Adding Formal Meanings to AADL with Hybrid Annex

Ahmad, Ehsan; Yang, Dong; Wang, Shuling; Zhan, Naijun; Zou, Liang

doi:10.1007/978-3-319-15317-9_15

Cited by 13 publications

(10 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Yang et al [4] construct formal semantics of AADL using machine-reachable CSP, analyze and verify the deadlock and livelock using the tool FDR. Ahmad et al [5] propose the formal semantics of the synchronous subset of AADL by using HCSP and verify the correctness of the AADL model by an in-house developed theorem prover, the Hybrid Hoare Logic (HHL) prover. Zhang et al [6] introduce a set of transformation rules for AADL to the stateful timed CSP and verify the critical behavior properties of the AADL model by PAT.…”

Section: Related Workmentioning

confidence: 99%

Formal Verification of AADL Models by Event-B

Hadad

Ahmed

2020

IEEE Access

View full text Add to dashboard Cite

AADL is widely used to depict the architecture and behavior of real-time safety-critical systems such as avionics and aerospace. The development of these systems has strict requirements for building fault-free systems. Formal verification is frequently applied to verify the critical properties of the systems, such as safety and liveness; however, the formal verification is not supported by AADL. Model transformation is commonly applied to provide formal semantics; hence, the AADL model can be verified by a language that supports formal verification in addition to the ability to cover all AADL model behavior. Event-B, with its proof obligation, is increasingly used to model and verify safety-critical systems. This paper presents the transformation of the AADL model into Event-B, which captures most AADL components and behavioral actions to be effective in the verification of current real-time systems models. Then, we define theorems and invariants of safety and liveness properties to be proven by using the RODIN platform. To demonstrate the efficacy of our method, we model the AADL of movement authority (MA) control of the Chinese Train Control System, transform the AADL model to Event-B and verify its crucial properties.

show abstract

Section: Related Workmentioning

confidence: 99%

Formal Verification of AADL Models by Event-B

Hadad

Ahmed

2020

IEEE Access

View full text Add to dashboard Cite

show abstract

“…To better understand dHCSP, we introduce delay behavior to the water tank system considered in [4,24]. Example 1.…”

Section: Syntax Of Dhcspmentioning

confidence: 99%

Synthesizing SystemC Code from Delay Hybrid CSP

Yan

Wang

et al. 2017

Programming Languages and Systems

Self Cite

View full text Add to dashboard Cite

Abstract. Delay is omnipresent in modern control systems, which can prompt oscillations and may cause deterioration of control performance, invalidate both stability and safety properties. This implies that safety or stability certificates obtained on idealized, delay-free models of systems prone to delayed coupling may be erratic, and further the incorrectness of the executable code generated from these models. However, automated methods for system verification and code generation that ought to address models of system dynamics reflecting delays have not been paid enough attention yet in the computer science community. In our previous work, on one hand, we investigated the verification of delay dynamical and hybrid systems; on the other hand, we also addressed how to synthesize SystemC code from a verified hybrid system modelled by Hybrid CSP (HCSP) without delay. In this paper, we give a first attempt to synthesize SystemC code from a verified delay hybrid system modelled by Delay HCSP (dHCSP), which is an extension of HCSP by replacing ordinary differential equations (ODEs) with delay differential equations (DDEs). We implement a tool to support the automatic translation from dHCSP to SystemC.

show abstract

“…In [10], we have illustrated the application of the HHL Prover for verification of hybrid systems modeled using AADL and the Hybrid annex through a benchmark hybrid system-water level control system. Here, we apply the same approach but with the detailed discrete behavior modeling using the BLESS annex.…”

Section: System Level Behavior Verificationmentioning

confidence: 99%

Behavior modeling and verification of movement authority scenario of Chinese Train Control System using AADL

Ahmad

Yang

Larson

et al. 2015

Sci. China Inf. Sci.

Self Cite

View full text Add to dashboard Cite

Train control systems like most digital controllers are, by definition, hybrid systems as they interact with or try to control some aspects of the physical world. Detailed behavior modeling with constraints specification and formal verification, required for reliability prediction, is a great challenge for hybrid system designers. Train control systems further intensify this challenge with extensive interaction between computing units and their physical environment and their mutual dependence on each other. In this paper, we investigate behavior modeling and formal verification of Chinese Train Control System Level 3 (CTCS-3) using Architectural Analysis & Design Language (AADL) to cope with this challenge. AADL is an architecture description language for embedded systems and is based on model-based engineering paradigm. Along with structural modeling of embedded systems using the core language constructs, AADL also provides support for language extension through annex sublanguages. In system requirements specification document, the behavior of the CTCS-3 is specified as a set of basic operation scenarios that cooperate with each other to achieve safe and secure functionality of trains. Movement Authority (MA) scenario, explored in this paper, is considered as a basic and most crucial scenario to prevent trains from colliding with each other. The detailed discrete behavior of control system is modeled and verified using the Behavior Language for Embedded Systems with Software (BLESS) annex sublanguage of AADL, and the continuous behavior of train with the cyber-physical interaction (communication between train and control system) is modeled using the Hybrid annex sublanguage. The behavior of the MA scenario at system level is verified using the Hybrid Hoare Logic theorem prover. Behavior constraints are specified as assertions using first-order logic formulas augmented with a simple temporal operator.

show abstract

Adding Formal Meanings to AADL with Hybrid Annex

Cited by 13 publications

References 14 publications

Formal Verification of AADL Models by Event-B

Formal Verification of AADL Models by Event-B

Synthesizing SystemC Code from Delay Hybrid CSP

Behavior modeling and verification of movement authority scenario of Chinese Train Control System using AADL

Contact Info

Product

Resources

About