cfaed Publications
Risk and Mitigation of Nondeterminism in Distributed Cyber-Physical Systems
Reference
Soroush Bateni, Marten Lohstroh, Hou Seng Wong, Hokeun Kim, Shaokai Lin, Christian Menard, Edward A. Lee, "Risk and Mitigation of Nondeterminism in Distributed Cyber-Physical Systems", In Proceeding: 21st ACM/IEEE International Symposium on Formal Methods and Models for System Design (MEMOCODE), Hamburg, Germany, September 21-22 2023. [doi]
Abstract
Asynchronous frameworks for distributed embedded systems, like ROS and MQTT, are increasingly used in safety-critical applications such as autonomous driving, where the cost of unintended behavior is high. The loose coordination between the components in these frameworks gives rise to nondeterminism, where factors such as communication timing can lead to arbitrary ordering in the handling of messages. In this paper, we show that this problem compromises safety and complicates system design in Autoware.Auto 1.0, a popular open-source autonomous driving framework based on ROS 2. We extend the Lingua Franca coordination language to support distributed execution, port Autoware.Auto to Lingua Franca, and show that our solution avoids the identified problems. We assess the performance of our federated runtime implementation and show that it is competitive for this application. We also compare our achievable throughput to ROS 2 and MQTT using microbenchmarks and find that we can match or exceed the throughput of those frameworks while preserving determinism.
Bibtex
author = {Bateni, Soroush and Lohstroh, Marten and Wong, Hou Seng and Kim, Hokeun and Lin, Shaokai and Menard, Christian and Lee, Edward A.},
title = {Risk and Mitigation of Nondeterminism in Distributed Cyber-Physical Systems},
booktitle = {21st ACM/IEEE International Symposium on Formal Methods and Models for System Design (MEMOCODE), Hamburg, Germany},
month = {September 21-22},
year = {2023},
doi = {10.1145/3610579.3613219},
abstract = {Asynchronous frameworks for distributed embedded systems, like ROS and MQTT, are increasingly used in safety-critical applications such as autonomous driving, where the cost of unintended behavior is high. The loose coordination between the components in these frameworks gives rise to nondeterminism, where factors such as communication timing can lead to arbitrary ordering in the handling of messages. In this paper, we show that this problem compromises safety and complicates system design in Autoware.Auto 1.0, a popular open-source autonomous driving framework based on ROS 2. We extend the Lingua Franca coordination language to support distributed execution, port Autoware.Auto to Lingua Franca, and show that our solution avoids the identified problems. We assess the performance of our federated runtime implementation and show that it is competitive for this application. We also compare our achievable throughput to ROS 2 and MQTT using microbenchmarks and find that we can match or exceed the throughput of those frameworks while preserving determinism.},
URL = {https://www.icyphy.org/publications/2023_BateniEtAl_Federated/}
}
Downloads
No Downloads available for this publication
Permalink
https://cfaed.tu-dresden.de/publications?pubId=3704