sp
/
Tempest_in_Action
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
16 Commits
1 Branch
0 Tags
24 MiB
Tree: 68f01f6a3c
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '68f01f6a3c'
${ noResults }
Tempest_in_Action/tempest-devel/resources/examples/testfiles/pdtmc/crowds3_5.pm

194 lines
11 KiB
Raw Normal View History

initial commit
2 months ago
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
  1. // CROWDS [Reiter,Rubin]
  2. // Vitaly Shmatikov, 2002
  3. // Modified by Ernst Moritz Hahn (emh@cs.uni-sb.de)
  5. // note:
  6. // Change everything marked CWDSIZ when changing the size of the crowd
  7. // Change everything marked CWDMAX when increasing max size of the crowd
  9. dtmc
  11. // Model parameters
  12. const double PF; // forwarding probability
  13. const double badC; // probability that member is untrustworthy
  15. // Probability of forwarding
  16. // const double PF = 0.8;
  17. // const double notPF = 0.2; // must be 1-PF
  19. // Probability that a crowd member is bad
  20. // const double badC = 0.1;
  21. // const double badC = 0.091;
  22. // const double badC = 0.167;
  23. // const double goodC = 0.909; // must be 1-badC
  24. // const double goodC = 0.833; // must be 1-badC
  26. const int CrowdSize = 3; // CWDSIZ: actual number of good crowd members
  27. const int TotalRuns = 5; // Total number of protocol runs to analyze
  28. const int MaxGood=20; // CWDMAX: maximum number of good crowd members
  30. // Process definitions
  31. module crowds
  33. // Auxiliary variables
  34. launch: bool init true; // Start modeling?
  35. newInstance: bool init false; // Initialize a new protocol instance?
  36. runCount: [0..TotalRuns] init TotalRuns; // Counts protocol instances
  37. start: bool init false; // Start the protocol?
  38. run: bool init false; // Run the protocol?
  39. lastSeen: [0..MaxGood] init 0; // Last crowd member to touch msg
  40. good: bool init false; // Crowd member is good?
  41. bad: bool init false; // ... bad?
  42. recordLast: bool init false; // Record last seen crowd member?
  43. badObserve: bool init false; // Bad members observes who sent msg?
  44. deliver: bool init false; // Deliver message to destination?
  45. done: bool init false; // Protocol instance finished?
  47. // Counters for attackers' observations
  48. // CWDMAX: 1 counter per each good crowd member
  49. observe0: [0..TotalRuns];
  50. observe1: [0..TotalRuns];
  51. observe2: [0..TotalRuns];
  52. observe3: [0..TotalRuns];
  53. observe4: [0..TotalRuns];
  54. observe5: [0..TotalRuns];
  55. observe6: [0..TotalRuns];
  56. observe7: [0..TotalRuns];
  57. observe8: [0..TotalRuns];
  58. observe9: [0..TotalRuns];
  59. observe10: [0..TotalRuns];
  60. observe11: [0..TotalRuns];
  61. observe12: [0..TotalRuns];
  62. observe13: [0..TotalRuns];
  63. observe14: [0..TotalRuns];
  64. observe15: [0..TotalRuns];
  65. observe16: [0..TotalRuns];
  66. observe17: [0..TotalRuns];
  67. observe18: [0..TotalRuns];
  68. observe19: [0..TotalRuns];
  70. [] launch -> (newInstance'=true) & (runCount'=TotalRuns) & (launch'=false);
  71. // Set up a newInstance protocol instance
  72. [] newInstance & runCount>0 -> (runCount'=runCount-1) & (newInstance'=false) & (start'=true);
  74. // SENDER
  75. // Start the protocol
  76. [] start -> (lastSeen'=0) & (run'=true) & (deliver'=false) & (start'=false);
  78. // CROWD MEMBERS
  79. // Good or bad crowd member?
  80. [] !good & !bad & !deliver & run ->
  81. 1-badC : (good'=true) & (recordLast'=true) & (run'=false) +
  82. badC : (bad'=true) & (badObserve'=true) & (run'=false);
  84. // GOOD MEMBERS
  85. // Forward with probability PF, else deliver
  86. [] good & !deliver & run -> PF : (good'=false) + 1-PF : (deliver'=true);
  87. // Record the last crowd member who touched the msg;
  88. // all good members may appear with equal probability
  89. // Note: This is backward. In the real protocol, each honest
  90. // forwarder randomly chooses the next forwarder.
  91. // Here, the identity of an honest forwarder is randomly
  92. // chosen *after* it has forwarded the message.
