On Snapshots and Stable Properties Detection in Anonymous Fully Distributed Systems (Extended Abstract)

Jérémie Chalopin,Y. Métivier,Thomas Morsellino

DOI: https://doi.org/10.1007/978-3-642-31104-8_18

2012-06-30

Abstract:

What problem does this paper attempt to address?

Snap-Stabilizing Tasks in Anonymous Networks

Emmanuel Godard

DOI: https://doi.org/10.1007/s00224-018-9868-z

2022-03-11

Abstract:We consider snap-stabilizing algorithms in anonymous networks. Self-stabilizing algorithms are well known fault tolerant algorithms : a self-stabilizing algorithm will eventually recover from arbitrary transient faults. On the other hand, an algorithm is snap-stabilizing if it can withstand arbitrary initial values and immediately satisfy its safety requirement. It is a subset of self-stabilizing algorithms. Distributed tasks that are solvable with self-stabilizing algorithms in anonymous networks have already been characterized by Boldi and Vigna in [BV02b]. In this paper, we show how the more demanding snap-stabilizing algorithms can be handled with standard tools for (not stabilizing) algorithms in anonymous networks. We give a characterization of which tasks are solvable by snap-stabilizing algorithms in anonymous networks. We also present a snap-stabilizing version of Mazurkiewicz' enumeration algorithm. This work exposes, from a task-equivalence point of view, the complete correspondence in anonymous networks between self or snap-stabilizing tasks and distributed tasks with various termination detection requirements.

Distributed, Parallel, and Cluster Computing
Snap-and-Chat Protocols: System Aspects

Joachim Neu,Ertem Nusret Tas,David Tse

DOI: https://doi.org/10.48550/arXiv.2010.10447

2020-10-21

Abstract:The availability-finality dilemma says that blockchain protocols cannot be both available under dynamic participation and safe under network partition. Snap-and-chat protocols have recently been proposed as a resolution to this dilemma. A snap-and-chat protocol produces an always available ledger containing a finalized prefix ledger which is always safe and catches up with the available ledger whenever network conditions permit. In contrast to existing handcrafted finality gadget based designs like Ethereum 2.0's consensus protocol Gasper, snap-and-chat protocols are constructed as a black-box composition of off-the-shelf BFT and longest chain protocols. In this paper, we consider system aspects of snap-and-chat protocols and show how they can provide two important features: 1) accountability, 2) support of light clients. Through this investigation, a deeper understanding of the strengths and challenges of snap-and-chat protocols is gained.

Cryptography and Security,Distributed, Parallel, and Cluster Computing
Ensuring System-Level Protection against Eavesdropping Adversaries in Distributed Dynamical Systems

Dipankar Maity,Van Sy Mai

2024-09-22

Abstract:In this work, we address the objective of protecting the states of a distributed dynamical system from eavesdropping adversaries. We prove that state-of-the-art distributed algorithms, which rely on communicating the agents' states, are vulnerable in that the final states can be perfectly estimated by any adversary including those with arbitrarily small eavesdropping success probability. While existing literature typically adds an extra layer of protection, such as encryption or differential privacy techniques, we demonstrate the emergence of a fundamental protection quotient in distributed systems when innovation signals are communicated instead of the agents' states.

Systems and Control
On Epistemic Properties in Discrete-Event Systems: A Uniform Framework and Its Applications

Bohan Cui,Ziyue Ma,Shaoyuan Li,Xiang Yin

2024-09-10

Abstract:In this paper, we investigate the property verification problem for partially-observed DES from a new perspective. Specifically, we consider the problem setting where the system is observed by two agents independently, each with its own observation. The purpose of the first agent, referred to as the low-level observer, is to infer the actual behavior of the system, while the second, referred to as the high-level observer, aims to infer the knowledge of Agent 1 regarding the system. We present a general notion called the epistemic property capturing the inference from the high-level observer to the low-level observer. A typical instance of this definition is the notion of high-order opacity, which specifies that the intruder does not know that the system knows some critical information. This formalization is very general and supports any user-defined information-state-based knowledge between the two observers. We demonstrate how the general definition of epistemic properties can be applied in different problem settings such as information leakage diagnosis or tactical cooperation without explicit communications. Finally, we provide a systematic approach for the verification of epistemic properties. Particularly, we identify some fragments of epistemic properties that can be verified more efficiently.

