# A Temporal Logic for Strategic Hyperproperties

arXiv: https://arxiv.org/abs/2107.02509 · HTML: https://mlsanity.com/paper/2107.02509/

## Key facts

- Cited by 5 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 6 Jul 2021.

## Built on by (most cited first, 5 of 5)

- [On Alternating-Time Temporal Logic, Hyperproperties, and Strategy Sharing](https://mlsanity.com/paper/2312.12403/) (2023)
- [HypRL: Reinforcement Learning of Control Policies for Hyperproperties](https://mlsanity.com/paper/2504.04675/) (2025)
- [Hyper Strategy Logic](https://mlsanity.com/paper/2403.13741/) (2024)
- [Monitoring Second-Order Hyperproperties](https://mlsanity.com/paper/2404.09652/) (2024)
- [Strategy Logic, Imperfect Information, and Hyperproperties](https://mlsanity.com/paper/2510.03952/) (2025)

## Abstract (arXiv)

Hyperproperties are commonly used in computer security to define information-flow policies and other requirements that reason about the relationship between multiple computations. In this paper, we study a novel class of hyperproperties where the individual computation paths are chosen by the strategic choices of a coalition of agents in a multi-agent system. We introduce HyperATL*, an extension of computation tree logic with path variables and strategy quantifiers. HyperATL* can express strategic hyperproperties, such as that the scheduler in a concurrent system has a strategy to avoid information leakage. HyperATL* is particularly useful to specify asynchronous hyperproperties, i.e., hyperproperties where the speed of the execution on the different computation paths depends on the choices of the scheduler. Unlike other recent logics for the specification of asynchronous hyperproperties, our logic is the first to admit decidable model checking for the full logic. We present a model checking algorithm for HyperATL* based on alternating word automata and show that our algorithm is asymptotically optimal by providing a matching lower bound. We have implemented a prototype model checker for a fragment of HyperATL*, able to check various security properties on small programs.
