# source:Deliverables/D6.4-6.5/workshops.ltx@3341

Last change on this file since 3341 was 3229, checked in by mckinna, 7 years ago

numbers adjusted; only mentioned in running text under "Attendance"

File size: 11.4 KB
Line
1\section{Report}
2\label{sect.rep}
3
4The Consortium identified two potentially fruitful destinations at which to hold such events, taking into account suitable candidates, and the opportunity to hold workshops during, or shortly after the end of the Project lifetime, given our requested extension to end month 39, Mar. 2013.
5
6Beyond each Conference call for participation, invitations to the two meetings were sent out to the following researchers and research groups, all world leaders in cost/timing analysis for programming languages, compilers and embedded systems:
7prof. Kevin Hammond (St Andrew's University, UK),
8dr. Björn Franke (Edinburgh University, UK),
9prof. Peter Sewell (Cambridge  University, UK),
10prof. dr. Heiko Falk (Ulm University, DE),
11prof. dr. Martin Hofmann, dr. Steffen Jost (LMU Munich, DE),
12dr. Christian Ferdinand (CEO, AbsInt GmbH, DE),
13prof. Germ{\'a}n Puebla, COSTA team (TU Madrid, E),
14prof. Bj\"orn Lisper (Mälardalen University, SE).
15
16
17\paragraph{D6.4} Before receiving the Project extension, we had identified for month 37 (Jan. 2013) the workshop track of the HiPEAC Conference series on High Performance and Embedded Architectures and Compilers as a suitable destination, comprising as it does a wide range of sessions bringing together industrial and academic research.
18
19HiPEAC 2013 was held in Berlin, with the \cerco{} event a half-day workshop (see Table~\ref{hipeac:timetable}): \\
20  \texttt{http://www.hipeac.net/conference/berlin/workshop/CerCo}
21%%%\input{hipeac.ltx}
22
23Prof. Kevin Hammond (St. Andrews University, UK) gave an invited talk on his work on methods for WCET analysis developed in the EmBounded project (EU FP6 IST-510255), in particular for Hume programs at the source-level, and their application in the autonomous vehicle guidance and aerospace domains.
24
25\input{hipeac.ltx}
26
27\paragraph{D6.5} We identified for month 39 (Mar. 2013) a workshop at ETAPS, the pre-eminent European federated conference on programming languages, systems and tools.
28
29ETAPS 2013 was held in Rome, with the full-day \cerco{} event a Technical Day on Innovative Techniques on Timing Analysis'' (see Table~\ref{etaps:timetable}): \\
30  \texttt{http://cerco.cs.unibo.it/innovative\_techniques\_on\_timing\_analysis\_technical\_day}\\
31%%%\input{etaps.ltx}
32
33It ran in parallel with a two-day workshop on Quantitative Aspects of Programming Languages (QAPL'11), sharing three sessions with that meeting. The \cerco{} workshop also included presentations from Tullio Vardanega, representing the PROARTIS Consortium (FP7-ICT-2009.3.4), and an invited talk from Prof. Bj{\"o}rn Lisper (M{\"a}lardalen University, SE) on Parametric WCET analysis.
34
35\input{etaps.ltx}
36
37\paragraph{Organization details and attendance}
38
39The ETAPS event was one of 20 workshops organised over the 4 days either side of the main conference. The event also had three sessions shared with the QAPL workshop (Quantitative Aspects of Programming Languages and Systems), and was the better attended, and scientifically more successful, meeting. The main introduction to the project had an audience of around 35 people, and some QAPL participants have expressed interest in future collaborations.
40
41The HiPEAC workshop was one of 24 such meetings in a programme organised in parallel with the 3 days of the main conference. Attendance was limited (at most 10), which can partially be explained by the workshop being held in parallel with the main conference. There have been practically no industrial attendance to any of the workshops talks. Nevertheless, the main conference also hosted an Industry Session and an Industrial Showcase and the days that preceded our workshop posed several good occasions to get in touch with representatives of the high performance hardware industry and of European projects involved in advanced real time architectures (projects parMERASA, T-CREST and PROARTIS).
42
43\paragraph{Scientific Outcomes}
44
45Several fruitful discussions and suggestions emerged at both meetings.
46We try here a brief overview of the most interesting ones.
47
48The existence of two different approaches to source-level cost reasoning emerged at the HiPEAC event. The first one, embraced by the EmBounded project, does not try to maximize performance of the code, but is interested only in full predictability and simplicity of the analysis. The second approach, embraced by \cerco{}, tries to avoid any performance reduction, at the price of complicating the analysis. It is therefore closer to traditional WCET. Technology transfer between the two approaches seem possible. Kevin Hammond's group use amortized analysis techniques to connect local costs about embedded programs in the Hume language to global costs, technology which it may be possible to transfer to the \cerco{} setting.  A key difference in our approaches is that their Hume implementation uses the high predictability of their virtual machine implementation to obtain local cost information, whereas \cerco{} produces such information for a complex native-code compiler. Replacing their virtual machine with out compiler seems also possible.
49
50At the ETAPS workshop Bj{\"o}rn Lisper drew attention to the many points of common interest and related techniques between the work on \cerco{} and his own on Parametric WCET analysis. The most interesting difference between what we do and what is done in the WCET community is that we use (automated) theorem proving to deal with the control-flow (i.e. to put an upper bound to the executions). The standard technique in parametric WCET consists in using polyhedral analysis to bound the number of loop iterations.  That analysis produces constraints which are solved with the aid of off-the-shelf linear programming tools. Comparing the effectiveness of theorem proving with the effectiveness of polyhedral analysis in computing precise costs interested him.
