10266184
Full Abstraction and Expressive Completeness for FP
Abstract We consider issues related to the expressive power of the programming language FP. In particular, we consider whether a number of variants of FP are fully abstract and expressively complete. For example, we show that a version of FP with only one-sided sequences behave similarly to PCF in that the addition of parallel or is sufficient to make it fully abstract. However, the addition of parallel or to FP (with its two-sided infinite sequences) is not sufficient to achieve full abstraction. By considering these and other variants, we obtain a better understanding of what is required of a language and semantics in order to guarantee full abstraction and expressive completeness.
7772927
What can machines know?: On the properties of knowledge in distributed systems
It has been argued that knowledge is a useful tool for designing and analyzing complex systems. The notion of knowledge that seems most relevant in this context is an external, zrzforrnatzorr-based notion that can be shown to satisfy all the axioms of the modal logic S5. The properties of this notion of knowledge are examined, and it is shown that they depend crucially. and in subtle ways, on assumptions made about the system and about the language used for describing knowledge. A formal model is presented in which one can capture various assumptions frequently made about systems, such as whether they are deterministic or nondeterministic, whether knowledge is cumulative (which means that processes never "forget"), and whether or not the "environment" affects the state transitions of the processes. It 1s then shown that under some assumptions about the system and the language, certain states of knowledge are not attainable and the axioms of S5 do not completely characterize the properties of knowledge; extra axioms are needed. Complete axiomatlzations for knowledge in a number of cases of interest are provided.
14995360
A model-theoretic analysis of knowledge
A general semantic model of knowledge is introduced, to allow reasoning about statements such as «He knows that I know whether or not she knows whether or not it is raining». This approach more naturally models a state of knowledge than previous proposals (including Kripke structures). Using this notion of model, a model theory for knowledge is developed. This theory enables one to interpret the notion of a «finite amount of information»
152014
Causality, Responsibility, and Blame: A Structural-Model Approach
This talk provides an overview of work that I have done with Hana Chockler, Orna Kupferman, and Judea Pearl (H. Chockler and J. Y. Halpern, 2004), (H. Chockler, et al., 2003), (J. Y. Halpern and J. Pearl, 2005), on defining notions such as causality, explanation, responsibility, and blame. I first review the Halpern-Pearl definition of causality, what it means that A is a cause of B, and show how it handles well some standard problems of causality. This definition of causality (like most in the literature) views causality as an all-or-nothing concept. Either A is a cause of B or it is not. I show how it can be extended to take into account the degree of responsibility of A for B. For example, if someone wins an election 11-0, each person is less responsible for his victory than if he had won 6-5. Finally, I show how this notion of degree of responsibility can be used to provide insight into model checking notions such as coverage
15233558
A new look at fault tolerant network routing
Consider a communication network G in which a limited number of link and/or node faults F might occur. A routing &rgr; for the network (a fixed path between each pair of nodes) must be chosen without any knowledge of which components might become faulty. Choosing a good routing corresponds to bounding the diameter of the surviving route graph R(G,&rgr;)/F, where two nonfaulty nodes are joined by an edge if there are no faults on the route between them. We prove a number of results concerning the diameter of surviving route graphs. We show that if &rgr; is a minimal length routing, then the diameter of R(G,&rgr;)/F can be on the order of the number of nodes of G, even if F consists of only a single node. However, if G is the n-dimensional cube, the diameter of R(G,&rgr;)/F≤3 for any minimal length routing &rgr; and any set of faults F with |F|<n. We also show that if F consists only of edges and does not disconnect G, then the diameter of R(G,&rgr;)/F is ≤ 3|F|+1, while if F consists only of nodes and does not disconnect G, then the diameter of R(G,&rgr;)/F is ≤ the sum of the degrees of the nodes in F, where in both cases &rgr; is an arbitrary minimal length routing. We conclude with one of the most important contributions of this paper: a list of interesting and apparently difficult open problems.
