<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta>
      <journal-title-group>
        <journal-title>Workshop on Artificial Intelligence and Formal Verification, Logics, Automata and Synthesis (OVERLAY),
Rende, Italy, November</journal-title>
      </journal-title-group>
    </journal-meta>
    <article-meta>
      <title-group>
        <article-title>Complexity of Weak, Strong and Dynamic Controllability of CNCUs</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>Matteo Zavatteri</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Romeo Rizzi</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Tiziano Villa</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>University of Verona</institution>
          ,
          <country country="IT">Italy</country>
        </aff>
      </contrib-group>
      <pub-date>
        <year>2019</year>
      </pub-date>
      <volume>1</volume>
      <fpage>9</fpage>
      <lpage>20</lpage>
      <abstract>
        <p>A Constraint Network Under Conditional Uncertainty (CNCU) is a formalism able to model a constraint satisfaction problem (CSP) where variables and constraints are labeled by a conjunction of Boolean variables, or booleans, whose truth value assignments are out of control and only discovered upon the execution of their related observation points (special kind of variables). At the start of the execution of the CNCU (i.e., the online assignment of values to variables), we do not know yet which constraints and variables will be taken into consideration nor in which order. Weak controllability implies the existence of a strategy to execute a CNCU whenever the whole uncontrollable part is known before executing. Strong controllability is the opposite case and implies the existence of a strategy to execute a CNCU always the same way no matter how the uncontrollable part will behave. Dynamic controllability implies the existence of an adaptive strategy to execute the CNCU taking into account how the uncontrollable part is behaving. In this paper we classify the computational complexity of weak, strong and dynamic controllability of CNCUs. We prove that weak controllability is Π2p-complete, strong controllability is NP-complete and dynamic controllability is PSPACE-complete.</p>
      </abstract>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>-</title>
      <p>{v1, v2, v3}</p>
      <p>X1
{v1, v2, v3}</p>
      <p>X2
• X , V, D are the same as those given for CNs in Definition 1.
• O ⊆ X = {A?, B?, . . . } is a set of observation points.
• B = {a, b, . . . , z} is a finite set of booleans. O : B → O is a bijection assigning a unique observation
point A? to each boolean a. When A? is assigned a value v ∈ D(A?), the truth value of a is set by
Nature and no longer changes.
• L : X → B∗ is a mapping assigning a label ` to each variable X.
• ≺ is a partial order on X . We write X1 ≺ X2 to express that X1 must be executed before X2.
• C is a finite set of conditional constraints of the form ` ⇒ RS , where ` ∈ B∗ and RS is a classic
relational constraint.</p>
      <p>Definition 3. A CNCU is well defined iff all labels are consistent and:
1. For each X ∈ X , if a literal a (or ¬a) ∈ L(X), then L(O(a)) ⊆ L(X) and O(a) ≺ X.
2. For each constraint (RS , `) ∈ C, VX∈S L(X) ⊆ ` and if a literal a (or ¬a) ∈ L(X), then L(O(a)) ⊆ `.
3. L(X1) ∧ L(X2) is consistent whenever X1 ≺ X2.</p>
      <p>
        Regarding the notions of well-definedness (initially proposed for conditional temporal networks in [
        <xref ref-type="bibr" rid="ref5">6</xref>
        ]
and then adapted to CNCUs in [
        <xref ref-type="bibr" rid="ref13 ref15">14, 16</xref>
        ]), (1) and the second part of (2) say that any label must contain
the labels of the observation points associated to each proposition embedded in each contained literal
(label honesty). The first part of (2) says that a label on a constraint must be at least as expressive as
any label in the scope of the relation (label coherence). Condition (3) says that we cannot impose an
order between two variables not taking part together in any execution.
      </p>
      <p>Definition 4. A CNCU N is weakly controllable if every projection P of N satisfies two properties: (1)
there exists a total extension ≺T of ≺, and (2) P is a consistent CN.</p>
      <p>Fig. 1b is weakly controllable. If s(e) = &gt; (Fig. 1c), then E? = v1, X1 = v1, X2 = v2 and X3 = v2 (in
this order). If s(e) = ⊥ (Fig. 1d), then E? = v1, X1 = v2 and X2 = v2 (again, in this order).
