sp
/
Tempest_in_Action
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
16 Commits
1 Branch
0 Tags
24 MiB
Tree: 68f01f6a3c
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '68f01f6a3c'
${ noResults }
Tempest_in_Action/tempest-devel/resources/examples/testfiles/dtmc/crowds-4-3.pm

183 lines
10 KiB
Raw Normal View History

initial commit
2 months ago
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
  1. // CROWDS [Reiter,Rubin]
  2. // Vitaly Shmatikov, 2002
  4. // Note:
  5. // Change everything marked CWDSIZ when changing the size of the crowd
  6. // Change everything marked CWDMAX when increasing max size of the crowd
  8. dtmc
  10. // Probability of forwarding
  11. const double PF = 0.8;
  13. // Probability that a crowd member is bad
  14. const double badC = 0.091;
  15. // const double badC = 0.167;
  17. const int TotalRuns=3; // Total number of protocol runs to analyze
  18. const int CrowdSize=4; // CWDSIZ: actual number of good crowd members
  19. const int MaxGood=20; // CWDMAX: maximum number of good crowd members
  21. // Process definitions
  22. module crowds
  24. // Auxiliary variables
  25. launch: bool init true; // Start modeling?
  26. new: bool init false; // Initialize a new protocol instance?
  27. runCount: [0..TotalRuns] init TotalRuns; // Counts protocol instances
  28. start: bool init false; // Start the protocol?
  29. run: bool init false; // Run the protocol?
  30. lastSeen: [0..MaxGood] init MaxGood; // Last crowd member to touch msg
  31. good: bool init false; // Crowd member is good?
  32. bad: bool init false; // ... bad?
  33. recordLast: bool init false; // Record last seen crowd member?
  34. badObserve: bool init false; // Bad members observes who sent msg?
  35. deliver: bool init false; // Deliver message to destination?
  36. done: bool init false; // Protocol instance finished?
  38. // Counters for attackers' observations
  39. // CWDMAX: 1 counter per each good crowd member
  40. observe0: [0..TotalRuns] init 0;
  41. observe1: [0..TotalRuns] init 0;
  42. observe2: [0..TotalRuns] init 0;
  43. observe3: [0..TotalRuns] init 0;
  44. observe4: [0..TotalRuns] init 0;
  45. observe5: [0..TotalRuns] init 0;
  46. observe6: [0..TotalRuns] init 0;
  47. observe7: [0..TotalRuns] init 0;
  48. observe8: [0..TotalRuns] init 0;
  49. observe9: [0..TotalRuns] init 0;
  50. observe10: [0..TotalRuns] init 0;
  51. observe11: [0..TotalRuns] init 0;
  52. observe12: [0..TotalRuns] init 0;
  53. observe13: [0..TotalRuns] init 0;
  54. observe14: [0..TotalRuns] init 0;
  55. observe15: [0..TotalRuns] init 0;
  56. observe16: [0..TotalRuns] init 0;
  57. observe17: [0..TotalRuns] init 0;
  58. observe18: [0..TotalRuns] init 0;
  59. observe19: [0..TotalRuns] init 0;
  61. [] launch -> (new'=true) & (runCount'=TotalRuns) & (launch'=false);
  62. // Set up a new protocol instance
  63. [] new & runCount>0 -> (runCount'=runCount-1) & (new'=false) & (start'=true);
  65. // SENDER
  66. // Start the protocol
  67. [] start -> (lastSeen'=0) & (run'=true) & (deliver'=false) & (start'=false);
  69. // CROWD MEMBERS
  70. // Good or bad crowd member?
  71. [] !good & !bad & !deliver & run ->
  72. 1-badC : (good'=true) & (recordLast'=true) & (run'=false) +
  73. badC : (bad'=true) & (badObserve'=true) & (run'=false);
  75. // GOOD MEMBERS
  76. // Forward with probability PF, else deliver
  77. [] good & !deliver & run -> PF : (good'=false) + 1-PF : (deliver'=true);
  78. // Record the last crowd member who touched the msg;
  79. // all good members may appear with equal probability
  80. // Note: This is backward. In the real protocol, each honest
  81. // forwarder randomly chooses the next forwarder.
  82. // Here, the identity of an honest forwarder is randomly
  83. // chosen *after* it has forwarded the message.
