Validation of Safety-Critical Systems with AADL
|
|
- Ashlee McGee
- 8 years ago
- Views:
Transcription
1 Validation of Safety-Critical Systems with AADL Software Engineering Institute Carnegie Mellon University Pittsburgh, PA Peter H Feiler April 11, Carnegie Mellon University
2 Outline Multiple aspects of system validation System & software engineers working together Multi-fidelity model-based analysis Property preserving transformations Conclusions 2
3 Dimensions of System Validation Validation of models against system The system Model-based vof system System models Validation of implementation against system models System implementation 3
4 Single Source Annotated Architecture Model Availability & Reliability MTBF FMEA Hazard analysis Predictive Analysis Across Engineering Dimensions Architecture Model Security Intrusion Integrity Confidentiality 4 Data Quality Data precision/ accuracy Temporal correctness Confidence Fewer independently developed models reduces model validation Real-time Performance Execution time/ Deadline Deadlock/starvation Latency Resource Consumption Bandwidth CPU time Power consumption Low incremental cost for additional analyses & simulations 4
5 Architecture-Driven Modeling Automatically derived analytical models Annotated architecture System generation from validated models Validation of generators 5
6 AADL and Safety-Criticality Fault management Architecture patterns in AADL Redundancy, health monitoring, Fault tolerant configurations & modes Dependability Error Model Annex Specification of fault occurrence and fault propagation information Use for hazard and fault effect modeling Reliability & fault tree analysis Behavior validation Behavior Annex Model checking Source code validation 6 6
7 Outline Multiple aspects of system validation System & software engineers working together Multi-fidelity model-based analysis Property preserving transformations Conclusions 7
8 Traditional Embedded System Engineering System Engineer Control Engineer System Under Control Control System 8
9 Software-Intensive Embedded Systems System Engineer Control Engineer Hardware Engineer System Under Control System Control Compute Runtime Application Platform Architecture Software Embedded SW System Engineer Application Developer 9
10 Mismatched Assumptions System Engineer Physical Plant Characteristics Control Engineer Hardware Engineer System Under Control Compute Platform Data Stream Characteristics Distribution Redundancy Runtime Architecture Embedded SW System Engineer Control System Application Software Concurrency Communication Precision Units Application Developer 10
11 Predictable Embedded System Engineering Cruise Control Parking Assistance Navigation System Antilock Braking System Airbag Deployment Electronic Fuel Injection Application Software Emission Management Document the Runtime Architecture Abstract, but Precise System Analysis Schedulability Performance Reliability Fault Tolerance Dynamic Configurability External Environment Execution Platform System Construction AADL Runtime System Application Software Integration 11
12 Working Together Conceptual architecture UML-based component model Architecture views (DoDAF, IEEE1471) Platform independent model (PIM) System engineering SysML as standardized UML profile Focus on system architecture and operational environment Embedded software system engineering SAE AADL OMG MARTE profile based on AADL AADL as MARTE sub-profile Non-functional properties require deployment on platform Data modeling UML, ASN,, 12 12
13 Outline Multiple aspects of system validation System & software engineers working together Multi-fidelity model-based analysis Property preserving transformations Conclusions 13
14 Impact of Sampling Latency Jitter Impact of Scheduler Choice on Controller Stability A. Cervin, Lund U., CCACSD 2006 Sampling jitter due execution time jitter and application-driven send/receive 14
15 Latency Contributors Operational Environment System Engineer System Under Control Control Engineer Control System Processing latency Sampling latency Physical signal latency 15
16 ARINC 653 Partitions & Communication Frame-delayed inter-partition communication Timing semantics are insensitive to partition order Partition A T1 T2 Partition B T3 T4 T1 T2 T3 T4 T1 T2 T3 T4 t 0 Partition A t 1 t 2 Partition B Partition A Partition B 16
17 Latency Impact of Partitions Sensor Request for new page Display Manager New page content Lower bound on worst-case latency Page Content Manager Latency contribution: Partition period per partition hop Flight Manager Flight Director 17
18 Intended Data Flow in Task Architecture From other Partitions Pr 2 Preemption & concurrency affect read/write order Navigation Sensor Processing Pr 3 Pr 1 20Hz Periodic I/O Integrated Navigation Pr 4 10Hz 20Hz Guidance Processing 20Hz Shared data area Pr 6 Flight Plan Processing 5Hz To other Partitions Decreasing Priority Priority assignment achieves desired data flow Pr 9 Aircraft Performance Calculation 2Hz 18
19 Frame-level Latency Jitter of Data Stream Example: Non-deterministic downsampling Desired sampling pattern 2X: n, n+2, n+4 (2,2,2, ) Worst-case sampling pattern: n, n+1, n+4 (1,3, ) NavSensor Processing 20Hz Integrated Navigation 10Hz Read Thread IntegratedNavigation Write Thread NavSensorProcessing Timeline 19
20 Managed Latency Jitter through Deterministic Sampling From Partitions Nav signal data Navigation Sensor Processing Nav sensor data 20Hz Nav sensor data Integrated Navigation 10Hz Nav data Guidance Processing 20Hz Periodic I/O 20Hz Guidance To Partitions Input-compute-output AADL thread semantics Immediate and delayed data port connections for deterministic sampling Fuel Flow Nav data FP data Aircraft Performance Calculation 2Hz Flight Plan Processing Performance data 5Hz FP data 20
