Refining Perception Contracts: Case Studies in Vision-based Safe Auto-landing
Perception contracts provide a method for evaluating safety of control systems that use machine learning for perception. A perception contract is a specification for testing the ML components, and it gives a method for proving end-to-end system-level safety requirements. The feasibility of contract-based testing and assurance was established earlier in the context of straight lane keeping: a 3-dimensional system with relatively simple dynamics. This paper presents the analysis of two 6 and 12-dimensional flight control systems that use multi-stage, heterogeneous, ML-enabled perception. The paper advances methodology by introducing an algorithm for constructing data and requirement guided refinement of perception contracts (DaRePC). The resulting analysis provides testable contracts which establish the state and environment conditions under which an aircraft can safety touchdown on the runway and a drone can safely pass through a sequence of gates. It can also discover conditions (e.g., low-horizon sun) that can possibly violate the safety of the vision-based control system.
Code (0)
등록된 구현이 없습니다.
Similar Papers 제목 키워드 기반
LEDGAR: A Large-Scale Multi-label Corpus for Text Classification of Legal Provisions in Contracts
We present LEDGAR, a multilabel corpus of legal provisions in contracts. The corpus was crawled and scraped from the public domain (SEC filings) and is, to the best of our knowledge, the first freely available corpus of …
General Classificationtext-classificationText ClassificationRobust Regulation of Labour Contracts
We study the robust regulation of labour contracts in moral hazard problems. A firm offers a contract to incentivise a worker protected by limited liability. A regulator chooses the set of permissible contracts to (i) im…
Early Design Exploration of Aerospace Systems Using Assume-Guarantee Contracts
We present a compositional approach to early modeling and analysis of complex aerospace systems based on assume-guarantee contracts. Components in a system are abstracted into assume-guarantee specifications. Performing …
ManagementMoral Hazard, Dynamic Incentives, and Ambiguous Perceptions
This paper considers dynamic moral hazard settings, in which the consequences of the agent's actions are not precisely understood. In a new continuous-time moral hazard model with drift ambiguity, the agent's unobservabl…
Verifying Contracts for Perturbed Control Systems using Linear Programming
Verifying specifications for large-scale control systems is of utmost importance, but can be hard in practice as most formal verification methods can not handle high-dimensional dynamics. Contract theory has been propose…
Autonomous Driving