Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Ernst Moritz Hahn

dblp:78/6159 · DBLP profile ↗
← Back
57ranked-venue papers
29as first author
21since 2021 · last 2025
0000-0002-9348-7684ORCID · verified

Domains — the database's venue-derived domains; a paper can count in several

Software engineering, systems software and programming languages · 35 · 17 first-author · 15 since 2021Theory of computation · 25 · 13 first-author · 5 since 2021Artificial intelligence and machine learning · 5 · 4 first-author · 4 since 2021Graphics, computer vision, multimedia, augmented reality and games · 4 · 3 first-author · 3 since 2021Systems, architecture and hardware · 2 · 1 since 2021Security and privacy · 2 · 1 since 2021Databases, data management, data science and information retrieval · 1 · 1 since 2021Applied, interdisciplinary, general and emerging computing · 1 · 1 first-author

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Artificial intelligence
7 papers
Reinforcement learning · 68% Planning, search and constraint satisfaction · 20% Trustworthy machine learning · 12%
Theoretical computer science
12 papers
Automated reasoning and model checking · 55% Logic in computer science · 20% Automata and formal languages · 18%
Software engineering, system software, and programming languages
2 papers
Software testing · 75% Program verification · 25%
Network and information security
1 paper
Security and privacy of machine learning · 100%

Topics — the 23 heaviest of 25, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Machine learning › Reinforcement learning
markov decision process
1.032024
Omega-Regular Decision Processes · AAAI 2024
Recursive Reinforcement Learning · NeurIPS 2022
Model Checking Algorithms for CTMDPs · CAV 2011
Machine learning › Reinforcement learning › markov decision process
non-markov decision process
0.812024
Omega-Regular Decision Processes · AAAI 2024
Automata and formal languages › infinite words
omega-regular languages
0.812024
Omega-Regular Decision Processes · AAAI 2024
Automated reasoning and model checking
model checking
0.722022
Probabilistic Preference Planning Problem for Markov Decision Processes · IEEE Trans. Software Eng. 2022
Model Checking Algorithms for CTMDPs · CAV 2011
Machine learning › Trustworthy machine learning › adversarial machine learning › backdoor robustness
backdoor mitigation
0.712023
Backdoor Mitigation in Deep Neural Networks via Strategic Retraining · FM 2023
Security and privacy of machine learning › adversarial attack
backdoor attack
0.712023
Backdoor Mitigation in Deep Neural Networks via Strategic Retraining · FM 2023
Logic in computer science › knowledge representation and reasoning › uncertainty reasoning
probabilistic logic
0.712023
sfPFL: A Probabilistic Logic for Fault Trees · FM 2023
Automated reasoning and model checking › model checking
probabilistic model checking
0.752021
iscasMc: A Web-Based Probabilistic Model Checker · FM 2014
Model-Free Reinforcement Learning for Branching Markov Decision Processes · CAV (2) 2021
Safety Verification for Probabilistic Hybrid Systems · CAV 2010
Knowledge, reasoning and agents › Planning, search and constraint satisfaction
planning with preferences
0.612022
Probabilistic Preference Planning Problem for Markov Decision Processes · IEEE Trans. Software Eng. 2022
Knowledge, reasoning and agents › Planning, search and constraint satisfaction › planning under uncertainty
probabilistic planning
0.612022
Probabilistic Preference Planning Problem for Markov Decision Processes · IEEE Trans. Software Eng. 2022
Machine learning › Reinforcement learning › value-based reinforcement learning
q-learning
0.612022
Recursive Reinforcement Learning · NeurIPS 2022
Automated reasoning and model checking › quantitative verification
multi-objective verification
0.612022
Probabilistic Preference Planning Problem for Markov Decision Processes · IEEE Trans. Software Eng. 2022
Machine learning › Reinforcement learning
model-free reinforcement learning
0.512021
Model-Free Reinforcement Learning for Branching Markov Decision Processes · CAV (2) 2021
Machine learning › Reinforcement learning
multi-objective reinforcement learning
0.512021
Model-Free Reinforcement Learning for Lexicographic Omega-Regular Objectives · FM 2021
Automated reasoning and model checking
probabilistic verification
0.212016
A Simple Algorithm for Solving Qualitative Probabilistic Parity Games · CAV (2) 2016