Definition 5. A CNCU N is strongly controllable if there exists a total extension ≺T of ≺ and an
assignment α of values to the variables such that α satisfies all constraints in each scenario.</p>
      <p>
        An initial approach to strong controllability is that of computing a super-projection obtained by wiping
out labels on variables and constraints [
        <xref ref-type="bibr" rid="ref13 ref15">14, 16</xref>
        ]. Fig. 1b is not strongly controllable. The super projection
(Fig. 1e) contains (6=, e) and (=, ¬e) between X1 and X2 (of the original CNCU) whose intersection yields
an empty relation.
      </p>
      <p>For weak and strong controllability we just make sure that a total order for X exists (that’s why we
grayed it in Fig. 1c, Fig. 1d and Fig. 1e). Instead, dynamic controllability of CNCUs is a matter of order.
Definition 6. A CNCU is dynamically controllable if there exists a dynamic strategy operating in real
time that guarantees that we end up with all constraints in C evaluating to true. A strategy is called
dynamic if the variable executed next and the value assigned to it only depend on the partial scenario
revealed up to that point.</p>
      <p>Note that despite variables specify labels, assigning values to those that have become irrelevant is
superfluous but not wrong (we can always ignore those assignments at the end of the execution). Fig. 1b
is uncontrollable if X1 is executed before E?. Indeed, if X1 = v1 and E? = v1 and then s(e) = ⊥ (or
X1 = v2 and E? = v2 and then s(e) = &gt;), there is not valid value for X2 satisfying (=, ¬e) or (6=, e),
respectively. Instead, the CNCU is dynamically controllable if E? is executed first. A possible execution
strategy is: E? = v1 (always). If s(e) = &gt;, then X1 = v1, X2 = v2 and X3 = v2, whereas if s(e) = ⊥ then
X1 = v2 and X2 = v2 (we omit irrelevant variables).
2</p>
      <p>Complexity of Weak, Strong and Dynamic Controllability
Let α : X → V be an assignment of values to the variables. Given a CNCU N = hX , V, D, O, B, O, L, ≺, Ci
and a pair (s, α), where s is a scenario and α an assignment, we say that (s, α) |= N iff (1) for each X ∈ X ,
α(X) ∈ D(X) and (2) for each ` ⇒ R{Xi1 ,...,Xin } ∈ C, if s |= `, then (α(Xi1 ), . . . , α(Xin )) ∈ R{Xi1 ,...,Xin }.
Theorem 1. Strong controllability of CNCUs is NP-complete.</p>
      <p>Proof. Hardness: Consequence of the fact that deciding consistency of CNs is NP-hard and it is a special
case of deciding strong controllability of CNCUs (when the set of observations is empty). Membership:
({(1)}, y1) ({(0)}, ¬y1)</p>
      <p>({(1)}, y2) ({(0)}, ¬y2)
as a certificate of YES consider a pair comprising a total extension ≺T of ≺ and a total assignment α to
the variables that obeys all constraints regardless of the truth assignment s to the booleans. Notice that
any single constraint ` ⇒ R is satisfied by α for each possible s if and only if α satisfies R, and since we
have a finite number of constraints to check, the overall check is polynomial.</p>
      <p>To prove that deciding weak controllability of CNCUs is Π2p-hard and deciding dynamic controllability
of CNCUs is PSPACE-hard, we first describe a polynomial time algorithm that, given in input any
quantified boolean formula (QBF) Φ with n variables and m clauses, and at most 3 literals in each clause
constructs a CNCU NΦ with at most 2 × n variables with binary domain, exactly n booleans, and at most
(2 × n) + m constraints each one of arity of at most 3. With this, the description length of NΦ is at most
polynomial in m and n. The Π2p-hardness and PSPACE-hardness results are then obtained in Lemma 1
and Lemma 2 where it is shown that particular instances of Φ are satisfiable iff NΦ is weakly controllable
and dynamically controllable, respectively. Fig. 2 provides an example of use of QBF2CNCU (Algorithm 1).</p>
      <p>Algorithm 1: QBF2CNCU(Φ)</p>
      <p>Input: A a quantified boolean formula Φ ≡ Q1x1, . . . , Qnxnϕ where Qi ∈ {∃, ∀} (1 ≤ i ≤ n) and
ϕ ≡ C1 ∧ · · · ∧ Cm is a 3-CNF specifying m clauses over the variables x1, . . . , xn</p>
      <p>Output: A CNCU NΦ = hX , V, D, O, B, O, L, ≺, Ci.