  84. [] recordLast & CrowdSize=2 ->
  85. 1/2 : (lastSeen'=0) & (recordLast'=false) & (run'=true) +
  86. 1/2 : (lastSeen'=1) & (recordLast'=false) & (run'=true);
  87. [] recordLast & CrowdSize=4 ->
  88. 1/4 : (lastSeen'=0) & (recordLast'=false) & (run'=true) +
  89. 1/4 : (lastSeen'=1) & (recordLast'=false) & (run'=true) +
  90. 1/4 : (lastSeen'=2) & (recordLast'=false) & (run'=true) +
  91. 1/4 : (lastSeen'=3) & (recordLast'=false) & (run'=true);
  92. [] recordLast & CrowdSize=5 ->
  93. 1/5 : (lastSeen'=0) & (recordLast'=false) & (run'=true) +
  94. 1/5 : (lastSeen'=1) & (recordLast'=false) & (run'=true) +
  95. 1/5 : (lastSeen'=2) & (recordLast'=false) & (run'=true) +
  96. 1/5 : (lastSeen'=3) & (recordLast'=false) & (run'=true) +
  97. 1/5 : (lastSeen'=4) & (recordLast'=false) & (run'=true);
  98. [] recordLast & CrowdSize=10 ->
  99. 1/10 : (lastSeen'=0) & (recordLast'=false) & (run'=true) +
  100. 1/10 : (lastSeen'=1) & (recordLast'=false) & (run'=true) +
  101. 1/10 : (lastSeen'=2) & (recordLast'=false) & (run'=true) +
  102. 1/10 : (lastSeen'=3) & (recordLast'=false) & (run'=true) +
  103. 1/10 : (lastSeen'=4) & (recordLast'=false) & (run'=true) +
  104. 1/10 : (lastSeen'=5) & (recordLast'=false) & (run'=true) +
  105. 1/10 : (lastSeen'=6) & (recordLast'=false) & (run'=true) +
  106. 1/10 : (lastSeen'=7) & (recordLast'=false) & (run'=true) +
  107. 1/10 : (lastSeen'=8) & (recordLast'=false) & (run'=true) +
  108. 1/10 : (lastSeen'=9) & (recordLast'=false) & (run'=true);
  109. [] recordLast & CrowdSize=15 ->
  110. 1/15 : (lastSeen'=0) & (recordLast'=false) & (run'=true) +
  111. 1/15 : (lastSeen'=1) & (recordLast'=false) & (run'=true) +
  112. 1/15 : (lastSeen'=2) & (recordLast'=false) & (run'=true) +
  113. 1/15 : (lastSeen'=3) & (recordLast'=false) & (run'=true) +
  114. 1/15 : (lastSeen'=4) & (recordLast'=false) & (run'=true) +
  115. 1/15 : (lastSeen'=5) & (recordLast'=false) & (run'=true) +
  116. 1/15 : (lastSeen'=6) & (recordLast'=false) & (run'=true) +
  117. 1/15 : (lastSeen'=7) & (recordLast'=false) & (run'=true) +
  118. 1/15 : (lastSeen'=8) & (recordLast'=false) & (run'=true) +
  119. 1/15 : (lastSeen'=9) & (recordLast'=false) & (run'=true) +
  120. 1/15 : (lastSeen'=10) & (recordLast'=false) & (run'=true) +
  121. 1/15 : (lastSeen'=11) & (recordLast'=false) & (run'=true) +
  122. 1/15 : (lastSeen'=12) & (recordLast'=false) & (run'=true) +
  123. 1/15 : (lastSeen'=13) & (recordLast'=false) & (run'=true) +
  124. 1/15 : (lastSeen'=14) & (recordLast'=false) & (run'=true);
  125. [] recordLast & CrowdSize=20 ->
  126. 1/20 : (lastSeen'=0) & (recordLast'=false) & (run'=true) +
  127. 1/20 : (lastSeen'=1) & (recordLast'=false) & (run'=true) +
  128. 1/20 : (lastSeen'=2) & (recordLast'=false) & (run'=true) +
  129. 1/20 : (lastSeen'=3) & (recordLast'=false) & (run'=true) +
  130. 1/20 : (lastSeen'=4) & (recordLast'=false) & (run'=true) +
  131. 1/20 : (lastSeen'=5) & (recordLast'=false) & (run'=true) +
  132. 1/20 : (lastSeen'=6) & (recordLast'=false) & (run'=true) +
  133. 1/20 : (lastSeen'=7) & (recordLast'=false) & (run'=true) +
  134. 1/20 : (lastSeen'=8) & (recordLast'=false) & (run'=true) +
  135. 1/20 : (lastSeen'=9) & (recordLast'=false) & (run'=true) +
  136. 1/20 : (lastSeen'=10) & (recordLast'=false) & (run'=true) +
  137. 1/20 : (lastSeen'=11) & (recordLast'=false) & (run'=true) +
  138. 1/20 : (lastSeen'=12) & (recordLast'=false) & (run'=true) +
  139. 1/20 : (lastSeen'=13) & (recordLast'=false) & (run'=true) +
  140. 1/20 : (lastSeen'=14) & (recordLast'=false) & (run'=true) +
