Verification of time partitioning in the DEOS scheduler kernel

  • Authors:

  • John Penix;Willem Visser;Eric Engstrom;Aaron Larson;Nicholas Weininger

  • Affiliations:

  • Automated Software Engineering Group, NASA Ames Research Center, Moffet Field, CA;Automated Software Engineering Group, NASA Ames Research Center, Moffet Field, CA;Honeywell Technology Center, 3660 Technology Drive, Minneapolis, MN;Honeywell Technology Center, 3660 Technology Drive, Minneapolis, MN;Honeywell Technology Center, 3660 Technology Drive, Minneapolis, MN

  • Venue:
  • Proceedings of the 22nd international conference on Software engineering
  • Year:
  • 2000

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper describes an experiment to use the Spin model checking system to support automated verification of time partitioning in the Honeywell DEOS real-time scheduling kernel. The goal of the experiment was to investigate whether model checking could be used to find a subtle implementation error that was originally discovered and fixed during the standard formal review process. To conduct the experiment, a core slice of the DEOS scheduling kernel was first translated without abstraction from C++ into Promela (the input language for Spin). We constructed an abstract “test-driver” environment and carefully introduced several abstractions into the system to support verification. Several experiments were run to attempt to verify that the system implementation adhered to the critical time partitioning requirements. During these experiments, the known error was rediscovered in the time partitioning implementation. We believe this case study provides several insights into how to develop cost-effective methods and tools to support the software design and implementation review process.