The Metrô Rio case study

Science of Computer Programming

Volumn 78, Issue 7, 2013, Pages 828-842

  Ferrari, Alessio ^a   Fantechi, Alessandro ^a   Magnani, Gianluca ^b   Grasso, Daniele ^b   Tempestini, Matteo ^b  

^a UNIVERSITY OF FLORENCE   (Italy)

^b General Electric Transportation Systems   (Italy)

Author keywords

Code generation; Formal methods; Model based development; Railway

Indexed keywords

AUTOMATIC PROGRAMMING; FORMAL VERIFICATION; MODEL CHECKING; SEMANTICS;

ABSTRACT INTERPRETATIONS; AUTOMATIC CODE GENERATIONS; AUTOMATIC TRAIN PROTECTION SYSTEMS; CODE GENERATION; FUNCTIONAL CORRECTNESS; MODEL BASED DEVELOPMENT; ON BOARD EQUIPMENTS; RAILWAY;

FORMAL METHODS;

EID: 84877579646     PISSN: 01676423     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.scico.2012.04.003     Document Type: Article

References (28)

1. A. Faivre, P. Benoit, Safety critical software of meteor developed with the B formal method and the vital coded processor, in: Proc. of WCRR'99, 1999, pp. 84-89.
2. G. Guiho, and C. Hennebert Sacem software validation Proc. 12th Int. Conf. on Software Engineering ICSE'90 1990 IEEE Computer Society Press Los Alamitos, CA, USA 186 191
3. M. Leuschel, J. Falampin, F. Fritz, and D. Plagge Automated property verification for large scale b models FM 2009: Formal Methods LNCS vol. 5850 2009 Springer 708 723
4. S. Bacherini, A. Fantechi, M. Tempestini, and N. Zingoni A story about formal methods adoption by a railway signaling manufacturer FM 2006: Formal Methods LNCS vol. 4085 2006 Springer 179 189
5. A. Ferrari, A. Fantechi, S. Bacherini, N. Zingoni, Modeling guidelines for code generation in the railway signaling context, in: Proc. 1st NFM Symposium, 2009, pp. 166-170.
6. Mathworks Automotive Advisory Board (MAAB), Control Algorithm Modeling Guidelines Using Matlab, Simulink and Stateflow, Version 2.0, 2007.
7. A. Ferrari, G. Magnani, D. Grasso, A. Fantechi, and M. Tempestini Adoption of model-based testing and abstract interpretation by a railway signalling manufacturer IJERTCS 2 2 2011 42 61
8. A. Ferrari, D. Grasso, G. Magnani, A. Fantechi, and M. Tempestini The Metrô Rio ATP case study Formal Methods for Industrial Critical Systems LNCS vol. 6371 2010 Springer 1 16
9. A. Ferrari, A. Fantechi, M. Papini, D. Grasso, An industrial application of formal model based development: the Metrô Rio ATP case, in: Proc. 2nd Int. Workshop on Software Engineering for Resilient Systems, SERENE'10, 2010.
10. D. Harel Statecharts: a visual formalism for complex systems Sci. Comput. Program. 8 1987 231 274
11. G. Hamon, and J. Rushby An operational semantics for Stateflow Int. J. on Software Tools for Technology Transfer (STTT) 9 5-6 2007 447 456
12. G. Hamon A denotational semantics for Stateflow Proc. 5th ACM int. conf. on Embedded software, EMSOFT'05 2005 ACM New York, NY, USA 164 172
13. N. Scaife, C. Sofronis, P. Caspi, S. Tripakis, and F. Maraninchi Defining and translating a safe subset of Simulink/Stateflow into Lustre Proc. 4th ACM Int. Conf. on Embedded Software EMSOFT'04 2004 ACM New York, NY, USA 259 268
14. P. Cousot, and R. Cousot Abstract interpretation: a unified lattice model for static analysis of programs by construction or approximation of fixpoints Proc. 4th ACM SIGACT-SIGPLAN Symposium on Principles of Programming Languages POPL'77 1977 ACM New York, NY, USA 238 252
15. European Committee for Electrotechnical Standardization, CENELEC EN50128, Railway Applications - Software for Railway Control and Protection Systems, 1997.
16. M. Conrad Testing-based translation validation of generated code in the context of IEC 61508 Form. Methods Syst. Des. 35 2009 389 401
17. S.M. Pnueli, and A.E. Singerman Translation validation Proc. 4th Int. Conf. on Tools and Algorithms for the Construction and Analysis of Systems LNCS vol. 1384 1998 Springer 151 166
18. A. Baresel, M. Conrad, S. Sadeghipour, J. Wegener, The interplay between model coverage and code coverage, in: Proc. 11th Eur. Int. Conf. on Software Testing, Analysis and Review, EuroSTAR'03, 2003.
19. A. Deutsch, Static verification of dynamic properties - Polyspace white paper, 2004.
20. E.M. Clarke, O. Grumberg, and D.E. Long Model checking and abstraction ACM Trans. Program. Lang. Syst. 16 1994 1512 1542
21. C.-L. Chang, and R.C.-T. Lee Symbolic Logic and Mechanical Theorem Proving 1st Edition 1997 Academic Press, Inc. Orlando, FL, USA
22. P.A. Abdulla, J. Deneux, G. Stålmarck, H. Ågren, O. Åkerlund, Designing safe, reliable systems using scade, in: ISoLA, 2004, pp. 115-129.
23. E. Clarke, A. Biere, R. Raimi, and Y. Zhu Bounded model checking using satisfiability solving Form. Methods Syst. Des. 19 2001 7 34
24. M. Sheeran, S. Singh, and G. Stlmarck Checking safety properties using induction and a SAT-solver Formal Methods in Computer-Aided Design LNCS vol. 1954 2000 Springer 127 144
25. A. Ferrari, G. Magnani, D. Grasso, A. Fantechi, Model checking interlocking control tables, in: Proc. 8th FORMS/FORMAT Symposium, 2009.
26. T. Bochot, P. Virelizier, H. Waeselynck, and V. Wiels Model checking flight control systems: the Airbus experience ICSE Companion 2009 18 27
27. W.M.W. Miller, S.P., and D.D. Cofer Software model checking takes off Commun. ACM 53 2 2010 58 64
28. A. Ferrari, A. Fantechi, and S. Gnesi Lessons learnt from the adoption of formal model-based development NASA Formal Methods LNCS vol. 7226 2012 Springer 24 38