针对嵌入式系统体系结构分析设计语言(architecture analysis and design language,AADL)分级调度模型的分析问题,提出了基于模型检验的可调度性分析和验证方法.基于时间自动机理论,将AADL分级调度模型转换为时间自动机网络,将待验证性...针对嵌入式系统体系结构分析设计语言(architecture analysis and design language,AADL)分级调度模型的分析问题,提出了基于模型检验的可调度性分析和验证方法.基于时间自动机理论,将AADL分级调度模型转换为时间自动机网络,将待验证性质描述为时序逻辑公式,通过模型检验工具对可调度性进行分析和验证.研究结果表明,使用模型检验方法来分析AADL分级调度模型的可调度性是可行的.相对其他方法而言,该方法利用了形式化方法的穷举性来分析系统的性质,分析结果更加精确.展开更多
结构分析与设计语言(architecture analysis and design language,AADL)是应用于嵌入式领域的体系结构建模、分析和验证的重要手段。针对系统可靠性随着其规模、复杂度和性能需求的不断提升而愈显突出的问题,给出了一个基于AADL的软件...结构分析与设计语言(architecture analysis and design language,AADL)是应用于嵌入式领域的体系结构建模、分析和验证的重要手段。针对系统可靠性随着其规模、复杂度和性能需求的不断提升而愈显突出的问题,给出了一个基于AADL的软件系统可靠性建模与评估框架:首先建立AADL可靠性模型,然后将其转换为广义随机Petri网(generalized stochastic Petri net,GSPN)模型后再进行分析,最后根据分析结果判断是否需要进行模型改进。在研究已有的基本转换规则的基础上,重点讨论了系统中组件之间错误传播以及表示系统发生模式转换的Guard_Transition属性到GSPN的转换规则。以某飞行控制系统中数据发送和处理单元为实例,验证了所提转换规则和可靠性建模与评估框架的有效性。展开更多
针对可重构分布式综合模块化航空电子(distributed integrated modular avionics,DIMA)系统在设计初期缺少仿真与验证手段的问题,首先分析了可重构DIMA软件体系的架构特征以及支持动态重构的层次化通用系统管理(generic system manageme...针对可重构分布式综合模块化航空电子(distributed integrated modular avionics,DIMA)系统在设计初期缺少仿真与验证手段的问题,首先分析了可重构DIMA软件体系的架构特征以及支持动态重构的层次化通用系统管理(generic system management,GSM)的组件功能划分。然后,使用架构分析与设计语言(architecture analysis and design language,AADL)及其相关附件对DIMA动态重构的架构基础、行为细节等要素进行建模。在此基础上,设计了一种基于形式化定义的模型转换规则,该规则将AADL动态重构模型转换成可执行的时间自动机模型。最后,利用模型验证工具UPPAAL验证了可重构DIMA系统逻辑及时序的正确性和不安全控制行为的可达性。结果表明,所提方法具有可行性和有效性,并且能够为后续DIMA动态重构的形式化安全性评估提供模型基础。展开更多
为了支持新一代航电系统在体系结构设计阶段进行系统可靠性分析和评估,对复杂嵌入式系统利用体系结构分析与设计语言(architecture analysis and design language,AADL)进行系统的建模。提出了一种基于AADL系统体系结构模型的可靠性建...为了支持新一代航电系统在体系结构设计阶段进行系统可靠性分析和评估,对复杂嵌入式系统利用体系结构分析与设计语言(architecture analysis and design language,AADL)进行系统的建模。提出了一种基于AADL系统体系结构模型的可靠性建模方法,设计出一套转换规则,对AADL体系结构模型的软硬件构件进行模型转换,实现从AADL系统体系结构可靠性模型到系统体系结构广义随机Petri网(system architecture general stochastic Petri net,SAGSPN)的转换,并基于加权的SAGSPN可靠性计算模型对系统进行可靠性评估。最后通过对某飞控系统进行可靠性评估,验证了方法的有效性,证明该方法对航电系统的体系结构设计提供了支持。展开更多
Architectural modeling and behavior analysis are two important concerns in the software development. They are often implemented separately, and specified by their own supporting notations. Architectural modeling helps...Architectural modeling and behavior analysis are two important concerns in the software development. They are often implemented separately, and specified by their own supporting notations. Architectural modeling helps to guarantee the system design to satisfy the requirement, and behavior analysis can ensure the interaction correctness. To improve the trustworthiness, methods trying to combine architectural modeling and behavior analysis notations together have been proposed, e.g., establishing a one-way mapping relation. However, the one-way relation cannot ensure updating one notation specifications in accordance with the other one, which results in inconsistency problems. In this paper, we present an approach to integrating behavior analysis into architectural modeling, which establishes the interoperability between architectural modeling notation and behavior analysis notation by a bidirectional mapping. The architecture is specified by the modeling language, architecture analysis and design language （AADL）, and then mapped to behavior analysis notation, Darwin/FSP （finite state process） through the bidirectional transformation. The bidirectional transformarion provides traceability, which makes behavior analysis result provided by a model checker can be traced and reflected back to the original AADL specifications. In this way, the behavior analysis is integrated into architectural modeling. The feasibility of our approach is shown by a control system example.展开更多
Architecture analysis and design language （AADL） is an architecture description language standard for embedded real-time systems and it is widely used in safety-critical applications. For facilitating verifcafion an...Architecture analysis and design language （AADL） is an architecture description language standard for embedded real-time systems and it is widely used in safety-critical applications. For facilitating verifcafion and analysis, model transformation is one of the methods. A synchronous subset of AADL and a general methodology for translating the AADL subset into timed abstract state machine （TASM） were studied. Based on the arias transformation language （ ATL ） framework, the associated translating tool AADL2TASM was implemented by defining the meta-model of both AADL and TASM, and the ATL transformation rules. A case study with property verification of the AADL model was also presented for validating the tool.展开更多
文摘针对嵌入式系统体系结构分析设计语言(architecture analysis and design language,AADL)分级调度模型的分析问题,提出了基于模型检验的可调度性分析和验证方法.基于时间自动机理论,将AADL分级调度模型转换为时间自动机网络,将待验证性质描述为时序逻辑公式,通过模型检验工具对可调度性进行分析和验证.研究结果表明,使用模型检验方法来分析AADL分级调度模型的可调度性是可行的.相对其他方法而言,该方法利用了形式化方法的穷举性来分析系统的性质,分析结果更加精确.
