A detection method and device for verifying the fault-tolerant mechanism of active attribute of distributed protocol

Abstract

The present invention relates to the field of model detection, in particular to a detection method and device for verifying the fault-tolerant mechanism of active attributes of distributed protocols, comprising the following steps: initializing the system to be verified; acquiring the migration set T_Set that the system to be verified can execute in the current state; defining Peer nodes; define the same operation; reduce the migration set T_Set based on the peer-to-peer reduction strategy; obtain the state of the system to be verified after migration; check the security attributes of the state of the system to be verified after migration, and obtain the security state; check the security The activity attribute of the active state, obtain the active state, inject the fault, recheck the security attribute and the active attribute of the state of the system to be verified; output the set of counterexamples C, the verification effect of the present invention is better, and at the same time, fewer execution sequences are explored In this case, the entire space can be traversed equivalently.

Description

technical field [0001] The invention relates to the field of model detection, in particular to a detection method and device for verifying a fault-tolerant mechanism of active attributes of a distributed protocol. Background technique [0002] Model detection is used in software and hardware systems that require high reliability and security. Model the system as a whole to formally describe all possible behaviors of the system during runtime. By traversing these behaviors, find out whether there are violations. Behavior of system design properties, outputting violations as counterexamples if present. By traversing the system space, the model checking technology can find out all the bugs that violate the attributes in the system to be verified, which ensures the high security and high reliability of the system. [0003] Existing model checking technologies are divided into implementation-level model checking (implementation-level) and abstract model checking. Implementation-...

AI Technical Summary

Problems solved by technology

However, due to the need to traverse all the state spaces of the system, model checking technology has been plagued by the state space explosion problem of the system to be verified.

[0004] At the same time, model checking using an abstract model can only verify the design of the system and its abstract model, but cannot find the defects introduced by the code implementation; at the same time, abstract modeling of the system to be verified may introduce the problem of mismatch between the model and the system , model checking on mismatched models is pointless

However, the existing implementation-level model checking tools have less consideration for the verification of liveness properties and their fault tolerance.

[0005] That is to say, the existing model checking tools focus on the verification of the security attributes of distributed systems, ignoring the detection of liveness attributes and fault-tolerant mechanisms, especially liveness attribute fault-tolerant mechanisms. Injecting faults to verify fault tolerance, but the faults injected by these model checking tools are often random injections or exhaustive all possible situations of faults (faults are injected at any time when the system to be verified is running), which often lacks purpose for fault injection However, it brings many problems and challenges. For example, using random injection cannot find out where all fault-tolerant mechanisms do not work properly, and exhaustive injection will aggravate the problem of space explosion, making the model detector not scalable.

Images