Systems and Control
Universal Finite-State and Self-Stabilizing Computation in Anonymous Dynamic Networks

Giuseppe A. Di Luna,Giovanni Viglietta

2024-10-27

Abstract:A network is said to be "anonymous" if its agents are indistinguishable from each other; it is "dynamic" if its communication links may appear or disappear unpredictably over time. Assuming that an anonymous dynamic network is always connected and each of its $n$ agents is initially given an input, it takes $2n$ communication rounds for the agents to compute an arbitrary (frequency-based) function of such inputs (Di Luna-Viglietta, DISC 2023). It is known that, without making additional assumptions on the network and without knowing the number of agents $n$, it is impossible to compute most functions and explicitly terminate. In fact, current state-of-the-art algorithms only achieve stabilization, i.e., allow each agent to return an output after every communication round; outputs can be changed, and are guaranteed to be all correct after $2n$ rounds. Such algorithms rely on the incremental construction of a data structure called "history tree", which is augmented at every round. Thus, they end up consuming an unlimited amount of memory, and are also prone to errors in case of memory loss or corruption. In this paper, we provide a general self-stabilizing algorithm for anonymous dynamic networks that stabilizes in $\max\{4n-2h, 2h\}$ rounds (where $h$ measures the amount of corrupted data initially present in the memory of each agent), as well as a general finite-state algorithm that stabilizes in $3n^2$ rounds. Our work improves upon previously known methods that only apply to static networks (Boldi-Vigna, Dist. Comp. 2002). In addition, we develop new fundamental techniques and operations involving history trees, which are of independent interest.

Distributed, Parallel, and Cluster Computing
Estimation and Verification of Partially-Observed Discrete-Event Systems

Xiang Yin

DOI: https://doi.org/10.48550/arXiv.1903.11413

2019-03-27

Abstract:This article considers state estimation and veri cation problems for an important class of man-made cyber-physical systems called Discrete-Event Systems (DES).

Systems and Control
Failure Detectors in Homonymous Distributed Systems (with an Application to Consensus)

Sergio Arévalo,Antonio Fernández Anta,Damien Imbs,Ernesto Jiménez,Michel Raynal

DOI: https://doi.org/10.48550/arXiv.1110.1842

2011-11-27

Abstract:This paper addresses the consensus problem in homonymous distributed systems where processes are prone to crash failures and have no initial knowledge of the system membership ("homonymous" means that several processes may have the same identifier). New classes of failure detectors suited to these systems are first defined. Among them, the classes H\Omega\ and H\Sigma\ are introduced that are the homonymous counterparts of the classes \Omega\ and \Sigma, respectively. (Recall that the pair <\Omega,\Sigma> defines the weakest failure detector to solve consensus.) Then, the paper shows how H\Omega\ and H\Sigma\ can be implemented in homonymous systems without membership knowledge (under different synchrony requirements). Finally, two algorithms are presented that use these failure detectors to solve consensus in homonymous asynchronous systems where there is no initial knowledge of the membership. One algorithm solves consensus with <H\Omega,H\Sigma>, while the other uses only H\Omega, but needs a majority of correct processes. Observe that the systems with unique identifiers and anonymous systems are extreme cases of homonymous systems from which follows that all these results also apply to these systems. Interestingly, the new failure detector class H\Omega\ can be implemented with partial synchrony, while the analogous class A\Omega\ defined for anonymous systems can not be implemented (even in synchronous systems). Hence, the paper provides us with the first proof showing that consensus can be solved in anonymous systems with only partial synchrony (and a majority of correct processes).

Distributed, Parallel, and Cluster Computing,Data Structures and Algorithms
Snap-Stabilizing Linear Message Forwarding

Anissa Lamani,Alain Cournier,Swan Dubois,Franck Petit,Vincent Villain

DOI: https://doi.org/10.48550/arXiv.1006.3432

2010-06-17

Abstract:In this paper, we present the first snap-stabilizing message forwarding protocol that uses a number of buffers per node being inde- pendent of any global parameter, that is 4 buffers per link. The protocol works on a linear chain of nodes, that is possibly an overlay on a large- scale and dynamic system, e.g., Peer-to-Peer systems, Grids. . . Provided that the topology remains a linear chain and that nodes join and leave "neatly", the protocol tolerates topology changes. We expect that this protocol will be the base to get similar results on more general topologies.

