{"id":"https://openalex.org/W4384471284","doi":"https://doi.org/10.1007/978-3-031-37706-8_17","title":"Safe Environmental Envelopes of\u00a0Discrete Systems","display_name":"Safe Environmental Envelopes of\u00a0Discrete Systems","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4384471284","doi":"https://doi.org/10.1007/978-3-031-37706-8_17"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-031-37706-8_17","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-031-37706-8_17","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-031-37706-8_17.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"type":"book-chapter","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/978-3-031-37706-8_17.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069939622","display_name":"R\u00f4mulo Meira-G\u00f3es","orcid":"https://orcid.org/0000-0003-3567-9685"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"R\u00f4mulo Meira-G\u00f3es","raw_affiliation_strings":["School of EECS, Pennsylvania State University, State College, USA"],"affiliations":[{"raw_affiliation_string":"School of EECS, Pennsylvania State University, State College, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085681120","display_name":"Ian Dardik","orcid":null},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ian Dardik","raw_affiliation_strings":["School of Computer Science, Carnegie Mellon University, Pittsburgh, USA"],"affiliations":[{"raw_affiliation_string":"School of Computer Science, Carnegie Mellon University, Pittsburgh, USA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044511705","display_name":"Eunsuk Kang","orcid":"https://orcid.org/0000-0001-7891-6885"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Eunsuk Kang","raw_affiliation_strings":["School of Computer Science, Carnegie Mellon University, Pittsburgh, USA"],"affiliations":[{"raw_affiliation_string":"School of Computer Science, Carnegie Mellon University, Pittsburgh, USA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027585653","display_name":"St\u00e9phane Lafortune","orcid":"https://orcid.org/0000-0002-7526-6642"},"institutions":[{"id":"https://openalex.org/I27837315","display_name":"University of Michigan","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"St\u00e9phane Lafortune","raw_affiliation_strings":["EECS Department, University of Michigan, Ann Arbor, USA"],"affiliations":[{"raw_affiliation_string":"EECS Department, University of Michigan, Ann Arbor, USA","institution_ids":["https://openalex.org/I27837315"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5080042319","display_name":"Stavros Tripakis","orcid":"https://orcid.org/0000-0002-1777-493X"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stavros Tripakis","raw_affiliation_strings":["Khoury College of Computer Science, Northeastern University, Boston, USA"],"affiliations":[{"raw_affiliation_string":"Khoury College of Computer Science, Northeastern University, Boston, USA","institution_ids":["https://openalex.org/I12912129"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5069939622"],"corresponding_institution_ids":["https://openalex.org/I130769515"],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":{"value":5000,"currency":"EUR","value_usd":5392},"fwci":3.013,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.90346118,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"326","last_page":"350"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.8273749351501465},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8137751817703247},{"id":"https://openalex.org/keywords/property","display_name":"Property (philosophy)","score":0.5641570687294006},{"id":"https://openalex.org/keywords/transition-system","display_name":"Transition system","score":0.5055317878723145},{"id":"https://openalex.org/keywords/voting","display_name":"Voting","score":0.4807979166507721},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.411060094833374},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.2907584011554718}],"concepts":[{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.8273749351501465},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8137751817703247},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.5641570687294006},{"id":"https://openalex.org/C2779167558","wikidata":"https://www.wikidata.org/wiki/Q176468","display_name":"Transition system","level":2,"score":0.5055317878723145},{"id":"https://openalex.org/C520049643","wikidata":"https://www.wikidata.org/wiki/Q189760","display_name":"Voting","level":3,"score":0.4807979166507721},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.411060094833374},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2907584011554718},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/978-3-031-37706-8_17","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-031-37706-8_17","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-031-37706-8_17.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"}],"best_oa_location":{"id":"doi:10.1007/978-3-031-37706-8_17","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-031-37706-8_17","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-031-37706-8_17.