The model-driven openetcs paradigm for secure, safe and certifiable train control systems

Railway Safety, Reliability, and Security: Technologies and Systems Engineering

Volumn , Issue , 2012, Pages 22-52

  Peleska, Jan ^a   Feuser, Johannes ^a   Anne, E ^b  

^a UNIVERSITY OF BREMEN   (Germany)

^b TECHNICAL UNIVERSITY OF DENMARK   (Denmark)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 84893764367     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.4018/978-1-4666-1643-1.ch002     Document Type: Chapter

References (49)

1. Aeronautical Radio Inc. (2005). ARINC 653, P1-2, Avionics Application Software Interface, Part 1, Required Services., Annapolis, MD: Aeronautical Radion Inc.
2. Aeronautical Radio Inc. (2009). ARINC 664, P71, Aircraft Data Network, Part 7, Avionics Full-Duplex Switched Ethernet Network. Annapolis, Maryland: Aeronautical Radion Inc.
3. Berry, G. (2003). The Effectiveness of Synchronous Languages for the Development of Safety-Critical Systems. Retrieved April 3, 2011 from http://www.esterel-technologies.com/DO-178B/files/The-Effectiveness-of-Synchronous-Languages-for-the-Development-of-Safety-Critical-Systems.pdf
4. Beyer, D., Henzinger, T.A., Jhala, R., & Majumdar, R. (2007). The Software Model Checker Blast. International Journal on Software Tools for Technology Transfer, 9(5-6), 505-525. doi:10.1007/s10009-007-0044-z
5. Cousot, P., Cousot, R., Feret, J., Mauborne, L., Miné, A., & Rival, X. (2009). Why does Astrée scale up? Formal Methods in System Design, 35(3), 229-264. doi:10.1007/s10703-009-0089-6
6. Dingel, J., Diskin, Z., & Zito, A. (2008). Understanding and improving UML package merge. Software and Systems Modeling, 7(4), 443-467. doi:10.1007/s10270-007-0073-9
7. Efkemann, C., & Peleska, J. (2011). Model-Based Testing for the Second Generation of Integrated Modular Avionics. To Appear in Proceedings of the A-MOST 2011.
8. European Committee for Electrotechnical Standardization. (2000). EN 50126 - Railway applications - Communnications, signalling and processing systems - Specification and demonstration of reliability, availability, maintainability and safety (RAMS). Brussels: CENELEC.
9. European Committee for Electrotechnical Standardization. (2001a). EN 50128 - Railway applications - Communnications, signalling and processing systems - Software for railway control and protection systems. Brussels: CENELEC.
10. European Committee for Electrotechnical Standardization. (2001b). EN 50159-1 - Railway applications - Communnications, signalling and processing systems - Safety-related communication in closed transmission systems. Brussels: CENELEC.
11. European Committee for Electrotechnical Standardization. (2001c). EN 50159-2 - Railway applications - Communnications, signalling and processing systems - Safety-related communication in open transmission systems. Brussels: CENELEC.
12. European Committee for Electrotechnical Standardization. (2003). EN 50129 - Railway applications - Communnications, signalling and processing systems - Safety-relevant electronic systems for signaling technology. Brussels: CENELEC.
13. European Railway Agency. (2007). ERTMS/ ETCS Functional Requirements Speci□cation FRS. (Version 5.0)
14. Feuser, J., & Peleska, J. (2010). Security in Open Model Software with Hardware Virtualisation - The Railway Control Systems perspective. Electronic Communications of the EASST, 33: Foundations and Techniques for Open Source Software Certification.
15. Feuser, J., & Peleska, J. (2011). Dependability in Open Model Software with Hardware Virtualisation - The Railway Control System Perspective. Submitted to Science of Computer Programming.
16. Goos, G., & Zimmermann, W. (1999). Verification of compilers. In Olderog, E.-R., & Steffen, B. (Eds.), Correct System Design, Recent Insight and Advances (pp. 201-230). Springer-Verlag.
17. Grötker, T., Liao, S., Martin, G., & Swan, S. (2002). System Design with SystemC. Kluwer Academic Publishers.
18. Hase, K. R. (2009a). openETCS - Ein Vorschlag zur Kostensenkung und Beschleunigung der ETCS-Migration. Signal+Draht 10(10).
19. Hase, K. R. (2009b). openETCS - Open Source Software für ETCS-Fahrzeugausrüstung. Signal+Draht(12)12.
20. Hase, K. R. (2011). "zu Hö" for Railway Safety Software - A Potential Way-Out of Vendor Lock-in Advancing to Standardization, Transparency, and Software Security. In Schnieder, E., & Tarnai, G. (Eds.), FORMS/FORMAT 2010 Formal Methods for Automation and Safety in Railway and Automotive Systems (pp. 4-34). Berlin, Heidelberg: Springer-Verlag.
21. Haxthausen, A. E., Peleska, J., & Kinder, S. (2011). A formal approach for the construction and verification of railway control systems. Formal Aspects of Computing, 23(2), 191-219. doi:10.1007/s00165-009-0143-6
22. Kelly, S., & Tolvanenm, J.-P. (2008). Domain-Specific Modeling. Hoboken, New Jersey: John Wiley & Sons Inc. doi:10.1002/9780470249260