215949262
Knowledge, probability, and adversaries
What should it mean for an agent to know or believe an assertion is true with probability 9.99? Different papers [2, 6, 15] give different answers, choosing to use quite different probability space...
8145017
Characterizing the Common Prior Assumption
Abstract Logical characterizations of the common prior assumption (CPA) are investigated. Two approaches are considered. The first is called frame distinguishability , and is similar in spirit to the approaches considered in the economics literature. Results similar to those obtained in the economics literature are proved here as well, namely, that we can distinguish finite spaces that satisfy the CPA from those that do not in terms of disagreements in expectation. However, it is shown that, for the language used here, no formulas can distinguish infinite spaces satisfying the CPA from those that do not. The second approach considered is that of finding a sound and complete axiomatization. Such an axiomatization is provided; again, the key axiom involves disagreements in expectation. The same axiom system is shown to be sound and complete both in the finite and the infinite case. Thus, the two approaches to characterizing the CPA behave quite differently in the case of infinite spaces. Journal of Economic Literature Classification Numbers: C70, D80.
2990183
Performing work efficiently in the presence of faults
We consider a system of t synchronous processes that communicate only by sending messages to one another, and together the processes must perform n independent units of work. Processes may fail by crashing; we want to guarantee that in every execution of the protocol in which at least one process survives, all n units of work will be performed. We consider three parameters: the number of messages sent, the total number of units of work performed (including multiplicities), and time. We present three protocols for solving the problem. All three are work optimal, doing O(n+t) work. The rst has moderate costs in the remaining two parameters, sends O(t p t) messages, and takes O(n+t) time. This protocol can be easily modied to run in any completely asynchronous system equipped with a failure detection mechanism. The second sends only O(tlogt) messages, but its running time is large (O(t 2 (n+t)2 n+t )). The third is essentially time optimal in the (usual) case in which there are no failures, and its time complexity degrades gracefully as the number of failures increases.
3055934
A knowledge-theoretic analysis of uniform distributed coordination and failure detectors
Abstract.It is shown that, in a precise sense, if there is no bound on the number of faulty processes in a system with unreliable but fair communication, Uniform Distributed Coordination (UDC) can be attained if and only if a system has perfect failure detectors. This result is generalized to the case where there is a bound t on the number of faulty processes. It is shown that a certain type of generalized failure detector is necessary and sufficient for achieving UDC in a context with at most t faulty processes. Reasoning about processes’ knowledge as to which other processes are faulty plays a key role in the analysis.
35307334
Performing Work Efficiently in the Presence of Faults
We consider a system of t synchronous processes that communicate only by sending messages to one another, and together the processes must perform n independent units of work. Processes may fail by crashing; we want to guarantee that in every execution of the protocol in which at least one process survives, all n units of work will be performed. We consider three parameters: the number of messages sent, the total number of units of work performed (including multiplicities), and time. We present three protocols for solving the problem. All three are work optimal, doing O(n+t) work. The first has moderate costs in the remaining two parameters, sends $O(t\sqrt{t})$ messages, and takes O(n+t) time. This protocol can be easily modified to run in any completely asynchronous system equipped with a failure detection mechanism. The second sends only O(t log t) messages, but its running time is large (O(t2(n+t) 2n+t)). The third is essentially time optimal in the (usual) case in which there are no failures, and its time complexity degrades gracefully as the number of failures increases.
14707750
Probability Update: Conditioning vs. Cross-Entropy
Conditioning is the generally agreed-upon method for updating probability distributions when one learns that an event is certainly true. But it has been argued that we need other rules, in particular the rule of cross-entropy minimization, to handle updates that involve uncertain information. In this paper we re-examine such a case: van Fraassen's Judy Benjamin problem [1987], which in essence asks how one might update given the value of a conditional probability. We argue that--contrary to the suggestions in the literature--it is possible to use simple conditionalization in this case, and thereby obtain answers that agree fully with intuition. This contrasts with proposals such as cross-entropy, which are easier to apply but can give unsatisfactory answers. Based on the lessons from this example, we speculate on some general philosophical issues concerning probability update.