FAW: Specification and Analysis Methodology for Safety- Critical Software

研究的目标是为安全关键软件建立一种规范和分析方法。尽管过去的研究包括在整个软件开发过程中增强安全性的技术，但认识到大多数事故可以追溯到需求不足和设计远见，导致人们将注意力集中在软件生命周期的早期部分。这项工作将建立一套集成的软件需求和设计方法和技术，以增加对软件需求和设计方法和技术的安全性的信心，以增加对控制飞机和其他运输系统、医疗设备和核电站等关键系统的软件的安全性的信心。它将导致更好地理解需要什么来提供一个“安全分析师工作台”，使软件和系统工程师能够建立模型，并对软件需求和设计执行各种分析，以便在开发期间预测和验证广泛的软件属性。上述目标将在一个真实的、安全关键的航空电子设备(碰撞避免TCAS)系统的背景下进行，以便提供一个试验台，在产生假设和想法时验证实用性、有效性和可行性，并使研究保持在朝着现实和可用的结果的轨道上。试验台方法将允许在现实环境中评估备选方案，在必要时改变方向，并在真实系统上验证和演示结果。

The research goal is to build a specification and analysis methodology for safety-critical software. Although past research included techniques to enhance safety throughout the software development process, the recognition that most accidents can be traced back to inadequate requirements and design foresight has led to concentration on the early parts the software life cycle. This work will build an integrated set of software requirements and design methods and techniques to increase confidence in the safety of software requirements and design methods and techniques to increase confidence in the safety of software that is controlling critical systems such as aircraft and other transportation systems, medical devices, and nuclear power plants. It will lead to better understanding what is required to provide a "safety analyst's workbench" that would allow software and systems engineers to build models and perform a variety of analyses on the software requirements and design in order to predict and verify a wide range of software properties during development. The above goals will be pursued within the context of a real, safety- critical avionics (Collision Avoidance of TCAS) system in order to provide a testbed to validate practicality, effectiveness, and feasibility as the hypotheses and ideas are generated and to keep the research on a track toward realistic and usable results. The testbed approach will allow evaluation of alternatives in a realistic setting, altering directions when necessary, and validating and demonstrating results on a real system.