arXiv:2606.12022cs.FLcs.AI2026-06

用混合自动机实现实时安全干预,让自动驾驶系统动态修正错误行为。

Runtime Enforcement of Hybrid System Properties

论文配图:Runtime Enforcement of Hybrid System Properties
图 1 · 摘自论文原文
  • 用混合自动机建模安全需求,结合离散与连续监控
  • 可实时插入、延迟或抑制事件,确保安全合规
  • 在自适应巡航系统上验证有效,计算开销极小

运行时强制已成为保障自主和网络物理系统在不确定动态环境中安全性的有前景方法。与传统运行时验证不同,运行时强制在执行过程中主动干预,通过修改不安全行为来防止属性违规。现有框架主要针对无时序或离散时间规范,通常仅限于延迟或抑制事件,难以应对具有复杂连续动态的反应式系统。本文提出一种基于混合自动机(HA)建模安全要求的运行时强制框架,结合离散事件编辑与连续时间监控,支持在任意时刻进行事件的抑制、延迟和插入。在观测环境输入后,自动机被初始化,利用运行时可达性分析合成安全纠正动作。我们形式化定义了安全混合自动机的强制问题,建立可强制性条件,并提出适用于反应式系统的在线强制算法。对自适应巡航控制(ACC)系统的详细案例研究证明了该方法在控制器行为不安全时仍能维持安全属性的有效性。实验结果表明,该框架引入的计算开销极小,同时可实时保证持续的安全合规性。

原文摘要 · Abstract (English)

Runtime enforcement has emerged as a promising approach for ensuring the safety of autonomous and cyber-physical systems operating in uncertain and dynamic environments. Unlike traditional runtime verification, runtime enforcement actively intervenes during execution to prevent property violations by modifying unsafe system behaviors. Existing enforcement frameworks primarily focus on untimed or discrete-time specifications and are often limited to delaying or suppressing events, making them inadequate for reactive systems exhibiting complex continuous dynamics. In this paper, we propose a runtime enforcement framework where safety requirements are modeled using Hybrid Automata (HA). The framework combines discrete-event editing with continuous-time monitoring to support enforcement actions such as suppression, delay, and insertion of events at arbitrary time instants. Upon observing environmental inputs, the automaton is initialized, and runtime reachability analysis is used to synthesize safe corrective actions. We formally define the enforcement problem for safety hybrid automata, establish enforceability conditions, and present an online enforcement algorithm for reactive systems. A detailed case study on an Adaptive Cruise Control (ACC) system demonstrates the effectiveness of the proposed approach in maintaining safety properties under unsafe controller behaviors. Experimental results show that the framework introduces minimal computational overhead while ensuring continuous compliance with safety requirements in real time.

运行时强制混合自动机自动驾驶安全验证

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。