Manuel Abreu, LuΓs Garrote, LuΓs Conde Bento,
Bradley Schmerl, Urbano J Nunes and
David Garlan. Formal Verification of Deep Neural Networks for Classification in Industrial Environments. In Proc. the 16th International Conference on Information Science and Technology, Coimbra, Portugal. October 1-6, 2026.
Abstract: Deep Learning methods, particularly Convolutional Neural Networks (CNN), have become widely adopted in indus- trial computer vision applications due to their strong image classification capabilities. In industrial environments, reliable object recognition is essential for automated systems such as warehouse automation and sorting processes, where incorrect classifications may lead to operational failures and reduced system reliability. Despite their performance, CNN-based models remain vulnerable to adversarial perturbations, raising concerns regarding their deployment in safety-critical applications. Industrial vision systems deployed in safety-critical environ- ments must operate reliably under adversarial perturbations and common perception degradations. This work presents a robustness analysis of image classification models for industrial environments using RGB and RGB-D data. An industrial object dataset containing seven classes was constructed through an ob- ject detection and extraction pipeline, resulting in object-centered image samples. Two CNN-based architectures were developed and evaluated: a baseline RGB model and a multimodal RGB-D model. Model robustness was analyzed through both formal verifica- tion and corruption-based robustness evaluation. Formal verifi- cation was performed using the alpha-beta-CROWN framework under different perturbation magnitudes, assessing whether the CNNs preserve their predictions under bounded perturbations. In addition, corruption-based experiments following the ImageNet- C protocol were conducted to evaluate model behavior under common image degradations.
Paulo Canelas,
Bradley Schmerl, Alcides Fonesca and Christopher Steven Timperley. How does ROS-based Robot Software Evolve? An Empirical Study on Architectural Evolution. In Proc. the 20th European Conference on Software Architecture (ECSA 2026), Bolzano, Italy. September 7-11, 2026.
https://doi.org/10.7551/mitpress/2705.003.0004.
To Appear.
Abstract: The Robot Operating System (ROS) is the de facto framework for building open-source robotic software systems. Developers architect their system by using reusable components, connecting them via config- uration files and source code. These architectures evolve as developers add, remove, and modify components, connections, and configurations. These changes can lead to architectural misconfigurations detectable by specification languages and analysis tools. However, these focus on snapshots in time without considering how architectures evolve. By un- derstanding this evolution, we can help specification writers estimate the maintenance burden of their descriptions and promote tools toward the most change-prone elements. To that end, we conduct an empirical study of architectural evolution in open-source ROS systems. We develop a differential, cross-language architectural recovery tool that extracts components, connections, and configurations from source code and apply it to 294 repositories, with 1728 packages across 9914 releases, spanning ROS 1 and ROS 2 in C/C++, Python, and XML. As ROS repositories aggregate multiple packages at different maturity stages, we analyze evolution at the repository and package levels. We find that evolution di- verges across levels, with repositories remaining addition-dominant while mature packages consolidate by removing connections and configurations. Furthermore, changes co-occur across elements: component removals are associated with the removal of their connections and configurations.
π
Maria Casimiro,
Valentim RomΓ£o, Paolo Romano, Luis Rodrigues and
David Garlan. Ripple: A Long-Sighted Self-Adaptation Approach to Retrain Machine Learning-Enabled Systems. In Proc. 21st International Conference on Software Engineering for Adaptive and Self-Managing Systems (SEAMS), Rio de Janiero, Brazil. April 13-14, 2026.
https://doi.org/3788550.3794867.
Awarded Best Student Paper.
Abstract: Machine Learning (ML)-enabled systems are now ubiquitous. These systems leverage ML models that require frequent re-trainings, which can lead to unsustainable costs. To prevent superfluous retrains and optimize system performance in the long run, we introduce Ripple, a system that leverages probabilistic model checking techniques to automate the decision of when to retrain the ML models employed by an ML-enabled system. The main challenge tackled by Ripple is estimating how the predictive quality of an ML model varies over long-term horizons, both when it is and when it is not retrained. Ripple introduces Look-Ahead Adaptation Impact Predictors (LA-AIPs) that are used in combination with a probabilistic model checker to determine whether to retrain the ML model. This allows Ripple to optimize system performance in the long term, contributing to creating more sustainable ML-enabled systems. We demonstrate Rippleβs feasibility via a fraud detection system use case, showcasing its ability to plan for the long term and to account for retrain latency, improving over myopic adaptation approaches.
Genaina Nunes Rodrigues, Betty H.C. Cheng,
David Garlan, Paola Inverardi, Jeff Kramer and Sol Zilberman. SEAMS 2026 Community Debate: How Ethical Can an Ethics-Aware Controller Be? Can we Trust it? In Proc. the 21st International Conference on Software Engineering for Adaptive and Self-Managing Systems (SEAMS 2026), Rio de Janiero, Brazil. April 13-14, 2026.
https://doi.org/3788550.3795539.
Abstract: As software systems become increasingly autonomous and capable of synthesizing their own adaptive strategies, embedding ethical reasoning into self-adaptive controllers raises fundamental ques- tions about trust, responsibility, and moral agency. When adapta- tion unfolds under uncertainty, system decisions inevitably reflect implicit values originating from design choices, training data, and operational contexts. This challenges traditional assumptions about where ethical judgment resides and whether ethics-aware systems should follow fixed moral principles or dynamically negotiate ethi- cal trade-offs at runtime. This paper presents a collective contribution from a commu- nity debate panel of four eminent researchers at the 21st Interna- tional Conference on Software Engineering for Adaptive and Self- Managing Systems (SEAMS), each offering a distinct perspective on the trustworthiness, challenges, implications, and opportunities shaping the emerging horizon of ethics-aware controllers.