University of Minnesota
Software Engineering Center

You are here

Requirements Analysis of a Quad-Redundant Flight Control System

Date of Publication: 
April 2015
Associated Research Groups: 
Publication Files: 
In this paper we detail our effort to formalize and prove requirements for the Quad-redundant Flight Control System (QFCS) within NASA’s Transport Class Model (TCM). We use a compositional approach with assume-guarantee contracts that correspond to the requirements for software components embedded in an AADL system architecture model. This approach is designed to exploit the verification effort and artifacts that are already part of typical software verification processes in the avionics domain. Our approach is supported by an AADL annex that allows specification of contracts along with a tool, called AGREE, for performing compositional verification. The goal of this paper is to show the benefits of a compositional verification approach applied to a realistic avionics system and to demonstrate the effectiveness of the AGREE tool in performing this analysis.
Appeared in NASA Formal Methods Conference, Pasadena, CA, April 27-29, 2015.
@Inbook{Backes2015, author="Backes, John and Cofer, Darren and Miller, Steven and Whalen, Michael W.", editor="Havelund, Klaus and Holzmann, Gerard and Joshi, Rajeev", chapter="Requirements Analysis of a Quad-Redundant Flight Control System", title="NASA Formal Methods: 7th International Symposium, NFM 2015, Pasadena, CA, USA, April 27-29, 2015, Proceedings", year="2015", publisher="Springer International Publishing", address="Cham", pages="82--96", isbn="978-3-319-17524-9", doi="10.1007/978-3-319-17524-9_7", url="" }