Program verification
model checking
0.212015
QPMC: A Model Checker for Quantum Programs and Protocols · FM 2015
Logic in computer science › temporal logic
linear temporal logic
0.212022
Probabilistic Preference Planning Problem for Markov Decision Processes · IEEE Trans. Software Eng. 2022
Automated reasoning and model checking › model checking › probabilistic model checking
markov decision process verification
0.112021
Model-Free Reinforcement Learning for Branching Markov Decision Processes · CAV (2) 2021
Algorithmic game theory and mechanism design › game solving
omega-regular objectives
0.112021
Model-Free Reinforcement Learning for Lexicographic Omega-Regular Objectives · FM 2021
Embedded and real-time systems › cyber-physical systems
cyber-physical system verification
0.112010
Safety Verification for Probabilistic Hybrid Systems · CAV 2010
Embedded and real-time systems › real-time system verification
safety verification
0.112010
Safety Verification for Probabilistic Hybrid Systems · CAV 2010
Algorithmic game theory and mechanism design › zero-sum game
parity games
0.112016
A Simple Algorithm for Solving Qualitative Probabilistic Parity Games · CAV (2) 2016
Quantum computing and quantum information
quantum protocols
0.112015
QPMC: A Model Checker for Quantum Programs and Protocols · FM 2015

Methods — techniques the papers use, named apart from their topics

model-free reinforcement learning · 2.0reinforcement learning · 1.5lexicographic optimization · 1.5retraining · 1.3probabilistic logic · 1.3quadratic programming · 1.1multi-objective model checking · 1.1SMT solving · 1.1probabilistic pushdown system · 0.6qualitative analysis · 0.2model checking algorithms · 0.2probabilistic model checking · 0.2
YearPublicationVenuePosition
2025 WATCHDOG: an ontology-aWare risk AssessmenT approaCH via object-oriented DisruptiOn Graphs
Stefano M. Nicoletti, Ernst Moritz Hahn, Mattia Fumagalli, Giancarlo Guizzardi, Mariëlle Stoelinga
CAiSE (2)2
2024 Omega-Regular Decision Processes
abstract
Regular decision processes (RDPs) are a subclass of non-Markovian decision processes where the transition and reward functions are guarded by some regular property of the past (a lookback). While RDPs enable intuitive and succinct representation of non-Markovian decision processes, their expressive power coincides with finite-state Markov decision processes (MDPs). We introduce omega-regular decision processes (ODPs) where the non-Markovian aspect of the transition and reward functions are extended to an omega-regular lookahead over the system evolution. Semantically, these lookaheads can be considered as promises made by the decision maker or the learning agent about her future behavior. In particular, we assume that, if the promised lookaheads are not met, then the payoff to the decision maker is falsum (least desirable payoff), overriding any rewards collected by the decision maker. We enable optimization and learning for ODPs under the discounted-reward objective by reducing them to lexicographic optimization and learning over finite MDPs. We present experimental results demonstrating the effectiveness of the proposed reduction.
Ernst Moritz Hahn, Mateo Perez, Sven Schewe, Fabio Somenzi, Ashutosh Trivedi 0001, Dominik Wojtczak
AAAI1
2024 Multi-Agent Reinforcement Learning for Alternating-Time Logic
abstract
Alternating-time temporal logic (ATL) extends branching time logic by enabling quantification over paths that result from the strategic choices made by multiple agents in various coalitions within the system. While classical temporal logics express properties of “closed” systems, ATL can express properties of “open” systems resulting from interactions among several agents. Reinforcement learning (RL) is a sampling-based approach to decision-making where learning agents, guided by a scalar reward function, discover optimal policies through repeated interactions with the environment. The challenge of translating high-level objectives into scalar rewards for RL has garnered increased interest, particularly following the success of model-free RL algorithms. This paper presents an approach for deploying model-free RL to verify multi-agent systems against ATL specifications. The key contribution of this paper is a verification procedure for model-free RL of quantitative and non-nested classic ATL properties, based on Q-learning, demonstrated on a natural subclass of non-nested ATL formulas.
