Practical Use of Formal Verification for Safety Critical Cyber-Physical Systems: A Case Study

Ishigooka, Tasuku; Saissi, Habib; Piper, Thorsten; Winter, Stefan; Suri, Neeraj

doi:10.1109/cpsna.2014.20

Cited by 7 publications

(3 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…To specify the functionality of automotive systems, often scenario models are used at the type-level to validate their correct and adequate behavior. Yet, as cars functionally collaborate with other automotive CPS, validating functionality is no longer a concern of the individual system, but concerns the collaborative network composed of several systems (see [5][6][7][8]). This is especially the case when functional inadequacies (in the following "defects") only occur in certain runtime interactions, e.g., when at least two systems of a certain type interact with one another (like in the traffic jam resolution example above).…”

Section: Introductionmentioning

confidence: 99%

Multi-Level Message Sequence Charts to Validate the Collaborative Automotive Cyber-Physical Systems

Daun¹,

Tenbergen²,

Brings³

et al. 2021

JASEN

View full text Add to dashboard Cite

Autonomous driving and e-mobility are swiftly becoming not only the work of science fiction or popular science, but a reality.A key focus of manufacturers and suppliers in the automotive domain is of course to specify systems that implement this reality. Often, scenarios at type-level are used throughout the development process to specify system behavior and interaction within the car, as scenario models are comparatively easy to understand and can easily be subjected to manual validation. However, autonomous driving and e-mobility require interaction not just of systems within the same car, but collaboration between multiple cars as well as between cars and miscellaneous road infrastructure (e.g., smart road signs). The car becomes a Cyber-Physical System that dynamically forms collaborating networks at runtime with other Cyber-Physical System to create functionality that goes beyond the scope of the individual vehicle (e.g., resolve a traffic jam). Consequently, a plethora of possible compositions of such a network exist and must be specified and validated completely to assure their adequate and safe execution at runtime. Doing this at type-level with scenario models becomes prohibitively tedious, error prone, and likely results in unrealistic development cost. To combat this issue, we investigate the use of multi-level Message Sequence Charts to allow for specifying interaction scenarios between collaborative Cyber-Physical System in a network of collaborating automotive Cyber-Physical System. To assist the developer in systematically defining multi-level Message Sequence Charts, we propose two processes. The resulting diagrams use a mixture of type and instance-level abstractions within one conceptual diagram. This allows reducing the required effort to manually validate the adequacy of scenarios to a manageable amount because information within the scenarios can be validated in batches. At the same time, instance-level defects become more obvious. Evaluation results from a controlled experiment show that multi-level Message Sequence Charts contribute to effectiveness and efficiency of manual validation for collaborative automotive Cyber-Physical System.

show abstract

Section: Introductionmentioning

confidence: 99%

Multi-Level Message Sequence Charts to Validate the Collaborative Automotive Cyber-Physical Systems

Daun¹,

Tenbergen²,

Brings³

et al. 2021

JASEN

View full text Add to dashboard Cite

show abstract

“…Request permissions from permissions@acm.org. ESEC/FSE'17, September 4-8, 2017 To cope with the intrinsically limited scope of testing, static program analysis can be exploited to formally verify if a given software (e.g., a modified program) satisfies a set of correctness properties [1,9,13]. While static analysis can prove that some properties hold, its practical applicability is limited by the need of specifying the correctness properties that must be checked.…”

Section: Introductionmentioning

confidence: 99%

VART: a tool for the automatic detection of regression faults

Pastore

Mariani

2017

Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering

View full text Add to dashboard Cite

In this paper we present VART, a tool for automatically revealing regression faults missed by regression test suites. Interestingly, VART is not limited to faults causing crashing or exceptions, but can reveal faults that cause the violation of application-specific correctness properties. VART achieves this goal by combining static and dynamic program analysis. CCS CONCEPTS• Software and its engineering → Software verification and validation; KEYWORDSRegression testing, dynamic analysis, static analysis.

show abstract

“…This paper is based on Refs. [12], [13] and is organized as follows: In Section 2, we provide a background. Section 3 describes our proposed verification process and methods.…”

Section: Introductionmentioning

confidence: 99%

Safety Verification Utilizing Model-based Development for Safety Critical Cyber-Physical Systems

Ishigooka

Saissi

Piper

et al. 2017

Journal of Information Processing

Self Cite

View full text Add to dashboard Cite

Abstract:The application of cyber-physical systems (CPSs) in safety-critical application domain requires rigorous verification of their functional correctness and safety-relevant properties. We propose a practical verification process which enables to conduct safety verification of safety critical CPSs. The verification process consists of (a) a system model construction method, which generates a system model by combining software described in C and plant model code reused from model-based development, (b) a model transformation method, which transforms the plant models including differential algebraic equations (DAE) to approximate models without DAE to reduce verification complexity induced by DAE solver execution, (c) a model simplification framework, which enables the simplification of bond-graph plant models using domain-knowledge-based replacement of complex model components for further verification overhead reductions, and (d) a formal verification based on symbolic execution. We implemented the proposed methods and framework, and successfully applied the proposed verification process for safety verification of automotive brake control systems. The results of the study demonstrate that the verification detects a complex failure condition in a real-world brake control system from the generated system model and that the automated model transformations of the CPS models yield significant verification complexity reductions without impairing the ability to detect unsafe behavior.

show abstract

Practical Use of Formal Verification for Safety Critical Cyber-Physical Systems: A Case Study

Cited by 7 publications

References 9 publications

Multi-Level Message Sequence Charts to Validate the Collaborative Automotive Cyber-Physical Systems

Multi-Level Message Sequence Charts to Validate the Collaborative Automotive Cyber-Physical Systems

VART: a tool for the automatic detection of regression faults

Safety Verification Utilizing Model-based Development for Safety Critical Cyber-Physical Systems

Contact Info

Product

Resources

About