Software Engineering with Formal Methods: The Development of a Storm Surge Barrier Control System Revisiting Seven Myths of Formal Methods

  • Authors:

  • Jan Tretmans;Klaas Wijbrans;Michel Chaudron

  • Affiliations:

  • University of Twente, Department of Computer Science, Formal Methods and Tools Research Group, P.O. Box 217, 7500 AE Enschede, The Netherlands. tretmans@cs.utwente.nl;CMG Public Sector B.V., Division Advanced Technology, P.O. Box 187, 2501 CD The Hague, The Netherlands. klaas.wijbrans@cmg.nl;CMG Public Sector B.V., Division Advanced Technology, P.O. Box 187, 2501 CD The Hague, The Netherlands. m.r.v.chaudron@tue.nl

  • Venue:
  • Formal Methods in System Design
  • Year:
  • 2001

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper discusses the use of formal methods in the development of the control system for the Maeslant Kering. The Maeslant Kering is the movable dam which has to protect Rotterdam from floodings while, at (almost) the same time, not restricting ship traffic to the port of Rotterdam. The control system, called BOS, completely autonomously decides about closing and opening of the barrier and, when necessary, also performs these tasks without human intervention. BOS is a safety-critical software system of the highest Safety Integrity Level according to IEC 61508. One of the reliability increasing techniques used during its development is formal methods. This paper reports experiences obtained from using formal methods in the development of BOS. These experiences are presented in the context of Hall's famous “Seven Myths of Formal Methods”.