The Metrô Rio ATP Case Study

Ferrari, Alessio; Grasso, Daniele; Magnani, Gianluca; Fantechi, Alessandro; Tempestini, Matteo

doi:10.1007/978-3-642-15898-8_1

Cited by 11 publications

(10 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In order to satisfy ϕ 2 , we try to falsify its negation ¬ϕ 2 . The results are shown in Table ( 1). The improvement in finding falsifying trajectories is clear from the total number of falsifications in the first row.…”

Section: Algorithm 1 Robustness Gradient Descent Algorithmmentioning

confidence: 92%

Local Descent for Temporal Logic Falsification of Cyber-Physical Systems

Yaghoubi

Fainekos

2019

Cyber Physical Systems. Design, Modeling, and Evaluation

View full text Add to dashboard Cite

One way to analyze Cyber-Physical Systems is by modeling them as hybrid automata. Since reachability analysis for hybrid nonlinear automata is a very challenging and computationally expensive problem, in practice, engineers try to solve the requirements falsification problem. In one method, the falsification problem is solved by minimizing a robustness metric induced by the requirements. This optimization problem is usually a non-convex non-smooth problem that requires heuristic and analytical guidance to be solved. In this paper, functional gradient descent for hybrid systems is utilized for locally decreasing the robustness metric. The local descent method is combined with Simulated Annealing as a global optimization method to search for unsafe behaviors.

show abstract

Section: Algorithm 1 Robustness Gradient Descent Algorithmmentioning

confidence: 92%

Local Descent for Temporal Logic Falsification of Cyber-Physical Systems

Yaghoubi

Fainekos

2019

Cyber Physical Systems. Design, Modeling, and Evaluation

View full text Add to dashboard Cite

show abstract

“…One example from the railway signalling domain is the model based development cycle defined at General Electric Transportation Systems (GETS) within a collaboration with the University of Florence [4,14]. The production process for Automatic Train Protection (ATP) Systems is based on modeling by means of Simulink/Stateflow descriptions.…”

Section: Model Checking Within Model Based Designmentioning

confidence: 99%

On the Adoption of Model Checking in Safety-Related Software Industry

Fantechi

Gnesi

2011

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

Abstract. In the last fifteen years, model checking has been applied successfully in the design and verification of many safety related software systems. However, it is not yet routinely adopted in the industry of safety-critical systems. In this paper we introduce the model checking technique and its relations to safety; then we survey the sensible areas of research related to the current and potential industrial application of this technique, exploring the current trends, that in our opinion will bring to a wider adoption of model checking in the next years.

show abstract

“…In safety related railway signalling equipments, human machine interface (HMI) to safety critical software is kept to a minimum, to address safety concerns, employing a direct correspondence between the HMI elements and a state-based model of the interaction with humans [8]. In these conditions, test cases for the HMI are derived by the computation paths of the underlying state model.…”

Section: Introductionmentioning

confidence: 99%

A GUI Testability Problem: A Case Study in the Railway Signaling Domain

Bonacchi

Fantechi

Bacherini³

et al. 2012

2012 Eighth International Conference on the Quality of Information and Communications Technology

Self Cite

View full text Add to dashboard Cite

We report the experience of the validation team of a railway signalling company when addressing the problem of testing an equipment configuration tool. The two contrasting issues that add to the complexity of the task are: the tool includes a Graphical User Interface built on standard windowing systems, and the configuration produced by the tool, when loaded on the equipment, has a potential impact on the safety of the overall signalling system. This has required a particular care in the choice of testing techniques and of test case selection strategies, however confronting with actual cost and feasibility constraints.

show abstract

The Metrô Rio ATP Case Study

Cited by 11 publications

References 10 publications

Local Descent for Temporal Logic Falsification of Cyber-Physical Systems

Local Descent for Temporal Logic Falsification of Cyber-Physical Systems

On the Adoption of Model Checking in Safety-Related Software Industry

A GUI Testability Problem: A Case Study in the Railway Signaling Domain

Contact Info

Product

Resources

About