activeNSF FMitF2022–2025

FMitF: Formal Verification & Implementation Stack for PLCs

FMitF develops a provably correct stack that links formal hybrid-system models to PLC implementations, combining verified runtime monitoring with bidirectional model-code translation for industrial control systems.

FMitF: Formal Verification & Implementation Stack for PLCs

Project Overview

This project advances a full formal-methods workflow from high-level differential dynamic logic models to executable PLC controller logic, with explicit links that preserve safety guarantees across design and runtime.

The public materials center on modular verification, monitor synthesis, and translation methods that connect model-level proofs with implementation artifacts used in realistic ICS settings.

The work builds on and extends prior HyPLC efforts, and informs follow-on work such as HyTwin for digital-twin-based security interventions.

Key Capabilities

  • Bidirectional translation between verified hybrid-program models and PLC control-logic structure
  • Runtime monitor synthesis that checks model-to-runtime compliance
  • Modular verification workflows for scalable ICS controller development
  • Reproducible experiment and evaluation artifacts rooted in water-treatment-style ICS case studies

Example Use Cases

  • Design-time verification of PLC control logic against hybrid-system safety requirements
  • Runtime validation of assumptions to detect deviations that invalidate offline proofs
  • Evaluation of resilient control behavior under representative cyber-physical perturbations

Project Figures

FMitF proposal overview showing modular verification, monitoring, and translation goals.
FMitF proposal overview showing modular verification, monitoring, and translation goals.
HyPLC overview linking PLC control logic, physical plant behavior, and formally verified hybrid-program models.
HyPLC overview linking PLC control logic, physical plant behavior, and formally verified hybrid-program models.
HyTwin framework for attack-signature identification and verified mitigation planning over ICS digital twins.
HyTwin framework for attack-signature identification and verified mitigation planning over ICS digital twins.

Selected Publications

Research Themes

Project Details

Agency
NSF FMitF
Duration
2022–2025
Status
active
Team
L. Garcia
Public Status
Public proposal and publication artifacts are available. Additional implementation and expanded testbed integration work is active and will be released as those components are stabilized.