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3997084671","display_name":null,"funder_award_id":"ECCS-2144416","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4271186705","display_name":null,"funder_award_id":"2144416","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4699122387","display_name":null,"funder_award_id":"CCF-2144860","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5169581235","display_name":null,"funder_award_id":"and ECCS-","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5681561289","display_name":"CAREER: Towards a Rigorous Methodology for Engineering Robust Software Systems","funder_award_id":"2144860","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6596492623","display_name":null,"funder_award_id":"CNS-1801546","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6778668403","display_name":"SaTC: CORE: Medium: Collaborative: Bridging the Gap between Protocol Design and Implementation through Automated Mapping","funder_award_id":"1801546","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6822897412","display_name":null,"funder_award_id":"CCF-1918140","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G727611373","display_name":null,"funder_award_id":"2144416","funder_id":"https://openalex.org/F4320337392","funder_display_name":"Division of Electrical, Communications and Cyber Systems"},{"id":"https://openalex.org/G8465669674","display_name":null,"funder_award_id":"1918140","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8706808069","display_name":null,"funder_award_id":"CNS-1801342","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320337392","display_name":"Division of Electrical, Communications and Cyber Systems","ror":"https://ror.org/01krpsy48"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4384471284.pdf"},"referenced_works_count":43,"referenced_works":["https://openalex.org/W1480983276","https://openalex.org/W1512716375","https://openalex.org/W1564779026","https://openalex.org/W1830954042","https://openalex.org/W1968302778","https://openalex.org/W1971138850","https://openalex.org/W1975294133","https://openalex.org/W1975823577","https://openalex.org/W1979349468","https://openalex.org/W2001233105","https://openalex.org/W2016206563","https://openalex.org/W2023808162","https://openalex.org/W2043344842","https://openalex.org/W2045552406","https://openalex.org/W2050234567","https://openalex.org/W2065444032","https://openalex.org/W2073788194","https://openalex.org/W2089237214","https://openalex.org/W2089465507","https://openalex.org/W2100505193","https://openalex.org/W2107220315","https://openalex.org/W2120088319","https://openalex.org/W2126924915","https://openalex.org/W2137166176","https://openalex.org/W2139910008","https://openalex.org/W2155934015","https://openalex.org/W2169624732","https://openalex.org/W2278079988","https://openalex.org/W2494924537","https://openalex.org/W2502103274","https://openalex.org/W2983973397","https://openalex.org/W2998658463","https://openalex.org/W3011336637","https://openalex.org/W3011521869","https://openalex.org/W3044937181","https://openalex.org/W3095689204","https://openalex.org/W3097629519","https://openalex.org/W3105057307","https://openalex.org/W3139526736","https://openalex.org/W4244433661","https://openalex.org/W4287458760","https://openalex.org/W4313200664","https://openalex.org/W4379251773"],"related_works":["https://openalex.org/W2770593030","https://openalex.org/W4281727072","https://openalex.org/W4312219546","https://openalex.org/W3154990682","https://openalex.org/W2171975302","https://openalex.org/W2022352247","https://openalex.org/W1589637664","https://openalex.org/W2560201613","https://openalex.org/W1532073221","https://openalex.org/W2377538627"],"abstract_inverted_index":{"Abstract":[0],"A":[1],"safety":[2,12,105],"verification":[3,150],"task":[4],"involves":[5],"verifying":[6],"a":[7,10,58,68,87,125,165,173,178],"system":[8,36,49,70,122,142],"against":[9,52,77],"desired":[11,126],"property":[13,66],"under":[14,42],"certain":[15],"assumptions":[16,23],"about":[17,136],"the":[18,35,48,81,96,104,121,148,156],"environment.":[19,82,98],"However,":[20],"these":[21,45],"environmental":[22,53],"may":[24,92],"occasionally":[25],"be":[26,93],"violated":[27],"due":[28],"to":[29,95,133],"modeling":[30],"errors":[31],"or":[32],"faults.":[33],"Ideally,":[34],"guarantees":[37,124],"its":[38],"critical":[39],"properties":[40],"even":[41],"some":[43],"of":[44,60,67,89,107,115,141,158],"violations,":[46],"i.e.,":[47,110],"is":[50,76],"robust":[51,74],"deviations.":[54],"This":[55],"paper":[56],"proposes":[57],"notion":[59,101],"robustness":[61,100,137],"as":[62,86],"an":[63,169],"explicit,":[64],"first-class":[65],"transition":[69],"that":[71,91,130],"captures":[72,112],"how":[73],"it":[75,111],"possible":[78],"deviations":[79,85],"in":[80],"We":[83,128,154],"modeled":[84],"set":[88],"transitions":[90,118],"added":[94],"original":[97],"Our":[99],"then":[102],"describes":[103],"envelope":[106],"this":[108],"system,":[109],"all":[113],"sets":[114],"extra":[116],"environment":[117],"for":[119],"which":[120],"still":[123],"property.":[127],"show":[129],"being":[131],"able":[132],"explicitly":[134],"reason":[135],"enables":[138],"new":[139],"types":[140],"analysis":[143],"and":[144,177],"design":[145],"tasks":[146],"beyond":[147],"common":[149],"problem":[151],"stated":[152],"above.":[153],"demonstrate":[155],"application":[157],"our":[159],"framework":[160],"on":[161],"case":[162],"studies":[163],"involving":[164],"radiation":[166],"therapy":[167],"interface,":[168],"electronic":[170],"voting":[171],"machine,":[172],"fare":[174],"collection":[175],"protocol,":[176],"medical":[179],"pump":[180],"device.":[181]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":2}],"updated_date":"2026-03-18T14:38:29.013473","created_date":"2025-10-10T00:00:00"}