51
52In addition to his own technical talk, he took the opportunity to advertise, and solicit interest in, the recently formed COST Action IC1202 Timing Analysis and Cost-Level Estimation (TACLe), of which he is Chair. Members of \cerco{} are going to join the COST Action. This offers very promising potential for future collaborations and the wider communication of results from \cerco{}.
53
54In particular, during the round-table there clearly emerged an immediate and significant application of the \cerco{} technology that we missed during the project. WCET analysis has traditionally been used in the verification phase of a system, after all components have been built. Indeed, state-of-the-art WCET techniques all work on the \emph{object} code, which is available only after compilation and linking. Since redesigning a software system is very costly, designers usually choose to over-specify the hardware initially and then just verify that it is indeed sufficiently powerful. However, as systems' complexity rises, these initial safety margins can prove to be very expensive. Undertaking lightweight (but less precise) analysis in the early stages of the design process has the potential to drastically reduce total hardware costs. To perform this analysis, a new generation of early-stage timing analysis tools that do not need the object code are required. The \cerco{} Trusted and Untrusted Prototypes already fill this niche by working on the \emph{source} code and giving the user the possibility to axiomatize the cost of external calls or that of computing a WCET that is parametric in the cost of unimplemented modules. Before industrial exploitation becomes possible, however, we would need to establish greater levels of predictability, robustness and automation of the analysis.
55
56A common theme emerged from the shared sessions with QAPL, and in particular the invited talk there from prof. Alessandra di Pierro on \emph{probabilistic} timing analysis: the parameterisation of a given timing analysis with respect to different cost \emph{algebras}. In the case of probabilistic analyses, costs are taken with respect to given probability distributions, with \emph{expected} costs being computed. A quick analysis of the labelling approach of \cerco{} reveals that the method assumes very weak conditions on the cost model that it is able to transfer from the object code to the source code. In particular, probabilistic cost models like the one used by di Pierro satisfy the invariants. Prof. Vardanega's talk emphasised a radical approach to probabilistic analyses, by turning the processor/cache architecture into a probabilistic one to yield an essentially predictable analysis. To exploit the \cerco{} methodology in case of caches, embracing probabilistic analysis may be the key ingredient. This idea already emerged in the discussions at ETAPS and was investigated during the last period of \cerco{}.
57
58In the deterministic case studied in \cerco{}, we have taken a given, fixed, cost algebra of natural numbers (obtained from Siemens data-sheet clock timings) under addition, but already Tranquili's work on \emph{dependent labelling} suggests a move to computing costs in algebras of \emph{functions} (in the case of his analysis of loop unrolling, of cost expressions parameterised with respect to valuations of the loop index variables). The wider implications of such a move are yet to be explored, but probabilistic analysis fits in the model, as well as the computations of costs that are parametric on the hardware state. At both events we presented preliminary results on the time analysis of systems with pipelines obtained by exposing the hardware state in the source code. Some members of the audience were skeptical because of fear of exposing a level of complexity difficult to tame. However, before we get a working implementation and we test the behaviour of invariant generators on the obtained source code, we honestly believe that it is difficult to come to conclusions.
59
60The feedback obtained from discussions with industrial representatives and with representatives from the parMERASA and T-CREST projects was less significant and describes a bleak future for static time analysis. Microprocessor and embedded systems developers are in a race to provide the largest amount of computing power on a single chip, with systems-on-chip at the centre of the scene during the industrial showcase. The major issue in the design of safety-critical and non-safety-critical systems is now on how to exploit this additional power to optimize the average case or, simply, because the additional power is present anyway and it is a pity to waste it. The timing behaviour of programs running on a computing unit of such multi-core processors or systems-on-chip is potentially greatly affected by the other units. Buses and caches are also shared, often in non uniform ways, and different computations also interfere through the states of these shared components.
61
62Statically analysing a program for WCET in isolation yields totally useless bounds, because ignorance about the behaviour of the other computing nodes forces to always assume the worst possible behaviour, hence hopelessly imprecise bounds. The mentioned EU projects, among others, and a large part of the scientific community is working on the design of alternative hardware that could make the worst case statically predictable again, but at the moment attempts to influence microprocessor manufacturers have been totally unsuccessful. The \cerco{} technology, which implements a form of static analysis, suffers from the same such problems and does not contribute to its solution. On the other hand, it is likely that, if a solution to the problem emerges, it could be exploited in \cerco{} too.
Note: See TracBrowser for help on using the repository browser.