You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
198 lines
6.2 KiB
198 lines
6.2 KiB
\documentclass[oribibl]{report} |
|
|
|
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
|
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
|
|
|
\usepackage{natbib} |
|
\usepackage{hyperref,verbatim} |
|
\usepackage{listings,dirtytalk} |
|
\usepackage{lstlang3} |
|
\usepackage{amsmath,amsfonts,amssymb,stmaryrd} |
|
\usepackage{graphicx, wrapfig} |
|
\usepackage{latexsym} |
|
\usepackage{units} |
|
\usepackage{xspace}% |
|
% \usepackage{wrapfig} |
|
|
|
\usepackage{xcolor} |
|
\hypersetup{ |
|
colorlinks, |
|
linkcolor={red!50!black}, |
|
citecolor={blue!50!black}, |
|
urlcolor={blue!80!black} |
|
} |
|
\definecolor{bluekeywords}{rgb}{0.13,0.13,1} |
|
\definecolor{greencomments}{rgb}{0,0.5,0} |
|
\definecolor{redstrings}{rgb}{0.9,0,0} |
|
\definecolor{codegreen}{rgb}{0,0.6,0} |
|
\definecolor{codepurple}{rgb}{0.58,0,0.82} |
|
|
|
|
|
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
|
%%% LISTINGS |
|
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
|
\font\bigttfont = cmtt12 scaled 1120 |
|
\newcommand*{\ttfamilywithbold}{\fontfamily{lmtt}\selectfont} |
|
|
|
\def\code#1{{\ttfamilywithbold #1}}%{{\small\ttfamilywithbold #1}} |
|
\def\vars#1{{\small\ttfamilywithbold #1}} |
|
|
|
\sbox0{\small\ttfamily A} |
|
\edef\mybasewidth{\the\wd0 } |
|
\lstset{inputencoding=latin1, |
|
basicstyle=\footnotesize\ttfamilywithbold, |
|
columns=fixed, |
|
basewidth=\mybasewidth, |
|
commentstyle=\commentaires, |
|
keywordstyle=\bfseries, |
|
% keywordstyle={[2]\itshape}, |
|
keywordstyle=\color{bluekeywords}, |
|
% basewidth=0.94ex, |
|
showstringspaces=false, |
|
% emptylines=1, |
|
% aboveskip=-2pt,belowskip=-4pt, |
|
mathescape=true, |
|
texcl=true, |
|
escapechar=@, |
|
numberblanklines=false, |
|
belowskip=-0.5em, |
|
aboveskip=-0.5em, |
|
commentstyle=\color{green},%{bluekeywords}, |
|
belowcaptionskip=-1em |
|
} |
|
|
|
% \usepackage{fancybox} |
|
% \makeatletter |
|
% \newenvironment{CenteredBox}{% |
|
% \begin{Sbox}}{% Save the content in a box |
|
% \end{Sbox}\centerline{\parbox{\wd\@Sbox}{\TheSbox}}}% And output it centered |
|
% \makeatother |
|
|
|
|
|
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
|
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
|
|
|
\usepackage{tikz} |
|
\usetikzlibrary{arrows,shapes,decorations,automata,backgrounds,petri,patterns,spy,decorations.markings,shadows} |
|
|
|
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
|
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
|
|
|
\newtheorem{prop}{Safety Property}{\bfseries}{\rmfamily} |
|
\newcommand{\PRE}[0]{\code{Pre}\xspace}% |
|
\newcommand{\FUNC}[0]{\code{Function}\xspace}% |
|
\newcommand{\ERR}[0]{\code{Err}\xspace}% |
|
\newcommand{\LOSS}[0]{\code{Loss}\xspace} |
|
\newcommand{\OK}[0]{\code{Ok}\xspace} |
|
\newcommand{\MIN}[0]{\code{F3Mux}\xspace} |
|
\newcommand{\ALARM}[0]{\code{Alarm}\xspace} |
|
\newcommand{\SWITCH}[0]{\code{Switch}\xspace} |
|
\newcommand{\FF}[2]{\code{F{#1}\_{#2}}\xspace} |
|
\newcommand{\F}[1]{\code{F{#1}}\xspace} |
|
\newcommand{\I}[1]{\code{I{#1}}\xspace} |
|
\newcommand{\D}[1]{\code{D{#1}}\xspace} |
|
\newtheorem{definition}{Definition} |
|
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
|
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
|
|
|
