{"id":20962,"date":"2025-12-24T11:04:48","date_gmt":"2025-12-24T02:04:48","guid":{"rendered":"https:\/\/www.waseda.jp\/inst\/wias\/?p=20962"},"modified":"2025-12-24T11:04:48","modified_gmt":"2025-12-24T02:04:48","slug":"%e9%87%8f%e7%9a%84%e3%83%86%e3%82%ad%e3%82%b9%e3%83%88%e5%88%86%e6%9e%90%e3%81%ab%e3%82%88%e3%82%8b%e5%9b%bd%e9%9a%9b%e6%94%bf%e6%b2%bb%e7%a0%94%e7%a9%b6%e3%80%80%e6%b8%a1%e8%be%ba%e8%80%95-12-2-2-7-7","status":"publish","type":"post","link":"https:\/\/www.waseda.jp\/inst\/wias\/news-en\/2025\/12\/24\/20962\/","title":{"rendered":"“Failing Smart”: Building Systems That Embrace the Unexpected
LI Jialong, Assistant Professor"},"content":{"rendered":"

\"\"<\/p>\n

LI Jialong, Assistant Professor<\/a><\/p>\n

The Motivation: Confronting the Limits of Manpower-Driven Solutions<\/h3>\n

Right after I joined my research lab, I was deeply struck by a series of recurring system failures at a major bank, which severely disrupted the lives of countless people. Driven by curiosity, I investigated how such failures were addressed in the industry, only to discover that the prevailing approach involved mobilizing massive manpower to anticipate and prepare for every conceivable failure scenario. However, this brute-force method\u2014throwing more people at the problem\u2014often led to endless project delays. Worse yet, it still failed to fully prevent unknown failures or unexpected events. In the bank\u2019s case, not only did the main system crash, but even the backup system, meant to mitigate such incidents, failed as well\u2014an outcome no one had foreseen or prepared for.<\/p>\n

\"\"

Figure 1. ATM outage causes widespread disruption<\/p><\/div>\n

Facing this harsh reality\u2014the limits of manpower-driven approaches\u2014I began to realize the need for a fundamentally different way of thinking. The issue isn\u2019t about preventing all failures, but about how to respond wisely when failures are inevitable. Instead of striving for a system that \u201cnever fails,\u201d I asked: What if, like sacrificing pawns to protect the king in chess, we could design systems that strategically sacrifice lower-priority functions to safeguard what matters most? My goal became clear: to create theories and technologies that enable systems to implement this \u201cbest effort\u201d strategy in real time, without human intervention. This is the origin of my research.<\/p>\n

Research Overview: Preparing for the Worst, Seeking the Best<\/h3>\n

The most difficult challenge in system design is dealing with the uncertainties of the future. It is practically impossible to predict and prepare for every potential event, such as sudden component failures, network delays, or unforeseen changes in the environment. Traditional, manpower-intensive methods that try to enumerate every possible scenario simply cannot handle truly \u201cunexpected\u201d events. I decided to flip this mindset completely\u2014assuming that \u201cthe worst-case scenario will always happen,\u201d and then designing systems that can withstand even that. This is the core principle of my research: pessimistic design.<\/p>\n

In this approach, we treat the environment as if it were an intelligent, adversarial opponent\u2014always making the \u201cworst possible\u201d moves against the system. Imagine playing chess against a grandmaster: no matter what harsh moves the environment makes, our strategy must ensure that the \u201cking\u201d (the most critical function) is always protected. If we can guarantee safety in such extreme scenarios, then our systems will be even more robust and reliable in real-world, less hostile situations.<\/p>\n

To realize this pessimistic design principle, I model the interaction between the system and its environment as a two-player game using game theory. The system aims to achieve multiple goals, while the environment tries to thwart those goals. The challenge is for the system to find an optimal strategy that minimizes damage\u2014even in the worst case. However, this approach faces the infamous problem of combinatorial explosion: as the number of requirements increases, the number of possible strategies grows exponentially, making real-time analysis infeasible. To tackle this, I have developed two key optimization strategies:<\/p>\n