21 Rate Group Optimization Logical threads to execute at a specific rate Multiple logical threads to execute with the same rate Placement of units with same rate in same operating system thread Reduced number of threads and context switches 21
22 Rate Group Order Can Affect Latency Data flow from sensor T s to control T c to actuator T a with midframe communication Effect of rate groups: T c to T a becomes delayed Occurs when pairwise immediate connections in opposite direction OS Thread 50ms OS Thread 100ms Ts Tc Ta OST 100ms Tc OST 50ms Ts Ta Ts Ta t 0 t 50 t
23 Software-Based Latency Contributors Execution time variation: algorithm, use of cache Processor speed Resource contention Preemption Legacy & shared variable communication Rate group optimization Protocol specific communication delay Partitioned architecture Migration of functionality Fault tolerance strategy 23
24 Latency and Age of Data Latency: the amount of time between a sensor reading and an output to an actuator based on the sensor reading Age: amount of time that has passed since the sensor reading Age Contributors Oversampling Missing sensor readings Failed processing Missed deadlines 24
25 Outline Multiple aspects of system validation System & software engineers working together Multi-fidelity model-based analysis Property preserving transformations Conclusions 25
26 Efficient Runtime System Generation From Partitions 20Hz Preserve timing Nav signal Navigation semantics of data Sensor execution and communication Processing Nav sensor data Nav sensor data Integrated Navigation 10Hz Nav data Guidance Processing 20Hz Periodic I/O 20Hz Guidance To Partitions Input-compute-output AADL thread semantics Immediate and delayed data port connections for deterministic sampling Fuel Flow Nav data FP data Aircraft Performance Calculation 2Hz Flight Plan Processing Performance data 5Hz FP data 26
27 Will This Implementation Work? From other Partitions Pr 2 Simulink: single variable per connection Navigation Sensor Processing Pr 3 20Hz Pr 1 Integrated Navigation Pr 4 10Hz 20Hz Periodic I/O Buffer Variable Guidance Processing Buffer Variable Buffer Variable Buffer Variable 20Hz Pr 6 Flight Plan Processing 5Hz Buffer Variable To other Partitions Pr 9 Aircraft Performance Calculation 2Hz 27
28 Overlapping Message Lifespan Periodic thread MP and MC MP ->> MC Need for double buffering MP i MP i+1 MC i-1 MC i 28
29 Optimization of General Port Buffer Model Producer Consumer/Producer Consumer MP j MC j MP k MC k Send Receive Send Receive Xfer Xfer MS j MR j MS k MR k Send/receive with or without copy Transfer with or without copy Processing with or without copy MP: producer copy MS: send copy MR: receive copy MC: consumer copy 29
30 Message Streaming Lifespan Framework Producer task B MP i E T P, Mi+1 MP i+1 D P, Mi+1 Send S Mi Send buffer MS i MS i+1 Xfer Receive buffer Receive X Mi MR i R Mi MR i+1 Consumer task MC i MC i+1 T X T C, Mi D C, Mi 30
31 Message Lifespan Properties MC input-compute-output guarantee T C, Mi R Mi = B MCi E MCi T C, Mi+1 R mi+1 Message operation ordering condition S Mi < X Mi < R Mi MP bounded by producer dispatches T P, Mi B MPi E MPi = S Mi T P, Mi+1 MS bounded by sends and transfer S Mi = B MSi X * M i E MSi < S Mi+1 MR bounded by transfers and receive X ** M i B MRi E MRi = R *** M i < X Mi+1 * Completion of transfer ** Start of transfer *** Latest of multiple receivers 31
32 Sequential Execution of Periodic Tasks (τ P ; τ C )* Collapse to single buffer MP i MP i+1 MS MS MR MR MC i-1 MC i 32
33 Application-based Send and Receive (ASR) (τ P τ C )* MP 3 buffers α P S&X Ω P MR T P α P S Ω P D P T C α C R Ω C D C α C R Ω C α : actual execution start time MC Ω : actual completion time α P - Ω P α C - Ω C non-deterministic S/R order 33
34 Dispatch-based Send and Receive (DSR) (τ P τ C )* MP MP 2 buffers α P S&X Ω P T P α P S Ω P D P MR D P R T C α : actual execution start time R Ω : actual completion time MC MC α P - Ω P D P - T C = deterministic S/R 34
35 Buffer Optimization Considerations Periodic & aperiodic task dispatch Send and receive execution As part of application (ASR) As part of task dispatch/completion (DSR) Task execution order Concurrent: τ C τ P Atomic non-deterministic: τ C τ P Ordered: τ C ; τ P or τ P ; τ C Message transfer Immediate to consumer (IMT) Direct to delayed consumer (DMT) Period-delayed to consumer (PMT) 35
36 Periodic Task Communication Summary Periodic Same period ASR IMT PMT τ P ; τ C MF:1B PD:2B S X R DSR IMT PMT PD:2B R PD:2B S X/R DMT MF:1B τ C ; τ P PD:1B PD:1B PD:1B PD:1B PD:1B τ P τ ND:1B PD:2B PD:2B PD:2B ND:1B C τ P τ C MF: Mid-Frame PD: Period Delay ND: Non-Deterministic NDI: No Data Integrity ND:3B S/X C R C X PD:2B X 1B: Single buffer 2B: Two buffers 3B: Three buffers 4B: Four buffers R PD:2B R X/R PD:2B X/R S, X, R : data copy NDI:2B S/X/R C S/X : IMT combined send/xfer S/X/R : DMT combined S, X, R X/R: DSR/PMT combined X, R o1 o2 : One operation copy 36
37 Outline Multiple aspects of system validation System & software engineers working together Multi-fidelity model-based analysis Property preserving transformations Conclusions 37
38 Predictable Model-based Engineering Reduce the risks Analyze system early and throughout life cycle Understand system wide impact Validate assumptions across system Increase the confidence Validate models to complement integration testing Validate model assumptions in operational system Evolve system models in increasing fidelity Reduce the cost Fewer system integration problems Fewer validation steps through use of validated generators 38
