Code Generation for Safety-Critical Systems – Open Questions and Possible Solutions

Fey, Ines; Stürmer, Ingo

doi:10.4271/2008-01-0385

Cited by 5 publications

(3 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Frey and Stürmer examine the issue of code generation for safety-critical systems in the automotive industry [65]. They refer to such tools as Simulink/Stateflow and real-time workshop embedded coder from The MathWorks that are in widespread use for model-based development.…”

Section: Model-based Development and Tool Qualificationmentioning

confidence: 99%

Certification of software for real-time safety-critical systems: state of the art

Kornecki

Zalewski

2009

Innovations Syst Softw Eng

View full text Add to dashboard Cite

This paper presents an overview and discusses the role of certification in safety-critical computer systems focusing on software, and partially hardware, used in the civil aviation domain. It discusses certification activities according to RTCA DO-178B "Software Considerations in Airborne Systems and Equipment Certification" and touches on tool qualification according to RTCA DO-254 "Design Assurance Guidance for Airborne Electronic Hardware." Specifically, certification issues as related to real-time operating systems and programming languages are reviewed, as well as software development tools and complex electronic hardware tool qualification processes are discussed. Results of an independent industry survey done by the authors are also presented.

show abstract

Section: Model-based Development and Tool Qualificationmentioning

confidence: 99%

Certification of software for real-time safety-critical systems: state of the art

Kornecki

Zalewski

2009

Innovations Syst Softw Eng

View full text Add to dashboard Cite

show abstract

“…Simulink focuses on complex signal processing or data flow models − they lack the support for architecture design aspects. Code generation from Simulink is possible [11] but an ability to include (reference) all other developments artifacts, as mentioned before, is still missing. On the other side, architectural design is a benefit of the UML (Unified Modeling Language) [12] or special profiles like the EAST-ADL (Architecture Description Language) [13] or the SysML (Systems Modeling Language) [14].…”

Section: Introductionmentioning

confidence: 99%

An Integrative Approach for Embedded Software Design with UML and Simulink

Farkas

Neumann

Hinnerichs

2009

2009 33rd Annual IEEE International Computer Software and Applications Conference

View full text Add to dashboard Cite

The increased amount of software in automotive embedded systems has challenged its C code development to successfully manage software design, reuse, flexibility and efficient implementation. Modelbased methods help to address such challenges with more abstract specification, code generation and simulation to determine if software design will meet requirements. However, in today's development processes lots of different legacy artifacts are involved, that hamper a frictionless migration from C code to model-based design. Therefore, migration concepts and adequate domain-specific methods with adoption of modeling languages and their tools in established embedded coding environments are needed. In our approach we present a novel migration concept considering the integration of two different modeling languages UML and Simulink in a traditional automotive software engineering process. The proof is demonstrated within the software development of a real automotive car door-controller ECU.

show abstract

“…Not surprisingly, this imposes several challenges on the code-generating tools that exploit commercial compilers to provide the means for designers to tailor the code generator to a specific compiler suite. Note that the correctness of the generated code should not be compromised by excessive optimizations, and code-generator vendors should consider mechanisms 3,4 to ensure that. Returning to the PIL test, the resulting object code links with other test-management functionality and is then downloaded, typically to an off-the-shelf evaluation board of the target processor.…”

Section: Processor-in-the-loopmentioning

confidence: 99%