Abstract:Model checking is an effective technique used to identify subtle problems in software safety using a comprehensive search algorithm. However, this comprehensiveness requires a large number of resources and is often too expensive to be applied in practice. This work strives to find a practical solution to model‐checking automotive operating systems for the purpose of safety analysis, with minimum requirements and a systematic engineering approach for applying the technique in practice. The paper presents methods for converting the Trampoline kernel code into formal models for the model checker SPIN, a series of experiments using an incremental verification approach, and the use of embedded C constructs for performance improvement. The conversion methods include functional modularization and treatment for hardware‐dependent code, such as memory access for context switching. The incremental verification approach aims at increasing the level of confidence in the verification even when comprehensiveness cannot be provided because of the limitations of the hardware resource. We also report on potential safety issues found in the Trampoline operating system during the experiments and present experimental evidence of the performance improvement using the embedded C constructs in SPIN. Copyright © 2012 John Wiley & Sons, Ltd. This paper presents methods for converting the Trampoline kernel code into formal models for the model checker SPIN and a series of experiments using an incremental verification approach. The conversion methods include functional modularization and treatment for hardware‐dependent code, such as memory access for context switching. It also reports on potential safety issues found in the Trampoline operating system during the experiments and presents experimental evidence of the performance improvement using the embedded C constructs in SPIN. Copyright © 2012 John Wiley & Sons, Ltd.

End to End Verification and Validation with SPIN

Quantitative Verification of Implantable Cardiac Pacemakers

Verification of A Security Adaptive Protocol Suite Using SPIN

Quantitative Verification of Implantable Cardiac Pacemakers over Hybrid Heart Models

Formal Verification of L4 Memory Management Using SPIN

Verifying Non-friendly Formal Verification Designs: Can We Start Earlier?

Model Checking a C++ Software Framework, a Case Study

Model checking dynamic UML consistency

Model Checking Implantable Cardioverter Defibrillators

SPINning Parallel Systems Software

Research of Model Checking UML

Methods to Model-Check Parallel Systems Software

Extension and Verification of Petri-net Models

Model checking Trampoline OS: a case study on safety analysis for automotive software

Evaluating formal model verification tools in an industrial context: the case of a smart device life cycle management system

Verifying Embedded C Software with Timing Constraints using an Untimed Model Checker

SAT-Based Software Verification

Efficient Software Product-Line Model Checking Using Induction and a SAT Solver

Functional verification of complete sequential behaviors: A formal treatment of discrepancies between system-level and RTL descriptions

Analyzing Behavioural Scenarios over Tabular Specifications Using Model Checking

Safety-Critical Controller Verification via Sim2Real Gap Quantification