1 For each “∃x” in Φ, we add a variable X to X such that D(X) = {0, 1} and L(X) = .
2 For each “∀y” in Φ we add a boolean y to B, an observation point By? to X and to O and a
variable Y to X such that O(y) = By?, D(By?) = D(Y ) = {0, 1} and L(By?) = L(Y ) = . We
impose that By? executes before Y (i.e., By ≺ Y ). We add two conditional relational constraints
y ⇒ RY&gt; and ¬y ⇒ RY⊥ to C, where RY&gt; = {(1)} and RY⊥ = {(0)}.
3 We add n − 1 precedence constraints to connect each previous discussed “gadget” encoding a
quantified variable of Φ to the next one according to the order in which these variables appear in
the quantified part of Φ.
4 For each clause Ci we add a relational constraint ⇒ RSi such that the scope Si contains the
three variables embedded in the literals appearing in Ci, whereas the set of tuples is the cross
product of the domains of such variables minus the unique tuple falsifying the clause (each of
these relations has exactly 23 − 1 tuples).</p>
      <p>Lemma 1. Weak controllability of CNCUs is Π2p-complete.</p>
      <p>Proof. Hardness: Let Φ ≡ ∀y1, . . . ∀yn, ∃x1, . . . ∃xmϕ a QBF. Solving such an instance of QBF is known
to be Π2p-complete. We claim that Φ is satisfiable if and only if QBF2CNCU(Φ) is weakly controllable. Let t
a truth value assignment for Φ. Let s(yi) = t(yi) for each yi in Φ. Let α(Xi) = t(xi) for each xi in Φ,
α(Yi) = s(yi) for each yi in Φ and α(BYi ) = {0} for each yi in Φ. Let ≺T = Y1 ≺ · · · ≺ Yn ≺ X1 ≺ · · · ≺ Xm.
If t |= Φ, then (s, α) |= NΦ. We know that is is true because the constraints of NΦ translate the clauses
of Φ. Let now consider the opposite direction. Consider any scenario s and any assignment α. Let ≺T
as before. Let t(yi) = s(yi) = α(Yi) for each Yi in NΦ and let t(xi) = α(Xi) for each Xi in NΦ. If
(s, α) |= NΦ, then t |= Φ. Again, this is true as the clauses of Φ resemble the relational constraints of N .
Membership: A CNCU is weekly controllable iff: for each scenario s there exists a total extension ≺s of
≺ and an assignment αs to the variables satisfying all pertinent constrains. Since the assignment s to the
booleans can be seen as a binary string of length |B|, and the total extension ≺s and the assignment αs
have a compact encoding, then week controllability of CNCUs is in Π2p by its very definition.
Lemma 2. Dynamic controllability of CNCUs is PSPACE-hard.</p>
      <p>Proof. Let Φ ≡ ∃x1, . . . ∀y1, ∃x2, ∀y2 . . . ∃xn∀ynϕ a QBF. Solving such an instance of QBF is known to
be PSPACE-complete. We claim that Φ is satisfiable iff QBF2CNCU(Φ) is dynamically controllable. The
construction t, α, s and ≺T are similar to that discussed in Lemma 1.</p>
      <p>Theorem 2. Dynamic controllability of CNCUs is PSPACE-complete.</p>
      <p>Proof. Hardness: Proved in Lemma 2. Membership: Algorithm 2 is a polynomial space algorithm to
decide dynamic controllability of any CNCU. An AND/OR search tree whose depth size is bounded by a
polynomial in the number of variables.</p>
      <p>Algorithm 2: CncuDC(N )</p>
      <p>Input: A CNCU N = hX , V, D, O, B, O, L, ≺, Ci</p>
      <p>Output: Yes, if N is dynamically controllable. No otherwise.