Ernst Moritz Hahn, Mateo Perez, Sven Schewe, Fabio Somenzi, Ashutosh Trivedi 0001, Dominik Wojtczak
ECAI1
2024 AGNES: Abstraction-Guided Framework for Deep Neural Networks Security
Akshay Dhonthi, Marcello Eiermann, Ernst Moritz Hahn, Vahid Hashemi
VMCAI (2)3
2023 Scenario Approach for Parametric Markov Models
Ying Liu 0048, Andrea Turrini, Ernst Moritz Hahn, Bai Xue 0001, Lijun Zhang 0001
ATVA (1)3
2023 Omega-Regular Reward Machines
abstract
Reinforcement learning (RL) is a powerful approach for training agents to perform tasks, but designing an appropriate reward mechanism is critical to its success. However, in many cases, the complexity of the learning objectives goes beyond the capabilities of the Markovian assumption, necessitating a more sophisticated reward mechanism. Reward machines and ω-regular languages are two formalisms used to express non-Markovian rewards for quantitative and qualitative objectives, respectively. This paper introduces ω-regular reward machines, which integrate reward machines with ω-regular languages to enable an expressive and effective reward mechanism for RL. We present a model-free RL algorithm to compute ε-optimal strategies against ω-regular reward machines and evaluate the effectiveness of the proposed algorithm through experiments.
Ernst Moritz Hahn, Mateo Perez, Sven Schewe, Fabio Somenzi, Ashutosh Trivedi 0001, Dominik Wojtczak
ECAI1
2023 Backdoor Mitigation in Deep Neural Networks via Strategic Retraining
Akshay Dhonthi, Ernst Moritz Hahn, Vahid Hashemi
FM2
2023 sfPFL: A Probabilistic Logic for Fault Trees
Stefano M. Nicoletti, Milan Lopuhaä-Zwakenberg, Ernst Moritz Hahn, Mariëlle Stoelinga
FM3
2023 sfATM: A Logic for Quantitative Security Properties on Attack Trees
Stefano M. Nicoletti, Milan Lopuhaä-Zwakenberg, Ernst Moritz Hahn, Mariëlle Stoelinga
SEFM3
2023 Mungojerrie: Linear-Time Objectives in Model-Free Reinforcement Learning
abstract
Abstract Mungojerrie is an extensible tool that provides a framework to translate linear-time objectives into reward for reinforcement learning (RL). The tool provides convergent RL algorithms for stochastic games, reference implementations of existing reward translations for $$\omega $$ ω -regular objectives, and an internal probabilistic model checker for $$\omega $$ ω -regular objectives. This functionality is modular and operates on shared data structures, which enables fast development of new translation techniques. Mungojerrie supports finite models specified in PRISM and $$\omega $$ ω -automata specified in the HOA format, with an integrated command line interface to external linear temporal logic translators. Mungojerrie is distributed with a set of benchmarks for $$\omega $$ ω -regular objectives in RL.
Ernst Moritz Hahn, Mateo Perez, Sven Schewe, Fabio Somenzi, Ashutosh Trivedi 0001, Dominik Wojtczak
TACAS (1)1
2023 Multi-objective ω-Regular Reinforcement Learning
abstract
The expanding role of reinforcement learning (RL) in safety-critical system design has promoted ω-automata as a way to express learning requirements—often non-Markovian—with greater ease of expression and interpretation than scalar reward signals. However, real-world sequential decision making situations often involve multiple, potentially conflicting, objectives. Two dominant approaches to express relative preferences over multiple objectives are: (1) weighted preference , where the decision maker provides scalar weights for various objectives, and (2) lexicographic preference , where the decision maker provides an order over the objectives such that any amount of satisfaction of a higher-ordered objective is preferable to any amount of a lower-ordered one. In this article, we study and develop RL algorithms to compute optimal strategies in Markov decision processes against multiple ω-regular objectives under weighted and lexicographic preferences. We provide a translation from multiple ω-regular objectives to a scalar reward signal that is both faithful (maximising reward means maximising probability of achieving the objectives under the corresponding preference) and effective (RL quickly converges to optimal strategies). We have implemented the translations in a formal reinforcement learning tool, Mungojerrie , and we present an experimental evaluation of our technique on benchmark learning problems.
