Generation of monitoring functions in production automation using test specifications
Generation of monitoring functions in production automation using test specifications
复制标题
使用测试规范生成生产自动化中的监控功能
DOI：
--
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
Bernhard Beckert
中科院分区：
文献类型：
--
作者：
Suhyun Cha;Sebastian Ulewicz;B. Vogel‐Heuser;A. Weigl;Mattias Ulbrich;Bernhard Beckert
自动化生产系统(AP)的质量要求很高，因为故障可能会伤害人类或造成严重的经济损失。这些故障可能是由于APS的控制软件故障或无法正确识别和处理技术流程或硬件行为中的意外情况和错误造成的。为了实现更可靠的控制软件，可以使用软件测试和正式验证来发现软件中的故障，但需要对运行期间APS中可能发生的情况(输入)做出假设，并且通常只允许对特定情况进行验证。在运行时监视控制软件中的各个功能可以帮助识别未指明的情况，并对反应的适宜性的不确定性发出警告。然而，设计可靠的监测功能需要丰富的经验和资源。为此，我们提出了一种从最初用于验证控制软件功能的可用测试和验证规范生成监视功能的方法。通过这一点，可以持续地评估各个软件功能的行为，并针对a)在运行期间违反测试规范以及b)从未测试过正确的软件行为的意外情况进行识别和警告。因此，该方法可以通过远远超出测试阶段的观察和行为评估来帮助评估和改进控制软件和规范质量，通过有效地重用现有的测试规范来进行运行时监控。
High quality requirements are set for automated production systems (aPS) as malfunctions can harm humans or cause severe financial loss. These malfunctions can be caused by faults in the control software of the aPS or its inability to correctly identify and handle unintended situations and errors in the technical process or hardware behavior. To achieve more dependable control software, software testing and formal verification can be used to find faults in the software, but require to make assumptions about possible situations (inputs) occurring in the aPS during runtime and often only allow the validation of specific cases. Monitoring individual functions within the control software during runtime can help to identify unspecified situations and raise warnings of the uncertainty about the suitability of a reaction. Yet, the design of reliable monitoring functions requires extensive experience and resources. For this reason, we propose a method for generating monitoring functions from available testing and verification specifications initially used for validating a control software function. Through this, it is possible to continuously assess the behavior of individual software functions and to identify and warn about a) violations of the test specification during runtime and b) unintended situations in which correct software behavior was never tested. Thus, the approach can help to assess and improve both the control software and specification quality through observation and behavior assessment far beyond the testing phase by efficiently reusing existing test specifications for runtime monitoring.