1 CncuDC (N )
2 Let s, α be an empty scenario and assignment.
3 return Explore(N , X , s, α)</p>
      <p>Conclusions and Future Work
We classified the computational complexity of weak, strong and dynamic controllability of CNCUs. Weak
controllability is Π2p-complete, strong controllability is NP-complete, whereas dynamic controllability is
PSPACE-complete.</p>
      <p>
        As future work, we plan to compare with complexity results for other classes of (temporal)-constraint
networks such as those discussed (or employed) in [
        <xref ref-type="bibr" rid="ref1 ref10 ref11 ref12 ref13 ref14 ref15 ref16 ref2 ref3 ref6 ref7 ref8 ref9">1, 2, 3, 4, 7, 8, 9, 10, 11, 12, 13, 15, 14, 16, 17</xref>
        ].
[1] M. Cairo, C. Combi, C. Comin, L. Hunsberger, R. Posenato, R. Rizzi, and M. Zavatteri. Incorporating
decision nodes into conditional simple temporal networks. In 24th International Symposium on
Temporal Representation and Reasoning, TIME 2017, volume 90 of LIPIcs, pages 9:1–9:17. Schloss
Dagstuhl-Leibniz-Zentrum fuer Informatik, 2017.
      </p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          [2]
          <string-name>
            <given-names>C.</given-names>
            <surname>Combi</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Posenato</surname>
          </string-name>
          ,
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          .
          <article-title>Access controlled temporal networks</article-title>
          .
          <source>In 9th International Conference on Agents and Artificial Intelligence</source>
          ,
          <source>ICAART</source>
          <year>2017</year>
          , pages
          <fpage>118</fpage>
          -
          <lpage>131</lpage>
          . INSTICC, ScitePress,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          [3]
          <string-name>
            <given-names>C.</given-names>
            <surname>Combi</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Posenato</surname>
          </string-name>
          ,
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          .
          <article-title>Conditional simple temporal networks with uncertainty and resources</article-title>
          .
          <source>Journal of Artificial Intelligence Research</source>
          ,
          <volume>64</volume>
          :
          <fpage>931</fpage>
          -
          <lpage>985</lpage>
          ,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          [4]
          <string-name>
            <given-names>C.</given-names>
            <surname>Combi</surname>
          </string-name>
          ,
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          .
          <article-title>Security constraints in temporal role-based access-controlled workflows</article-title>
          .
          <source>In 6th ACM Conference on Data and Application Security and Privacy</source>
          ,
          <source>CODASPY '16</source>
          , pages
          <fpage>207</fpage>
          -
          <lpage>218</lpage>
          . ACM,
          <year>2016</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          [5]
          <string-name>
            <given-names>R.</given-names>
            <surname>Dechter</surname>
          </string-name>
          .
          <article-title>Constraint processing</article-title>
          . Elsevier,
          <year>2003</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          [6]
          <string-name>
            <given-names>L.</given-names>
            <surname>Hunsberger</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Posenato</surname>
          </string-name>
          , and
          <string-name>
            <given-names>C.</given-names>
            <surname>Combi</surname>
          </string-name>
          .
          <article-title>A sound-and-complete propagation-based algorithm for checking the dynamic consistency of conditional simple temporal networks</article-title>
          .
          <source>In 22nd International Symposium on Temporal Representation and Reasoning</source>
          ,
          <source>TIME 2015</source>
          , pages
          <fpage>4</fpage>
          -
          <lpage>18</lpage>
          . IEEE CPS,
          <year>2015</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          [7]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          .
          <article-title>Conditional simple temporal networks with uncertainty and decisions</article-title>
          .
          <source>In 24th International Symposium on Temporal Representation and Reasoning</source>
          ,
          <source>TIME</source>
          <year>2017</year>
          , volume
          <volume>90</volume>
          <source>of LIPIcs</source>
          , pages
          <volume>23</volume>
          :
          <fpage>1</fpage>
          -
          <lpage>23</lpage>
          :
          <fpage>17</fpage>
          .
          <string-name>
            <surname>Schloss</surname>
          </string-name>
          Dagstuhl-Leibniz-Zentrum fuer Informatik,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          [8]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          .
          <article-title>Temporal and Resource Controllability of Workflows Under Uncertainty</article-title>
          .
          <source>PhD thesis</source>
          , University of Verona, Italy,
          <year>2018</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          [9]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          .
          <article-title>Temporal and resource controllability of workflows under uncertainty</article-title>
          .