Distributed, Parallel, and Cluster Computing
Distributed Differentially Private Data Analytics via Secure Sketching

Jakob Burkhardt,Hannah Keller,Claudio Orlandi,Chris Schwiegelshohn

2024-11-30

Abstract:We explore the use of distributed differentially private computations across multiple servers, balancing the tradeoff between the error introduced by the differentially private mechanism and the computational efficiency of the resulting distributed algorithm. We introduce the linear-transformation model, where clients have access to a trusted platform capable of applying a public matrix to their inputs. Such computations can be securely distributed across multiple servers using simple and efficient secure multiparty computation techniques. The linear-transformation model serves as an intermediate model between the highly expressive central model and the minimal local model. In the central model, clients have access to a trusted platform capable of applying any function to their inputs. However, this expressiveness comes at a cost, as it is often expensive to distribute such computations, leading to the central model typically being implemented by a single trusted server. In contrast, the local model assumes no trusted platform, which forces clients to add significant noise to their data. The linear-transformation model avoids the single point of failure for privacy present in the central model, while also mitigating the high noise required in the local model. We demonstrate that linear transformations are very useful for differential privacy, allowing for the computation of linear sketches of input data. These sketches largely preserve utility for tasks such as private low-rank approximation and private ridge regression, while introducing only minimal error, critically independent of the number of clients. Previously, such accuracy had only been achieved in the more expressive central model.

Cryptography and Security,Machine Learning
On distributed monitoring of asynchronous systems

Volker Diekert,Anca Muscholl

DOI: https://doi.org/10.48550/arXiv.1208.2125

2012-08-10

Abstract:Distributed systems are notoriously difficult to understand and analyze in order to assert their correction w.r.t. given properties. They often exhibit a huge number of different behaviors, as soon as the active entities (peers, agents, processes, etc) behave in an asynchronous manner. Already the modelization of such systems is a non-trivial task, let alone their formal verification. The purpose of this paper is to discuss the problem of distributed monitoring on a simple model of finite-state distributed automata based on shared actions, called asynchronous automata. Monitoring is a question related to runtime verification: assume that we have to check a property $L$ against an unknown or very complex system $A$, so that classical static analysis is not possible. Therefore instead of model-checking a monitor is used, that checks the property on the underlying system at runtime. We are interested here in monitoring distributed systems modeled as asynchronous automata. It is natural to require that monitors should be of the same kind as the underlying system, so we consider here distributed monitoring. A distributed monitor does not have a global view of the system, therefore we propose the notion of locally monitorable trace language. Our main result shows that if the distributed alphabet of actions is connected and if $L$ is a set of infinite traces such that both $L$ and its complement $L^c$ are countable unions of locally safety languages, then $L$ is locally monitorable. We also show that over infinite traces, recognizable countable unions of locally safety languages are precisely the complements of deterministic languages.

Formal Languages and Automata Theory,Logic in Computer Science
Distributed Secure State Estimation for Cyber-Physical Systems Against Replay Attacks via Multisensor Method

Lei Su,Dan Ye,Xin-Gang Zhao

DOI: https://doi.org/10.1109/jsyst.2021.3123617

IF: 4.802

2021-01-01

IEEE Systems Journal

Abstract:This article investigates thedistributed securestate estimation problem for cyber-physical systems under replay attacks. The main purpose is to design the distributed observers such that the estimation error system is stable. First, a detection algorithm is proposed to not only expose the behavior of the attacker but also identify which sensor is tampered. Then, the distributed observers are designed and the adverse effects are eliminated. Moreover, in view of the linear matrix inequality technique, a sufficient condition is presented, which ensures that the estimation error system is stable and achieves an $H_{\infty }$ property. Finally, a practical inverted pendulum example is employed to elaborate the effectiveness and superiority of the presented design and detection method.

computer science, information systems,telecommunications,engineering, electrical & electronic,operations research & management science
Byzantine-Robust Gossip: Insights from a Dual Approach

Renaud Gaucher,Hadrien Hendrikx,Aymeric Dieuleveut

2024-05-06

Abstract:Distributed approaches have many computational benefits, but they are vulnerable to attacks from a subset of devices transmitting incorrect information. This paper investigates Byzantine-resilient algorithms in a decentralized setting, where devices communicate directly with one another. We leverage the so-called dual approach to design a general robust decentralized optimization method. We provide both global and local clipping rules in the special case of average consensus, with tight convergence guarantees. These clipping rules are practical, and yield results that finely characterize the impact of Byzantine nodes, highlighting for instance a qualitative difference in convergence between global and local clipping thresholds. Lastly, we demonstrate that they can serve as a basis for designing efficient attacks.

