A configurable V&amp;V framework using formal behavioral patterns for OSEK/VDX operating systems

2020

IEEE Access

Self Cite

As the behavior of multitasking embedded software is dependent on the underlying operating system(s), rigorous and efficient verification in this domain requires models of operating systems (OS) that enable OS-aware verification of application programs at reduced cost. However, the heterogeneity of the languages used for OS models and of the program source code makes it difficult to compose these seemingly independent components and thus requires translation of one language into another, causing various issues in verification. To alleviate this problem, we propose a hybrid approach that composes formal OS models with application programs in an interaction model. Based on typical OS-application interaction behavior, our interaction model is a composition framework that connects an OS model to application programs as long as they share the same Application Program Interface (API). It provides seamless composition of two heterogeneous software artifacts by formulating source code annotations based on control-flow analysis and by synchronizing state transitions over API function calls to regulate the context switching of multitasking programs. A prototype implementation of the interaction model was applied to eight benchmark programs of the Erika OS and a control program with real-scale complexity from the automotive domain. It was shown that the framework supports systematic and effective verification of multitasking embedded software, which has not been possible using code-level model checking. INDEX TERMS Embedded software, multi-tasking, heterogeneous composition, model checking

Section: Implementation Of a Prototype Toolmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

mentioning

confidence: 99%

See 2 more Smart Citations

OS-Aware Interaction Model for the Verification of Multitasking Embedded Software

2020

IEEE Access

Self Cite

“…Motivated by failure cases identified from our previous case studies [4], [6], we have developed a prototype toolset AutoCheck FP based on a pattern-based model generation framework [9]. Figure 2 is an overview of the toolset.…”

Section: Motivation and Approachmentioning

confidence: 99%

A Toolset for Validation and Verification of Automotive Control Software Using Formal Patterns

IEICE Trans. Inf. & Syst.

Kim

2017

Self Cite

An automotive control system is a typical safety-critical embedded software, which requires extensive verification and validation (V&V) activities. This article introduces a toolset for automated V&V of automotive control system, including a test generator for automotive operating systems, a task simulator for validating task design of control software, and an API-call constraint checker to check emergent properties when composing control software with its underlying operating system. To the best of our knowledge, it is the first integrated toolset that supports V&V activities for both control software and operating systems in the same framework.

OS‐in‐the‐Loop verification for multi‐tasking control software

Software Testing Verif & Rel

2022

Self Cite

Embedded control software that controls safety-critical IoT devices requires systematic and comprehensive verification to ensure safe operation of the device. However, rigorous verification in this domain has not been feasible due to the high complexity of embedded control software, which is characterized by the frequent use of multi-tasking, interrupts, and periodic alarms. Realizing that two major factors, scalability and exactness, are extremely difficult to achieve at the same time but critical for effective and efficient verification in this domain, this work introduces a domain-specific compositional OSin-the-Loop (OiL) verification approach and sets out to push the boundary in achieving both factors. The suggested approach (1) models the behavior of the underlying operating system to limit the search space using the notion of controlled concurrency, (2) performs heterogeneous composition of controllers with the formal OS model to reduce verification complexity, and (3) utilizes state-of-the-art verification techniques for the purpose of comprehensive verification up to a given search depth. K E Y W O R D S heterogeneous composition, model checking, multi-tasking, OS-in-the-Loop