39 Traditional Development Model Requirements Engineering Acceptance Test System Design System Test Software Architectural Design Integration Test Component Software Design Unit Test Code Development 39
40 Low fidelity Benefits of Predictive Architecting High fidelity Adequate confidence Requirements Engineering Top-Level Verification Items Virtual System Integration Strong confidence Acceptance Test System Design High-level AADL Model System Test Software Architectural Design Detailed AADL Model Integration Test Component Software Design Specify Model- Code Interfaces Unit Test generation of test cases Code Development updating models with actual data 40
41 Industrial Embedded Systems Initiatives OpenGroup Real-Time Forum EU + US partners COTRE Aviation Systems EAST ADL Consortium AutoSAR Automotive IST ARTIST2 Embedded Systems Center of Excellence MBE SAE AADL Standard Nov 2004 AADL Meta Model & XMI June 2006 AADL Error Annex Standard June 2006 AADL UML Profile Std 2008 OSATE Toolset SEI IST ARTIST Embedded Systems TOPCASED Open Source Embedded Systems Tool Framework 28 partners 20+M ITEA SPICES Model-Driven Embedded Systems Engineering 15 partners 16M US AVSI Avionics Consortium Analysis-based System Validation 12+ partners $40+M ESA Satellite Architectures Avionics EC ASSERT Proof-based Satellite Architectures ESA + 30 partners 15M Aerospace 41
42 A Research Transition Platform RMA Lehoczky Klein Simplex Dependable Upgrade Sha MetaH Vestal Honeywell RTQT Lehoczky DASADA Slack Stealer In MetaH Vestal Binns Honeywell Aging in Asynchronous Architectures Vestal Honeywell Runtime System Verification Hybrid Automata Vestal Honeywell Sporadic server RTQT Klein PACC Resource Management INSERT/Simplex Sha Lehoczky Klein Feiler EDCS MetaH/Acme Feiler AMRDEC Runtime System Generation Verification Runtime System Generation & Verification AADL/PetriNet ENST (Paris) MBE SAE AADL Standard Nov 2004 Formalized Execution Semantics Rolland IRIT Runtime System Code Verification Verimag/IRIT QRAM Rajkumar EDCS AADL Error Annex Standard June 2006 Configuration Consistency Krogh Feiler Li EDCS Reliability Fault Tree Vestal Honeywell OSATE Toolset SEI Reliability Analysis GSPN LAAS QRAM/RMA Feiler Dynamic QRAM Rajkumar Feiler DASADA Model Validation Alloy Verification Jackson (MIT) Dependability Reliability Modeling Mobius UIUC Resource Scheduling Singhoff (Brest) Network Calculus Vestal Honeywell Predictable Caching In Embedded Systems Feiler Hansson DeNiz Alloy-based Architecture Verification DeNiz Garlan SEI SCS Formalized AADL Temporal Semantics IRIT (Toulouse) Wireless Security ISIS Vanderbilt Confidentiality In AADL Feiler Hansson SEI IR&D TimeWeaver Rajkumar MoBIES Security OSATE Binpacker RMA ARINC653 Feiler DeNiz Partitioned Architectures Reliability Analysis Fault Propagation Markov Safety-Critical Systems FPTC & AADL Embry-Riddle Feiler, April Wallace 2008 (York U.) AADL Latency ARINC653 Feiler Hansson Process algebra ACSR Sokolsky (U.Penn) Sensornet Resources ANDES Stankovic Son UVA System Fault Impact Feiler Sha SEI UIUC 42
43 Peter H Feiler phf@sei.cmu.edu at ENST until June 9, 2008
Methods and Tools For Embedded Distributed System Scheduling and Schedulability Analysis
Methods and Tools For Embedded Distributed System Scheduling and Schedulability Analysis Steve Vestal Honeywell Labs Steve.Vestal@Honeywell.com 18 October 2005 Outline Background Binding and Routing Scheduling
More informationModel-Based Software Quality Assurance with the Architecture Analysis and Design Language
AIAA Infotech@Aerospace Conference andaiaa Unmanned...Unlimited Conference 6-9 April 2009, Seattle, Washington AIAA 2009-2034 Model-Based Software Quality Assurance with the Architecture Analysis
More informationSystem Architecture Virtual Integration: An Industrial Case Study
System Architecture Virtual Integration: An Industrial Case Study Peter H. Feiler Jorgen Hansson Dionisio de Niz Lutz Wrage November 2009 TECHNICAL REPORT CMU/SEI-2009-TR-017 ESC-TR-2009-017 Research,
More informationArchitecture Based Model Driven Software and System Development for Real-Time Embedded Systems
Architecture Based Model Driven Software and System Development for Real-Time Embedded Systems Bruce Lewis US Army Avionics and Missile Systems Command Bruce.A.Lewis@us.army.mil Abstract. Architecture
More informationPresentation of the AADL: Architecture Analysis and Design Language
Presentation of the AADL: Architecture Analysis and Design Language Outline 1. AADL a quick overview 2. AADL key modeling constructs 1. AADL components 2. Properties 3. Component connection 3. AADL: tool
More information174: Scheduling Systems. Emil Michta University of Zielona Gora, Zielona Gora, Poland 1 TIMING ANALYSIS IN NETWORKED MEASUREMENT CONTROL SYSTEMS
174: Scheduling Systems Emil Michta University of Zielona Gora, Zielona Gora, Poland 1 Timing Analysis in Networked Measurement Control Systems 1 2 Introduction to Scheduling Systems 2 3 Scheduling Theory
More informationTrends and New Directions in Software Architecture
Trends and New Directions in Software Architecture Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213 Chief Scientist, Software Solutions Division SEI Fellow Copyright 2015
More informationMixed-Criticality Systems Based on Time- Triggered Ethernet with Multiple Ring Topologies. University of Siegen Mohammed Abuteir, Roman Obermaisser
Mixed-Criticality s Based on Time- Triggered Ethernet with Multiple Ring Topologies University of Siegen Mohammed Abuteir, Roman Obermaisser Mixed-Criticality s Need for mixed-criticality systems due to