文摘结构分析与设计语言(architecture analysis and design language,AADL)是应用于嵌入式领域的体系结构建模、分析和验证的重要手段。针对系统可靠性随着其规模、复杂度和性能需求的不断提升而愈显突出的问题,给出了一个基于AADL的软件系统可靠性建模与评估框架:首先建立AADL可靠性模型,然后将其转换为广义随机Petri网(generalized stochastic Petri net,GSPN)模型后再进行分析,最后根据分析结果判断是否需要进行模型改进。在研究已有的基本转换规则的基础上,重点讨论了系统中组件之间错误传播以及表示系统发生模式转换的Guard_Transition属性到GSPN的转换规则。以某飞行控制系统中数据发送和处理单元为实例,验证了所提转换规则和可靠性建模与评估框架的有效性。
文摘针对可重构分布式综合模块化航空电子(distributed integrated modular avionics,DIMA)系统在设计初期缺少仿真与验证手段的问题,首先分析了可重构DIMA软件体系的架构特征以及支持动态重构的层次化通用系统管理(generic system management,GSM)的组件功能划分。然后,使用架构分析与设计语言(architecture analysis and design language,AADL)及其相关附件对DIMA动态重构的架构基础、行为细节等要素进行建模。在此基础上,设计了一种基于形式化定义的模型转换规则,该规则将AADL动态重构模型转换成可执行的时间自动机模型。最后,利用模型验证工具UPPAAL验证了可重构DIMA系统逻辑及时序的正确性和不安全控制行为的可达性。结果表明,所提方法具有可行性和有效性,并且能够为后续DIMA动态重构的形式化安全性评估提供模型基础。
文摘为了支持新一代航电系统在体系结构设计阶段进行系统可靠性分析和评估,对复杂嵌入式系统利用体系结构分析与设计语言(architecture analysis and design language,AADL)进行系统的建模。提出了一种基于AADL系统体系结构模型的可靠性建模方法,设计出一套转换规则,对AADL体系结构模型的软硬件构件进行模型转换,实现从AADL系统体系结构可靠性模型到系统体系结构广义随机Petri网(system architecture general stochastic Petri net,SAGSPN)的转换,并基于加权的SAGSPN可靠性计算模型对系统进行可靠性评估。最后通过对某飞控系统进行可靠性评估,验证了方法的有效性,证明该方法对航电系统的体系结构设计提供了支持。
基金The authors would like to thank anonymous reviewers for their helpful comments and suggestions. Special thanks to Raymond Cheng, Andrew Liu and Yuan Yao for their careful revisions. This work was supported by the National Natural Science Foundation of China under （Grant Nos. 91118004, 61232007）, and the Innovation Program of Shanghai Municipal Education Commission （13ZZ023）.
文摘Architectural modeling and behavior analysis are two important concerns in the software development. They are often implemented separately, and specified by their own supporting notations. Architectural modeling helps to guarantee the system design to satisfy the requirement, and behavior analysis can ensure the interaction correctness. To improve the trustworthiness, methods trying to combine architectural modeling and behavior analysis notations together have been proposed, e.g., establishing a one-way mapping relation. However, the one-way relation cannot ensure updating one notation specifications in accordance with the other one, which results in inconsistency problems. In this paper, we present an approach to integrating behavior analysis into architectural modeling, which establishes the interoperability between architectural modeling notation and behavior analysis notation by a bidirectional mapping. The architecture is specified by the modeling language, architecture analysis and design language （AADL）, and then mapped to behavior analysis notation, Darwin/FSP （finite state process） through the bidirectional transformation. The bidirectional transformarion provides traceability, which makes behavior analysis result provided by a model checker can be traced and reflected back to the original AADL specifications. In this way, the behavior analysis is integrated into architectural modeling. The feasibility of our approach is shown by a control system example.
基金National Natural Science Foundations of China (No. 61073013,No. 90818024)Aviation Science Foundation of China(No.2010ZAO4001)
文摘Architecture analysis and design language （AADL） is an architecture description language standard for embedded real-time systems and it is widely used in safety-critical applications. For facilitating verifcafion and analysis, model transformation is one of the methods. A synchronous subset of AADL and a general methodology for translating the AADL subset into timed abstract state machine （TASM） were studied. Based on the arias transformation language （ ATL ） framework, the associated translating tool AADL2TASM was implemented by defining the meta-model of both AADL and TASM, and the ATL transformation rules. A case study with property verification of the AADL model was also presented for validating the tool.
