmaera X: aXiomatic Tactical Theorem Prover for Hybrid SystemsPiazza, Autolab, Ask!

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 27 / 28

Page 45: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

Outline

1 CPS: IntroductionHybrid Systems & Cyber-Physical SystemsApplicationsRobot Labs

2 Course: Logical Foundations of Cyber-Physical SystemsEducational ApproachObjectivesOutlineLabsCPS V&V Grand PrixAssessmentResources

3 Summary

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 27 / 28

Page 46: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

Logical Foundations of Cyber-Physical SystemsLogical foundations make a big difference for CPS, and vice versa

differential dynamic logicdL = DL+ HP

[α]ϕ ϕα

Strong analytic foundationsPractical reasoning advancesSignificant applicationsCatalyze many science areas

1 Multi-dynamical systems2 Combine simple dynamics3 Tame complexity4 V&V cool challenges

Numerous wonders remain to be discovered

dis

cre

te contin

uo

us

nondet

sto

chastic

advers

arial

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 28 / 28

Page 47: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

Logical Foundations of Cyber-Physical SystemsLogical foundations make a big difference for CPS, and vice versa

differential dynamic logicdL = DL+ HP

[α]ϕ ϕα

Strong analytic foundationsPractical reasoning advancesSignificant applicationsCatalyze many science areas

KeYmaera X

Numerous wonders remain to be discovered

dis

cre

te contin

uo

us

nondet

sto

chastic

advers

arial

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 28 / 28

Page 48: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

André Platzer.Logical Foundations of Cyber-Physical Systems.Springer, Switzerland, 2018.URL: http://www.springer.com/978-3-319-63587-3,doi:10.1007/978-3-319-63588-0.

André Platzer.Logical Analysis of Hybrid Systems: Proving Theorems for ComplexDynamics.Springer, Heidelberg, 2010.doi:10.1007/978-3-642-14509-4.

André Platzer.Logics of dynamical systems.In LICS, pages 13–24, Los Alamitos, 2012. IEEE.doi:10.1109/LICS.2012.13.

André Platzer.Differential dynamic logic for hybrid systems.J. Autom. Reas., 41(2):143–189, 2008.

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 28 / 28

Page 49: 01: Cyber-PhysicalSystems: Overvieaplatzer/course/lfcps18/01-overview-slides.pdfAndré Platzer (CMU) LFCPS/01: Overview LFCPS/01 4 / 28. CPSs are Multi-Dynamical Systems d i s c r

doi:10.1007/s10817-008-9103-8.

André Platzer.A complete uniform substitution calculus for differential dynamic logic.J. Autom. Reas., 59(2):219–265, 2017.doi:10.1007/s10817-016-9385-1.

André Platzer.Logic & proofs for cyber-physical systems.In Nicola Olivetti and Ashish Tiwari, editors, IJCAR, volume 9706 ofLNCS, pages 15–21, Berlin, 2016. Springer.doi:10.1007/978-3-319-40229-1_3.

André Platzer.Differential game logic.ACM Trans. Comput. Log., 17(1):1:1–1:51, 2015.doi:10.1145/2817824.

André Platzer.Differential hybrid games.ACM Trans. Comput. Log., 18(3):19:1–19:44, 2017.

André Platzer (CMU) LFCPS/01: Overview LFCPS/01 28 / 28