Ernst Moritz Hahn, Mateo Perez, Sven Schewe, Fabio Somenzi, Ashutosh Trivedi 0001, Dominik Wojtczak
Formal Aspects Comput.1
2022 An Impossibility Result in Automata-Theoretic Reinforcement Learning
Ernst Moritz Hahn, Mateo Perez, Sven Schewe, Fabio Somenzi, Ashutosh Trivedi 0001, Dominik Wojtczak
ATVA1
2022 Alternating Good-for-MDPs Automata
Ernst Moritz Hahn, Mateo Perez, Sven Schewe, Fabio Somenzi, Ashutosh Trivedi 0001, Dominik Wojtczak
ATVA1
2022 BFL: a Logic to Reason about Fault Trees
abstract
Safety-critical infrastructures must operate safely and reliably. Fault tree analysis is a widespread method used to assess risks in these systems: fault trees (FTs) are required — among others — by the Federal Aviation Authority, the Nuclear Regulatory Commission, in the ISO26262 standard for autonomous driving and for software development in aerospace systems. Although popular both in industry and academia, FTs lack a systematic way to formulate powerful and understandable analysis queries. In this paper, we aim to fill this gap and introduce Boolean Fault tree Logic (BFL), a logic to reason about FTs. BFL is a simple, yet expressive logic that supports easier formulation of complex scenarios and specification of FT properties. Alongside BFL, we present model checking algorithms based on binary decision diagrams (BDDs) to analyse specified properties in BFL, patterns and an algorithm to construct counterexamples. Finally, we propose a case-study application of BFL by analysing a COVID-19related FT.
Stefano M. Nicoletti, Ernst Moritz Hahn, Mariëlle Stoelinga
DSN2
2022 Reinforcement Learning with Guarantees that Hold for Ever
Ernst Moritz Hahn, Mateo Perez, Sven Schewe, Fabio Somenzi, Ashutosh Trivedi 0001, Dominik Wojtczak
FMICS1
2022 Recursive Reinforcement Learning
abstract
Recursion is the fundamental paradigm to finitely describe potentially infinite objects. As state-of-the-art reinforcement learning (RL) algorithms cannot directly reason about recursion, they must rely on the practitioner's ingenuity in designing a suitable "flat" representation of the environment. The resulting manual feature constructions and approximations are cumbersome and error-prone; their lack of transparency hampers scalability. To overcome these challenges, we develop RL algorithms capable of computing optimal policies in environments described as a collection of Markov decision processes (MDPs) that can recursively invoke one another. Each constituent MDP is characterized by several entry and exit points that correspond to input and output values of these invocations. These recursive MDPs (or RMDPs) are expressively equivalent to probabilistic pushdown systems (with call-stack playing the role of the pushdown stack), and can model probabilistic programs with recursive procedural calls. We introduce Recursive Q-learning---a model-free RL algorithm for RMDPs---and prove that it converges for finite, single-exit and deterministic multi-exit RMDPs under mild assumptions.
Ernst Moritz Hahn, Mateo Perez, Sven Schewe, Fabio Somenzi, Ashutosh Trivedi 0001, Dominik Wojtczak
NeurIPS1
2022 EPMC Gets Knowledge in Multi-agent Systems
Ernst Moritz Hahn, Yong Li 0031, Sven Schewe, Meng Sun 0002, Andrea Turrini, Lijun Zhang 0001
VMCAI2
2022 Probabilistic Preference Planning Problem for Markov Decision Processes
abstract
The classical planning problem aims to find a sequence of permitted actions leading a system to a designed state, i.e., to achieve the system’s task. However, in many realistic cases we also have requirements on how to complete the task, indicating that some behaviors and situations are more preferred than others. In this paper, we present the probabilistic preference-based planning problem ($\mathrm{P4}$) for Markov decision processes, where the preferences are defined based on an enriched probabilistic LTL-style logic. We first recall$\mathrm{\mathrm{P4} {}Solver}$, an SMT-based planner computing the preferred plan by reducing the problem to a quadratic programming one previously developed to solve$\mathrm{P4}$. To improve computational efficiency and scalability, we then introduce a new encoding of the probabilistic preference-based planning problem as a multi-objective model checking one, and propose the corresponding planner$\mathrm{\mathrm{P4} {}Solver} _{{MO}}$. We illustrate the efficacy of both planners on some selected case studies to show that the model checking-based algorithm is considerably more efficient than the quadratic-programming-based one.
Meilun Li, Andrea Turrini, Ernst Moritz Hahn, Zhikun She, Lijun Zhang 0001
IEEE Trans. Software Eng.3
2021 Model-Free Reinforcement Learning for Branching Markov Decision Processes
abstract
Abstract We study reinforcement learning for the optimal control of Branching Markov Decision Processes (BMDPs), a natural extension of (multitype) Branching Markov Chains (BMCs). The state of a (discrete-time) BMCs is a collection of entities of various types that, while spawning other entities, generate a payoff. In comparison with BMCs, where the evolution of a each entity of the same type follows the same probabilistic pattern, BMDPs allow an external controller to pick from a range of options. This permits us to study the best/worst behaviour of the system. We generalise model-free reinforcement learning techniques to compute an optimal control strategy of an unknown BMDP in the limit. We present results of an implementation that demonstrate the practicality of the approach.