  93. [] recordLast & CrowdSize=2 ->
  94. 1/2 : (lastSeen'=0) & (recordLast'=false) & (run'=true) +
  95. 1/2 : (lastSeen'=1) & (recordLast'=false) & (run'=true);
  96. [] recordLast & CrowdSize=3 ->
  97. 1/3 : (lastSeen'=0) & (recordLast'=false) & (run'=true) +
  98. 1/3 : (lastSeen'=1) & (recordLast'=false) & (run'=true) +
  99. 1/3 : (lastSeen'=2) & (recordLast'=false) & (run'=true);
  100. [] recordLast & CrowdSize=4 ->
  101. 1/4 : (lastSeen'=0) & (recordLast'=false) & (run'=true) +
  102. 1/4 : (lastSeen'=1) & (recordLast'=false) & (run'=true) +
  103. 1/4 : (lastSeen'=2) & (recordLast'=false) & (run'=true) +
  104. 1/4 : (lastSeen'=3) & (recordLast'=false) & (run'=true);
  105. [] recordLast & CrowdSize=5 ->
  106. 1/5 : (lastSeen'=0) & (recordLast'=false) & (run'=true) +
  107. 1/5 : (lastSeen'=1) & (recordLast'=false) & (run'=true) +
  108. 1/5 : (lastSeen'=2) & (recordLast'=false) & (run'=true) +
  109. 1/5 : (lastSeen'=3) & (recordLast'=false) & (run'=true) +
  110. 1/5 : (lastSeen'=4) & (recordLast'=false) & (run'=true);
  111. [] recordLast & CrowdSize=10 ->
  112. 1/10 : (lastSeen'=0) & (recordLast'=false) & (run'=true) +
  113. 1/10 : (lastSeen'=1) & (recordLast'=false) & (run'=true) +
  114. 1/10 : (lastSeen'=2) & (recordLast'=false) & (run'=true) +
  115. 1/10 : (lastSeen'=3) & (recordLast'=false) & (run'=true) +
  116. 1/10 : (lastSeen'=4) & (recordLast'=false) & (run'=true) +
  117. 1/10 : (lastSeen'=5) & (recordLast'=false) & (run'=true) +
  118. 1/10 : (lastSeen'=6) & (recordLast'=false) & (run'=true) +
  119. 1/10 : (lastSeen'=7) & (recordLast'=false) & (run'=true) +
  120. 1/10 : (lastSeen'=8) & (recordLast'=false) & (run'=true) +
  121. 1/10 : (lastSeen'=9) & (recordLast'=false) & (run'=true);
  122. [] recordLast & CrowdSize=15 ->
  123. 1/15 : (lastSeen'=0) & (recordLast'=false) & (run'=true) +
  124. 1/15 : (lastSeen'=1) & (recordLast'=false) & (run'=true) +
  125. 1/15 : (lastSeen'=2) & (recordLast'=false) & (run'=true) +
  126. 1/15 : (lastSeen'=3) & (recordLast'=false) & (run'=true) +
  127. 1/15 : (lastSeen'=4) & (recordLast'=false) & (run'=true) +
  128. 1/15 : (lastSeen'=5) & (recordLast'=false) & (run'=true) +
  129. 1/15 : (lastSeen'=6) & (recordLast'=false) & (run'=true) +
  130. 1/15 : (lastSeen'=7) & (recordLast'=false) & (run'=true) +
  131. 1/15 : (lastSeen'=8) & (recordLast'=false) & (run'=true) +
  132. 1/15 : (lastSeen'=9) & (recordLast'=false) & (run'=true) +
  133. 1/15 : (lastSeen'=10) & (recordLast'=false) & (run'=true) +
  134. 1/15 : (lastSeen'=11) & (recordLast'=false) & (run'=true) +
  135. 1/15 : (lastSeen'=12) & (recordLast'=false) & (run'=true) +
  136. 1/15 : (lastSeen'=13) & (recordLast'=false) & (run'=true) +
  137. 1/15 : (lastSeen'=14) & (recordLast'=false) & (run'=true);
  138. [] recordLast & CrowdSize=20 ->
  139. 1/20 : (lastSeen'=0) & (recordLast'=false) & (run'=true) +
  140. 1/20 : (lastSeen'=1) & (recordLast'=false) & (run'=true) +
  141. 1/20 : (lastSeen'=2) & (recordLast'=false) & (run'=true) +
  142. 1/20 : (lastSeen'=3) & (recordLast'=false) & (run'=true) +
  143. 1/20 : (lastSeen'=4) & (recordLast'=false) & (run'=true) +
  144. 1/20 : (lastSeen'=5) & (recordLast'=false) & (run'=true) +
  145. 1/20 : (lastSeen'=6) & (recordLast'=false) & (run'=true) +
  146. 1/20 : (lastSeen'=7) & (recordLast'=false) & (run'=true) +
  147. 1/20 : (lastSeen'=8) & (recordLast'=false) & (run'=true) +
  148. 1/20 : (lastSeen'=9) & (recordLast'=false) & (run'=true) +
  149. 1/20 : (lastSeen'=10) & (recordLast'=false) & (run'=true) +
  150. 1/20 : (lastSeen'=11) & (recordLast'=false) & (run'=true) +
  151. 1/20 : (lastSeen'=12) & (recordLast'=false) & (run'=true) +
  152. 1/20 : (lastSeen'=13) & (recordLast'=false) & (run'=true) +
