open-DO » Events http://www.open-do.org Toward a cooperative and open framework for the development of certifiable software Fri, 03 Feb 2012 16:13:41 +0000 en hourly 1 Certification, Safety and Security at ERTS 2012 http://www.open-do.org/2012/02/03/certification-safety-and-security-at-erts-2012/ http://www.open-do.org/2012/02/03/certification-safety-and-security-at-erts-2012/#comments Fri, 03 Feb 2012 15:06:10 +0000 Yannick Moy http://www.open-do.org/?p=1918 We are now leaving the Embedded Real Time Systems and Software conference which was held in Toulouse for the last 3 days. The conference has been expanding since the last occurrence in 2010, with more international presence, many German companies in particular, and a large number of companies from the automotive industry (maybe this is related? :) ).

I was particularly interested in the increasing concern over techniques to address safety and security. Safety is not new in avionics/aerospace, but security is, and both safety and security are quite new for automotive. The key to understanding these concerns is the recent release of new safety certification in both avionics (DO-178C) and automotive (ISO-26262). Both put some emphasis (not at the same level, as one could expect) on static analysis and formal techniques.

Like two years ago, there were many presentations of work on formal methods and modelling, with many formal methods applying to modelling. Next episode in two years!

]]> http://www.open-do.org/2012/02/03/certification-safety-and-security-at-erts-2012/feed/ 0 Prove & Fly! http://www.open-do.org/2011/12/14/prove-fly/ http://www.open-do.org/2011/12/14/prove-fly/#comments Wed, 14 Dec 2011 13:51:40 +0000 Yannick Moy http://www.open-do.org/?p=1894 On December 5-6, I participated in the 2nd workshop on Theorem Proving in Certification, in Cambridge (UK). This turned out to be even more interesting than last year’s program promised.

The goal of the workshop is to clarify under which conditions theorem proving can be applied in the context of DO-178C Formal Methods Supplement (hence Prove & Fly!):

  • extent of verifications performed
  • cost/benefit compared to testing
  • characteristics of a technique/tool to be called theorem proving
  • tool qualification needs

The workshop was organized around a common challenge (gear nose challenge) which all participants were invited to address from different angles. The challenge was to compute the velocity of the nose gear of a plane while on the ground. This was made even more interesting by the need to comply with a small certification standard (Tamarack standard). Both the challenge and the certification standard were created by Jeff Joyce from CSL.

Besides sharing the strategy we follow in project Hi-Lite, and showing how it applied to the common challenge, I was very interested in the discussions we had over tool qualification and the alternate objectives to coverage in DO-178C, when using formal verification instead of testing. An interesting shared opinion was that the automatic prover does not need to be qualified if it generates a trace that can be double-checked independently by a theorem prover (based on a small set of induction rules). For example, that’s the case for CVC3. In the discussion on alternate objectives to coverage, Jeff Joyce clearly stated that the underlying goal is to detect incompleteness of specifications, or equivalently (from the opposite point of view) unintended functionalities. During the discussion, it appeared that we may be able to use either model checking to perform a symbolic coverage analysis, or information given by automatic provers stating which hypotheses (and thus source code constructs) were used in proofs, but for example not concolic testing which is based on source code.

Many of these subjects will need to be further explored as DO-178C is adopted in new projects and tools based on formal methods are applied in this context. In particular, I look forward to the evolutions of the Tamarack standard and new solutions to the gear nose challenge. Hot news: Open-DO will host the workshop forge and wiki to support these evolutions. :)

]]> http://www.open-do.org/2011/12/14/prove-fly/feed/ 0 Ada Connection 2011 – An Overview of DO-178C/ED-12C http://www.open-do.org/2011/10/26/do-178c-overview/ http://www.open-do.org/2011/10/26/do-178c-overview/#comments Wed, 26 Oct 2011 20:18:38 +0000 Jamie Ayre http://www.open-do.org/?p=1860 From the Ada Connection 2011 talks, Dewi Daniels from Verocel gives an overview of DO-178C/ED-12C

]]> http://www.open-do.org/2011/10/26/do-178c-overview/feed/ 0 Ada Connection 2011 – Real Time Longevity http://www.open-do.org/2011/10/25/real-time-longevit/ http://www.open-do.org/2011/10/25/real-time-longevit/#comments Tue, 25 Oct 2011 22:23:47 +0000 Jamie Ayre http://www.open-do.org/?p=1850 From the Ada Connection 2011 talks, Frederic Pinot from Ansaldo STS talks about his experiences developing real-time systems for high-speed rail.