The first strategy is Incremental Analysis. Most environmental changes only affect part of the system. By applying the concept of \u201cdynamic strongly connected components\u201d from graph theory, my incremental analysis method identifies and recalculates only the affected areas. Through 45 case studies across automated warehouses, factory production lines, and museum security systems, this approach reduced analysis time by an average of 60% compared to conventional methods that recalculate everything from scratch.<\/p>\n

\"\"

Figure 2. Dynamic Strongly Connected Components: Identifying changes in tightly-knit groups when people enter or leave<\/p><\/div>\n

The second strategy is Hierarchical Abstraction.Inspired by the \u201cSystem 1\/System 2\u201d model of human cognition, I structured the analysis process hierarchically. First, I group detailed requirements into abstract goals, allowing for fast, coarse-grained analysis (System 1 thinking). Experiments showed that abstraction dramatically reduces the game\u2019s state space (and thus its complexity). While this sacrifices some precision in identifying specific root causes, it enables rapid, real-time responses. Afterwards, the process can transition to more detailed (System 2) analysis as needed, balancing speed and accuracy.<\/p>\n

\"\"

Figure 3. Fast thinking enables quick responses; slow thinking ensures accuracy<\/p><\/div>\n

Future Prospects<\/h3>\n

The ultimate goal of my research is to bring these theories into real-world applications and contribute to society. Moving forward, I aim to advance my work in three main directions:<\/p>\n

First, social implementation in Mission-Critical Domains. Systems that operate in space, such as planetary rovers and satellites, are ideal candidates for this technology. Physical repairs are impossible, and the cost of launch means missions cannot simply be abandoned. Even in the event of a failure, we must extract as much residual value from the system as possible. Currently, I am collaborating with research institutions in the EU to adapt this technology to NASA\u2019s F Prime flight software platform, with the goal of making it publicly available.<\/p>\n

Second, reducing the cost and barriers to applying our method by utilizing Large Language Models (LLMs). At present, applying my methods requires \u201cmodeling\u201d\u2014expressing system behaviors and requirements as mathematical formulas\u2014a high barrier for most engineers. However, with LLMs\u2019 powerful translation capabilities, it is becoming possible to automatically generate mathematical models from natural-language specifications, or to extract system models directly from existing source code. This will drastically lower the barrier to adoption.<\/p>\n

Third, enhancing interpretability for human collaboration. When systems make decisions, it is vital to explain the rationale in terms humans can understand. For example, when requirements conflict, current methods can analyze how the conflict arises, but clearly presenting these reasons or concrete examples to humans remains an open challenge. If we can achieve this, we will avoid the \u201cblack box\u201d problem and enable these systems to support human decision-making.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

LI Jialong, Assistant Professor The Motivation: Confronting the Limits of Manpower-Driven Solutions Right afte […]<\/p>\n","protected":false},"author":6,"featured_media":20950,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[95],"tags":[73,107],"class_list":["post-20962","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-en","tag-research-en","tag-spotlight-en"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.waseda.jp\/inst\/wias\/wp-json\/wp\/v2\/posts\/20962","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.waseda.jp\/inst\/wias\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.waseda.jp\/inst\/wias\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.waseda.jp\/inst\/wias\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.waseda.jp\/inst\/wias\/wp-json\/wp\/v2\/comments?post=20962"}],"version-history":[{"count":1,"href":"https:\/\/www.waseda.jp\/inst\/wias\/wp-json\/wp\/v2\/posts\/20962\/revisions"}],"predecessor-version":[{"id":20966,"href":"https:\/\/www.waseda.jp\/inst\/wias\/wp-json\/wp\/v2\/posts\/20962\/revisions\/20966"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.waseda.jp\/inst\/wias\/wp-json\/wp\/v2\/media\/20950"}],"wp:attachment":[{"href":"https:\/\/www.waseda.jp\/inst\/wias\/wp-json\/wp\/v2\/media?parent=20962"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.waseda.jp\/inst\/wias\/wp-json\/wp\/v2\/categories?post=20962"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.waseda.jp\/inst\/wias\/wp-json\/wp\/v2\/tags?post=20962"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}