ITR: Static Timing of Interrupt-Driven Software

实时、响应式和嵌入式系统在整个社会（例如，飞行控制、铁路信号、车辆管理系统、医疗设备）中得到越来越广泛的应用。这一趋势很可能会继续下去，因为仅仅几年前还无法想象的应用程序已经进入了越来越复杂的处理器的范围。许多这样的应用程序都是长期存在的，不断地与环境交互，并且受到重要的实时约束。随着这些反应系统渗透到我们的生活中，给我们带来了从智能起搏器到食品杂货中的微小新鲜度跟踪设备的一切，对成本效益高、鼓舞信心的软件验证技术的需求也相应增长。这个项目的重点是构建新的工具来检查一类常见的响应式实时系统，即中断驱动系统。本研究有四个方面相互补充和支持。第一部分继续我们分析七个商业微控制器的初步工作，以确定对单个中断处理程序足够精确的静态时序分析。其次，正在研究为多个中断处理程序指定和检查定时属性的方法。第三，正在开发具有时间限制的类型化汇编语言，其中计时属性可以以模块化的方式指定，每次指定一个处理程序。第四，正在设计一个定时中断处理程序演算，它将以一种与语言无关的方式体现我们的结果，并使其易于证明关键属性。新的工具将通过静态分析和类型检查自动导出软件的模型，并将结果提交给模型检查器。这些工具可以显著减少测试需求，并为整个系统生命周期的维护提供支持。

ABSTRACTProposal #01122628Purdue Research Palsberg,JensStatic Timing of Interrupt-driven SoftwareReal-time, reactive and embedded systems are widely and increasingly used throughout society (e.g., flight control, railway signaling, vehicle management systems, medical devices). This trend is likely to continue, as applications that would have been unthinkable only a few short years ago come into the reach of ever more complex processors. Many such applications are long lived, interact with their environment continuously, and are under important real-time constraints. As these reactive systems permeate our lives, bringing us everything from intelligent pace-makers to tiny freshness-tracking devices in groceries, the need for cost-effective, confidence-inspiring software validation techniques grows proportionately. This project focuses on building new tools for checking a common class of reactive real-time systems known as interrupt-driven systems. This proposed research has four facets that complement and support each other. The first continues our preliminary work on analyzing seven commercial microcontrollers to identify a static timing analysis that is sufficiently precise for a single interrupt handler. Second, ways of specifying and checking timing properties for multiple interrupt handlers are being investigated. Third, a typed assembly language is being developed with time bounds in which timing properties can be specified in a modular way, one handler at a time. Fourth, a timed interrupt-handler calculus is being designed that will embody our results in a language-independent way and make it tractable to prove key properties. The new tools will automatically derive a model of the software by static analysis and type checking, and submit the result to a model checker. The tools can lead to significantly reduced testing requirements, and provide support for maintenance throughout the systemlife-cycle.