Abstract:Verification of complex, safety-critical systems is a significant challenge. Manual testing and simulations are often used, but are only capable of exploring a subset of the system's reachable states. Formal methods are mathematically-based techniques for the specification and development of software, which can provide proofs of properties and exhaustive checks over a system's state space. In this paper, we present a formal requirements-driven methodology, applied to a model of an aircraft engine controller that has been provided by our industrial partner. Our methodology begins by formalising the controller's natural-language requirements using the (pre-existing) Formal Requirements Elicitation Tool (FRET), iteratively, in consultation with our industry partner. Once formalised, FRET can automatically translate the requirements to enable their verification alongside a Simulink model of the aircraft engine controller; the requirements can also guide formal verification using other approaches. These two parallel streams in our methodology seek to combine the results from formal requirements elicitation, classical verification approaches, and runtime verification; to support the verification of aerospace systems modelled in Simulink, from the requirements phase through to execution. Our methodology harnesses the power of formal methods in a way that complements existing verification techniques, and supports the traceability of requirements throughout the verification process. This methodology streamlines the process of developing verifiable aircraft engine controllers, by ensuring that the requirements are formalised up-front and useable during development. In this paper we give an overview of (FRET), describe our methodology and work to-date on the formalisation and verification of the requirements, and outline future work using our methodology.

Logical analysis and contradiction detection in high-level requirements during the review process using sat-solver

Automated requirement contradiction detection through formal logic and LLMs

Automated Inconsistency Analysis of Real-Time Requirements: A Domain Expert Friendly Approach.

An experimental Study using ACSL and Frama-C to formulate and verify Low-Level Requirements from a DO-178C compliant Avionics Project

Formalization and Validation of Safety-Critical Requirements

Enabling Efficient Real-Time Requirements Inconsistency Detection for Safety-Critical Systems

Diagnosis via Proofs of Unsatisfiability for First-Order Logic with Relational Objects

Automating Consistency Verification of Safety Requirements for Railway Interlocking Systems.

Verification of Control Systems Implemented in Simulink with Assertion Checks and Theorem Proving: A Case Study

SAT-Based Software Verification

A Methodology for Developing a Verifiable Aircraft Engine Controller from Formal Requirements

A Scalable Approach to Detecting Safety Requirements Inconsistencies for Railway Systems

Empowering Domain Experts With Formal Methods for Consistency Verification of Safety Requirements

Analyzing and Debugging Normative Requirements via Satisfiability Checking

Automating Semantic Analysis of System Assurance Cases using Goal-directed ASP

Towards Practical Requirement Analysis and Verification: A Case Study on Software IP Components in Aerospace Embedded Systems

Multiple Analyses, Requirements Once: simplifying testing & verification in automotive model-based development

Formal Modeling of Airborne Software High-Level Requirements Based on Knowledge Graph.

Early Validation of High-level System Requirements with Event Calculus and Answer Set Programming

Generating Logical Specifications from Requirements Models for Deduction-based Formal Verification

Automating Boolean Set Operations in Mizar Proof Checking with the Aid of an External SAT Solver