We propose an approach based on Alloy to formally model and assess a system architecture with respect to safety and security requirements. We illustrate this approach by considering as a case study an avionic system developed by Thales, which provides guidance to aircraft. We show how to define in Alloy a metamodel of avionic architectures with a focus on failure propagations. We then express the specific architecture of the case study in Alloy. Finally, we express and check properties that refer to the robustness of the architecture to failures and attacks.

The development of critical systems is a challenging task that requires collaborative work for various purposes: specification, design and verification. Today, no single modeling language and environment covers all these aspects. ARCADIA and Capella © are Model-based System Engineering (MBSE) method and tool developed for the system design process. ARCADIA/Capella also adopts a viewpoint-based description to describe engineering specialty, such as the safety engineering. Safety Architect © is a MBSA (Model Based Safety Analysis) tool developed by ALL4TEC to analyze the robustness of design models. Indeed, Safety Architect can use design models imported from usual modelling tools, such as Capella, in order to perform classical safety analyses: automatic deduction of fault tree of the identified feared events. In this paper, we present our MBSE and MBSA approach developed in the Clarity project around Safety viewpoint in Capella and the import legacy into Safety Architect in order to realize safety analysis.

No abstract

The French Space Agency uses a special computer environment to collect quality and reliability data on the software it develops, and to analyze and predict the performance potential of that software throughout its life cycle. This paper presents that the environment along with the way data is organized and collected during software development and maintenance. We show the impact our work in this field has on complexity metrics and software reliability measurements. The paper is highlighted with practical applications and results concerning quite a large number of space projects in a realcontext.

No abstract