ITR: Static Timing of Interrupt-Driven Software

摘要提案#01122628Purdue Research Palsberg，Jens中断驱动软件的静态定时实时、反应式和嵌入式系统在整个社会中得到广泛和越来越多的使用（例如， 飞行控制、铁路信号、车辆管理系统、医疗设备）。 这一趋势可能会继续下去，因为在短短几年前还无法想象的应用程序已经进入了越来越复杂的处理器的范围。 许多 这样的应用是长期存在的，与它们的环境连续地交互，并且处于重要的实时约束之下。 随着这些反应式系统渗透到我们的生活中，为我们带来了从智能起搏器到杂货店中微小的新鲜度跟踪设备的一切，对具有成本效益，鼓舞人心的软件验证技术的需求也在增长。 这个项目的重点是建立新的工具，用于检查一类常见的反应式实时系统，称为中断驱动系统。 本研究有四个方面，相互补充和支持。 第一个继续我们的 初步工作分析七个商业微控制器，以确定一个静态时序分析，是足够精确的一个中断处理程序。 其次，正在研究为多个中断处理程序指定和检查定时属性的方法。 第三，正在开发一种具有时间界限的类型化汇编语言，其中可以以模块化的方式指定计时属性，每次一个处理程序。 第四，定时中断处理演算的设计，将体现我们的结果在一个独立于语言的方式，并使其易于处理，以证明关键属性。 新工具将通过静态分析和类型检查自动导出软件模型，并将结果提交给模型检查器。 这些工具可以大大降低测试要求，并在整个系统生命周期内为维护提供支持。

ABSTRACTProposal #01122628Purdue Research Palsberg,JensStatic Timing of Interrupt-driven SoftwareReal-time, reactive and embedded systems are widely and increasingly used throughout society (e.g., flight control, railway signaling, vehicle management systems, medical devices). This trend is likely to continue, as applications that would have been unthinkable only a few short years ago come into the reach of ever more complex processors. Many such applications are long lived, interact with their environment continuously, and are under important real-time constraints. As these reactive systems permeate our lives, bringing us everything from intelligent pace-makers to tiny freshness-tracking devices in groceries, the need for cost-effective, confidence-inspiring software validation techniques grows proportionately. This project focuses on building new tools for checking a common class of reactive real-time systems known as interrupt-driven systems. This proposed research has four facets that complement and support each other. The first continues our preliminary work on analyzing seven commercial microcontrollers to identify a static timing analysis that is sufficiently precise for a single interrupt handler. Second, ways of specifying and checking timing properties for multiple interrupt handlers are being investigated. Third, a typed assembly language is being developed with time bounds in which timing properties can be specified in a modular way, one handler at a time. Fourth, a timed interrupt-handler calculus is being designed that will embody our results in a language-independent way and make it tractable to prove key properties. The new tools will automatically derive a model of the software by static analysis and type checking, and submit the result to a model checker. The tools can lead to significantly reduced testing requirements, and provide support for maintenance throughout the systemlife-cycle.