Abstract:In the classical synthesis problem, we are given an LTL formula \psi over sets of input and output signals, and we synthesize a system T that realizes \psi: with every input sequences x, the system associates an output sequence T(x) such that the generated computation x \otimes T(x) satisfies \psi. In practice, the requirement to satisfy the specification in all environments is often too strong, and it is common to add assumptions on the environment. We introduce a new type of relaxation on this requirement. In good-enough synthesis (GE-synthesis), the system is required to generate a satisfying computation only if one exists. Formally, an input sequence x is hopeful if there exists some output sequence y such that the computation x \otimes y satisfies \psi, and a system GE-realizes \psi if it generates a computation that satisfies \psi on all hopeful input sequences. GE-synthesis is particularly relevant when the notion of correctness is multi-valued (rather than Boolean), and thus we seek systems of the highest possible quality, and when synthesizing autonomous systems, which interact with unexpected environments and are often only expected to do their best. We study GE-synthesis in Boolean and multi-valued settings. In both, we suggest and solve various definitions of GE-synthesis, corresponding to different ways a designer may want to take hopefulness into account. We show that in all variants, GE-synthesis is not computationally harder than traditional synthesis, and can be implemented on top of existing tools. Our algorithms are based on careful combinations of nondeterministic and universal automata. We augment systems that GE-realize their specifications by monitors that provide satisfaction information. In the multi-valued setting, we provide both a worst-case analysis and an expectation-based one, the latter corresponding to an interaction with a stochastic environment.

Synthesis with Privacy Against an Observer

Optimal Synthesis of Opacity-Enforcing Supervisors for Qualitative and Quantitative Specifications

The Complexity of LTL Rational Synthesis

Minimizing Expected Cost Under Hard Boolean Constraints, with Applications to Quantitative Synthesis

STP-based verification and synthesis of state opacity for logical finite state machines

The Complexity of Synthesis from Probabilistic Components

Good-Enough Synthesis

Secure-by-Construction Synthesis for Control Systems

Privacy-Preserving Supervisory Control of Discrete-Event Systems via Co-Synthesis of Edit Function and Supervisor for Opacity Enforcement and Requirement Satisfaction

Security Synthesis for Cyber–Physical Systems

Synthesis from LTL with Reward Optimization in Sampled Oblivious Environments

Guaranteed Privacy-Preserving $\mathcal{H}_{\infty}$-Optimal Interval Observer Design for Bounded-Error LTI Systems

Synthesis from Knowledge-Based Specifications

PrivSyn: Differentially Private Data Synthesis

Sensor Deception Attacks Against Initial-State Privacy in Supervisory Control Systems

Taming Large Bounds in Synthesis from Bounded-Liveness Specifications (Full Version)

Concise Read-Only Specifications for Better Synthesis of Programs with Pointers -- Extended Version

Synthesizing Tight Privacy and Accuracy Bounds via Weighted Model Counting

Compositional Synthesis of Leakage Resilient Programs

Supervisor synthesis for opacity enforcement in partially observed discrete event systems

Risk-Efficient Bayesian Data Synthesis for Privacy Protection