]]> http://www.open-do.org/2011/10/25/real-time-longevit/feed/ 0 Best Paper Award for Results of Verification Competition http://www.open-do.org/2011/06/30/best-paper-award-for-results-of-verification-competition/ http://www.open-do.org/2011/06/30/best-paper-award-for-results-of-verification-competition/#comments Thu, 30 Jun 2011 18:37:08 +0000 Yannick Moy http://www.open-do.org/?p=1792 Last year, the conference VSTTE 2010 organized a competition of software verification systems (language + tools), to improve understanding of each system’s pros and cons. Rod Chapman from Altran Praxis participated with the SPARK language and toolset, and solved the first problem even beyond what the subject asked. We have since provided solutions in SPARK to all five problems, like other teams, which formed the basis for a report that you can find on this page.

This report was deemed important enough by the organizers of the Formal Methods conference 2011 that they have granted it the best paper award.

Furthermore, the page of the competition contains an archive with all solutions in many different languages and systems… you can even DIY!

]]> http://www.open-do.org/2011/06/30/best-paper-award-for-results-of-verification-competition/feed/ 1 Real Time Linux Workshop 2011 http://www.open-do.org/2011/04/20/linux-workshop-2011/ http://www.open-do.org/2011/04/20/linux-workshop-2011/#comments Wed, 20 Apr 2011 06:49:33 +0000 Jamie Ayre http://www.open-do.org/?p=1716 The Real Time Linux Workshop 2011 will be held in Prague, October 20 to 22. The call for papers is now out with several topics of interest including “Safety-related FLOSS systems”. More details on the CFP and event can be found on the website:

https://www.osadl.org/RTLWS-2011.rtlws-2011.0.html

]]> http://www.open-do.org/2011/04/20/linux-workshop-2011/feed/ 1 PSP and TSP: Culture and Discipline for High-Assurance Software http://www.open-do.org/2011/03/15/psp-and-tsp/ http://www.open-do.org/2011/03/15/psp-and-tsp/#comments Tue, 15 Mar 2011 15:29:14 +0000 Jamie Ayre http://www.open-do.org/?p=1650 From a talk given at the SPARK User Group 2010 High Assurance Software Symposium, Rod Chapman from Altan Praxis talks about the guiding principles behind PSP (Personal Software Process) and TSP (Team Software Process).



View more videos from the SPARK User Group
2010 High Assurance Software Symposium »

]]> http://www.open-do.org/2011/03/15/psp-and-tsp/feed/ 0 Slides from the Couverture project conclusion meeting http://www.open-do.org/2011/02/23/slides-from-the-couverture-project-conclusion-meeting/ http://www.open-do.org/2011/02/23/slides-from-the-couverture-project-conclusion-meeting/#comments Wed, 23 Feb 2011 08:43:36 +0000 Jamie Ayre http://www.open-do.org/?p=1645 Couverture project conclusion meeting. Cyrille Comar presented the original needs and goals of the project, the challenges the team came across a long the way, and the main results.
GNATcoverage/GNATemulator launch
View more presentations from AdaCore.
]]> http://www.open-do.org/2011/02/23/slides-from-the-couverture-project-conclusion-meeting/feed/ 0 FLOSS for Safety-related Systems http://www.open-do.org/2011/02/07/floss_embedded_world/ http://www.open-do.org/2011/02/07/floss_embedded_world/#comments Mon, 07 Feb 2011 11:56:35 +0000 Jamie Ayre http://www.open-do.org/?p=1617 At the upcoming Embedded World conference in Nuremberg, Germany, there will be a days conference on the use of freely-licensed open source software (FLOSS) to build safety-critical systems. Presentation topics include:

Validation of Linux for Safety-Related Systems
Linux as a real-time Hypervisor for the automotive industry
Efficient Safety Critical Systems Development – Is FLOSS the only answer?
Finding Misuses of Unsigned Integers in Linux Device Driver Code
“Open Proof” for Railway Safety Software A Potential Way-Out of Vendor Lock-in Advancing to Standardization, Transparency, and Software Security
Improved Redundancy and Consistency beyond RAID 1
Utilizing security methods of FLOSS GPOS for safety

A full program description can be found here.

]]> http://www.open-do.org/2011/02/07/floss_embedded_world/feed/ 0 First TOPCASED Days 2011 conference http://www.open-do.org/2011/01/25/first-topcased-days-2011-conference/ http://www.open-do.org/2011/01/25/first-topcased-days-2011-conference/#comments Tue, 25 Jan 2011 08:20:23 +0000 Jamie Ayre http://www.open-do.org/?p=1557 The first conference based around the TOPCASED toolkit project will take place in Toulouse February 2nd-4th, 2011.

TOPCASED (Toolkit in OPen-source for Critical Application and SystEms Development) is a modular, open-source, Eclipse-based software environment providing methods and tools for critical embedded systems development, ranging from system and architecture specifications to software and hardware implementation through equipment definition. TOPCASED promotes model-driven engineering and formal methods as key technologies.

]]> http://www.open-do.org/2011/01/25/first-topcased-days-2011-conference/feed/ 0