ITR: Static Timing of Interrupt-Driven Software

Proposal#01122628普渡研究Palsberg，JensStatic Timing of Interrupt-Driven Software实时、反应和嵌入式系统在整个社会(例如，飞行控制、铁路信号、车辆管理系统、医疗设备)被广泛且日益广泛地使用。这一趋势可能会继续下去，因为短短几年前还不可想象的应用程序已经进入了越来越复杂的处理器的范围。许多这样的应用程序寿命很长，与其环境持续交互，并且受到重要的实时约束。随着这些反应系统渗透到我们的生活中，给我们带来了从智能起搏器到食品杂货中的微型新鲜度跟踪设备的一切，对经济高效、鼓舞信心的软件验证技术的需求也相应增加。该项目专注于构建新的工具，用于检查一类常见的反应式实时系统，称为中断驱动系统。这项拟议的研究有四个方面相辅相成，相互支持。第一部分继续我们的初步工作，分析七个商用微控制器，以确定对单个中断处理程序足够精确的静态时序分析。其次，正在研究指定和检查多个中断处理程序的定时属性的方法。第三，正在开发一种有时间限制的类型化汇编语言，在该语言中，可以以模块化的方式指定时序属性，一次一个处理程序。第四，正在设计一个定时中断处理程序演算，它将以一种独立于语言的方式体现我们的结果，并使其易于证明关键属性。新工具将通过静态分析和类型检查自动派生软件模型，并将结果提交给模型检查器。这些工具可以显著减少测试需求，并在整个系统生命周期中为维护提供支持。

ABSTRACTProposal #01122628Purdue Research Palsberg,JensStatic Timing of Interrupt-driven SoftwareReal-time, reactive and embedded systems are widely and increasingly used throughout society (e.g., flight control, railway signaling, vehicle management systems, medical devices). This trend is likely to continue, as applications that would have been unthinkable only a few short years ago come into the reach of ever more complex processors. Many such applications are long lived, interact with their environment continuously, and are under important real-time constraints. As these reactive systems permeate our lives, bringing us everything from intelligent pace-makers to tiny freshness-tracking devices in groceries, the need for cost-effective, confidence-inspiring software validation techniques grows proportionately. This project focuses on building new tools for checking a common class of reactive real-time systems known as interrupt-driven systems. This proposed research has four facets that complement and support each other. The first continues our preliminary work on analyzing seven commercial microcontrollers to identify a static timing analysis that is sufficiently precise for a single interrupt handler. Second, ways of specifying and checking timing properties for multiple interrupt handlers are being investigated. Third, a typed assembly language is being developed with time bounds in which timing properties can be specified in a modular way, one handler at a time. Fourth, a timed interrupt-handler calculus is being designed that will embody our results in a language-independent way and make it tractable to prove key properties. The new tools will automatically derive a model of the software by static analysis and type checking, and submit the result to a model checker. The tools can lead to significantly reduced testing requirements, and provide support for maintenance throughout the systemlife-cycle.