More informationPredictable response times in event-driven real-time systems
Predictable response times in event-driven real-time systems Automotive 2006 - Security and Reliability in Automotive Systems Stuttgart, October 2006. Presented by: Michael González Harbour mgh@unican.es
More informationMETHOD & TOOLS TO SECURE AND SUPPORT COLLABORATIVE ARCHITECTING OF CONSTRAINED SYSTEMS
METHOD & TOOLS TO SECURE AND SUPPORT COLLABORATIVE ARCHITECTING OF CONSTRAINED Jean-Luc Voirin Thales Aerospace Keywords: architecture modelling method early validation Abstract ARCADIA is a system & software
More informationProactive, Resource-Aware, Tunable Real-time Fault-tolerant Middleware
Proactive, Resource-Aware, Tunable Real-time Fault-tolerant Middleware Priya Narasimhan T. Dumitraş, A. Paulos, S. Pertet, C. Reverte, J. Slember, D. Srivastava Carnegie Mellon University Problem Description
More informationImpact Analysis of Software Change for Mission Critical Systems
Impact Analysis of Software Change for Mission Critical Systems Damian Kennedy, Dr Sergey Nesterov Centre of Excellence for Defence and Industry Systems Capability Defence and Systems Institute University
More informationSAVI Behavior Model Integration Virtual Integration Process
SAVI Behavior Model Integration Virtual Integration Process David Redman, AVSI Texas A&M University Copyright 2014 Boeing. All rights reserved. GPDIS_2015.ppt 1 Outline AVSI SAVI Motivation SAVI Program
More informationRequirements Engineering Management Findings Report
DOT/FAA/AR-08/34 Air Traffic Organization NextGen & Operations Planning Office of Research and Technology Development Washington, DC 20591 Requirements Engineering Management Findings Report May 2009 Final
More informationApplying 4+1 View Architecture with UML 2. White Paper
Applying 4+1 View Architecture with UML 2 White Paper Copyright 2007 FCGSS, all rights reserved. www.fcgss.com Introduction Unified Modeling Language (UML) has been available since 1997, and UML 2 was
More informationReal-Time Component Software. slide credits: H. Kopetz, P. Puschner
Real-Time Component Software slide credits: H. Kopetz, P. Puschner Overview OS services Task Structure Task Interaction Input/Output Error Detection 2 Operating System and Middleware Applica3on So5ware
More informationMaking Multicore Work and Measuring its Benefits. Markus Levy, president EEMBC and Multicore Association
Making Multicore Work and Measuring its Benefits Markus Levy, president EEMBC and Multicore Association Agenda Why Multicore? Standards and issues in the multicore community What is Multicore Association?
More informationAADL et la conception des logiciels
AADL et la conception des logiciels Pierre Dissaux, journée Féria/SVF, 2 décembre 2003 System Lifecycle System Engineering System Integration Hardware Engineering Software Engineering from System Engineering
More informationSafety Issues in Automotive Software
Safety Issues in Automotive Software Paolo Panaroni, Giovanni Sartori INTECS S.p.A. SAFEWARE 1 INTECS & Safety A very large number of safety software development, V&V activities and research project on
More informationAdvanced Operating Systems (M) Dr Colin Perkins School of Computing Science University of Glasgow
Advanced Operating Systems (M) Dr Colin Perkins School of Computing Science University of Glasgow Rationale Radical changes to computing landscape; Desktop PC becoming irrelevant Heterogeneous, multicore,
More informationStudy on Real-Time Test Script in Automated Test Equipment
Study on Real-Time Test Script in Automated Test Equipment Chongwu Jiang, Bin Liu, Yongfeng Yin, Chang Liu Department of System Engineering of Engineering Technology Beihang University Beijing, China jcw@dse.buaa.edu.cn
More informationLecture 3 - Model-based Control Engineering
Lecture 3 - Model-based Control Engineering Control application and a platform Systems platform: hardware, systems software. Development steps Model-based design Control solution deployment and support
More informationSCADE System 17.0. Technical Data Sheet. System Requirements Analysis. Technical Data Sheet SCADE System 17.0 1
SCADE System 17.0 SCADE System is the product line of the ANSYS Embedded software family of products and solutions that empowers users with a systems design environment for use on systems with high dependability
More informationState of the art Software Modeling. Tony Elliston. SIGADA 2004 Atlanta
State of the art Software Modeling Tony Elliston SIGADA 2004 Atlanta TNI Europe Limited Market our own software modelling tools: CP-Hood and Stood. Distributor for TNI Software range of products. TNI Europe
More informationChapter 13 Embedded Operating Systems
Operating Systems: Internals and Design Principles Chapter 13 Embedded Operating Systems Eighth Edition By William Stallings Embedded System Refers to the use of electronics and software within a product
More informationStreamStorage: High-throughput and Scalable Storage Technology for Streaming Data
: High-throughput and Scalable Storage Technology for Streaming Data Munenori Maeda Toshihiro Ozawa Real-time analytical processing (RTAP) of vast amounts of time-series data from sensors, server logs,
More informationELEC 5260/6260/6266 Embedded Computing Systems
ELEC 5260/6260/6266 Embedded Computing Systems Spring 2016 Victor P. Nelson Text: Computers as Components, 3 rd Edition Prof. Marilyn Wolf (Georgia Tech) Course Topics Embedded system design & modeling
More informationAutomotive System and Software Architecture