  153. 1/20 : (lastSeen'=14) & (recordLast'=false) & (run'=true) +
  154. 1/20 : (lastSeen'=15) & (recordLast'=false) & (run'=true) +
  155. 1/20 : (lastSeen'=16) & (recordLast'=false) & (run'=true) +
  156. 1/20 : (lastSeen'=17) & (recordLast'=false) & (run'=true) +
  157. 1/20 : (lastSeen'=18) & (recordLast'=false) & (run'=true) +
  158. 1/20 : (lastSeen'=19) & (recordLast'=false) & (run'=true);
  160. // BAD MEMBERS
  161. // Remember from whom the message was received and deliver
  162. // CWDMAX: 1 rule per each good crowd member
  163. [] lastSeen=0 & badObserve & observe0 <TotalRuns -> (observe0' =observe0 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  164. [] lastSeen=1 & badObserve & observe1 <TotalRuns -> (observe1' =observe1 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  165. [] lastSeen=2 & badObserve & observe2 <TotalRuns -> (observe2' =observe2 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  166. [] lastSeen=3 & badObserve & observe3 <TotalRuns -> (observe3' =observe3 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  167. [] lastSeen=4 & badObserve & observe4 <TotalRuns -> (observe4' =observe4 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  168. [] lastSeen=5 & badObserve & observe5 <TotalRuns -> (observe5' =observe5 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  169. [] lastSeen=6 & badObserve & observe6 <TotalRuns -> (observe6' =observe6 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  170. [] lastSeen=7 & badObserve & observe7 <TotalRuns -> (observe7' =observe7 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  171. [] lastSeen=8 & badObserve & observe8 <TotalRuns -> (observe8' =observe8 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  172. [] lastSeen=9 & badObserve & observe9 <TotalRuns -> (observe9' =observe9 +1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  173. [] lastSeen=10 & badObserve & observe10<TotalRuns -> (observe10'=observe10+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  174. [] lastSeen=11 & badObserve & observe11<TotalRuns -> (observe11'=observe11+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  175. [] lastSeen=12 & badObserve & observe12<TotalRuns -> (observe12'=observe12+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  176. [] lastSeen=13 & badObserve & observe13<TotalRuns -> (observe13'=observe13+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  177. [] lastSeen=14 & badObserve & observe14<TotalRuns -> (observe14'=observe14+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  178. [] lastSeen=15 & badObserve & observe15<TotalRuns -> (observe15'=observe15+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  179. [] lastSeen=16 & badObserve & observe16<TotalRuns -> (observe16'=observe16+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  180. [] lastSeen=17 & badObserve & observe17<TotalRuns -> (observe17'=observe17+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  181. [] lastSeen=18 & badObserve & observe18<TotalRuns -> (observe18'=observe18+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  182. [] lastSeen=19 & badObserve & observe19<TotalRuns -> (observe19'=observe19+1) & (deliver'=true) & (run'=true) & (badObserve'=false);
  184. // RECIPIENT
  185. // Delivery to destination
  186. [] deliver & run -> (done'=true) & (deliver'=false) & (run'=false) & (good'=false) & (bad'=false);
  187. // Start a newInstance instance
  188. [] done -> (newInstance'=true) & (done'=false) & (run'=false) & (lastSeen'=MaxGood);
  190. endmodule
  192. label "observe0Greater1" = observe0 > 1;
  193. label "observeIGreater1" = observe1>1|observe2>1;
  194. label "observeOnlyTrueSender" = observe0>1&observe1<=1 & observe2<=1;