In system monitoring, one is often interested in checking properties of aggregated data.
Current policy monitoring approaches are limited in the kinds of aggregations they handle.
To rectify this, we extend an expressive language, metric first-order temporal logic, with
aggregation operators. Our extension is inspired by the aggregation operators common in
database query languages like SQL. We provide a monitoring algorithm for this enriched
policy specification language. We show that, in comparison to related data processing�…

Compliance policies often stipulate conditions on aggregated data. Current policy
monitoring approaches are limited in the kind of aggregations that they can handle. We
rectify this as follows. First, we extend metric first-order temporal logic with aggregation
operators. This extension is inspired by the aggregation operators common in database
query languages like SQL. Second, we provide a monitoring algorithm for this enriched
policy specification language. Finally, we experimentally evaluate our monitor's�…