Machine Learning
Towards Auditable Distributed Systems

Lev Sorokin

DOI: https://doi.org/10.48550/arXiv.2209.14071

2022-09-28

Software Engineering

Abstract:The emerging trend towards distributed (cloud) systems (DS) has widely arrived whether in the automotive, public or the financial sector, but the execution of services of heterogeneous service providers is exposed to several risks. Beside hardware/software faults or cyber attacks that can influence the correctness of the system, fraud is also an issue. In such case it is not only important to verify the correctness of the system, but also have evidence which component and participant behaves faulty. This makes it possible, e.g. to claim for compensation after systems execution but also to assure information for verification can be trusted. The main goal of our research is to assure the monitoring of DS based on auditable information. We follow a decentralized monitoring strategy and envision a distributed monitoring approach of system properties based on distributedlogic programs that consider auditability. The expected contribution of this work is to establish with the application of our framework the mutual trust of distributed parties, as well as trust of clients in the systems execution. We showcase our ideas on a DS for booking services with unmanned air vehicles.
Tools for translational neuroscience: PTSD is associated with heightened fear responses using acoustic startle but not skin conductance measures

Ebony M. Glover,J. Phifer,Daniel F Crain,S. Norrholm,M. Davis,B. Bradley,K. Ressler,T. Jovanović

DOI: https://doi.org/10.1002/da.20880

IF: 8.128

2011-12-01

Depression and Anxiety

Abstract:Background: Posttraumatic stress disorder (PTSD) patients show heightened fear responses to trauma reminders and an inability to inhibit fear in the presence of safety reminders. Brain imaging studies suggest that this is in part due to amygdala over‐reactivity as well as deficient top‐down cortical inhibition of the amygdala. Consistent with these findings, previous studies, using fear‐potentiated startle (FPS), have shown exaggerated startle and deficits in fear inhibition in PTSD participants. However, many PTSD studies using the skin conductance response (SCR) report no group differences in fear acquisition. Method: The study included 41 participants with PTSD and 70 without PTSD. The fear conditioning session included a reinforced conditioned stimulus (CS+, danger cue) paired with an aversive airblast, and a nonreinforced conditioned stimulus (CS−, safety cue). Acoustic startle responses and SCR were acquired during the presentation of each CS. Results: The results showed that fear conditioned responses were captured in both the FPS and SCR measures. Furthermore, PTSD participants had higher FPS to the danger cue and safety cue compared to trauma controls. However, SCR did not differ between groups. Finally, we found that FPS to the danger cue predicted re‐experiencing symptoms, whereas FPS to the safety cue predicted hyper‐arousal symptoms. However, SCR did not contribute to PTSD symptom variance. Conclusions: Replicating earlier studies, we showed increased FPS in PTSD participants. However, although SCR was a good measure of differential conditioning, it did not differentiate between PTSD groups. These data suggest that FPS may be a useful tool for translational research. Depression and Anxiety, 2011. © 2011 Wiley Periodicals, Inc.
Tame the Wild with Byzantine Linearizability: Reliable Broadcast, Snapshots, and Asset Transfer

Shir Cohen,Idit Keidar

DOI: https://doi.org/10.4230/LIPIcs.DISC.2021.18

2024-06-05

Abstract:We formalize Byzantine linearizability, a correctness condition that specifies whether a concurrent object with a sequential specification is resilient against Byzantine failures. Using this definition, we systematically study Byzantine-tolerant emulations of various objects from registers. We focus on three useful objects -- reliable broadcast, atomic snapshot, and asset transfer. We prove that there is an $f$-resilient implementation of such objects from registers with $n$ processes $f<\frac{n}{2}$.

Distributed, Parallel, and Cluster Computing
Visibility Reasoning for Concurrent Snapshot Algorithms

Joakim Öhman,Aleksandar Nanevski

DOI: https://doi.org/10.1145/3498694

2021-11-09

Abstract:Visibility relations have been proposed by Henzinger et al. as an abstraction for proving linearizability of concurrent algorithms that obtains modular and reusable proofs. This is in contrast to the customary approach based on exhibiting the algorithm's linearization points. In this paper we apply visibility relations to develop modular proofs for three elegant concurrent snapshot algorithms of Jayanti. The proofs are divided by signatures into components of increasing level of abstraction; the components at higher abstraction levels are shared, i.e., they apply to all three algorithms simultaneously. Importantly, the interface properties mathematically capture Jayanti's original intuitions that have previously been given only informally.

