Data-Driven Falsification of Cyber-Physical Systems
Not on the map. Why?
Abstract (arXiv)
Cyber-Physical Systems (CPS) are abundant in safety-critical domains such as healthcare, avionics, and autonomous vehicles. Formal verification of their operational safety is, therefore, of utmost importance. In this paper, we address the falsification problem, where the focus is on searching for an unsafe execution in the system instead of proving their absence. The contribution of this paper is a framework that (a) connects the falsification of CPS with the falsification of deep neural networks (DNNs) and (b) leverages the inherent interpretability of Decision Trees for faster falsification of CPS. This is achieved by: (1) building a surrogate model of the CPS under test, either as a DNN model or a Decision Tree, (2) application of various DNN falsification tools to falsify CPS, and (3) a novel falsification algorithm guided by the explanations of safety violations of the CPS model extracted from its Decision Tree surrogate. The proposed framework has the potential to exploit a repertoire of adversarial attack algorithms designed to falsify robustness properties of DNNs, as well as state-of-the-art falsification algorithms for DNNs. Although the presented methodology is applicable to systems that can be executed/simulated in general, we demonstrate its effectiveness, particularly in CPS. We show that our framework, implemented as a tool textscFlexiFal, can detect hard-to-find counterexamples in CPS that have linear and non-linear dynamics. Decision tree-guided falsification shows promising results in efficiently finding multiple counterexamples in the ARCH-COMP 2024 falsification benchmarks~citekhandait2024arch.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 22 of its 49 references that are in the map. First posted on arXiv 6 May 2025.
Builds on
22 of 49 references.
References · 22
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2013Intriguing properties of neural networkscited by 5,155
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2016Adversarial examples in the physical worldcited by 1,769
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,318
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 744
- 2017Adversarial Examples: Attacks and Defenses for Deep Learningcited by 351
- 2018Efficient Formal Safety Analysis of Neural Networkscited by 165
- 2018Decoupling Direction and Norm for Efficient Gradient-Based L2 Adversarial Attacks and Defensescited by 109
- 2021DNNV: A Framework for Deep Neural Network Verificationcited by 23
- 2017DRYVR:Data-driven verification and compositional reasoning for automotive systemscited by 14
10 more
- 2018Gray-box Adversarial Testing for Control Systems with Machine Learning Componentcited by 8
- 2019Approximation-Refinement Testing of Compute-Intensive Cyber-Physical Models: An Approach Based on System Identificationcited by 8
- 2020Falsification of Cyber-Physical Systems with Robustness-Guided Black-Box Checkingcited by 7
- 2021Online GANs for Automatic Performance Testingcited by 6
- 2021PSY-TaLiRo: A Python Toolbox for Search-Based Test Generation for Cyber-Physical Systemscited by 5
- 2022Search-based Software Testing Driven by Automatically Generated and Manually Defined Fitness Functionscited by 5
- 2018Fast Falsification of Hybrid Systems using Probabilistically Adaptive Inputcited by 4
- 2022Wasserstein Generative Adversarial Networks for Online Test Generation for Cyber Physical Systemscited by 3
- 2023Requirement falsification for cyber-physical systems using generative modelscited by 3
- 2021MoonLight: A Lightweight Tool for Monitoring Spatio-Temporal Propertiescited by 2
Built on by
Not cited yet.