Ernst Moritz Hahn, Mateo Perez, Sven Schewe, Fabio Somenzi, Ashutosh Trivedi 0001, Dominik Wojtczak
CAV (2)1
2021 Model-Free Reinforcement Learning for Lexicographic Omega-Regular Objectives
Ernst Moritz Hahn, Mateo Perez, Sven Schewe, Fabio Somenzi, Ashutosh Trivedi 0001, Dominik Wojtczak
FM1
2021 The Marriage Between Safety and Cybersecurity: Still Practicing
Mariëlle Stoelinga, Christina Kolb, Stefano M. Nicoletti, Carlos E. Budde, Ernst Moritz Hahn
SPIN5
2020 Faithful and Effective Reward Schemes for Model-Free Reinforcement Learning of Omega-Regular Objectives
Ernst Moritz Hahn, Mateo Perez, Sven Schewe, Fabio Somenzi, Ashutosh Trivedi 0001, Dominik Wojtczak
ATVA1
2020 Model-Free Reinforcement Learning for Stochastic Parity Games
abstract
The ever increasing number of connected devices has lead to a metoric rise in the amount data to be processed. This has caused computation to be moved to the edge of the cloud increasing the importance of efficiency in the whole of cloud. The use of this fog computing for time-critical control applications is on the rise and requires robust guarantees on transmission times of the packets in the network while reducing total transmission times of the various packets. We consider networks in which the transmission times that may vary due to mobility of devices, congestion and similar artifacts. We assume knowledge of the worst case tranmssion times over each link and evaluate the typical tranmssion times through exploration. We present the use of reinforcement learning to find optimal paths through the network while never violating preset deadlines. We show that with appropriate domain knowledge, using popular reinforcement learning techniques is a promising prospect even in time-critical applications.
Ernst Moritz Hahn, Mateo Perez, Sven Schewe, Fabio Somenzi, Ashutosh Trivedi 0001, Dominik Wojtczak
CONCUR1
2020 Good-for-MDPs Automata for Probabilistic Analysis and Reinforcement Learning
abstract
We characterize the class of nondeterministic $$\omega $$ -automata that can be used for the analysis of finite Markov decision processes (MDPs). We call these automata ‘good-for-MDPs’ (GFM). We show that GFM automata are closed under classic simulation as well as under more powerful simulation relations that leverage properties of optimal control strategies for MDPs. This closure enables us to exploit state-space reduction techniques, such as those based on direct and delayed simulation, that guarantee simulation equivalence. We demonstrate the promise of GFM automata by defining a new class of automata with favorable properties—they are Büchi automata with low branching degree obtained through a simple construction—and show that going beyond limit-deterministic automata may significantly benefit reinforcement learning.
Ernst Moritz Hahn, Mateo Perez, Sven Schewe, Fabio Somenzi, Ashutosh Trivedi 0001, Dominik Wojtczak
TACAS (1)1
2019 The 2019 Comparison of Tools for the Analysis of Quantitative Formal Models - (QComp 2019 Competition Report)
abstract
Quantitative formal models capture probabilistic behaviour, real-time aspects, or general continuous dynamics. A number of tools support their automatic analysis with respect to dependability or performance properties. QComp 2019 is the first, friendly competition among such tools. It focuses on stochastic formalisms from Markov chains to probabilistic timed automata specified in the Jani model exchange format, and on probabilistic reachability, expected-reward, and steady-state properties. QComp draws its benchmarks from the new Quantitative Verification Benchmark Set. Participating tools, which include probabilistic model checkers and planners as well as simulation-based tools, are evaluated in terms of performance, versatility, and usability. In this paper, we report on the challenges in setting up a quantitative verification competition, present the results of QComp 2019, summarise the lessons learned, and provide an outlook on the features of the next edition of QComp.