Programming Languages,Logic in Computer Science
Distributed Transactions: Dissecting the Nightmare

Diego Didona,Rachid Guerraoui,Jingjing Wang,Willy Zwaenepoel

DOI: https://doi.org/10.48550/arXiv.1803.06341

2018-03-17

Abstract:Many distributed storage systems are transactional and a lot of work has been devoted to optimizing their performance, especially the performance of read-only transactions that are considered the most frequent in practice. Yet, the results obtained so far are rather disappointing, and some of the design decisions seem contrived. This paper contributes to explaining this state of affairs by proving intrinsic limitations of transactional storage systems, even those that need not ensure strong consistency but only causality. We first consider general storage systems where some transactions are read-only and some also involve write operations. We show that even read-only transactions cannot be "fast": their operations cannot be executed within one round-trip message exchange between a client seeking an object and the server storing it. We then consider systems (as sometimes implemented today) where all transactions are read-only, i.e., updates are performed as individual operations outside transactions. In this case, read-only transactions can indeed be "fast", but we prove that they need to be "visible". They induce inherent updates on the servers, which in turn impact their overall performance.

Distributed, Parallel, and Cluster Computing
Distributed Secret Securing in Discrete-Event Systems

Shoma Matsui,Kai Cai,Karen Rudie

2024-02-14

Abstract:In this paper, we study a security problem of protecting secrets in distributed systems. Specifically, we employ discrete-event systems to describe the structure and behaviour of distributed systems, in which global secret information is separated into pieces and stored in local component agents. The goal is to prevent such secrets from being exposed to intruders by imposing appropriate protection measures. This problem is formulated as to ensure that at least one piece of every distributed global secret is secured by a required number of protections, while the overall cost to apply protections is minimum. We first characterize the solvability of this security problem by providing a necessary and sufficient condition, and then develop an algorithm to compute a solution based on the supervisory control theory of discrete-event systems. Finally, we illustrate the effectiveness of our solution with an example system comprising distributed databases.

Systems and Control
Decentralized Observability with Limited Communication between Sensors

Andreea B. Alexandru,Sergio Pequito,Ali Jadbabaie,George J. Pappas

DOI: https://doi.org/10.48550/arXiv.1609.02651

2017-03-18

Abstract:In this paper, we study the problem of jointly retrieving the state of a dynamical system, as well as the state of the sensors deployed to estimate it. We assume that the sensors possess a simple computational unit that is capable of performing simple operations, such as retaining the current state and model of the system in its memory. We assume the system to be observable (given all the measurements of the sensors), and we ask whether each sub-collection of sensors can retrieve the state of the underlying physical system, as well as the state of the remaining sensors. To this end, we consider communication between neighboring sensors, whose adjacency is captured by a communication graph. We then propose a linear update strategy that encodes the sensor measurements as states in an augmented state space, with which we provide the solution to the problem of retrieving the system and sensor states. The present paper contains three main contributions. First, we provide necessary and sufficient conditions to ensure observability of the system and sensor states from any sensor. Second, we address the problem of adding communication between sensors when the necessary and sufficient conditions are not satisfied, and devise a strategy to this end. Third, we extend the former case to include different costs of communication between sensors. Finally, the concepts defined and the method proposed are used to assess the state of an example of approximate structural brain dynamics through linearized measurements.

Optimization and Control,Systems and Control

On Snapshots and Stable Properties Detection in Anonymous Fully Distributed Systems (Extended Abstract)

Snap-Stabilizing Tasks in Anonymous Networks

Snap-and-Chat Protocols: System Aspects

Ensuring System-Level Protection against Eavesdropping Adversaries in Distributed Dynamical Systems

On Epistemic Properties in Discrete-Event Systems: A Uniform Framework and Its Applications

Universal Finite-State and Self-Stabilizing Computation in Anonymous Dynamic Networks

Estimation and Verification of Partially-Observed Discrete-Event Systems

Failure Detectors in Homonymous Distributed Systems (with an Application to Consensus)

Snap-Stabilizing Linear Message Forwarding

Distributed Differentially Private Data Analytics via Secure Sketching

On distributed monitoring of asynchronous systems

Distributed Secure State Estimation for Cyber-Physical Systems Against Replay Attacks via Multisensor Method

Byzantine-Robust Gossip: Insights from a Dual Approach

Towards Auditable Distributed Systems

Tools for translational neuroscience: PTSD is associated with heightened fear responses using acoustic startle but not skin conductance measures

Tame the Wild with Byzantine Linearizability: Reliable Broadcast, Snapshots, and Asset Transfer

Visibility Reasoning for Concurrent Snapshot Algorithms

Distributed Transactions: Dissecting the Nightmare

Distributed Secret Securing in Discrete-Event Systems

Decentralized Observability with Limited Communication between Sensors