From Design to Implementation: an Automated, Credible Autocoding Chain for Control Systems

Wang, Yichen; Jobredeaux, Romain; Herencia, Heber; Garoche, Pierre-Löıc; Dieumegard, Arnaud; Féron, Éric; Pantel, Marc

doi:10.48550/arxiv.1307.2641

Cited by 3 publications

(9 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In this paper, we present an automated process of applying control-theoretic techniques towards the verification of observer-based fault detection software. We extend our previous works [15], [16], [17], [1] for controller systems to fault detection systems. The idea of using domain-specific knowledge in software verification is not new.…”

Section: Introductionmentioning

confidence: 69%

“…The code annotations in the two examples are expressed in the ANSI C Specification Language (ACSL) 1 . In the latter sections, the autocoded fault detection semantics are also expressed in ACSL.…”

Section: Credible Autocodingmentioning

confidence: 99%

“…In [1], a backend to the prototype autocoder is developed. It takes as input the annotated C code generated by the autocoder and outputs a certificate of validity in the form of proofs of correctness for the annotations.…”

Section: Automatic Verificationmentioning

confidence: 99%

See 2 more Smart Citations

Credible autocoding of fault detection observers

Wang

Ashari

Jobredeaux

et al. 2014

2014 American Control Conference

View full text Add to dashboard Cite

In this paper, we present a domain specific process to assist the verification of observer-based fault detection software. Observer-based fault detection systems, like control systems, yield invariant properties of quadratic types. These quadratic invariants express both safety properties of the software such as the boundedness of the states and correctness properties such as the absence of false alarms from the fault detector. We seek to leverage these quadratic invariants, in an automated fashion, for the formal verification of the fault detection software. The approach, referred to as the credible autocoding framework [1], can be characterized as autocoding with proofs. The process starts with the fault detector model, along with its safety and correctness properties, all expressed formally in a synchronous modeling environment such as Simulink. The model is then transformed by a prototype credible autocoder into both code and analyzable annotations for the code. We demonstrate the credible autocoding process on a running example of an output observer fault detector for a 3 degree-of-freedom (3DOF) helicopter control system.

show abstract

Section: Introductionmentioning

confidence: 69%

Section: Credible Autocodingmentioning

confidence: 99%

See 1 more Smart Citation

Credible autocoding of fault detection observers

Wang

Ashari

Jobredeaux

et al. 2014

2014 American Control Conference

View full text Add to dashboard Cite

show abstract

“…For a good introduction on the control stability proofs and code analysis, one can refer to [?]. For more details on the automated framework and the prototype implementation, one can refer to [8].…”

Section: Autocoding With Control Semanticsmentioning

confidence: 99%

“…This work follows [2] that first described the idea of leveraging control domain proofs for code analysis and [7] [3] [8], which are later efforts in creating an automated framework that can perform such leveraging on real case studies.…”

Section: Introductionmentioning

confidence: 99%

Automated, Credible Autocoding of An Unmanned Aggressive Maneuvering Car Controller

Wang,

Feron

2013

Preprint

Self Cite

View full text Add to dashboard Cite

This article describes the potential application of a credible autocoding framework for control systems towards a nonlinear car controller example. The framework generates code, along with guarantees of high level functional properties about the code that can be independently verified. These high-level functional properties not only serves as a certificate of good system behvaior but also can be used to guarantee the absence of runtime errors. In one of our previous works, we have constructed a prototype autocoder with proofs that demonstrates this framework in a fully automatic fashion for linear and quasi-nonlinear controllers. With the nonlinear car example, we propose to further extend the prototype's dataflow annotation language environment with with several new annotation symbols to enable the expression of general predicates and dynamical systems. We demonstrate manually how the new extensions to the prototype autocoder work on the car controller using the output language Matlab. Finally, we discuss the requirements and scalability issues of the automatic analysis and verification of the documented output code.

show abstract

Towards a New Paradigm of UAV Safety

Afman,

Ciarletta,

Feron

et al. 2018

Preprint

Self Cite

View full text Add to dashboard Cite

With the rising popularity of UAVs in the civilian world, we are currently witnessing and paradim shift in terms of operational safety of flying vehicles. Safe and ubiquitous human-system interaction shall remain the core requirement but those prescribed in general aviation are not adapted for UAVs. Yet we believe it is possible to leverage the specific aspects of unmanned aviation to meet acceptable safety requirements. We start this paper with by discussing the new operational context of civilian UAVs. We investigate the meaning of safety in light of this new context, keeping in mind the operational and economical constraints. Next, we explore the different approaches to ensuring system safety from an avionics point of view. It mostly consists in lowering failure occurrences and managing/leveraging them. Formal verification, redundancy and fault tolerant control are discussed and weighted against the high cost of current methods used in commercial aviation. Subsets of operational requirements such as geofencing or mechanical systems for termination or impact limitation can easily be implemented. These are presented with the goal of limiting the collateral damages of a system failure. We then present some experimental results regarding two of the major problems with UAVs. With actual impacts, we demonstrate how dangerous uncontrolled crashes can be. Furthermore, with the large number of runaway drone experiences during civilian operations, the risk is even higher as they can travel a long way before crashing. We provide data on such a case where the software controller is working, keeping the UAV in the air, but the operator is unable to actually control the system. It should be terminated! Finally, after having analyzed the context and some actual solutions, based on a minimal set of requirement and our own experience, we are proposing a simple mechanical based safety system. It unequivocally terminates the flight in the most efficient way. Our Active Cutting System instantly removes parts of the propellers leaving a minimal lifting surface. It takes advantage of what controllability may remain but with a deterministic ending: a definite landing.

show abstract

From Design to Implementation: an Automated, Credible Autocoding Chain for Control Systems

Cited by 3 publications

References 0 publications

Credible autocoding of fault detection observers

Credible autocoding of fault detection observers

Automated, Credible Autocoding of An Unmanned Aggressive Maneuvering Car Controller

Towards a New Paradigm of UAV Safety

Contact Info

Product

Resources

About