Automotive System and Software Architecture Yanja Dajsuren 2IW80 Software specification and architecture March 25, 2014 Which one has more software? Chevrolet Volt, an example modern day car Boeing 787,
More informationTrends in Embedded Software Engineering
Trends in Embedded Software Engineering Prof. Dr. Wolfgang Pree Department of Computer Science Universität Salzburg cs.uni-salzburg.at MoDECS.cc PREEtec.com Contents Why focus on embedded software? Better
More informationA Model-Based Design Methodology with Contracts to Enhance the Development Process of Safety-Critical Systems
A Model-Based Design Methodology with Contracts to Enhance the Development Process of Safety-Critical Systems Andreas Baumgart, Philipp Reinkemeier, Achim Rettberg, Ingo Stierand, Eike Thaden, Raphael
More informationPartition Scheduling in APEX Runtime Environment for Embedded Avionics Software
Partition Scheduling in APEX Runtime Environment for Embedded Avionics Software Yang-Hang Lee CISE Department, University of Florida Gainesville, FL 32611 Phone: (352) 392-1536 Fax: (352) 392-1220 Email:
More informationWeighted Total Mark. Weighted Exam Mark
CMP2204 Operating System Technologies Period per Week Contact Hour per Semester Total Mark Exam Mark Continuous Assessment Mark Credit Units LH PH TH CH WTM WEM WCM CU 45 30 00 60 100 40 100 4 Rationale
More informationStudy Plan Masters of Science in Computer Engineering and Networks (Thesis Track)
Plan Number 2009 Study Plan Masters of Science in Computer Engineering and Networks (Thesis Track) I. General Rules and Conditions 1. This plan conforms to the regulations of the general frame of programs
More informationARINC-653 Inter-partition Communications and the Ravenscar Profile
ARINC-653 Inter-partition Communications and the Ravenscar Profile Jorge Garrido jgarrido@dit.upm.es Juan Zamorano jzamora@datsi.fi.upm.es Universidad Politécnica de Madrid (UPM), Spain Juan A. de la Puente
More informationR&D and Topcased (led by Silvia Mazzini)
R&D and Topcased (led by Silvia Mazzini) 1 System and software engineering Study and experimentation of system and software engineering innovative techniques One of the Intecs main capacities acquired
More informationChapter 11 I/O Management and Disk Scheduling
Operating Systems: Internals and Design Principles, 6/E William Stallings Chapter 11 I/O Management and Disk Scheduling Dave Bremer Otago Polytechnic, NZ 2008, Prentice Hall I/O Devices Roadmap Organization
More informationAFDX Emulator for an ARINC-based Training Platform. Jesús Fernández Héctor Pérez J. Javier Gutiérrez Michael González Harbour
AFDX Emulator for an ARINC-based Training Platform Jesús Fernández Héctor Pérez J. Javier Gutiérrez Michael González Harbour 2 2 Motivation Mature standards for safety-critical applications ARINC-653 for
More informationCustomer Experience. Silicon. Support & Professional Eng. Services. Freescale Provided SW & Solutions
September 2013 Silicon Support & Professional Eng. Services Customer Experience Freescale Provided SW & Solutions Provide Valued Software, Support & Professional Engineering Services, Competitively 2 Customer
More informationSafety Analysis and Certification of Open Distributed Systems. P. M. Conmy; Department of Computer Science, University of York, York, YO10 5DD U.K.
Safety Analysis and Certification of Open Distributed Systems P. M. Conmy; Department of Computer Science, University of York, York, YO10 5DD U.K. M. Nicholson; Department of Computer Science, University
More informationReal-Time Operating Systems. http://soc.eurecom.fr/os/
Institut Mines-Telecom Ludovic Apvrille ludovic.apvrille@telecom-paristech.fr Eurecom, office 470 http://soc.eurecom.fr/os/ Outline 2/66 Fall 2014 Institut Mines-Telecom Definitions What is an Embedded
More informationTrends and New Directions in Software Architecture
#GHC14 Trends and New Directions in Software Architecture Linda Northrop Chief Scientist, Software Solutions Division SEI Fellow Software Engineering Institute (SEI) Carnegie Mellon University October
More informationRETIS Lab Real-Time Systems Laboratory
RETIS Lab Real-Time Systems Laboratory A brief introduction RETIS Lab Real-Time Systems Laboratory RETIS Lab investigates embedded computing systems with particular emphasis in Real-time methodologies
More informationSCADE Suite in Space Applications
SCADE Suite in Space Applications at EADS David Lesens 09/10/2008 Overview Introduction Historical use of SCADE at EADS Astrium ST Why using SCADE? The Automatic Transfer Vehicle (ATV) M51 and Vega R&T
More informationUsing Multipathing Technology to Achieve a High Availability Solution
Using Multipathing Technology to Achieve a High Availability Solution Table of Contents Introduction...3 Multipathing Technology...3 Multipathing I/O Implementations...5 Storage Redundancy...5 Infortrend
More informationThe Microsoft Windows Hypervisor High Level Architecture
The Microsoft Windows Hypervisor High Level Architecture September 21, 2007 Abstract The Microsoft Windows hypervisor brings new virtualization capabilities to the Windows Server operating system. Its
More informationAdvanced Electronic Platform Technologies Supporting Development of Complicated Vehicle Control Software
133 Hitachi Review Vol. 63 (2014), No. 2 Advanced Electronic Platform Technologies Supporting Development of Complicated Vehicle Control Software Yoshinobu Fukano, Dr. Sci. Kosei Goto Masahiro Matsubara
More informationSome Software Technologies for Resilient Computing
Some Software Technologies for Resilient Computing Jean-Charles FABRE OSD Conference, Tokyo, Japan, March 7, 2012 Resilient computing Resilience is defined as the persistence of dependability when facing
More informationAaron Greenhouse, Ph.D.
