Formal Verification of Synchronous Models: An Industrial Application ...

More documents

Recommendations

Info

Example 2ADGS-2100 Adaptive Display & Guidance System4,295 Subsystems16,117 Simulink BlocksOver 10 37 Reachable StatesExample Requirement:Drive the Maximum Number of Display UnitsGiven the Available Graphics ProcessorsCounterexample Found in 5 Seconds!Checking 573 Properties -Found 98 Errors!© 2006 Rockwell Collins, Inc. All rights reserved.36
Example 3 – LM Aero UAV Sensor VotingOFP Triplex Voter•96 Simulink Subsystems• 3 Stateflow Diagrams•6x10 13 Reachable States1syncsync2input_a3input_b4input_c5status_a6status_b7status_c8dst_index[trigger][A][B][C][status_a][status_b][status_c][DSTi][trigger][A][B][DSTi]DSTData StoreReadIndexVectorinput_ainput_bExtract Bits u16[0 3]f ailreportfailreport[MS][status_a][status_b][status_c][prev_sel][A][B][C]mon_f ailure_reportstatus_astatus_bstatus_cf ailure_reportprev_selinput_ainput_binput_c[DSTi]f ailure_reportdst_indexFailure_ProcessingFormal Verification• 25 Informal Requirements• 57 Formal Properties• 40 Minutes to AnalyzeDOCText[C]trip_leveltrip_level1persist_limpersist_limpersistence limit[MS]totalizer_limpersistence limit1trip_levelinput_ctrip_levelpersist_limMStotalizer_limtriplex_input_monitorpctcpersistence_cnt3totalizer_cnttotalizer_cnt2persistence_cnt[trigger][A][B][C][DSTi]Failure_Isolationpctriggerinput_ainput_selinput_binput_cDST_indextriplex_input_selectorResulting In• 24 Counterexamples• 10 Design Modifications• Several Requirements Clarifications1failure_report4input_sel1zUnit Delay[prev_sel]Formal verification has found subtle errors thatwould likely be missed by traditional testing.© 2006 Rockwell Collins, Inc. All rights reserved.- Lockheed Martin37
Page 1 and 2: Formal Verification of Synchronous
Page 3 and 4: What Problem are We Solving?• Saf
Page 5 and 6: Who Are We?A World Leader In Aviati
Page 7 and 8: RCI Advanced Technology CenterComme
Page 9 and 10: Methods and Tools for Flight Critic
Page 11 and 12: Model-Based Development ExamplesCom
Page 13 and 14: Outline of PresentationIntroduction
Page 15 and 16: Captured Requirements as Shalls© 2
Page 17 and 18: Textual (Lustre, PVS, SAL, …)node
Page 19 and 20: Simulation© 2006 Rockwell Collins,
Page 21 and 22: What Are Model Checkers?• Breakth
Page 23 and 24: ModelModel Checking ProcessAutomati
Page 25 and 26: Validate Requirements through Model
Page 27 and 28: ModelTheorem Proving Using PVSAutom
Page 29 and 30: Outline of PresentationIntroduction
Page 31 and 32: Conversion to SCADESCADENuSMVLustre
Page 33 and 34: Current Tool ChainSimulinkSimulinkG
Page 35: Example 1FCS 5000 Mode LogicMode Co
Page 39 and 40: Extending the Verification Domain
Page 41 and 42: System Architectural Modeling & Ana
Page 43 and 44: Conclusions• Model-Based Developm

Formal Verification of Synchronous Models: An Industrial Application ...

Create successful ePaper yourself

Delete template?

Save as template?