Formal specification and analysis of AFDX redundancy management algorithms

Authors:
Jan Täubrich;Reinhard Von Hanxleden
Affiliations:
Philips Medical Systems DMC GmbH, Hamburg, Germany;Christian-Albrechts-Universität zu Kiel, Institut für Informatik, Kiel, Germany
Venue:
SAFECOMP'07 Proceedings of the 26th international conference on Computer Safety, Reliability, and Security
Year:
2007

Citing 8
Cited 0

The temporal logic of reactive and concurrent systems

The temporal logic of reactive and concurrent systems
The temporal logic of actions

ACM Transactions on Programming Languages and Systems (TOPLAS)
Introduction to ATM networking

Introduction to ATM networking
Switched, Fast, and Gigabit Ethernet, Third Edition

Switched, Fast, and Gigabit Ethernet, Third Edition
Specifying Systems: The TLA+ Language and Tools for Hardware and Software Engineers

Specifying Systems: The TLA+ Language and Tools for Hardware and Software Engineers
On Simplifying Modular Specification and Verification of Distributed Protocols

HASE '01 The 6th IEEE International Symposium on High-Assurance Systems Engineering: Special Topic: Impact of Networking
Model Checking TLA+ Specifications

CHARME '99 Proceedings of the 10th IFIP WG 10.5 Advanced Research Working Conference on Correct Hardware Design and Verification Methods
The temporal logic of programs

SFCS '77 Proceedings of the 18th Annual Symposium on Foundations of Computer Science

Quantified Score

Hi-index	0.00

Visualization

Abstract

Reliable communication among avionic applications is a crucial prerequisite for today's all-electronic fly-by-wire aircraft technology. The AFDX switched Ethernet has been developed as a scalable, cost-effective network, based upon IEEE 802.3 Ethernet. It uses redundant links to increase the availability. Typical consensus strategies for the redundancy management task are not feasible, as they introduce too heavy delays. In this paper, we formally investigate AFDX redundancy management algorithms, making use of Lamport's Temporal Logic of Actions (TLA). Furthermore, we present our experiences made with TLA+ and the TLA+ model checker TLC.