Aaron Greenhouse, Ph.D. Software Engineering Institute 4500 Fifth Ave. Pittsburgh, PA 15213 (412) 268-6464 (Office) (412) 268-5758 (Fax) aarong@cs.cmu.edu 120 Ruskin Ave, Apt 110 Pittsburgh, PA 15213 (412)
More informationThe Advantages of Adaptive and Disributed Systems
Toward Certification of Adaptive Distributed Systems John M. Slaby, Lonnie R. Welch, Paul R. Work OMG's Workshop on Distributed Object Computing for Real-time and Embedded Systems July 10-13, 2006 - Arlington,
More informationArchitectures for Distributed Real-time Systems
SDP Workshop Nashville TN 13 Dec 2001 Architectures for Distributed Real-time Systems Michael W. Masters NSWCDD Building Systems for the Real World What is the Problem? Capability sustainment Affordable
More informationCertification Authorities Software Team (CAST) Position Paper CAST-13
Certification Authorities Software Team (CAST) Position Paper CAST-13 Automatic Code Generation Tools Development Assurance Completed June 2002 NOTE: This position paper has been coordinated among the
More informationOverview. Stakes. Context. Model-Based Development of Safety-Critical Systems
1 2 Model-Based Development of -Critical Systems Miguel A. de Miguel 5/6,, 2006 modeling Stakes 3 Context 4 To increase the industrial competitiveness in the domain of software systems To face the growing
More informationA distributed approach to File Management in IMA2G
Copyright 2011 SAE International 11ATC-0436 A distributed approach to File Management in IMA2G Silvia Larghi, Marco Villa, Michele Tumminelli, Antonio Ottolia, Massimo Traversone Selex Galileo Nerviano
More informationWhite Paper. How Streaming Data Analytics Enables Real-Time Decisions
White Paper How Streaming Data Analytics Enables Real-Time Decisions Contents Introduction... 1 What Is Streaming Analytics?... 1 How Does SAS Event Stream Processing Work?... 2 Overview...2 Event Stream
More informationChap 1. Introduction to Software Architecture
Chap 1. Introduction to Software Architecture 1. Introduction 2. IEEE Recommended Practice for Architecture Modeling 3. Architecture Description Language: the UML 4. The Rational Unified Process (RUP)
More informationArchitecture Description Languages
Architecture Description Languages Stefan Björnander The Department of Computer Science and Electronics Mälardalen University Abstract An Architecture Description Language (ADL) is a language designed
More informationSystem Software and TinyAUTOSAR
System Software and TinyAUTOSAR Florian Kluge University of Augsburg, Germany parmerasa Dissemination Event, Barcelona, 2014-09-23 Overview parmerasa System Architecture Library RTE Implementations TinyIMA
More informationQoS and Communication Performance Management
Using a Real-Time, QoS-based ORB to Intelligently Manage Communications Bandwidth in a Multi-Protocol Environment Bill Beckwith Objective Interface Systems, Inc. OMG Embedded Workshop The Nature of CORBA
More informationNotes and terms of conditions. Vendor shall note the following terms and conditions/ information before they submit their quote.
Specifications for ARINC 653 compliant RTOS & Development Environment Notes and terms of conditions Vendor shall note the following terms and conditions/ information before they submit their quote. 1.