  141. 1/20 : (lastSeen'=15) & (recordLast'=false) & (run'=true) +
  142. 1/20 : (lastSeen'=16) & (recordLast'=false) & (run'=true) +
  143. 1/20 : (lastSeen'=17) & (recordLast'=false) & (run'=true) +
  144. 1/20 : (lastSeen'=18) & (recordLast'=false) & (run'=true) +
  145. 1/20 : (lastSeen'=19) & (recordLast'=false) & (run'=true);
  147. // BAD MEMBERS
  148. // Remember from whom the message was received and deliver
  149. // CWDMAX: 1 rule per each good crowd member
  150. [] lastSeen=0 & badObserve & observe0 <TotalRuns -> (observe0' =observe0 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  151. [] lastSeen=1 & badObserve & observe1 <TotalRuns -> (observe1' =observe1 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  152. [] lastSeen=2 & badObserve & observe2 <TotalRuns -> (observe2' =observe2 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  153. [] lastSeen=3 & badObserve & observe3 <TotalRuns -> (observe3' =observe3 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  154. [] lastSeen=4 & badObserve & observe4 <TotalRuns -> (observe4' =observe4 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  155. [] lastSeen=5 & badObserve & observe5 <TotalRuns -> (observe5' =observe5 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  156. [] lastSeen=6 & badObserve & observe6 <TotalRuns -> (observe6' =observe6 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  157. [] lastSeen=7 & badObserve & observe7 <TotalRuns -> (observe7' =observe7 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  158. [] lastSeen=8 & badObserve & observe8 <TotalRuns -> (observe8' =observe8 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  159. [] lastSeen=9 & badObserve & observe9 <TotalRuns -> (observe9' =observe9 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  160. [] lastSeen=10 & badObserve & observe10<TotalRuns -> (observe10'=observe10+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  161. [] lastSeen=11 & badObserve & observe11<TotalRuns -> (observe11'=observe11+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  162. [] lastSeen=12 & badObserve & observe12<TotalRuns -> (observe12'=observe12+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  163. [] lastSeen=13 & badObserve & observe13<TotalRuns -> (observe13'=observe13+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  164. [] lastSeen=14 & badObserve & observe14<TotalRuns -> (observe14'=observe14+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  165. [] lastSeen=15 & badObserve & observe15<TotalRuns -> (observe15'=observe15+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  166. [] lastSeen=16 & badObserve & observe16<TotalRuns -> (observe16'=observe16+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  167. [] lastSeen=17 & badObserve & observe17<TotalRuns -> (observe17'=observe17+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  168. [] lastSeen=18 & badObserve & observe18<TotalRuns -> (observe18'=observe18+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  169. [] lastSeen=19 & badObserve & observe19<TotalRuns -> (observe19'=observe19+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  171. // RECIPIENT
  172. // Delivery to destination
  173. [] deliver & run -> (done'=true) & (deliver'=false) & (run'=false) & (good'=false) & (bad'=false);
  174. // Start a new instance
  175. [] done -> (new'=true) & (done'=false) & (run'=false) & (lastSeen'=MaxGood);
  177. endmodule
  180. label "observeIGreater1" = observe1>1|observe2>1|observe3>1;
  181. label "observeOnlyTrueSender" = observe0>1 & observe1<=1 & observe2<=1 & observe3<=1;