Elucidation and Analysis of Specification Patterns in Aerospace System Telemetry

Luppen, Zachary; Jacks, Michael; Baughman, Nathan; Stilic, Muhamed; Nasers, Ryan; Hertz, Benjamin; Cutler, James; Lee, Dae Young; Rozier, Kristin Yvonne

doi:10.1007/978-3-031-06773-0_28

Cited by 8 publications

(4 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…2. Sample C2PO specification file using structs (lines 2-3, 12-13), sets (lines 3, 15-16), and set aggregation operators (lines [22][23]. The specification on lines 19-20 captures the English requirement, "The active times for rq0 and rq1 shall differ by no more than 10.0 s," and the specification on lines 22-26 captures the English requirement, "For each request r of each arbiter in ArbSet, r's status shall be GRANT or REJECT within the next 5 s and until then shall be WAITING.…”

Section: New Specification Languagementioning

confidence: 99%

See 1 more Smart Citation

R2U2 Version 3.0: Re-Imagining a Toolchain for Specification, Resource Estimation, and Optimized Observer Generation for Runtime Verification in Hardware and Software

Johannsen

Jones

Kempa

et al. 2023

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

R2U2 is a modular runtime verification framework capable of monitoring sets of specifications in real time and in resource-constrained environments. Such environments demand that a runtime monitor be fast, easily integratable, accessible to domain experts, and have predictable resource requirements. Version 3.0 adds new features to R2U2 and its associated suite of tools that meet these needs including a new front-end compiler that accepts a custom specification language, a GUI for resource estimation, and improvements to R2U2’s internal architecture.

show abstract

Section: New Specification Languagementioning

confidence: 99%

“…JAXA is running R2U2 on a 2021 autonomous satellite mission with a requirement for a provable memory bound of 200KB [30]. R2U2 recently verified a CubeSat communications system [24], an open-source UAS [16], a sounding rocket [15], and a high-altitude balloon [23]. The CySat-I satellite uses R2U2 for autonomous fault recovery [2].…”

mentioning

confidence: 99%

R2U2 Version 3.0: Re-Imagining a Toolchain for Specification, Resource Estimation, and Optimized Observer Generation for Runtime Verification in Hardware and Software

Johannsen

Jones

Kempa

et al. 2023

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

show abstract

“…MLTL can succingly and transparantly capture a wide array of system requirements. For example, see [29] for a collection of specifications used to analyze four real-life, full-scale systems: a high-altitude balloons, a sounding rockets, an unmanned aerial systems (UAS), and a CubeSat. Both, LTL and discrete-time MLTL, assume a synchronous model for arriving data, i.e., all inputs arrive at the same time.…”

Section: A Temporal Propertiesmentioning

confidence: 99%

A Hierarchy of Monitoring Properties for Autonomous Systems

Schirmer

Torens

Dauer

et al. 2023

AIAA SCITECH 2023 Forum

View full text Add to dashboard Cite

Monitoring capabilities play a central role in mitigating safety risks of current, and especially future autonomous aircraft systems. These future systems are likely to include complex components such as neural networks for environment perception, which pose a challenge for current verification approaches; they are considered as black-box components. To assure that these black-boxes comply with their specification, they must be monitored to detect violations during execution with respect to their input and output behaviors. Such behavioral properties often include more complex aspects such as temporal or spatial notions. The outputs can also be compared to data from other assured sensors or components of the aircraft, making monitoring an integral part of the system, which ideally has access to all available resources to assess the overall health of the operation. Current approaches using handwritten code for monitoring functions run the risk of not being able to keep up with these challenges. Therefore, in this paper, we present a hierarchy of monitoring properties that provides a perspective for overall health. We also present a categorization of monitoring properties and show how different monitoring specification languages can be used for formalization. These monitoring languages represent a higher abstraction of general-purpose code and are therefore more compact and easier for a user to write and read, and we can validate their implementations independently from the systems they reason about. They improve the maintainability of monitoring properties that is required to handle the increased complexity of future autonomous aircraft systems.applied monitoring based on specification languages. Next, we present a hierarchy of monitoring properties that ranges from low-level sensor properties to high-level operation properties, giving a holistic perspective on possibilities for system monitoring. Further, we categorize different types of monitoring properties and showcase different monitoring specification languages. Finally, we discuss the advantages and disadvantage of using such formal languages. Related Work: Aerospace RegulationsAviation standards and regulations offer a perspective on target systems that informs their monitoring. For instance, Aerospace Recommended Practice (ARP) 4754A [3] from SAE International is the guidelines document for development of civil aircraft and systems. Additionally, SAE International's ARP4761 [4] provides guidelines for conducting the safety assessment process on civil airborne systems and equipment. The terms used in both documents for developing an aircraft as well as performing a safety assessment on the different process levels are item, system, and aircraft. An item, is one or more hardware and/or software elements treated as a unit. An item is the lowest level of abstraction during development. A system is a combination of inter-related items arranged to perform a specific function. A system therefore represents a higher abstraction level than an item. The aircraft is...

show abstract

“…Our focus on RTLola is motivated by recent work on RTLola-based monitoring for UAS [2,3] and other cyber-physical systems [4,5,11]. However, the approach of the paper is clearly transferrable to other monitoring tools for CPS [22][23][24].…”

Section: Related Workmentioning

confidence: 99%

Real-time Visualization of Stream-based Monitoring Data

Baumeister¹,

Finkbeiner²,

Gumhold³

et al. 2022

Preprint

View full text Add to dashboard Cite

Stream-based runtime monitors are used in safety-critical applications such as Unmanned Aerial Systems (UAS) to compute comprehensive statistics and logical assessments of system health that provide the human operator with critical information in hand-over situations. In such applications, a visual display of the monitoring data can be much more helpful than the textual alerts provided by a more traditional user interface. This visualization requires extensive real-time data processing, which includes the synchronization of data from different streams, filtering and aggregation, and priorization and management of user attention. We present a visualization approach for the RTLola monitoring framework. Our approach is based on the principle that the necessary data processing is the responsibility of the monitor itself, rather than the responsibility of some external visualization tool. We show how the various aspects of the data transformation can be described as RTLola stream equations and linked to the visualization component through a bidirectional synchronous interface. In our experience, this approach leads to highly informative visualizations as well as to understandable and easily maintainable monitoring code.

show abstract

Elucidation and Analysis of Specification Patterns in Aerospace System Telemetry

Cited by 8 publications

References 22 publications

R2U2 Version 3.0: Re-Imagining a Toolchain for Specification, Resource Estimation, and Optimized Observer Generation for Runtime Verification in Hardware and Software

R2U2 Version 3.0: Re-Imagining a Toolchain for Specification, Resource Estimation, and Optimized Observer Generation for Runtime Verification in Hardware and Software

A Hierarchy of Monitoring Properties for Autonomous Systems

Real-time Visualization of Stream-based Monitoring Data

Contact Info

Product

Resources

About