More informationManaging the performance of large, distributed storage systems
Managing the performance of large, distributed storage systems Scott A. Brandt and Carlos Maltzahn, Anna Povzner, Roberto Pineiro, Andrew Shewmaker, and Tim Kaldewey Computer Science Department University
More informationRecommendations for Performance Benchmarking
Recommendations for Performance Benchmarking Shikhar Puri Abstract Performance benchmarking of applications is increasingly becoming essential before deployment. This paper covers recommendations and best
More information4. Fixed-Priority Scheduling
Simple workload model 4. Fixed-Priority Scheduling Credits to A. Burns and A. Wellings The application is assumed to consist of a fixed set of tasks All tasks are periodic with known periods This defines
More informationSoftware Stacks for Mixed-critical Applications: Consolidating IEEE 802.1 AVB and Time-triggered Ethernet in Next-generation Automotive Electronics
Software : Consolidating IEEE 802.1 AVB and Time-triggered Ethernet in Next-generation Automotive Electronics Soeren Rumpf Till Steinbach Franz Korf Thomas C. Schmidt till.steinbach@haw-hamburg.de September
More informationSafe Automotive software architecture (SAFE) WP3 Deliverable D3.6.b: Safety Code Generator Specification
Contract number: ITEA2 10039 Safe Automotive software architecture (SAFE) ITEA Roadmap application domains: Major: Services, Systems & Software Creation Minor: Society ITEA Roadmap technology categories:
More informationBest Practices for Verification, Validation, and Test in Model- Based Design
2008-01-1469 Best Practices for Verification, Validation, and in Model- Based Design Copyright 2008 The MathWorks, Inc. Brett Murphy, Amory Wakefield, and Jon Friedman The MathWorks, Inc. ABSTRACT Model-Based
More informationReal-time Operating Systems. VO Embedded Systems Engineering Armin Wasicek 11.12.2012
Real-time Operating Systems VO Embedded Systems Engineering Armin Wasicek 11.12.2012 Overview Introduction OS and RTOS RTOS taxonomy and architecture Application areas Mixed-criticality systems Examples:
More informationAn overview of Rapid System Prototyping today
An overview of Rapid System Prototyping today F. Kordon & J. Henkel 1. The role of Rapid System Prototyping The International Technology Roadmap for Semiconductors [3] predicts chip complexities by the
More informationWhite Paper. Real-time Capabilities for Linux SGI REACT Real-Time for Linux
White Paper Real-time Capabilities for Linux SGI REACT Real-Time for Linux Abstract This white paper describes the real-time capabilities provided by SGI REACT Real-Time for Linux. software. REACT enables
More informationLow-Level Verification of Embedded Software: Addressing the Challenge
Low-Level Verification of Embedded Software: Addressing the Challenge Sanjit A. Seshia Assistant Professor EECS, UC Berkeley FMCAD 2010 Panel October 2010 Abstraction Layers in Computing Algorithms, Protocols,
More informationARINC 653. An Avionics Standard for Safe, Partitioned Systems
ARINC 653 An Avionics Standard for Safe, Partitioned Systems 1 Courtesy of Wind River Inc. 2008 IEEE-CS Seminar June 4 th, 2008 Agenda Aerospace Trends IMA vs. Federated ARINC 653 Main concepts Safety
More informationA model for requirements traceability in a heterogeneous model-based design process
A model for requirements traceability in a heterogeneous model-based design process Application to automotive embedded systems Hubert Dubois CEA, LIST Point Courrier 94, Gif-sur-Yvette, F-91191, France
More informationFrameworks of Process Improvement for Mobile Applications
Frameworks of Process Improvement for Mobile Applications Haeng-Kon Kim Abstract Mobile application development belongs on the complicated, but quite regular software development environment that includes
More informationEMBEDDED SOFTWARE DEVELOPMENT: COMPONENTS AND CONTRACTS
EMBEDDED SOFTWARE DEVELOPMENT: COMPONENTS AND CONTRACTS David URTING, Stefan VAN BAELEN, Tom HOLVOET and Yolande BERBERS {David.Urting, Stefan.VanBaelen, Tom.Holvoet, Yolande.Berbers}@cs.kuleuven.ac.be
More informationPOSIX. RTOSes Part I. POSIX Versions. POSIX Versions (2)
RTOSes Part I Christopher Kenna September 24, 2010 POSIX Portable Operating System for UnIX Application portability at source-code level POSIX Family formally known as IEEE 1003 Originally 17 separate
More informationTechnical Report CMU/SEI-88-TR-024 ESD-TR-88-025
Technical Report CMU/SEI-88-TR-024 ESD-TR-88-025 System Specification Document: Shipboard Inertial Navigation System Simulator and External Computer B. Craig Meyers Nelson H. Weiderman October 1988 Technical
More informationThe SPES Methodology Modeling- and Analysis Techniques
The SPES Methodology Modeling- and Analysis Techniques Dr. Wolfgang Böhm Technische Universität München boehmw@in.tum.de Agenda SPES_XT Project Overview Some Basic Notions The SPES Methodology SPES_XT
More informationSafety and Security Features in AUTOSAR
Safety and Security Features in AUTOSAR Nagarjuna Rao Kandimala, Michal Sojka Czech Technical University in Prague 166 27 Praha 6, Czech Republic Thursday 15 th November, 2012 Contents 1 Introduction 2
More informationTASTE: A Real-Time Software Engineering Tool-Chain Overview, Status, and Future
TASTE: A Real-Time Software Engineering Tool-Chain Overview, Status, and Future Maxime Perrotin 1, Eric Conquet 1, Julien Delange 1, André Schiele 1, and Thanassis Tsiodras 2 1 European Space Agency, ESTEC,
More informationF-16 Modular Mission Computer Application Software
F-16 Modular Mission Computer Application Software Achieving Cross-Platform Compatibility with Increased Productivity and Quality using the OMG s Model Driven Architecture Lauren E. Clark Chief Engineer
More informationDesigning Real-Time and Embedded Systems with the COMET/UML method
By Hassan Gomaa, Department of Information and Software Engineering, George Mason University. Designing Real-Time and Embedded Systems with the COMET/UML method Most object-oriented analysis and design
More informationLecture 9 Modeling, Simulation, and Systems Engineering
Lecture 9 Modeling, Simulation, and Systems Engineering Development steps Model-based control engineering Modeling and simulation Systems platform: hardware, systems software. Control Engineering 9-1 Control
More informationEnterprise Applications
Enterprise Applications Chi Ho Yue Sorav Bansal Shivnath Babu Amin Firoozshahian EE392C Emerging Applications Study Spring 2003 Functionality Online Transaction Processing (OLTP) Users/apps interacting
More informationCertification Authorities Software Team (CAST) Position Paper CAST-9
Certification Authorities Software Team (CAST) Position Paper CAST-9 Considerations for Evaluating Safety Engineering Approaches to Software Assurance Completed January, 2002 NOTE: This position paper
More informationCenter for Hybrid and Embedded Software Systems
Center for Hybrid and Embedded Software Systems College of Engineering, University of California at Berkeley Presented by: Edward A. Lee, EECS, UC Berkeley Citris Founding Corporate Members Meeting, Feb.
