Model Checking Safety Properties of Servo-Loop Control Systems

  • Authors:
  • M. Edwin Johnson

  • Affiliations:
  • -

  • Venue:
  • DSN '02 Proceedings of the 2002 International Conference on Dependable Systems and Networks
  • Year:
  • 2002

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper presents the experiences of using a symbolic model checker to check the safety properties of a servo-loop control system. Symbolic model checking has been shown to be beneficial when the system under analysis can be modeled as a finite state machine. Servo-loop control systems are typically represented by differential equations (Laplace transforms) 驴 not as finite state machines. However, the control loop is only a part of the software system needed to properly and safely operate the system. This paper first validates the safety of the servo-loop using control theory and simulation. Then, a simplestate model of a servo-loop is combined with the state model of entire system. This model is then entered into a model checker (SMV) along with safety predicates. The model checker is used to validate the safety predicates. This paper shows via a concrete example that safetyissues can be discovered and defined for control systems using a model checker. Furthermore, it demonstrates that effective hazard analysis may require multiple techniques.