Abstract:Simulink is widely used for model driven development (MDD) of industrial software systems. Typically, the Simulink based development is initiated from Stateflow modeling, followed by simulation, validation and code generation mapped to physical execution platforms. However, recent industrial trends have raised the demands of rigorous verification on safety-critical applications, which is unfortunately challenging for Simulink. In this paper, we present an approach to bridge the Stateflow based model driven development and a well- defined rigorous verification. First, we develop a self- contained toolkit to translate Stateflow model into timed automata, where major advanced modeling features in Stateflow are supported. Taking advantage of the strong verification capability of Uppaal, we can not only find bugs in Stateflow models which are missed by Simulink Design Verifier, but also check more important temporal properties. Next, we customize a runtime verifier for the generated nonintrusive VHDL and C code of Stateflow model for monitoring. The major strength of the customization is the flexibility to collect and analyze runtime properties with a pure software monitor, which opens more opportunities for engineers to achieve high reliability of the target system compared with the traditional act that only relies on Simulink Polyspace. We incorporate these two parts into original Stateflow based MDD seamlessly. In this way, safety-critical properties are both verified at the model level, and at the consistent system implementation level with physical execution environment in consideration. We apply our approach on a train controller design, and the verified implementation is tested and deployed on a real hardware platform.

Translation Validation of Code Generation from the SIGNAL Data-Flow Language to Verilog

Towards a Verified Compiler Prototype for the Synchronous Language SIGNAL

A Semantics-based Translation Method for Automated Verification of SystemC TLM Designs

Code Generation Verification – Assessing Numerical Equivalence between Simulink Models and Generated Code

Programming real-time applications with SIGNAL

Automatic SDF-based Code Generation from Simulink Models for Embedded Software Development

Automatic Generation of High-Coverage Tests for RTL Designs using Software Techniques and Tools

Benchmarking Large Language Models for Automated Verilog RTL Code Generation

C Code Verification Based on the Extended Labeled Transition System Model

EHSAT Modeling from Algorithm Description for RTL Model Checking

From Stateflow Simulation to Verified Implementation: A Verification Approach and A Real-Time Train Controller Design

Verilog Transformation For An Rtl Sat Solver In Formal Verification

The Signal-Oriented Test System Model of Automated Test Systems and Its Identification Technology

Functional verification of complete sequential behaviors: A formal treatment of discrepancies between system-level and RTL descriptions

Verifying Non-friendly Formal Verification Designs: Can We Start Earlier?

A Systematic Translation Validation Framework for MLIR-Based Compilers

Using model-based test program generator for simulation validation

An FPGA-based approach to the automatic generation of VHDL code for industrial control systems applications: A case study of MSOGIs implementation

Modeling and Verification of Agent based Adaptive Traffic Signal using Symbolic Model Verifier

Equivalence Checking a Floating-point Unit against a High-level C Model (Extended Version)

Evaluating Large Language Models for Automatic Register Transfer Logic Generation via High-Level Synthesis