1 / 12

Analysing Fault-Tolerant System using KAOS/FAUST

Analysing Fault-Tolerant System using KAOS/FAUST. C. Ponsard, P. Massonet, J.F. Molderez (CETIC) A. van Lamsweerde (UCL/INGI). Short presentation & Demo REFT’05, Newcastle (UK). Key Idea. B Method: from specification to code “correct by construction” approach

nehru-manning
Télécharger la présentation

Analysing Fault-Tolerant System using KAOS/FAUST

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Analysing Fault-Tolerant System using KAOS/FAUST C. Ponsard, P. Massonet, J.F. Molderez (CETIC) A. van Lamsweerde (UCL/INGI) Short presentation & Demo REFT’05, Newcastle (UK)

  2. Key Idea • B Method: • from specification to code • “correct by construction” approach • moving towards requirements“System B” models of both SW/HW/environment • KAOS • similar approach at requirements level • also refinement approach (property based) • reason the design of the composite system • explore alternative designs, reason about agent responsibilities • assess/improve the robustness of the system • tool support: FAUST • based on Objectiver semi-formal RE platform (providing conceptual repository, graph edit, doc. generation,…) • Seamless integration for optimal communication • looks complementary and worth investigating • current status of on-going work

  3. EffectivePassengersTransportation SafeTransportation RapidTransportation WorstCaseStopping DistanceMaintained Train Collision DoorsClosed WhileMoving BlockSpeed Limited Delay TrainProgress current S2B MoreTrains Running ProgressWhen GoSignal SignalSet ToGo Train Waiting TrainsOn SameBlock On (tr, b)  On (tr, b) W On (tr,next(b)) Structuring Properties using a Goal Model (with KAOS) HOW? WHY? On (tr, b)  On (tr, next(b)) On(tr,b)  Go[next(b)]  On(tr,next(b)) On(tr,b)  Go[next(b)]

  4. Milestone AccelerationCommand Not SentInTimeToTrain AccelerationCommand Not ReceivedInTimeByTrain Acceleration NotSafe ... SentTo WrongTrain NotSent SentLate Corrupted ReceivedLate NotReceived WorstCaseStoppingDistanceMaintained AccelerationSent InTimeToTrain SentCommand ReceivedByTrain ReceivedCommand ExecutedByTrain SafeAcceleration Computed Being Pessimistic ...

  5. Object Model Agent Model On Train TrackSegment SafeAcceler 0:1 Operation SendCommand DomPre¬Sent (m, tr) DomPostSent (m, tr) ReqPostforSafeAcceler m.Acceler F(tr, tr.Preced) Operation Model Driving the elaboration process NoTrainCollision Goal Model

  6. Some Derived Artefacts

  7. Connection with B/Rodin • B moving towards requirements • “System B” models of both SW/HW/environment • Requirements gap is a well known problem [Abrial] • Refinement approach • Property refinements in KAOS • Operational refinements in B • Benefits for direct engineering: • Identifying key properties • Building models easier to prove • Benefits for reverse engineering: • Structuring key properties • Explaining model to stakeholders for validation/acceptance • semi-formal notations, animation, document generation,… • Better documentation: less flat document, richer traceability, checks

  8. Agenda for “K2B” • Practical Scope: • Composys style (Clearsy use of System-B) • industrial cases (automotive/railway) • From KAOS models to B models: • “Automated” generation of initial B specification • From set of operation assigned to agent • Attach requirements/ higher level goals • Animation tool ? • From B models to KAOS models • Guidelines for building goal/object/agent models • “B aware” document generation template • Means • Applied research at CETIC • Collaboration with ClearSy • Student task force from UCL (Belgium)

  9. Demo during coffee break

  10. FAUST Architecture

  11. Interface du vérificateur de raffinements

  12. Interface de l’animateur

More Related