23. Kent, S. (2002). Model driven engineering. In Proceedings of the Third International Conference on Integrated Formal Methods, IFM '02. 286-298, London, UK: Springer-Verlag.
24. nd World Congress on Formal Methods, (pp. 806-809), Berlin Heidelberg: Springer-Verlag.
25. Löding, H., & Peleska, J. (2010). Timed Moore automata: test data generation and model checking. In Proceedings of the Third International Conference on Software Testing, Verification and Validation ICST, (pp. 449-458). DOI http://doi.ieeecomputersociety.org/10.1109/ICST.2010.60
26. Manna, Z., & Pnueli, A. (1992). The Temporal Logic of Reactive and Concurrent Systems. Springer-Verlag. doi:10.1007/978-1-4612-0931-7
27. Mewes, K. (2010). Domain-specific Modelling of Railway Control Systems with Integrated Verification and Validation. München: Verlag Dr. Hut.
28. Object Management Group. OMG (2010a). OMG Unified Modeling Language (OMG UML), Infrastructure, V2.3. Retrieved April 1, 2011, from http://www.omg.org/spec/UML/2.3/
29. Object Management Group. OMG (2010b). OMG Unified Modeling Language (OMG UML), Superstructure, V2.3. Retrieved April 1, 2011, from http://www.omg.org/spec/UML/2.3/
30. Peleska, J., & Haxthausen, A. E. (2007). Object code verification for safety-critical railway control systems. Formal methods for automation and safety in the railway and automotive systems (FORMS/FORMAT 2007). Braunschweig, Germany: GZVB e.V.
31. Platzer, A., & Quesel, J.-D. (2009). European Train Control System: A Case Study in Formal Verification. In K. Breitman & Cavalcanti, A. (eds.), 11th Conference on Formal Engineering Methods ICFEM 2009: LNCS 5885 (pp. 246-265). Berlin, Heidelberg: Springer.
32. Pnueli, A., Shtrichman, O., & Siegel, M. (1998). The Code Validation Tool CVT: Automatic verification of a compilation process. International Journal on Software Tools for Technology Transfer, 2(1), 192-201.
33. Schlich, B. (2010). Model Checking of Software for Microcontrollers. ACM Transactions in Embedded Computing Systems, 9(4), 1-27. doi:10.1145/1721695.1721702
34. Schmidt, D. C. (2006). Model-Driven Engineering. IEEE Computer, 39(2), 25-31. doi:10.1109/MC.2006.58
35. Stallings, W. (2008). Operating systems: internals and design principles. Upper Saddle River, NJ: Prentice Hall.
36. Storey, N. (1996). Safety critical computer systems. Upper Saddle River, NJ: Prentice Hall.
37. Tanenbaum, A. S. (2008). Modern Operating Systems. Upper Saddle River, NJ: Pearson.
38. Trowitzsch, J., & Zimmermann, A. (2006). Using UML state machines and petri nets for the quantitative investigation of ETCS. In Proceedings of the 1st international conference on performance evaluation methodolgies and tools (pp. 34-es).
39. UNISIG. (2006a). ERTMS/ETCS - Class 1 System Requirements Speci□cation,026-1(2.3.0). Retrieved April 3, 2011, from http://www.era.europa.eu/Document-Register/Documents/SUBSET-026-SRS%20230.zip
40. UNISIG. (2006b). ERTMS/ETCS - Class 1 System Requirements Speci□cation, 026-2(2.3.0). Retrieved April 3, 2011, from http://www.era.europa.eu/Document-Register/Documents/SUBSET-026-SRS%20230.zip
41. UNISIG. (2006c). ERTMS/ETCS - Class 1 System Requirements Speci□cation, 026-3(2.3.0). Retrieved April 3, 2011, from http://www.era.europa.eu/Document-Register/Documents/SUBSET-026-SRS%20230.zip
42. UNISIG. (2006d). ERTMS/ETCS - Class 1 System Requirements Speci□cation, -026-4(2.3.0). Retrieved April 3, 2011, from http://www.era.europa.eu/Document-Register/Documents/SUBSET-026-SRS%20230.zip
43. UNISIG. (2006e). ERTMS/ETCS - Class 1 System Requirements Speci□cation, 026-5(2.3.0). Retrieved April 3, 2011, from http://www.era.europa.eu/Document-Register/Documents/SUBSET-026-SRS%20230.zip
44. UNISIG. (2006f). ERTMS/ETCS - Class 1 System Requirements Speci□cation, 026-7(2.3.0). Retrieved April 3, 2011, from http://www.era.europa.eu/Document-Register/Documents/SUBSET-026-SRS%20230.zip
45. UNISIG. (2006g). ERTMS/ETCS - Class 1 System Requirements Speci□cation, 026-8(2.3.0). Retrieved April 3, 2011, from http://www.era.europa.eu/Document-Register/Documents/SUBSET-026-SRS%20230.zip
46. UNISIG. (2009). /ETCS - Class 1 Test Plan. 076-0(2.3.1). Retrieved April, 9, 2011, from http://www.era.europa.eu/Document-Register/Pages/UNISIG%20SUBSET-076-0.aspx
47. Visser, W., Havelund, K., Brat, G., Park, S., & Lerda, F. (2003). Model Checking Programs. International Journal on Automated Software Engineering, 10(2), 203-232. doi:10.1023/A:1022920129859
48. Zimmermann, A., & Hommel, G. (2005). To-wards modeling and evaluation of etcs real-time communication and operation. Journal of Sys-tems and Software, 77(1), 47-54. doi:10.1016/j.jss.2003.12.039
49. zu Hörste, M., & Schnieder, E. (1999). Modelling and simulation of train control systems using Petri nets. In FMrail workshop (Vol. 3).