Symbolic Engine with LTL

Skip to first unread message

Andrew Wells

Sep 20, 2019, 5:30:14 PM9/20/19
to PRISM model checker developers
I'm curious how PRISM uses the symbolic engine to verify LTL properties of an MDP. As I understand it, the property is translated to a NBA then a DRA, which is represented explicitly. Is this correct? How does it take the product of a symbolic MDP with an explicitly represented Deterministic Rabin Automata?

Andrew Wells

Joachim Klein

Sep 23, 2019, 3:34:45 PM9/23/19
to Andrew Wells, PRISM model checker developers
Hi Andrew,
Yes, you are right, in the standard approach we translate the LTL
formula into an NBA and then an explicit DRA. If you are interested in
the code, have a look at the automata, jltl2ba and jltl2dstar packages
in the source code (e.g.

For the symbolic approach, we convert the DRA into its symbolic
representation and perform the product construction with the MDP.
Basically, we form the product state space of the MDP and the automaton
and then synchronize the transitions of the automaton (which are
labelled with the atomic propositions of the formula) with the
corresponding states in the MDP that satisfy/don't satisfy the atomic
propositions. For the general construction, you can have a look at the
slides here:

For the actual code that does the product, see

If you need more help, please feel free to ask.

Joachim Klein
Reply all
Reply to author
0 new messages