          <source>In Proceedings of the Dissertation Award, Doctoral Consortium, and Demonstration Track at BPM</source>
          <year>2019</year>
          , volume
          <volume>2420</volume>
          <source>of CEUR Workshop Proceedings</source>
          , pages
          <fpage>9</fpage>
          -
          <lpage>14</lpage>
          . CEUR-WS.org,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref9">
        <mixed-citation>
          [10]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          ,
          <string-name>
            <given-names>C.</given-names>
            <surname>Combi</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Posenato</surname>
          </string-name>
          , and
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          .
          <article-title>Weak, strong and dynamic controllability of access-controlled workflows under conditional uncertainty</article-title>
          .
          <source>In Business Process Management - 15th International Conference, BPM 2017</source>
          , pages
          <fpage>235</fpage>
          -
          <lpage>251</lpage>
          . Springer,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref10">
        <mixed-citation>
          [11]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          ,
          <string-name>
            <given-names>C.</given-names>
            <surname>Combi</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Rizzi</surname>
          </string-name>
          , and
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          .
          <article-title>Hybrid sat-based consistency checking algorithms for simple temporal networks with decisions</article-title>
          .
          <source>In 26th International Symposium on Temporal Representation and Reasoning</source>
          ,
          <source>TIME</source>
          <year>2019</year>
          , volume
          <volume>147</volume>
          , page 2:
          <fpage>1</fpage>
          -
          <lpage>2</lpage>
          :
          <fpage>17</fpage>
          .
          <string-name>
            <surname>Schloss</surname>
          </string-name>
          Dagstuhl-Leibniz-Zentrum fuer Informatik,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref11">
        <mixed-citation>
          [12]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          ,
          <string-name>
            <given-names>C.</given-names>
            <surname>Combi</surname>
          </string-name>
          , and
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          .
          <article-title>Resource controllability of workflows under conditional uncertainty</article-title>
          .
          <source>In Business Process Management Workshops</source>
          , pages
          <fpage>68</fpage>
          -
          <lpage>80</lpage>
          . Springer,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref12">
        <mixed-citation>
          [13]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Rizzi</surname>
          </string-name>
          , and
          <string-name>
            <given-names>T.</given-names>
            <surname>Villa</surname>
          </string-name>
          .
          <article-title>Strong controllability of temporal networks with decisions</article-title>
          .
          <source>In OVERLAY</source>
          <year>2019</year>
          (to appear).
          <source>CEUR-WS.org</source>
          ,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref13">
        <mixed-citation>
          [14]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          and
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          .
          <article-title>Constraint networks under conditional uncertainty</article-title>
          .
          <source>In 10th International Conference on Agents and Artificial Intelligence -</source>
          Volume
          <volume>2</volume>
          ,
          <string-name>
            <surname>ICAART</surname>
          </string-name>
          <year>2018</year>
          , pages
          <fpage>41</fpage>
          -
          <lpage>52</lpage>
          . SciTePress,
          <year>2018</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref14">
        <mixed-citation>
          [15]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          and
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          .
          <article-title>Conditional simple temporal networks with uncertainty and decisions</article-title>
          .
          <source>Theoretical Computer Science</source>
          ,
          <volume>797</volume>
          :
          <fpage>77</fpage>
          -
          <lpage>101</lpage>
          ,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref15">
        <mixed-citation>
          [16]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          and
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          .
          <article-title>Conditional uncertainty in constraint networks</article-title>
          .
          <source>In Agents and Artificial Intelligence</source>
          , pages
          <fpage>130</fpage>
          -
          <lpage>160</lpage>
          . Springer,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref16">
        <mixed-citation>
          [17]
          <string-name>
            <given-names>M.</given-names>
            <surname>Zavatteri</surname>
          </string-name>
          and
          <string-name>
            <given-names>L.</given-names>
            <surname>Viganò</surname>
          </string-name>
          .
          <article-title>Last man standing: Static, decremental and dynamic resiliency via controller synthesis</article-title>
          .
          <source>Journal of Computer Security</source>
          ,
          <volume>27</volume>
          (
          <issue>3</issue>
          ):
          <fpage>343</fpage>
          -
          <lpage>373</lpage>
          ,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>