Ernst Moritz Hahn, Arnd Hartmanns, Christian Hensel, Michaela Klauck, Joachim Klein 0001, Jan Kretínský, David Parker 0001, Tim Quatmann, Enno Ruijters, Marcel Steinmetz
TACAS (3)1
2019 Omega-Regular Objectives in Model-Free Reinforcement Learning
abstract
We provide the first solution for model-free reinforcement learning of $$\omega $$ -regular objectives for Markov decision processes (MDPs). We present a constructive reduction from the almost-sure satisfaction of $$\omega $$ -regular objectives to an almost-sure reachability problem, and extend this technique to learning how to control an unknown model so that the chance of satisfying the objective is maximized. We compile $$\omega $$ -regular properties into limit-deterministic Büchi automata instead of the traditional Rabin automata; this choice sidesteps difficulties that have marred previous proposals. Our approach allows us to apply model-free, off-the-shelf reinforcement learning algorithms to compute optimal strategies from the observations of the MDP. We present an experimental evaluation of our technique on benchmark learning problems.
Ernst Moritz Hahn, Mateo Perez, Sven Schewe, Fabio Somenzi, Ashutosh Trivedi 0001, Dominik Wojtczak
TACAS (1)1
2018 Accelerated Model Checking of Parametric Markov Chains
Paul Gainer, Ernst Moritz Hahn, Sven Schewe
ATVA2
2017 Model Checking Omega-regular Properties for Quantum Markov Chains
abstract
Quantum Markov chains are an extension of classical Markov chains which are labelled with super-operators rather than probabilities. They allow to faithfully represent quantum programs and quantum protocols. In this paper, we investigate model checking omega-regular properties, a very general class of properties (including, e.g., LTL properties) of interest, against this model. For classical Markov chains, such properties are usually checked by building the product of the model with a language automaton. Subsequent analysis is then performed on this product. When doing so, one takes into account its graph structure, and for instance performs different analyses per bottom strongly connected component (BSCC). Unfortunately, for quantum Markov chains such an approach does not work directly, because super-operators behave differently from probabilities. To overcome this problem, we transform the product quantum Markov chain into a single super-operator, which induces a decomposition of the state space (the tensor product of classical state space and the quantum one) into a family of BSCC subspaces. Interestingly, we show that this BSCC decomposition provides a solution to the issue of model checking omega-regular properties for quantum Markov chains.
Yuan Feng 0001, Ernst Moritz Hahn, Andrea Turrini, Shenggang Ying
CONCUR2
2017 Polynomial-Time Alternating Probabilistic Bisimulation for Interval MDPs
Vahid Hashemi, Andrea Turrini, Ernst Moritz Hahn, Holger Hermanns, Khaled M. Elbassioni
SETTA3
2017 JANI: Quantitative Model and Tool Interaction
Carlos E. Budde, Christian Hensel, Ernst Moritz Hahn, Arnd Hartmanns, Sebastian Junges, Andrea Turrini
TACAS (2)3
2017 Synthesising Strategy Improvement and Recursive Algorithms for Solving 2.5 Player Parity Games
Ernst Moritz Hahn, Sven Schewe, Andrea Turrini, Lijun Zhang 0001
VMCAI1
2016 A Simple Algorithm for Solving Qualitative Probabilistic Parity Games
Ernst Moritz Hahn, Sven Schewe, Andrea Turrini, Lijun Zhang 0001
CAV (2)1
2016 GPU-Accelerated Value Iteration for the Computation of Reachability Probabilities in MDPs
Zhimin Wu, Ernst Moritz Hahn, Akin Günay, Lijun Zhang 0001, Yang Liu 0003
ECAI2
2016 A Comparison of Time- and Reward-Bounded Probabilistic Model Checking Techniques
Ernst Moritz Hahn, Arnd Hartmanns
SETTA1
2016 An Efficient Synthesis Algorithm for Parametric Markov Chains Against Linear Time Properties
Yong Li 0031, Wanwei Liu, Andrea Turrini, Ernst Moritz Hahn, Lijun Zhang 0001
SETTA4
2015 Lazy Probabilistic Model Checking without Determinisation
abstract
The bottleneck in the quantitative analysis of Markov chains and Markov decision processes against specifications given in LTL or as some form of nondeterministic Büchi automata is the inclusion of a determinisation step of the automaton under consideration. In this paper, we show that full determinisation can be avoided: subset and breakpoint constructions suffice. We have implemented our approach - both explicit and symbolic versions - in a prototype tool. Our experiments show that our prototype can compete with mature tools like PRISM.
