FTOS: Model-driven development of fault-tolerant automation systems

Buckl, Christian; Sojer, Dominik; Knoll, Alois

doi:10.1109/etfa.2010.5641211

Cited by 12 publications

(10 citation statements)

References 15 publications

(25 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…There are a number of developing model-based dependability analysis techniques that are aiming at specification and automated analysis of EEA dependability. FTOS [6] is a tool for synthesis of fault-tolerant real-time systems. It provides a system engineering approach which allows (under an assumption of model correctness) generation of source code for real-time systems.…”

Section: Related Workmentioning

confidence: 99%

Early safety evaluation of design decisions in E/E architecture according to ISO 26262

Rupanov¹,

Buckl

Fiege

et al. 2012

Proceedings of the 3rd International ACM SIGSOFT Symposium on Architecting Critical Systems

View full text Add to dashboard Cite

ISO 26262 addresses development of safe in-vehicle functions by specifying methods potentially used in the design and development lifecycle. It does not indicate what is sufficient and leaves room for interpretation. However, the architects of electric/electronic systems need design boundaries to make decisions during architecture evolution without adding a risk of late architectural changes. Designing and changing a system benefits from correct selection of safety mechanisms at early design stages. This paper presents an iterative architecture design and refinement process that is centered around ISO 26262 requirements. We propose a domain-specific modeling scheme and component repositories to build up a bottom-up analysis framework that allows early quantitative safety evaluation. To guarantee that the target ASIL level can be reached, we complement our designtime component-level analysis with conservative top-down analysis. Given that analysis starts at early design stages, evolution of the architecture is supported by different levels of detail used in the analysis framework.

show abstract

Section: Related Workmentioning

confidence: 99%

Early safety evaluation of design decisions in E/E architecture according to ISO 26262

Rupanov¹,

Buckl

Fiege

et al. 2012

Proceedings of the 3rd International ACM SIGSOFT Symposium on Architecting Critical Systems

View full text Add to dashboard Cite

show abstract

“…Many works such as [10,11] have been proposed to model and assess the dependability of CPS, in the context of MBSE. But few [12] have been targeted at enhancing the dependability at the design time by incorporating fault tolerance mechanisms, in particular in an automated manner. The Authors of [12] proposed a model-based design framework for fault-tolerant automation systems.…”

Section: Motivationmentioning

confidence: 99%

“…But few [12] have been targeted at enhancing the dependability at the design time by incorporating fault tolerance mechanisms, in particular in an automated manner. The Authors of [12] proposed a model-based design framework for fault-tolerant automation systems. But it mainly focused on code generation.…”

Section: Motivationmentioning

confidence: 99%

Automated fault tolerance augmentation in model-driven engineering for CPS

Bertolotti

Navet

et al. 2020

Computer Standards & Interfaces

View full text Add to dashboard Cite

Cyber-Physical Systems are usually subject to dependability requirements such as safety and reliability constraints. Over the last 50 years, a body of efficient fault-tolerance mechanisms has been devised to handle faults occurring at run-time. However, properly implementing those mechanisms is a time-consuming task that requires a great deal of know-how. In this paper, we propose a general framework which allows system designers to decouple functional and non-functional concerns, and express nonfunctional properties at design time using domain-specific languages. In the spirit of generative programming, functional models are then automatically "augmented" with dependability mechanisms. Importantly, the real-time behavior of the initial models in terms of sampling times and meeting deadlines is preserved. The practicality of the approach is demonstrated with the automated implementation of one prominent software fault-tolerance pattern, namely N-Version Programming, in the CPAL model-driven engineering workflow.

show abstract

“…UML [9] and SysML [10]), the Architecture Analysis and Design Language (AADL) [11], the Fault-Tolerant Operating System (FTOS) [12], and the Executable Time-Triggered Model (E-TTM) [13].…”

Section: Related Workmentioning

confidence: 99%

A novel modeling framework for time-triggered safety-critical embedded systems

Ayestaran

Nicolás

Pérez

et al. 2014

Proceedings of the 2014 Forum on Specification and Design Languages (FDL)

View full text Add to dashboard Cite

This paper presents the Platform Specific Time Triggered Model (PS-TTM), a SystemC based modeling and simulation framework for time-triggered safety-critical embedded systems. The approach facilitates the modeling of Time-Triggered Architecture (TTA) based embedded systems, following a strict separation between the designs of functionality and platform. The PS-TTM provides a value and time domain deterministic simulation environment for an early functional and temporal assessment of the systems. Moreover, the framework includes a time-triggered automatic test executor that enables to perform non-intrusive simulated fault injection (SFI) to the models. The SFI makes an early dependability assessment possible, what reduces the risk of late and expensive discovery of safety related pitfalls. The feasibility of the proposed framework is illustrated with a case study, based on the modeling, simulation and validation of a simplified railway on-board signaling system.

show abstract

FTOS: Model-driven development of fault-tolerant automation systems

Cited by 12 publications

References 15 publications

Early safety evaluation of design decisions in E/E architecture according to ISO 26262

Early safety evaluation of design decisions in E/E architecture according to ISO 26262

Automated fault tolerance augmentation in model-driven engineering for CPS

A novel modeling framework for time-triggered safety-critical embedded systems

Contact Info

Product

Resources

About