More informationReal Time Developer Studio. Emmanuel Gaudin emmanuel.gaudin@pragmadev.com
Real Time Developer Studio Emmanuel Gaudin emmanuel.gaudin@pragmadev.com PragmaDev French SME, Beneficiary since 2006. Dedicated to the development of a modelling tool for the development of Event driven
More informationSOFTWARE DEVELOPMENT FOR EMBEDDED SYSTEMS
SOFTWARE DEVELOPMENT FOR EMBEDDED SYSTEMS Trends and Challenges in Developing Software for Embedded Systems Motivation This survey addresses software development in the field of embedded systems. Our goal
More informationBoeing B-777. 29.1 Introduction. 29.2 Background. Michael J. Morgan
29 Boeing B-777 Michael J. Morgan Honeywell 29.1 Introduction 29.2 Background 29.3 Boeing 777 Airplane Information Management System (AIMS) 29.4 Cabinet Architecture Overview 29.5 Backplane Bus 29.6 Maintenance
More informationATC Case Study. Air Traffic Control Case Study. ATC Requirements. SE380-F'02-Lecture 17 11/4/2002. 2002 by Eric A. Durant, Ph.D. 1.
ATC Case Study History Advanced Automation System (AAS) Initial Sector Suite System (ISSS) Display System Replacement (DSR) Requirements and qualities Architectural approach Components Redundancy Assessment
More informationTitle Goes Asset Management
Title Goes Asset Management MAXIMIZING UPTIME: BUILDING A FAULT-TOLERANT FACTORYTALK ASSETCENTRE SYSTEM WITH NEC EXPRESS5800/320F SERIES FAULT TOLERANT SERVERS ASSET MANAGEMENT Introduction FactoryTalk
More informationExtending AADL for Security Design Assurance of the Internet of Things
Extending AADL for Security Design Assurance of the Internet of Things Presented by Rick Kazman, PhD Team: Carol Woody (PI), Rick Kazman, Robert Ellison, John Hudak, Allen Householder Software Engineering
More informationEastern Washington University Department of Computer Science. Questionnaire for Prospective Masters in Computer Science Students
Eastern Washington University Department of Computer Science Questionnaire for Prospective Masters in Computer Science Students I. Personal Information Name: Last First M.I. Mailing Address: Permanent
More informationHP Smart Array Controllers and basic RAID performance factors
Technical white paper HP Smart Array Controllers and basic RAID performance factors Technology brief Table of contents Abstract 2 Benefits of drive arrays 2 Factors that affect performance 2 HP Smart Array
More information2005-01-0785. Effective Application of Software Safety Techniques for Automotive Embedded Control Systems SAE TECHNICAL PAPER SERIES
2005-01-0785 SAE TECHNICAL PAPER SERIES Effective Application of Software Safety Techniques for Automotive Embedded Control Systems Barbara J. Czerny, Joseph G. D Ambrosio, Brian T. Murray and Padma Sundaram
More informationSeven Challenges of Embedded Software Development
Corporate Technology Seven Challenges of Embedded Software Development EC consultation meeting New Platforms addressing mixed criticalities Brussels, Feb. 3, 2012 Urs Gleim Siemens AG Corporate Technology
More informationDIPLODOCUS: An Environment for. the Hardware/Software Partitioning of. Institut Mines-Telecom. Complex Embedded Systems
DIPLODOCUS: An Environment for Institut Mines-Telecom the Hardware/Software Partitioning of Complex Embedded Systems Ludovic Apvrille, ludovic.apvrille@telecom-paristech.fr ETR 2013, Toulouse, France Goals
More informationTackling the Complexity of Timing-relevant Deployment Decisions in Multicore-based Embedded Automotive Software Systems Rolf Schneider, AUDI AG
Tackling the Complexity of Timing-relevant Deployment Decisions in Multicore-based Embedded Automotive Software Systems Rolf Schneider, AUDI AG 1 Topics Introduction Project ARAMiS ARAMiS Automotive LSSI
More informationANDES: an ANalysis-based DEsign tool for wireless Sensor networks
ANDES: an ANalysis-based DEsign tool for wireless Sensor networks Vibha Prasad, Ting Yan, Praveen Jayachandran, Zengzhong Li, Sang H Son, John A Stankovic, Jörgen Hansson and Tarek Abdelzaher Department
More informationAntonio Kung, Trialog. HIJA technical coordinator. Scott Hansen, The Open Group. HIJA coordinator
HIJA Antonio Kung, Trialog HIJA technical coordinator Scott Hansen, The Open Group HIJA coordinator 1 Presentation Outline HIJA project ANRTS platforms Requirements for ANRTS platforms Profiles based on
More informationResource Utilization of Middleware Components in Embedded Systems
Resource Utilization of Middleware Components in Embedded Systems 3 Introduction System memory, CPU, and network resources are critical to the operation and performance of any software system. These system
More information