Ernst Moritz Hahn, Sven Schewe, Andrea Turrini, Lijun Zhang 0001
CONCUR1
2015 QPMC: A Model Checker for Quantum Programs and Protocols
Yuan Feng 0001, Ernst Moritz Hahn, Andrea Turrini, Lijun Zhang 0001
FM2
2015 A Comparative Study of BDD Packages for Probabilistic Symbolic Model Checking
Tom van Dijk, Ernst Moritz Hahn, David N. Jansen, Yong Li 0031, Thomas Neele, Mariëlle Stoelinga, Andrea Turrini, Lijun Zhang 0001
SETTA2
2015 Transient Reward Approximation for Continuous-Time Markov Chains
abstract
We are interested in the analysis of very large continuous-time Markov chains (CTMCs) with many distinct rates. Such models arise naturally in the context of reliability analysis, e.g., of computer network performability analysis, of power grids, of computer virus vulnerability, and in the study of crowd dynamics. We use abstraction techniques together with novel algorithms for the computation of bounds on the expected final and accumulated rewards in continuous-time Markov decision processes (CTMDPs). These ingredients are combined in a partly symbolic and partly explicit (symblicit) analysis approach. In particular, we circumvent the use of multi-terminal decision diagrams, because the latter do not work well if facing a large number of different rates. We demonstrate the practical applicability and efficiency of the approach on two case studies.
Ernst Moritz Hahn, Holger Hermanns, Ralf Wimmer 0001, Bernd Becker 0001
IEEE Trans. Reliab.1
2014 iscasMc: A Web-Based Probabilistic Model Checker
Ernst Moritz Hahn, Sven Schewe, Andrea Turrini, Lijun Zhang 0001
FM1
2013 CCMC: A Conditional CSL Model Checker for Continuous-Time Markov Chains
Ernst Moritz Hahn, Naijun Zhan, Lijun Zhang 0001
ATVA2
2013 Rewarding probabilistic hybrid automata
abstract
The joint consideration of randomness and continuous time is important for the formal verification of many real systems. Considering both facets is especially important for wireless sensor networks, distributed control applications, and many other systems of growing importance. Apart from proving the quantitative safety of such systems, it is important to analyze properties related to resource consumption (energy, memory, bandwidth, etc.) and properties that lie more on the economical side (monetary gain, the expected time or cost until termination, etc.). This paper provides a framework to decide such reward properties effectively for a generic class of models which have a discrete-continuous behaviour and involve both probabilistic as well as nondeterministic decisions. Experimental evidence is provided demonstrating the applicability of our approach.
Ernst Moritz Hahn, Holger Hermanns
HSCC1
2013 Model Repair for Markov Decision Processes
abstract
Markov decision processes (MDPs) are often used for modelling distributed systems with probabilistic failure or randomisation. We consider the problem of model repair for MDPs defined as follows: if the MDP fails to satisfy a property, we aim to find new values for the transition probabilities so that the property is guaranteed to hold, while at the same time the cost of repair is minimised. Because solving the MDP repair problem exactly is infeasible, in this paper we focus on approximate solution methods. We first formulate a region-based approach, which yields an interval in which the minimal repair cost is contained. As an alternative, we also consider sampling based approaches, which are faster but unable to provide lower bounds on the repair cost. We have integrated both methods into the probabilistic model checker PRISM and demonstrated their usefulness in practice using a computer virus case study.
Taolue Chen 0001, Ernst Moritz Hahn, Tingting Han 0001, Marta Z. Kwiatkowska, Hongyang Qu 0001, Lijun Zhang 0001
TASE2
2013 A compositional modelling and analysis framework for stochastic hybrid systems
Ernst Moritz Hahn, Arnd Hartmanns, Holger Hermanns, Joost-Pieter Katoen
Formal Methods Syst. Des.1
2013 Model checking for performability
abstract
This paper gives a bird's-eye view of the various ingredients that make up a modern, model-checking-based approach to performability evaluation: Markov reward models, temporal logics and continuous stochastic logic, model-checking algorithms, bisimulation and the handling of non-determinism. A short historical account as well as a large case study complete this picture. In this way, we show convincingly that the smart combination of performability evaluation with stochastic model-checking techniques, developed over the last decade, provides a powerful and unified method of performability evaluation, thereby combining the advantages of earlier approaches.
