Proceedings of the 5th international conference on Generative programming and component engineering
IEEE Transactions on Software Engineering
Modelling Support for Design of Safety-Critical Automotive Embedded Systems
SAFECOMP '08 Proceedings of the 27th international conference on Computer Safety, Reliability, and Security
SAFECOMP '08 Proceedings of the 27th international conference on Computer Safety, Reliability, and Security
ASE '09 Proceedings of the 2009 IEEE/ACM International Conference on Automated Software Engineering
AdvoCATE: an assurance case automation toolset
SAFECOMP'12 Proceedings of the 2012 international conference on Computer Safety, Reliability, and Security
A lightweight methodology for safety case assembly
SAFECOMP'12 Proceedings of the 31st international conference on Computer Safety, Reliability, and Security
| Hi-index | 0.01 |
Model-based development and automated code generation are increasingly used for actual production code, in particular in mathematical and engineering domains. However, since code generators are typically not qualified, there is no guarantee that their output satisfies the system requirements, or is even safe. Here we present an approach to systematically derive safety cases that argue along the hierarchical structure in model-based development. The safety cases are constructed mechanically using a formal analysis, based on automated theorem proving, of the automatically generated code. The analysis recovers the model structure and component hierarchy from the code, providing independent assurance of both code and model. It identifies how the given system safety requirements are broken down into component requirements, and where they are ultimately established, thus establishing a hierarchy of requirements that is aligned with the hierarchical model structure. The derived safety cases reflect the results of the analysis, and provide a high-level argument that traces the requirements on the model via the inferred model structure to the code. We illustrate our approach on flight code generated from hierarchical Simulink models by Real-Time Workshop.