Specification and verification of design models for certifiable avionics software

基于模型的开发(Model-Based Development，MBD)是一种软件工程范式，其中心焦点是可执行模型的使用，该模型将允许代码生成、测试用例生成(MTB)和验证等多项任务的自动化。这一范例在安全关键系统开发中被广泛接受，特别是在航空电子领域。MBD和MTB为此类系统提供了具有成本效益的开发，并帮助建立它们与航空电子软件标准DO-178C的一致性。加拿大有几个航空电子软件行业，但在这一领域开展的工作很少。现有的工具很少，但它们并不完整。测试工具很少，但它们不足以涵盖要测试的所有方面。该项目试图填补这一空白，并提供基于模型的方法和技术，帮助建模，并自动测试和验证航空电子软件。更具体地说，这个项目解决了设计模型的创建，以及航空电子软件认证的基于模型的测试和验证技术。其目标是：(1)指定、开发和验证软件设计模型，更具体地说，创建适合航空电子系统描述的新的UML概要文件和SIMULINK设计标准；(2)在模型驱动开发的背景下实现验证技术和按合同进行设计；(3)开发符合航空电子软件标准DO-178C和DO-331的低级需求测试技术；以及(4)实现基于低级需求的自动测试生成。

Model-Based Development (MBD) is a software engineering paradigm where the central focus is on the use of executable model that will allow automation of several tasks such as code generation, test cases generation (MTB) and verification. This paradigm is widely accepted in safety critical systems development and in particular the domain of avionics. MBD and MTB offer a cost efficient development of such systems and help establishing their conformity with avionics software standards DO-178C. Canada count several avionics software industry but very little work is carried in this area. Few tools exist but they are incomplete. There are few testing tools but they are not sufficient to cover all the aspects to be tested. This project tries to fill this gap and offer Model based approaches and techniques that helps model, and automatically test and verify avionics software. More specifically, this project addresses the creation of design models, and model-based testing and verification techniques for avionics software certification. The objectives are: (1) to specify, develop and verify software design models and more specifically create new UML profiles and Simulink design standards that suit avionics systems descriptions; (2) enable verification techniques and design by contract in the context of Model Driven Development; (3) develop low level requirements testing techniques in conformity with avionics software standards DO-178C and DO-331; and (4) enable low level requirements-based automatic test generation.