Christel Baier, Ernst Moritz Hahn, Boudewijn R. Haverkort, Holger Hermanns, Joost-Pieter Katoen
Math. Struct. Comput. Sci.2
2012 Variable Probabilistic Abstraction Refinement
Luis María Ferrer Fioriti, Ernst Moritz Hahn, Holger Hermanns, Björn Wachter
ATVA2
2011 Model Checking Algorithms for CTMDPs
Peter Buchholz 0001, Ernst Moritz Hahn, Holger Hermanns, Lijun Zhang 0001
CAV2
2011 Measurability and safety verification for stochastic hybrid systems
abstract
Dealing with the interplay of randomness and continuous time is important for the formal verification of many real systems. Considering both facets is especially important for wireless sensor networks, distributed control applications, and many other systems of growing importance. An important traditional design and verification goal for such systems is to ensure that unsafe states can never be reached. In the stochastic setting, this translates to the question whether the probability to reach unsafe states remains tolerable. In this paper, we consider stochastic hybrid systems where the continuous-time behaviour is given by differential equations, as for usual hybrid systems, but the targets of discrete jumps are chosen by probability distributions. These distributions may be general measures on state sets. Also non-determinism is supported, and the latter is exploited in an abstraction and evaluation method that establishes safe upper bounds on reachability probabilities. To arrive there requires us to solve semantic intricacies as well as practical problems. In particular, we show that measurability of a complete system follows from the measurability of its constituent parts. On the practical side, we enhance tool support to work effectively on such general models. Experimental evidence is provided demonstrating the applicability of our approach on three case studies, tackled using a prototypical implementation.
Martin Fränzle, Ernst Moritz Hahn, Holger Hermanns, Nicolás Wolovick, Lijun Zhang 0001
HSCC2
2011 Reachability analysis for incomplete networks of Markov decision processes
abstract
Assume we have a network of discrete-time Markov decision processes (MDPs) which synchronize via common actions. We investigate how to compute probability measures in case the structure of some of the component MDPs (so-called blackbox MDPs) is not known. We then extend this computation to work on networks of MDPs that share integer data variables of finite domain. We use a protocol which spreads information within a network as a case study to show the feasibility and effectiveness of our approach.
Ralf Wimmer 0001, Ernst Moritz Hahn, Holger Hermanns, Bernd Becker 0001
MEMOCODE2
2011 The ins and outs of the probabilistic model checker MRMC
Joost-Pieter Katoen, Ivan S. Zapreev, Ernst Moritz Hahn, Holger Hermanns, David N. Jansen
Perform. Evaluation3
2011 Probabilistic reachability for parametric Markov models
Ernst Moritz Hahn, Holger Hermanns, Lijun Zhang 0001
Int. J. Softw. Tools Technol. Transf.1
2010 PARAM: A Model Checker for Parametric Markov Models
Ernst Moritz Hahn, Holger Hermanns, Björn Wachter, Lijun Zhang 0001
CAV1
2010 Safety Verification for Probabilistic Hybrid Systems
Lijun Zhang 0001, Zhikun She, Stefan Ratschan, Holger Hermanns, Ernst Moritz Hahn
CAV5
2010 PASS: Abstraction Refinement for Infinite Probabilistic Models
Ernst Moritz Hahn, Holger Hermanns, Björn Wachter, Lijun Zhang 0001
TACAS1
2009 INFAMY: An Infinite-State Markov Model Checker
Ernst Moritz Hahn, Holger Hermanns, Björn Wachter, Lijun Zhang 0001
CAV1
2009 Time-Bounded Model Checking of Infinite-State Continuous-Time Markov Chains
abstract
The design of complex concurrent systems often involves intricate performance and dependability considerations. Continuous-time Markov chains (CTMCs) are a widely used modeling formalism that captures such performance and dependability properties, and makes them analyzable by model checking. In this paper, we focus on time-bounded probabilistic properties of infinite-state CTMCs, expressible in a subset of continuous stochastic logic (CSL). This comprises important dependability measures, such as time-bounded probabilistic reachability, performability, survivability, and various availability measures like instantaneous, conditional instantaneous and interval availabilities. Conventional model checkers explore the given model exhaustively, which is often costly, due to state explosion, and sometimes impossible because the model is infinite. This paper presents a method that only explores the model up to a finite depth. The required depth is determined on the fly by an algorithm that is configurable in order to adapt to the characteristics of different classes of models. We provide experimental evidence showing that our method is effective.
Ernst Moritz Hahn, Holger Hermanns, Björn Wachter, Lijun Zhang 0001
Fundam. Informaticae1
2006 Towards a Unified Model-Based Safety Assessment
Thomas Peikenkamp, Antonella Cavallo, Laura Valacca, Eckard Böde, Matthias Pretzer, Ernst Moritz Hahn
SAFECOMP6