From SysML to Model Checkers via Model Transformation

Abstract

Abstract. In this paper we present an automated translation from the systems engineering modeling language SysML into the input languages of the NuSMV, Prism and Spin model checkers. A special focus of this work is the semantics of the communication mechanisms used in a syntactic fragment of SysML, in particular synchronous and asynchronous, broadcast and buffered communication. In order to achieve generality of our approach, which supports establishing the consistency of the translation as well as enabling easy adaption between different source and target languages, we use a model based transformation approach. In particular, we use the ATLAS Transformation Language (ATL) framework that is nicely integrated in the Eclipse Modeling Framework (EMF) and in the Meta-Object Facility. We illustrate the application of this model transformation approach using an airbag system as a case study.

System verification via Model‐Checking: A case study of an autonomous multi‐differential drive robot

“…The first perspective implements a "systematic, modular and direct translation" of SysML models to the input language of a target analysis tool, such as in Clarke & Heinle (2000). The other thought group approaches the transformation of the SysML model into the analysis tool by building an intermediate model, which is a recreation of the system model structure while using transformation tools to translate the intermediate model to/from the modeling and analysis tools (Caltais, et al, 2016;Kölbl, et al, 2018). Studies like Pétin et al ( 2010) have utilized both SysML models and formal methods such as model checking in verifying safety requirements for safety-critical systems.…”

“…The first step involved the automatic transformation of SysML models into an intermediate model, while the second step helped transform the intermediate model into NuSMV using the SysMV-Ja tool. Kölbl et al (2018) proposed an automated translation from SysML to the input languages of three model checkers (NuSMV, Prism, and SPIN) with the transformation approach of the work based on the semantics of the synchronous and asynchronous communication mechanisms used in SysML. Established methods for formal verification are generally classified into model checking and theorem proving, with model checking more common due to its ease of automation.…”

“…Since this work aims to use model checking to verify properties against SysML models, there is a need to consider how to specify the desired type of properties in We express specifications in SysML through requirement diagrams which can be further distilled into invariants to specify the formalism needed by the model checker. An invariant is an expression that has to evaluate to true and consists of a composition of boolean conditions about states and variable values inside of a block before and after each execution step (Kölbl, et al, 2018). Also, invariants can be specified using the Object Constraint Language (OCL) (OMG, 2014), a formalism defined to specify logical constraints on the SysML model.…”

Automated fault tolerance augmentation in model-driven engineering for CPS

“…In other cases, MT has been seen as a way of translating a model from one language to another, but without augmenting it in any way [28]. Generally, the goal is to exploit the capability of other modeling languages or their toolkits to perform specialized tasks, for instance model checking [29]. Instead, a key point of the work presented here is its ability to augment a model with automatically generated code to meet user-specified dependability properties.…”

Correctness of an ATL Model Transformation from SysML State Machine Diagrams to Promela

“…Contributions of this Paper. Related work documented in (Kölbl et al, 2018) has considered an ATL-based translation from SysML into the input language of various model checking tools, including Promela (Holzmann, 2004), the input language of the widely popular SPIN explicit state model checker. The approach taken there defines ATL rules to translate SysML into an intermediate model, and then uses a hand-coded code generator for the translation from the intermediate model to Promela.…”