\newcommand{\TODO}[1]{{\color{red}#1}} |
|
|
|
\setlength{\belowcaptionskip}{-1em} |
|
|
|
|
|
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
|
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
|
|
|
|
|
\makeatletter |
|
%\renewcommand\bibsection% |
|
%{\chapter*{\refname\@mkboth{\MakeUppercase{\refname}}{\MakeUppercase{\refname}}}} |
|
\makeatother |
|
|
|
\begin{document} |
|
%% |
|
\title{Model-Checking Approach to Analyse\\ |
|
Temporal Model Properties with AltaRica} |
|
%% |
|
\author{Alexandre Albore} |
|
%%\institute{Institute of Research and Technology (IRT) Saint Exup\'ery, Toulouse, France \and |
|
%%LAAS-CNRS, Universit\'e de Toulouse, CNRS, Toulouse, France \and |
|
%%ONERA, 2 Avenue Edouard Belin, 31055 Toulouse, France |
|
%% } |
|
%% |
|
|
|
|
|
%%\frontmatter |
|
|
|
\maketitle |
|
\setcounter{footnote}{0} |
|
%% |
|
% \noindent\textbf{keywords:} Verification of Safety Requirements; System |
|
% Architecture Specification; Realtime Model-Checking.\\ |
|
%% |
|
\begin{abstract} |
|
The design of complex safety critical systems raises new technical |
|
challenges for industrials. As systems become more complex---and |
|
include more and more interacting functions---it becomes harder to |
|
evaluate the safety implications of local failures and their |
|
possible propagations through a whole system. That is all the more |
|
true when we add time to the problem, that is when we consider the |
|
impact of computation times and delays on the propagation of |
|
failures. |
|
|
|
We describe an approach that extends models developed for Safety |
|
Analysis with timing information and provide tools to reason on the |
|
correctness of temporal safety conditions. Our approach is based on |
|
an extension of the AltaRica language where we can associate timing |
|
constraints with events and relies on a translation into a realtime |
|
model-checking toolset. We illustrate our method with an example |
|
that is representative of safety architectures found in critical |
|
systems. This example shows that considering propagation delays |
|
early during the validation of a system can help us uncover failure |
|
modes that cannot be detected with the untimed models currently |
|
used. |
|
\end{abstract} |
|
|
|
\tableofcontents |
|
% \section*{Acknowledgments}\label{sec:Acknowledgments} |
|
|
|
% Authors would like to thank YYYYY. |
|
|
|
% and could have a beneficial impact on the early validation of system |
|
% behaviour |
|
\chapter{Introduction} |
|
\input{1-introduction} |
|
|
|
\chapter{State of the art} |
|
\label{soa}\input{2-sota} |
|
|
|
\chapter{A Model-Checking Approach to Analyse Temporal Failure Propagation with AltaRica} |
|
\label{altarica}\input{3-imbsa} |
|
|
|
\chapter{A Case Study: FDIR in a Satellite AOCS} |
|
\label{aocs} |
|
\input{4-aocs} |
|
|
|
\chapter{Conclusions} |
|
\input{5-conclusions} |
|
|
|
\bibliographystyle{abbrv} |
|
|
|
\bibliography{paper,tina} |
|
|
|
\newpage |
|
\appendix |
|
\chapter*{Appendix A} |
|
\setcounter{chapter}{1} |
|
\input{app.tex} |
|
|
|
%\chapter*{Appendix} |
|
%%\input{commandlines} |
|
%% Good results and proving that a mathematical model underlying model representation allows to use properties and tools for automatic safety assessment. |
|
|
|
\end{document} |
|
|
|
%%% Local Variables: |
|
%%% mode: latex |
|
%%% TeX-master: t |
|
%%% End:
|
|
|