(User-friendly) formal requirements verification in the context of ISO26262

Makartetskiy, Denis; Marchetto, Guido; Sisto, Riccardo; Valenza, Fulvio; Virgilio, Matteo; Leri, Denise; Denti, Paolo; Finizio, R

doi:10.1016/j.jestch.2019.09.005

Cited by 4 publications

(4 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…We proposed an approach that exploits behavioral conformance testing to automatically generate, from a formal model and test purposes, scenarios in the form of behavior trees for the Our approach makes possible the formalization (as test purposes) of safety requirements defined in standards, such as ISO 26262, and the generation of test cases, similarly to [17]. The test cases can be used both for producing simulation scenarios (as we illustrated here) and for assessing the correct functioning of AVs in their environment.…”

Section: Discussionmentioning

confidence: 99%

Using Formal Conformance Testing to Generate Scenarios for Autonomous Vehicles

Horel

Laugier

Marsso

et al. 2022

2022 Design, Automation &Amp; Test in Europe Conference &Amp; Exhibition (DATE)

View full text Add to dashboard Cite

Simulation, a common practice to evaluate autonomous vehicles, requires to specify realistic scenarios, in particular critical ones, occurring rarely and potentially dangerous to reproduce on the road. Such scenarios may be either generated randomly, or specified manually. Randomly generating scenarios is easy, but their relevance might be difficult to assess. Manually specified scenarios can focus on a given feature, but their design might be difficult and time-consuming, especially to achieve satisfactory coverage. In this work, we propose an automatic approach to generate a large number of relevant critical scenarios for autonomous driving simulators. The approach is based on the generation of behavioral conformance tests from a formal model (specifying the ground truth configuration with the range of vehicle behaviors) and a test purpose (specifying the critical feature to focus on). The obtained abstract test cases cover, by construction, all possible executions exercising a given feature, and can be automatically translated into the inputs of autonomous driving simulators. We illustrate our approach by generating thousands of behavior trees for the CARLA simulator for several realistic configurations.

show abstract

Section: Discussionmentioning

confidence: 99%

Using Formal Conformance Testing to Generate Scenarios for Autonomous Vehicles

Horel

Laugier

Marsso

et al. 2022

2022 Design, Automation &Amp; Test in Europe Conference &Amp; Exhibition (DATE)

View full text Add to dashboard Cite

show abstract

“…In this section, we fulfil the goal of extending safety verification to the level of simulation to provide evidence that the system goals are satisfied during operation (Makartetskiy, 2019). We are interested in exploring the impact of the adaptability on the Quality of Service (QoS) with a large number of vehicles.…”

Section: Experimental Validationmentioning

confidence: 99%

Combining Semi-formal and Formal Methods for Safety Control in Autonomous Mobility-on-Demand Systems

Naija

Khemiri

Expósito

2020

Proceedings of the 15th International Conference on Evaluation of Novel Approaches to Software Engineering

View full text Add to dashboard Cite

Ensuring the safety control of Autonomous Mobility-on-Demand systems is one of the biggest challenges facing designers to successful deployment. The addition of adaptability to such systems further hardens and delays modelling and validating phase, especially due to the current lack of design models and tools. The formal methods have proven to be useful for making the development process reliable at early design stages. Based on this approach, this paper proposes a mixed process to specify, design and verify safety requirements in adaptive AMoD Systems. This process provides analytical proofs of safety requirements during the design stage of a system when changes are cheap. This contribution deals with combining the UML MARTE profile for modelling the workload behaviour of the system and the formalism Net Condition Event System for consistency validation of safety properties. To verify the effectiveness of our proposal, several formal analyses are carried out using the model checker SESA. The evaluation of the proposed architecture, simulated by the Sumo software, proves the impact of the number of autonomous vehicles on the global performance and the intended quality of service (QoS) in the framework of the TORNADO project.

show abstract

“…A wrong determination of the ASIL can result in a system where the residual risk is high in case of system failure, thus not meeting the established metrics for an acceptable risk reduction or that the system is oversized. And other consequences related to unnecessary costs and a longer development time, since requirements generated in this phase will demand verification and validation tests following the development model in V [6].…”

Section: Introductionmentioning

confidence: 99%

“…Uma determinação equivocada do ASIL pode acarretar em um sistema onde o risco residual seja elevado em caso de falha do sistema, não atendendo assim as métricas estabelecidas ou que o sistema esteja superdimencionado. E outras consequências em custos desnecessários e um maior tempo de desenvolvimento quando superestimado, uma vez que requisitos gerados nesta fase demandarão testes de verificação e validação seguindo o modelo de desenvolvimento em V [6].…”

Section: Introductionunclassified

Classificação de exposição a cenários de risco de acordo com a ISO 26262: proposta baseadas em dados de veículos conectados

OLIVEIRA,

SANTOS,

FERNANDES

et al. 2023

Blucher Engineering Proceedings

View full text Add to dashboard Cite

Nowadays, with the growth of embedded electronics in automotive vehicles comes the increase in the complexity of automotive applications, taking control of vehicle functionalities autonomously. These functionalities need to maintain their performance even in case of failure or ensure the transition of the system to a safe state according to ISO 26262.ISO 26262 provides guidelines that cover the development and entire lifecycle of the vehicle and is based on an initial assessment that determines the risks associated with unwanted behavior of the system in case of failure. This risk assessment is based on scenarios for further classification based on the severity of the risk event, the user's controllability in avoiding damage in case of failure and the likelihood of exposure to these scenarios.The work proposes a methodology for determining the probability of Exposure to risk scenarios in an objective and alternative way to traditional methods of subjective analysis, which consists of models that use signals from sensors and actuators of connected vehicles to meet the standard that must be based on a representative sample of situations for the target markets for which the vehicle will be developed.

show abstract

(User-friendly) formal requirements verification in the context of ISO26262

Cited by 4 publications

References 15 publications

Using Formal Conformance Testing to Generate Scenarios for Autonomous Vehicles

Using Formal Conformance Testing to Generate Scenarios for Autonomous Vehicles

Combining Semi-formal and Formal Methods for Safety Control in Autonomous Mobility-on-Demand Systems

Classificação de exposição a cenários de risco de acordo com a ISO 26262: proposta baseadas em dados de veículos conectados

Contact Info

Product

Resources

About